last executing test programs: 16.195390603s ago: executing program 0 (id=1456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='Pb{') syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffc53, &(0x7f00000002c0)="b9425b446512d23236973599b76c470539") syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGRDESC(r3, 0x40086602, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xffffe000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.188328703s ago: executing program 2 (id=1457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x6, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(0x5) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r4, r5, &(0x7f0000000140)=0x7fffffff, 0x9e7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x4, 0x0, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x40}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x1, 0x200000}}, &(0x7f00000004c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x6, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) close(0x5) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) close(0x5) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendfile(r4, r5, &(0x7f0000000140)=0x7fffffff, 0x9e7) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x4, 0x0, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x40}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x1, 0x200000}}, &(0x7f00000004c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 16.183074753s ago: executing program 2 (id=1458): read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$pid(0x2, r0, 0x2004) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x74) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="150000006588ffff0600000008003950323030302e75"], 0x15) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x800, 0x6}) write$cgroup_devices(r2, &(0x7f0000002200)={'b', ' *:* ', 'rwm\x00'}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) 16.125560624s ago: executing program 2 (id=1459): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = dup2(r2, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x191, &(0x7f0000000080)={0x0, 0x20c86a, 0x0, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000000140), &(0x7f00000001c0)) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000180)={0x9, 0x2, 0x9}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) dup2(r2, r2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) close(r4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x191, &(0x7f0000000080)={0x0, 0x20c86a, 0x0, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000000140), &(0x7f00000001c0)) (async) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000180)={0x9, 0x2, 0x9}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) (async) 16.119600214s ago: executing program 2 (id=1460): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) dup(r0) getpgid(0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x10, 0x6, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8008, 0x8, 0x8000, 0xfffffffd}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000004c0)) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB], 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6, 0x20}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x200000077, 0x50f240) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r8, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f0000000240)={&(0x7f0000000100)="ff86f24f883ccdf0ee1e7be5997430090c337bec84c0be9196f4023d1f6d7e7c13354e19288ce241d4cb7378fd0e08a1fc516c8d935f1d92dd5e6b275740007048c11637521a4e87d12ba9cc39bb713a453a241319f55417ae6065def8b8f88483ae2f10d73982e55965c464d7a849857eb0594a749fa284b3ec9b2260fa83", 0x7f}, 0x1, 0x0, 0x0, 0x4040810}, 0x2000c840) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 16.119032624s ago: executing program 2 (id=1461): r0 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(r0, &(0x7f0000009fc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10000, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 15.481112014s ago: executing program 0 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001140)=0x80, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000006cc0), &(0x7f0000006d00)=0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r6, 0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}]}]}]}, 0x38}}, 0xc000) 15.421128215s ago: executing program 0 (id=1469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xb8, 0x0, &(0x7f00000002c0)="93ca2efc9445b68c079d41dcfff0669c8c01c29113ed78c691e4a88534e71804ab594c9c0cea00e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a9c8c88b839f34e33a468cd32768cf339b2e678b4c3760ea65276329e3d0b3b9f595cabbd873b426fa6b1014bda770cac3f165f8815b280fba99733be55aab8d26d0779511e270d08a4282a747b95fb43bb740a9a262d3500214f69c3b0926544a1babc3e0fcd21862cebb7d76e00b323"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read(r1, &(0x7f00000001c0)=""/157, 0x9d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 15.355096026s ago: executing program 0 (id=1471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000300)="05030500d3fc0300000047888005091088a8", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x400000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) (async) sendto$packet(r3, &(0x7f0000000300)="05030500d3fc0300000047888005091088a8", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x400000000) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) (async) 15.350255186s ago: executing program 0 (id=1472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000340)={0x40, 0x4, 0xf7, {0xf7, 0x23, "86ba734e191c891521a86960c0ef62e07b10311646b221aacb93349a4c6d60230722b06cd59f156613e1dbf81cbb5bf836d80bc7a5ab0dcd192c28434e965fbfa999c64473c25df4ce267ce8b23ee636f64b5212a1496b26fecce827b89bfd5286a2fd97a08a67f8aad2d9b1b48e17754cd010d7d7e76e2c54d1df0b3a502b14c2df5f6ce83503992bc5dfeba80e00eee5a16862f0e81509df1c60a64b7d60b44b55fd9c6b6a20169f799c509319e4316ef1a548f475cb1cb5c3f073b746951d45ce2c17fd69021a82070c36ff2bf8a7309e53a3efa0176982eff26ae1ae5ee95ecdda0fc8768d72390c7c1f63d2fdd7c56bc75552"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000440)={0x0, 0xf, 0xde, {0x5, 0xf, 0xde, 0x5, [@generic={0xb3, 0x10, 0x1, "6b09d84791de043dfdece4f225e30b1462730697e87dfbe7947ea49e5fa3b58f48ed8d386d256db6da7d7f6f9335fe987937440a25f6b088c1ae86d6ff5a9d2fd8c441cdc98a13e19bc2fbb805658311a37a82338e8f40d678d5d867253b47b574c32d2e54b0a06385c92db5d40ac90dfc9323e12c4ae597b83eff3b564371f8fe2d27bbb942c22de3d32053cbcb9adcfc7684d7c521022a413ab52b3648abf264cd952a31d9accf693291f0de44c292"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x64, 0x8, 0x6, 0x0, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x3, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x4, 0x6, "7e69d725", "d435c73e"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0xff, 0x1, 0x1, 0x800, 0x8}}}, &(0x7f0000001940)={0x84, &(0x7f0000000200)={0x20, 0x1, 0x1a, "63a604bd2567a0f2b075d7461de91c05cc4753e3fc90598da27c"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0xc0, 0xa4}}, &(0x7f0000001680)={0x40, 0x7, 0x2}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001700)={0x40, 0xb, 0x2, 'hN'}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="3b7a875d1ae4"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001800)={0x40, 0x19, 0x2, "5512"}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x33}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0xb}, &(0x7f00000018c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xd}}) 15.278380287s ago: executing program 2 (id=1475): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "e5cf90d575619bf70d717b09a75040d67944bdf74658aa573ec7ec15145ed632c300cceb6d2f7873f7ab9055774306282c82cc00", 0x2f}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/ip6_tables_targets\x00') fchdir(r3) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) stat(0x0, &(0x7f0000000300)) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0xb21e0000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) mount$9p_xen(&(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x1030001, &(0x7f00000004c0)={'trans=xen,', {[{@directio}, {@directio}, {@directio}, {@version_9p2000}, {@noextend}, {@msize={'msize', 0x3d, 0x5}}, {@cache_readahead}, {@noxattr}]}}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) sendfile(r1, r1, 0x0, 0x7ffff000) 14.817617944s ago: executing program 0 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r1, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0xc00) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 14.494288989s ago: executing program 1 (id=1484): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa651]}}, 0x5c) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0x2020) 14.479277019s ago: executing program 3 (id=1485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f2}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8c, 0x0, 0x800000000000000}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 14.459610299s ago: executing program 1 (id=1486): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="1400000000000000290000000000000000000006000000001400000000000000290000000b0000000000000600000000"], 0x30}, 0x4051) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 14.39738095s ago: executing program 3 (id=1487): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x718]}, 0x8) r3 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=""/137, &(0x7f0000000180)=""/22}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000240)=0x40) 14.39316838s ago: executing program 3 (id=1488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0xa0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d4, 0x2b}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x200000, 0x7}, {0x40003, 0x6, 0xda91}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0xd}]}, 0xf8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000005c0)=0x7, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000005c0)=0x7, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 14.292044682s ago: executing program 3 (id=1489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fallocate(r2, 0x10, 0x7fffffffffffffff, 0x1000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 14.263773062s ago: executing program 3 (id=1490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x18, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) 14.197301304s ago: executing program 3 (id=1491): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x1100) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x33) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='.dead\x00', 0x0, &(0x7f0000004a80)="48c1d4f0433d197946d0e1228cf0b94567cc25c7ae4aa8f7be2c3d18848f340211aba6db15e5bf5e7c5e33eb8ba3f051686c7a84ed4c4c48cbc504e65ae91a4adfea5d6185e6a7a0922d09b7f1e0b993a26fceed076fbc47eb4bc0894acfcca4818cad625776dfc2a1bda8d6002edb836092b75d1761ccd5b5f7bdbae5d789bedca5ad1642e33147a7f637aa401447eb325ae6017192135fbce1b5bac3c3801e68ee8cb2aa5999bda6c1c8ed54eedba1fce0fd0616b3f08a923c8e2d77e3dd052cd6a91c82b3562308fb289a0f2de4586a328bb77e981805121c32ab17f40d03ae269e2845c277a4121163f8f3314f59fa446727e6afe6534674df5ceabd8f2712e3b998d58553ffe178e0c98ce58dbd18d81cb7e5fab206a7047db0ce73bdb906059aeb9bcde40f6c8c02e4dd7437aef4f8e0b41fc5328c7dd6dbe4f7d3b50d05e5e9d5d8299321e873d1607cbb88dfcdb37c2632c59403fd159927a9dcd0fb9abc6c55b63f3c3c4734b6ab44f48a365e6c1ffc261c862f399c60c11b8135aaf4103788b3b85116841b2d268f1a97519243af5ffef28b8c831abb0d449e77c968690ef322200378038cf0d2f241529aec31a644df0705bcbd280a613959eb71e23f17634deeaa8960bfcd", 0x1cb, r2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20) r5 = socket(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de29a34", 0x1e) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000040)='*\"', 0x2, 0x8, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@sg0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x528b8000) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, &(0x7f0000002a40)={0x2020, 0x0, 0x0}, 0x2052) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) creat(&(0x7f0000000340)='./file0\x00', 0x41) 14.196948213s ago: executing program 1 (id=1492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)={0x20, r3, 0x2eae5a70e8ad07e7, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (rerun: 