last executing test programs: 1m52.564846575s ago: executing program 3 (id=436): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x2000b, 0xd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000800008000000000050000000539"]) r6 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) pidfd_getfd(r2, r1, 0x0) close_range(r0, r4, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r9, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000001c0)="0f18f80ff7f9ba4100ec660fc730f4baf80c66b8325ba68e66efbafc0ced0fc79c0d0066b9500900000f3236653edc390f0f08b7", 0x34}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000080)) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r11, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r11], 0x28) sendto(r11, &(0x7f0000000380)="5d6008343da1b44346197cba076e71c4a6dd183a8ae90fe9cdc000000000199175d890c76e3d676385663b544849dccf5c7f62a164ff46246c12b3020000000000000057ba77fbe1a156e1a02a", 0x11, 0x44, 0x0, 0x0) 1m51.687811052s ago: executing program 3 (id=454): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r1, 0x6, 0x2ce, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2028063, &(0x7f0000000000)={[], [{@fowner_lt}]}) 1m51.606048754s ago: executing program 3 (id=456): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRES16]) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xdddd0000, 0x119000, 0x1}) 1m51.605693724s ago: executing program 3 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x3) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setresuid(0xee01, 0xee01, 0x0) write$cgroup_subtree(r3, 0x0, 0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 1m51.522552645s ago: executing program 3 (id=458): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f00000004c0)) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) fsopen(&(0x7f0000000000)='adfs\x00', 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) write$P9_RLOPEN(r3, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x94e0f7aba246fddc, 0x0, 0x1}, 0x4}}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 1m51.437225987s ago: executing program 3 (id=459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 1m51.404719427s ago: executing program 32 (id=459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 1m33.201314559s ago: executing program 1 (id=601): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r3], 0x10) sendfile(r1, r0, 0x0, 0xffffffff) 1m32.309733106s ago: executing program 1 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="0f20e035020000000f22e0b913000000b80c000000ba008000000f30c4e105ea445d9ec4c1fa12d10f06b9e8090000b80070008aba000000000f300f0ffea6c4e315699efd9c0000a70f01d10fb4bf00680000", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x0, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x0, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000200)={0xfffe, 0x8, 0xfffd, 0x2, 0xef, 0x86}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0}) 1m32.258367627s ago: executing program 1 (id=627): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x0, 0x989680}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080005"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m32.153951039s ago: executing program 1 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)="15", 0x1, 0xfffffffffffffffc) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m32.153405909s ago: executing program 1 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x791f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9e4e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e7ea59bced0385a890caf47a9cb9bf9b771bc2072f1e8c03"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9bf8177bd86cc4235408fb6adbf8ea6a83616b05a30d1338"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eca84f5b73ca33940f5fda48243dcd34ee00f21a4b6f9ff1"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40042) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8c10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040}, 0x20004000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x27c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x47, 0x3, "9ecfb2b86d719d127b9cbe1c41bcc3d24e8466858aaa7de47c636755987f5bbbce1cfc148bf8cfa2715d2f297b66bfac262f3fa08d38692a1279e53e0a8610d2b02f2b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x58e8bad7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "c2730ce1e8ef8f42c8137659732a40f41695bd7689c8fa0f361a512c68ef2a592bacc614904b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x31}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b1c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x89c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) r6 = accept4(r2, 0x0, &(0x7f0000000a40), 0x80800) connect$pppl2tp(r6, &(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010101}, 0x1, 0x4, 0x4, 0x1}}, 0x2e) futex(&(0x7f0000000ac0)=0x2, 0x7, 0x2, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)=0x1, 0x2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ae}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x46080) futex(&(0x7f0000000c80)=0x2, 0x5, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00), 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x148, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "931efcaefabc3666"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="887809f4a07373239d81de36a09bd67c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="186fc0d655d411bf3dccf2db741ee9287296dadcfdf76dcc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="704cb540e0423c6962d3052a652b6916a14dc0bb4b1f12ce"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="89e492a98c43bc0aa81306cca8132baf"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aab9108b7798aad7731c1974b21456ab"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ba25633ee6c8faad8e839c127197edb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="82db28285cef3120b0d2a2e8d7c524c4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70eedf7c54a0fcfda1fd7e05518d25a3f509e3cb8de78412"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1d03e1a7f6c6402b1d3108ef351df382"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f124b3d4bba865c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5fbaa666293cf99b2ebc4e4dfa2616868f4eb98098f25060e0ea05e63697d5c6"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x1cc, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private2, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x68802}, 0x20000095) syz_open_dev$hiddev(&(0x7f0000001240), 0x4, 0x2000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001280)) bind$802154_dgram(r6, &(0x7f00000012c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) connect$bt_rfcomm(r6, &(0x7f0000001300)={0x1f, @none, 0x5}, 0xa) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001340)) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) epoll_pwait(r7, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4ba8, &(0x7f00000014c0)={[0x7ff]}, 0x8) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001500)={'veth0_to_batadv\x00', 0x7}) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000001540)=0x0) syz_open_procfs(r8, &(0x7f0000001580)='net/udp\x00') 1m32.10610172s ago: executing program 1 (id=631): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x100, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1m32.063339301s ago: executing program 33 (id=631): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x100, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 3.917654344s ago: executing program 2 (id=2637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000700)=ANY=[@ANYBLOB="07000000000000000000000000000000010000000000000002000000090000000900000036ffffff00000000000000000000000000000000400000000000000001000000000000000800000000000000050000000000000000000000000000000700000000800000f8ffffff030000000100000000000000010400000f000000000000000000000000000000000000000000000000000000010000000300000001000000000000000400000004000000000000000000000000000000000000000000000000000000706500000200000001000000000000000700000009000000000000000020000000000000000000000000000000000000000000000100000000000000000000000500000004000000949000000632c72700000000000000000000000000000000002400000300000000000000000001000000000000000100"/344]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80141, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000100)="700371153d296ad95fc7d7dc876c6ca66101a984e53b4de4cde42586f5514ff699aced817cf4b9480e8464b16314dcb727df5f15c9b4e393209745e6a06be27cc2aa6edb92eb29e1ff67989bfe188e41f1694f3f632a0482e1673cd0054a6e93c949f9df3dfb9b528ed9e78f9b850d2ad13cd3f7445d5cbe54f836c5ca50b50c89f5aa245a7101b0bf7686ec0100a6b223d78f526babeead4180e2192fd52a26e225e394f1f7a181828fcafee558bb5d779b5d49a14fdd3dbe686b9034a6ebfb198564307a7904b491bee080c77a5e315c0b8f1d93b6303bd551d5058040f09741dade102a8d4271b9", 0xe9}, {&(0x7f0000000280)="5eb897750423ab654012e4ee586bd17dc15e8aa45cb5f01eeef3abc7bc15cba07b739d4d6c6c9757633ca6c2774b24df7a7ef1f14524fdb6a87f49d94d43a973cbdbc73cbd303845097dd9c00b177e4142e0ea7cbd51306041bd474019acb77dfc71057309d3afdc71064586333a81e8e206dea10210d2cbb341d599bb201eb657cbb62478043f33a2fc78bba87bac12621b3e5888020279404652d56c45fd6f3edd8218b788eb0328300a3211798ae477930824f04c1fd9115dab9da670282dbae9a3ee0bf3996554d593f551a59bc207b8a5888e4c6806a11afdc1281bd8ff9628e60dd1dad97a2100f96527", 0xed}, {&(0x7f0000000000)="44ae1a5ae403c238857be4d0abaae82465d8806d71a4426c72fc4cdeecbaaf6fef6a4d3689e04c1a141786a0b8967e1ba9967c889a382c343facd069f2ae54feb5f4f951101316c1dd26ac0c3c278366ec3cb51b474719922ea2ffc153797216415c2bb7f7a581d4a44ee7056f6288419b473ff5915cccb42e50d3c5460c3453f338", 0x82}, {&(0x7f0000000380)="7ae9ed06dce0a54d0b1608554eac40a2ab94b8070125a37de0a61408a6c250d16686bc285b45873f0c2d10263fd26537e818cb2d23da726db12b9dda215944c325647def52120a9aaa1588fc06d4f98e408b820316df8d05e3402e78297c6c3805d2d760f02721cf3835364814e377c46143ac64fdd9", 0x76}, {&(0x7f0000000400)="e0a2504c3470037bff34ec23b1b8dbad72c782ea603e3173552de3732926508ec318fa8fff639254383463137ece6db7b895c7abc7c4d2e62aed69f15544082427b2c19492960dfe69a6ae44616228d32f1b781426555ca031a9770e6181", 0x5e}, {&(0x7f0000000200)="04a7ddd3f6f62558431f7113b9b10c67d0ced9d230dba20bc2e7893d407041e04aa026ec9bab827bbaa7d9188f", 0x2d}, {&(0x7f0000000480)="b0c69185c8e30ed24c2aad9f58f071ea91874640f165a0613c3750db73e6265472f0cfe37f8109ab9039011c519ebe4e6ff111bb8fb7684859887563f31f242f280fe09463187202d68435d845451b92f78edba7d609600b3fc3d9af9bad239997fa2e4ef571783974d4d9abcf9c7b4b9752876c6b79c7db84f3b6d34596b6ce1f80d265ebf9ee7e2764f656c2316591ea5a8a0f508a504d678b8f11cf9679bb7e019d7e0a562cba8d09f609", 0xac}, {&(0x7f0000000540)="7abf4e6d3456103aed", 0x9}], 0x8) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edff10"]) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="050000000000000000000080bc04000001000000090000000100000007000000ff0000000000000000000000000000000600000008000000000000000b00000009000000080000000100000000000000000000000000000007000000e51e000003000000750c000041020000000000003c490000000000000000000000000000000000c0010008000200000007000000010000000004000007000000000000000000000000000000000000000400000006000000a60d0000008000000700"/208]) close_range(r0, 0xffffffffffffffff, 0x0) 3.571054631s ago: executing program 2 (id=2645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0xb}) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00') ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000002c0)=0x3) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) setuid(0xee00) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x44, 