last executing test programs: 3m3.234468597s ago: executing program 3 (id=513): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x7aac1, 0x0) mmap(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x1, 0x1010, r0, 0x7f5f9000) 3m3.187798031s ago: executing program 3 (id=514): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x4, 0x2}]}]}, 0x17c}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000080)={0x3}) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) ioctl$BLKFRAGET(r5, 0x1265, &(0x7f0000000000)) (async) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) 3m2.996350059s ago: executing program 3 (id=518): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private0, @in6=@empty, 0x0, 0x57, 0x0, 0x0, 0xa, 0x0, 0x110, 0x32}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2, 0x80000000}, {0x7, 0x0, 0x4}, 0x7, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2, 0x3, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 32) write(r1, &(0x7f0000000400)="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", 0x1f000) (rerun: 32) 3m2.949207614s ago: executing program 3 (id=519): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000000)) close(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r8) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200029bd7000fddbdf250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000014000200776732000000000000000000000000000800070005000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'ip6gretap0\x00', 0x20}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES8=r8]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000400)="89e7ee2c21feca4b00000000000000", 0xf}], 0x1) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040), 0x62, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x1, 0x92, "4f1614bb15e561dc18e67e46475d0f90efbcd155227f08977f0e5cea5d66550437d2c6abdbd7b05cf85542beeee0299abd483e653210b6179a629f778ae22bc8360de17714aef39b7d79c69519022862cfbdb82a4730069dc7702e663da5637ec45437d380054d0bdc4f7e822b5a21c4acb8310b268405d68974be290ab8133d66f225c41eb3e12c45e318d46cde89bc67b3"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 2m59.897403426s ago: executing program 3 (id=541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x220102, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7ffe, 0x20002) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2m59.836241352s ago: executing program 3 (id=542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000']) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff0300000009058202"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m44.863763177s ago: executing program 32 (id=542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000']) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff0300000009058202"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.385355257s ago: executing program 1 (id=2740): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c0000000301010800000000000000000300000010001640000000c90500000000000009080007400000000834001080080001400000007d0800024000000aff0800034000000006080001400000000508000340000000050800014000000000140005800e0001006674702d323030303000000008000740fffffe011000170400000081c000000000000002"], 0x8c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000040) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) fchdir(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34, 0x5, 0x8001, 0x40, 0xa, 0x3, 0x4, 0x3, 0x6f, 0x3, 0x3, 0x2, 0x4b93, 0x2, 0x0, 0x4, [0x1, 0x7]}}) close_range(r0, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x5, 0x3}, @window={0x3, 0x0, 0xfffd}, @sack_perm, @mss={0x2, 0x93d2}, @timestamp, @mss={0x2, 0xfffff260}, @window={0x3, 0xfff5, 0x8}, @window={0x3, 0x2, 0x1}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="60b0b826a64486ea4264b349088f6c5f64c7bb3745fad83b6da8f50534ad8a6fdbb203db1c097a9bfbda635eed710a24c2c99334320fd2026ec546900a5455e89c602fe643436267b20e3316c81da1ca0d6bc7023780a610c5713f762c9cc8da40d91d5fb63a97ae15ab7abe0924bcf32316f1d6a4dbb98dc88be94e8ec87620f0d4e0d98cceca19094172739b866405946d9d671a2ca22263eea679b6b669dfb5e88e763139e673001f1b7654daa1e7f53e862f6f92ae6b4f724e31d62928517362c682a2b8e7faf684c58ba72103e3242f2be4b9628cee2286b1d9", 0xdc, 0x0, 0x0, 0x0) 655.283997ms ago: executing program 4 (id=2756): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000180)=""/20, 0x14}], 0x5) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x7) 642.138228ms ago: executing program 4 (id=2757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0xf2, 0x80}, 0x20) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0x4, &(0x7f00000001c0)=""/4}, {0x10000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]}) getitimer(0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0xeeef0000, 0xe2, &(0x7f00000003c0)=""/226}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 588.244003ms ago: executing program 4 (id=2758): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r1, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x9, 0x9, 0xf) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000005c0)=0x3, 0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000c40)) (async) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\x94@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\a\x00\x00\x00\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r8, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'netdevsim0\x00', {0xf303}, 0x400}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)={0x0, 0x1000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)={0x0, 0x1000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) write(r10, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 332.828918ms ago: executing program 1 (id=2762): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 268.294194ms ago: executing program 1 (id=2763): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000004900000000fbff0004"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x30, r4, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) 267.361884ms ago: executing program 1 (id=2764): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x9ee4d000) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) (rerun: 32) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x3, 0x7}) (async, rerun: 32) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 267.132924ms ago: executing program 1 (id=2765): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}]}) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000780)={0x11, 0x0, 0x80}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x98, 0xfc}}}}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1c0000001d005f0214ffffffffffffe8070000000d00000000005e2c", 0x1c) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global=@item_012={0x2, 0x1, 0x8, "8f1f"}, @main=@item_4={0x3, 0x0, 0xb, "c082c3b0"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x85b83000) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f000001b000/0x400000)=nil) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 104.31419ms ago: executing program 2 (id=2768): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'team_slave_0\x00', 0x2}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast1}}]}, 0x190) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x15000}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x4) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000002c0)={0x7, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @empty}}}, 0x108) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 103.88608ms ago: executing program 2 (id=2770): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) (async) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0x82, 0x1c, &(0x7f00000002c0)="0b5003e1aa8e701efc433d90c8bd9c0ea8176f698e0158bd3cfd19b64ea7e0b8b312c0e72ab73fafe017b8f7dac7086ae7aa4c28f3d278f74d29d50e1cbf78cdc3c7cfdd7218c564b34690c0f1403407852be42e97e09beaaf596883c7b3d0f7d1e924beef5f3b8f663ada9d7376c8c365569552353b083d90d2f44a3d61b9c5df0bc48e5a4c7b7bbd89571804a193c6f6c4894929045fb9df77a1426a2f25c0479753801d4d1c01b51c70c34d12de984989ad548a0915ef371bdafc067ea6727debd6ca1654bba32fd1750a2b26ec3145aceb84cbef0975ba404c321706217cc05cedd0c045f3297d19551e9d20a2066beaeeb563c87eeb0351293848b94187a006914d213eebba99b3a0dff85708fa706e3cc238e33b984eb31bc1acc63a8a580db0cbd8a0ba742e746b1b6603ceb66a1b03a18e81fa5553f97c2abbe562c0e438d6626d99dc179d9a5e132eee167ab0fc2145187a1d2eb4f17fb3e7838f08bc0b97a5312c85c15ca357c04066fb7b61ff30a632ad639d0d940d803f5dcf98d73cc32f763e1338a54ba3236aefbb050c91a0e50c99c4d4c3809b717706555c6481648e41f310c4fb5f506cf3b78ab4991d0fce43639892057acbae38b84c028643ea5bb342e710f6191ecba594d5bf8fb2acf256695f1522d8690a134b0b0e94e4d7a4179a93d654f3414dcb67da25399d5ab3339a740470e51adb14763ef1fac0dd163292212c235aac9425825c732101b3e687854d1a35b1533481b4c34a4223b51a8bac7c5038690669fb419627b4a6b08cea0c9209e8de1406fa97cccb91a7997a613e4372e2cba8a42dc326e1977471150f84af85fe14f78cd25b3521cab3ddcbd388981971f18147708391371f2c7425a689eac2be765aa567211eae8d21e65b5e725c44b5c58be84747c8b7422464b602ef3661617a59c0e3e2bc7ecddc6f12fdd2fe781a53408db1ab0ddb8848affb6edcddbf1d64e2181fc4af5c9dbedbff2d7ff3fecce0183f25007cb2591b951f96bc8078e2ea645c2d5e5ab4ca5440073fd2e51c9e7af06daca61201d31d2e01a97654734df535ab7cf02722bd8c1d77014f9b2920e1a967eef20f887ba714672048825948fd57b313cbf5d95ef7cbc93b42297decaabc7f5b6ee508f72da7810995223691849b1e6f1dbd5683a17671d2de360f223dfdb1269d9e38b5805cfd43df2946c40b04f15e6e4bc6e729c29354fb3f48389ef3efe3db55a58f077615af0e21e6cd8db22d0dab0ee945cff74dc660fd19362a92c1a936d789ca91c275dd58c7b03d32ef47cda908acef1886d14fdf06d3fcbf8d88aff95c6d7bef21878c1b00b2699907281040b3cae61fede128f49d3a627524227e1a40105bce650eac911d0092da60579df49953ee1c4b0c5eaaf425c3860ece4ce86466466b394da104a7a89c3aeb6873020376"}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f8000000000000000f010000000001003188a9638e93f1e524a246681ba7d50a7c34f61d76b0685b9833380a91bd3b75bcfabb96ed5cdfb9eafb899f92ed6f1be04c5ddf6ccea52b20310b22fc6068cf9999b01c58c5456178ae28843f57fa8e747179d984c29e00000000000000001251cbfc2249080000000000000039fe6c69ea9923cf7a413432a62b1994f436d0e723b38d5f4ab28cb65b1522037cefeb9135b60408048047832ff5714a6b9b0540b9c3f9baac7078bde3075bb79d1435a7a33b47e2a6f53c181128648e77bf6f7c394251eb3b5a3ed25f397400641e7ad210f44596732908d04c40f9b8334ba528d5232a62b5911f264e01000a0000000000a0000000000000000c01000005000000aa1eba75daa119eab10c3e6f5a9e243bc39418b7d79502b0d34f7ac73c72ccaea888ce77a3aea029e3fb960a2e9ef5ab3717d16bde7f41c490feefe159d11d9d40ab00c003dccf756e5c8e5ddcd8a07cf6149f2a292c528608cdbfaf587f847b9d794c3fc180c20e879def0fc0d0b1761f877d0dd8c2cb86b4c2bf97f62c0b05cfd9e16028a5"], 0x198}}], 0x1, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000084000500"], 0x13c}}, 0x20040880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000180)={{0x200, 0x977}, 0x100, './file0\x00'}) 103.33174ms ago: executing program 0 (id=2771): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1e0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004d80)=""/4098, 0x1002}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f00000018c0)=""/256, 0x100}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000380)=""/155, 0x9b}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x2100, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x2a, @mcast1, 0x8}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8481, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') chdir(&(0x7f0000000340)='./file0\x00') read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 98.86382ms ago: executing program 0 (id=2772): modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x2, 0x20000800, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 82.162152ms ago: executing program 0 (id=2773): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000d) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x24}], 0x1}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r1, 0xc0046209, 0x0) 30.251107ms ago: executing program 0 (id=2774): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x20000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x174) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008801) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="07000000000000000000000000000000048bd35996c592a756788fef7a4b935ee68378a17b9aa85bcafe435e255e843a601641e0e889e6ba9407ad27d44fab01e4e7a34448408f98cf29cfd123ddded94a67d0044b616401a989b3d3d593362e63df8be54c7293cdb5a205776d3f58b826374a8d1fcbbc15ca5693a293d03bea768529c31370008995655a0650246bb224e24dafdb9c263a4f518b44be0e9b08", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000200003fd31340e92c4bb8"], 0x48}, 0x300}, 0x8040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=0x0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0a2b1b"], 0x2c}, {&(0x7f00000004c0)={0x18c, 0x216, 0x2, 0x70bd26, 0x25dfdbff, "", [@nested={0x17c, 0xdc, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid}, @generic="aa4ed1a770039ad387fb5c5ee874e1f5d8913e6985b18d521a4d12a6bd20184e4a81d16728027bd0e51f14c357a281fe726514e4b33de0ae72563768d6ab08249f8f1738", @typed={0x8, 0xb3, 0x0, 0x0, @uid}, @generic="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", @nested={0x4, 0x61}, @generic="0d897ad1d6161411248e14f7e8a1dacfa69bc83fd2fb2a578f5efe1b02", @typed={0x4, 0x91}]}]}, 0x18c}], 0x2, 0x0, 0x0, 0x404c010}, 0x4080) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) 29.937707ms ago: executing program 2 (id=2775): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 25.810627ms ago: executing program 2 (id=2776): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x806, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) 25.371427ms ago: executing program 0 (id=2777): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3.903539ms ago: executing program 2 (id=2778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000002a40)=0xffff, 0x4) sendmsg$inet(r1, &(0x7f0000003180)={&(0x7f0000002c80)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x48800) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000040), 0x4800, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES8]) 2.485539ms ago: executing program 4 (id=2779): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sync_file_range(r0, 0x1899, 0x5528, 0x3) r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file2\x00', 0xffffffffffffff9c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_null}]}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) sync_file_range(r0, 0x1899, 0x5528, 0x3) (async) fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file2\x00', 0xffffffffffffff9c) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) (async) close(r3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_null}]}) (async) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) (async) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) (async) 1.99878ms ago: executing program 2 (id=2780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f00000001c0)={0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = epoll_create(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r4, r0, 0xfffffffb}) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008842) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005400)={{0x1, 0x0, 0x80, {0x0, 0x8000000, 0x4}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81eb9aec8757b2a585ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) read$FUSE(r5, &(0x7f0000001340)={0x2020}, 0x2020) pipe(&(0x7f0000001300)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r11, 0x0, 0x0, 0x10000, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000080)={0xb180000000000000, 0x5000, 0xffffffffffffffff, 0x1, 0xa}) r12 = signalfd4(r5, &(0x7f0000000000)={[0x1]}, 0x8, 0x80800) openat(r12, &(0x7f0000000040)='./file0\x00', 0x404200, 0x2) 0s ago: executing program 0 (id=2781): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0x5, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0xa0c, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc0, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire={0x40046305, 0x3}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x110b}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ficient options for proto=fd [ 149.304425][ T36] audit: type=1400 audit(7039849024.907:50903): avc: denied { accept } for pid=4967 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.445223][ T4976] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 149.453133][ T4976] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1601'. [ 149.520710][ T4987] __vm_enough_memory: pid: 4987, comm: syz.2.1602, bytes: 18014402804453376 not enough memory for the allocation [ 149.719236][ T5005] overlayfs: failed to clone upperpath [ 149.740241][ T36] audit: type=1326 audit(7039849025.320:50904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.764238][ T36] audit: type=1326 audit(7039849025.320:50905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.787974][ T36] audit: type=1326 audit(7039849025.329:50906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.812374][ T36] audit: type=1326 audit(7039849025.329:50907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.836598][ T36] audit: type=1326 audit(7039849025.329:50908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.860269][ T36] audit: type=1326 audit(7039849025.329:50909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.888526][ T36] audit: type=1326 audit(7039849025.329:50910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 149.912695][ T36] audit: type=1326 audit(7039849025.329:50911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x7ffc0000 [ 150.512532][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 150.623940][ T5037] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1623'. [ 150.679744][ T5043] devpts: called with bogus options [ 150.802517][ T5075] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1635'. [ 150.834629][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'. [ 150.845990][ T5081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1637'. [ 151.012316][ T5093] tipc: Enabled bearer , priority 26 [ 151.116555][ T359] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 151.255081][ T359] usb 3-1: device descriptor read/64, error -71 [ 151.349303][ T5132] fuse: Bad value for 'fd' [ 151.380125][ T5141] syz.4.1657: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 151.396323][ T5141] CPU: 0 UID: 0 PID: 5141 Comm: syz.4.1657 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808 [ 151.396365][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.396383][ T5141] Call Trace: [ 151.396392][ T5141] [ 151.396404][ T5141] __dump_stack+0x21/0x30 [ 151.396441][ T5141] dump_stack_lvl+0x10c/0x190 [ 151.396477][ T5141] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.396502][ T5141] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 151.396529][ T5141] dump_stack+0x19/0x20 [ 151.396552][ T5141] warn_alloc+0x1bc/0x2a0 [ 151.396576][ T5141] ? __cfi_warn_alloc+0x10/0x10 [ 151.396599][ T5141] ? kasan_save_track+0x4f/0x80 [ 151.396618][ T5141] ? __kasan_kmalloc+0x96/0xb0 [ 151.396640][ T5141] ? __kmalloc_cache_noprof+0x24c/0x490 [ 151.396657][ T5141] ? do_sock_setsockopt+0x26d/0x400 [ 151.396681][ T5141] ? __x64_sys_setsockopt+0x1b8/0x250 [ 151.396704][ T5141] ? x64_sys_call+0x2adc/0x2ee0 [ 151.396729][ T5141] ? do_syscall_64+0x58/0xf0 [ 151.396750][ T5141] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.396779][ T5141] __vmalloc_node_range_noprof+0x135/0x1420 [ 151.396809][ T5141] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 151.396835][ T5141] ? kasan_save_alloc_info+0x40/0x50 [ 151.396862][ T5141] ? __kasan_kmalloc+0x96/0xb0 [ 151.396880][ T5141] ? __kmalloc_cache_noprof+0x24c/0x490 [ 151.396897][ T5141] ? futex_setup_timer+0xb4/0xd0 [ 151.396914][ T5141] vmalloc_user_noprof+0x77/0x90 [ 151.396938][ T5141] ? xskq_create+0xdb/0x2a0 [ 151.396963][ T5141] xskq_create+0xdb/0x2a0 [ 151.396986][ T5141] xsk_init_queue+0xb6/0x120 [ 151.397010][ T5141] xsk_setsockopt+0x43f/0x6f0 [ 151.397032][ T5141] ? __cfi_xsk_setsockopt+0x10/0x10 [ 151.397056][ T5141] ? do_futex+0x309/0x500 [ 151.397073][ T5141] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 151.397096][ T5141] ? security_socket_setsockopt+0x33/0xd0 [ 151.397114][ T5141] ? __cfi_xsk_setsockopt+0x10/0x10 [ 151.397137][ T5141] do_sock_setsockopt+0x26d/0x400 [ 151.397160][ T5141] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 151.397187][ T5141] __x64_sys_setsockopt+0x1b8/0x250 [ 151.397212][ T5141] x64_sys_call+0x2adc/0x2ee0 [ 151.397240][ T5141] do_syscall_64+0x58/0xf0 [ 151.397262][ T5141] ? clear_bhb_loop+0x50/0xa0 [ 151.397279][ T5141] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.397306][ T5141] RIP: 0033:0x7f9c62f8eec9 [ 151.397322][ T5141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.397337][ T5141] RSP: 002b:00007f9c63e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.397359][ T5141] RAX: ffffffffffffffda RBX: 00007f9c631e5fa0 RCX: 00007f9c62f8eec9 [ 151.397373][ T5141] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 151.397385][ T5141] RBP: 00007f9c63011f91 R08: 0000000000000004 R09: 0000000000000000 [ 151.397396][ T5141] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.397408][ T5141] R13: 00007f9c631e6038 R14: 00007f9c631e5fa0 R15: 00007ffc03c59278 [ 151.397425][ T5141] [ 151.397540][ T5141] Mem-Info: [ 151.702378][ T5141] active_anon:48575 inactive_anon:50 isolated_anon:0 [ 151.702378][ T5141] active_file:22020 inactive_file:2279 isolated_file:0 [ 151.702378][ T5141] unevictable:0 dirty:77 writeback:0 [ 151.702378][ T5141] slab_reclaimable:6644 slab_unreclaimable:74680 [ 151.702378][ T5141] mapped:32415 shmem:38202 pagetables:1355 [ 151.702378][ T5141] sec_pagetables:0 bounce:0 [ 151.702378][ T5141] kernel_misc_reclaimable:0 [ 151.702378][ T5141] free:1464627 free_pcp:2670 free_cma:0 [ 151.748417][ T5141] Node 0 active_anon:194328kB inactive_anon:200kB active_file:88080kB inactive_file:9116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129676kB dirty:308kB writeback:0kB shmem:152808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6368kB pagetables:5324kB sec_pagetables:0kB all_unreclaimable? no [ 151.756075][ T359] usb 3-1: device descriptor read/64, error -71 [ 151.781260][ T5141] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965940kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:5660kB free_cma:0kB [ 151.818207][ T5141] lowmem_reserve[]: 0 3921 3921 [ 151.823191][ T5141] Normal free:2898296kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:194328kB inactive_anon:200kB active_file:88080kB inactive_file:9116kB unevictable:0kB writepending:308kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4948kB local_pcp:1936kB free_cma:0kB [ 151.855002][ T5141] lowmem_reserve[]: 0 0 0 [ 151.859507][ T5141] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 151.875464][ T5141] Normal: 1961*4kB (UME) 1440*8kB (UE) 868*16kB (UE) 375*32kB (UE) 388*64kB (UME) 72*128kB (UE) 8*256kB (UME) 24*512kB (UME) 7*1024kB (ME) 14*2048kB (UME) 675*4096kB (UM) = 2894276kB [ 151.894462][ T5141] 63922 total pagecache pages [ 151.899693][ T5141] 50 pages in swap cache [ 151.904224][ T5141] Free swap = 124124kB [ 151.909003][ T5141] Total swap = 124996kB [ 151.913361][ T5141] 2097051 pages RAM [ 151.917493][ T5141] 0 pages HighMem/MovableOnly [ 151.922317][ T5141] 351536 pages reserved [ 151.926800][ T5141] 0 pages cma reserved [ 151.934511][ T5141] Memory allocations: [ 151.938871][ T5141] 0 B 0 init/main.c:1370 func:do_initcalls [ 151.946459][ T5141] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 151.955367][ T5141] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 151.963334][ T5141] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 151.971502][ T5141] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 151.979589][ T5141] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 151.988472][ T5141] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 151.996515][ T5141] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 152.005888][ T5141] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 152.014468][ T5141] 0 B 0 init/initramfs.c:101 func:find_link [ 152.075815][ T359] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 152.214416][ T359] usb 3-1: device descriptor read/64, error -71 [ 152.470233][ T359] usb 3-1: device descriptor read/64, error -71 [ 152.587568][ T359] usb usb3-port1: attempt power cycle [ 152.894250][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 152.942594][ T5177] fuse: Bad value for 'user_id' [ 152.947620][ T5177] fuse: Bad value for 'user_id' [ 152.952825][ T359] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 152.969275][ T5179] 9p filesystem being mounted at /174/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 152.982987][ T359] usb 3-1: device descriptor read/8, error -71 [ 153.134120][ T359] usb 3-1: device descriptor read/8, error -71 [ 153.408178][ T359] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 153.430838][ T359] usb 3-1: device descriptor read/8, error -71 [ 153.579786][ T359] usb 3-1: device descriptor read/8, error -71 [ 153.696160][ T359] usb usb3-port1: unable to enumerate USB device [ 154.187182][ T5251] 9pnet_fd: Insufficient options for proto=fd [ 154.378075][ T359] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 154.516642][ T359] usb 3-1: device descriptor read/64, error -71 [ 154.692494][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 154.772445][ T359] usb 3-1: device descriptor read/64, error -71 [ 154.836268][ T5268] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1703'. [ 155.060251][ T359] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 155.209519][ T359] usb 3-1: device descriptor read/64, error -71 [ 155.465270][ T359] usb 3-1: device descriptor read/64, error -71 [ 155.477119][ T5309] x_tables: duplicate underflow at hook 2 [ 155.521392][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 155.521415][ T36] audit: type=1400 audit(7039849030.752:50934): avc: denied { shutdown } for pid=5317 comm="syz.0.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.567963][ T36] audit: type=1400 audit(7039849030.789:50935): avc: denied { nlmsg_tty_audit } for pid=5326 comm="syz.4.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.589350][ T359] usb usb3-port1: attempt power cycle [ 155.694042][ T5340] netlink: 'syz.4.1725': attribute type 4 has an invalid length. [ 155.702431][ T5340] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1725'. [ 155.881877][ T5362] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 155.890000][ T5362] netlink: 992 bytes leftover after parsing attributes in process `syz.4.1732'. [ 155.955608][ T359] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 155.978148][ T359] usb 3-1: device descriptor read/8, error -71 [ 156.111544][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 156.122240][ T359] usb 3-1: device descriptor read/8, error -71 [ 156.226063][ T5379] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1740'. [ 156.236044][ T5379] netlink: 'syz.1.1740': attribute type 27 has an invalid length. [ 156.247492][ T5379] sit0: left promiscuous mode [ 156.266829][ T5379] veth0_vlan: left promiscuous mode [ 156.272546][ T5379] veth0_vlan: entered promiscuous mode [ 156.279340][ T5379] veth1_macvtap: left promiscuous mode [ 156.285674][ T5379] veth1_macvtap: entered promiscuous mode [ 156.293187][ T36] audit: type=1400 audit(7039849031.474:50936): avc: denied { read } for pid=5378 comm="syz.1.1740" path="socket:[32540]" dev="sockfs" ino=32540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.296197][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.325148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.335769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.342913][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.351857][ T5382] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1741'. [ 156.392606][ T359] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 156.415105][ T359] usb 3-1: device descriptor read/8, error -71 [ 156.555081][ T359] usb 3-1: device descriptor read/8, error -71 [ 156.669931][ T359] usb usb3-port1: unable to enumerate USB device [ 156.712688][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 156.720778][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 156.744405][ T1735] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 156.797807][ T1735] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 157.021552][ T1735] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 157.372411][ T1558] raw-gadget.0 gadget.1: failed to queue disconnect event [ 157.400997][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 157.515636][ T13] bridge_slave_1: left allmulticast mode [ 157.521373][ T13] bridge_slave_1: left promiscuous mode [ 157.527469][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.536156][ T13] bridge_slave_0: left allmulticast mode [ 157.541861][ T13] bridge_slave_0: left promiscuous mode [ 157.548178][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.558094][ T13] tipc: Resetting bearer [ 157.583529][ T13] tipc: Disabling bearer [ 157.587328][ T5477] 9p filesystem being mounted at /483/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 157.671651][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 157.770782][ T13] tipc: Left network mode [ 157.781338][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.788550][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.796703][ T5466] bridge_slave_0: entered allmulticast mode [ 157.803325][ T5466] bridge_slave_0: entered promiscuous mode [ 157.811113][ T13] veth1_macvtap: left promiscuous mode [ 157.816670][ T13] veth0_vlan: left promiscuous mode [ 157.833788][ T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 157.845441][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.865828][ T31] usb 3-1: config 0 descriptor?? [ 157.887257][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.894546][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.902242][ T5466] bridge_slave_1: entered allmulticast mode [ 157.909175][ T5466] bridge_slave_1: entered promiscuous mode [ 158.000764][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.007974][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.015425][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.022484][ T5466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.049371][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.056998][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.067961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.075036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.086396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.093505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.127819][ T5466] veth0_vlan: entered promiscuous mode [ 158.142519][ T5466] veth1_macvtap: entered promiscuous mode [ 158.186636][ T5503] netlink: 'syz.1.1762': attribute type 27 has an invalid length. [ 158.620284][ T36] audit: type=1326 audit(7039849033.651:50937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.0.