last executing test programs: 3.153854288s ago: executing program 2 (id=2208): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778c000) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x1, 0x5, 0x99) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x204041, 0x8) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0xc) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902480001010020000904000003020200fe052406ee0005240000000d240f01000000800000000000042402040905810300040503fa09058202200000000209050302"], 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00007e6000/0x400000)=nil) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x2, 0x8, 0x5, "c5320120", "f8091004"}}, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000d5}, 0x40100) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.910135667s ago: executing program 1 (id=2240): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4000, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000004109022400010000a000090400"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x5, 0x3, 0xe}, 0x18) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x8001, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 1.830996373s ago: executing program 2 (id=2242): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd\x00') getdents64(r0, &(0x7f0000000480)=""/27, 0x1b) getdents64(r0, 0xfffffffffffffffe, 0x64) capset(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b"]) close_range(r1, 0xffffffffffffffff, 0x0) 1.655254278s ago: executing program 2 (id=2249): socket(0x28, 0x5, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x1, 0x1}, 0xe, 0x62, &(0x7f0000000280)="772e2e0508337a4f5adf04c2fe7413d4be9a5db30f33d6101843d3fb3aa897091d36342700252b8a39951daf1217400362db43a87ad9b5dce1604d106a59a973313e8b5a45d55fadd63f7e2f1a904f4e7e8d6c2b6a6d18191add493c00b3c1f1d4017ba21292754a9e897dc893ec337bf5c82e7f50707c4a9b0fc1a5ea730099665019b7ebad9829c8612e8fdffd58f171d4dba2f99f7cae496d306a1897d8d5c867ee051282fefec6526bf7b1f5ba18b4da24d5369bad224066e77a9e81aeba1dfbf549959c", 0xc6, 0x7ff, 0x7, 0x54, 0x1, 0x6, &(0x7f0000000380)="cbe87099d919edb83dcd054583d7fb9965b15678c64f8a5266ec5c8645bc4078cd4586f2c10610fccef4857697efdbd8a8b12564d7e697a6179ccdbf7ccfaf5cb40e2101b24b421288e5fc8d98ee56979319ebbdb19b506b7ce1072d8eeacaba5a5f75d932eef4f2175b7edab01d802c7af897fd252cd4a0dabffae76dcf4b3d6b72fa49cde22c001d602145f3ce4a83f7c0df22e79ae6bf0b35a95a0e761118de7175ddd96c8bb2c679de7b62361b559f22099592d02140ad5768521c27e1cd2cc6f4af103618c1210d930a6a202a7f94d6ad323b4532847c2928b9df0f6c14f924afcaa6b72f35912f6d8c1067c320efbdb74afb78ab", [{0x3, 0x0, 0x5}, {0xeb0f, 0x7}, {0x4, 0x6, 0x4}, {0x80000001, 0x8, 0x4}, {0xf88, 0x5, 0xf}, {0x1, 0x6, 0x7}, {0x1, 0xfff, 0x9}, {0x9, 0x2a28, 0x8001}, {0x4, 0x1, 0xfff}, {0xe, 0x1, 0x332e}, {0x45, 0x8, 0xf36}, {0x9, 0x1, 0x5}, {0xa, 0x0, 0x10000}, {0x101, 0x4, 0xc}, {0x1, 0x400, 0x4}, {0x7, 0x1, 0xff}, {0x1, 0x2, 0x10001}, {0x7, 0xfc, 0x9}, {0x2, 0x2fb, 0xfffff001}, {0x3, 0x1, 0x50}, {0xa, 0x9, 0x3}, {0x5, 0x3, 0x7}, {0x7, 0x7ff, 0xbe}, {0xffffff00, 0x800, 0x9}, {0x2, 0x1ee9, 0x800}, {0x5, 0x8, 0x4}, {0x4, 0x6, 0xe}, {0x329, 0x28e2, 0x1}, {0x5, 0x2, 0xd}, {0x7fff, 0x8, 0x4}, {0x0, 0x8, 0x5}, {0x8, 0x9, 0xfffff801}, {0x1, 0x5, 0x2}, {0x81d1, 0x9, 0x6}, {0x8d, 0x7, 0x8}, {0xfa5d, 0x4, 0x8000}, {0xa38, 0x6, 0x8}, {0x1, 0x0, 0x6}, {0x0, 0x400, 0x8}, {0x7, 0x40, 0xa8}, {0x0, 0x8, 0x9}, {0xfffffffe, 0x4b, 0xf891}, {0x4, 0x80000001, 0x3}, {0x40, 0x5, 0x7fbf}, {0x3, 0x0, 0x3}, {0x9, 0x9, 0x8}, {0xfffffebb, 0x7ff, 0x67}, {0x0, 0x9, 0x3}, {0x8000, 0x0, 0x83ca}, {0x9d4, 0x2, 0x6f3}, {0xffff, 0x2, 0x3}, {0xc, 0xf, 0x1a2}, {0x3ef3, 0x5, 0x6}, {0x0, 0x9, 0x7}, {0x80, 0x40, 0x80}, {0xcfb3, 0xfffffff3, 0xe}, {0x8, 0x0, 0x4}, {0x8ed0, 0x75cc, 0x5}, {0x4, 0xb, 0x8}, {0x80, 0x19e2, 0xffff}, {0x3, 0xff800000, 0x200}, {0x8, 0x1, 0x2}, {0x3, 0xcdae, 0xd3}, {0xe12}, {0x0, 0x2, 0xe32}, {0xc2, 0x3, 0x400}, {0xd, 0xffff, 0x10000}, {0x5, 0x2}, {0xc, 0x80, 0x6}, {0x35a, 0xc, 0x401}, {0x1, 0x1, 0x8}, {0x2ea5, 0x0, 0x9}, {0x9, 0xff, 0x8}, {0x80000001, 0xfffffdf9, 0x7f}, {0xfffffffc, 0x6fd5, 0x881f}, {0x5, 0xfffffe89, 0xffffffff}, {0x9, 0xfffffffb, 0x40}, {0x1000, 0xa, 0x6}, {0x800, 0xffffffff, 0xf72d}, {0x9, 0xe, 0x101}, {0x80000001, 0x3, 0x6}, {0x1, 0x2, 0x3}, {0x9, 0x3ff, 0x5000000}, {0x7, 0x8, 0x10}]}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) 1.12792448s ago: executing program 2 (id=2254): syz_clone3(&(0x7f0000000240)={0x200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x37}, &(0x7f00000000c0)=""/218, 0xda, &(0x7f00000001c0)=""/35, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000002c0)={r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) (async, rerun: 32) r3 = memfd_secret(0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) (async, rerun: 32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x6f7) (async) r5 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000340)) (async) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000003c0)=0x28) vmsplice(r5, &(0x7f0000002840)=[{&(0x7f0000000400)="e84646634a59fa10c5efe0a7a8e6faab0446b80a8a67ff2a70f9cb8637a0fd1791203a9dd9e1f4", 0x27}, {&(0x7f0000000440)="96805a29d308b932ff000f2e9e84a30debb3f6500103dc2cda", 0x19}, {&(0x7f0000000480)="b2107ce8cc086329b42baa7520aa88cc208dcb9e877e1ff9729203430ba9b4c046548a399aee4f5f0d24ef2de1d4f71e5e89599d21c43b37693e32150cfa999eb45912f3e5d5908b7d573adef9724cf60b5e838ba8a2331846c7336e26de25b94371216b2c9999ce3408315ffb6acbc4fb4aedacf1c7540794956119878e4bcd7661f314d34f0e73e4948adc12b4c247a13f3757b8b5cf108c6df094ee26d6b9cb9111dec4f2ecc168233b9654c4b847544809855aeceb1d03b953bb6d8ebf191fa62b858464c8abe3ef0bb7f1398761af4bcf236359ca2ff5c12faff1343bc05a0afc1c14cace6f86a2e903c12ff40fa0be22600be2", 0xf6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="6228c651ea9914c200f80b2865486e792ad4ff39d4f64862fd1d191294b073971ad284702f26ca1b1398d770b53ed9780f66a651d2aaf9072b76", 0x3a}, {&(0x7f00000015c0)="9688353556017a6e3b697a833dbb236c9bae869e979d5970e8f07c01b475747d44756c4b7b1063a4202961b166fecc11f54bd845341f6e3f64713420b2323b6aa49d869c1a17c174784f0811ae7a38c8c30188c45aa4861b57e1c0cc63c212c641248f9b8fbfd495bfe17f61c7b24691b8975ed6f291e5839243b7cf2c0b98a4ce8b6151216bf08c8b547b9814f46ebe665636071cc901a675c827c4943fbd20096c13d2b9ae8e9a4ddf27d63b65c71321a42583b3a2ac3696a7906fbb07f63072fd8bd7bf32e1", 0xc7}, {&(0x7f00000016c0)="60a9b6a09d89e8aa9d5eeed55132b31e7816614d9e1591dbea170634e455569aa29fe9326cf187bb9125be5d1faed018de0d3f0029009561143adba2dfd158337d84170b498ec493c9ce802514533680d4204d517fd4f27abd0705e6c35ff1b2c42bde4ac5142a6ee5bca799f014ebb8424b5a5577f22e829b54fcfc7c3044024b88c8ea40434cf6a02f9f36c70cd011bc", 0x91}, {&(0x7f0000001780)="e022865cf7f863f0eb7e821f91b9670937bbb09adbc16201f4b3f0f62262b5b0b51e169cc70f01c36656f96762639d627f2930925b4e5d978992b37220208b25683d8ce1bb2603ef8b3d969c85af632a2ce61f1e586687a5b1b16d7ffa7189ba6bc873fd0200085e3d92244d9236ad50bde0061636ff5d0a71069a5d45c4d34508978027ea226e5284ec04124e64255ccf09296c5c1235c397c551b647676e372682b1687070", 0xa6}, {&(0x7f0000001840)="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", 0x1000}], 0x9, 0xe) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x48000) (async, rerun: 64) tgkill(r1, r2, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002a40), 0x200080, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000002a80)) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000002b40)={0x29, 0x3, 0x0, {0x6, 0x8, 0x0, 'macsec0\x00'}}, 0x29) ftruncate(r7, 0xffffffffffffff7f) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000002b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3f, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x142}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xe, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000002dc0)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x250, 0xfc, 0x0, 0x37, 0x40, 0xc}, 0x4f, &(0x7f0000002c00)={0x5, 0xf, 0x4f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x8, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0x0, 0x3, [0x3f, 0xffc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x2, 0xebe8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x79, 0x3, 0xe6a}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "29ea00a0803713a258c28cdcc8c00b1d"}]}, 0x4, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0xc07}}, {0x79, &(0x7f0000002d00)=@string={0x79, 0x3, "9e83a808980bf63d350690223e962876538368bdaef0bea095232a092b6459969becdf2b8167c71cd680d5be63d5f9801d96dd89609ec8fea56a4cd8e46af396c8bf6b1d537c8944e144f3ea9be5d25d8c4f6d9e5b0ba3e309ab8e635b84eb73383f1131cd2d43427b2221ef2ba259498d25e2aebcb4ea"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x80c}}]}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002e80), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x4c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004880) (async) r9 = syz_open_dev$mouse(&(0x7f0000002fc0), 0x8000, 0x4000) fcntl$setsig(r9, 0xa, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000003000)={0x0, 0x2, 0x0, [0x8, 0x8, 0x2, 0x2, 0x2], [0xdfe7, 0x102a, 0x10001, 0x4, 0x9, 0x1, 0x29, 0x4, 0x1, 0xc, 0x0, 0x6, 0x3, 0x9, 0xfffffffffffff8af, 0x4, 0xb7a, 0x3, 0xa, 0x92, 0xffff, 0x8398, 0xb1db, 0x6, 0xff, 0xffff, 0x3, 0x9, 0x0, 0x8000000000000001, 0x7f, 0x3, 0x5, 0xf43, 0x314c, 0x4ec, 0x7, 0x2, 0xa, 0x6, 0x6, 0x3, 0x7fffffffffffffff, 0x8, 0x7d23, 0x401, 0x0, 0xffffffffffffff60, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x8, 0xffff, 0x3, 0xfffffffffffffffb, 0x3, 0xf925, 0x101, 0x5, 0x8000000000000000, 0x7, 0x9, 0xc, 0x6, 0x8000, 0x7, 0x0, 0x5, 0x9, 0x200, 0x8, 0x12536050, 0xfffffffffffffaca, 0x4, 0x8d, 0x7ff, 0x3, 0x2, 0x3c86, 0x3, 0x7cdca1d6, 0x1, 0x3, 0x7, 0x7fffffffffffffff, 0x3, 0x95b7, 0xfffffffffffffffc, 0x0, 0x16000000, 0x7, 0x4, 0xec7, 0x3, 0x400, 0x5, 0xe55, 0x0, 0x6, 0x7, 0x46, 0x3, 0x3, 0x7, 0x1c6ac000000, 0x5, 0x6, 0x1, 0xc, 0x9, 0x0, 0x6, 0x154, 0x7, 0x100, 0x9, 0x9, 0x7, 0x0, 0x6]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003440)={r10, "74c164b7f90ac3c4aefe615558d0e423"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000004440)={0x7fffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "409d38a703f9a2"}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000005440)={0x0, r11, "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", "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"}) connect$pppl2tp(r9, &(0x7f0000006440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x2}}, 0x2e) 842.439593ms ago: executing program 3 (id=2256): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) getpeername(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000300)=0x2) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffffa}}, @rdmsr={0x32, 0x18, {0x40000000}}, @rdmsr={0x32, 0x18, {0x9be}}, @code={0xa, 0x4e, {"c4c17e6fdac44189dacac402edaaba04000000c421bd76ccc4413816cf66410f3822370f01dfc4a27d7872730f01dfb9800000c00f3235001000000f30"}}, @uexit={0x0, 0x18, 0x80000000}, @rdmsr={0x32, 0x18, {0x901}}], 0xce}) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f00000004c0)=[@enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000540)="4108048c"}) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xd5) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x600}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffefe, 0x0, &(0x7f0000000100)="83b60768f24cd5aa877f32443cfdf13277fe2000390e1443547792c45101fb8c7566e2c6c8881730a575c18e01e97be08c0eeba1bd543b1fdbddbf3570c1000024c3922f5dee4ad85ea1eb25e88e96954d2da152999c16c90a67705399103ddf984a7cae2c805c35e45f3d3155e884a856f38f"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_clone(0x0, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="501400002300090028bd7000ffd3df25010000003a14028038", @ANYBLOB, @ANYRES32=r8], 0x1450}, 0x1, 0x0, 0x0, 0x1}, 0x20004090) (async) ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000340)={&(0x7f0000000080)=""/33, 0x21}) 777.795048ms ago: executing program 3 (id=2257): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, r0, 0xe6681000) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba041fb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) (async) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00114f"], 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x11) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 776.719318ms ago: executing program 3 (id=2258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000fffd0000000000000a0000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000000080ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000400000000000000000000000400000000000000000200"/112], 0xb8}}, 0x2c000010) 776.051418ms ago: executing program 3 (id=2259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1010, r0, 0xa78b7000) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1010, r0, 0xa78b7000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x9, 0x605a}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f00000018c0)=""/4102, 0x1006}, {&(0x7f0000003580)=""/4110, 0x100e}, {&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000780)=""/235, 0xeb}], 0x6}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="fd629ff5725849be71fed4221a4d021238431c54c8d456be07b9093dbd10a689520a177e2ecfadd57f533bd718678977f6803dfd17b55d35c1edaace4520e6f7a5663dd3843bce3fed9778b5ac53418ef9ebb057d91059ea037141fe92ad60ccecc7cbb6ec66b6d85c71d291ca8ee88215d52372bdb1d4f23b613e7ce1726c3a7045bb926c02a4641b7e324d48153d5ec956983db576639af98304ffbf925ff3b266620f9e136b373323ecdbc2bbf3fa89595d", 0xb3}, {&(0x7f0000000200)="686f8e68a8b44ebb5d857ee91f1be504c67945818e4b11c5504e9208f5ba0e41886a8c1cfa10353ac8435fcfd8f4d1209635ef12a6236663100d4e603370e2124c36484e810f96a5527a1541bc3a1df35f82b3886831fe624368054ae508af792ba47c5f3e6ff7f13030a4a6cfc48fc87ee9aa3a8cc512850b31cfa38ad0145bba25b2bec08c4bef388b926a3f6cccb23465869cf0e5d04100a4ecd0f43db3ab4085ea70083809be08f1c0", 0xab}, {&(0x7f00000002c0)="a8e38088947af8ed55d442772c2ff9ac68fdbe72d469229977e0b17a067d2f630f2f0e6c53583ae44d0e04188f0561c08e12bf2a77a54d8f9b8b2daa410f2c83d857e542734e8938c953620a23d24605202c97dfcce55e0263d761e2a3df5b9f2d357585284306ea2019e3bb9d753e7adec0a1c14e9811f8703827fa89a8f3c0377df9a1ddca88b78f2c2d940a9cb012a72f7a392841af91d6377ea32972aa178505dc4c335f6dbd2cac909d495624abc90165b26c73d2fd940f53ae5c", 0xbd}, {&(0x7f0000000380)="08010f1a314e88787c61ad5a01aefb53ad1705770975f877efc5a054e02123d77d798c931917896da77079b7f80bbb2cc535a1afbc67e24ab541f4fd068cc66696fc69b183bf9223850bd04034dd561991fea288419eb8b5fdfb5d948244ae287c16d23ec610403a010158a7fb437b47196c65cf59fd2780053405a97ecdd8e6fc5c52adc2f05afae2dc192796f16705943241e8b4b44c1be52a1f4fd1ee89326bd704f3519e7728904b5976b8c75219510128b0e7", 0xb5}], 0x4) ioprio_set$pid(0x2, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 745.21497ms ago: executing program 0 (id=2262): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) r1 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x6, 0x40010, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3ea, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) fcntl$setstatus(r5, 0x4, 0x42000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2882, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x6, 0x804, 0x15, 0xc, 0x120000, 0xff, 0xfffffdffffffffff, 0x9, 0x1, 0x4, 0x0, 0x105, 0x400000000000008, 0x3], 0x0, 0x141200}) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x8, 0x3, 0x0, 0x8, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x80, '\x00', 0x0, 0x8}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, &(0x7f00000000c0)=0x6, 0x4) (async) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000000)="f752467b28e84484b35cb78da3708b0165e4e5591c2f02cc", 0x0, 0x18) (async) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="840c2e14b8356e7f3517b00f5278638cc1932c480153", 0x16}], 0x1}}], 0x1, 0x4400c800) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000600)="5cf3", 0x2, 0x3b00, 0x0, 0x0) (rerun: 32) 733.642221ms ago: executing program 0 (id=2263): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0xa6883, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 680.665406ms ago: executing program 0 (id=2264): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000200), 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x5, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x10, 0x8, 0xfefb, 0x2}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000380)={@multicast1, @local, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x7, 0x5, 0x66a, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x67, 0x0, 0x73, 0x4, 0x0, @broadcast, @remote, {[@noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x150, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x10004808) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom1\x00', 0x802, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$FIOCLEX(r7, 0x5451) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0xc000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3bde}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) inotify_init() sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048850}, 0x1) write$selinux_context(r0, &(0x7f0000000bc0)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28) write$binfmt_aout(r0, &(0x7f0000000c00)={{0x10b, 0x8, 0xff, 0x3a2, 0x118, 0x7fff, 0x188, 0x9a17}, "135afa3b851dccc6fae02a9fb45d918ad200c3053c371fdc5a3fd445fd0ba54b78f16c44e03e3f0e45e1943514a10998ecf0c3508be4607dec7a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa5a) timer_create(0x6, &(0x7f0000002780)={0x0, 0x0, 