0xd6}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_usb_control_io$sierra_net(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="200ac2000000c202e5f23a278c20929ec17107c1c4fcdf768ab4581f124195a63068aa3ff6e54896ef9610672ca205c5e9cb94e5e47121a60075c6dfc46bfd01146bf7e8d4c01f8750963767bf4f7c375f2c6a8560db802229c297f6736be42e1d289cd964d244fb0d854f1a23512d7c4ad1c339e7adbd40c070e27b576b7debca798bfffdeeba2952912d1a288d15945725d215e51f68592a318ee288be7e72002e28e87a91917ad816f0739d1d7b0e886ec0b06be1c9f88eb735b5611bb403d7d1f2dafa4bd867"], &(0x7f0000000d40)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000080)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="20039000000051babd19d86ddefc9c2f990c88afdafa9b7bbd34b09cbaae2d76a51fcd972fdb01252e4a0dd0639ef0476e1e37d6c2296a42f287f403f4c4890304c037d22e2f0cfb681d304a94193919364db4ec5d47bcf0871890ec14bbefb8a405604fbf40f570733df626144ccce9c23874ed789882e4f2ed17ac1cbc9dc7c3007e8a65e49b0068bb2484c936eae3f9b8484d5715"], &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000040)}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x57) close_range(r0, 0xffffffffffffffff, 0x0) 3.426009334s ago: executing program 4 (id=2647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xa) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.612136039s ago: executing program 4 (id=2668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="670c000800000000fe00000000000000000000000000001ffe8000000000000000000000000000aaff020000000000000000000000000001fe800000fe80000000000000000a0eb3702a2b45e30000000000002dfc01000000000000"], 0x68) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r7, &(0x7f0000000400)="240000001e005f0214fffffffffffff8070000000500000000000008120008000d000000", 0x24) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x54, 0x13, 0x403, 0x70bd2c, 0x25dfdbff, {0x18, 0xda, 0x5, 0x6, {0x4e21, 0x4e22, [0x8ae3, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xffffffff, 0x7f]}, 0x8, 0x200}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a009958bbbbbbbbbbbbbbbbbbd4bbd188a8320081002f000800451f001c100000007711"], 0x36) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto(r9, 0x0, 0x0, 0x4c850, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r10) getsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.250511895s ago: executing program 4 (id=2678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) setuid(0xee00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x2a, 0x0, 0x0, 0x0, {0x80, 0x0, [0x0, 0x4, 0x101], [0x6]}, 0x400}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000000)={0xa98, 0x8000000000000001, 0x3}) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.193073197s ago: executing program 4 (id=2682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x5, 0x0, 0x2000000}}) (async) r2 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000c40), 0x0, 0x20004004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000c00)}}], 0x1, 0x40002021, &(0x7f0000000bc0)={0x0, 0x3938700}) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async, rerun: 32) mkdir(&(0x7f0000000040)='./file0\x00', 0x58) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000001d80)=@ethtool_link_settings={0x2, 0x81, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x1, 0x2]}}) (async, rerun: 64) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x22000000) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000002100090002000000ffdbdf250700000059000100"], 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x20040004) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async, rerun: 64) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) 1.133954778s ago: executing program 4 (id=2683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x3, 0x1, 0x800}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000380)=[@exit_looper, @exit_looper, @increfs={0x40046304, 0x3}, @register_looper, @exit_looper], 0x99, 0x0, &(0x7f0000000440)="c6ff7c123f40d2b2dc49beda06b5402ba5bf6b90299f7aa52bb0fbef7c517d90b6d6a17957a913f88e2c1bff7875eb625f55d7edca140de1424154b5b0a6c1f290317591702362a74f3eef76d6eeb264830dd45951c2e89fd8d7383f64b1824cbd2cb040aadb5d2fecaaca4e2efedbe3402b5f6a7ca415af011afb8270e6e67a568e7ffe604122474fd56307f1425126c486384ec3477692c3"}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000340)={0x2, 0x38, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/238, 0xee, 0x2, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/135, 0x87, 0x2, 0x3d}, @fda={0x66646185, 0x4, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 934.217402ms ago: executing program 5 (id=2691): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 881.886302ms ago: executing program 5 (id=2692): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf65280068fdfa"], 0x28}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x6800000000000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) listen(r4, 0x9) pread64(r1, 0x0, 0x0, 0x1) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x21, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x1f) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x112, 0xe, 0x0, &(0x7f0000000080)) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40043d14, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000100)={0x6, 0xa}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0x66053000) 881.597983ms ago: executing program 5 (id=2693): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) close(r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) 878.628102ms ago: executing program 5 (id=2694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x113) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xf) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x136) pread64(r4, &(0x7f00000024c0)=""/209, 0xd1, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x1}], 0x7f, 0x0, &(0x7f00000001c0)="497233f0e32574d822486f5a25b59e9f68e18f871a378fee3a50be44caf3a07dae682775c13606ca567e71220742b3a6491b43ea5f549726a5a26fba10ff703ae07ec64693fa138924e3d586ed53ea20a32a3a07577b41d53a947336262243fcde7b3d691c9276a616b4a029cfeebd79af29d95df27ab0daad7ff88c6097bf"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffe, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 496.58775ms ago: executing program 2 (id=2695): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f80dc86dc72cf793028dc75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioperm(0x0, 0x9, 0x5) select(0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@volatile}, {@volatile}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x1000, 0x8000}) lseek(r7, 0x2, 0x2) 391.939822ms ago: executing program 2 (id=2701): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket(0x1e, 0x4, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000000000000000000003000600002000000200000000000020000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x10f, 0x11, 0x0, &(0x7f0000000500)) fchown(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000668000/0x3000)=nil, 0x3000, 0x200000e, 0x41d6b3315cebc698, r0, 0x180000000) (async) mmap$xdp(&(0x7f0000668000/0x3000)=nil, 0x3000, 0x200000e, 0x41d6b3315cebc698, r0, 0x180000000) mremap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00007b4000/0x3000)=nil) listen(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="b400000001080102000000000000000000000000050003003a0000003c0004800800024026d5d042080008400000000508000440000000060800084000000081080004400000008008000440000000b008000340004200083c0004800800044000000077080004400000000008000540ffffffff080002400015cc3cd6000640000000080800034000000003080004400200ffff0240001b0000050003000600000005000300110000000600024000070000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040045}, 0x54001) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x7, 0x1, 0x3, 0xa, 0x7, 0x30000, 0x5, 0x1, 0x80000000, 0x80000000, 0x4, 0x7, 0x8c, 0x80000001, 0xfa], 0xdddd0000, 0x81542}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0xff, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x8, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xe, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0x6, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0xeeee8000, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x1}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x8080000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x128, 0xb, 0xf801, 0xffff1000, [0x7ff, 0x0, 0x1]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 337.424133ms ago: executing program 0 (id=2704): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x800, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0x1ff, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x800007, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x6, 0x100, 0xfa, 0x3, 0xe5eb, 0x6, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x1, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0x2, 0x2, 0x2, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x87, 0x6, 0x8, 0x401, 0x1, 0x1, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x88, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0xfffffffe, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0xffffffff, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x10006, 0x9, 0xfffffffa, 0x2, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0xfffffffe, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x4, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x4, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0xc3, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x2, 0x8, 0x59, 0xffffffff, 0x6, 0x1, 0xe6b, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x5, 0x6, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x80000000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xffffffff, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0x3, 0x3ff, 0xa, 0x0, 0x5, 0x4, 0xc, 0x5, 0x1ff, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x0, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x8, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0xfffffff8, 0x10, 0x2, 0x259, 0x7fff, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x20000007, 0x200, 0xbe7, 0x1, 0x9, 0x401, 0x5, 0x0, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0xb, 0x4, 0x4, 0x7, 0x208, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x0, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x100, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0xfffffff9, 0x1, 0x1, 0x1c0, 0xd, 0x2, 0x4, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0xf, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0xab68, 0x9, 0x8001, 0x3c, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x1000, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x7, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x200, 0x5, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0x5a6, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x3ff, 0x100, 0x7, 0x5, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0x10001, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0xfe000000, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xffffffff, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x2, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x8001, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa3, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x0, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba8, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x200009, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x5, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x100005, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x2]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001180), 0x40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000011c0)={0x73622a85, 0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) getpeername$packet(r1, &(0x7f0000001200)={0x11, 0x0, 0x0}, &(0x7f0000001240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'syztnl1\x00', r6, 0x2f, 0x81, 0x8, 0x5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x20, 0x3, 0x9}}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000840)={&(0x7f0000000240)=@alg, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/29, 0x1d}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f00000005c0)=""/178, 0xb2}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000500)}], 0x9}, 