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aefb8eec9 code=0x0 [ 158.705574][ T1825] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.865480][ T1825] usb 2-1: Using ep0 maxpacket: 32 [ 158.871889][ T1825] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 158.880393][ T1825] usb 2-1: config 4 has no interface number 0 [ 158.886552][ T1825] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.897769][ T1825] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.907806][ T1825] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.916939][ T1825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.927733][ T1825] hub 2-1:4.128: USB hub found [ 159.140144][ T1825] hub 2-1:4.128: 2 ports detected [ 159.145338][ T1825] hub 2-1:4.128: Using single TT (err -22) [ 159.166763][ T31] usb 3-1: Cannot set autoneg [ 159.178809][ T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 159.195222][ T31] usb 3-1: USB disconnect, device number 45 [ 159.310590][ T5530] 9pnet_fd: Insufficient options for proto=fd [ 159.390194][ T1825] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 159.396832][ T1825] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 159.419991][ T1825] usb 2-1: USB disconnect, device number 10 [ 159.695377][ T5535] overlayfs: failed to clone upperpath [ 160.027231][ T1825] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 160.187863][ T1825] usb 3-1: not running at top speed; connect to a high speed hub [ 160.196447][ T1825] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 160.205738][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.213455][ T1825] usb 3-1: config 1 has no interface number 1 [ 160.219605][ T1825] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.234039][ T1825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.243145][ T1825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.251350][ T1825] usb 3-1: Product: syz [ 160.255555][ T1825] usb 3-1: Manufacturer: syz [ 160.260250][ T1825] usb 3-1: SerialNumber: syz [ 160.400502][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 160.408453][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 160.420896][ T31] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.429344][ T31] usb 2-1: Product: syz [ 160.434161][ T31] usb 2-1: Manufacturer: syz [ 160.438922][ T31] usb 2-1: SerialNumber: syz [ 160.453985][ T31] usb 2-1: config 0 descriptor?? [ 160.737307][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 161.234205][ T36] audit: type=1400 audit(7039849036.109:50938): avc: denied { read } for pid=5593 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.422979][ T36] audit: type=1400 audit(7039849036.278:50939): avc: denied { relabelfrom } for pid=5610 comm="syz.2.1816" name="NETLINK" dev="sockfs" ino=34093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.452548][ T36] audit: type=1400 audit(7039849036.278:50940): avc: denied { relabelto } for pid=5610 comm="syz.2.1816" name="NETLINK" dev="sockfs" ino=34093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 162.140213][ T5620] 9pnet_fd: Insufficient options for proto=fd [ 162.372065][ T36] audit: type=1400 audit(7039849037.169:50941): avc: denied { getopt } for pid=5625 comm="syz.2.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.405080][ T5626] rust_binder: Error while translating object. [ 162.405161][ T5626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 162.411408][ T5626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:926 [ 162.433134][ T36] audit: type=1400 audit(7039849037.169:50942): avc: denied { ioctl } for pid=5625 comm="syz.2.1822" path="socket:[34130]" dev="sockfs" ino=34130 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.493030][ T36] audit: type=1400 audit(7039849037.291:50943): avc: denied { create } for pid=5632 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.515728][ T36] audit: type=1400 audit(7039849037.310:50944): avc: denied { write } for pid=5632 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.555108][ T36] audit: type=1400 audit(7039849037.310:50945): avc: denied { nlmsg_write } for pid=5632 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.604385][ T5641] 9pnet_fd: Insufficient options for proto=fd [ 162.658818][ T5650] 9pnet: Could not find request transport: rdma [ 162.893968][ T36] audit: type=1400 audit(7039849037.657:50946): avc: denied { execmem } for pid=5668 comm="syz.4.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 162.955895][ T36] audit: type=1400 audit(7039849037.723:50947): avc: denied { setattr } for pid=5673 comm="syz.4.1837" name="/" dev="configfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.155889][ T5677] netlink: 'syz.4.1838': attribute type 22 has an invalid length. [ 163.184265][ T1825] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 163.194957][ T31] usb 2-1: USB disconnect, device number 11 [ 163.204881][ T1825] usb 3-1: failed to enable PITCH for EP 0x82 [ 163.241846][ T1825] usb 3-1: USB disconnect, device number 46 [ 163.250913][ T5442] udevd[5442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 163.264229][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 163.310519][ T5691] devpts: called with bogus options [ 163.565905][ T1825] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 163.595280][ T5717] usb usb8: usbfs: process 5717 (syz.1.1850) did not claim interface 0 before use [ 163.726984][ T1825] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.735863][ T1825] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 163.746201][ T1825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.755366][ T1825] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 163.766500][ T1825] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8784, setting to 1024 [ 163.778845][ T1825] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.788082][ T1825] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.796371][ T1825] usb 3-1: Product: syz [ 163.800602][ T1825] usb 3-1: Manufacturer: syz [ 163.808201][ T1825] cdc_wdm 3-1:1.0: skipping garbage [ 163.813520][ T1825] cdc_wdm 3-1:1.0: skipping garbage [ 163.819490][ T1825] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.825497][ T1825] cdc_wdm 3-1:1.0: Unknown control protocol [ 164.238818][ T1825] usb 3-1: USB disconnect, device number 47 [ 164.449317][ T5731] overlayfs: failed to clone upperpath [ 164.535236][ T5749] netlink: 'syz.0.1861': attribute type 12 has an invalid length. [ 164.581275][ T5745] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 164.614504][ T5764] fuse: Bad value for 'fd' [ 164.686409][ T5773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.686447][ T5773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.704847][ T5778] can: request_module (can-proto-5) failed. [ 164.717494][ T5778] can: request_module (can-proto-5) failed. [ 164.723617][ T5778] can: request_module (can-proto-5) failed. [ 164.729660][ T5778] can: request_module (can-proto-5) failed. [ 164.735640][ T5778] can: request_module (can-proto-5) failed. [ 164.741705][ T5778] can: request_module (can-proto-5) failed. [ 164.747768][ T5778] can: request_module (can-proto-5) failed. [ 164.753963][ T5778] can: request_module (can-proto-5) failed. [ 164.759979][ T5778] can: request_module (can-proto-5) failed. [ 165.007757][ T5787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:941 [ 165.158347][ T5800] rust_binder: 5788 RLIMIT_NICE not set [ 165.285109][ T5807] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 165.303487][ T1735] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 165.381687][ T5813] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 165.389432][ T5813] rust_binder: Write failure EINVAL in pid:41 [ 165.463147][ T1735] usb 3-1: Using ep0 maxpacket: 8 [ 165.475850][ T1735] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.484241][ T1735] usb 3-1: config 179 has no interface number 0 [ 165.490692][ T1735] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 165.502217][ T1735] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 165.513952][ T1735] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 165.524102][ T1735] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.537575][ T1735] usb 3-1: config 179 interface 65 has no altsetting 0 [ 165.544637][ T1735] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 165.554000][ T1735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.644352][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.778231][ T5790] can: request_module (can-proto-6) failed. [ 165.785280][ T31] usb 3-1: USB disconnect, device number 48 [ 165.804211][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 165.811505][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 165.822768][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.832585][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 165.840771][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 165.850200][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.858278][ T9] usb 2-1: Product: Х [ 165.862425][ T9] usb 2-1: Manufacturer: 뵲릤ꔴ鞁듢넋륭욆ꮯ䥀 [ 165.870489][ T9] usb 2-1: SerialNumber: ᱇㣪妰ᵉ껽٦㾙淢윂臂빻䋷陚⁦䴗侅沵词큛應僕㶱평登꾒ᕱ킧鐦籁鑸㧾㼜杀︴㖮 [ 166.111136][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 166.118203][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 166.130592][ T9] usb 2-1: USB disconnect, device number 12 [ 166.294750][ T5854] warn_alloc: 2 callbacks suppressed [ 166.294778][ T5854] syz.0.1895: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 166.304606][ T5857] netlink: 'syz.4.1896': attribute type 1 has an invalid length. [ 166.316628][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.0.1895 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808 [ 166.316673][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.316691][ T5854] Call Trace: [ 166.316700][ T5854] [ 166.316713][ T5854] __dump_stack+0x21/0x30 [ 166.316758][ T5854] dump_stack_lvl+0x10c/0x190 [ 166.316791][ T5854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.316825][ T5854] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 166.316861][ T5854] dump_stack+0x19/0x20 [ 166.316891][ T5854] warn_alloc+0x1bc/0x2a0 [ 166.316926][ T5854] ? __cfi_warn_alloc+0x10/0x10 [ 166.316961][ T5854] ? kasan_save_track+0x4f/0x80 [ 166.316988][ T5854] ? __kasan_kmalloc+0x96/0xb0 [ 166.317015][ T5854] ? __kmalloc_cache_noprof+0x24c/0x490 [ 166.317042][ T5854] ? do_sock_setsockopt+0x26d/0x400 [ 166.317077][ T5854] ? __x64_sys_setsockopt+0x1b8/0x250 [ 166.317110][ T5854] ? x64_sys_call+0x2adc/0x2ee0 [ 166.317154][ T5854] ? do_syscall_64+0x58/0xf0 [ 166.317184][ T5854] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.317228][ T5854] __vmalloc_node_range_noprof+0x135/0x1420 [ 166.317269][ T5854] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 166.317306][ T5854] ? kasan_save_alloc_info+0x40/0x50 [ 166.317351][ T5854] ? __kasan_kmalloc+0x96/0xb0 [ 166.317377][ T5854] ? __kmalloc_cache_noprof+0x24c/0x490 [ 166.317400][ T5854] ? futex_setup_timer+0xb4/0xd0 [ 166.317426][ T5854] vmalloc_user_noprof+0x77/0x90 [ 166.317461][ T5854] ? xskq_create+0xdb/0x2a0 [ 166.317497][ T5854] xskq_create+0xdb/0x2a0 [ 166.317530][ T5854] xsk_init_queue+0xb6/0x120 [ 166.317565][ T5854] xsk_setsockopt+0x43f/0x6f0 [ 166.317598][ T5854] ? __cfi_xsk_setsockopt+0x10/0x10 [ 166.317629][ T5854] ? do_futex+0x309/0x500 [ 166.317656][ T5854] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 166.317687][ T5854] ? security_socket_setsockopt+0x33/0xd0 [ 166.317712][ T5854] ? __cfi_xsk_setsockopt+0x10/0x10 [ 166.317746][ T5854] do_sock_setsockopt+0x26d/0x400 [ 166.317778][ T5854] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 166.317816][ T5854] __x64_sys_setsockopt+0x1b8/0x250 [ 166.317848][ T5854] x64_sys_call+0x2adc/0x2ee0 [ 166.317883][ T5854] do_syscall_64+0x58/0xf0 [ 166.317912][ T5854] ? clear_bhb_loop+0x50/0xa0 [ 166.317937][ T5854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.317975][ T5854] RIP: 0033:0x7f9aefb8eec9 [ 166.317996][ T5854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.318019][ T5854] RSP: 002b:00007f9af0992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.318048][ T5854] RAX: ffffffffffffffda RBX: 00007f9aefde6090 RCX: 00007f9aefb8eec9 [ 166.318070][ T5854] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 166.318086][ T5854] RBP: 00007f9aefc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 166.318104][ T5854] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.318127][ T5854] R13: 00007f9aefde6128 R14: 00007f9aefde6090 R15: 00007ffdea7768a8 [ 166.318151][ T5854] [ 166.318162][ T5854] Mem-Info: [ 166.471430][ T5873] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 166.476339][ T5854] active_anon:49378 inactive_anon:56 isolated_anon:0 [ 166.476339][ T5854] active_file:22076 inactive_file:2291 isolated_file:0 [ 166.476339][ T5854] unevictable:0 dirty:51 writeback:0 [ 166.476339][ T5854] slab_reclaimable:7177 slab_unreclaimable:74448 [ 166.476339][ T5854] mapped:29359 shmem:40066 pagetables:1139 [ 166.476339][ T5854] sec_pagetables:0 bounce:0 [ 166.476339][ T5854] kernel_misc_reclaimable:0 [ 166.476339][ T5854] free:1461813 free_pcp:4053 free_cma:0 [ 166.484044][ T5873] netlink: 'syz.2.1903': attribute type 17 has an invalid length. [ 166.485159][ T5854] Node 0 active_anon:197512kB inactive_anon:224kB active_file:88304kB inactive_file:9164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:204kB writeback:0kB shmem:160264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6032kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no [ 166.706740][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 166.706768][ T36] audit: type=1400 audit(7039849041.232:50961): avc: denied { map } for pid=5881 comm="syz.1.1905" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.721892][ T5854] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965940kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:68kB free_cma:0kB [ 166.762135][ T36] audit: type=1400 audit(7039849041.288:50962): avc: denied { execute } for pid=5886 comm="syz.4.1907" name="file0" dev="ramfs" ino=34607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 166.782014][ T5854] lowmem_reserve[]: [ 166.806025][ T36] audit: type=1400 audit(7039849041.335:50963): avc: denied { execute_no_trans } for pid=5886 comm="syz.4.1907" path="/file0" dev="ramfs" ino=34607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 166.817741][ T5891] 9pnet_fd: Insufficient options for proto=fd [ 166.840290][ T5854] 0 3921 3921 [ 166.843723][ T5854] Normal free:2892196kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:197648kB inactive_anon:224kB active_file:89304kB inactive_file:9164kB unevictable:0kB writepending:204kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3880kB local_pcp:1312kB free_cma:0kB [ 166.876282][ T5854] lowmem_reserve[]: 0 0 0 [ 166.880855][ T5854] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 166.897077][ T5854] Normal: 17*4kB (E) 1258*8kB (UME) 1818*16kB (UME) 1716*32kB (UME) 217*64kB (UME) 74*128kB (UME) 35*256kB (UME) 16*512kB (UME) 13*1024kB (UME) 11*2048kB (UME) 661*4096kB (UM) = 2877940kB [ 166.916314][ T5854] 65557 total pagecache pages [ 166.921076][ T5854] 56 pages in swap cache [ 166.925676][ T5854] Free swap = 124356kB [ 166.930014][ T5854] Total swap = 124996kB [ 166.934557][ T5854] 2097051 pages RAM [ 166.938435][ T5854] 0 pages HighMem/MovableOnly [ 166.943262][ T5854] 351536 pages reserved [ 166.947835][ T5854] 0 pages cma reserved [ 166.954879][ T5854] Memory allocations: [ 166.959398][ T5854] 0 B 0 init/main.c:1370 func:do_initcalls [ 166.967558][ T5854] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 166.975822][ T5854] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 166.983885][ T5854] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 166.992004][ T5854] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 167.000201][ T5854] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 167.009046][ T5854] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 167.017089][ T5854] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 167.025449][ T5854] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 167.025797][ T36] audit: type=1400 audit(7039849041.541:50964): avc: denied { setattr } for pid=5895 comm="syz.2.1909" name="RFCOMM" dev="sockfs" ino=34623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.033882][ T5854] 0 B 0 init/initramfs.c:101 func:find_link [ 167.366136][ T5909] tipc: Enabling of bearer rejected, failed to enable media [ 167.374927][ T5909] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1913'. [ 167.602590][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1920'. [ 167.611763][ T5930] tipc: Invalid UDP bearer configuration [ 167.611789][ T5930] tipc: Enabling of bearer rejected, failed to enable media [ 167.710760][ T5951] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 167.711697][ T36] audit: type=1400 audit(7039849042.179:50965): avc: denied { connect } for pid=5948 comm="syz.1.