0x0, @thr={&(0x7f0000001680)="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", &(0x7f0000002680)="580749d58523c37bd99187e0b259878c36d599ccfd7354baad238ad2f910175998c3c4291b9fc38cfe3dde3f627646a572d745b0856d5fda58e54785b776eb913f80baf5359c8186dce3618512a32a2f6ab785ed1705f9860acdb2bf9363e9f76e2656f455498b6f896f17ffcce858908d5d02cb85b1052dbbf896b38b32aee6c189d84e696ff377e409fb60fa16963ee9f32f5a7d016e5f17555ddf8cd9ac1180532d1c01be74d5b7809dea461f2abc180b62fd3c31a49fa394ce881592b499551849d64083563cac27af55acc8"}}, &(0x7f00000027c0)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), r11) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000002880)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x54, r12, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x54}}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x68, r8, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", ""]}, 0x68}}, 0x40814) 679.139296ms ago: executing program 0 (id=2265): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x17, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x3b, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000040)={0x184a}) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) ftruncate(r3, 0xffff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 678.736936ms ago: executing program 0 (id=2266): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x3, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x10010, 0xffffffffffffffff, 0xe4d7c000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket(0x10, 0x80002, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40010003, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) r6 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) fcntl$setflags(r6, 0x2, 0x0) 618.048911ms ago: executing program 0 (id=2267): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x400000a, 0x12, r0, 0x29286000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') syz_open_dev$evdev(&(0x7f0000000080), 0xc000, 0x40040) pselect6(0x40, &(0x7f0000000040)={0x62b6, 0x0, 0x0, 0x300, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r5, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r6 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0xa6, 0x4}, @window={0x3, 0x9e, 0x79bf}, @sack_perm, @mss={0x2, 0x69c}], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, &(0x7f0000000140)=0x8008, 0x4, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r7, 0x4008af75, &(0x7f0000000000)={0x1, 0x2}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904"], 0x0) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd18751300000000"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\x02\x00|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\x02&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa3\xd0\xe8\xa8g\xdf\"\xe8\x05[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xf1\x12\xbd\x9a\xc7{\x84\xb9\xc0B\xe1\v\x00\x00\x00\x00\x00\x00\x00\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\xaa\x18$\xb3\xcd\xaaL\xc6\xe0}\xff+\x9eJG\x0fr\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?c\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef\x00'/1043) 581.237824ms ago: executing program 2 (id=2268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) mmap(&(0x7f000091a000/0x3000)=nil, 0x3000, 0x1000002, 0x50, r0, 0x45809000) (async) r1 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x14, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0xa, 0x0, &(0x7f00000015c0)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x66}], 0x1, 0x74, 0x0, 0x0) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaa}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f00000003c0)="a6e2976b", 0x4, 0x24008800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000340)=0x40) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x40000000000000d, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x655, 0x1, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$BLKRRPART(r7, 0x125f, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"5b8e958855dc40c2edc376133d0b4a2175bdd204c9450b2001b0fbd0fc26e7a2da9ea98c1b3286070f3ed92652147c4a93c70681a87216cd75115c00f7721ffa406ae737775d259560f6e55d813737404f4d3c0cc6de9fc275c850b84950a7ead7baf32255ca0948e658b03dc88318b5355cbaddd87f9aafc84bd8f2da1dd61da19ab5c245b929ee20a2b98657ff38d41a4db068c36ad0ec08428709af2b5c48bb7c14120fbf060aa30a0c9e125cdcfb6f65ca4ce2add32e9b5620144d1bda12ac62894860a7a04f04bc1af692b7619c5c7a57e9690f1ae14d81368b024316cb0b4a8b1374032758d535097d4365d2ade92d0cd33c063f6728c0b20fd56495fdbaf7399273803d9be50b28a671051d3de5be9746469851d476f9d585f13d3d5d4c8f4d938a4f6a0cecf823fc39092d6047d533956a70f54dfb31fa743f38d0cb62fa120744e07d06ce99431548b47e91a816f372ab2c7dd989c4e9810cd0d6e2e7513130ab54c1b3978f8ea3d39b20aff841096b9b88920b4119c53b3e420340f613bb6de2e81d4a967687e1caa1d507e907680855e2a7ba3439259d6c7679221d4cf45996fb604029ec4b137864123b89bd6b1b93a217a4818268c6cec0aa88fa33219b7f0e56bf370e8c91c700836c00a7edb23ae8a7c9c52096807cdc3cabe4680d7bc63b9124c70ed73abf5ee49bb485d10d415d17248673ad45bb9fd3fce2065c4c9f8e2a28368804d4512933df2ff46029f7dcb4d0eb0973dba53f4002b948db9b47cbc206f832bc04c6dc2aecc924bbfb6532d66b4809dcb5bf2fdb058976eadf45bd22d7fc003ee6f015f259dd99eb5e5b137001dd0e2d3f672141da1f3d9e484febee6b9dffd8268d57f24ba0ba55fb76b775c26392608acaba3efb4ea2cd259e2190a1491a401850bb8d9708fd9563dff8b5935bf2767e53ea9b1672d03fe0667b7808b11997a7d5a4b7c86f5958bb3835bdd6087aa494641f4feaf57ce0c1e69ceafdfd31c03049e675dfe5b410f91a19bd1f0a0f0066af9e1e2507b66a326c63d7c86b7fa6ee80b5b157f895d0d1e5972799664f1787651ba7a017c998e1cc4767ba2e9312c0a2989a4362ac533efa73bdc67f579c51ef2b3bdf41b93dc0d1972cb88c06ff059206dc9d7c113145ab61ad10882ebebf48dda8353755382fff8d8aaba151861f1b91ddc533964a27e585244b98ae0f144b8513ad51172b5edf99ae560d05b59f44845f2698b784e5e1a1c064647285ca64cab53edbee4ddf4ae1c361ba878f9a93f71b85d181373895936f8cd3448f7f512087ef921a05da445dfe832c9f08bf32d27b442c6543ea0ce35401cd9a9ba478ab879f1aa18a040ffae85565961d773085cf482bfee77b4a78a72b17c36cff734d276cf3a021f2e23863539592f1cb0784a6072d6fbfbf15141e0b01911d1364f9d7cfa3edee66cc46d75186b2638fec7756305e82e42b83e3ece83d9659e0804c2095768347d24c5032f5d50be9645273983c872e6c77a97860f1d823867ce2cfb2c1058a8cf8813d86751e60687e1d2c785dbb0862798c16b1111f4f9741bfef8ebfcb8fe3e9b510ae5ad39d82603d7e6442a1b140233a94699a5f80e15ade8587196e7452ccb1a4a7b89721764ca78eb77e6396e9b311204c0b6b973d4eca6ffda4fcbb617df5b86b6b8c122b7f94437965897d7961edb45fdc9259de70e073ac9b82cbae92d6fb4ff201a6c128fb6af728596f9c00bb84bc4ce7c621e7326e801deaf823859dda1af14657dcbdba00e42f69890401eb98cbbf460c1045b5a39b18d86c50253a8d1dcf249938f2b71cc24728fca8279b8a1ce0cb2a46c7af3b614cad3e44cbc86ee1ea19fdc7a3c7f62c0649877d62ec0a6f3d05d671980371999ff3f161d8db8040cc717f1107319427ab56d55b728fa8d7ecc435e7ce99c5cd902653e92fc1f4d1e0a4320f39da5932f06c1ecedd5c73d72db270ef728c795da5fbde7212ba674cf5a05f867361bb22032a9fb9fd2e5eb430e756e0be294fc4eed49bc5e9409cccee5df1b659e0a834303a46e246031903041a9b267605a7f0cb7cb5db58fa9b0b6ce248f822f4409a445206b18f339660b364877025f3b1a8d216a64fe7e17ee677d47761b5df4df3519f2230b9190c66ed35d5d62ddd41f0774a6e63485fea1cf75e4fcb421831e8c87d1c575c098f8feb6ac03db19d3fbbdce8b200b72184e08277e9a2774c7e838c4a95b98e436f99f8ad86fd3bf0ee621fa76b7a609a505d05cff6a1791da979c60fb2b076edf98b425d8e9276010863cb98453b28b967fa5d9e28c5d345f0f62b130b7f6d13aedc0f76fe138f85fbefa874b4f11b2d8f68ac389bd542e624b6e4d467561b8b1b59251827db6943137c278eb6983a3ab4d3d39050d4feeba1ad80f636145200f2aeeb3df53376486f6800c01d309857b174d7a29cfc63f469ea927cbdd816ec63366aedc3a3d7a77b5909b8a5d36233db4ef7d5dbd317b4aa300b68005a61082e8a510e11c62b25ddf2ef0d00a026718578f30060556b7157a679f5c3cf50fdbec6ae503dbfacb6c4cd6a932bae2d58588191912be9391b9467144c85b3bb3bded0c84998d0d5e5cd9c6e856e1b56695e61e0508a44b83bd51ecba8ab6d65f86510a411df3b571db8c152335fd8eb040bc9afdc96804a92c3508cc7406cd6b3d647c687e5f0740fa73ca36a57d647dbf598f60d3ea1da86b201382ff217dd259dcc6d83a933d8b47fc4a9d63540319bcce8caa52a2e0dfd6abed2fdea2927e312a09708771e6dc4b932d3d3e066d646d2d2521d4c2e0dcf7b5fd51e8efa8c0b2fde2648920f88dd520fe671eecf937d3959d6ca74370492ca7f83a972a301c0e80b354db699fc67789904a62ee99bfed41ce842c56aa7d4590d2c36f047a340758a928f26d75a136222232fd01cc9ec082ba8f64860b3ec5109207144bae2c4b80ce6180250dceac4667dbb9b6d953a2256a53faa4eb022d91f3c91b6273463cf4b96b626b721f92c4c683a0cf4cc4f145c6ef3dd22538905813e6e8abce27a93f6337019471e894da0383fc7f88d5b9358bfaf2a5c3df39234873823e61ab775ed467d0a7991c9e8d2a8a4a952b12e83a39b63252351812d46d35c86ac2e2b270f465837a03015613657183813e28ede6f3fc0ce4b645ebae545de524d798423e1495030dcb408bf23d4890faa281c73dc17c21ed4f5ad9337e44ec80a5baed65f72fda6dd7a180ff10e3a41addeb593bb9b8521b4859e14f98f3bbb81e98dacc059dd753bb3163c5acd4a66889f55b44d2c2f8b8acbc4fdf49fe007e7092d2273186b9920072f455ac2c544a6eebd12afe2c1eb1904871acfcf7d15fc75c3c57365b606d5738d14c92c3c32dc99badbc34cf70b912979a0a6412c095cf18b15c3adacb28ad918566f156a1db8143afc25885e595363b2f062ecbef383346b2c5ba25880ff420a9001baf6547a4f7818553ed0c1c2b566e7b47b54110f4b173e27b47b9f7d400a428079333472b039f5d7ebdcd98133f465edfd97840fc6b8d6a4f625b0435a0c9b5d4f9cb49a296e1d19ee87f10b62660af753c7a0edcfc6e8e15fc1f6f68975723d0d198ffaa52797a1049c2cb3dae5d7e2eff8636890f0562bc313a48f783ed0e8cc70a192c7bb60fedea60c830b2e7611785c45f394ce33db96bf3e14671dd3e4668eb09a654386f93d8ca29eb2d2afc80435694667d6c948fd985be8817d201e76fe67b0fa4ae0adb52a21adaacd9b41ff1d84d61c0f456d5272ce66a48b9cc4d51248d348f9b6bebaf60c66762b2276e05a25ff7ccc47e33d8aaf353d27196d1d882b88bd56c2d19b4ca630221b29cc93701d89dd1fc4ae0b6488e3bce2b350ee8749de5e6074ad1a929ef306458b81ee04f017ed443028470424f70a81949e2dc490126a5a1195532181ee36ec4022967282cf519e5c6496f90183d54b39b39cfd1a521b5269844484e44777b7bb469993c6bd25cc36ddf93c3d5cc93b1b2efa270b45f76e5f96eb915e08ee322315c61fbd1b17eb9da94f0f83c08cca524a9b88066e0f08ab4b9db49434c2fb54b7322e980b493ba2f8f7e46a1db7c1c4bd0245e247fbfa9164ce1f4de1869676b05a327f503ea70b3a8b2b66d5c3e627698b65a6232bd15c729cdefd9a2aa2803ca4dcfa51016b6cce2954161496bc86e53c250113bd8f7c29a429a4b4bd58f7e9eb3384a14c82c92788a12219be37e45608c54db743b8e210a617f6b25d5d88f57cf8e33a6974232159cc1c780b5db5a0eb0bbd0451e969b887a05788aafbe3815d2048c47e96b6b3edd320c4f8c6eefb18eaecd14769f49a3558bbb7eabcffb408ad0c656a5a7a1effe3012451ba373479ce0676f71ba322bad2be70502f2919c67e37d2fecd1356bb9cd4b814899072b27bb9e78935048b31411ae52796c2a5123c76d634f7e90a0c94aa1da9343861d1c2283e33e0dca795239844038ea4b3b666ae73385225557772afc520577e4320fbc5470c9ea6e9e197ae720339f89fc5d1583bf25facf331dbf264b8fe86e6ca54775f958764aa5bccf2c8e645858a1aa56b68ea86d879c100112531dd776ee852e37fec2d307f51aa4fcce65978e3748d9b69c688253483757e9b3df9215d08c5cb2c341f32dd18653393a32ed396fa110a39d199cda64336d695afc469000988a8051a406852ff930342e02293816c3673c9f10b18ffffbe3b77999d0ded3b518b6bc6de0794b19ed7086add3c253969e5f3ba2743eb26dfcac9f1e5ce56de5690a22d0f6266773d8a0ba555ab27e5354a0a85e6999b8433c5ef3060495ea32c8e92299e7b2d8ff0db22d4647ad2f597804e0b6abdd6e4d28061801fbc9edac1aba5e298e911e7d57b9df8436c4462de16dd32aa48f5f864583b3d56849328cc3f67439daa4aa7c50fb5600db6b9156260c09b37805c8fc6e9a98aaa0388d0fced67627beaa7980ee198bca88dd1a167a32226f767bcaab87f12b20ec204491ab1c63b23fac2128010a93ebe36c53a0216cc98a1ee5c322e7ac94f291310bbfb24c8c94dc271d0e7eb93eda7ad55348e2af588e467f0f322adc179c4799b46b9edb782d31cbe17f67098d4219389e51f8bf5e0e9006161cd16e2651f7e2831f66e37dd23e0cb8b7e6774c4d5662b76261a0f39e4c34f39980183d29351c411d20791747981cef340eaafac2f14510cb092f8eca3bd7b1191152ddd0b99f4a1fb0e7769af8c77a9a243d191a938831c1294aa72f5eea5aebc8e902689b61fc01cc5a01237357937134a7fd100fc96cf9ea2735f2ca8b7df52e3b9ea996f887b3da193a078df1580270aec382e5db9ee7e7026ba88d0621947d401ef3aebaecc66afb0c0cce04853592b834cabae87d5a155a325e8162c9d05e5c8a7c4a5001ab161ab54fc4c4a2824f7600ed5b32db627640f4ea2c68472e20d1c71641595a7170e1622b963b99a42ee941bf2a8ed29e123b43fa7079f349591ae92f67f9b4eb14bc01413c718c79461b91139b679393c303fd0aaca2302611417382ed670b41f2c354fa136c3e33ddbe2a56515bdfa859cf89d8c79808c2fb8844db91d50a2981b58d7f4376e1ae99a800a1931d25e86efc99fad9ab356736b34b65fff16d9adb4c2b9d45c66e239c733e5d2b09c540a274b86abd2baadfc027adf1a5f9fc35e30cc12da5a37a7ba75b71d646b6520fb8cacfd5d4ec4e800898b0cf5cd387b9a2452bea399b73895e5cd455c7f4e8ce343e15a08c2d9acab9468d9d13ed654", 0x1000}}, 0x1006) 487.463721ms ago: executing program 2 (id=2269): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x0, 0x20000}}, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x10400, 0x0, 0x8}, 0x18) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 342.174323ms ago: executing program 1 (id=2270): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x9, @broadcast=0xfffffffe}}) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8ee49000) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x9, @broadcast=0xfffffffe}}) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8ee49000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 313.234605ms ago: executing program 3 (id=2271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/146}, {&(0x7f0000000100)=""/17}, {&(0x7f0000000140)=""/208}, {&(0x7f0000000240)=""/30}], 0x24) 290.514767ms ago: executing program 3 (id=2272): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_gettime(r5, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000080)={r1, 0x1, 0x2, 0xede4}) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 226.315882ms ago: executing program 1 (id=2273): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x38d, 0x8, 0x2, 0xda}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e51000) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 225.086292ms ago: executing program 1 (id=2274): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=@report={0x2bc, 0x20, 0x8, 0x70bd26, 0x25dfdbfe, {0x33, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e24, 0x1ff, 0x4e22, 0x5, 0xa, 0x0, 0x20, 0x89, 0x0, r5}}, [@etimer_thresh={0x8, 0xc, 0xaf62}, @algo_comp={0x10e, 0x3, {{'deflate\x00'}, 0x630, "03caaa96fff03256eecd49c96dfbc9f429d87d627db527800492ac7b216f65e3eb647ae490b0411d9883534d9d756f54e5a7df5471a32180c2eb1179e177a2930ed6734273e7fcf997de8db710ec4e53f9985add454f3a6af232ad8cab9db74d8aa66703635aac5d5a28f72cc5e8d06911fbe8246d4b0ede8ad912b08b2d35193270a6b71ffbf41891cb51b637ddc8ae50e528e129eb2665fcb9c217ae436ac4318204b9e493a778134112bceb37a47a08362db065536f1a17bed8c98ee0eafa46eeeacbcf9c"}}, @lastused={0xc, 0xf, 0x3}, @tfcpad={0x8, 0x16, 0x6}, @algo_aead={0xde, 0x12, {{'aegis256\x00'}, 0x490, 0x180, "e015cbc8e0fb6c3f19d06d8fe36aa1faeac682befbf88cd99217c9c66958061dbcfdc426ddf49dd48f3b78c11a9be5e2aa943a3b18991b6df1ceae404f6df4ced1ff4a0313d9f8374eaf72784cc690ad3674d0f07415e6c68515d041a892b2e9f0f913854370c6b8ad3f9a562e6ba3aaae8d7d630f28c1aadfbff504b87cd3ef5e0c4b521e8624feaafc720e18fa16a3419e"}}, @replay_thresh={0x8, 0xb, 0x807f}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e22, @in=@local}}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@mcast1, 0x0, 0x2}}, @offload={0xc, 0x1c, {r2, 0x1}}, @extra_flags={0x8, 0x18, 0x49685697}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x24040080}, 0x8000) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001141200ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xffffffffffffffe0) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)=""/212, &(0x7f0000000200)=0xd4) ppoll(0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)={[0x71]}, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xda\xfb\x8c#\x8cI\x8d\xaa^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\x00\x00\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\xe5\x8b\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9}\xf7\xa9\x96P\x920Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\xd3\xfc\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xce\x1c\xb5\x85maJ\x0f\xf7+Y\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+W\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xdb\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc2]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[') 210.249293ms ago: executing program 1 (id=2275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0xd000, 0xfffffffffffffffd, 0x1, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x7b) write$evdev(r5, &(0x7f00000005c0)=[{{}, 0x11, 0xfff8, 0x815}], 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0xd000, 0xfffffffffffffffd, 0x1, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x1) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x7b) (async) write$evdev(r5, &(0x7f00000005c0)=[{{}, 0x11, 0xfff8, 0x815}], 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000000)) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 0s ago: executing program 1 (id=2276): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x2000, 0x82, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet(0x2, 0x800, 0x3) (rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) ppoll(&(0x7f0000000140)=[{r0, 0x4084}, {0xffffffffffffffff, 0x5408}, {r2, 0x2201}, {r0, 0x100}, {r1}, {r1, 0x4001}, {r1, 0x8000}, {r3, 0x40}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f0000000440)={[0x1000]}, 0x8) (async, rerun: 64) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x2}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)={0xc9, "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"}) (async, rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): pid=2196 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.336147][ T36] audit: type=1400 audit(1756283816.736:362): avc: denied { wake_alarm } for pid=2239 comm="syz.0.644" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.370700][ T2242] netlink: 'syz.0.645': attribute type 46 has an invalid length. [ 77.400994][ T36] audit: type=1326 audit(1756283816.796:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2245 comm="syz.0.647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x0 [ 77.580181][ T2262] 9pnet_fd: p9_fd_create_tcp (2262): problem connecting socket to 127.0.0.1 [ 78.126873][ T2297] overlayfs: failed to clone