0x20) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 275.104724ms ago: executing program 4 (id=2705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x404480) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000100)) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 274.719604ms ago: executing program 0 (id=2706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0xd0) r1 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3) fsetxattr$security_ima(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0xd0) (async) memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3) (async) fsetxattr$security_ima(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 199.669396ms ago: executing program 0 (id=2707): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x29) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000340)={0xc0, 0x0, 0x800}) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_io_uring_setup(0x1e72, &(0x7f00000000c0)={0x0, 0x5e03, 0x4, 0x3, 0x186}, 0x0, 0x0) (async) write$tun(r8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRESDEC=r3, @ANYBLOB="16f67b898660e30daa1401619c700893099a2fc1bf006598505ca4f4b27a95483ad14dca2f503d99e4d01cded963a0c3e3c4a380b12d3943f54bdfb84b01ec9d296da97a8888863fcd913ca1d0ba3fadfc1eff8fc597ce30058901fd0c682587781bbe045f7a987b020070a8c6978687f27f23ed7a27353ad3122fadb07e6bdb0cc8a5718382ac94f8c9176216c454cd8692b4e3fbb09af809cfa16b1cf9f873729c6d40995747cab880de669545a2a727278eb803435cd3e35bafa84a6008c6c25ffee6600d29", @ANYRES64=r10], 0xfdef) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x1, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x2000, [0x6800000000000003, 0x4, 0x5e, 0x8]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 110.004458ms ago: executing program 2 (id=2708): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(r3, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000100)="670f7848a60f0119f30fbda07350000067660f3880531d0f08660fc73066ba4200b808000000efc4e1785aaa00000080f4b91e0800000f32c744240200e00000c7442406000000000f011424", 0x4c}], 0x1, 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x30000, 0x10000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 83.425818ms ago: executing program 2 (id=2709): pipe2(0x0, 0x80000) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdffbffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x2, 0x6}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc7441, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) (async) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 54.886809ms ago: executing program 0 (id=2710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000004, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 2.4155ms ago: executing program 5 (id=2711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2800) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 1.72456ms ago: executing program 5 (id=2712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89fc, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9d86ae1bb4967a59f31350159eacdde85e71d2c0cbead9a390e6dbc4", @ANYRES16=r4, @ANYBLOB="0c042cbd7000fddbdf250d00000008000600de000000080004000010000014000180060004004e24000006000200160000001400018008000800040000000800050003000000080005000f0000000800040009000000080006000000010008000400060000000c0002800800030004000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xe16de50aeeefbf67}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000640)=[@increfs_done, @acquire], 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3", 0x5}], 0x1}}], 0x1, 0x8800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000040)={0x1d, r11}, 0x10) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 445.77µs ago: executing program 0 (id=2713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000101800230920000000000000000a0000000800000001000000cc60d789210e99f5d3861531a95b08051da493bcdf0e469f3d1a6ad68dc6f584a70b5f72190992ef3cf9eb45fe1e17d7c5934be3bf0dac3f"], 0x1c}}, 0x20010000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x6042, 0xfffffffffffffffe, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0xc) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x3, &(0x7f0000000680)=[{0x6, 0x80, 0x3}, {0x0, 0x2, 0x1}, {0xffffffffffffffff, 0x1000, 0x5}, {0x0, 0x2, 0x7}, {0x6, 0x2}, {0x3, 0x2, 0x6}], 0x6, 0x5, 0x56, 0x71, 0x50, 0x1b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0b"}) 0s ago: executing program 0 (id=2714): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x44b}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_COMMENT={0x7, 0x1a, 'U)\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff7}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2e5}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x30}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xb0b0}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7f}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xdcc0}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r1 = accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x50}}, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0xf, 0x4, 0x5, 0xef3}, {0x6, 0x9, 0x1, 0x68000000}, {0x81, 0x1, 0x9, 0x5}]}) r4 = gettid() capset(&(0x7f0000000600)={0x20080522, r4}, &(0x7f0000000640)={0xfffffffc, 0x5, 0x3, 0xb, 0x7ff, 0x40}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x264000000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x48880) ptrace$setsig(0x4203, r4, 0x7, &(0x7f00000007c0)={0x23, 0x800, 0x100}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000840)=@arm64={0x7, 0x81, 0x1, '\x00', 0x7}) rt_sigprocmask(0x1, &(0x7f0000000880)={[0x1]}, &(0x7f00000008c0), 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000880) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008804}, 0x20000814) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000b80)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000bc0)={[{0x9, 0x370, 0x8, 0x0, 0xdd, 0x0, 0x2, 0x1, 0x9, 0x0, 0x80, 0x40, 0x5}, {0x7, 0x7, 0x0, 0x7, 0x6, 0x7, 0x4, 0x40, 0x8c, 0xb, 0x0, 0xf0, 0x1ff}, {0x9c, 0x7, 0x3, 0x0, 0x8, 0xa, 0x3, 0xf3, 0x8, 0x9, 0x84, 0x5, 0x1}]}) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000000c80)={&(0x7f0000000c40)=""/23, 0x17}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c80c}, 0x4000800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r8, 0x804, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2000000, 0x16}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000001000)={0x8, 'wlan0\x00', {'syzkaller1\x00'}, 0xb3}) bind$inet6(r0, &(0x7f0000001040)={0xa, 0x4e23, 0xaa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6100281}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 22.198749][ T36] audit: type=1400 audit(1758123144.390:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.200131][ T282] cgroup: Unknown subsys name 'net' [ 22.221410][ T36] audit: type=1400 audit(1758123144.390:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.248750][ T36] audit: type=1400 audit(1758123144.420:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.248986][ T282] cgroup: Unknown subsys name 'devices' [ 22.393997][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.399625][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.554218][ T36] audit: type=1400 audit(1758123144.750:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.577406][ T36] audit: type=1400 audit(1758123144.750:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.602179][ T36] audit: type=1400 audit(1758123144.750:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.613164][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.634077][ T36] audit: type=1400 audit(1758123144.830:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.659505][ T36] audit: type=1400 audit(1758123144.830:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.691265][ T36] audit: type=1400 audit(1758123144.890:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.716849][ T36] audit: type=1400 audit(1758123144.890:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.716892][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.477849][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.484983][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.492132][ T289] bridge_slave_0: entered allmulticast mode [ 23.498434][ T289] bridge_slave_0: entered promiscuous mode [ 23.506008][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.513104][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.520161][ T289] bridge_slave_1: entered allmulticast mode [ 23.526493][ T289] bridge_slave_1: entered promiscuous mode [ 23.626575][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.633658][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.640714][ T293] bridge_slave_0: entered allmulticast mode [ 23.647006][ T293] bridge_slave_0: entered promiscuous mode [ 23.663222][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.670292][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.677480][ T293] bridge_slave_1: entered allmulticast mode [ 23.683834][ T293] bridge_slave_1: entered promiscuous mode [ 23.716565][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.723688][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.730764][ T295] bridge_slave_0: entered allmulticast mode [ 23.737205][ T295] bridge_slave_0: entered promiscuous mode [ 23.743450][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.750498][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.757638][ T294] bridge_slave_0: entered allmulticast mode [ 23.764152][ T294] bridge_slave_0: entered promiscuous mode [ 23.777055][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.784161][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.791336][ T295] bridge_slave_1: entered allmulticast mode [ 23.797644][ T295] bridge_slave_1: entered promiscuous mode [ 23.803844][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.810896][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.818044][ T294] bridge_slave_1: entered allmulticast mode [ 23.824388][ T294] bridge_slave_1: entered promiscuous mode [ 23.962524][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.969581][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.976890][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.983945][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.014037][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.021117][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.028385][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.035447][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.049071][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.056135][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.063404][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.070426][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.092750][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.099815][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.107135][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.114188][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.136060][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.143390][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.150590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.158368][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.166272][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.173519][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.180681][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.187976][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.203078][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.210144][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.232058][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.239098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.247032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.254099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.262364][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.269385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.281493][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.288537][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.303580][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.310745][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.333183][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.340240][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.348078][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.355118][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.389697][ T294] veth0_vlan: entered promiscuous mode [ 24.415227][ T294] veth1_macvtap: entered promiscuous mode [ 24.426143][ T289] veth0_vlan: entered promiscuous mode [ 24.437493][ T293] veth0_vlan: entered promiscuous mode [ 24.458271][ T295] veth0_vlan: entered promiscuous mode [ 24.470602][ T293] veth1_macvtap: entered promiscuous mode [ 24.477620][ T289] veth1_macvtap: entered promiscuous mode [ 24.490522][ T295] veth1_macvtap: entered promiscuous mode [ 24.516532][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.574617][ T332] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.590882][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.615641][ T332] ======================================================= [ 24.615641][ T332] WARNING: The mand mount option has been deprecated and [ 24.615641][ T332] and is ignored by this kernel. Remove the mand [ 24.615641][ T332] option from the mount to silence this warning. [ 24.615641][ T332] ======================================================= [ 24.674535][ T332] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 24.684045][ T345] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 24.691472][ T342] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 24.748315][ T352] exFAT-fs (rnullb0): invalid boot record signature [ 24.755103][ T352] exFAT-fs (rnullb0): failed to read boot sector [ 24.761691][ T352] exFAT-fs (rnullb0): failed to recognize exfat type [ 24.814625][ T355] tipc: Enabling of bearer rejected, failed to enable media [ 24.861276][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.023382][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 25.031819][ T31] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 25.040792][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 25.051885][ T31] usb 2-1: config 220 has no interface number 2 [ 25.058229][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 25.072048][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 25.078914][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 25.086320][ T31] usb 2-1: config 220 interface 1 has no altsetting 1 [ 25.095949][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 25.105781][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.113985][ T31] usb 2-1: Product: syz [ 25.118322][ T31] usb 2-1: Manufacturer: syz [ 25.123648][ T31] usb 2-1: SerialNumber: syz [ 25.278367][ T376] rust_binder: Read failure Err(EAGAIN) in pid:7 [ 25.278496][ T376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 25.379960][ T336] rust_binder: Error while translating object. [ 25.389627][ T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 25.399579][ T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2 [ 25.425439][ T31] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 25.444047][ T31] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 25.450853][ T31] usb 2-1: No valid video chain found. [ 25.459941][ T31] usb 2-1: USB disconnect, device number 2 [ 25.754336][ T387] __vm_enough_memory: pid: 387, comm: syz.0.17, bytes: 18014402804453376 not enough memory for the allocation [ 25.766231][ T389] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 25.800153][ T391] rust_binder: pid 391 performed invalid decrement on ref [ 26.126909][ T416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 26.501330][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.691089][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 26.699653][ T31] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 26.710150][ T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.744461][ T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.779820][ T31] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.828129][ T31] usb 1-1: config 7 interface 0 has no altsetting 0 [ 26.867144][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 26.889522][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.899225][ T423] rust_binder: 421 RLIMIT_NICE not set [ 26.899379][ T422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 26.927748][ T383] rust_binder: 420: removing orphan mapping 0:4248 [ 26.982579][ T425] can0: slcan on ttyS3. [ 26.992474][ T427] rust_binder: Error in use_page_slow: ESRCH [ 26.992512][ T427] rust_binder: use_range failure ESRCH [ 26.998543][ T427] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 27.013433][ T427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.029635][ T427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:9 [ 27.152829][ T429] can0 (unregistered): slcan off ttyS3. [ 27.232898][ T456] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 27.243204][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 27.243221][ T36] audit: type=1400 audit(1758123149.440:187): avc: denied { unlink } for pid=454 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=606 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.251140][ T456] rust_binder: Write failure EINVAL in pid:16 [ 27.279576][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 27.295162][ T456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=456 comm=syz.1.37 [ 27.350478][ T36] audit: type=1400 audit(1758123149.540:188): avc: denied { write } for pid=468 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 27.401107][ T36] audit: type=1400 audit(1758123149.570:189): avc: denied { create } for pid=468 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.501100][ T65] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.509563][ T36] audit: type=1400 audit(1758123149.700:190): avc: denied { remount } for pid=417 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.531091][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.543954][ T31] usbhid 1-1:7.0: can't add hid device: -71 [ 27.550712][ T31] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 27.551232][ T36] audit: type=1400 audit(1758123149.700:191): avc: denied { block_suspend } for pid=417 comm="syz.0.28" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.565777][ T31] usb 1-1: USB disconnect, device number 2 [ 27.682143][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.701098][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 27.706292][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.721882][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.732712][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.742354][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.751481][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.759486][ T65] usb 4-1: Product: syz [ 27.771784][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.780838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.801077][ T65] usb 4-1: Manufacturer: syz [ 27.805724][ T65] usb 4-1: SerialNumber: syz [ 27.810801][ T9] usb 3-1: Product: syz [ 27.815141][ T9] usb 3-1: Manufacturer: syz [ 27.819758][ T9] usb 3-1: SerialNumber: syz [ 28.032603][ T451] tipc: Started in network mode [ 28.040104][ T451] tipc: Node identity ea52844a9ee9, cluster identity 4711 [ 28.047404][ T451] tipc: Enabled bearer , priority 0 [ 28.056576][ T65] usb 4-1: 0:2 : does not exist [ 28.066955][ T451] tipc: Disabling bearer [ 28.067140][ T65] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 28.108770][ T65] usb 4-1: USB disconnect, device number 2 [ 28.114763][ T9] usb 3-1: 0:2 : does not exist [ 28.132720][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 28.156559][ T9] usb 3-1: USB disconnect, device number 2 [ 28.180484][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 28.253762][ T36] audit: type=1400 audit(1758123150.450:192): avc: denied { transfer } for pid=484 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.275406][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 28.342977][ T36] audit: type=1400 audit(1758123150.540:193): avc: denied { unlink } for pid=486 comm="syz.0.43" name="#1" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.383879][ T36] audit: type=1400 audit(1758123150.540:194): avc: denied { mount } for pid=486 comm="syz.0.43" name="/" dev="overlay" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.407075][ T36] audit: type=1400 audit(1758123150.610:195): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.453687][ T498] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 28.471526][ T36] audit: type=1400 audit(1758123150.670:196): avc: denied { ioctl } for pid=499 comm="syz.0.47" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.523059][ T503] rust_binder: got new transaction with bad transaction stack [ 28.523079][ T503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 28.653700][ T512] input: syz1 as /devices/virtual/input/input4 [ 28.785084][ T530] can0: slcan on ttyS3. [ 28.805293][ T531] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 28.822503][ T529] can0 (unregistered): slcan off ttyS3. [ 28.851732][ T533] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 29.015438][ T550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 29.216285][ T555] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.233433][ T555] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 29.233959][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.242440][ T555] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.248871][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.248928][ T552] bridge_slave_0: entered allmulticast mode [ 29.281782][ T555] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 29.298923][ T552] bridge_slave_0: entered promiscuous mode [ 29.305079][ T559] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.313835][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.326520][ T559] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 29.337395][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.344700][ T559] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.351172][ T552] bridge_slave_1: entered allmulticast mode [ 29.352844][ T559] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 29.359147][ T552] bridge_slave_1: entered promiscuous mode [ 29.373519][ T565] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.384272][ T565] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 29.398832][ T565] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 29.406847][ T565] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 29.469663][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.476750][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.484059][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.491136][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.518708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.526046][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.535889][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.543018][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.552603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.559672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.609126][ T552] veth0_vlan: entered promiscuous mode [ 29.619418][ T552] veth1_macvtap: entered promiscuous mode [ 31.132069][ T623] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.156787][ T625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 31.156822][ T626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.166008][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.205450][ T634] __vm_enough_memory: pid: 634, comm: syz.0.89, bytes: 18014402804453376 not enough memory for the allocation [ 