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.783985][ T36] audit: type=1400 audit(7039849042.245:50966): avc: denied { bind } for pid=5935 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.808833][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 167.873183][ T36] audit: type=1326 audit(7039849042.339:50967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.1.1931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cc158eec9 code=0x0 [ 168.309026][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.468872][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 168.491374][ T31] usb 2-1: config 1 interface 0 altsetting 175 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 168.510811][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 168.542538][ T5985] netlink: 'syz.4.1938': attribute type 4 has an invalid length. [ 168.545149][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 168.550495][ T5985] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1938'. [ 168.575120][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.594281][ T31] usb 2-1: Product: ࠌ [ 168.603778][ T31] usb 2-1: Manufacturer: 怴摅㻓ᖘ茽உ贻덳짵ሀྀꃾ掲챑㯮ꉠ蘭줝愆ߩ辿⼳蜔嘹팫뀘炲욡뢕놿ಞ黶꣛䑁슒$᎙닒嗙垻が➘᪙㩤㡐輢ᬜ忷㞄蕨䍶쨓⊙ൾ㵋喍泡촵⪑넶㈧䮙욿혃ⓒ㏀텧侶뎢鏓ᴐ㿪⌤ࡧ꧊먪䄪욿魜ċ渆费ⲁඵ앑襡젗 [ 168.622073][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1939'. [ 168.633594][ T31] usb 2-1: SerialNumber: ఄ [ 168.642484][ T5987] 0{X: renamed from bridge_slave_1 [ 168.653986][ T5987] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 168.678300][ T36] audit: type=1326 audit(7039849043.089:50968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.4.1943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c62f8eec9 code=0x0 [ 168.873761][ T31] usbhid 2-1:1.0: can't add hid device: -71 [ 168.880114][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 168.893558][ T31] usb 2-1: USB disconnect, device number 13 [ 168.940998][ T36] audit: type=1326 audit(7039849043.343:50969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e98eec9 code=0x7fc00000 [ 168.964616][ T36] audit: type=1326 audit(7039849043.343:50970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e98eec9 code=0x7fc00000 [ 169.014635][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.035756][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.406867][ T31] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 169.507965][ T6040] 9pnet_fd: Insufficient options for proto=fd [ 169.567853][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 169.598356][ T31] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.611609][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.618254][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 169.627650][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.640004][ T31] usb 2-1: config 0 descriptor?? [ 169.938906][ T6050] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 170.074971][ T31] wacom 0003:056A:0323.0005: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 170.093206][ T31] wacom 0003:056A:0323.0005: hidraw0: USB HID v0.04 Device [HID 056a:0323] on usb-dummy_hcd.1-1/input0 [ 170.105437][ T31] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0323.0005/input/input10 [ 170.289948][ T31] usb 2-1: USB disconnect, device number 14 [ 171.261535][ T6101] 9p filesystem being mounted at /565/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 171.833274][ T6109] netlink: 'syz.2.1975': attribute type 27 has an invalid length. [ 171.871391][ T6109] veth0_vlan: left promiscuous mode [ 171.877067][ T6109] veth0_vlan: entered promiscuous mode [ 171.884606][ T6109] veth1_macvtap: left promiscuous mode [ 171.891639][ T6109] veth1_macvtap: entered promiscuous mode [ 171.901997][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.909153][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.936238][ T45] bridge0: port 2(30{X) entered blocking state [ 171.943160][ T45] bridge0: port 2(30{X) entered forwarding state [ 172.278965][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 172.278990][ T36] audit: type=1326 audit(7039849046.467:50974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cc158eec9 code=0x0 [ 172.314170][ T6143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.314211][ T6143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1013 [ 172.472726][ T36] audit: type=1400 audit(7039849046.645:50975): avc: denied { append } for pid=6166 comm="syz.2.1994" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.945777][ T6175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=6175 comm=syz.2.1996 [ 173.327035][ T36] audit: type=1400 audit(7039849047.452:50976): avc: denied { read } for pid=6192 comm="syz.2.2000" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 173.350410][ T36] audit: type=1400 audit(7039849047.452:50977): avc: denied { open } for pid=6192 comm="syz.2.2000" path="/352/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 174.159097][ T6193] overlayfs: statfs failed on './file0' [ 174.258722][ T36] audit: type=1400 audit(7039849048.324:50978): avc: denied { write } for pid=6232 comm="syz.4.2013" path="socket:[36155]" dev="sockfs" ino=36155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.298016][ T36] audit: type=1400 audit(7039849048.362:50979): avc: denied { getopt } for pid=6237 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.364251][ T6244] rust_binder: Error while translating object. [ 174.364289][ T6244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 174.370707][ T6244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1041 [ 174.434448][ T6242] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 174.451764][ T6246] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 174.469344][ T6248] tipc: Enabling of bearer rejected, media not registered [ 174.768195][ T5522] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 174.928071][ T5522] usb 3-1: Using ep0 maxpacket: 8 [ 174.935213][ T5522] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.946628][ T5522] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.960003][ T5522] usb 3-1: config 1 interface 0 has no altsetting 0 [ 174.968219][ T5522] usb 3-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 174.977500][ T5522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.985588][ T5522] usb 3-1: Product: syz [ 174.989795][ T5522] usb 3-1: Manufacturer: Ч [ 174.994388][ T5522] usb 3-1: SerialNumber: syz [ 175.218600][ T5522] usbhid 3-1:1.0: can't add hid device: -71 [ 175.221232][ T6267] netlink: 'syz.0.2024': attribute type 4 has an invalid length. [ 175.225020][ T5522] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 175.233222][ T6267] netlink: 'syz.0.2024': attribute type 5 has an invalid length. [ 175.245883][ T5522] usb 3-1: USB disconnect, device number 49 [ 175.249958][ T6267] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2024'. [ 175.531043][ T6271] rust_binder: Error in use_page_slow: ESRCH [ 175.531066][ T6271] rust_binder: use_range failure ESRCH [ 175.537166][ T6271] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 175.542704][ T6271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.550789][ T6271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 175.634888][ T6275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 175.634950][ T6275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:112 [ 175.737629][ T6293] IPv4: Oversized IP packet from 127.202.26.0 [ 175.766954][ T36] audit: type=1326 audit(7039849049.741:50980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.4.2034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c62f8eec9 code=0x0 [ 175.816351][ T6305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.816384][ T6305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.823518][ T6305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.830610][ T6305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.867352][ T6319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.874172][ T6319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1059 [ 175.930401][ T6327] 9pnet_fd: Insufficient options for proto=fd [ 176.577681][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 176.636758][ T6335] 9p filesystem being mounted at /39/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 176.781412][ T36] audit: type=1400 audit(7039849050.689:50981): avc: denied { setopt } for pid=6343 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.801931][ T36] audit: type=1400 audit(7039849050.689:50982): avc: denied { setopt } for pid=6343 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.889075][ T6363] SELinux: failed to load policy [ 176.896271][ T6365] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2059'. [ 176.909382][ T6365] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2059'. [ 176.909641][ T6367] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.927554][ T6367] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 176.936161][ T6367] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.944149][ T6367] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 177.103774][ T6384] rust_binder: Write failure EINVAL in pid:144 [ 177.305383][ T6397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2069'. [ 177.329017][ T6397] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=528 sclass=netlink_xfrm_socket pid=6397 comm=syz.1.2069 [ 177.520427][ T6406] 9p filesystem being mounted at /53/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 177.560768][ T36] audit: type=1326 audit(7039849051.420:50983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.0.2075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aefb8eec9 code=0x0 [ 177.595170][ T6412] SELinux: failed to load policy [ 177.780875][ T36] audit: type=1400 audit(7039849051.627:50984): avc: denied { lock } for pid=6416 comm="syz.2.2076" path="socket:[36739]" dev="sockfs" ino=36739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.948894][ T6425] fuse: Unknown parameter '0x000000000000000500000000000000000004' [ 178.009191][ T6431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6431 comm=syz.1.2081 [ 178.022757][ T6431] rust_binder: Error while translating object. [ 178.022815][ T6431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 178.029160][ T6431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:179 [ 178.062950][ T6433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1077 [ 178.076507][ T6435] incfs: Can't find or create .index dir in ./bus [ 178.092748][ T6435] incfs: mount failed -1 [ 178.097583][ T6435] incfs: Can't find or create .index dir in ./bus [ 178.104218][ T6435] incfs: mount failed -1 [ 178.130651][ T6437] rust_binder: Write failure EFAULT in pid:183 [ 178.330197][ T6453] 9p filesystem being mounted at /63/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 178.473612][ T6459] 9pnet_fd: Insufficient options for proto=fd [ 178.547306][ T6468] cgroup: noprefix used incorrectly [ 178.650155][ T6476] overlayfs: unescaped trailing colons in lowerdir mount option. [ 179.054423][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.061766][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.069299][ T6487] bridge_slave_0: entered allmulticast mode [ 179.076009][ T6487] bridge_slave_0: entered promiscuous mode [ 179.085765][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.093916][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.101345][ T6487] bridge_slave_1: entered allmulticast mode [ 179.109283][ T6487] bridge_slave_1: entered promiscuous mode [ 179.165051][ T45] bridge_slave_1: left allmulticast mode [ 179.186856][ T45] bridge_slave_1: left promiscuous mode [ 179.194520][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.204177][ T45] bridge_slave_0: left allmulticast mode [ 179.209877][ T45] bridge_slave_0: left promiscuous mode [ 179.223018][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.331262][ T36] audit: type=1326 audit(7039849053.090:50985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.4.2110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c62f8eec9 code=0x0 [ 179.367577][ T45] tipc: Disabling bearer [ 179.372864][ T45] tipc: Left network mode [ 179.378266][ T6526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2111'. [ 179.387814][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 179.397217][ T45] veth1_macvtap: left promiscuous mode [ 179.402836][ T45] veth0_vlan: left promiscuous mode [ 179.472295][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.479717][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.487083][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.488271][ T6536] input: syz1 as /devices/virtual/input/input14 [ 179.494179][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.521221][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.529545][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.542392][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.549735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.559272][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.566397][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.591423][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'. [ 179.600958][ T6540] erspan0: default FDB implementation only supports local addresses [ 179.611056][ T6540] rust_binder: Write failure EFAULT in pid:1106 [ 179.622287][ T6487] veth0_vlan: entered promiscuous mode [ 179.627991][ T6542] rust_binder: 1108: no such ref 4 [ 179.638337][ T6487] veth1_macvtap: entered promiscuous mode [ 179.645834][ T6542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1108 [ 179.679246][ T6546] overlayfs: disabling nfs_export due to verity=require [ 179.698289][ T6546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.698319][ T6546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 180.055971][ T6553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6553 comm=syz.1.2117 [ 180.639202][ T6571] rust_binder: Write failure EFAULT in pid:1115 [ 181.153787][ T6584] rust_binder: Error while translating object. [ 181.160126][ T6584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 181.166402][ T6584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 182.026392][ T36] audit: type=1400 audit(7039849055.607:50986): avc: denied { create } for pid=6590 comm="syz.2.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 182.082812][ T36] audit: type=1400 audit(7039849055.672:50987): avc: denied { connect } for pid=6592 comm="syz.2.