upperpath [ 78.608335][ T2307] netlink: 'syz.2.670': attribute type 13 has an invalid length. [ 78.618189][ T2307] tipc: Started in network mode [ 78.623647][ T2307] tipc: Node identity ce5d53637b65, cluster identity 4711 [ 78.630918][ T2307] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 78.640549][ T2307] tipc: Enabled bearer , priority 10 [ 78.691235][ T2318] fuse: Unknown parameter 'group_)d' [ 78.745154][ T2322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 79.669510][ T2341] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 79.678611][ T2341] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 79.695818][ T36] audit: type=1400 audit(1756283819.096:364): avc: denied { write } for pid=2344 comm="syz.3.682" name="raw6" dev="proc" ino=4026532600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.741808][ T1054] tipc: Node number set to 3040367459 [ 79.939407][ T36] audit: type=1400 audit(1756283819.336:365): avc: denied { create } for pid=2381 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.001918][ T2389] batadv_slave_0: mtu less than device minimum [ 80.011918][ T36] audit: type=1400 audit(1756283819.406:366): avc: denied { map } for pid=2388 comm="syz.3.695" path="socket:[12020]" dev="sockfs" ino=12020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 80.147939][ T2409] rust_binder: Error in use_page_slow: ESRCH [ 80.147966][ T2409] rust_binder: use_range failure ESRCH [ 80.155029][ T2409] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 80.160560][ T2409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.168630][ T2409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:341 [ 80.201237][ T2413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.294594][ T2431] netlink: 'syz.2.713': attribute type 4 has an invalid length. [ 80.311572][ T2435] 9pnet_fd: Insufficient options for proto=fd [ 80.324443][ T2438] netlink: 4492 bytes leftover after parsing attributes in process `syz.3.715'. [ 80.356484][ T2451] 9pnet_fd: Insufficient options for proto=fd [ 80.591803][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 80.764378][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 80.781819][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.789932][ T9] usb 4-1: Product: syz [ 80.794184][ T9] usb 4-1: Manufacturer: syz [ 80.798794][ T9] usb 4-1: SerialNumber: syz [ 80.968698][ T2456] overlayfs: missing 'lowerdir' [ 81.166675][ T36] audit: type=1326 audit(1756283820.566:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.0.727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x0 [ 81.200332][ T2475] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 81.267915][ T2476] overlayfs: failed to clone upperpath [ 81.357041][ T2477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.357111][ T2477] rust_binder: inc_ref_done called when no active inc_refs [ 81.562286][ T36] audit: type=1400 audit(1756283820.966:368): avc: denied { map } for pid=2478 comm="syz.1.729" path="socket:[12808]" dev="sockfs" ino=12808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.663790][ T2504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 81.705648][ T2513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2513 comm=syz.1.742 [ 81.754636][ T2527] netlink: 'syz.1.747': attribute type 6 has an invalid length. [ 81.804772][ T36] audit: type=1400 audit(1756283821.206:369): avc: denied { ioctl } for pid=2538 comm="syz.2.751" path="socket:[12841]" dev="sockfs" ino=12841 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.838715][ T36] audit: type=1400 audit(1756283821.236:370): avc: denied { map } for pid=2540 comm="syz.2.752" path="pipe:[13363]" dev="pipefs" ino=13363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 81.929000][ T36] audit: type=1326 audit(1756283821.326:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.2.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd74f8ebe9 code=0x0 [ 82.115602][ T2592] bridge0: port 3(veth1_macvtap) entered blocking state [ 82.122658][ T2592] bridge0: port 3(veth1_macvtap) entered disabled state [ 82.129717][ T2592] veth1_macvtap: entered allmulticast mode [ 82.138183][ T2592] veth1_macvtap: left allmulticast mode [ 82.144820][ T2593] bridge0: port 3(veth1_macvtap) entered blocking state [ 82.151869][ T2593] bridge0: port 3(veth1_macvtap) entered disabled state [ 82.159053][ T2593] veth1_macvtap: entered allmulticast mode [ 82.165476][ T2593] veth1_macvtap: left allmulticast mode [ 82.312882][ T2608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 82.395287][ T2606] syz.0.772: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 82.413579][ T2606] CPU: 0 UID: 0 PID: 2606 Comm: syz.0.772 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 82.413609][ T2606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.413627][ T2606] Call Trace: [ 82.413633][ T2606] [ 82.413640][ T2606] __dump_stack+0x21/0x30 [ 82.413675][ T2606] dump_stack_lvl+0x10c/0x190 [ 82.413698][ T2606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.413722][ T2606] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 82.413747][ T2606] dump_stack+0x19/0x20 [ 82.413768][ T2606] warn_alloc+0x1bc/0x2a0 [ 82.413791][ T2606] ? x64_sys_call+0x2adc/0x2ee0 [ 82.413816][ T2606] ? __cfi_warn_alloc+0x10/0x10 [ 82.413837][ T2606] ? __get_vm_area_node+0x1dc/0x3a0 [ 82.413860][ T2606] ? xt_alloc_entry_offsets+0x56/0xe0 [ 82.413884][ T2606] __vmalloc_node_range_noprof+0x68e/0x1420 [ 82.413908][ T2606] ? __kernel_text_address+0x11/0x40 [ 82.413934][ T2606] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 82.413959][ T2606] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 82.413985][ T2606] ? __kmalloc_node_noprof+0x2a5/0x450 [ 82.414008][ T2606] ? nf_setsockopt+0x28d/0x2b0 [ 82.414072][ T2606] __kvmalloc_node_noprof+0xfc/0x300 [ 82.414088][ T2606] ? xt_alloc_entry_offsets+0x56/0xe0 [ 82.414101][ T2606] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 82.414115][ T2606] xt_alloc_entry_offsets+0x56/0xe0 [ 82.414129][ T2606] translate_table+0x1a9/0x1f90 [ 82.414140][ T2606] ? cred_has_capability+0x281/0x380 [ 82.414153][ T2606] ? kasan_save_alloc_info+0x40/0x50 [ 82.414167][ T2606] ? __kasan_kmalloc+0x96/0xb0 [ 82.414177][ T2606] ? arpt_register_table+0x930/0x930 [ 82.414187][ T2606] ? __kvmalloc_node_noprof+0x168/0x300 [ 82.414201][ T2606] ? check_stack_object+0x82/0x140 [ 82.414218][ T2606] ? __kasan_check_write+0x18/0x20 [ 82.414232][ T2606] ? _copy_from_user+0x8b/0xb0 [ 82.414244][ T2606] ? copy_from_sockptr_offset+0x77/0xb0 [ 82.414254][ T2606] do_arpt_set_ctl+0x712/0xa00 [ 82.414264][ T2606] ? __asan_memcpy+0x5a/0x80 [ 82.414282][ T2606] ? release_sock+0x171/0x1f0 [ 82.414301][ T2606] ? __cfi_do_arpt_set_ctl+0x10/0x10 [ 82.414319][ T2606] ? sockopt_release_sock+0x5c/0x70 [ 82.414339][ T2606] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 82.414363][ T2606] ? __cfi_avc_has_perm+0x10/0x10 [ 82.414378][ T2606] ? futex_wake+0x63a/0x900 [ 82.414391][ T2606] ? selinux_socket_setsockopt+0x2ea/0x390 [ 82.414407][ T2606] nf_setsockopt+0x28d/0x2b0 [ 82.414417][ T2606] ip_setsockopt+0xf6/0x100 [ 82.414431][ T2606] udp_setsockopt+0xa3/0xc0 [ 82.414449][ T2606] sock_common_setsockopt+0xb8/0xd0 [ 82.414460][ T2606] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 82.414472][ T2606] do_sock_setsockopt+0x26d/0x400 [ 82.414487][ T2606] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 82.414503][ T2606] __x64_sys_setsockopt+0x1b8/0x250 [ 82.414517][ T2606] x64_sys_call+0x2adc/0x2ee0 [ 82.414532][ T2606] do_syscall_64+0x58/0xf0 [ 82.414545][ T2606] ? clear_bhb_loop+0x50/0xa0 [ 82.414556][ T2606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.414572][ T2606] RIP: 0033:0x7f0c8e18ebe9 [ 82.414587][ T2606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.414597][ T2606] RSP: 002b:00007f0c8efe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.414609][ T2606] RAX: ffffffffffffffda RBX: 00007f0c8e3b5fa0 RCX: 00007f0c8e18ebe9 [ 82.414617][ T2606] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 82.414625][ T2606] RBP: 00007f0c8e211e19 R08: 0000000000000438 R09: 0000000000000000 [ 82.414632][ T2606] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.414639][ T2606] R13: 00007f0c8e3b6038 R14: 00007f0c8e3b5fa0 R15: 00007ffc3dd49088 [ 82.414648][ T2606] [ 82.414864][ T2606] Mem-Info: [ 82.782954][ T2606] active_anon:15018 inactive_anon:0 isolated_anon:0 [ 82.782954][ T2606] active_file:24437 inactive_file:10871 isolated_file:0 [ 82.782954][ T2606] unevictable:0 dirty:123 writeback:0 [ 82.782954][ T2606] slab_reclaimable:5883 slab_unreclaimable:70162 [ 82.782954][ T2606] mapped:24039 shmem:184 pagetables:1158 [ 82.782954][ T2606] sec_pagetables:0 bounce:0 [ 82.782954][ T2606] kernel_misc_reclaimable:0 [ 82.782954][ T2606] free:1498053 free_pcp:1818 free_cma:0 [ 82.827985][ T2606] Node 0 active_anon:60072kB inactive_anon:0kB active_file:97748kB inactive_file:43484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96156kB dirty:492kB writeback:0kB shmem:736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5760kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no [ 82.859966][ T2606] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:5752kB free_cma:0kB [ 82.890013][ T2606] lowmem_reserve[]: 0 3921 3921 [ 82.894952][ T2606] Normal free:3031916kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60072kB inactive_anon:0kB active_file:97748kB inactive_file:43484kB unevictable:0kB writepending:492kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1516kB local_pcp:1032kB free_cma:0kB [ 82.926459][ T2606] lowmem_reserve[]: 0 0 0 [ 82.930856][ T2606] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 82.946299][ T2606] Normal: 17*4kB (UME) 101*8kB (UME) 108*16kB (UME) 278*32kB (UME) 304*64kB (UME) 91*128kB (UME) 7*256kB (UME) 27*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 714*4096kB (UM) = 3031916kB [ 82.964773][ T2606] 35488 total pagecache pages [ 82.969479][ T2606] 0 pages in swap cache [ 82.973688][ T2606] Free swap = 124468kB [ 82.977887][ T2606] Total swap = 124996kB [ 82.982084][ T2606] 2097051 pages RAM [ 82.985921][ T2606] 0 pages HighMem/MovableOnly [ 82.990628][ T2606] 351530 pages reserved [ 82.994855][ T2606] 0 pages cma reserved [ 83.000036][ T2606] Memory allocations: [ 83.004123][ T2606] 0 B 0 init/main.c:1370 func:do_initcalls [ 83.011428][ T2606] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 83.019548][ T2606] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 83.027263][ T2606] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 83.035267][ T2606] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 83.043237][ T2606] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 83.051922][ T2606] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 83.059898][ T2606] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 83.067905][ T2606] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 83.075867][ T2606] 0 B 0 init/initramfs.c:101 func:find_link [ 83.299357][ T2650] netlink: 188 bytes leftover after parsing attributes in process `syz.2.786'. [ 83.361515][ T10] usb 4-1: USB disconnect, device number 16 [ 83.428729][ T2654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.528317][ T2671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.534907][ T2672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.542102][ T2671] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 83.670179][ T2679] netlink: 68 bytes leftover after parsing attributes in process `syz.0.795'. [ 83.687259][ T2679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 83.728325][ T36] audit: type=1400 audit(1756283823.126:372): avc: denied { read } for pid=2676 comm="syz.0.795" path="socket:[12934]" dev="sockfs" ino=12934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.820436][ T36] audit: type=1400 audit(1756283823.216:373): avc: denied { create } for pid=2693 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.849106][ T2698] overlayfs: failed to clone upperpath [ 83.867803][ T2707] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 83.928503][ T36] audit: type=1400 audit(1756283823.326:374): avc: denied { create } for pid=2710 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.952879][ T2711] 2N: renamed from vcan0 (while UP) [ 84.614257][ T36] audit: type=1400 audit(1756283824.016:375): avc: denied { block_suspend } for pid=2732 comm="syz.2.813" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.223039][ T36] audit: type=1400 audit(1756283824.626:376): avc: denied { mount } for pid=2750 comm="syz.2.819" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 85.223922][ T2751] overlayfs: failed to clone lowerpath [ 85.373888][ T36] audit: type=1326 audit(1756283824.776:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2783 comm="syz.1.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb9b18ebe9 code=0x0 [ 85.486647][ T2797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 85.496122][ T2797] 9pnet_fd: Insufficient options for proto=fd [ 85.527018][ T2806] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.218597][ T2821] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 86.233873][ T2823] tmpfs: Unknown parameter ':;2¨SHDOœkðùæ¹þQ:Û˜MËck?3‚\7o+YÆ;W`å ŠzÿæCÈU\Àêvòä"“Iî]À:sU•¹Br?­I´Sé´Y˜,8' [ 86.619139][ T2850] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 87.262444][ T2867] overlay: Unknown parameter 'subj_user' [ 87.293389][ T2867] overlayfs: failed to clone upperpath [ 87.734280][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 87.734297][ T36] audit: type=1400 audit(1756283827.136:379): avc: denied { listen } for pid=2900 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.891828][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 88.031793][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.271794][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.511799][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 88.651794][ T10] usb 4-1: device descriptor read/64, error -71 [ 88.921901][ T10] usb 4-1: device descriptor read/64, error -71 [ 89.057699][ T10] usb usb4-port1: attempt power cycle [ 89.145411][ T2924] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 89.166421][ T36] audit: type=1400 audit(1756283828.566:380): avc: denied { relabelto } for pid=2920 comm="syz.0.883" name="kvm" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.194652][ T36] audit: type=1400 audit(1756283828.566:381): avc: denied { associate } for pid=2920 comm="syz.0.883" name="kvm" dev="tmpfs" ino=670 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.273963][ T36] audit: type=1400 audit(1756283828.676:382): avc: denied { read append } for pid=2933 comm="syz.0.886" name="kvm" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.300998][ T36] audit: type=1400 audit(1756283828.676:383): avc: denied { open } for pid=2933 comm="syz.0.886" path="/dev/kvm" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.327633][ T36] audit: type=1400 audit(1756283828.676:384): avc: denied { write } for pid=2933 comm="syz.0.886" name="kvm" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.353977][ T36] audit: type=1400 audit(1756283828.676:385): avc: denied { ioctl } for pid=2933 comm="syz.0.886" path="/dev/kvm" dev="tmpfs" ino=670 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 89.382378][ T36] audit: type=1400 audit(1756283828.676:386): avc: denied { map } for pid=2933 comm="syz.0.886" path="socket:[14034]" dev="sockfs" ino=14034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.401797][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 89.442763][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.565618][ T2965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 89.572736][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.603118][ T2970] 9pnet_fd: Insufficient options for proto=fd [ 89.821936][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 89.852763][ T10] usb 4-1: device descriptor read/8, error -71 [ 89.982937][ T10] usb 4-1: device descriptor read/8, error -71 [ 90.092083][ T10] usb usb4-port1: unable to enumerate USB device [ 90.338338][ T2980] netlink: 'syz.0.901': attribute type 64 has an invalid length. [ 90.359956][ T2986] vlan0: entered promiscuous mode [ 90.365133][ T2986] vlan0: entered allmulticast mode [ 90.370330][ T2986] veth0_vlan: entered allmulticast mode [ 90.371268][ T2991] overlayfs: failed to resolve './file1': -2 [ 90.383598][ T2986] netlink: 'syz.0.903': attribute type 25 has an invalid length. [ 90.388144][ T36] audit: type=1400 audit(1756283829.786:387): avc: denied { nlmsg_read } for pid=2983 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.412434][ T36] audit: type=1400 audit(1756283829.816:388): avc: denied { getopt } for pid=2995 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.434135][ T2986] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 90.443533][ T2986] netlink: 416 bytes leftover after parsing attributes in process `syz.0.903'. [ 90.517158][ T3010] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.521914][ T3036] bpf: Bad value for 'mode' [ 91.903382][ T3054] sock: sock_timestamping_bind_phc: sock not bind to device [ 91.976103][ T3057] 9pnet_fd: Insufficient options for proto=fd [ 92.260676][ T3065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 92.309584][ T3070] /dev/loop0: Can't lookup blockdev [ 92.316683][ T3070] incfs: Error accessing: ./file0. [ 92.322125][ T3070] incfs: mount failed -20 [ 92.563717][ T3083] netlink: 188 bytes leftover after parsing attributes in process `syz.0.941'. [ 92.585147][ T3083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=3083 comm=syz.0.941 [ 93.377328][ T3110] overlayfs: failed to clone upperpath [ 93.414345][ T3115] netlink: 'syz.0.953': attribute type 63 has an invalid length. [ 93.422567][ T3115] netlink: 5 bytes leftover after parsing attributes in process `syz.0.953'. [ 93.781413][ T3147] netlink: 'syz.0.963': attribute type 8 has an invalid length. [ 94.131801][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 94.286371][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.297971][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.308954][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.318740][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.331761][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.340792][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.349396][ T10] usb 4-1: config 0 descriptor?? [ 94.756310][ T10] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 94.765523][ T10] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 94.774367][ T10] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.068498][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 95.068514][ T36] audit: type=1400 audit(1756283834.466:394): avc: denied { lock } for pid=3156 comm="syz.3.968" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.112982][ T10] usb 4-1: USB disconnect, device number 21 [ 95.219825][ T3180] overlayfs: failed to clone upperpath [ 95.240807][ T3187] netlink: 'syz.1.977': attribute type 58 has an invalid length. [ 95.264303][ T3192] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 95.285262][ T3195] overlayfs: failed to clone upperpath [ 95.290833][ T36] audit: type=1400 audit(1756283834.686:395): avc: denied { link } for pid=3193 comm="syz.1.980" name="file1" dev="tmpfs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.371509][ T36] audit: type=1400 audit(1756283834.766:396): avc: denied { write } for pid=3202 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.373513][ T3203] netlink: 44 bytes leftover after parsing attributes in process `syz.2.983'. [ 95.420733][ T3207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 95.454531][ T3218] /dev/loop0: Can't lookup blockdev [ 95.739454][ T36] audit: type=1400 audit(1756283835.136:397): avc: denied { map } for pid=3236 comm="syz.0.996" path="socket:[15412]" dev="sockfs" ino=15412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.762885][ T36] audit: type=1400 audit(1756283835.136:398): avc: denied { read } for pid=3236 comm="syz.0.996" path="socket:[15412]" dev="sockfs" ino=15412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.828880][ T3250] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 95.839044][ T3252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3252 comm=syz.0.1000 [ 95.861609][ T36] audit: type=1400 audit(1756283835.256:399): avc: denied { create } for pid=3248 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.884498][ T36] audit: type=1326 audit(1756283835.256:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3248 comm="syz.2.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74f8ebe9 code=0x0 [ 95.931808][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 96.082712][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 96.111790][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.131817][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 96.151012][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.161268][ T10] usb 4-1: config 0 descriptor?? [ 96.171408][ T3231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.435142][ T36] audit: type=1400 audit(1756283835.836:401): avc: denied { ioctl } for pid=3285 comm="syz.0.1012" path="socket:[14817]" dev="sockfs" ino=14817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.581421][ T10] logitech 0003:046D:CA04.000A: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 96.607313][ T10] logitech 0003:046D:CA04.000A: no inputs found [ 96.614935][ T3304] random: crng reseeded on system resumption [ 96.624264][ T10] usb 4-1: USB disconnect, device number 22 [ 96.644477][ T3304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.653230][ T3304] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 96.662368][ T3304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.681446][ T3306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.681845][ T3306] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 96.697066][ T3308] overlay: ./file0 is not a directory [ 96.723093][ T36] audit: type=1400 audit(1756283836.126:402): avc: denied { accept } for pid=3309 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.747734][ T36] audit: type=1400 audit(1756283836.126:403): avc: denied { setattr } for pid=3309 comm="syz.3.1019" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.778509][ T3322] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 96.785949][ T3322] rust_binder: Write failure EINVAL in pid:437 [ 96.805917][ T3326] overlayfs: failed to resolve './file1': -2 [ 96.874659][ T3336] rust_binder: Write failure EFAULT in pid:444 [ 97.121836][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 97.301797][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 97.308244][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.315174][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 97.324439][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.333400][ T10] usb 4-1: config 0 descriptor?? [ 97.540607][ T3346] rust_binder: Error in use_page_slow: ESRCH [ 97.540624][ T3346] rust_binder: use_range failure ESRCH [ 97.546715][ T3346] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 97.552469][ T3346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.560381][ T3346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:446 [ 97.741163][ T10] hid (null): report_id 0 is invalid [ 97.755652][ T10] hid (null): unknown global tag 0xe [ 99.814604][ T3478] /dev/nbd0: Can't lookup blockdev [ 99.893565][ T10] usb 4-1: USB disconnect, device number 23 [ 99.946212][ T3488] fuse: Bad value for 'user_id' [ 99.951180][ T3488] fuse: Bad value for 'user_id' [ 100.046138][ T3493] rust_binder: 3494 RLIMIT_NICE not set [ 100.063445][ T3497] binder: Unknown parameter 'contextÀ' [ 100.083742][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 100.083758][ T36] audit: type=1400 audit(1756283839.486:413): avc: denied { read } for pid=3499 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.198271][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 100.212307][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.581801][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 100.593487][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 100.741799][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 100.748231][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.758411][ T10] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 100.767492][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 100.778449][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.788230][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.801805][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 100.809923][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.819086][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.827905][ T10] usb 4-1: Product: syz [ 100.832133][ T10] usb 4-1: Manufacturer: syz [ 100.836730][ T10] usb 4-1: SerialNumber: syz [ 100.887904][ T36] audit: type=1400 audit(1756283840.286:414): avc: denied { create } for pid=3558 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 101.046566][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 101.055146][ T10] usb 4-1: 2:1 : format type 9 is not supported yet [ 101.065723][ T10] usb 4-1: USB disconnect, device number 24 [ 101.077880][ T2351] udevd[2351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.801838][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 101.952884][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.964447][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.975505][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.985360][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.998332][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.007397][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.016092][ T10] usb 4-1: config 0 descriptor?? [ 102.423384][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 102.429825][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.439068][ T10] usb 4-1: USB disconnect, device number 25 [ 102.459979][ T3610] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1125'. [ 102.470079][ T3610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31804 sclass=netlink_route_socket pid=3610 comm=syz.2.1125 [ 102.536505][ T36] audit: type=1400 audit(1756283841.936:415): avc: denied { mount } for pid=3631 comm="syz.1.1132" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.610144][ T36] audit: type=1400 audit(1756283842.006:416): avc: denied { map } for pid=3637 comm="syz.2.1134" path="socket:[16289]" dev="sockfs" ino=16289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 102.672870][ T3651] netlink: 'syz.1.1135': attribute type 12 has an invalid length. [ 102.942711][ T3670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1145'. [ 102.952111][ T3670] __vm_enough_memory: pid: 3670, comm: syz.3.1145, bytes: 18014402804453376 not enough memory for the allocation [ 102.964713][ T36] audit: type=1400 audit(1756283842.366:417): avc: denied { read } for pid=94 comm="acpid" name="mouse8" dev="devtmpfs" ino=537 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 102.986718][ T3674] rust_binder: 480: no such ref 2 [ 102.991437][ T36] audit: type=1400 audit(1756283842.366:418): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=537 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 103.014815][ T36] audit: type=1400 audit(1756283842.366:419): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=537 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 103.878508][ T3701] No source specified [ 103.882919][ T3702] netlink: 'syz.3.1154': attribute type 27 has an invalid length. [ 103.902278][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.909542][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.938312][ T3709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 104.041091][ T36] audit: type=1326 audit(1756283843.436:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9b18ebe9 code=0x7fc00000 [ 104.199786][ T3767] netlink: 'syz.0.1170': attribute type 46 has an invalid length. [ 104.690824][ T3782] fuse: Bad value for 'fd' [ 104.695923][ T3782] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 104.723481][ T36] audit: type=1400 audit(1756283844.126:421): avc: denied { execute } for pid=3789 comm="syz.3.1179" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.994259][ T3813] fuse: Bad value for 'user_id' [ 104.999140][ T3813] fuse: Bad value for 'user_id' [ 105.001822][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 105.030197][ T36] audit: type=1400 audit(1756283844.426:422): avc: denied { setattr } for pid=3816 comm="syz.2.1189" path="socket:[17495]" dev="sockfs" ino=17495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.111233][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 105.111250][ T36] audit: type=1326 audit(1756283844.506:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.1192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd74f8ebe9 code=0x0 [ 105.161905][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 105.170053][ T9] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 105.178742][ T9] usb 4-1: config 0 has no interfaces? [ 105.185105][ T9] usb 4-1: config 0 has no interfaces? [ 105.192108][ T9] usb 4-1: config 0 has no interfaces? [ 105.198382][ T9] usb 4-1: config 0 has no interfaces? [ 105.207173][ T9] usb 4-1: config 0 has no interfaces? [ 105.213596][ T9] usb 4-1: config 0 has no interfaces? [ 105.219957][ T9] usb 4-1: config 0 has no interfaces? [ 105.231818][ T9] usb 4-1: config 0 has no interfaces? [ 105.237497][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.246647][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.256674][ T9] usb 4-1: config 0 descriptor?? [ 105.260040][ T3846] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1198'. [ 105.272221][ T36] audit: type=1400 audit(1756283844.676:435): avc: denied { associate } for pid=3845 comm="syz.2.1198" name="ptmx" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 105.355838][ T3854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1202'. [ 105.468929][ T3901] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 105.492619][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 105.522999][ T3912] fuse: Bad value for 'group_id' [ 105.528014][ T3912] fuse: Bad value for 'group_id' [ 105.569991][ T9] usb 4-1: USB disconnect, device number 26 [ 105.941991][ T3929] 9pnet_fd: Insufficient options for proto=fd [ 106.178207][ T36] audit: type=1400 audit(1756283845.576:436): avc: denied { create } for pid=3932 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.251406][ T36] audit: type=1400 audit(1756283845.646:437): avc: denied { append } for pid=3951 comm="syz.1.1236" name="file0" dev="tmpfs" ino=1865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.585584][ T3970] fuse: Unknown parameter 'gvoup_id' [ 106.803294][ T3989] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 106.892531][ T3995] syz.1.1249: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 106.907489][ T3995] CPU: 0 UID: 0 PID: 3995 Comm: syz.1.1249 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 106.907518][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.907533][ T3995] Call Trace: [ 106.907542][ T3995] [ 106.907550][ T3995] __dump_stack+0x21/0x30 [ 106.907584][ T3995] dump_stack_lvl+0x10c/0x190 [ 106.907607][ T3995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.907634][ T3995] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 106.907662][ T3995] dump_stack+0x19/0x20 [ 106.907685][ T3995] warn_alloc+0x1bc/0x2a0 [ 106.907709][ T3995] ? stack_depot_save_flags+0x38/0x800 [ 106.907741][ T3995] ? __cfi_warn_alloc+0x10/0x10 [ 106.907763][ T3995] ? kasan_save_track+0x4f/0x80 [ 106.907780][ T3995] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 106.907809][ T3995] ? xskq_create+0x68/0x2a0 [ 106.907837][ T3995] ? xsk_init_queue+0xb6/0x120 [ 106.907859][ T3995] ? xsk_setsockopt+0x43f/0x6f0 [ 106.907881][ T3995] ? do_sock_setsockopt+0x26d/0x400 [ 106.907905][ T3995] ? __x64_sys_setsockopt+0x1b8/0x250 [ 106.907926][ T3995] ? x64_sys_call+0x2adc/0x2ee0 [ 106.907953][ T3995] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.907985][ T3995] __vmalloc_node_range_noprof+0x135/0x1420 [ 106.908015][ T3995] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 106.908041][ T3995] ? avc_has_perm+0x144/0x220 [ 106.908067][ T3995] ? kasan_save_alloc_info+0x40/0x50 [ 106.908090][ T3995] ? __kasan_kmalloc+0x96/0xb0 [ 106.908110][ T3995] vmalloc_user_noprof+0x77/0x90 [ 106.908135][ T3995] ? xskq_create+0xdb/0x2a0 [ 106.908163][ T3995] xskq_create+0xdb/0x2a0 [ 106.908192][ T3995] xsk_init_queue+0xb6/0x120 [ 106.908219][ T3995] xsk_setsockopt+0x43f/0x6f0 [ 106.908246][ T3995] ? __cfi_xsk_setsockopt+0x10/0x10 [ 106.908272][ T3995] ? do_futex+0x309/0x500 [ 106.908293][ T3995] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 106.908317][ T3995] ? security_socket_setsockopt+0x33/0xd0 [ 106.908335][ T3995] ? __cfi_xsk_setsockopt+0x10/0x10 [ 106.908429][ T3995] do_sock_setsockopt+0x26d/0x400 [ 106.908456][ T3995] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 106.908484][ T3995] __x64_sys_setsockopt+0x1b8/0x250 [ 106.908515][ T3995] x64_sys_call+0x2adc/0x2ee0 [ 106.908546][ T3995] do_syscall_64+0x58/0xf0 [ 106.908571][ T3995] ? clear_bhb_loop+0x50/0xa0 [ 106.908592][ T3995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.908624][ T3995] RIP: 0033:0x7ffb9b18ebe9 [ 106.908641][ T3995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.908658][ T3995] RSP: 002b:00007ffb9bf3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.908681][ T3995] RAX: ffffffffffffffda RBX: 00007ffb9b3b6090 RCX: 00007ffb9b18ebe9 [ 106.908696][ T3995] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 106.908710][ T3995] RBP: 00007ffb9b211e19 R08: 0000000000000004 R09: 0000000000000000 [ 106.908723][ T3995] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.908737][ T3995] R13: 00007ffb9b3b6128 R14: 00007ffb9b3b6090 R15: 00007ffd6e50c498 [ 106.908755][ T3995] [ 106.908813][ T3995] Mem-Info: [ 107.212754][ T3995] active_anon:20929 inactive_anon:8 isolated_anon:0 [ 107.212754][ T3995] active_file:24643 inactive_file:16348 isolated_file:0 [ 107.212754][ T3995] unevictable:6144 dirty:89 writeback:0 [ 107.212754][ T3995] slab_reclaimable:5595 slab_unreclaimable:71040 [ 107.212754][ T3995] mapped:24222 shmem:2779 pagetables:1350 [ 107.212754][ T3995] sec_pagetables:0 bounce:0 [ 107.212754][ T3995] kernel_misc_reclaimable:0 [ 107.212754][ T3995] free:1479901 free_pcp:8890 free_cma:0 [ 107.263194][ T3995] Node 0 active_anon:80560kB inactive_anon:32kB active_file:98572kB inactive_file:65392kB unevictable:16384kB isolated(anon):0kB isolated(file):0kB mapped:96844kB dirty:356kB writeback:0kB shmem:7904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5976kB pagetables:5324kB sec_pagetables:0kB all_unreclaimable? no [ 107.295682][ T3995] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:5752kB free_cma:0kB [ 107.309379][ T4004] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 107.325943][ T3995] lowmem_reserve[]: 0 3921 3921 [ 107.334494][ T4004] netlink: 'syz.2.1253': attribute type 27 has an invalid length. [ 107.338503][ T3995] Normal free:2995860kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73292kB inactive_anon:32kB active_file:98572kB inactive_file:65392kB unevictable:16384kB writepending:356kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:1384kB free_cma:0kB [ 107.346686][ T4004] netlink: 