31.246242][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.255674][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.267640][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.276496][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.285567][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.296053][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.306394][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.343553][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 31.346211][ T652] binder: Unknown parameter 'fowner<00000000000000000000' [ 31.352826][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.369717][ T31] usb 4-1: Product: syz [ 31.376353][ T31] usb 4-1: Manufacturer: syz [ 31.384296][ T31] usb 4-1: SerialNumber: syz [ 33.928550][ T45] usb 4-1: USB disconnect, device number 3 [ 39.573908][ T661] netlink: 'syz.2.98': attribute type 12 has an invalid length. [ 39.575955][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 39.575972][ T36] audit: type=1400 audit(1758123161.770:241): avc: denied { getopt } for pid=655 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.608957][ T36] audit: type=1400 audit(1758123161.810:242): avc: denied { setopt } for pid=658 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.640855][ T660] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 39.648250][ T36] audit: type=1400 audit(1758123161.830:243): avc: denied { create } for pid=670 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.658639][ T660] rust_binder: Write failure EINVAL in pid:69 [ 39.667538][ T668] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 39.681344][ T668] rust_binder: Write failure EINVAL in pid:69 [ 39.714978][ T682] syz.3.103: attempt to access beyond end of device [ 39.714978][ T682] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 39.737482][ T682] EXT4-fs (loop3): unable to read superblock [ 39.764561][ T691] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 39.764591][ T691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.778701][ T690] rust_binder: Error in use_page_slow: ESRCH [ 39.790135][ T691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:79 [ 39.791853][ T690] rust_binder: use_range failure ESRCH [ 39.798630][ T36] audit: type=1400 audit(1758123161.990:244): avc: denied { setopt } for pid=692 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.830624][ T690] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 39.830650][ T690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.839235][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:79 [ 39.856161][ T36] audit: type=1400 audit(1758123162.050:245): avc: denied { accept } for pid=697 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.904331][ T36] audit: type=1400 audit(1758123162.100:246): avc: denied { mount } for pid=702 comm="syz.1.111" name="/" dev="configfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.927118][ T36] audit: type=1400 audit(1758123162.110:247): avc: denied { bind } for pid=699 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.955186][ T36] audit: type=1400 audit(1758123162.150:248): avc: denied { shutdown } for pid=707 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.975479][ T36] audit: type=1400 audit(1758123162.150:249): avc: denied { watch } for pid=707 comm="syz.1.112" path="/27/bus/bus" dev="overlay" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.013341][ T713] rust_binder: Failed to allocate buffer. len:65952, is_oneway:false [ 40.013365][ T713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 40.028434][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:92 [ 40.038117][ T36] audit: type=1400 audit(1758123162.150:250): avc: denied { watch_reads } for pid=707 comm="syz.1.112" path="/27/bus/bus" dev="overlay" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.091937][ T721] process 'syz.1.115' launched './file1' with NULL argv: empty string added [ 40.141082][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.291112][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 40.298870][ T31] usb 4-1: config index 0 descriptor too short (expected 60690, got 18) [ 40.307474][ T31] usb 4-1: config 0 has an invalid interface number: 72 but max is -1 [ 40.316704][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 40.327250][ T31] usb 4-1: config 0 has no interface number 0 [ 40.335013][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16 [ 40.344187][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.352228][ T31] usb 4-1: Product: syz [ 40.356399][ T31] usb 4-1: Manufacturer: syz [ 40.360988][ T31] usb 4-1: SerialNumber: syz [ 40.366592][ T31] usb 4-1: config 0 descriptor?? [ 40.373358][ T31] hub 4-1:0.72: bad descriptor, ignoring hub [ 40.379351][ T31] hub 4-1:0.72: probe with driver hub failed with error -5 [ 40.387031][ T31] ftdi_sio 4-1:0.72: FTDI USB Serial Device converter detected [ 40.395206][ T31] ftdi_sio ttyUSB0: unknown device type: 0x1b16 [ 40.475018][ T733] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 40.495631][ T735] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.681181][ T31] usb 4-1: USB disconnect, device number 4 [ 40.687587][ T31] ftdi_sio 4-1:0.72: device disconnected [ 40.961218][ T751] netlink: 9 bytes leftover after parsing attributes in process `syz.1.125'. [ 40.971178][ T751] gretap0: entered promiscuous mode [ 40.982777][ T751] netlink: 5 bytes leftover after parsing attributes in process `syz.1.125'. [ 40.991880][ T751] 0{X: renamed from gretap0 [ 40.998056][ T751] 0{X: left promiscuous mode [ 41.003491][ T751] 0{X: entered allmulticast mode [ 41.010526][ T751] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 41.621116][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.802210][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 41.818695][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 41.831559][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 41.854635][ T785] Zero length message leads to an empty skb [ 41.865933][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 41.875485][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.899009][ T45] usb 4-1: Product: syz [ 41.904356][ T45] usb 4-1: Manufacturer: syz [ 41.912449][ T45] usb 4-1: SerialNumber: syz [ 41.925381][ T45] usb 4-1: config 0 descriptor?? [ 41.936518][ T45] usb 4-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 42.151226][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.152923][ T45] usb 4-1: USB disconnect, device number 5 [ 42.200902][ T802] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 42.200929][ T802] rust_binder: Error while translating object. [ 42.213863][ T802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.220062][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 42.252348][ T804] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 42.254780][ T806] rust_binder: Error while translating object. [ 42.261597][ T804] rust_binder: Write failure EINVAL in pid:120 [ 42.270155][ T806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.282186][ T806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 42.312131][ T65] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 42.329717][ T809] kernel profiling enabled (shift: 0) [ 42.338565][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 42.360297][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 42.370477][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.383956][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.393137][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.407712][ T65] usb 3-1: config 0 descriptor?? [ 42.641070][ T463] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.792174][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.814149][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.841140][ T463] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 42.850314][ T463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.875737][ T463] usb 1-1: config 0 descriptor?? [ 43.118291][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 43.128199][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.143015][ T65] usb 3-1: USB disconnect, device number 3 [ 43.157727][ T836] rust_binder: Error in use_page_slow: ESRCH [ 43.157751][ T836] rust_binder: use_range failure ESRCH [ 43.163819][ T836] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 43.169341][ T836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.177600][ T836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 43.327068][ T839] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 43.391073][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 43.542114][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.552401][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 43.572417][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 43.582711][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 43.591880][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.599998][ T9] usb 2-1: Product: syz [ 43.604253][ T9] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 43.617432][ T9] usb 2-1: SerialNumber: syz [ 43.687517][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.710005][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.748685][ T463] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 43.790063][ T463] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 43.830934][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 43.852577][ T9] usb 2-1: USB disconnect, device number 5 [ 43.864575][ T861] pim6reg1: entered promiscuous mode [ 43.876148][ T861] pim6reg1: entered allmulticast mode [ 43.994284][ T463] usb 1-1: USB disconnect, device number 3 [ 44.119513][ T868] capability: warning: `syz.2.160' uses deprecated v2 capabilities in a way that may be insecure [ 44.145316][ T870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.145909][ T870] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 44.152536][ T870] rust_binder: Error while translating object. [ 44.163422][ T870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.169932][ T870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 44.221677][ T877] rust_binder: Error while translating object. [ 44.230984][ T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.237500][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 44.421095][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 44.515969][ T900] rust_binder: Write failure EFAULT in pid:111 [ 44.539839][ T902] /dev/rnullb0: Can't open blockdev [ 44.577988][ T910] rust_binder: Write failure EINVAL in pid:136 [ 44.593690][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.610813][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.622434][ T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.631694][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.647107][ T45] usb 4-1: config 0 descriptor?? [ 44.882914][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 44.901874][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.913427][ T45] usb 4-1: USB disconnect, device number 6 [ 44.955268][ T934] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=934 comm=syz.3.181 [ 44.968375][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 44.968392][ T36] audit: type=1400 audit(1758123167.170:287): avc: denied { connect } for pid=933 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.070367][ T942] overlayfs: failed to resolve './file1': -2 [ 45.251288][ T463] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 45.311090][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.341107][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.355571][ T945] rust_binder: 88: no such ref 2 [ 45.360775][ T945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 45.391084][ T463] usb 1-1: device descriptor read/64, error -71 [ 45.482185][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.492010][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 45.492337][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 