64) fcntl$setlease(r4, 0x400, 0x1) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000014c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 14.184449664s ago: executing program 1 (id=1493): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x20000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xffffffffffffffd1, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ptrace$setregset(0x4205, r1, 0x2, &(0x7f00000001c0)={0x0}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0xc0e4, 0x10280) ioctl$BLKRRPART(r6, 0x125f, 0x0) 14.148857314s ago: executing program 1 (id=1494): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/255, 0xff, 0x0, 0x33}, @fda={0x66646185, 0x3, 0x0, 0x2b}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x1000}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 14.093419955s ago: executing program 1 (id=1495): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) munmap(&(0x7f000036c000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@mcast2}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = socket$pptp(0x18, 0x1, 0x2) fremovexattr(r0, &(0x7f0000002e00)=@known='system.sockprotoname\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getpeername$packet(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="728effff", @ANYRES16=r3, @ANYBLOB="10002cbd7000fddbdf250300000006000a004e230000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, &(0x7f0000000040)) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000006c0)='\x00\x00\x03\t\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\x80\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\b\xd0\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=vj<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d\n\xce\f\xba\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xa9\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x00\x13P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xbeMk\xe0C\xc3\aSH\xe0\xf2\x0f\'z8\xbe\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\a\x00\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+p\x00\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc2\x00\x00\x00\x00\x00\x00\x04<\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|\x18\bb\x82\x8f\xc0\xab\xe3a`z\x06\x00\x00\x00\x00\x00\x00\x00\\\xf2\xd5\b\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 0s ago: executing program 32 (id=1475): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "e5cf90d575619bf70d717b09a75040d67944bdf74658aa573ec7ec15145ed632c300cceb6d2f7873f7ab9055774306282c82cc00", 0x2f}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/ip6_tables_targets\x00') fchdir(r3) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) stat(0x0, &(0x7f0000000300)) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0xb21e0000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) mount$9p_xen(&(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x1030001, &(0x7f00000004c0)={'trans=xen,', {[{@directio}, {@directio}, {@directio}, {@version_9p2000}, {@noextend}, {@msize={'msize', 0x3d, 0x5}}, {@cache_readahead}, {@noxattr}]}}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) sendfile(r1, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.209' (ED25519) to the list of known hosts. [ 25.951215][ T36] audit: type=1400 audit(1750701904.080:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.952910][ T281] cgroup: Unknown subsys name 'net' [ 25.975201][ T36] audit: type=1400 audit(1750701904.080:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.007386][ T36] audit: type=1400 audit(1750701904.110:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.007688][ T281] cgroup: Unknown subsys name 'devices' [ 26.185435][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.192739][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.288145][ T36] audit: type=1400 audit(1750701904.420:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.315973][ T36] audit: type=1400 audit(1750701904.420:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.330501][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.342853][ T36] audit: type=1400 audit(1750701904.420:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.378446][ T36] audit: type=1400 audit(1750701904.490:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.408389][ T36] audit: type=1400 audit(1750701904.490:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.445989][ T36] audit: type=1400 audit(1750701904.580:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.446656][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.473694][ T36] audit: type=1400 audit(1750701904.580:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.832385][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.839915][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.847928][ T288] bridge_slave_0: entered allmulticast mode [ 27.855129][ T288] bridge_slave_0: entered promiscuous mode [ 27.873424][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.881084][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.888847][ T288] bridge_slave_1: entered allmulticast mode [ 27.895864][ T288] bridge_slave_1: entered promiscuous mode [ 28.023730][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.031755][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.039979][ T289] bridge_slave_0: entered allmulticast mode [ 28.046957][ T289] bridge_slave_0: entered promiscuous mode [ 28.066251][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.075785][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.084737][ T289] bridge_slave_1: entered allmulticast mode [ 28.092637][ T289] bridge_slave_1: entered promiscuous mode [ 28.109114][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.116548][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.124616][ T290] bridge_slave_0: entered allmulticast mode [ 28.133106][ T290] bridge_slave_0: entered promiscuous mode [ 28.140947][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.149560][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.159872][ T290] bridge_slave_1: entered allmulticast mode [ 28.169644][ T290] bridge_slave_1: entered promiscuous mode [ 28.206280][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.215704][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.223557][ T291] bridge_slave_0: entered allmulticast mode [ 28.230311][ T291] bridge_slave_0: entered promiscuous mode [ 28.238131][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.246543][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.255462][ T291] bridge_slave_1: entered allmulticast mode [ 28.264329][ T291] bridge_slave_1: entered promiscuous mode [ 28.361598][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.370037][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.377868][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387198][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.463991][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.471450][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.480461][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.488453][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.502790][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.510592][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.520407][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.527713][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.550769][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.558599][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.566284][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.573905][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.592889][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.601879][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.610639][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.619462][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.627778][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.636828][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.644706][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.653469][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.664696][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.672269][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.690220][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.697596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.724601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.732086][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.740721][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.748103][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.763187][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.771532][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.791703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.799366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.822567][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.829638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.838641][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.846047][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.879891][ T288] veth0_vlan: entered promiscuous mode [ 28.895604][ T289] veth0_vlan: entered promiscuous mode [ 28.909941][ T288] veth1_macvtap: entered promiscuous mode [ 28.939247][ T289] veth1_macvtap: entered promiscuous mode [ 28.963508][ T290] veth0_vlan: entered promiscuous mode [ 28.977879][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.989142][ T290] veth1_macvtap: entered promiscuous mode [ 29.003058][ T291] veth0_vlan: entered promiscuous mode [ 29.067837][ T291] veth1_macvtap: entered promiscuous mode [ 29.310159][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.423109][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.574988][ T63] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 29.584331][ T63] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 29.596427][ T63] usb 4-1: config 220 has no interface number 2 [ 29.603777][ T63] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 29.618656][ T63] usb 4-1: config 220 interface 0 has no altsetting 0 [ 29.631123][ T63] usb 4-1: config 220 interface 76 has no altsetting 0 [ 29.651346][ T63] usb 4-1: config 220 interface 1 has no altsetting 0 [ 29.660534][ T63] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 29.670882][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.680220][ T63] usb 4-1: Product: syz [ 29.691815][ T63] usb 4-1: Manufacturer: syz [ 29.699475][ T63] usb 4-1: SerialNumber: syz [ 29.715085][ T359] netlink: 188 bytes leftover after parsing attributes in process `syz.1.16'. [ 29.726209][ T359] binder: Bad value for 'max' [ 29.756529][ T361] ======================================================= [ 29.756529][ T361] WARNING: The mand mount option has been deprecated and [ 29.756529][ T361] and is ignored by this kernel. Remove the mand [ 29.756529][ T361] option from the mount to silence this warning. [ 29.756529][ T361] ======================================================= [ 29.842430][ T366] binder: Bad value for 'stats' [ 29.913519][ T63] usb 4-1: selecting invalid altsetting 0 [ 29.919940][ T63] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 29.928131][ T63] usb 4-1: No valid video chain found. [ 29.944566][ T63] usb 4-1: USB disconnect, device number 2 [ 29.965844][ T376] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 30.140805][ T399] syzkaller0: entered promiscuous mode [ 30.148960][ T399] syzkaller0: entered allmulticast mode [ 30.162299][ T306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.233820][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 30.259669][ T411] binder: Unknown parameter 'subj_role' [ 30.312693][ T306] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 30.323523][ T306] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 30.332120][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.343226][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.354334][ T306] usb 1-1: config index 1 descriptor too short (expected 1060, got 36) [ 30.363505][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.376114][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.386970][ T306] usb 1-1: config index 2 descriptor too short (expected 1060, got 36) [ 