3609 bytes leftover after parsing attributes in process `syz.2.1253'. [ 107.378229][ T3995] lowmem_reserve[]: 0 0 0 [ 107.391953][ T3995] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 107.410700][ T3995] Normal: 163*4kB (UME) 73*8kB (UME) 165*16kB (UME) 84*32kB (UME) 244*64kB (UME) 49*128kB (UME) 21*256kB (UME) 31*512kB (UME) 23*1024kB (UME) 13*2048kB (ME) 707*4096kB (UM) = 2995748kB [ 107.429222][ T3995] 45302 total pagecache pages [ 107.434175][ T3995] 35 pages in swap cache [ 107.438599][ T3995] Free swap = 124464kB [ 107.444017][ T3995] Total swap = 124996kB [ 107.448638][ T3995] 2097051 pages RAM [ 107.452579][ T3995] 0 pages HighMem/MovableOnly [ 107.457321][ T3995] 351530 pages reserved [ 107.461829][ T3995] 0 pages cma reserved [ 107.467055][ T3995] Memory allocations: [ 107.471100][ T3995] 0 B 0 init/main.c:1370 func:do_initcalls [ 107.478413][ T3995] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 107.486556][ T3995] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 107.494529][ T3995] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 107.501808][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 107.502686][ T3995] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 107.518139][ T3995] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 107.527080][ T3995] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 107.535374][ T3995] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 107.543523][ T3995] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 107.551561][ T3995] 0 B 0 init/initramfs.c:101 func:find_link [ 107.637398][ T36] audit: type=1400 audit(1756283847.036:438): avc: denied { create } for pid=4013 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.658039][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.669747][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.685943][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.695909][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.699175][ T4018] mmap: syz.1.1258 (4018): VmData 20955136 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 107.709046][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.730487][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.754189][ T9] usb 4-1: config 0 descriptor?? [ 107.798966][ T36] audit: type=1400 audit(1756283847.196:439): avc: denied { lock } for pid=4036 comm="syz.1.1264" path="socket:[16752]" dev="sockfs" ino=16752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.882451][ T36] audit: type=1400 audit(1756283847.286:440): avc: denied { create } for pid=4052 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.882713][ T4053] tipc: Can't bind to reserved service type 0 [ 107.989656][ T4065] bridge0: entered allmulticast mode [ 108.168028][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.175673][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.183665][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.191478][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.199115][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.206563][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.213989][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.221394][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.228802][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.236330][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 108.244013][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 108.252716][ T9] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 108.289171][ T4081] raw_sendmsg: syz.2.1280 forgot to set AF_INET. Fix it! [ 108.312699][ T4083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'. [ 108.352225][ T4093] netlink: 'syz.2.1285': attribute type 25 has an invalid length. [ 108.360893][ T4094] 9pnet_fd: Insufficient options for proto=fd [ 108.401489][ T4098] netlink: 'syz.2.1287': attribute type 39 has an invalid length. [ 108.432956][ T9] usb 4-1: USB disconnect, device number 27 [ 108.447077][ T4104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40088 sclass=netlink_route_socket pid=4104 comm=syz.2.1289 [ 116.816684][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 117.022039][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 117.171817][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 117.178087][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.189319][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.199116][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 117.208185][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.216670][ T9] usb 4-1: config 0 descriptor?? [ 117.381476][ T4148] netlink: 'syz.2.1304': attribute type 2 has an invalid length. [ 117.549128][ T4159] fuse: Bad value for 'user_id' [ 117.554082][ T4159] fuse: Bad value for 'user_id' [ 117.629970][ T9] savu 0003:1E7D:2D5A.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 117.894423][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.904091][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.913517][ T9] usb 4-1: USB disconnect, device number 28 [ 118.042776][ T4182] 9pnet_fd: Insufficient options for proto=fd [ 118.139101][ T36] audit: type=1400 audit(1756283857.536:441): avc: denied { execute_no_trans } for pid=4196 comm="syz.0.1323" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9256F1A65E0202864656C6574656429 dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.171956][ T4197] block device autoloading is deprecated and will be removed. [ 118.196941][ T36] audit: type=1400 audit(1756283857.596:442): avc: denied { execute } for pid=4202 comm="syz.0.1325" path="/dev/rnullb0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.245561][ T4213] netlink: 'syz.0.1328': attribute type 63 has an invalid length. [ 118.253437][ T4213] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1328'. [ 118.262332][ T4213] gretap0: entered allmulticast mode [ 118.267767][ T4213] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.286014][ T4217] tmpfs: Unknown parameter 'cgroup.kill' [ 118.302642][ T36] audit: type=1400 audit(1756283857.706:443): avc: denied { mounton } for pid=4220 comm="syz.0.1330" path="/359/file0" dev="tmpfs" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.562635][ T4261] netlink: 'syz.0.1345': attribute type 27 has an invalid length. [ 118.573307][ T4261] fuse: Bad value for 'fd' [ 118.587696][ T36] audit: type=1400 audit(1756283857.986:444): avc: denied { map } for pid=4262 comm="syz.0.1346" path="socket:[17027]" dev="sockfs" ino=17027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.681822][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 118.832929][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.844500][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.855471][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.865326][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.878280][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.887362][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.895987][ T9] usb 4-1: config 0 descriptor?? [ 118.950373][ T4299] overlayfs: failed to clone lowerpath [ 119.233021][ T4306] overlayfs: failed to clone lowerpath [ 119.303081][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 119.309165][ T4315] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 119.310519][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 119.326289][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 119.335210][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 119.342823][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 119.350427][ T9] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 119.368463][ T9] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 119.583704][ T9] usb 4-1: USB disconnect, device number 29 [ 119.687506][ T4328] netlink: 'syz.0.1372': attribute type 6 has an invalid length. [ 119.822054][ T4341] netlink: 'syz.1.1377': attribute type 11 has an invalid length. [ 119.838579][ T4343] incfs: Options parsing error. -22 [ 119.843913][ T4343] incfs: mount failed -22 [ 119.873592][ T4351] GUP no longer grows the stack in syz.1.1381 (4351): 200000005000-200000008000 (200000004000) [ 119.884082][ T4351] CPU: 1 UID: 0 PID: 4351 Comm: syz.1.1381 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 119.884111][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.884120][ T4351] Call Trace: [ 119.884124][ T4351] [ 119.884130][ T4351] __dump_stack+0x21/0x30 [ 119.884150][ T4351] dump_stack_lvl+0x10c/0x190 [ 119.884164][ T4351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.884179][ T4351] ? find_vma+0xcd/0x110 [ 119.884195][ T4351] dump_stack+0x19/0x20 [ 119.884208][ T4351] __get_user_pages+0x1e34/0x22d0 [ 119.884220][ T4351] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 119.884236][ T4351] ? __kasan_check_write+0x18/0x20 [ 119.884252][ T4351] ? down_read_killable+0x79/0xf0 [ 119.884268][ T4351] ? populate_vma_page_range+0x230/0x230 [ 119.884289][ T4351] ? __switch_to+0xc7b/0x1310 [ 119.884313][ T4351] __gup_longterm_locked+0xcb1/0x1580 [ 119.884334][ T4351] ? __cfi___switch_to+0x10/0x10 [ 119.884358][ T4351] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 119.884377][ T4351] ? __pte_offset_map+0x1b0/0x230 [ 119.884391][ T4351] gup_fast_fallback+0x12ae/0x14a0 [ 119.884406][ T4351] ? get_user_pages_fast_only+0xc0/0xc0 [ 119.884418][ T4351] ? futex_wait_setup+0x1bc/0x260 [ 119.884432][ T4351] get_user_pages_fast+0x73/0xb0 [ 119.884444][ T4351] get_futex_key+0x24d/0x930 [ 119.884454][ T4351] ? __cfi_get_futex_key+0x10/0x10 [ 119.884464][ T4351] ? __cfi_futex_wake_mark+0x10/0x10 [ 119.884476][ T4351] futex_wake+0x120/0x900 [ 119.884488][ T4351] ? futex_wait+0x29a/0x7a0 [ 119.884499][ T4351] ? __cfi_futex_wake+0x10/0x10 [ 119.884511][ T4351] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 119.884522][ T4351] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 119.884533][ T4351] ? mas_find+0x358/0x5f0 [ 119.884543][ T4351] ? __kasan_check_write+0x18/0x20 [ 119.884557][ T4351] do_futex+0x356/0x500 [ 119.884578][ T4351] ? __cfi_do_futex+0x10/0x10 [ 119.884589][ T4351] ? __vm_munmap+0x2c7/0x370 [ 119.884600][ T4351] __se_sys_futex+0x28f/0x300 [ 119.884636][ T4351] ? __x64_sys_futex+0x110/0x110 [ 119.884648][ T4351] ? __kasan_check_write+0x18/0x20 [ 119.884662][ T4351] __x64_sys_futex+0xe9/0x110 [ 119.884674][ T4351] x64_sys_call+0x227f/0x2ee0 [ 119.884690][ T4351] do_syscall_64+0x58/0xf0 [ 119.884704][ T4351] ? clear_bhb_loop+0x50/0xa0 [ 119.884717][ T4351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.884734][ T4351] RIP: 0033:0x7ffb9b18ebe9 [ 119.884744][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.884754][ T4351] RSP: 002b:00007ffb9bf5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.884768][ T4351] RAX: ffffffffffffffda RBX: 00007ffb9b3b5fa0 RCX: 00007ffb9b18ebe9 [ 119.884781][ T4351] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000040c0 [ 119.884788][ T4351] RBP: 00007ffb9b211e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.884796][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.884803][ T4351] R13: 00007ffb9b3b6038 R14: 00007ffb9b3b5fa0 R15: 00007ffd6e50c498 [ 119.884812][ T4351] [ 120.517797][ T4412] fuseblk: Unknown parameter 'defcult' [ 120.701829][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 120.853487][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.862040][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.864234][ T4429] overlayfs: failed to resolve './file0': -2 [ 120.871085][ T10] usb 4-1: config 1 has no interface number 1 [ 120.871114][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.897525][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.906660][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.914685][ T10] usb 4-1: Product: syz [ 120.918922][ T10] usb 4-1: Manufacturer: syz [ 120.923567][ T10] usb 4-1: SerialNumber: syz [ 121.041319][ T36] audit: type=1326 audit(1756283860.436:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.0.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x0 [ 121.169192][ T36] audit: type=1326 audit(1756283860.566:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.2.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd74f8ebe9 code=0x0 [ 121.287231][ T10] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 121.295438][ T10] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 121.304957][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 121.318217][ T10] usb 4-1: USB disconnect, device number 30 [ 121.332343][ T4116] udevd[4116]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.356857][ T36] audit: type=1400 audit(1756283860.756:447): avc: denied { create } for pid=4463 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.642466][ T36] audit: type=1326 audit(1756283861.046:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb9b18ebe9 code=0x0 [ 122.102540][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 122.138162][ T4520] overlayfs: failed to clone lowerpath [ 122.252802][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.263837][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 122.272893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.281490][ T10] usb 4-1: config 0 descriptor?? [ 122.489397][ T10] prodikeys 0003:041E:2801.0010: item fetching failed at offset 3/7 [ 122.494119][ T36] audit: type=1400 audit(1756283861.896:449): avc: denied { mount } for pid=4528 comm="syz.1.1439" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.498252][ T10] prodikeys 0003:041E:2801.0010: hid parse failed [ 122.521364][ T4529] overlayfs: failed to clone upperpath [ 122.526360][ T10] prodikeys 0003:041E:2801.0010: probe with driver prodikeys failed with error -22 [ 122.563161][ T4533] overlay: ./file0 is not a directory [ 122.840120][ T4543] incfs: mount failed -22 [ 122.844746][ T4543] incfs: mount failed -22 [ 122.849199][ T4543] incfs: mount failed -22 [ 122.853714][ T4543] incfs: mount failed -22 [ 122.858123][ T4543] incfs: mount failed -22 [ 122.862581][ T4543] incfs: mount failed -22 [ 122.862987][ T36] audit: type=1326 audit(1756283862.266:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd74f8ebe9 code=0x7fc00000 [ 122.867023][ T4543] incfs: mount failed -22 [ 122.894753][ T4543] incfs: mount failed -22 [ 122.899221][ T4543] incfs: mount failed -22 [ 122.903750][ T4543] incfs: mount failed -22 [ 122.908259][ T4543] incfs: mount failed -22 [ 122.912781][ T4543] incfs: mount failed -22 [ 122.917213][ T4543] incfs: mount failed -22 [ 122.921591][ T4543] incfs: mount failed -22 [ 122.926091][ T4543] incfs: mount failed -22 [ 122.929918][ T4546] overlay: Unknown parameter 'subj_user' [ 122.930548][ T4543] incfs: mount failed -22 [ 122.940687][ T4543] incfs: mount failed -22 [ 122.945288][ T4543] incfs: mount failed -22 [ 122.949748][ T4543] incfs: mount failed -22 [ 122.954230][ T4543] incfs: mount failed -22 [ 122.958674][ T4543] incfs: mount failed -22 [ 122.963250][ T4543] incfs: mount failed -22 [ 122.967766][ T4543] incfs: mount failed -22 [ 122.972286][ T4543] incfs: mount failed -22 [ 122.976748][ T4543] incfs: mount failed -22 [ 122.981227][ T4543] incfs: mount failed -22 [ 122.985768][ T4543] incfs: mount failed -22 [ 122.990269][ T4543] incfs: mount failed -22 [ 122.994735][ T4543] incfs: mount failed -22 [ 122.999161][ T4543] incfs: mount failed -22 [ 123.003627][ T4543] incfs: mount failed -22 [ 123.008050][ T4543] incfs: mount failed -22 [ 123.012523][ T4543] incfs: mount failed -22 [ 123.016933][ T4543] incfs: mount failed -22 [ 123.021327][ T4543] incfs: mount failed -22 [ 123.025814][ T4543] incfs: mount failed -22 [ 123.030234][ T4543] incfs: mount failed -22 [ 123.034692][ T4543] incfs: mount failed -22 [ 123.039095][ T4543] incfs: mount failed -22 [ 123.043616][ T4543] incfs: mount failed -22 [ 123.048070][ T4543] incfs: mount failed -22 [ 123.052562][ T4543] incfs: mount failed -22 [ 123.057112][ T4543] incfs: mount failed -22 [ 123.061593][ T4543] incfs: mount failed -22 [ 123.066082][ T4543] incfs: mount failed -22 [ 123.070543][ T4543] incfs: mount failed -22 [ 123.075071][ T4543] incfs: mount failed -22 [ 123.079509][ T4543] incfs: mount failed -22 [ 123.084003][ T4543] incfs: mount failed -22 [ 123.088535][ T4543] incfs: mount failed -22 [ 123.093110][ T4543] incfs: mount failed -22 [ 123.097604][ T4543] incfs: mount failed -22 [ 123.102096][ T4543] incfs: mount failed -22 [ 123.105000][ T4564] netlink: 'syz.1.1450': attribute type 4 has an invalid length. [ 123.106586][ T4543] incfs: mount failed -22 [ 123.115409][ T4564] netlink: 'syz.1.1450': attribute type 4 has an invalid length. [ 123.118646][ T4543] incfs: mount failed -22 [ 123.130740][ T4543] incfs: mount failed -22 [ 123.135277][ T4543] incfs: mount failed -22 [ 123.139753][ T4543] incfs: mount failed -22 [ 123.144288][ T4543] incfs: mount failed -22 [ 123.148741][ T4543] incfs: mount failed -22 [ 123.153247][ T4543] incfs: mount failed -22 [ 123.157699][ T4543] incfs: mount failed -22 [ 123.162196][ T4543] incfs: mount failed -22 [ 123.167836][ T36] audit: type=1400 audit(1756283862.566:451): avc: denied { read } for pid=4487 comm="syz.3.1427" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.191595][ T36] audit: type=1400 audit(1756283862.566:452): avc: denied { open } for pid=4487 comm="syz.3.1427" path="/180/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.216360][ T36] audit: type=1400 audit(1756283862.566:453): avc: denied { ioctl } for pid=4487 comm="syz.3.1427" path="/180/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.242395][ T36] audit: type=1400 audit(1756283862.566:454): avc: denied { execute_no_trans } for pid=4487 comm="syz.3.1427" path="/180/file2" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.608244][ T36] audit: type=1400 