45.504629][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 45.512597][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 45.521866][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.533363][ T45] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 45.539879][ T9] usb 2-1: Product: syz [ 45.548808][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.552943][ T9] usb 2-1: Manufacturer: syz [ 45.560969][ T45] usb 4-1: Product: syz [ 45.565510][ T9] usb 2-1: SerialNumber: syz [ 45.569893][ T45] usb 4-1: Manufacturer: syz [ 45.575626][ T9] usb 2-1: config 0 descriptor?? [ 45.578978][ T45] usb 4-1: SerialNumber: syz [ 45.589253][ T45] usb 4-1: config 0 descriptor?? [ 45.594516][ T939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.601761][ T939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.702058][ T463] usb 1-1: device descriptor read/64, error -71 [ 45.809591][ T939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.817315][ T939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.837922][ T946] rust_binder: Error while translating object. [ 45.837969][ T946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.844324][ T946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 45.941108][ T463] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 46.081088][ T463] usb 1-1: device descriptor read/64, error -71 [ 46.204264][ T36] audit: type=1400 audit(1758123168.400:288): avc: denied { mount } for pid=948 comm="syz.2.186" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.206007][ T949] input: syz1 as /devices/virtual/input/input7 [ 46.314565][ T949] kvm: kvm [948]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff [ 46.323221][ T463] usb 1-1: device descriptor read/64, error -71 [ 46.329548][ T949] kvm: kvm [948]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0xffff [ 46.432225][ T463] usb usb1-port1: attempt power cycle [ 46.433631][ T45] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 46.448868][ T45] usb 4-1: USB disconnect, device number 7 [ 46.512665][ T954] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 46.512689][ T954] rust_binder: Error while translating object. [ 46.523368][ T954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.529567][ T954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 46.771104][ T463] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 46.802083][ T463] usb 1-1: device descriptor read/8, error -71 [ 46.921082][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.942054][ T463] usb 1-1: device descriptor read/8, error -71 [ 46.967973][ T36] audit: type=1400 audit(1758123169.160:289): avc: denied { bind } for pid=963 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.987239][ T36] audit: type=1400 audit(1758123169.160:290): avc: denied { name_bind } for pid=963 comm="syz.3.191" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.001506][ T964] __vm_enough_memory: pid: 964, comm: syz.3.191, bytes: 18014402804453376 not enough memory for the allocation [ 47.008235][ T36] audit: type=1400 audit(1758123169.160:291): avc: denied { node_bind } for pid=963 comm="syz.3.191" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 47.041892][ T36] audit: type=1400 audit(1758123169.180:292): avc: denied { write } for pid=963 comm="syz.3.191" name="udplite6" dev="proc" ino=4026532538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.071080][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.191111][ T463] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 47.212140][ T463] usb 1-1: device descriptor read/8, error -71 [ 47.321094][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.331177][ T837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.342526][ T463] usb 1-1: device descriptor read/8, error -71 [ 47.451172][ T463] usb usb1-port1: unable to enumerate USB device [ 47.471074][ T837] usb 4-1: device descriptor read/64, error -71 [ 47.561130][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.691110][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.711111][ T837] usb 4-1: device descriptor read/64, error -71 [ 47.931118][ T45] usb 3-1: device descriptor read/64, error -71 [ 47.951091][ T837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.041164][ T45] usb usb3-port1: attempt power cycle [ 48.081098][ T837] usb 4-1: device descriptor read/64, error -71 [ 48.086472][ T971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=971 comm=syz.0.193 [ 48.108237][ T9] usb 2-1: USB disconnect, device number 6 [ 48.122190][ T971] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 48.321089][ T837] usb 4-1: device descriptor read/64, error -71 [ 48.401096][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.422139][ T45] usb 3-1: device descriptor read/8, error -71 [ 48.441166][ T837] usb usb4-port1: attempt power cycle [ 48.531094][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.552111][ T45] usb 3-1: device descriptor read/8, error -71 [ 48.682120][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.693097][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.702867][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 48.711948][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.720497][ T9] usb 2-1: config 0 descriptor?? [ 48.781087][ T837] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.791108][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.802077][ T837] usb 4-1: device descriptor read/8, error -71 [ 48.812119][ T45] usb 3-1: device descriptor read/8, error -71 [ 48.927257][ T983] netlink: 80 bytes leftover after parsing attributes in process `syz.0.198'. [ 48.937250][ T837] usb 4-1: device descriptor read/8, error -71 [ 48.952411][ T45] usb 3-1: device descriptor read/8, error -71 [ 49.027067][ T36] audit: type=1400 audit(1758123171.220:293): avc: denied { connect } for pid=985 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.061792][ T45] usb usb3-port1: unable to enumerate USB device [ 49.191080][ T837] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.212089][ T837] usb 4-1: device descriptor read/8, error -71 [ 49.342083][ T837] usb 4-1: device descriptor read/8, error -71 [ 49.461182][ T837] usb usb4-port1: unable to enumerate USB device [ 49.542594][ T9] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 49.565173][ T9] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 49.752565][ T9] usb 2-1: USB disconnect, device number 7 [ 49.758667][ T36] audit: type=1400 audit(1758123171.950:294): avc: denied { name_bind } for pid=996 comm="syz.2.203" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.144212][ T1004] fuse: Unknown parameter 'fd01777777777777777777777' [ 50.197212][ T1010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.216066][ T1010] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 50.225536][ T1010] rust_binder: 154: no such ref 0 [ 50.230703][ T1010] rust_binder: 154: no such ref 0 [ 50.237630][ T1010] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 50.244741][ T1010] rust_binder: 154: no such ref 64 [ 50.250828][ T1010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 50.252272][ T1018] rust_binder: 1018 RLIMIT_NICE not set [ 50.273324][ T1020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 50.274024][ T36] audit: type=1400 audit(1758123172.470:295): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.279956][ T837] rust_binder: 1017: removing orphan mapping 0:1024 [ 50.339871][ T1024] syz.2.208 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.354719][ T1030] rust_binder: Error while translating object. [ 50.354756][ T1030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.361011][ T1030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 50.384925][ T1033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165 [ 50.477027][ T36] audit: type=1400 audit(1758123172.670:296): avc: denied { append } for pid=1041 comm="syz.0.217" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.545349][ T36] audit: type=1400 audit(1758123172.740:297): avc: denied { create } for pid=1051 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 50.593876][ T1059] rust_binder: Write failure EINVAL in pid:162 [ 50.607621][ T36] audit: type=1400 audit(1758123172.800:298): avc: denied { bind } for pid=1062 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.632971][ T36] audit: type=1400 audit(1758123172.820:299): avc: denied { read } for pid=1062 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.655200][ T1070] rust_binder: 172: no such ref 3 [ 50.733554][ T1072] netlink: 'syz.0.225': attribute type 27 has an invalid length. [ 50.750841][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.758119][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.821072][ T837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.971153][ T837] usb 4-1: Using ep0 maxpacket: 8 [ 50.977517][ T837] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.986005][ T837] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.994563][ T837] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 51.003622][ T837] usb 4-1: config 250 has no interface number 0 [ 51.009897][ T837] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 51.021497][ T837] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 51.032008][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 51.039419][ T837] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 51.049715][ T837] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 51.060189][ T837] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 51.073741][ T837] usb 4-1: config 250 interface 228 has no altsetting 0 [ 51.088483][ T837] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 51.097565][ T837] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 51.106441][ T837] usb 4-1: Product: syz [ 51.110668][ T837] usb 4-1: SerialNumber: syz [ 51.117229][ T837] hub 4-1:250.228: bad descriptor, ignoring hub [ 51.123722][ T837] hub 4-1:250.228: probe with driver hub failed with error -5 [ 51.146801][ T36] audit: type=1400 audit(1758123173.340:300): avc: denied { read } for pid=1073 comm="syz.2.226" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.147835][ T1074] binder: Unknown parameter 'dePcontext' [ 51.170363][ T36] audit: type=1400 audit(1758123173.340:301): avc: denied { open } for pid=1073 comm="syz.2.226" path="/41/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.200285][ T36] audit: type=1400 audit(1758123173.340:302): avc: denied { ioctl } for pid=1073 comm="syz.2.226" path="/41/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.218954][ T1077] overlayfs: failed to resolve './file0': -2 [ 51.226215][ T36] audit: type=1400 audit(1758123173.380:303): avc: denied { unmount } for pid=552 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.254251][ T1072] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.225'. [ 51.276502][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.290449][ T9] usb 1-1: too many configurations: 67, using maximum allowed: 8 [ 51.301887][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 51.311867][ T9] usb 1-1: can't read configurations, error -71 [ 51.320876][ T837] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 51.347511][ T1089] rust_binder: 135: no such ref 3 [ 51.353343][ T1089] rust_binder: Write failure EINVAL in pid:135 [ 51.354517][ T1089] rust_binder: Read failure Err(EAGAIN) in pid:135 [ 51.363705][ T1089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 51.381489][ T1089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.382095][ T1091] rust_binder: Read failure Err(EAGAIN) in pid:135 [ 51.383271][ T1092] rust_binder: 135: no such ref 3 [ 51.402615][ T1092] rust_binder: Write failure EINVAL in pid:135 [ 51.517046][ T1099] can0: slcan on ttyS3. [ 51.530234][ T36] audit: type=1400 audit(1758123173.720:304): avc: denied { read write } for pid=1055 comm="syz.3.221" name="lp0" dev="devtmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 51.681098][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.761076][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.831079][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 51.837256][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.847181][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 51.856252][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.864887][ T45] usb 3-1: config 0 descriptor?? [ 51.891162][ T10] usb 2-1: device descriptor read/64, error -71 [ 51.925675][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.131833][ T10] usb 2-1: device descriptor read/64, error -71 [ 52.272162][ T45] kye 0003:0458:5011.