30.396829][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.408955][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.420646][ T306] usb 1-1: config index 3 descriptor too short (expected 1060, got 36) [ 30.430258][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.442470][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.459144][ T306] usb 1-1: config index 4 descriptor too short (expected 1060, got 36) [ 30.469074][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.480842][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.491709][ T306] usb 1-1: config index 5 descriptor too short (expected 1060, got 36) [ 30.500326][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.511761][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.526444][ T306] usb 1-1: config index 6 descriptor too short (expected 1060, got 36) [ 30.534904][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.546392][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.552363][ T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.559075][ T306] usb 1-1: config index 7 descriptor too short (expected 1060, got 36) [ 30.576133][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.588958][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.603910][ T306] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 30.613987][ T306] usb 1-1: New USB device strings: Mfr=56, Product=78, SerialNumber=145 [ 30.625051][ T306] usb 1-1: Product: syz [ 30.629636][ T306] usb 1-1: Manufacturer: syz [ 30.635280][ T306] usb 1-1: SerialNumber: syz [ 30.642110][ T306] usb 1-1: config 0 descriptor?? [ 30.700376][ T422] FAT-fs (rnullb0): bogus number of reserved sectors [ 30.711774][ T422] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 30.719149][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 30.726849][ T63] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 30.736290][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.748258][ T63] usb 3-1: config 1 has no interface number 1 [ 30.755014][ T63] usb 3-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 30.770863][ T63] usb 3-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 30.786114][ T63] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 30.795715][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.804169][ T63] usb 3-1: Product: syz [ 30.808602][ T63] usb 3-1: Manufacturer: syz [ 30.813796][ T63] usb 3-1: SerialNumber: syz [ 30.878247][ T306] usbhid 1-1:0.0: can't add hid device: -22 [ 30.885987][ T306] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 30.899377][ T306] usb 1-1: USB disconnect, device number 2 [ 31.292540][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.369699][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 31.369720][ T36] audit: type=1400 audit(1750701909.500:158): avc: denied { bind } for pid=428 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.398898][ T36] audit: type=1400 audit(1750701909.530:159): avc: denied { create } for pid=428 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.427381][ T36] audit: type=1400 audit(1750701909.530:160): avc: denied { write } for pid=428 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.456761][ T436] tap0: tun_chr_ioctl cmd 2148553947 [ 31.472995][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 31.480376][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 31.491995][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.495778][ T438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.502271][ T36] audit: type=1400 audit(1750701909.630:161): avc: denied { call } for pid=433 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.529019][ T49] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 31.543362][ T49] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.554467][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.563766][ T49] usb 2-1: Product: syz [ 31.569790][ T49] usb 2-1: Manufacturer: syz [ 31.595450][ T440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 31.596538][ T63] usb 3-1: USB disconnect, device number 2 [ 31.604732][ T49] usb 2-1: SerialNumber: syz [ 31.611669][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 31.630226][ T36] audit: type=1400 audit(1750701909.760:162): avc: denied { read } for pid=439 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.690492][ T36] audit: type=1400 audit(1750701909.820:163): avc: denied { write } for pid=439 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.695668][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 31.710814][ T441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 31.759092][ T36] audit: type=1400 audit(1750701909.890:164): avc: denied { unmount } for pid=442 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.789838][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.942379][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 31.949069][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.961597][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.972360][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.979654][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 31.990157][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.000115][ T31] usb 4-1: config 0 descriptor?? [ 32.050591][ T49] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 32.351691][ T451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 32.361336][ T451] bridge_slave_1: left allmulticast mode [ 32.368528][ T451] bridge_slave_1: left promiscuous mode [ 32.375819][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.384645][ T451] bridge_slave_0: left allmulticast mode [ 32.392578][ T451] bridge_slave_0: left promiscuous mode [ 32.401824][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.463085][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.471049][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.480216][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.487666][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.495928][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.503470][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.511259][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.520446][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.531342][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.533657][ T36] audit: type=1400 audit(1750701910.660:165): avc: denied { mount } for pid=456 comm="syz.0.44" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 32.539545][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.573358][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x7 [ 32.590119][ T36] audit: type=1400 audit(1750701910.720:166): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 32.612029][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.619446][ T36] audit: type=1400 audit(1750701910.750:167): avc: denied { read } for pid=458 comm="syz.0.45" dev="nsfs" ino=4026532403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.622529][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.650685][ T459] 9pnet_fd: Insufficient options for proto=fd [ 32.656745][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.663877][ T436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.671184][ T436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:14 [ 32.672110][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.712383][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.723588][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.730760][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.738393][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.746599][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.763577][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.772777][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.780099][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.787521][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.798465][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.805633][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.827012][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.835659][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.843466][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.851744][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.861218][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.870827][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.887286][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.896965][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.905897][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.915071][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.923890][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.931198][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.938771][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.946942][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.954929][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.962948][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.971204][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.980370][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.988134][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 32.997363][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.006071][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.014409][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.022833][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.030510][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.038398][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.047596][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.055759][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.063747][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.071739][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.078968][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.088923][ T49] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 33.104452][ T49] usb 2-1: USB disconnect, device number 2 [ 33.110861][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x1 [ 33.126987][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.128121][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.151537][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.158654][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.165888][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.182262][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x1 [ 33.189221][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.212292][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.219052][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.226080][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.242525][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.249556][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.257782][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.274271][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.281980][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.290909][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.298642][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.305872][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.313200][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.320733][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.328585][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.338093][ T470] Zero length message leads to an empty skb [ 33.345365][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.354002][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.361112][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.369106][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.377639][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 33.385259][ T31] kye 0003:0458:0138.0001: unexpected long global item [ 33.393175][ T31] kye 0003:0458:0138.0001: parse failed [ 33.400070][ T31] kye 0003:0458:0138.0001: probe with driver kye failed with error -22 [ 33.425989][ T31] usb 4-1: USB disconnect, device number 3 [ 33.468396][ T474] fuse: Bad value for 'fd' [ 33.799778][ T491] rust_binder: Failed to allocate buffer. len:18446744073709551248, is_oneway:true [ 33.799820][ T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.811017][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:53 [ 33.861877][ T499] rust_binder: Write failure EINVAL in pid:61 [ 33.914190][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.027469][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 34.049948][ T512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.073759][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.092002][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.102848][ T517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.111752][ T31] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 34.130902][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.143616][ T31] usb 4-1: config 0 descriptor?? [ 34.155228][ T517] mmap: syz.1.64 (517) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.161073][ T523] overlayfs: conflicting options: nfs_export=on,index=off [ 34.324357][ T528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.364337][ T531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.364398][ T531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 34.447377][ T540] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 34.544141][ T546] binder: Unknown parameter '01777777777777777777777' [ 34.553881][ T31] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 34.573588][ T551] binder: Unknown parameter 'r7' [ 34.578498][ T31] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 34.589276][ T31] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 34.608518][ T31] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 34.624287][ T31] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 34.659921][ T562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.659953][ T562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:93 [ 34.754268][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 34.765039][ T573] rust_binder: Failed to allocate buffer. len:12829654238376600072, is_oneway:false [ 34.777836][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 34.789076][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:72 [ 34.848343][ T581] rust_binder: Write failure EINVAL in pid:79 [ 34.931466][ T31] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 34.949410][ T31] usb 4-1: USB disconnect, device number 4 [ 34.995601][ T591] overlayfs: workdir and upperdir must be separate subtrees [ 35.014222][ T591] kvm: Disabled LAPIC found during irq injection [ 35.177796][ T618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 35.188274][ T618] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 35.188301][ T618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.197527][ T618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:104 [ 35.362173][ T630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 35.558013][ T646] rust_binder: Write failure EINVAL in pid:120 [ 35.702322][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.761426][ T662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.813347][ T663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 35.863727][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.884037][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.899120][ T9] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 35.910259][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.919202][ T9] usb 2-1: config 0 descriptor?? [ 36.337923][ T9] usb 2-1: USB disconnect, device number 3 [ 36.682259][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.822322][ T9] usb 2-1: device descriptor read/64, error -71 [ 36.977212][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 36.977233][ T36] audit: type=1400 audit(1750701915.110:216): avc: denied { write } for pid=680 comm="syz.3.120" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.008683][ T36] audit: type=1400 audit(1750701915.110:217): avc: denied { open } for pid=680 comm="syz.3.120" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.032468][ T36] audit: type=1400 audit(1750701915.110:218): avc: denied { ioctl } for pid=680 comm="syz.3.120" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.048811][ T681] fuseblk: Bad value for 'source' [ 37.063676][ T681] rust_binder: Error in use_page_slow: ESRCH [ 37.063697][ T681] rust_binder: use_range failure ESRCH [ 37.069801][ T681] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 37.075454][ T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.083611][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38 [ 37.102287][ T9] usb 2-1: device descriptor read/64, error -71 [ 37.233936][ T689] rust_binder: Write failure EFAULT in pid:46 [ 37.286033][ T690] rust_binder: Write failure EINVAL in pid:46 [ 37.352308][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.492316][ T9] usb 2-1: device descriptor read/64, error -71 [ 37.732298][ T9] usb 2-1: device descriptor read/64, error -71 [ 37.842391][ T9] usb usb2-port1: attempt power cycle [ 38.107448][ T36] audit: type=1400 audit(1750701916.240:219): avc: denied { wake_alarm } for pid=695 comm="syz.2.124" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.111367][ T698] rust_binder: Error while translating object. [ 38.133052][ T698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.140313][ T698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 38.161402][ T36] audit: type=1400 audit(1750701916.240:220): avc: denied { ioctl } for pid=697 comm="syz.3.125" path="socket:[6721]" dev="sockfs" ino=6721 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.219915][ T36] audit: type=1400 audit(1750701916.340:221): avc: denied { name_bind } for pid=699 comm="syz.2.126" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.219926][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.253885][ T9] usb 2-1: device descriptor read/8, error -71 [ 38.383391][ T9] usb 2-1: device descriptor read/8, error -71 [ 38.416059][ T36] audit: type=1400 audit(1750701916.550:222): avc: denied { append } for pid=704 comm="syz.3.128" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.450035][ T707] overlayfs: cannot append lower layer [ 38.452495][ T36] audit: type=1400 audit(1750701916.580:223): avc: denied { write } for pid=705 comm="syz.0.129" laddr=fe80::11 lport=1 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.548420][ T712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.558862][ T36] audit: type=1400 audit(1750701916.690:224): avc: denied { mounton } for pid=711 comm="syz.0.130" path="/proc/cpuinfo" dev="proc" ino=4026532031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 38.642294][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.649073][ T721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.651375][ T36] audit: type=1400 audit(1750701916.780:225): avc: denied { bind } for pid=720 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.702401][ T9] usb 2-1: device descriptor read/8, error -71 [ 38.718362][ T726] netlink: 57 bytes leftover after parsing attributes in process `syz.3.135'. [ 38.730444][ T726] rust_binder: Error while translating object. [ 38.730473][ T726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.737356][ T726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 38.797442][ T734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 38.828395][ T740] binder: Bad value for 'defcontext' [ 38.843471][ T9] usb 2-1: device descriptor read/8, error -71 [ 38.858063][ T745] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 38.953251][ T9] usb usb2-port1: unable to enumerate USB device [ 38.977258][ T749] netlink: 'syz.3.143': attribute type 4 has an invalid length. [ 38.985108][ T749] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.143'. [ 39.082319][ T423] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.232314][ T423] usb 1-1: Using ep0 maxpacket: 16 [ 39.239383][ T423] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 39.248232][ T423] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.258708][ T423] usb 1-1: config 0 has no interface number 0 [ 39.262296][ T49] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.275862][ T423] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 39.285479][ T423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.285857][ T757] cgroup: none used incorrectly [ 39.296013][ T423] usb 1-1: Product: syz [ 39.304783][ T423] usb 1-1: Manufacturer: syz [ 39.309479][ T423] usb 1-1: SerialNumber: syz [ 39.315713][ T423] usb 1-1: config 0 descriptor?? [ 39.381994][ T763] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 39.395785][ T764] netlink: 112 bytes leftover after parsing attributes in process `syz.2.148'. [ 39.418117][ T763] /dev/rnullb0: Can't open blockdev [ 39.432249][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 39.443442][ T49] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.453475][ T49] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.462462][ T49] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.471723][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.482751][ T49] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.492917][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 39.506400][ T49] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 39.517824][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.526126][ T423] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 39.532814][ T423] usb 1-1: No valid video chain found. [ 39.542916][ T49] usb 4-1: config 0 descriptor?? [ 39.566182][ T773] IPv6: syztnl1: Disabled Multicast RS [ 39.723565][ T785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 39.764635][ T49] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 39.797445][ T49] usb 4-1: USB disconnect, device number 5 [ 39.805730][ T49] usblp0: removed [ 39.826957][ T423] usb 1-1: USB disconnect, device number 3 [ 40.259598][ T802] rust_binder: 800 RLIMIT_NICE not set [ 41.002443][ T423] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.162270][ T423] usb 4-1: Using ep0 maxpacket: 32 [ 41.169536][ T423] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.181073][ T423] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.191748][ T423] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.201432][ T423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.212407][ T423] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.223053][ T423] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.237222][ T423] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.248499][ T423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.259210][ T423] usb 4-1: config 0 descriptor?? [ 41.467190][ T423] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.669514][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.678734][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.689377][ T9] usb 4-1: USB disconnect, device number 6 [ 41.699415][ T9] usblp0: removed [ 41.842258][ T854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 41.853648][ T854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.094635][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 42.094656][ T36] audit: type=1400 audit(1750701920.230:247): avc: denied { mount } for pid=856 comm="syz.2.181" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 42.485882][ T36] audit: type=1400 audit(1750701920.620:248): avc: denied { read } for pid=863 comm="syz.1.183" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.527512][ T871] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 42.537879][ T871] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 42.755059][ T36] audit: type=1400 audit(1750701920.890:249): avc: denied { watch_reads } for pid=902 comm="syz.2.195" path="/54" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.809296][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 42.898177][ T36] audit: type=1400 audit(1750701921.030:250): avc: denied { nlmsg_read } for pid=923 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.396260][ T949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.212'. [ 43.405801][ T36] audit: type=1400 audit(1750701921.540:251): avc: denied { getopt } for pid=948 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.427328][ T949] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 43.435063][ T949] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.212'. [ 43.445379][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 43.480769][ T36] audit: type=1400 audit(1750701921.610:252): avc: denied { create } for pid=952 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 43.506851][ T36] audit: type=1400 audit(1750701921.610:253): avc: denied { write } for pid=952 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 43.558763][ T36] audit: type=1400 audit(1750701921.690:254): avc: denied { create } for pid=959 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.581563][ T36] audit: type=1400 audit(1750701921.700:255): avc: denied { accept } for pid=959 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.623761][ T972] syz.2.221 (972): attempted to duplicate a private mapping with mremap. This is not supported. [ 43.637567][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 43.673423][ T36] audit: type=1400 audit(1750701921.800:256): avc: denied { create } for pid=980 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.735432][ T985] netlink: 104 bytes leftover after parsing attributes in process `syz.2.226'. [ 43.804317][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.869644][ T1021] can: request_module (can-proto-0) failed. [ 44.692401][ T1062] rust_binder: Got transaction with invalid offset. [ 44.692453][ T1062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.699400][ T1062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 44.716409][ T1062] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.726832][ T1062] rust_binder: Read failure Err(EFAULT) in pid:106 [ 45.102377][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.273381][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.285765][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.296287][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 45.305967][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.319885][ T9] usb 4-1: config 0 descriptor?? [ 45.731895][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 45.741173][ T9] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 45.812778][ T9] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 45.882277][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.882338][ T1002] Bluetooth: hci0: command 0x1003 tx timeout [ 46.036429][ T1110] binder: Bad value for 'stats' [ 46.041741][ T1110] binder: Bad value for 'stats' [ 46.055665][ T1114] sit0: entered promiscuous mode [ 46.065181][ T1114] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 46.074818][ T1114] netlink: 1 bytes leftover after parsing attributes in process `syz.1.265'. [ 46.215012][ T9] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 46.223033][ T9] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 46.233467][ T9] usb 4-1: USB disconnect, device number 7 [ 46.625950][ T1125] overlayfs: missing 'workdir' [ 46.772048][ T1147] overlayfs: failed to clone upperpath [ 46.798126][ T1153] tipc: Started in network mode [ 46.804317][ T1153] tipc: Node identity , cluster identity 4711 [ 46.813893][ T1155] exFAT-fs (rnullb0): invalid boot record signature [ 46.821576][ T1155] exFAT-fs (rnullb0): failed to read boot sector [ 46.829511][ T1155] exFAT-fs (rnullb0): failed to recognize exfat type [ 46.856874][ T1161] rust_binder: Error while translating object. [ 46.856905][ T1161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.864236][ T1161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 46.905916][ T1165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 47.022537][ T1165] rust_binder: Write failure EINVAL in pid:128 [ 47.454442][ T1171] process 'syz.0.289' launched '/dev/fd/10' with NULL argv: empty string added [ 47.472475][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 47.472492][ T36] audit: type=1400 audit(1750701925.610:272): avc: denied { execute_no_trans } for pid=1170 comm="syz.0.289" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.761631][ T36] audit: type=1326 audit(1750701925.890:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.3.296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0a5f8e929 code=0x0 [ 47.785364][ T1193] rust_binder: Write failure EINVAL in pid:131 [ 47.785450][ T1193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 47.909142][ T1213] rust_binder: Read failure Err(EAGAIN) in pid:146 [ 47.953508][ T1223] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.305'. [ 48.022077][ T36] audit: type=1400 audit(1750701926.150:274): avc: denied { getopt } for pid=1222 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.044671][ T36] audit: type=1326 audit(1750701926.180:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x0 [ 48.054768][ T1230] rust_binder: Write failure EINVAL in pid:150 [ 48.071702][ T36] audit: type=1400 audit(1750701926.180:276): avc: denied { write } for pid=1229 comm="syz.3.308" name="tcp6" dev="proc" ino=4026532606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.132040][ T1237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 48.233606][ T1241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.234095][ T1240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 48.253224][ T1240] rust_binder: Error in use_page_slow: ESRCH [ 48.253247][ T1240] rust_binder: use_range failure ESRCH [ 48.259418][ T1240] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 48.264978][ T1240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 48.272942][ T1240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:159 [ 49.133902][ T36] audit: type=1326 audit(1750701927.270:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1267 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a5f8e929 code=0x7ffc0000 [ 49.176243][ T36] audit: type=1326 audit(1750701927.280:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x0 [ 49.202252][ T36] audit: type=1326 audit(1750701927.280:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1267 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0a5f8e929 code=0x7ffc0000 [ 49.227608][ T36] audit: type=1326 audit(1750701927.280:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1267 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a5f8e929 code=0x7ffc0000 [ 49.253510][ T36] audit: type=1326 audit(1750701927.280:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1267 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a5f8e929 code=0x7ffc0000 [ 49.285981][ T1276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.286010][ T1276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:181 [ 49.357874][ T1278] binder: Bad value for 'max' [ 50.244705][ T1299] overlayfs: failed to clone upperpath [ 50.305449][ T1308] syz.1.335 uses obsolete (PF_INET,SOCK_PACKET) [ 50.345923][ T1314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.337'. [ 50.470160][ T1325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.583198][ T1332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.583237][ T1332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 50.804507][ T1358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.804554][ T1358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 51.122168][ T1409] overlayfs: failed to clone upperpath [ 51.199440][ T1417] /dev/rnullb0: Can't lookup blockdev [ 51.468346][ T1442] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 51.476403][ T1442] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.381'. [ 51.758543][ T1452] overlayfs: missing 'lowerdir' [ 52.483510][ T1519] TCP: TCP_TX_DELAY enabled [ 52.599256][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 52.599276][ T36] audit: type=1400 audit(1750701930.730:310): avc: denied { create } for pid=1529 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 52.702926][ T1538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.409'. [ 53.010569][ T1567] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 53.010595][ T1567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.019496][ T1567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:248 [ 53.056441][ T36] audit: type=1400 audit(1750701931.190:311): avc: denied { mounton } for pid=1568 comm="syz.3.418" path="/proc/250/mountinfo" dev="proc" ino=10349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 53.306093][ T1587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.314832][ T1587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.383700][ T1592] 9pnet: p9_errstr2errno: server reported unknown error [ 53.404488][ T1592] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 53.415145][ T1592] netlink: 'syz.0.427': attribute type 17 has an invalid length. [ 53.439934][ T1594] tipc: Started in network mode [ 53.445256][ T1594] tipc: Node identity 8, cluster identity 3 [ 53.451445][ T1594] tipc: Node number set to 8 [ 53.541823][ T1610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.433'. [ 53.552517][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.554047][ T36] audit: type=1400 audit(1750701931.690:312): avc: denied { name_bind } for pid=1609 comm="syz.0.433" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 53.595686][ T1613] overlayfs: failed to clone upperpath [ 53.595709][ T36] audit: type=1400 audit(1750701931.730:313): avc: denied { mount } for pid=1611 comm="syz.0.434" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.638650][ T36] audit: type=1400 audit(1750701931.770:314): avc: denied { bind } for pid=1616 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.664186][ T36] audit: type=1400 audit(1750701931.800:315): avc: denied { search } for pid=1619 comm="syz.2.437" name="/" dev="configfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.691585][ T36] audit: type=1400 audit(1750701931.810:316): avc: denied { mounton } for pid=1619 comm="syz.2.437" path="/" dev="configfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.712256][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 53.728881][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 53.739197][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 53.751748][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 53.767947][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.790216][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.803039][ T31] usb 4-1: SerialNumber: syz [ 53.814597][ T1586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.822188][ T1586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.837658][ T36] audit: type=1400 audit(1750701931.970:317): avc: denied { map } for pid=1633 comm="syz.0.440" path="socket:[10535]" dev="sockfs" ino=10535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.894755][ T36] audit: type=1400 audit(1750701931.970:318): avc: denied { read } for pid=1633 comm="syz.0.440" path="socket:[10535]" dev="sockfs" ino=10535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.041401][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.065818][ T31] usb 4-1: USB disconnect, device number 8 [ 54.101148][ T36] audit: type=1400 audit(1750701932.230:319): avc: denied { accept } for pid=1644 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.163525][ T1779] SELinux: Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped). [ 56.256095][ T1784] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 56.273984][ T1784] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 56.782341][ T1848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.504'. [ 56.993925][ T1860] kvm: kvm [1859]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 57.195863][ T1879] FAT-fs (rnullb0): bogus number of reserved sectors [ 57.203413][ T1879] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 57.234067][ T1882] netlink: 68 bytes leftover after parsing attributes in process `syz.3.513'. [ 57.547713][ T1895] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 57.547744][ T1895] rust_binder: Error while translating object. [ 57.557211][ T1895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.563630][ T1895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 57.598267][ T423] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.631248][ T423] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.217951][ T1912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.523'. [ 58.310365][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 58.310385][ T36] audit: type=1400 audit(1750701936.440:327): avc: denied { ioctl } for pid=1916 comm="syz.0.525" path="socket:[10950]" dev="sockfs" ino=10950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.351429][ T36] audit: type=1400 