audit(1756283863.006:455): avc: denied { mounton } for pid=4592 comm="syz.2.1460" path="/" dev="ramfs" ino=19593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 123.608287][ T4593] 9pnet_fd: Insufficient options for proto=fd [ 123.930797][ T36] audit: type=1326 audit(1756283863.326:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.1467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74f8ebe9 code=0x0 [ 123.960979][ T4615] netlink: 'syz.1.1468': attribute type 13 has an invalid length. [ 123.990041][ T4625] overlayfs: failed to clone upperpath [ 124.872106][ T10] usb 4-1: USB disconnect, device number 31 [ 125.046764][ T4694] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1491'. [ 125.395910][ T4727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.396191][ T4727] rust_binder: Write failure EINVAL in pid:562 [ 125.661840][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 125.727955][ T4744] overlayfs: failed to clone upperpath [ 125.742315][ T4746] overlayfs: missing 'lowerdir' [ 125.822827][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.833993][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.845141][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.854904][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.868657][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.877744][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.886389][ T10] usb 4-1: Manufacturer: syz [ 125.891491][ T10] usb 4-1: config 0 descriptor?? [ 126.099886][ T10] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 126.107585][ T10] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 126.116755][ T10] appleir 0003:05AC:8243.0011: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 126.144581][ T4784] netlink: 'syz.2.1521': attribute type 4 has an invalid length. [ 126.155873][ T4784] netlink: 'syz.2.1521': attribute type 4 has an invalid length. [ 126.831651][ T4848] bridge_slave_0: left allmulticast mode [ 126.841822][ T4848] bridge_slave_0: left promiscuous mode [ 126.847589][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.919531][ T4858] syz.0.1545 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.979892][ T4872] overlayfs: failed to clone upperpath [ 127.028576][ T36] audit: type=1400 audit(1756283866.426:457): avc: denied { setattr } for pid=4886 comm="syz.0.1554" name="kvm" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 127.055105][ T36] audit: type=1400 audit(1756283866.436:458): avc: denied { lock } for pid=4886 comm="syz.0.1554" path="socket:[19006]" dev="sockfs" ino=19006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 127.559605][ T4905] fuse: Bad value for 'fd' [ 127.763333][ T4909] 9pnet_fd: Insufficient options for proto=fd [ 127.786440][ T4913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1564'. [ 127.858564][ T4920] netlink: 'syz.1.1567': attribute type 16 has an invalid length. [ 127.866463][ T4920] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1567'. [ 127.876732][ T36] audit: type=1326 audit(1756283867.276:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9b18ebe9 code=0x7ffc0000 [ 127.900128][ T36] audit: type=1326 audit(1756283867.276:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9b18ebe9 code=0x7ffc0000 [ 128.182242][ T559] usb 4-1: USB disconnect, device number 32 [ 128.626274][ T5017] binder: Unknown parameter 'defcontext01777777777777777777777' [ 128.653085][ T5020] loop7: detected capacity change from 0 to 7 [ 128.731764][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 128.741573][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 128.802860][ T5021] rust_binder: Error while translating object. [ 128.802895][ T5021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.818493][ T5021] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 128.841621][ T5021] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:577 [ 128.927333][ T10] rust_binder: 5019: removing orphan mapping 0:24 [ 128.969305][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 128.969321][ T36] audit: type=1400 audit(1756283868.366:511): avc: denied { read } for pid=5025 comm="syz.3.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.996601][ T5026] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 128.996630][ T5026] rust_binder: Error while translating object. [ 129.008901][ T5026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.015184][ T5026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 129.317116][ T36] audit: type=1400 audit(1756283868.716:512): avc: denied { create } for pid=5042 comm="syz.0.1609" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 129.395485][ T5055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1614'. [ 129.405477][ T5055] netlink: 'syz.1.1614': attribute type 19 has an invalid length. [ 130.101241][ T36] audit: type=1400 audit(1756283869.496:513): avc: denied { write } for pid=5117 comm="syz.1.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.133026][ T5120] tmpfs: Bad value for 'uid' [ 130.144138][ T5120] tmpfs: Bad value for 'uid' [ 130.161311][ T36] audit: type=1400 audit(1756283869.556:514): avc: denied { write } for pid=5121 comm="syz.3.1639" path="socket:[20414]" dev="sockfs" ino=20414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.220717][ T5134] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 130.220744][ T5134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 130.228824][ T5134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:629 [ 130.405609][ T5151] overlayfs: failed to resolve './cgroup': -2 [ 130.536874][ T5163] overlayfs: missing 'workdir' [ 130.644357][ T5185] 9pnet_fd: Insufficient options for proto=fd [ 130.700382][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 130.700852][ T5196] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1664'. [ 130.709736][ T5195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=5195 comm=syz.1.1663 [ 131.326285][ T5232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1676'. [ 131.335487][ T5230] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1676'. [ 131.455418][ T36] audit: type=1400 audit(1756283870.856:515): avc: denied { relabelfrom } for pid=5235 comm="syz.0.1677" name="NETLINK" dev="sockfs" ino=19376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.479807][ T36] audit: type=1400 audit(1756283870.856:516): avc: denied { relabelto } for pid=5235 comm="syz.0.1677" name="NETLINK" dev="sockfs" ino=19376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 131.630658][ T5267] 9pnet_fd: Insufficient options for proto=fd [ 131.637556][ T36] audit: type=1400 audit(1756283871.036:517): avc: denied { map } for pid=5268 comm="syz.0.1688" path="socket:[20639]" dev="sockfs" ino=20639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 131.697440][ T5286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5286 comm=syz.0.1693 [ 132.296584][ T5329] overlayfs: failed to clone upperpath [ 132.309972][ T5331] bridge0: port 1(syz_tun) entered blocking state [ 132.316553][ T5331] bridge0: port 1(syz_tun) entered disabled state [ 132.324089][ T5331] syz_tun: entered allmulticast mode [ 132.329724][ T5331] syz_tun: entered promiscuous mode [ 132.335175][ T5331] bridge0: port 1(syz_tun) entered blocking state [ 132.341592][ T5331] bridge0: port 1(syz_tun) entered forwarding state [ 132.774268][ T5348] overlayfs: failed to clone upperpath [ 133.497125][ T5380] bridge0: port 3(syz_tun) entered blocking state [ 133.503662][ T5380] bridge0: port 3(syz_tun) entered disabled state [ 133.510142][ T5380] syz_tun: entered allmulticast mode [ 133.515911][ T5380] syz_tun: entered promiscuous mode [ 133.521224][ T5380] bridge0: port 3(syz_tun) entered blocking state [ 133.527681][ T5380] bridge0: port 3(syz_tun) entered forwarding state [ 133.534497][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 133.565081][ T5392] tmpfs: Bad value for 'huge' [ 133.576375][ T5395] tmpfs: Unknown parameter 'h' [ 133.791857][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 133.941846][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 133.948169][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.959106][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.968874][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.977947][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.986548][ T10] usb 4-1: config 0 descriptor?? [ 133.992369][ T10] hub 4-1:0.0: USB hub found [ 134.192257][ T10] hub 4-1:0.0: 1 port detected [ 134.794197][ T10] hub 4-1:0.0: activate --> -90 [ 135.349791][ T559] usb 4-1: USB disconnect, device number 33 [ 135.702146][ T36] audit: type=1400 audit(1756283875.106:518): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.711183][ T5421] bridge0: port 3(syz_tun) entered blocking state [ 135.728432][ T5421] bridge0: port 3(syz_tun) entered disabled state [ 135.735154][ T5421] syz_tun: entered allmulticast mode [ 135.742307][ T5421] syz_tun: entered promiscuous mode [ 136.278209][ T5476] netlink: 'syz.1.1762': attribute type 27 has an invalid length. [ 136.286156][ T5476] lo: entered promiscuous mode [ 136.290950][ T5476] lo: entered allmulticast mode [ 136.296521][ T5476] tunl0: entered promiscuous mode [ 136.301643][ T5476] tunl0: entered allmulticast mode [ 136.307590][ T5476] gre0: entered promiscuous mode [ 136.312612][ T5476] gre0: entered allmulticast mode [ 136.318043][ T5476] gretap0: entered promiscuous mode [ 136.323429][ T5476] gretap0: entered allmulticast mode [ 136.329274][ T5476] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.375004][ T36] audit: type=1326 audit(1756283875.776:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.398397][ T36] audit: type=1326 audit(1756283875.776:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.421608][ T36] audit: type=1326 audit(1756283875.776:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.444984][ T36] audit: type=1326 audit(1756283875.776:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.468177][ T36] audit: type=1326 audit(1756283875.776:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.491509][ T36] audit: type=1326 audit(1756283875.776:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.514629][ T36] audit: type=1326 audit(1756283875.776:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.537704][ T36] audit: type=1326 audit(1756283875.776:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 136.560880][ T36] audit: type=1326 audit(1756283875.776:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x50000 [ 137.214975][ T5520] 9pnet_fd: Insufficient options for proto=fd [ 137.382900][ T5560] fuseblk: Bad value for 'fd' [ 138.122069][ T5575] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 138.844666][ T5602] netlink: 'syz.0.1806': attribute type 4 has an invalid length. [ 138.852515][ T5602] netlink: 'syz.0.1806': attribute type 27 has an invalid length. [ 138.860546][ T5602] netlink: 3609 bytes leftover after parsing attributes in process `syz.0.1806'. [ 138.889451][ T5605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1807'. [ 138.973484][ T5618] rust_binder: 657: no such ref 3 [ 138.978704][ T5618] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.986443][ T5618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 138.999213][ T5623] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 139.015866][ T5623] rust_binder: Write failure EFAULT in pid:662 [ 139.057987][ T5629] binder: Unknown parameter 'contextÀ' [ 139.321832][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 139.472872][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.479523][ T10] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 139.488739][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.497970][ T10] usb 4-1: config 0 descriptor?? [ 139.551272][ T5650] overlayfs: failed to clone upperpath [ 139.551295][ T5651] overlayfs: failed to clone upperpath [ 139.766244][ T5669] fuse: Bad value for 'group_id' [ 139.771246][ T5669] fuse: Bad value for 'group_id' [ 139.778015][ T5669] fuse: Unknown parameter 'f@ôj' [ 139.784166][ T5669] overlayfs: failed to clone upperpath [ 139.908010][ T10] zeroplus 0003:0C12:0005.0012: unknown main item tag 0x0 [ 139.917883][ T10] zeroplus 0003:0C12:0005.0012: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 139.929631][ T10] zeroplus 0003:0C12:0005.0012: no inputs found [ 139.988185][ T5696] overlayfs: failed to resolve './file1': -2 [ 140.012568][ T5700] overlayfs: failed to clone upperpath [ 140.938367][ T5760] /dev/loop0: Can't lookup blockdev [ 140.953588][ T5762] overlayfs: disabling nfs_export due to verity=require [ 140.960706][ T5762] overlayfs: failed to clone upperpath [ 140.975788][ T5764] fuseblk: Bad value for 'group_id' [ 140.981071][ T5764] fuseblk: Bad value for 'group_id' [ 142.091737][ T10] usb 4-1: USB disconnect, device number 34 [ 162.686239][ T4291] bridge0: port 3(syz_tun) entered disabled state [ 162.694863][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 162.694879][ T36] audit: type=1400 audit(1756283909.090:595): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 162.723659][ T4291] syz_tun (unregistering): left allmulticast mode [ 162.730115][ T4291] syz_tun (unregistering): left promiscuous mode [ 162.736895][ T4291] bridge0: port 3(syz_tun) entered disabled state [ 162.744355][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 162.782343][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.789435][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.796661][ T5855] bridge_slave_0: entered allmulticast mode [ 162.802936][ T5855] bridge_slave_0: entered promiscuous mode [ 162.809774][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.816874][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.824013][ T5855] bridge_slave_1: entered allmulticast mode [ 162.830333][ T5855] bridge_slave_1: entered promiscuous mode [ 162.836409][ T46] bridge_slave_1: left allmulticast mode [ 162.842550][ T46] bridge_slave_1: left promiscuous mode [ 162.851173][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.859058][ T46] ªªªªª$: left allmulticast mode [ 162.864346][ T46] ªªªªª$: left promiscuous mode [ 162.869411][ T46] bridge0: port 1(ªªªªª$) entered disabled state [ 162.877517][ T46] tipc: Resetting bearer [ 162.890091][ T46] tipc: Disabling bearer [ 162.902933][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.913812][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.925257][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.937245][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.951250][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.960754][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.969029][ T10] usb 4-1: Manufacturer: syz [ 162.974548][ T5873] tipc: Enabling of bearer rejected, failed to enable media [ 162.981942][ T10] usb 4-1: config 0 descriptor?? [ 162.998811][ T46] tipc: Left network mode [ 163.008849][ T46] veth1_macvtap: left promiscuous mode [ 163.014704][ T46] veth0_vlan: left promiscuous mode [ 163.052993][ T46] vcan0 (unregistering): left allmulticast mode [ 163.113064][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.120235][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.127584][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.134637][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.154583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.161899][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.170943][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.178024][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.186917][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.193997][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.218653][ T5855] veth0_vlan: entered promiscuous mode [ 163.229240][ T5855] veth1_macvtap: entered promiscuous mode [ 163.248314][ T36] audit: type=1400 audit(1756283909.640:596): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/root/syzkaller.mqxoT6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 163.320322][ T5902] netlink: 'syz.0.1913': attribute type 4 has an invalid length. [ 163.343545][ T36] audit: type=1400 audit(1756283909.740:597): avc: denied { create } for pid=5903 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.375936][ T36] audit: type=1400 audit(1756283909.740:598): avc: denied { write } for pid=5903 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.397182][ T10] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 163.399381][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 163.412090][ T10] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 163.413602][ T36] audit: type=1400 audit(1756283909.740:599): avc: denied { nlmsg_write } for pid=5903 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.432207][ T10] appleir 0003:05AC:8243.0013: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 163.656897][ T36] audit: type=1400 audit(1756283910.050:600): avc: denied { execmem } for pid=5924 comm="syz.1.