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 52.282814][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.289502][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.296227][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.302978][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.309677][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.316407][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.323122][ T45] kye 0003:0458:5011.0003: unknown main item tag 0x0 [ 52.331494][ T45] kye 0003:0458:5011.0003: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 52.342449][ T45] kye 0003:0458:5011.0003: tablet-enabling feature report not found [ 52.350510][ T45] kye 0003:0458:5011.0003: tablet enabling failed [ 52.371082][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.501076][ T10] usb 2-1: device descriptor read/64, error -71 [ 52.591759][ T9] usb 3-1: USB disconnect, device number 8 [ 52.607457][ T1125] rust_binder: Error while translating object. [ 52.607493][ T1125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.614171][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 52.649848][ T1130] overlay: Unknown parameter '/' [ 52.751077][ T10] usb 2-1: device descriptor read/64, error -71 [ 52.813931][ T1132] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false [ 52.813953][ T1132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.823521][ T1132] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 52.833070][ T1132] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:152 [ 52.852008][ T463] rust_binder: 1131: removing orphan mapping 0:24 [ 52.867009][ T10] usb usb2-port1: attempt power cycle [ 52.890404][ T1137] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 52.903360][ T1137] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 53.211069][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.262190][ T10] usb 2-1: device descriptor read/8, error -71 [ 53.392200][ T10] usb 2-1: device descriptor read/8, error -71 [ 53.494785][ T1144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.494785][ T1143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.494811][ T1144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 53.504855][ T1143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 53.550090][ T1148] tipc: Enabling of bearer rejected, failed to enable media [ 53.651123][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 53.672039][ T10] usb 2-1: device descriptor read/8, error -71 [ 53.701193][ T45] usb 4-1: USB disconnect, device number 12 [ 53.708380][ T45] usblp0: removed [ 53.798863][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.807500][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.816447][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.817064][ T10] usb 2-1: device descriptor read/8, error -71 [ 53.825042][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.852358][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 53.941201][ T10] usb usb2-port1: unable to enumerate USB device [ 53.971087][ T1118] Bluetooth: hci0: command 0x1003 tx timeout [ 53.971106][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.455003][ T1179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 54.495112][ T1185] binder: Unknown parameter '0x0000000000000004' [ 54.552582][ T1187] can0 (unregistered): slcan off ttyS3. [ 54.595040][ T1202] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 54.635768][ T1210] netlink: 'syz.0.257': attribute type 64 has an invalid length. [ 54.651529][ T1210] netlink: 5 bytes leftover after parsing attributes in process `syz.0.257'. [ 54.714023][ T1207] __vm_enough_memory: pid: 1207, comm: syz.1.256, bytes: 18014402804453376 not enough memory for the allocation [ 55.131479][ T1255] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 55.139711][ T1255] rust_binder: Write failure EINVAL in pid:190 [ 55.229359][ T31] rust_binder: 1252: removing orphan mapping 0:24 [ 55.257506][ T1286] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 55.665974][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 55.665990][ T36] audit: type=1400 audit(1758123177.860:320): avc: denied { read } for pid=1289 comm="syz.2.266" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.666362][ T1290] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 55.705947][ T1290] rust_binder: Error in use_page_slow: EFAULT [ 55.716573][ T1290] rust_binder: use_range failure EFAULT [ 55.722783][ T1290] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 55.728369][ T1290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.736720][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:193 [ 55.763839][ T1292] netlink: 'syz.2.267': attribute type 13 has an invalid length. [ 55.781401][ T1292] erspan0: refused to change device tx_queue_len [ 55.843332][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 55.891093][ T1119] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 55.891121][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 55.907826][ T1309] fuse: Unknown parameter 'c07\ܑC6A' [ 55.956881][ T36] audit: type=1400 audit(1758123178.150:321): avc: denied { bind } for pid=1316 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.219385][ T1325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.221082][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 56.241071][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 56.401077][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 56.407239][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.417387][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 56.421845][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.427897][ T10] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 56.434499][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 56.443259][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.451698][ T31] usb 4-1: config 9 has an invalid interface number: 49 but max is 0 [ 56.458799][ T10] usb 3-1: Product: syz [ 56.471080][ T10] usb 3-1: Manufacturer: syz [ 56.471096][ T31] usb 4-1: config 9 has no interface number 0 [ 56.475692][ T10] usb 3-1: SerialNumber: syz [ 56.482102][ T31] usb 4-1: config 9 interface 49 has no altsetting 0 [ 56.487263][ T10] usb 3-1: config 0 descriptor?? [ 56.499616][ T31] usb 4-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 56.501096][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 56.508984][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.525742][ T31] usb 4-1: Product: syz [ 56.529922][ T31] usb 4-1: Manufacturer: syz [ 56.534570][ T31] usb 4-1: SerialNumber: syz [ 56.662115][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.673113][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.682918][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 56.692014][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.702545][ T9] usb 2-1: config 0 descriptor?? [ 57.151073][ T463] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.263678][ T1333] rust_binder: 1321 RLIMIT_NICE not set [ 57.322941][ T463] usb 1-1: config 192 has an invalid interface number: 162 but max is 0 [ 57.337019][ T463] usb 1-1: config 192 has no interface number 0 [ 57.343620][ T463] usb 1-1: config 192 interface 162 has no altsetting 0 [ 57.352266][ T463] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 57.361451][ T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.369499][ T463] usb 1-1: Product: syz [ 57.374000][ T463] usb 1-1: Manufacturer: syz [ 57.378681][ T463] usb 1-1: SerialNumber: syz [ 57.511372][ T9] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 57.537785][ T9] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 57.587751][ T36] audit: type=1400 audit(1758123179.780:322): avc: denied { map } for pid=1331 comm="syz.0.279" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 57.612432][ T36] audit: type=1400 audit(1758123179.780:323): avc: denied { execute } for pid=1331 comm="syz.0.279" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 57.614839][ T463] usb-storage 1-1:192.162: USB Mass Storage device detected [ 57.681574][ T463] usb-storage 1-1:192.162: device ignored [ 57.726664][ T45] usb 2-1: USB disconnect, device number 12 [ 57.767402][ T463] usb 1-1: USB disconnect, device number 10 [ 58.139534][ T36] audit: type=1400 audit(1758123180.330:324): avc: denied { bind } for pid=1337 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.221367][ T36] audit: type=1400 audit(1758123180.420:325): avc: denied { remount } for pid=1344 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.305135][ T1352] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 58.367671][ T1357] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 58.371539][ T1358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.393583][ T36] audit: type=1400 audit(1758123180.590:326): avc: denied { create } for pid=1356 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.428902][ T36] audit: type=1400 audit(1758123180.620:327): avc: denied { ioctl } for pid=1356 comm="syz.1.285" path="socket:[12747]" dev="sockfs" ino=12747 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.457594][ T1360] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 58.464944][ T36] audit: type=1400 audit(1758123180.660:328): avc: denied { shutdown } for pid=1359 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.955121][ T31] usb-storage 4-1:9.49: USB Mass Storage device detected [ 58.978311][ T36] audit: type=1400 audit(1758123181.170:329): avc: denied { relabelfrom } for pid=1372 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.978634][ T31] usb-storage 4-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 59.063862][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 59.087818][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 59.104695][ T10] usb 3-1: USB disconnect, device number 9 [ 59.117526][ T31] usb 4-1: USB disconnect, device number 13 [ 59.132508][ T1396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.132543][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 59.428253][ T1409] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 59.457055][ T1409] rust_binder: Write failure EINVAL in pid:221 [ 59.490029][ T1411] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.504726][ T1411] rust_binder: Read failure Err(EFAULT) in pid:223 [ 59.556273][ T1407] /dev/rnullb0: Can't open blockdev [ 59.716567][ T1420] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 59.716585][ T1420] rust_binder: Error while translating object. [ 59.728783][ T1420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.735002][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 59.781085][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 59.951119][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 59.959782][ T10] usb 2-1: config 3 has an invalid interface number: 195 but max is 2 [ 59.968093][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 59.976974][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 59.985757][ T10] usb 2-1: config 3 has an invalid interface number: 119 but max is 2 [ 59.993952][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 60.009332][ T10] usb 2-1: config 3 has an invalid interface number: 52 but max is 2 [ 60.009445][ T1438] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 60.023113][ T10] usb 2-1: config 3 has no interface number 0 [ 60.037409][ T10] usb 2-1: config 3 has no interface