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.104114][ T6593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.119279][ T6595] __vm_enough_memory: pid: 6595, comm: syz.2.2132, bytes: 18014402804453376 not enough memory for the allocation [ 182.159001][ T6597] input: syz1 as /devices/virtual/input/input15 [ 182.168532][ T6597] input: failed to attach handler leds to device input15, error: -6 [ 182.179930][ T6597] 9pnet_fd: Insufficient options for proto=fd [ 182.220368][ T6599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1137 [ 182.554495][ T6621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2140'. [ 182.644863][ T36] audit: type=1400 audit(7039849056.188:50988): avc: denied { shutdown } for pid=6636 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.939186][ T36] audit: type=1326 audit(7039849064.904:50989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.1.2147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cc158eec9 code=0x0 [ 192.075147][ T6655] /dev/rnullb0: Can't open blockdev [ 192.269770][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.333735][ T31] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 192.419014][ T9] usb 1-1: device descriptor read/64, error -71 [ 192.494354][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 192.503099][ T31] usb 3-1: config 127 has an invalid interface number: 217 but max is 0 [ 192.511531][ T31] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 192.521933][ T31] usb 3-1: config 127 has no interface number 0 [ 192.528345][ T31] usb 3-1: config 127 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.539659][ T31] usb 3-1: config 127 interface 217 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 192.551964][ T31] usb 3-1: config 127 interface 217 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 192.563669][ T31] usb 3-1: config 127 interface 217 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 192.580092][ T31] usb 3-1: string descriptor 0 read error: -22 [ 192.586363][ T31] usb 3-1: New USB device found, idVendor=2dc8, idProduct=b003, bcdDevice=ce.b3 [ 192.595685][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.674824][ T9] usb 1-1: device descriptor read/64, error -71 [ 192.695743][ T36] audit: type=1400 audit(7039849065.617:50990): avc: denied { listen } for pid=6664 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.930705][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.987760][ T31] usb 3-1: USB disconnect, device number 50 [ 193.079867][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.338774][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.434095][ T6701] 9pnet_fd: Insufficient options for proto=fd [ 193.453361][ T9] usb usb1-port1: attempt power cycle [ 193.751370][ T1735] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 193.815345][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 193.837754][ T9] usb 1-1: device descriptor read/8, error -71 [ 193.912549][ T1735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.923608][ T1735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.934255][ T1735] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice=f4.00 [ 193.943386][ T1735] usb 3-1: New USB device strings: Mfr=159, Product=0, SerialNumber=0 [ 193.951604][ T1735] usb 3-1: Manufacturer: syz [ 193.957238][ T1735] usb 3-1: config 0 descriptor?? [ 193.976213][ T9] usb 1-1: device descriptor read/8, error -71 [ 194.108914][ T6721] netlink: 'syz.4.2175': attribute type 16 has an invalid length. [ 194.117343][ T6721] netlink: 'syz.4.2175': attribute type 3 has an invalid length. [ 194.125190][ T6721] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2175'. [ 194.151364][ T36] audit: type=1400 audit(7039849066.987:50991): avc: denied { shutdown } for pid=6722 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.230989][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.253463][ T9] usb 1-1: device descriptor read/8, error -71 [ 194.391947][ T9] usb 1-1: device descriptor read/8, error -71 [ 194.403077][ T1735] usbhid 3-1:0.0: can't add hid device: -71 [ 194.409155][ T1735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 194.418680][ T1735] usb 3-1: USB disconnect, device number 51 [ 194.464912][ T36] audit: type=1326 audit(7039849067.278:50992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.2.2185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f918e98eec9 code=0x0 [ 194.508208][ T9] usb usb1-port1: unable to enumerate USB device [ 194.519597][ T6752] rust_binder: Error while translating object. [ 194.519627][ T6752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 194.526139][ T6752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1171 [ 194.592178][ T6756] 9p filesystem being mounted at /397/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 194.813619][ T6761] overlayfs: missing 'lowerdir' [ 195.255940][ T36] audit: type=1400 audit(7039849068.028:50993): avc: denied { write } for pid=6779 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.517504][ T6787] batadv_slave_0: entered promiscuous mode [ 195.524469][ T6787] batadv_slave_0: left promiscuous mode [ 195.548912][ T6791] /dev/sr0: Can't lookup blockdev [ 195.570131][ T36] audit: type=1400 audit(7039849068.319:50994): avc: denied { execute } for pid=6792 comm="syz.4.2200" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.570175][ T6793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36398 sclass=netlink_route_socket pid=6793 comm=syz.4.2200 [ 195.615173][ T36] audit: type=1400 audit(7039849068.357:50995): avc: denied { setattr } for pid=6798 comm="syz.2.2202" path="socket:[40162]" dev="sockfs" ino=40162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.712544][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 195.847551][ T6807] fuse: Bad value for 'rootmode' [ 195.872470][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 195.883848][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 195.892237][ T31] usb 1-1: config 0 has no interface number 0 [ 195.896040][ T6809] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6809 comm=syz.2.2206 [ 195.900738][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 195.912000][ T6809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1195 [ 195.920187][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.938452][ T31] usb 1-1: Product: syz [ 195.943004][ T31] usb 1-1: Manufacturer: syz [ 195.949643][ T31] usb 1-1: SerialNumber: syz [ 195.957237][ T31] usb 1-1: config 0 descriptor?? [ 195.963598][ T31] smsc95xx v2.0.0 [ 196.175369][ T6829] netlink: 'syz.4.2213': attribute type 4 has an invalid length. [ 196.176629][ T6831] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2212'. [ 196.192900][ T6830] 9pnet_fd: Insufficient options for proto=fd [ 196.309481][ T359] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 196.480165][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 196.486523][ T359] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.494865][ T359] usb 3-1: config 179 has no interface number 0 [ 196.501164][ T359] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 196.512584][ T359] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 196.524212][ T359] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 196.534433][ T359] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.547999][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.555631][ T359] usb 3-1: config 179 interface 65 has no altsetting 0 [ 196.562539][ T359] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 196.571912][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.714449][ T9] usb 2-1: device descriptor read/64, error -71 [ 196.892027][ T6853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=6853 comm=syz.4.2221 [ 196.905107][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 196.913109][ T36] audit: type=1400 audit(7039849069.576:50996): avc: denied { shutdown } for pid=6852 comm="syz.4.2221" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.970294][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.226077][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.332443][ T6782] binder: Bad value for 'max' [ 197.338319][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 197.349200][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 197.358625][ T31] usb 1-1: USB disconnect, device number 14 [ 197.375285][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.631108][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.748455][ T9] usb usb2-port1: attempt power cycle [ 197.888892][ T6859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2223'. [ 197.901020][ T6859] netlink: 'syz.0.2223': attribute type 27 has an invalid length. [ 197.928359][ T36] audit: type=1400 audit(7039849070.524:50997): avc: denied { create } for pid=6858 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.010276][ T6862] syz.0.2224: attempt to access beyond end of device [ 198.010276][ T6862] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 198.024272][ T6862] EXT4-fs (loop0): unable to read superblock [ 198.110775][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.133210][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.259996][ T5522] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 198.282311][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.398575][ T5522] usb 1-1: device descriptor read/64, error -71 [ 198.537146][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.559550][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.654359][ T5522] usb 1-1: device descriptor read/64, error -71 [ 198.708893][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.824980][ T9] usb usb2-port1: unable to enumerate USB device [ 198.910146][ T5522] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.048957][ T5522] usb 1-1: device descriptor read/64, error -71 [ 199.202777][ T1825] usb 3-1: USB disconnect, device number 52 [ 199.315183][ T5522] usb 1-1: device descriptor read/64, error -71 [ 199.320602][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2234'. [ 199.432537][ T5522] usb usb1-port1: attempt power cycle [ 199.645584][ T1825] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 199.733030][ T6898] overlay: Unknown parameter 'smackfstransmute' [ 199.794818][ T5522] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 199.817303][ T5522] usb 1-1: device descriptor read/8, error -71 [ 199.823634][ T1825] usb 3-1: No LPM exit latency info found, disabling LPM. [ 199.831957][ T1825] usb 3-1: config 64 has an invalid interface number: 46 but max is 2 [ 199.840534][ T1825] usb 3-1: config 64 has an invalid interface number: 182 but max is 2 [ 199.849151][ T1825] usb 3-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 199.858149][ T1825] usb 3-1: config 64 has an invalid interface number: 227 but max is 2 [ 199.866862][ T1825] usb 3-1: config 64 has no interface number 0 [ 199.878247][ T1825] usb 3-1: config 64 has no interface number 1 [ 199.884550][ T1825] usb 3-1: config 64 has no interface number 2 [ 199.890975][ T1825] usb 3-1: config 64 interface 182 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 199.902341][ T1825] usb 3-1: config 64 interface 182 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 199.913672][ T1825] usb 3-1: config 64 interface 182 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 199.924413][ T1825] usb 3-1: config 64 interface 182 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 199.936216][ T1825] usb 3-1: config 64 interface 227 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 199.947484][ T1825] usb 3-1: config 64 interface 227 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 199.959222][ T1825] usb 3-1: config 64 interface 46 has no altsetting 0 [ 199.966201][ T1825] usb 3-1: config 64 interface 182 has no altsetting 0 [ 199.973316][ T1825] usb 3-1: config 64 interface 227 has no altsetting 0 [ 199.980983][ T5522] usb 1-1: device descriptor read/8, error -71 [ 199.988939][ T1825] usb 3-1: string descriptor 0 read error: -22 [ 199.995190][ T1825] usb 3-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=e0.bb [ 200.004279][ T1825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.167936][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 200.235241][ T359] usb 3-1: USB disconnect, device number 53 [ 200.242463][ T5522] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 200.265097][ T5522] usb 1-1: device descriptor read/8, error -71 [ 200.327758][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 200.334203][ T10] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 200.342535][ T10] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 200.352756][ T10] usb 2-1: config 0 has no interface number 0 [ 200.358857][ T10] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 200.370686][ T10] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 200.391697][ T10] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 200.412222][ T10] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 200.424050][ T10] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 200.434157][ T10] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 200.443804][ T5522] usb 1-1: device descriptor read/8, error -71 [ 200.447485][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 200.462690][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.471580][ T10] usb 2-1: config 0 descriptor?? [ 200.477002][ T6903] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 200.484250][ T6903] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 200.562420][ T5522] usb usb1-port1: unable to enumerate USB device [ 200.707146][ T6903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 200.707540][ T10] usb 2-1: USB disconnect, device number 19 [ 200.821537][ T36] audit: type=1400 audit(7039849073.245:50998): avc: denied { setopt } for pid=6904 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.908544][ T6910] 9p filesystem being mounted at /411/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 201.031362][ T6915] /dev/rnullb0: Can't open blockdev [ 201.103719][ T6919] rust_binder: 6918 RLIMIT_NICE not set [ 201.189612][ T6924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.195300][ T6924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1228 [ 201.224548][ T6926] /dev/rnullb0: Can't open blockdev [ 201.264628][ T6934] SELinux: policydb version 1352001159 does not match my version range 15-33 [ 201.273767][ T6934] SELinux: failed to load policy [ 201.279557][ T6934] rust_binder: Got transaction with invalid offset. [ 201.279606][ T6934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.286322][ T6934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 201.324813][ T6946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.353192][ T6955] binder: Unknown parameter 'defcontext01777777777777777777777' [ 201.628117][ T1825] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 201.788088][ T5522] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 201.796785][ T1825] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 201.806003][ T1825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.814877][ T1825] usb 1-1: config 0 descriptor?? [ 201.820976][ T1825] usb 1-1: selecting invalid altsetting 1 [ 201.829787][ T1825] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 201.833683][ T6658] udevd[6658]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 201.959676][ T5522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 201.970646][ T5522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.981886][ T5522] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 201.991027][ T5522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.999089][ T5522] usb 3-1: Product: syz [ 202.003310][ T5522] usb 3-1: Manufacturer: syz [ 202.008082][ T5522] usb 3-1: SerialNumber: syz [ 202.013526][ T5522] usb 3-1: config 0 descriptor?? [ 202.021120][ T5522] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 202.037105][ T6959] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 202.053883][ T10] usb 1-1: USB disconnect, device number 19 [ 202.238764][ T10] usb 3-1: USB disconnect, device number 54 [ 202.360820][ T36] audit: type=1400 audit(7039849074.690:50999): avc: denied { listen } for pid=6985 comm="syz.1.2263" path=2F39322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 202.664175][ T36] audit: type=1400 audit(7039849074.980:51000): avc: denied { remount } for pid=6995 comm="syz.0.2268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 202.664850][ T6996] cgroup: subsys name conflicts with all [ 202.692966][ T36] audit: type=1326 audit(7039849074.999:51001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.0.2268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32be18eec9 code=0x0 [ 202.716178][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.803271][ T6999] overlayfs: failed to resolve './file0': -2 [ 202.810725][ T6999] rust_binder: Write failure EFAULT in pid:1257 [ 202.824762][ T7001] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 202.838288][ T7001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1259 [ 202.875260][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 202.900301][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 202.917560][ T10] usb 2-1: config 0 has no interface number 0 [ 202.932090][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 202.941421][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.949556][ T10] usb 2-1: Product: syz [ 202.953966][ T10] usb 2-1: Manufacturer: syz [ 202.958609][ T10] usb 2-1: SerialNumber: syz [ 202.964295][ T10] usb 2-1: config 0 descriptor?? [ 202.970627][ T10] smsc95xx v2.0.0 [ 202.998512][ T7018] rust_binder: Error while translating object. [ 202.998543][ T7018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 203.004842][ T7018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1269 [ 203.032004][ T7020] 9p filesystem being mounted at /429/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 203.090415][ T7023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1273 [ 203.138060][ T36] audit: type=1400 audit(7039849075.421:51002): avc: denied { write } for pid=7024 comm="syz.2.2279" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.187591][ T36] audit: type=1326 audit(7039849075.468:51003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.2.2280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f918e98eec9 code=0x0 [ 203.293925][ T7036] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 203.293973][ T7036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 203.302343][ T7036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1286 [ 203.398562][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 203.418929][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.567260][ T7043] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 203.574763][ T7043] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.582655][ T7043] netlink: 'syz.0.2286': attribute type 20 has an invalid length. [ 203.602715][ T7043] rust_binder: Write failure EINVAL in pid:52 [ 203.795907][ T7048] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 203.913381][ T7059] input: syz0 as /devices/virtual/input/input17 [ 203.972441][ T36] audit: type=1400 audit(7039849076.200:51004): avc: denied { read } for pid=7062 comm="syz.0.2293" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 203.995911][ T36] audit: type=1400 audit(7039849076.200:51005): avc: denied { open } for pid=7062 comm="syz.0.2293" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 204.029202][ T36] audit: type=1400 audit(7039849076.256:51006): avc: denied { execute } for pid=7062 comm="syz.0.2293" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.071518][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 204.090714][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 204.103982][ T10] usb 2-1: USB disconnect, device number 20 [ 204.342228][ T7068] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.2295'. [ 204.351496][ T7068] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2295'. [ 204.428895][ T7076] rust_binder: 7075 RLIMIT_NICE not set [ 204.429325][ T7077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.534680][ T7091] /dev/sr0: Can't lookup blockdev [ 204.546959][ T7091] /dev/sr0: Can't lookup blockdev [ 204.552197][ T7091] /dev/sr0: Can't lookup blockdev [ 204.557417][ T7091] /dev/sr0: Can't lookup blockdev [ 204.562658][ T7091] /dev/sr0: Can't lookup blockdev [ 204.567851][ T7091] /dev/sr0: Can't lookup blockdev [ 204.573164][ T7091] /dev/sr0: Can't lookup blockdev [ 204.578398][ T7091] /dev/sr0: Can't lookup blockdev [ 204.583806][ T7091] /dev/sr0: Can't lookup blockdev [ 204.589125][ T7091] /dev/sr0: Can't lookup blockdev [ 204.594456][ T7091] vfat: Unknown parameter '.' [ 204.599462][ T7091] vfat: Unknown parameter '.' [ 204.601926][ T359] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.604382][ T7091] vfat: Unknown parameter '.' [ 204.616844][ T7091] vfat: Unknown parameter '.' [ 204.621757][ T7091] vfat: Unknown parameter '.' [ 204.627127][ T7091] vfat: Unknown parameter '.' [ 204.632030][ T7091] vfat: Unknown parameter '.' [ 204.638434][ T7091] vfat: Unknown parameter '.' [ 204.643505][ T7091] vfat: Unknown parameter '.' [ 204.648740][ T7091] vfat: Unknown parameter '.' [ 204.653611][ T7091] vfat: Unknown parameter '.' [ 204.658624][ T7091] vfat: Unknown parameter '.' [ 204.663499][ T7091] vfat: Unknown parameter '.' [ 204.668389][ T7091] vfat: Unknown parameter '.' [ 204.673210][ T7091] vfat: Unknown parameter '.' [ 204.678183][ T7091] vfat: Unknown parameter '.' [ 204.682982][ T7091] vfat: Unknown parameter '.' [ 204.687820][ T7091] vfat: Unknown parameter '.' [ 204.692612][ T7091] vfat: Unknown parameter '.' [ 204.697393][ T7091] vfat: Unknown parameter '.' [ 204.702282][ T7091] vfat: Unknown parameter '.' [ 204.707040][ T7091] vfat: Unknown parameter '.' [ 204.711827][ T7091] vfat: Unknown parameter '.' [ 204.716626][ T7091] vfat: Unknown parameter '.' [ 204.721601][ T7091] vfat: Unknown parameter '.' [ 204.726414][ T7091] vfat: Unknown parameter '.' [ 204.731480][ T7091] vfat: Unknown parameter '.' [ 204.736482][ T7091] vfat: Unknown parameter '.' [ 204.741649][ T7091] vfat: Unknown parameter '.' [ 204.746537][ T7091] vfat: Unknown parameter '.' [ 204.751400][ T7091] vfat: Unknown parameter '.' [ 204.756230][ T7091] vfat: Unknown parameter '.' [ 204.761083][ T7091] vfat: Unknown parameter '.' [ 204.766222][ T7091] vfat: Unknown parameter '.' [ 204.771030][ T7091] vfat: Unknown parameter '.' [ 204.775916][ T7091] vfat: Unknown parameter '.' [ 204.780691][ T7091] vfat: Unknown parameter '.' [ 204.784416][ T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.785987][ T7091] vfat: Unknown parameter '.' [ 204.797319][ T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.802184][ T7091] vfat: Unknown parameter '.' [ 204.811973][ T359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.818092][ T7091] vfat: Unknown parameter '.' [ 204.830735][ T359] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.835703][ T7091] vfat: Unknown parameter '.' [ 204.844677][ T359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.849664][ T7091] vfat: Unknown parameter '.' [ 204.862083][ T7091] vfat: Unknown parameter '.' [ 204.866898][ T7091] vfat: Unknown parameter '.' [ 204.872035][ T7091] vfat: Unknown parameter '.' [ 204.872329][ T359] usb 1-1: config 0 descriptor?? [ 204.880935][ T7091] vfat: Unknown parameter '.' [ 204.886662][ T7091] vfat: Unknown parameter '.' [ 204.891689][ T7091] vfat: Unknown parameter '.' [ 204.896607][ T7091] vfat: Unknown parameter '.' [ 204.901682][ T7091] vfat: Unknown parameter '.' [ 204.906509][ T7091] vfat: Unknown parameter '.' [ 204.911284][ T5522] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 204.911762][ T7091] vfat: Unknown parameter '.' [ 204.923772][ T7091] vfat: Unknown parameter '.' [ 204.928569][ T7091] vfat: Unknown parameter '.' [ 204.933385][ T7091] vfat: Unknown parameter '.' [ 204.964445][ T7105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.964943][ T7105] rust_binder: 1319: no such ref 1 [ 204.976689][ T7105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1319 [ 204.976987][ T7105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1319 [ 205.000494][ T7107] overlay: filesystem on ./bus is read-only [ 205.072327][ T5522] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 205.091207][ T5522] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 205.100681][ T5522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.109829][ T5522] usb 2-1: config 0 descriptor?? [ 205.233377][ T36] audit: type=1400 audit(7039849077.392:51007): avc: denied { nlmsg_tty_audit } for pid=7125 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 205.312654][ T359] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 205.323358][ T359] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 205.441382][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2314'. [ 205.548720][ T5522] dragonrise 0003:0079:0006.0007: item fetching failed at offset 4/5 [ 205.557108][ T5522] dragonrise 0003:0079:0006.0007: parse failed [ 205.563718][ T5522] dragonrise 0003:0079:0006.0007: probe with driver dragonrise failed with error -22 [ 205.570920][ T7138] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2315'. [ 205.574983][ T5522] usb 2-1: USB disconnect, device number 21 [ 205.758812][ T359] usb 1-1: USB disconnect, device number 20 [ 205.831117][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 205.841665][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 205.852052][ T7143] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 205.944995][ T5522] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 206.106184][ T5522] usb 2-1: No LPM exit latency info found, disabling LPM. [ 206.114511][ T5522] usb 2-1: config 64 has an invalid interface number: 174 but max is 2 [ 206.123082][ T5522] usb 2-1: config 64 has an invalid interface number: 252 but max is 2 [ 206.131455][ T5522] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 206.140574][ T5522] usb 2-1: config 64 has an invalid interface number: 140 but max is 2 [ 206.148897][ T5522] usb 2-1: config 64 has no interface number 0 [ 206.155084][ T5522] usb 2-1: config 64 has no interface number 1 [ 206.161326][ T5522] usb 2-1: config 64 has no interface number 2 [ 206.167806][ T5522] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 206.179174][ T5522] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 206.190536][ T5522] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 206.201132][ T5522] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 206.212917][ T5522] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 206.223956][ T5522] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 206.235119][ T5522] usb 2-1: config 64 interface 174 has no altsetting 0 [ 206.242222][ T5522] usb 2-1: config 64 interface 252 has no altsetting 0 [ 206.249256][ T5522] usb 2-1: config 64 interface 140 has no altsetting 0 [ 206.258724][ T5522] usb 2-1: string descriptor 0 read error: -22 [ 206.265041][ T5522] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 206.274114][ T5522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.284241][ T5522] usb-storage 2-1:64.174: USB Mass Storage device detected [ 206.330490][ T5522] usb-storage 2-1:64.252: USB Mass Storage device detected [ 206.395347][ T5522] usb-storage 2-1:64.140: USB Mass Storage device detected [ 206.501357][ T10] usb 2-1: USB disconnect, device number 22 [ 206.588225][ T7182] 9p filesystem being mounted at /386/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 206.636303][ T7188] netlink: 'syz.4.2328': attribute type 27 has an invalid length. [ 206.649806][ T7191] 9pnet_fd: Insufficient options for proto=fd [ 206.839469][ T7213] fuse: Bad value for 'fd' [ 207.062862][ T7229] fuse: Bad value for 'group_id' [ 207.068064][ T7229] fuse: Bad value for 'group_id' [ 207.677318][ T7255] netlink: 'syz.0.2350': attribute type 16 has an invalid length. [ 207.685474][ T7255] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2350'. [ 208.055316][ T1564] Bluetooth: hci0: command 0x1003 tx timeout [ 208.055386][ T348] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.072788][ T7277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2358'. [ 208.082675][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'. [ 208.132428][ T7284] cgroup: none used incorrectly [ 208.163848][ T7289] overlayfs: failed to clone upperpath [ 209.395935][ T36] audit: type=1400 audit(7039849081.285:51008): avc: denied { watch watch_reads } for pid=7329 comm="syz.4.2379" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 209.665628][ T7348] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2385'. [ 209.728726][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 209.899158][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 209.899360][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 209.914473][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 209.925641][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.936233][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 209.945365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.954449][ T9] usb 3-1: config 0 descriptor?? [ 210.112444][ T5522] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 210.180297][ T9] wacom 0003:056A:00ED.0008: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 210.273575][ T5522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.285278][ T5522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 210.296298][ T5522] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 210.305696][ T5522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.307924][ T36] audit: type=1326 audit(7039849082.148:51009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.4.2393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c62f8eec9 code=0x0 [ 210.314830][ T5522] usb 2-1: config 0 descriptor?? [ 210.342429][ T7352] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.563598][ T7352] rust_binder: Failed to allocate buffer. len:7256484481233561144, is_oneway:false [ 210.563622][ T7352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 210.573230][ T7352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:318 [ 210.584818][ T5522] usbhid 2-1:0.0: can't add hid device: -71 [ 210.600073][ T5522] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.609441][ T5522] usb 2-1: USB disconnect, device number 23 [ 210.892808][ T7381] incfs_lookup_dentry err:-13 [ 210.897808][ T7381] incfs: Can't find or create .index dir in ./bus [ 210.904430][ T7381] incfs: mount failed -13 [ 210.936143][ T7385] fuse: Bad value for 'fd' [ 211.136030][ T7390] rust_binder: Error while translating object. [ 211.136093][ T7390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 211.143264][ T7390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:320 [ 211.186638][ T7396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2401'. [ 211.396154][ T7402] /dev/rnullb0: Can't open blockdev [ 211.679288][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 211.833243][ T5522] usb 3-1: USB disconnect, device number 55 [ 211.849919][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 211.861895][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.863145][ T7451] netlink: 'syz.2.2419': attribute type 64 has an invalid length. [ 211.872796][ T9] usb 2-1: config 179 has no interface number 0 [ 211.885800][ T7451] netlink: 'syz.2.2419': attribute type 64 has an invalid length. [ 211.888578][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 211.905387][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 211.917233][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.928852][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 211.939490][ T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.953186][ T9] usb 2-1: config 179 interface 65 has no altsetting 0 [ 211.960256][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 211.969772][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.982630][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input21 [ 212.041730][ T7471] rust_binder: Got transaction with invalid offset. [ 212.041801][ T7471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.048500][ T7471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1372 [ 212.167881][ T36] audit: type=1400 audit(7039849083.884:51010): avc: granted { setsecparam } for pid=7488 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 212.201745][ T5522] usb 2-1: USB disconnect, device number 24 [ 212.208407][ T5522] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 212.425437][ T31] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 212.586460][ T31] usb 3-1: No LPM exit latency info found, disabling LPM. [ 212.594674][ T31] usb 3-1: config 64 has an