audit(1750701936.480:328): avc: denied { getopt } for pid=1916 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.374091][ T1919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311 [ 58.376751][ T36] audit: type=1400 audit(1750701936.510:329): avc: denied { connect } for pid=1918 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.652270][ T426] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 58.698810][ T1927] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 58.706567][ T1927] netlink: 'syz.1.530': attribute type 27 has an invalid length. [ 58.715974][ T1927] netlink: 3609 bytes leftover after parsing attributes in process `syz.1.530'. [ 58.759543][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 58.813090][ T1942] can: request_module (can-proto-0) failed. [ 58.833706][ T426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.857959][ T426] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.860219][ T1955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.538'. [ 58.877920][ T426] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 58.887394][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.902374][ T426] usb 4-1: config 0 descriptor?? [ 58.946403][ T1966] lo: entered promiscuous mode [ 58.948724][ T36] audit: type=1400 audit(1750701937.080:330): avc: denied { create } for pid=1963 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.986624][ T1974] lo: left promiscuous mode [ 59.009955][ T1978] overlayfs: failed to clone upperpath [ 59.050030][ T1984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.549'. [ 59.075675][ T36] audit: type=1400 audit(1750701937.210:331): avc: denied { ioctl } for pid=1988 comm="syz.1.551" path="socket:[11791]" dev="sockfs" ino=11791 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.103219][ T36] audit: type=1326 audit(1750701937.210:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1988 comm="syz.1.551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85f698e929 code=0x0 [ 59.509600][ T2002] can: request_module (can-proto-0) failed. [ 60.210382][ T2049] netlink: 68 bytes leftover after parsing attributes in process `syz.2.570'. [ 60.222401][ T2049] /dev/rnullb0: Can't lookup blockdev [ 60.650074][ T2057] can: request_module (can-proto-6) failed. [ 60.725574][ T36] audit: type=1400 audit(1750701938.860:333): avc: denied { create } for pid=2058 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.783311][ T2067] wg2: entered allmulticast mode [ 60.860732][ T2083] overlayfs: conflicting options: userxattr,verity=on [ 61.013728][ T36] audit: type=1400 audit(1750701939.150:334): avc: denied { create } for pid=2094 comm="syz.1.587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.314680][ T426] usb 4-1: USB disconnect, device number 9 [ 61.373541][ T2118] fuse: Bad value for 'fd' [ 61.664545][ T2138] netlink: 220 bytes leftover after parsing attributes in process `syz.1.601'. [ 62.051682][ T2167] can: request_module (can-proto-0) failed. [ 62.077798][ T2171] overlayfs: failed to clone upperpath [ 62.146140][ T2185] tipc: Enabling of bearer rejected, failed to enable media [ 62.259768][ T36] audit: type=1400 audit(1750701940.390:335): avc: denied { accept } for pid=2202 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.280577][ T2208] @: renamed from bridge0 (while UP) [ 62.336076][ T2222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2222 comm=syz.1.630 [ 62.465490][ T36] audit: type=1400 audit(1750701940.600:336): avc: denied { mount } for pid=2247 comm="syz.1.638" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.479030][ T2249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 63.187834][ T2278] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 63.202602][ T2280] rust_binder: Error while translating object. [ 63.210813][ T2280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.217218][ T2280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 63.417374][ T2302] can: request_module (can-proto-0) failed. [ 63.451379][ T2304] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.631532][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.652857][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 63.652879][ T36] audit: type=1400 audit(1750701941.790:342): avc: denied { append } for pid=2316 comm="syz.3.664" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.756932][ T36] audit: type=1326 audit(1750701941.890:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2325 comm="syz.2.668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c4d58e929 code=0x0 [ 63.870054][ T2327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.870348][ T2327] rust_binder: Error in use_page_slow: ESRCH [ 63.877295][ T2327] rust_binder: use_range failure ESRCH [ 63.883858][ T2327] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 63.889448][ T2327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.897987][ T2327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:343 [ 64.208469][ T2355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2355 comm=syz.1.678 [ 65.041273][ T2393] /dev/rnullb0: Can't lookup blockdev [ 65.083949][ T36] audit: type=1326 audit(1750701943.220:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2f78e929 code=0x0 [ 65.927286][ T2423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 66.067729][ T2433] overlayfs: failed to resolve './file1': -2 [ 66.085486][ T36] audit: type=1400 audit(1750701944.220:345): avc: denied { setopt } for pid=2436 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.113549][ T36] audit: type=1400 audit(1750701944.250:346): avc: denied { mounton } for pid=2441 comm="syz.0.705" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.824963][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.826017][ T36] audit: type=1400 audit(1750701944.960:347): avc: denied { create } for pid=2479 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.833042][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.866600][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.883483][ T36] audit: type=1400 audit(1750701945.020:348): avc: denied { ioctl } for pid=2479 comm="syz.3.718" path="socket:[12802]" dev="sockfs" ino=12802 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.887272][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.918183][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.928310][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.943511][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.948719][ T36] audit: type=1400 audit(1750701945.050:349): avc: denied { sqpoll } for pid=2481 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.953358][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.981334][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 66.984368][ T2497] overlayfs: failed to clone upperpath [ 66.989443][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 67.006104][ T2497] netlink: 424 bytes leftover after parsing attributes in process `syz.1.723'. [ 67.180936][ T2515] netlink: 'syz.1.728': attribute type 4 has an invalid length. [ 67.287862][ T36] audit: type=1400 audit(1750701945.420:350): avc: denied { execute } for pid=2516 comm="syz.3.729" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.318897][ T36] audit: type=1400 audit(1750701945.450:351): avc: denied { map } for pid=2520 comm="syz.1.730" path="socket:[13543]" dev="sockfs" ino=13543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 67.461413][ T2535] rust_binder: Error in use_page_slow: ESRCH [ 67.461434][ T2535] rust_binder: use_range failure ESRCH [ 67.468673][ T2535] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 67.476430][ T2535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 67.485579][ T2535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:357 [ 67.608755][ T2536] /dev/rnullb0: Can't lookup blockdev [ 67.719534][ T2567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.778180][ T2576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 68.279516][ T2581] overlayfs: failed to clone upperpath [ 68.299491][ T2581] /dev/rnullb0: Can't lookup blockdev [ 68.405009][ T2602] fuse: Bad value for 'group_id' [ 68.416352][ T2602] fuse: Bad value for 'group_id' [ 68.494857][ T2610] overlayfs: failed to clone upperpath [ 68.633686][ T2620] netlink: 56 bytes leftover after parsing attributes in process `syz.3.764'. [ 68.645766][ T2620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'. [ 68.835361][ T2640] rust_binder: Write failure EINVAL in pid:378 [ 69.252257][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 69.412394][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 69.419037][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.428043][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.437039][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.446528][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.457001][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.466889][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.481944][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.491062][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.500462][ T10] usb 4-1: config 0 descriptor?? [ 69.599257][ T2671] netlink: 268 bytes leftover after parsing attributes in process `syz.1.782'. [ 69.626171][ T2673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 69.707918][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.912696][ T306] usb 4-1: USB disconnect, device number 10 [ 69.925274][ T306] usblp0: removed [ 70.040373][ T2707] overlayfs: failed to resolve './file1': -2 [ 70.078509][ T2714] syz.2.798: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 70.098058][ T2714] CPU: 1 UID: 0 PID: 2714 Comm: syz.2.798 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 70.098096][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.098117][ T2714] Call Trace: [ 70.098125][ T2714] [ 70.098133][ T2714] __dump_stack+0x21/0x30 [ 70.098172][ T2714] dump_stack_lvl+0x10c/0x190 [ 70.098200][ T2714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.098225][ T2714] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 70.098253][ T2714] dump_stack+0x19/0x20 [ 70.098272][ T2714] warn_alloc+0x1bc/0x2a0 [ 70.098290][ T2714] ? kasan_save_free_info+0x4a/0x60 [ 70.098310][ T2714] ? __cfi_warn_alloc+0x10/0x10 [ 70.098327][ T2714] ? __get_vm_area_node+0x1dc/0x3a0 [ 70.098346][ T2714] ? packet_set_ring+0x735/0x2880 [ 70.098373][ T2714] __vmalloc_node_range_noprof+0x68e/0x1420 [ 70.098392][ T2714] ? kasan_save_track+0x3e/0x80 [ 70.098415][ T2714] ? __kasan_kmalloc+0x96/0xb0 [ 70.098438][ T2714] ? __kmalloc_noprof+0x1b1/0x450 [ 70.098464][ T2714] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 70.098483][ T2714] ? __asan_memset+0x39/0x50 [ 70.098503][ T2714] ? __alloc_pages_noprof+0xba/0x6c0 [ 70.098523][ T2714] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 70.098541][ T2714] ? packet_set_ring+0x735/0x2880 [ 70.098566][ T2714] vzalloc_noprof+0xfd/0x1d0 [ 70.098584][ T2714] ? packet_set_ring+0x735/0x2880 [ 70.098609][ T2714] ? kasan_save_alloc_info+0x40/0x50 [ 70.098627][ T2714] ? __cfi_vzalloc_noprof+0x10/0x10 [ 70.098646][ T2714] ? packet_set_ring+0x669/0x2880 [ 70.098672][ T2714] packet_set_ring+0x735/0x2880 [ 70.098698][ T2714] ? _raw_spin_lock_bh+0x90/0x120 [ 70.098725][ T2714] ? packet_mmap+0x570/0x570 [ 70.098749][ T2714] ? _raw_spin_unlock_bh+0x54/0x60 [ 70.098842][ T2714] ? lock_sock_nested+0x1f5/0x290 [ 70.098866][ T2714] ? __asan_memcpy+0x5a/0x80 [ 70.098887][ T2714] ? check_stack_object+0x12c/0x140 [ 70.098910][ T2714] ? __kasan_check_write+0x18/0x20 [ 70.098930][ T2714] ? _copy_from_user+0x8b/0xb0 [ 70.098956][ T2714] packet_setsockopt+0xc5d/0x12a0 [ 70.098983][ T2714] ? __cfi_packet_setsockopt+0x10/0x10 [ 70.099010][ T2714] ? selinux_socket_setsockopt+0x2ea/0x390 [ 70.099033][ T2714] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 70.099057][ T2714] ? do_futex+0x309/0x500 [ 70.099083][ T2714] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 70.099101][ T2714] ? security_socket_setsockopt+0x33/0xd0 [ 70.099124][ T2714] ? __cfi_packet_setsockopt+0x10/0x10 [ 70.099150][ T2714] do_sock_setsockopt+0x26a/0x400 [ 70.099168][ T2714] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 70.099189][ T2714] __x64_sys_setsockopt+0x1b8/0x250 [ 70.099208][ T2714] x64_sys_call+0x2adc/0x2ee0 [ 70.099232][ T2714] do_syscall_64+0x58/0xf0 [ 70.099257][ T2714] ? clear_bhb_loop+0x50/0xa0 [ 70.099277][ T2714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.099295][ T2714] RIP: 0033:0x7f7c4d58e929 [ 70.099325][ T2714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.099341][ T2714] RSP: 002b:00007f7c4e3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.099363][ T2714] RAX: ffffffffffffffda RBX: 00007f7c4d7b5fa0 RCX: 00007f7c4d58e929 [ 70.099391][ T2714] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 70.099402][ T2714] RBP: 00007f7c4d610b39 R08: 000000000000001c R09: 0000000000000000 [ 70.099415][ T2714] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 70.099427][ T2714] R13: 0000000000000000 R14: 00007f7c4d7b5fa0 R15: 00007ffddc3a9b68 [ 70.099446][ T2714] [ 70.099466][ T2714] Mem-Info: [ 70.465042][ T2714] active_anon:22138 inactive_anon:1 isolated_anon:0 [ 70.465042][ T2714] active_file:11618 inactive_file:12465 isolated_file:0 [ 70.465042][ T2714] unevictable:16345 dirty:17 writeback:0 [ 70.465042][ T2714] slab_reclaimable:5317 slab_unreclaimable:74656 [ 70.465042][ T2714] mapped:24002 shmem:16527 pagetables:887 [ 70.465042][ T2714] sec_pagetables:0 bounce:0 [ 70.465042][ T2714] kernel_misc_reclaimable:0 [ 70.465042][ T2714] free:1488559 free_pcp:3481 free_cma:0 [ 70.513607][ T2714] Node 0 active_anon:88552kB inactive_anon:4kB active_file:46472kB inactive_file:49860kB unevictable:65380kB isolated(anon):0kB isolated(file):0kB mapped:95908kB dirty:68kB writeback:0kB shmem:66108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4424kB pagetables:3448kB sec_pagetables:0kB all_unreclaimable? no [ 70.549709][ T2738] fuse: Bad value for 'fd' [ 70.561306][ T2738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 70.571285][ T2714] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966012kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:0kB free_cma:0kB [ 70.609098][ T2714] lowmem_reserve[]: 0 3921 3921 [ 70.614737][ T2714] Normal free:2992024kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88752kB inactive_anon:4kB active_file:46472kB inactive_file:49860kB unevictable:65380kB writepending:68kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:9528kB local_pcp:7984kB free_cma:0kB [ 70.648373][ T2714] lowmem_reserve[]: 0 0 0 [ 70.652966][ T2714] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 70.667618][ T2752] netlink: 'syz.1.812': attribute type 4 has an invalid length. [ 70.671060][ T2714] Normal: 2*4kB (UM) 6*8kB (ME) 11*16kB (ME) 281*32kB (ME) 147*64kB (ME) 35*128kB (UME) 44*256kB (UME) 34*512kB (UME) 18*1024kB [ 70.678927][ T2752] netlink: 'syz.1.812': attribute type 6 has an invalid length. [ 70.678932][ T2714] (UME) [ 70.678947][ T2752] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.812'. [ 70.693228][ T2714] 2*2048kB (UE) 712*4096kB (UM) = 2990664kB [ 70.718840][ T2714] 56952 total pagecache pages [ 70.723838][ T2714] 1 pages in swap cache [ 70.728020][ T2714] Free swap = 124420kB [ 70.739607][ T2714] Total swap = 124996kB [ 70.743927][ T2714] 2097051 pages RAM [ 70.747922][ T2714] 0 pages HighMem/MovableOnly [ 70.752699][ T2714] 351518 pages reserved [ 70.756895][ T2714] 0 pages cma reserved [ 70.763565][ T2714] Memory allocations: [ 70.767594][ T2714] 0 B 0 init/main.c:1370 func:do_initcalls [ 70.775188][ T2714] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 70.782257][ T306] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 70.783670][ T2714] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 70.799206][ T2714] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 70.807597][ T2714] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 70.816039][ T2714] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 70.824911][ T2714] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 70.833477][ T2714] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 70.841917][ T2714] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 70.850844][ T2714] 0 B 0 init/initramfs.c:101 func:find_link [ 70.904145][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 70.904168][ T36] audit: type=1400 audit(1750701949.040:357): avc: denied { bind } for pid=2771 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.953654][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.964102][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.974372][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.989751][ T306] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.999743][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.008191][ T306] usb 4-1: Product: syz [ 71.012903][ T306] usb 4-1: Manufacturer: syz [ 71.017597][ T306] usb 4-1: SerialNumber: syz [ 71.023835][ T306] usb 4-1: config 0 descriptor?? [ 71.216371][ T36] audit: type=1400 audit(1750701949.350:358): avc: denied { create } for pid=2773 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.230487][ T2726] rust_binder: Failed to allocate buffer. len:18446744073709551392, is_oneway:false [ 71.245165][ T306] usb 4-1: USB disconnect, device number 11 [ 71.570542][ T2787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 71.595267][ T2791] overlayfs: failed to clone upperpath [ 71.630228][ T2795] fuse: Unknown parameter '](3w+0cuIٍ3kz]S$gՂ3_f체4QV:vd_>v5ndQ~j W0ǵQ' [ 71.661724][ T2799] overlay: Unknown parameter 'mounts' [ 71.734975][ T2810] binder: Unknown parameter 'st' [ 71.867937][ T2827] netlink: 'syz.2.842': attribute type 4 has an invalid length. [ 72.042257][ T306] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 72.192266][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 72.199004][ T306] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.210192][ T306] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.220286][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.227222][ T306] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 72.236825][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.246051][ T306] usb 4-1: config 0 descriptor?? [ 72.754746][ T36] audit: type=1400 audit(1750701950.890:359): avc: denied { create } for pid=2857 comm="syz.1.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 72.778256][ T36] audit: type=1400 audit(1750701950.890:360): avc: denied { ioctl } for pid=2857 comm="syz.1.854" path="socket:[14050]" dev="sockfs" ino=14050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 72.806956][ T36] audit: type=1400 audit(1750701950.890:361): avc: denied { map } for pid=2857 comm="syz.1.854" path="socket:[14050]" dev="sockfs" ino=14050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 72.832788][ T36] audit: type=1400 audit(1750701950.890:362): avc: denied { read } for pid=2857 comm="syz.1.854" path="socket:[14050]" dev="sockfs" ino=14050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 72.861570][ T2818] rust_binder: Error while translating object. [ 72.861608][ T2818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.868926][ T2818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 72.880659][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 72.896126][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.905643][ T306] usb 4-1: USB disconnect, device number 12 [ 73.401350][ T36] audit: type=1400 audit(1750701951.530:363): avc: denied { write } for pid=2862 comm="syz.3.856" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.602999][ T2871] /dev/rnullb0: Can't lookup blockdev [ 73.701765][ T2882] binder: Unknown parameter 'appraise_type' [ 73.762247][ T306] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 73.923647][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.936051][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.946000][ T306] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.955839][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.964550][ T306] usb 4-1: SerialNumber: syz [ 74.733463][ T306] usb 4-1: MIDIStreaming interface descriptor not found [ 74.757487][ T306] usb 4-1: USB disconnect, device number 13 [ 74.833614][ T2775] udevd[2775]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.842976][ T2929] netlink: 'syz.2.876': attribute type 4 has an invalid length. [ 74.866065][ T2929] netlink: 'syz.2.876': attribute type 6 has an invalid length. [ 74.875264][ T2929] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.876'. [ 74.976503][ T36] audit: type=1400 audit(1750701953.110:364): avc: denied { shutdown } for pid=2956 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.010549][ T2960] can: request_module (can-proto-0) failed. [ 75.126199][ T36] audit: type=1400 audit(1750701953.260:365): avc: denied { create } for pid=2974 comm="syz.0.893" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.336346][ T36] audit: type=1400 audit(1750701953.470:366): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.560990][ T2991] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 75.561289][ T2991] incfs: mount failed -36 [ 75.689385][ T2994] cannot load conntrack support for proto=3 [ 75.803470][ T3004] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 75.839331][ T3008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3008 comm=syz.2.906 [ 76.322006][ T3034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 76.636801][ T3047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 77.007655][ T3069] overlayfs: failed to resolve './file1/file0': -20 [ 77.018794][ T304] tipc: Subscription rejected, illegal request [ 77.187979][ T3081] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 77.195713][ T3081] netlink: 17 bytes leftover after parsing attributes in process `syz.1.933'. [ 77.221287][ T3086] overlayfs: failed to clone upperpath [ 77.781838][ T3097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=3097 comm=syz.1.938 [ 77.890571][ T3113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16478 sclass=netlink_route_socket pid=3113 comm=syz.1.945 [ 77.949601][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 77.949622][ T36] audit: type=1400 audit(1750701956.080:372): avc: denied { listen } for pid=3123 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 77.992415][ T3124] binder: Unknown parameter 'm' [ 78.222163][ T3168] rust_binder: Error in use_page_slow: ESRCH [ 78.222256][ T3168] rust_binder: use_range failure ESRCH [ 78.236572][ T3168] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 78.249112][ T3168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.268408][ T3168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:412 [ 78.381293][ T3190] cgroup: No subsys list or none specified [ 78.463990][ T3203] fuse: Bad value for 'fd' [ 78.500501][ T3205] can: request_module (can-proto-0) failed. [ 78.612385][ T36] audit: type=1400 audit(1750701956.740:373): avc: denied { create } for pid=3209 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.642244][ T306] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 78.803429][ T306] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 78.816644][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.830537][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.843127][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 78.856969][ T306] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 78.866265][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.876135][ T306] usb 4-1: config 0 descriptor?? [ 79.309292][ T3190] /dev/sg0: Can't lookup blockdev [ 79.317585][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 79.324938][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.335451][ T306] usb 4-1: USB disconnect, device number 14 [ 79.500850][ T3232] netlink: 'syz.2.979': attribute type 12 has an invalid length. [ 79.521143][ T36] audit: type=1326 audit(1750701957.650:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.549423][ T36] audit: type=1326 audit(1750701957.650:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.575117][ T36] audit: type=1326 audit(1750701957.660:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.600021][ T36] audit: type=1326 audit(1750701957.660:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.625681][ T36] audit: type=1326 audit(1750701957.660:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.654741][ T36] audit: type=1326 audit(1750701957.660:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.661612][ T3240] overlayfs: failed