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 163.676493][ T5839] rust_binder: Write failure EFAULT in pid:678 [ 163.680710][ T10] usb 4-1: USB disconnect, device number 35 [ 163.705703][ T36] audit: type=1400 audit(1756283910.100:601): avc: denied { shutdown } for pid=5927 comm="syz.1.1921" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.187985][ T5930] rust_binder: Read failure Err(EFAULT) in pid:680 [ 164.253249][ T5945] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 164.455053][ T5960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8984 sclass=netlink_route_socket pid=5960 comm=syz.0.1933 [ 164.499051][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'. [ 165.302861][ T6014] rust_binder: Error while translating object. [ 165.302892][ T6014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.319194][ T6014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 165.731814][ T465] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 165.879792][ T36] audit: type=1326 audit(1756283912.270:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x7fc00000 [ 165.906400][ T465] usb 4-1: config 250 has an invalid interface number: 111 but max is 2 [ 165.915067][ T465] usb 4-1: config 250 has an invalid descriptor of length 1, skipping remainder of the config [ 165.924887][ T36] audit: type=1400 audit(1756283912.310:603): avc: denied { accept } for pid=6026 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.925604][ T465] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 165.954384][ T465] usb 4-1: config 250 has no interface number 0 [ 165.960663][ T465] usb 4-1: config 250 interface 111 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 165.974719][ T465] usb 4-1: config 250 interface 111 has no altsetting 0 [ 166.061098][ T6043] overlayfs: failed to resolve './file1': -2 [ 166.227744][ T6052] overlayfs: failed to clone upperpath [ 166.606047][ T36] audit: type=1400 audit(1756283913.000:604): avc: denied { write } for pid=6055 comm="syz.2.1964" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 166.768440][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1968'. [ 166.846988][ T6091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1975'. [ 166.879640][ T45] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 166.896125][ T45] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.167439][ T6122] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1985'. [ 167.351805][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.503639][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 167.511843][ T10] usb 3-1: config 1 has no interface number 0 [ 167.518047][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8 [ 167.528264][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 167.538039][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.550306][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 167.559451][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.567566][ T10] usb 3-1: Product: syz [ 167.571815][ T10] usb 3-1: Manufacturer: syz [ 167.576405][ T10] usb 3-1: SerialNumber: syz [ 167.581921][ T6119] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.589159][ T6119] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.756094][ T6128] overlay: Unknown parameter 'smackfsfloor' [ 167.840699][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 167.840716][ T36] audit: type=1400 audit(1756283914.230:606): avc: denied { setopt } for pid=6142 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.841832][ T6143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1992'. [ 167.846863][ T36] audit: type=1400 audit(1756283914.230:607): avc: denied { bind } for pid=6142 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.887569][ T6145] /dev/loop0: Can't lookup blockdev [ 168.468389][ T6160] 9pnet_fd: Insufficient options for proto=fd [ 168.502190][ T465] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01aa, bcdDevice=2f.92 [ 168.511926][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.528353][ T465] usb 4-1: can't set config #250, error -71 [ 168.536467][ T465] usb 4-1: USB disconnect, device number 36 [ 168.986821][ T6175] tipc: Enabling of bearer rejected, failed to enable media [ 169.041014][ T6190] /dev/loop0: Can't lookup blockdev [ 169.139560][ T6199] overlayfs: failed to clone upperpath [ 169.278008][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.286778][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.293946][ T6201] bridge_slave_0: entered allmulticast mode [ 169.300207][ T6201] bridge_slave_0: entered promiscuous mode [ 169.307049][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.314413][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.321513][ T6201] bridge_slave_1: entered allmulticast mode [ 169.327817][ T6201] bridge_slave_1: entered promiscuous mode [ 169.369232][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.376310][ T6201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.383633][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.390660][ T6201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.413305][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.420708][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.430761][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.437848][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.447130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.454648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.478009][ T6201] veth0_vlan: entered promiscuous mode [ 169.489263][ T6201] veth1_macvtap: entered promiscuous mode [ 169.558057][ T6217] binder: Unknown parameter 'dŽ5ɯ†™·' [ 169.603046][ T6226] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 169.652243][ T6231] __vm_enough_memory: pid: 6231, comm: syz.3.2021, bytes: 18014402804453376 not enough memory for the allocation [ 169.726939][ T6239] rust_binder: Error while translating object. [ 169.726988][ T6239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.733725][ T6239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:743 [ 169.820851][ T6254] /dev/rnullb0: Can't open blockdev [ 170.011806][ T559] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 170.107522][ T6256] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 170.108033][ T31] usb 3-1: USB disconnect, device number 2 [ 170.126131][ T6260] binder: Unknown parameter 'contextÀ' [ 170.165063][ T6268] fuse: Bad value for 'fd' [ 170.173975][ T559] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.184610][ T559] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.207281][ T559] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.216958][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.226391][ T36] audit: type=1400 audit(1756283916.630:608): avc: denied { audit_control } for pid=6269 comm="syz.2.2034" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 170.247814][ T559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.256146][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.258905][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 170.272957][ T559] usb 4-1: SerialNumber: syz [ 170.277683][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.280235][ T36] audit: type=1400 audit(1756283916.670:609): avc: denied { mounton } for pid=6271 comm="syz.1.2035" path="/8/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 170.285780][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.322030][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.329551][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.338439][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.347584][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.355102][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.362583][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.370090][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.378317][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.385816][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.393344][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.400821][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.408433][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.416025][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.424112][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.431852][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.440525][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.448035][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.455601][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.463118][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.470616][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.478297][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.485885][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.493491][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.500948][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.508846][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.516337][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.523852][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.533382][ T559] usb 4-1: 0:2 : does not exist [ 170.538898][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.547262][ T559] usb 4-1: USB disconnect, device number 37 [ 170.553561][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.561917][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.569505][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.577314][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.585056][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.592566][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.599961][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.607418][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.615310][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.622749][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.630127][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.637600][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.645010][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.653072][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.660474][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.668350][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.675866][ T36] audit: type=1400 audit(1756283917.070:610): avc: denied { setattr } for pid=6278 comm="syz.0.2037" name="KEY" dev="sockfs" ino=24883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.699363][ T6279] SELinux: Context system_u:object_r:apm_bios_t:s0 is not valid (left unmapped). [ 170.702031][ T36] audit: type=1400 audit(1756283917.100:611): avc: denied { relabelfrom } for pid=6278 comm="syz.0.2037" name="KEY" dev="sockfs" ino=24883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.708692][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.731699][ T36] audit: type=1400 audit(1756283917.130:612): avc: denied { relabelto } for pid=6278 comm="syz.0.2037" name="KEY" dev="sockfs" ino=24883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=key_socket permissive=1 trawcon="system_u:object_r:apm_bios_t:s0" [ 170.739037][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.773092][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.780503][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.787971][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.796392][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.803857][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.811270][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.818934][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.826433][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.834616][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.842094][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.849522][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.858756][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.867728][ T36] audit: type=1400 audit(1756283917.270:613): avc: denied { accept } for pid=6285 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.867995][ T6286] 9pnet_fd: Insufficient options for proto=fd [ 170.893489][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.900932][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.908439][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.917571][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.925079][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.932643][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.940275][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.947845][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.955318][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.962711][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.970227][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.978148][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.986160][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 170.993853][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.001313][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.011704][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.019184][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.020729][ T6290] overlayfs: failed to clone upperpath [ 171.026688][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.039619][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.047066][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.064913][ T6295] binder: Binderfs stats mode cannot be changed during a remount [ 171.072747][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.083187][ T36] audit: type=1400 audit(1756283917.480:614): avc: denied { mounton } for pid=6294 comm="syz.3.2043" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 171.084376][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.115220][ T36] audit: type=1400 audit(1756283917.510:615): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.115345][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.142955][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.165047][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.179334][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.196075][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.204368][ T6314] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 171.213119][ T465] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 171.228386][ T465] hid-generic 0003:0008:000F.0015: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 171.251296][ T6318] fido_id[6318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.332682][ T6328] rust_binder: Error in use_page_slow: ESRCH [ 171.332702][ T6328] rust_binder: use_range failure ESRCH [ 171.341813][ T6328] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 171.347294][ T6328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.371814][ T6328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:777 [ 171.469173][ T6332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6332 comm=syz.3.2052 [ 171.490943][ T6332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6332 comm=syz.3.2052 [ 171.565559][ T6340] KVM: debugfs: duplicate directory 6340-4 [ 171.699121][ T6348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.750677][ T6348] rust_binder: Read failure Err(EFAULT) in pid:784 [ 171.776809][ T6355] rust_binder: Error while translating object. [ 171.783573][ T6355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.789763][ T6355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:791 [ 171.896216][ T6367] rust_binder: Fixups oob 164 166 363 196 [ 171.901824][ T465] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.905427][ T6367] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 171.918700][ T6367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.927238][ T6367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 171.979806][ T6376] input: syz1 as /devices/virtual/input/input5 [ 172.023710][ T6381] netlink: 'syz.1.2070': attribute type 12 has an invalid length. [ 172.061871][ T559] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 172.069518][ T465] usb 3-1: Using ep0 maxpacket: 16 [ 172.075781][ T465] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.083927][ T465] usb 3-1: config 0 has no interface number 0 [ 172.087626][ T6382] rust_binder: Error while translating object. [ 172.090061][ T465] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.090078][ T6382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 172.090101][ T6382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 172.096277][ T465] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.134738][ T465] usb 3-1: config 0 interface 41 has no altsetting 0 [ 172.142968][ T465] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.152106][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.160094][ T465] usb 3-1: Product: syz [ 172.164330][ T465] usb 3-1: Manufacturer: syz [ 172.169194][ T465] usb 3-1: SerialNumber: syz [ 172.174331][ T465] usb 3-1: config 0 descriptor?? [ 172.179582][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.187033][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.221805][ T559] usb 4-1: Using ep0 maxpacket: 32 [ 172.227981][ T559] usb 4-1: config 0 has no interfaces? [ 172.233633][ T559] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.242881][ T559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.251431][ T559] usb 4-1: config 0 descriptor?? [ 172.395298][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.402572][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.458499][ T559] usb 4-1: USB disconnect, device number 38 [ 172.824714][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.825478][ T465] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 172.833722][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.985263][ T6392] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2073'. [ 172.985283][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 172.985294][ T36] audit: type=1400 audit(1756283919.380:620): avc: denied { nlmsg_read } for pid=6390 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.995175][ T6391] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2073'. [ 173.074646][ T36] audit: type=1400 audit(1756283919.470:621): avc: denied { create } for pid=6395 comm="syz.3.