invalid interface number: 134 but max is 2 [ 212.603242][ T31] usb 3-1: config 64 has an invalid interface number: 101 but max is 2 [ 212.611632][ T31] usb 3-1: config 64 has an invalid interface number: 200 but max is 2 [ 212.620071][ T31] usb 3-1: config 64 has no interface number 0 [ 212.626354][ T31] usb 3-1: config 64 has no interface number 1 [ 212.632595][ T31] usb 3-1: config 64 has no interface number 2 [ 212.638877][ T31] usb 3-1: config 64 interface 101 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 212.650145][ T31] usb 3-1: config 64 interface 101 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 212.662725][ T31] usb 3-1: config 64 interface 101 altsetting 1 endpoint 0x6 is Bulk; changing to Interrupt [ 212.673816][ T31] usb 3-1: config 64 interface 101 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 212.685300][ T31] usb 3-1: config 64 interface 200 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 212.696398][ T31] usb 3-1: config 64 interface 200 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 212.707578][ T31] usb 3-1: config 64 interface 134 has no altsetting 0 [ 212.714513][ T31] usb 3-1: config 64 interface 101 has no altsetting 0 [ 212.721394][ T31] usb 3-1: config 64 interface 200 has no altsetting 0 [ 212.730863][ T31] usb 3-1: string descriptor 0 read error: -22 [ 212.737312][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=d7.58 [ 212.746632][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.977506][ T31] usb 3-1: USB disconnect, device number 56 [ 213.707515][ T36] audit: type=1326 audit(7039849085.338:51011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.2444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32be18eec9 code=0x0 [ 214.438540][ T7534] input: syz0 as /devices/virtual/input/input22 [ 214.504983][ T7538] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2449'. [ 214.707146][ T330] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 214.878318][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 214.896211][ T330] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 214.906614][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.915832][ T330] usb 2-1: config 0 descriptor?? [ 214.942200][ T7550] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 214.963652][ T7552] EXT4-fs: Conflicting test_dummy_encryption options [ 214.973732][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 215.007743][ T7554] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.055314][ T7554] rust_binder: Error in use_page_slow: ESRCH [ 215.055346][ T7554] rust_binder: use_range failure ESRCH [ 215.061502][ T7554] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 215.067096][ T7554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 215.075336][ T7554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1406 [ 215.085348][ T7554] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 215.352404][ T330] wacom 0003:056A:0059.0009: unknown main item tag 0x0 [ 215.369370][ T330] wacom 0003:056A:0059.0009: unknown main item tag 0x0 [ 215.380053][ T330] wacom 0003:056A:0059.0009: unknown main item tag 0x0 [ 215.380943][ T7570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.387097][ T330] wacom 0003:056A:0059.0009: unknown main item tag 0x0 [ 215.394380][ T7570] IPv6: NLM_F_CREATE should be set when creating new route [ 215.394411][ T7570] IPv6: NLM_F_CREATE should be set when creating new route [ 215.419793][ T330] wacom 0003:056A:0059.0009: unknown main item tag 0x0 [ 215.422623][ T36] audit: type=1326 audit(7039849086.952:51012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.4.2462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c62f8eec9 code=0x0 [ 215.461330][ T330] wacom 0003:056A:0059.0009: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.1-1/input0 [ 215.644320][ T7536] input: syz0 as /devices/virtual/input/input27 [ 215.665642][ T36] audit: type=1400 audit(7039849087.168:51013): avc: denied { read } for pid=7535 comm="syz.1.2448" path="socket:[42473]" dev="sockfs" ino=42473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.837378][ T330] usb 2-1: USB disconnect, device number 25 [ 215.859882][ T7580] cgroup: Bad value for 'name' [ 215.926808][ T7580] rust_binder: Error in use_page_slow: ESRCH [ 215.926844][ T7580] rust_binder: use_range failure ESRCH [ 215.933520][ T7580] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 215.939115][ T7580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 215.947731][ T7580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:357 [ 215.999172][ T7582] rust_binder: Failed copying into alloc: EFAULT [ 216.008578][ T7582] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 216.015209][ T7582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 216.024427][ T7582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:359 [ 216.077582][ T7584] 9p filesystem being mounted at /122/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 216.131523][ T7585] 9p filesystem being mounted at /122/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 216.264692][ T7587] tipc: Started in network mode [ 216.269605][ T7587] tipc: Node identity 1e607ce03b57, cluster identity 4711 [ 216.276912][ T7587] tipc: Enabled bearer , priority 0 [ 216.332903][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 216.362999][ T7594] netlink: 'syz.4.2469': attribute type 27 has an invalid length. [ 216.373284][ T7594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.539684][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 216.699491][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 216.706032][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 216.717041][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.730298][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 216.739400][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.748239][ T9] usb 3-1: config 0 descriptor?? [ 216.752993][ T330] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 216.754914][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 216.912754][ T330] usb 2-1: Using ep0 maxpacket: 8 [ 216.920159][ T330] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.931984][ T330] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.945576][ T330] usb 2-1: config 1 interface 0 has no altsetting 0 [ 216.953881][ T330] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 216.963329][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.975594][ T330] usb 2-1: Product: syz [ 216.980697][ T7617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.980786][ T330] usb 2-1: Manufacturer: Ч [ 216.992645][ T330] usb 2-1: SerialNumber: syz [ 216.999759][ T36] audit: type=1400 audit(7039849088.425:51014): avc: denied { nlmsg_read } for pid=7619 comm="syz.0.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.011139][ T7620] tipc: Enabling not permitted [ 217.026396][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 217.035401][ T7617] rust_binder: Error in use_page_slow: ESRCH [ 217.035428][ T7617] rust_binder: use_range failure ESRCH [ 217.041859][ T7617] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 217.047500][ T7617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 217.056094][ T7622] tipc: Enabling of bearer rejected, failed to enable media [ 217.056150][ T7617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1416 [ 217.164864][ T36] audit: type=1326 audit(7039849088.575:51015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.0.2483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32be18eec9 code=0x0 [ 217.220527][ T330] usbhid 2-1:1.0: can't add hid device: -71 [ 217.226688][ T330] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 217.235710][ T330] usb 2-1: USB disconnect, device number 26 [ 217.400566][ T7652] netlink: 'syz.4.2489': attribute type 6 has an invalid length. [ 217.466974][ T9] tipc: Node number set to 624393440 [ 217.503173][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2491'. [ 217.828926][ T7680] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 217.828965][ T7680] rust_binder: Error while translating object. [ 217.841909][ T7680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.849046][ T7680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 217.905393][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 218.181074][ T330] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 218.340955][ T330] usb 2-1: Using ep0 maxpacket: 8 [ 218.347316][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.358305][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.371363][ T330] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 218.380480][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.389906][ T330] usb 2-1: config 0 descriptor?? [ 218.792574][ T7690] devpts: called with bogus options [ 219.041952][ T7687] input: syz1 as /devices/virtual/input/input28 [ 219.053277][ T7687] binder: Unknown parameter 'max; b0WFXz+7<`\Kza~' [ 219.064232][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 219.071512][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.080695][ T330] usb 2-1: USB disconnect, device number 27 [ 219.467400][ T330] usb 3-1: USB disconnect, device number 57 [ 219.476332][ T7617] tipc: Disabling bearer [ 219.579552][ T7696] batadv_slave_0: mtu less than device minimum [ 219.613359][ T7698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7698 comm=syz.2.2506 [ 219.627038][ T7700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 219.627619][ T7700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 219.627979][ T7698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.637630][ T7701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.646978][ T7698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1422 [ 219.950437][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 220.057052][ T9] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 220.120960][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 220.127856][ T10] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.139210][ T10] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.153226][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 220.161734][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 220.171082][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.179409][ T10] usb 2-1: Product: syz [ 220.183688][ T10] usb 2-1: Manufacturer: Ч [ 220.188351][ T10] usb 2-1: SerialNumber: syz [ 220.239295][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 220.250584][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 220.263638][ T9] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 220.273065][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.282142][ T9] usb 3-1: config 0 descriptor?? [ 220.287473][ T7715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.295918][ T9] usbhid 3-1:0.0: can't add hid device: -22 [ 220.302078][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 220.416379][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 220.422534][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 220.434383][ T10] usb 2-1: USB disconnect, device number 28 [ 220.486333][ T7733] 9pnet_fd: Insufficient options for proto=fd [ 220.510941][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.519726][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.535984][ T330] usb 3-1: USB disconnect, device number 58 [ 220.556185][ T36] audit: type=1326 audit(7039849091.755:51016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7744 comm="syz.2.2523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918e98eec9 code=0x0 [ 220.579933][ T7750] netlink: 'syz.0.2525': attribute type 4 has an invalid length. [ 220.591504][ T7750] netlink: 'syz.0.2525': attribute type 17 has an invalid length. [ 220.644008][ T7751] kvm: pic: non byte read [ 220.648823][ T7751] kvm: pic: non byte read [ 220.653877][ T7751] kvm: pic: non byte read [ 220.658871][ T7751] pic_ioport_write: 1 callbacks suppressed [ 220.658886][ T7751] kvm: pic: single mode not supported [ 220.665144][ T7751] kvm: pic: non byte read [ 220.675714][ T7751] kvm: pic: non byte read [ 220.680383][ T7751] kvm: pic: non byte read [ 220.685174][ T7751] kvm: pic: single mode not supported [ 220.685188][ T7751] kvm: pic: level sensitive irq not supported [ 220.690889][ T7751] kvm: pic: non byte read [ 220.963708][ T36] audit: type=1400 audit(7039849092.150:51017): avc: denied { append } for pid=7762 comm="syz.1.2529" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 220.965899][ T7763] __vm_enough_memory: pid: 7763, comm: syz.1.2529, bytes: 18014402804453376 not enough memory for the allocation [ 221.294080][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 221.497531][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.505759][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 221.514415][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.524580][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.536316][ T10] usb 2-1: string descriptor 0 read error: -22 [ 221.542761][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.551895][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.561797][ T10] usb 2-1: 0:2 : does not exist [ 221.973529][ T7775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7775 comm=syz.0.2533 [ 222.066031][ T7781] netlink: 'syz.4.2536': attribute type 30 has an invalid length. [ 222.630461][ T7765] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 222.637928][ T7765] rust_binder: Write failure EINVAL in pid:389 [ 222.645018][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 222.660927][ T10] usb 2-1: Warning! Unlikely big volume range (=31667), cval->res is probably wrong. [ 222.670582][ T10] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31667/1 [ 222.680261][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 222.690159][ T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 222.701638][ T10] usb 2-1: USB disconnect, device number 29 [ 222.766409][ T7790] overlayfs: failed to clone upperpath [ 223.187875][ T7799] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 223.257331][ T36] audit: type=1400 audit(7039849094.298:51018): avc: denied { nlmsg_read } for pid=7800 comm="syz.1.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 223.284227][ T7803] random: crng reseeded on system resumption [ 223.338008][ T36] audit: type=1400 audit(7039849094.364:51019): avc: denied { ioctl } for pid=7808 comm="syz.0.2548" path="socket:[44068]" dev="sockfs" ino=44068 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.809070][ T7821] 9p filesystem being mounted at /485/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 223.950023][ T36] audit: type=1400 audit(7039849094.945:51020): avc: denied { accept } for pid=7836 comm="syz.2.