to clone lowerpath [ 79.684132][ T36] audit: type=1326 audit(1750701957.660:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.720641][ T36] audit: type=1326 audit(1750701957.660:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3235 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x7ffc0000 [ 79.865562][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.865598][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.874564][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.880970][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.888891][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.896147][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.903238][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.909771][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.916541][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.923165][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.139790][ T3285] fuse: Bad value for 'fd' [ 80.174582][ T3310] fuse: Unknown parameter 'max_reaD' [ 80.534371][ T3344] IPv6: syztnl1: Disabled Multicast RS [ 80.562625][ T3344] binder: Unknown parameter 'dont_appraise' [ 80.622370][ T3356] net_ratelimit: 22 callbacks suppressed [ 80.622396][ T3356] veth1_virt_wifi: mtu less than device minimum [ 80.679948][ T3358] veth1_virt_wifi: mtu less than device minimum [ 80.837064][ T305] tipc: Subscription rejected, illegal request [ 81.001730][ T3404] overlayfs: failed to resolve './file0': -2 [ 81.395084][ T3435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 81.489583][ T3438] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 81.525399][ T3449] overlayfs: failed to clone upperpath [ 81.563909][ T3449] overlayfs: failed to clone upperpath [ 81.810514][ T3483] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1056'. [ 82.231605][ T3530] fuse: Unknown parameter 'groupid' [ 94.642605][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 94.642626][ T36] audit: type=1400 audit(1750701972.780:430): avc: denied { bind } for pid=3570 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.720857][ T3580] overlayfs: failed to resolve './file0': -2 [ 94.733991][ T3583] fuse: Unknown parameter 'ft [ 94.733991][ T3583] , priority 10 [ 105.074389][ T4444] overlayfs: failed to clone upperpath [ 105.345154][ T4488] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 105.353314][ T4488] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1405'. [ 105.413248][ T4501] fuse: Invalid rootmode [ 105.434211][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 105.434233][ T36] audit: type=1400 audit(1750701983.570:538): avc: denied { bind } for pid=4506 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.537019][ T36] audit: type=1326 audit(1750701983.670:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.1.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f698e929 code=0x7fc00000 [ 105.561442][ T36] audit: type=1326 audit(1750701983.670:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.1.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f698e929 code=0x7fc00000 [ 105.626847][ T36] audit: type=1400 audit(1750701983.760:541): avc: denied { link } for pid=4516 comm="syz.1.1414" name="file1" dev="tmpfs" ino=2470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.172222][ T9] tipc: Node number set to 2130706433 [ 106.402001][ T4554] overlayfs: failed to clone upperpath [ 107.074664][ T4576] can: request_module (can-proto-0) failed. [ 107.085411][ T36] audit: type=1326 audit(1750701985.220:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.2.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4d58e929 code=0x0 [ 107.109900][ T4576] can: request_module (can-proto-0) failed. [ 107.118744][ T4576] can: request_module (can-proto-0) failed. [ 107.131826][ T4576] can: request_module (can-proto-0) failed. [ 107.909467][ T4667] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 108.481876][ T36] audit: type=1400 audit(1750701986.610:543): avc: denied { search } for pid=4679 comm="syz.0.1468" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.504346][ T36] audit: type=1400 audit(1750701986.620:544): avc: denied { map } for pid=4679 comm="syz.0.1468" path="socket:[19795]" dev="sockfs" ino=19795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 108.530662][ T36] audit: type=1400 audit(1750701986.620:545): avc: denied { write } for pid=4679 comm="syz.0.1468" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.554199][ T36] audit: type=1400 audit(1750701986.620:546): avc: denied { add_name } for pid=4679 comm="syz.0.1468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.575197][ T36] audit: type=1400 audit(1750701986.620:547): avc: denied { create } for pid=4679 comm="syz.0.1468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 108.748958][ T4705] overlay: Unknown parameter '/' [ 109.500068][ T4736] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 243.869490][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.2.1475:4701] [ 243.869538][ C0] CPU#0 Utilization every 22s during lockup: [ 243.869547][ C0] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 243.869560][ C0] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 243.869573][ C0] #3: 100% system, 0% softirq, 1% hardirq, 0% idle [ 243.869586][ C0] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 243.869599][ C0] #5: 100% system, 0% softirq, 1% hardirq, 0% idle [ 243.869612][ C0] Modules linked in: [ 243.869636][ C0] CPU: 0 UID: 0 PID: 4701 Comm: syz.2.1475 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 243.869662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.869676][ C0] RIP: 0010:attach_recursive_mnt+0x1d8b/0x21c0 [ 243.869719][ C0] Code: 00 00 00 49 39 07 0f 84 96 01 00 00 4d 8d 7e 30 4c 89 7c 24 18 49 c1 ef 03 43 0f b6 04 27 84 c0 0f 85 31 01 00 00 41 8b 5e 30 <41> 89 dd 41 83 e5 40 31 ff 44 89 ee e8 74 38 95 ff 4d 8d a6 c8 00 [ 243.869734][ C0] RSP: 0018:ffffc9000e91fb00 EFLAGS: 00000246 [ 243.869749][ C0] RAX: 0000000000000000 RBX: 0000000000840000 RCX: 0000000000080000 [ 243.869760][ C0] RDX: ffffc900029b6000 RSI: 000000000007ffff RDI: 0000000000080000 [ 243.869773][ C0] RBP: ffffc9000e91fc48 R08: ffff8881190de66f R09: 0000000000000000 [ 243.869785][ C0] R10: ffff8881190de660 R11: ffffed102321bcce R12: dffffc0000000000 [ 243.869798][ C0] R13: ffff88814f1d2540 R14: ffff888147b08000 R15: 1ffff11028f61006 [ 243.869811][ C0] FS: 00007f7c4e3f26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 243.869826][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.869839][ C0] CR2: 0000200000000340 CR3: 000000011f3f2000 CR4: 00000000003526b0 [ 243.869854][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.869865][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.869876][ C0] Call Trace: [ 243.869882][ C0] [ 243.869896][ C0] ? graft_tree+0x1c0/0x1c0 [ 243.869921][ C0] ? putname+0x113/0x150 [ 243.869943][ C0] ? mnt_warn_timestamp_expiry+0x370/0x370 [ 243.869967][ C0] graft_tree+0x157/0x1c0 [ 243.869990][ C0] do_loopback+0x364/0x4b0 [ 243.870009][ C0] ? path_mount+0x1050/0x1050 [ 243.870027][ C0] ? security_capable+0xcf/0xf0 [ 243.870044][ C0] ? ns_capable+0x91/0xf0 [ 243.870063][ C0] path_mount+0x582/0x1050 [ 243.870081][ C0] ? putname+0x113/0x150 [ 243.870101][ C0] __se_sys_mount+0x2bd/0x480 [ 243.870122][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 243.870141][ C0] ? __kasan_check_write+0x18/0x20 [ 243.870159][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 243.870180][ C0] __x64_sys_mount+0xc3/0xf0 [ 243.870199][ C0] x64_sys_call+0x2021/0x2ee0 [ 243.870221][ C0] do_syscall_64+0x58/0xf0 [ 243.870243][ C0] ? clear_bhb_loop+0x50/0xa0 [ 243.870259][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.870274][ C0] RIP: 0033:0x7f7c4d58e929 [ 243.870355][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.870369][ C0] RSP: 002b:00007f7c4e3f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.870386][ C0] RAX: ffffffffffffffda RBX: 00007f7c4d7b5fa0 RCX: 00007f7c4d58e929 [ 243.870398][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000380 [ 243.870409][ C0] RBP: 00007f7c4d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 243.870420][ C0] R10: 0000000002125099 R11: 0000000000000246 R12: 0000000000000000 [ 243.870430][ C0] R13: 0000000000000000 R14: 00007f7c4d7b5fa0 R15: 00007ffddc3a9b68 [ 243.870443][ C0] [ 243.870453][ C0] Sending NMI from CPU 0 to CPUs 1: [ 244.254728][ C1] NMI backtrace for cpu 1 [ 244.254744][ C1] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 244.254769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.254779][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 244.254807][ C1] Code: cc cc cc b8 4e 4d fe c9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 3c 42 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 c3 59 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 244.254822][ C1] RSP: 0018:ffffc9000b607710 EFLAGS: 000002d3 [ 244.254838][ C1] RAX: ffffffff81435565 RBX: 0000000000000003 RCX: ffff888129763900 [ 244.254850][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 244.254861][ C1] RBP: ffffc9000b607710 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 244.254874][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 244.254888][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920016c0ee4 [ 244.254899][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 244.254914][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.254926][ C1] CR2: 0000555582c894a8 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 244.254942][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.254952][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.254963][ C1] Call Trace: [ 244.254970][ C1] [ 244.254978][ C1] kvm_wait+0x1ba/0x220 [ 244.254998][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 244.255017][ C1] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 244.255034][ C1] ? syscall_exit_to_user_mode+0x58/0xb0 [ 244.255055][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 244.255075][ C1] _raw_spin_lock+0x109/0x120 [ 244.255097][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 244.255121][ C1] mntput_no_expire+0x147/0x6c0 [ 244.255145][ C1] ? __kasan_check_write+0x18/0x20 [ 244.255165][ C1] ? lockref_put_return+0x156/0x1d0 [ 244.255193][ C1] ? mntput+0xd0/0xd0 [ 244.255209][ C1] ? __kasan_check_write+0x18/0x20 [ 244.255227][ C1] ? _raw_spin_lock+0x8c/0x120 [ 244.255250][ C1] mntput+0x63/0xd0 [ 244.255265][ C1] path_put+0x5b/0x70 [ 244.255286][ C1] exit_fs+0xe8/0x160 [ 244.255306][ C1] do_exit+0x985/0x2630 [ 244.255322][ C1] ? __kasan_check_write+0x18/0x20 [ 244.255341][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 244.255366][ C1] ? __cfi_do_exit+0x10/0x10 [ 244.255381][ C1] ? _raw_read_unlock+0x16/0x40 [ 244.255405][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 244.255429][ C1] ? remove_wait_queue+0x132/0x150 [ 244.255454][ C1] ? __kasan_check_write+0x18/0x20 [ 244.255472][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 244.255495][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 244.255518][ C1] do_group_exit+0x22a/0x300 [ 244.255535][ C1] ? __kasan_check_write+0x18/0x20 [ 244.255554][ C1] get_signal+0x139d/0x14f0 [ 244.255574][ C1] arch_do_signal_or_restart+0x96/0x720 [ 244.255595][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 244.255618][ C1] ? __kasan_check_read+0x15/0x20 [ 244.255636][ C1] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 244.255654][ C1] syscall_exit_to_user_mode+0x58/0xb0 [ 244.255674][ C1] do_syscall_64+0x64/0xf0 [ 244.255697][ C1] ? clear_bhb_loop+0x50/0xa0 [ 244.255714][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.255730][ C1] RIP: 0033:0x7f7c4d584b53 [ 244.255742][ C1] Code: Unable to access opcode bytes at 0x7f7c4d584b29. [ 244.255751][ C1] RSP: 002b:00007ffddc3a9ee8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 244.255767][ C1] RAX: fffffffffffffe00 RBX: 0000000000000441 RCX: 00007f7c4d584b53 [ 244.255779][ C1] RDX: 0000000040000000 RSI: 00007ffddc3a9f2c RDI: 00000000ffffffff [ 244.255790][ C1] RBP: 00007ffddc3a9f2c R08: 00000000278a6a80 R09: 0000000000000000 [ 244.255801][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000017b [ 244.255812][ C1] R13: 0000000000000000 R14: 000000000001abdd R15: 00007ffddc3a9f80 [ 244.255825][ C1]