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 173.094699][ T36] audit: type=1400 audit(1756283919.470:622): avc: denied { sys_admin } for pid=6395 comm="syz.3.2074" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 173.203168][ T36] audit: type=1400 audit(1756283919.600:623): avc: denied { create } for pid=6404 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 173.641673][ T36] audit: type=1400 audit(1756283920.030:624): avc: denied { read } for pid=6418 comm="syz.1.2082" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.664421][ T36] audit: type=1400 audit(1756283920.030:625): avc: denied { open } for pid=6418 comm="syz.1.2082" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.675558][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 173.756793][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 173.768295][ T6423] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 173.768319][ T6423] rust_binder: Error while translating object. [ 173.777444][ T6423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.784014][ T6423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 173.823800][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.090524][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2090'. [ 174.125181][ T6441] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2090'. [ 174.637967][ T6491] SELinux: Context /dev/ptmx is not valid (left unmapped). [ 174.646123][ T36] audit: type=1400 audit(1756283921.040:626): avc: denied { relabelto } for pid=6490 comm="syz.3.2106" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/dev/ptmx" [ 174.673042][ T36] audit: type=1400 audit(1756283921.040:627): avc: denied { associate } for pid=6490 comm="syz.3.2106" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=56 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/dev/ptmx" [ 174.834796][ T45] usb 3-1: USB disconnect, device number 3 [ 174.844988][ T6513] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.853700][ T6513] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 174.862410][ T6513] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.871017][ T6513] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 174.987640][ T6538] 9pnet_fd: Insufficient options for proto=fd [ 175.044056][ T6542] IPv6: Can't replace route, no match found [ 175.118422][ T6554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.119872][ T6553] rust_binder: Write failure EFAULT in pid:72 [ 175.126746][ T6554] rust_binder: Write failure EFAULT in pid:72 [ 175.148892][ T6556] rust_binder: Error while translating object. [ 175.155265][ T6556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.163253][ T6556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 175.190378][ T6558] rust_binder: Write failure EFAULT in pid:77 [ 175.221213][ T6561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.352722][ T36] audit: type=1326 audit(1756283921.750:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6572 comm="syz.0.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8e18ebe9 code=0x0 [ 175.861795][ T488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.893174][ T6614] overlayfs: failed to resolve './file1': -2 [ 176.045369][ T36] audit: type=1326 audit(1756283922.440:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.2150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8af78ebe9 code=0x0 [ 176.205491][ T6634] overlayfs: failed to clone upperpath [ 176.251702][ T6640] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 176.259198][ T6640] rust_binder: Write failure EINVAL in pid:91 [ 176.343601][ T559] rust_binder: 6644: removing orphan mapping 0:24 [ 176.390909][ T6654] netlink: 'syz.2.2159': attribute type 27 has an invalid length. [ 176.407756][ T6659] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 176.731781][ T559] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 176.893696][ T559] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 176.919293][ T559] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 176.936019][ T559] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 176.957699][ T559] usb 3-1: string descriptor 0 read error: -22 [ 176.965975][ T559] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.975133][ T559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.984315][ T6666] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.202510][ T559] cdc_ncm 3-1:1.0: bind() failure [ 177.210611][ T559] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 177.217463][ T559] cdc_ncm 3-1:1.1: bind() failure [ 177.223457][ T559] usb 3-1: USB disconnect, device number 4 [ 177.879514][ T6734] fuseblk: Bad value for 'fd' [ 177.916910][ T6741] binder: Bad value for 'defcontext' [ 177.931911][ T6746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.992747][ T6747] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 177.992755][ T6744] rust_binder: Error in use_page_slow: ESRCH [ 177.992774][ T6747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 177.999241][ T6744] rust_binder: use_range failure ESRCH [ 178.007588][ T6747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:135 [ 178.013530][ T6744] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 178.037442][ T6744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.045785][ T6744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:135 [ 179.180156][ T6802] incfs_lookup_dentry err:-13 [ 179.218059][ T6805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.218710][ T6804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.225480][ T6804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 179.235374][ T6804] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 179.244734][ T6804] rust_binder: Read failure Err(EFAULT) in pid:161 [ 179.301781][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.393745][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 179.462880][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.473128][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 179.487765][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.497372][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.509195][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.516717][ T45] usb 2-1: SerialNumber: syz [ 179.574295][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 179.652730][ T6854] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 179.671917][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 179.678380][ T330] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 179.688612][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.699860][ T330] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.711016][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.720460][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.734473][ T330] usb 3-1: SerialNumber: syz [ 179.744005][ T6807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.930813][ T45] usb 2-1: USB disconnect, device number 7 [ 179.960753][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.971942][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.044508][ T330] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 180.056852][ T330] usb 3-1: USB disconnect, device number 5 [ 180.373763][ T6874] netlink: 'syz.0.2231': attribute type 13 has an invalid length. [ 180.562213][ T3602] bridge0: port 1(syz_tun) entered disabled state [ 180.567129][ T6897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44675 sclass=netlink_tcpdiag_socket pid=6897 comm=syz.3.2241 [ 180.583504][ T3602] syz_tun (unregistering): left allmulticast mode [ 180.590296][ T3602] syz_tun (unregistering): left promiscuous mode [ 180.598542][ T3602] bridge0: port 1(syz_tun) entered disabled state [ 180.619149][ T6902] netlink: 'syz.3.2243': attribute type 3 has an invalid length. [ 180.648296][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.656003][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.663482][ T6895] bridge_slave_0: entered allmulticast mode [ 180.670060][ T6895] bridge_slave_0: entered promiscuous mode [ 180.676678][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.683910][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.691250][ T6895] bridge_slave_1: entered allmulticast mode [ 180.698757][ T6895] bridge_slave_1: entered promiscuous mode [ 180.746274][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.755791][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.765223][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.769048][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.783029][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.792487][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.796916][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.808747][ T6895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.811826][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.816035][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.825490][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.832179][ T6895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.849380][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.849830][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.865945][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.866166][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.883858][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.895234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.901809][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.902299][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.911462][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.928543][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.929814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.937904][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.944984][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.961501][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 180.966778][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.976239][ T45] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 180.984190][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 180.993695][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.003397][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.013770][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.023301][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.023928][ T6895] veth0_vlan: entered promiscuous mode [ 181.032869][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.047702][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.058119][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.067662][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.068607][ T6895] veth1_macvtap: entered promiscuous mode [ 181.077041][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.077116][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.102205][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.111561][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.121075][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.130622][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.140012][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.151878][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.161430][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.170797][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.180106][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.190489][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.202457][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.211815][ T6926] usb usb6: usbfs: process 6926 (syz.2.2249) did not claim interface 0 before use [ 181.211884][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.232138][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.250476][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.267332][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.276533][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.286730][ T45] usb 2-1: config 0 descriptor?? [ 181.302738][ T45] hub 2-1:0.0: Invalid hub with more than one config or interface [ 181.310634][ T45] hub 2-1:0.0: probe with driver hub failed with error -22 [ 181.508447][ T45] usb 2-1: USB disconnect, device number 8 [ 181.644627][ T6970] rust_binder: Error while translating object. [ 181.644675][ T6970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.650973][ T6970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 182.035010][ T7000] netlink: 'syz.1.2270': attribute type 4 has an invalid length. [ 182.052412][ T7000] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2270'. [ 182.233443][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 182.233460][ T36] audit: type=1400 audit(1756283928.630:634): avc: denied { append } for pid=7016 comm="syz.1.2275" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.263436][ T36] audit: type=1326 audit(1756283928.650:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.3.2272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8af78ebe9 code=0x0 [ 182.425677][ T7024] SELinux: failed to load policy [ 182.425906][ T36] audit: type=1400 audit(1756283928.820:636): avc: denied { load_policy } for pid=7022 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.431304][ T7024] ------------[ cut here ]------------ [ 182.456277][ T7024] WARNING: CPU: 0 PID: 7024 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 182.465700][ T7024] Modules linked in: [ 182.469625][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.1.2276 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 182.481215][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.491360][ T7024] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 182.497301][ T7024] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f1 25 ee 05 00 0f 85 be 00 00 00 c6 05 e4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 182.517028][ T7024] RSP: 0018:ffffc9000fc77680 EFLAGS: 00010246 [ 182.523259][ T7024] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 182.531244][ T7024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fc77738 [ 182.539255][ T7024] RBP: ffffc9000fc777a8 R08: ffffc9000fc77737 R09: 0000000000000000 [ 182.547247][ T7024] R10: ffffc9000fc77720 R11: fffff52001f8eee7 R12: ffffc9000fc776c0 [ 182.555241][ T7024] R13: dffffc0000000000 R14: 1ffff92001f8eed4 R15: 0000000000000000 [ 182.563230][ T7024] FS: 00007fa12a7426c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 182.572181][ T7024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.578766][ T7024] CR2: 0000200000001000 CR3: 000000012c9ac000 CR4: 00000000003526b0 [ 182.586947][ T7024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000008d00c0ed [ 182.594990][ T7024] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 182.602991][ T7024] Call Trace: [ 182.606262][ T7024] [ 182.609175][ T7024] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 182.614919][ T7024] ? kasan_save_alloc_info+0x40/0x50 [ 182.620208][ T7024] ? __kasan_slab_alloc+0x73/0x90 [ 182.625291][ T7024] ? hashtab_init+0xdb/0x1f0 [ 182.629875][ T7024] ___kmalloc_large_node+0x9c/0x1d0 [ 182.635092][ T7024] ? ebitmap_read+0x21d/0x990 [ 182.639787][ T7024] ? hashtab_init+0xdb/0x1f0 [ 182.644391][ T7024] __kmalloc_large_node_noprof+0x1e/0xe0 [ 182.650025][ T7024] ? hashtab_init+0xdb/0x1f0 [ 182.654636][ T7024] __kmalloc_noprof+0x26d/0x450 [ 182.659490][ T7024] hashtab_init+0xdb/0x1f0 [ 182.663984][ T7024] ? policydb_read+0x86f/0x28c0 [ 182.668839][ T7024] symtab_init+0x44/0x70 [ 182.673095][ T7024] policydb_read+0x8fe/0x28c0 [ 182.677774][ T7024] ? kasan_save_alloc_info+0x40/0x50 [ 182.683161][ T7024] ? __cfi_policydb_read+0x10/0x10 [ 182.688277][ T7024] ? security_load_policy+0x128/0x12f0 [ 182.693762][ T7024] security_load_policy+0x162/0x12f0 [ 182.699043][ T7024] ? __kasan_check_write+0x18/0x20 [ 182.704168][ T7024] ? _raw_spin_lock+0x8c/0x120 [ 182.708956][ T7024] ? __cfi__raw_spin_lock+0x10/0x10 [ 182.714182][ T7024] ? sel_write_load+0x226/0x5e0 [ 182.719039][ T7024] ? vmalloc_noprof+0xfd/0x1d0 [ 182.723831][ T7024] ? _raw_spin_unlock+0x45/0x60 [ 182.728695][ T7024] ? __cfi_security_load_policy+0x10/0x10 [ 182.734429][ T7024] ? __kasan_check_write+0x18/0x20 [ 182.739545][ T7024] sel_write_load+0x298/0x5e0 [ 182.744257][ T7024] ? futex_wait+0x29a/0x7a0 [ 182.748759][ T7024] ? __cfi_sel_write_load+0x10/0x10 [ 182.754099][ T7024] ? __cfi_futex_wait+0x10/0x10 [ 182.758957][ T7024] ? bpf_lsm_file_permission+0xd/0x20 [ 182.764345][ T7024] ? __cfi_sel_write_load+0x10/0x10 [ 182.769541][ T7024] vfs_write+0x3c0/0xe80 [ 182.773815][ T7024] ? __cfi_vfs_write+0x10/0x10 [ 182.778578][ T7024] ? __kasan_check_write+0x18/0x20 [ 182.783699][ T7024] ? mutex_lock+0x92/0x1c0 [ 182.788112][ T7024] ? __cfi_mutex_lock+0x10/0x10 [ 182.792987][ T7024] ? __fget_files+0x2c5/0x340 [ 182.797661][ T7024] ksys_write+0x141/0x250 [ 182.802000][ T7024] ? xfd_validate_state+0x68/0x150 [ 182.807118][ T7024] ? __cfi_ksys_write+0x10/0x10 [ 182.811985][ T7024] ? __kasan_check_write+0x18/0x20 [ 182.817098][ T7024] ? fpregs_restore_userregs+0x11d/0x260 [ 182.822763][ T7024] __x64_sys_write+0x7f/0x90 [ 182.827352][ T7024] x64_sys_call+0x271c/0x2ee0 [ 182.832054][ T7024] do_syscall_64+0x58/0xf0 [ 182.836469][ T7024] ? clear_bhb_loop+0x50/0xa0 [ 182.841138][ T7024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.847049][ T7024] RIP: 0033:0x7fa12998ebe9 [ 182.851466][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.871179][ T7024] RSP: 002b:00007fa12a742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.879626][ T7024] RAX: ffffffffffffffda RBX: 00007fa129bb6090 RCX: 00007fa12998ebe9 [ 182.887647][ T7024] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 182.895666][ T7024] RBP: 00007fa129a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 182.903698][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.911733][ T7024] R13: 00007fa129bb6128 R14: 00007fa129bb6090 R15: 00007ffd73bdd428 [ 182.919798][ T7024] [ 182.922855][ T7024] ---[ end trace 0000000000000000 ]--- [ 182.928440][ T7024] SELinux: failed to load policy