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.279787][ T66] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 224.427188][ T66] usb 3-1: device descriptor read/64, error -71 [ 224.434757][ T7876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7876 comm=syz.4.2572 [ 224.538333][ T7886] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 224.683603][ T66] usb 3-1: device descriptor read/64, error -71 [ 224.779996][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 224.790414][ T7904] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 224.831089][ T7908] 9p filesystem being mounted at /121/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 224.938910][ T66] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 224.949848][ T36] audit: type=1400 audit(7039849095.884:51021): avc: denied { watch } for pid=7912 comm="syz.0.2587" path="/123/cgroup" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 224.983184][ T7918] fuse: Bad value for 'fd' [ 225.036824][ T7932] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.077300][ T66] usb 3-1: device descriptor read/64, error -71 [ 225.295454][ T7947] rust_binder: 428: no such ref 1 [ 225.333059][ T66] usb 3-1: device descriptor read/64, error -71 [ 225.450459][ T66] usb usb3-port1: attempt power cycle [ 225.643644][ T7964] 9pnet_fd: Insufficient options for proto=fd [ 225.673236][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 225.812754][ T66] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 225.835193][ T66] usb 3-1: device descriptor read/8, error -71 [ 225.973764][ T66] usb 3-1: device descriptor read/8, error -71 [ 226.228441][ T66] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 226.247712][ T8002] rust_binder: Got transaction with invalid offset. [ 226.247753][ T8002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.254546][ T8002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 226.265044][ T66] usb 3-1: device descriptor read/8, error -71 [ 226.282504][ T8004] rust_binder: Write failure EFAULT in pid:434 [ 226.411147][ T66] usb 3-1: device descriptor read/8, error -71 [ 226.485833][ T36] audit: type=1400 audit(7039849097.328:51022): avc: denied { read } for pid=8019 comm="syz.4.2623" path="socket:[44392]" dev="sockfs" ino=44392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.548242][ T66] usb usb3-port1: unable to enumerate USB device [ 227.252894][ T8044] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 227.291833][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8048 comm=syz.2.2632 [ 227.312620][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8048 comm=syz.2.2632 [ 227.373434][ T8064] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 227.385231][ T8067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8067 comm=syz.2.2632 [ 227.398643][ T8067] rust_binder: Write failure EFAULT in pid:1471 [ 239.302394][ T8083] SELinux: security_context_str_to_sid () failed with errno=-22 [ 239.346874][ T8087] rust_binder: Write failure EFAULT in pid:454 [ 239.369287][ T36] audit: type=1400 audit(7039849109.412:51023): avc: denied { write } for pid=8091 comm="syz.1.2647" name="/" dev="incremental-fs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.401487][ T36] audit: type=1400 audit(7039849109.412:51024): avc: denied { add_name } for pid=8091 comm="syz.1.2647" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.422879][ T36] audit: type=1400 audit(7039849109.412:51025): avc: denied { create } for pid=8091 comm="syz.1.2647" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.443656][ T36] audit: type=1400 audit(7039849109.412:51026): avc: denied { associate } for pid=8091 comm="syz.1.2647" name=".log" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.626462][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 239.786278][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 239.792639][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 239.796953][ T5522] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 239.803901][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 239.824690][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 239.834000][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.843048][ T10] usb 3-1: config 0 descriptor?? [ 239.849231][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 239.968709][ T5522] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 239.980118][ T5522] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.990585][ T5522] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 239.999888][ T5522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.065295][ T10] usb 3-1: USB disconnect, device number 63 [ 240.223382][ T8103] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.235580][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.244365][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.253843][ T5522] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 240.263058][ T5522] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input29 [ 240.278682][ T5522] usb 2-1: USB disconnect, device number 30 [ 240.565886][ T8124] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2656'. [ 240.636528][ T8128] fuse: Bad value for 'group_id' [ 240.641994][ T8128] fuse: Bad value for 'group_id' [ 240.926755][ T1825] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 240.933493][ T8163] /dev/rnullb0: Can't open blockdev [ 241.086643][ T1825] usb 3-1: Using ep0 maxpacket: 32 [ 241.095039][ T1825] usb 3-1: config 250 has an invalid interface number: 8 but max is 0 [ 241.103453][ T1825] usb 3-1: config 250 has no interface number 0 [ 241.110227][ T1825] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 241.119419][ T1825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.187728][ T8175] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2674'. [ 241.299810][ T5522] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 241.405816][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2676'. [ 241.461097][ T5522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 241.472222][ T5522] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 241.486391][ T5522] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 241.495684][ T5522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.504939][ T5522] usb 2-1: config 0 descriptor?? [ 241.511015][ T8173] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.522177][ T5522] usbhid 2-1:0.0: can't add hid device: -22 [ 241.528400][ T5522] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 241.531026][ T8211] 9p filesystem being mounted at /490/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 241.558726][ T1825] usb 3-1: string descriptor 0 read error: -71 [ 241.570865][ T1825] usb 3-1: USB disconnect, device number 64 [ 241.635840][ T36] audit: type=1400 audit(7039849111.542:51027): avc: denied { setattr } for pid=8216 comm="syz.4.2684" name="" dev="pipefs" ino=44721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 241.740294][ T5522] usb 2-1: USB disconnect, device number 31 [ 242.113297][ T8223] overlayfs: failed to clone upperpath [ 242.230989][ T8244] rust_binder: Error while translating object. [ 242.231037][ T8244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.237415][ T8244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1496 [ 242.262694][ T8247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.405855][ T8267] 9pnet_fd: Insufficient options for proto=fd [ 242.578926][ T1825] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 242.740176][ T1825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.748768][ T1825] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 242.757049][ T1825] usb 2-1: config 14 has no interface number 0 [ 242.763299][ T1825] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 242.773756][ T1825] usb 2-1: config 14 interface 21 has no altsetting 0 [ 242.782864][ T1825] usb 2-1: string descriptor 0 read error: -22 [ 242.789542][ T1825] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 242.798674][ T1825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.813687][ T8260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.822377][ T1825] usb 2-1: MIDIStreaming interface descriptor not found [ 242.906250][ T8281] tmpfs: Bad value for 'huge' [ 243.041702][ T10] usb 2-1: USB disconnect, device number 32 [ 243.218052][ T8301] 9pnet_fd: Insufficient options for proto=fd [ 243.239696][ T5522] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 243.402873][ T5522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.413893][ T5522] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 243.426859][ T5522] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 243.436080][ T5522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.445009][ T5522] usb 3-1: config 0 descriptor?? [ 243.450367][ T8291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 243.458659][ T5522] usbhid 3-1:0.0: can't add hid device: -22 [ 243.464855][ T5522] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 243.848401][ T36] audit: type=1400 audit(7039849113.616:51028): avc: denied { connect } for pid=8319 comm="syz.0.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.121723][ T8341] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2727'. [ 244.132076][ T8341] netlink: 'syz.4.2727': attribute type 27 has an invalid length. [ 244.669053][ T8352] 9p filesystem being mounted at /176/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 244.742876][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.750578][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.759833][ T8354] binder: Unknown parameter 'context[7' [ 244.774790][ T9] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.794794][ T8359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.795018][ T8360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.817078][ T36] audit: type=1400 audit(7039849114.516:51029): avc: denied { mount } for pid=8361 comm="syz.1.2736" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 244.846933][ T36] audit: type=1400 audit(7039849114.525:51030): avc: denied { unmount } for pid=8361 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 244.875709][ T8364] 9pnet_fd: Insufficient options for proto=fd [ 244.895738][ T8367] 9pnet_fd: Insufficient options for proto=fd [ 244.923955][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.936117][ T36] audit: type=1326 audit(7039849114.638:51031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.2740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cc158eec9 code=0x0 [ 245.265082][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 245.719521][ T8428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8428 comm=syz.4.2758 [ 245.742841][ T8433] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 245.946977][ T36] audit: type=1326 audit(7039849115.576:51032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc158eec9 code=0x7fc00000 [ 246.037733][ T8445] tipc: MTU too low for tipc bearer [ 246.182618][ T8458] 9pnet_fd: Insufficient options for proto=fd [ 246.192437][ T359] usb 3-1: USB disconnect, device number 65 [ 246.269225][ T8476] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2773'. [ 246.298707][ T8481] /dev/rnullb0: Can't open blockdev [ 246.318518][ T8483] rust_binder: Write failure EFAULT in pid:1531 [ 246.352607][ T8490] rust_binder: Write failure EFAULT in pid:1535 [ 246.356207][ T8495] netlink: 'syz.0.2781': attribute type 27 has an invalid length. [ 246.373428][ T330] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 246.378832][ T8490] ------------[ cut here ]------------ [ 246.386560][ T8490] WARNING: CPU: 0 PID: 8490 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 246.394866][ T8494] overlayfs: failed to resolve './file2': -2 [ 246.396016][ T8490] Modules linked in: [ 246.405943][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.2.2780 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808 [ 246.417645][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.427768][ T8490] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 246.433738][ T8490] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 246.453513][ T8490] RSP: 0018:ffffc9000ba3f560 EFLAGS: 00010246 [ 246.459654][ T8490] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 246.467661][ T8490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ba3f618 [ 246.475710][ T8490] RBP: ffffc9000ba3f6a0 R08: ffffc9000ba3f617 R09: 0000000000000000 [ 246.483937][ T8490] R10: ffffc9000ba3f600 R11: fffff52001747ec3 R12: ffffc9000ba3f5a0 [ 246.492111][ T8490] R13: dffffc0000000000 R14: 1ffff92001747eb0 R15: 0000000000000000 [ 246.500128][ T8490] FS: 00007f918f7576c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 246.509125][ T8490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.515793][ T8490] CR2: 0000200000001000 CR3: 000000012fe18000 CR4: 00000000003526b0 [ 246.524061][ T8490] Call Trace: [ 246.527366][ T8490] [ 246.530315][ T8490] ? vfs_write+0x3c0/0xf30 [ 246.533240][ T330] usb 2-1: device descriptor read/64, error -71 [ 246.534800][ T8490] ? ksys_write+0x141/0x250 [ 246.545962][ T8490] ? x64_sys_call+0x271c/0x2ee0 [ 246.551043][ T8490] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 246.557268][ T8490] ? hashtab_init+0xdb/0x1f0 [ 246.562117][ T8490] ___kmalloc_large_node+0x81/0x220 [ 246.567560][ T8490] ? hashtab_init+0xdb/0x1f0 [ 246.572204][ T8490] __kmalloc_large_node_noprof+0x1e/0xe0 [ 246.578287][ T8490] ? hashtab_init+0xdb/0x1f0 [ 246.583234][ T8490] __kmalloc_noprof+0x336/0x530 [ 246.588449][ T8490] ? kasan_save_alloc_info+0x40/0x50 [ 246.594595][ T8490] hashtab_init+0xdb/0x1f0 [ 246.599999][ T8490] ? common_read+0x16d/0x480 [ 246.605252][ T8490] symtab_init+0x44/0x70 [ 246.609933][ T8490] common_read+0x1de/0x480 [ 246.614511][ T8490] ? hashtab_init+0xdb/0x1f0 [ 246.619294][ T8490] ? __cfi_common_read+0x10/0x10 [ 246.624379][ T8490] ? hashtab_init+0x105/0x1f0 [ 246.629268][ T8490] policydb_read+0xaa8/0x28c0 [ 246.634028][ T8490] ? __kasan_kmalloc+0x96/0xb0 [ 246.638811][ T8490] ? __cfi_policydb_read+0x10/0x10 [ 246.644196][ T8490] ? security_load_policy+0x128/0x12f0 [ 246.649713][ T8490] security_load_policy+0x162/0x12f0 [ 246.655070][ T8490] ? irqentry_exit+0x4a/0x60 [ 246.659717][ T8490] ? exc_page_fault+0x66/0xc0 [ 246.664471][ T8490] ? asm_exc_page_fault+0x2b/0x30 [ 246.669551][ T8490] ? __cfi_security_load_policy+0x10/0x10 [ 246.675356][ T8490] ? rep_movs_alternative+0x4a/0xa0 [ 246.680699][ T8490] sel_write_load+0x298/0x5e0 [ 246.685436][ T8490] ? __cfi_sel_write_load+0x10/0x10 [ 246.690681][ T8490] ? bpf_lsm_file_permission+0xd/0x20 [ 246.696206][ T8490] ? __cfi_sel_write_load+0x10/0x10 [ 246.701539][ T8490] vfs_write+0x3c0/0xf30 [ 246.705841][ T8490] ? __cfi_vfs_write+0x10/0x10 [ 246.710726][ T8490] ? __kasan_check_write+0x18/0x20 [ 246.715886][ T8490] ? mutex_lock+0x92/0x1c0 [ 246.720355][ T8490] ? __cfi_mutex_lock+0x10/0x10 [ 246.725361][ T8490] ksys_write+0x141/0x250 [ 246.729978][ T8490] ? xfd_validate_state+0x68/0x150 [ 246.735193][ T8490] ? __cfi_ksys_write+0x10/0x10 [ 246.740156][ T8490] ? __kasan_check_write+0x18/0x20 [ 246.745315][ T8490] ? fpregs_restore_userregs+0x11d/0x260 [ 246.751009][ T8490] __x64_sys_write+0x7f/0x90 [ 246.755910][ T8490] x64_sys_call+0x271c/0x2ee0 [ 246.760645][ T8490] do_syscall_64+0x58/0xf0 [ 246.765274][ T8490] ? clear_bhb_loop+0x50/0xa0 [ 246.770253][ T8490] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 246.776193][ T8490] RIP: 0033:0x7f918e98eec9 [ 246.780802][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.800945][ T8490] RSP: 002b:00007f918f757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.809391][ T8490] RAX: ffffffffffffffda RBX: 00007f918ebe5fa0 RCX: 00007f918e98eec9 [ 246.810342][ T330] usb 2-1: device descriptor read/64, error -71 [ 246.817506][ T8490] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 246.832042][ T8490] RBP: 00007f918ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.840040][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.848359][ T8490] R13: 00007f918ebe6038 R14: 00007f918ebe5fa0 R15: 00007ffc230c1b28 [ 246.856519][ T8490] [ 246.859559][ T8490] ---[ end trace 0000000000000000 ]--- [ 246.865709][ T8490] SELinux: failed to load policy [ 247.076857][ T330] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 247.215418][ T330] usb 2-1: device descriptor read/64, error -71 [ 247.471288][ T330] usb 2-1: device descriptor read/64, error -71 [ 247.588543][ T330] usb usb2-port1: attempt power cycle [ 247.950833][ T330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 247.973271][ T330] usb 2-1: device descriptor read/8, error -71 [ 248.111856][ T330] usb 2-1: device descriptor read/8, error -71 [ 248.366540][ T330] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 248.389178][ T330] usb 2-1: device descriptor read/8, error -71 [ 248.527483][ T330] usb 2-1: device descriptor read/8, error -71 [ 248.643965][ T330] usb usb2-port1: unable to enumerate USB device [ 249.325859][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!