number 1 [ 60.043572][ T10] usb 2-1: config 3 has no interface number 2 [ 60.049709][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 60.051160][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 60.060776][ T10] usb 2-1: config 3 interface 195 altsetting 35 has a duplicate endpoint with address 0x1, skipping [ 60.081522][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 60.103607][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 60.119486][ T10] usb 2-1: config 3 interface 195 altsetting 35 has a duplicate endpoint with address 0x3, skipping [ 60.130591][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 60.142400][ T10] usb 2-1: config 3 interface 195 altsetting 35 has an invalid descriptor for endpoint zero, skipping [ 60.153421][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 60.164598][ T10] usb 2-1: config 3 interface 195 altsetting 35 has a duplicate endpoint with address 0x3, skipping [ 60.175413][ T10] usb 2-1: config 3 interface 195 altsetting 35 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 60.186481][ T10] usb 2-1: config 3 interface 119 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 60.197192][ T10] usb 2-1: config 3 interface 119 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 60.208193][ T10] usb 2-1: config 3 interface 119 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 60.219945][ T10] usb 2-1: config 3 interface 119 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 60.230697][ T10] usb 2-1: config 3 interface 119 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 60.241661][ T10] usb 2-1: config 3 interface 119 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 60.252323][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.252652][ T10] usb 2-1: config 3 interface 52 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 60.263912][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.274114][ T10] usb 2-1: config 3 interface 52 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 60.284281][ T31] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 60.295474][ T10] usb 2-1: config 3 interface 195 has no altsetting 0 [ 60.303966][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.310350][ T10] usb 2-1: config 3 interface 52 has no altsetting 0 [ 60.312082][ T10] usb 2-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= f.a1 [ 60.334403][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.334530][ T31] usb 4-1: config 0 descriptor?? [ 60.342703][ T10] usb 2-1: Product: syz [ 60.351801][ T10] usb 2-1: Manufacturer: 㚥歲ݮ姮难䲋貺퀃鎅衞傠ﭨᡷ쭜괏ৃࣄ粉狜秜厕ꓽ汆⠓쒠難偶虰랹뒭ゎ◕߻堳ῃἨἲ [ 60.366703][ T10] usb 2-1: SerialNumber: syz [ 60.371408][ T837] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 60.521065][ T837] usb 1-1: Using ep0 maxpacket: 8 [ 60.527499][ T837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.536109][ T837] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 60.546209][ T837] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 60.556273][ T837] usb 1-1: config 1 interface 0 has no altsetting 0 [ 60.564253][ T837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.573347][ T837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.581404][ T837] usb 1-1: Product: syz [ 60.585642][ T837] usb 1-1: Manufacturer: syz [ 60.590535][ T837] usb 1-1: SerialNumber: syz [ 60.595644][ T10] usb-storage 2-1:3.195: USB Mass Storage device detected [ 60.603891][ T1446] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.611566][ T10] usb-storage 2-1:3.195: Quirks match for vid 04cb pid 0100: 9 [ 60.619413][ T1446] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.656639][ T10] usb-storage 2-1:3.119: USB Mass Storage device detected [ 60.664596][ T10] usb-storage 2-1:3.119: Quirks match for vid 04cb pid 0100: 9 [ 60.734839][ T10] usb-storage 2-1:3.52: USB Mass Storage device detected [ 60.742796][ T10] usb-storage 2-1:3.52: Quirks match for vid 04cb pid 0100: 9 [ 60.784352][ T10] usb 2-1: USB disconnect, device number 13 [ 61.120575][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 61.120595][ T36] audit: type=1400 audit(1758123183.310:334): avc: denied { bind } for pid=1460 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.170922][ T31] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 61.183705][ T36] audit: type=1400 audit(1758123183.330:335): avc: denied { connect } for pid=1460 comm="syz.1.316" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.216616][ T31] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 61.369741][ T463] usb 4-1: USB disconnect, device number 14 [ 61.376196][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 61.528238][ T1464] kernel read not supported for file /policy (pid: 1464 comm: syz.2.317) [ 61.528649][ T36] audit: type=1400 audit(1758123183.720:336): avc: denied { module_load } for pid=1463 comm="syz.2.317" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 61.541181][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 61.587424][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.599546][ T10] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 61.607942][ T10] usb 2-1: config 6 has no interface number 0 [ 61.621068][ T10] usb 2-1: config 6 interface 248 has no altsetting 0 [ 61.629326][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 61.640859][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.658835][ T10] usb 2-1: Product: syz [ 61.663120][ T10] usb 2-1: Manufacturer: 볦翉䟜弪쇢ャ轉◈峍麫歚霋뽍㭾ง蜡촭ᄓ⁰꺯灌执缕⓬≅뾡茺ጃ챡ꃙ盬⭢瞚⑧㒔䊛斑⒣ᄵ懀᾵姴똛粟傦볊鍺鷳詧⁚ᯀؐ슲缯 [ 61.693337][ T10] usb 2-1: SerialNumber: syz [ 61.732721][ T36] audit: type=1400 audit(1758123183.930:337): avc: denied { read } for pid=1477 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.837229][ T1483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.837309][ T1482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 61.851071][ T1482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:245 [ 61.871343][ T36] audit: type=1400 audit(1758123184.060:338): avc: denied { read } for pid=1481 comm="syz.2.321" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.924643][ T10] ums-karma 2-1:6.248: USB Mass Storage device detected [ 61.940148][ T36] audit: type=1400 audit(1758123184.070:339): avc: denied { open } for pid=1481 comm="syz.2.321" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.945194][ T1489] overlayfs: failed to resolve './file1': -2 [ 62.011598][ T1493] can: request_module (can-proto-5) failed. [ 62.019467][ T10] usb 2-1: USB disconnect, device number 14 [ 62.025451][ T36] audit: type=1400 audit(1758123184.210:340): avc: denied { mounton } for pid=1492 comm="syz.2.324" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.242733][ T36] audit: type=1326 audit(1758123184.440:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.3.328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d55b8eba9 code=0x0 [ 63.042443][ T1518] input: syz0 as /devices/virtual/input/input10 [ 63.068674][ T1518] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 63.068702][ T1518] rust_binder: Error while translating object. [ 63.122221][ T1518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.128465][ T1518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 63.179811][ T36] audit: type=1400 audit(1758123185.370:342): avc: denied { write } for pid=1523 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.226825][ T36] audit: type=1400 audit(1758123185.410:343): avc: denied { create } for pid=1523 comm="syz.2.335" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.248691][ T837] usb 1-1: bad CDC descriptors [ 63.258394][ T837] usb 1-1: USB disconnect, device number 11 [ 63.268217][ T1527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 63.401084][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 63.582092][ T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 63.590226][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.600354][ T10] usb 4-1: config 0 has no interface number 0 [ 63.607846][ T10] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 63.616928][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.625120][ T10] usb 4-1: Product: syz [ 63.629331][ T10] usb 4-1: Manufacturer: syz [ 63.634000][ T10] usb 4-1: SerialNumber: syz [ 63.639580][ T10] usb 4-1: config 0 descriptor?? [ 63.751097][ T837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 63.846203][ T1522] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 63.854531][ T1522] rust_binder: Write failure EINVAL in pid:236 [ 63.902047][ T837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.919227][ T837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.929023][ T837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.941947][ T837] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.951002][ T837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.960124][ T837] usb 2-1: config 0 descriptor?? [ 64.122974][ T1554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 64.370293][ T837] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 64.387542][ T837] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 64.405631][ T837] plantronics 0003:047F:FFFF.0006: report_id 0 is invalid [ 64.413280][ T837] plantronics 0003:047F:FFFF.0006: item 0 0 1 8 parsing failed [ 64.421364][ T837] plantronics 0003:047F:FFFF.0006: parse failed [ 64.428686][ T837] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 64.572997][ T339] usb 2-1: USB disconnect, device number 15 [ 65.483271][ T1598] rust_binder: Read failure Err(EAGAIN) in pid:299 [ 65.486648][ T1600] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.496900][ T1600] rust_binder: Read failure Err(EFAULT) in pid:282 [ 65.503496][ T1603] overlay: ./file0 is not a directory [ 65.540334][ T1605] rust_binder: Write failure EINVAL in pid:285 [ 65.674973][ T1609] rust_binder: 1608 RLIMIT_NICE not set [ 65.682223][ T1608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 65.914745][ T1619] veth0_virt_wifi: entered allmulticast mode [ 65.956327][ T1619] veth0_virt_wifi: left allmulticast mode [ 66.162290][ T10] usb 4-1: Found UVC 0.00 device syz (056d:0000) [ 66.173176][ T10] usb 4-1: No valid video chain found. [ 66.191144][ T10] usb 4-1: USB disconnect, device number 15 [ 66.242624][ T339] rust_binder: 1626: removing orphan mapping 0:4208 [ 66.385214][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 66.385231][ T36] audit: type=1326 audit(1758123188.580:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.2.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564478eba9 code=0x0 [ 66.515311][ T1645] KVM: debugfs: duplicate directory 1645-6 [ 66.544898][ T1651] /dev/sg0: Can't lookup blockdev [ 66.560820][ T1654] binder: Bad value for 'stats' [ 66.577621][ T36] audit: type=1400 audit(1758123188.770:358): avc: denied { write } for pid=1655 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.597434][ T36] audit: type=1400 audit(1758123188.770:359): avc: denied { accept } for pid=1655 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.697309][ T837] rust_binder: get_current_thread was called from the wrong process. [ 66.697625][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.773905][ T1669] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false [ 66.773928][ T1669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 66.783468][ T1669] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 66.793003][ T1669] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:268 [ 66.962569][ T835] rust_binder: 0: removing orphan mapping 0:24 [ 67.229913][ T1679] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 67.238606][ T1679] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 67.361069][ T339] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 67.454682][ T1685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.454922][ T1686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.483178][ T1691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.489629][ T1691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 67.499158][ T339] usb 2-1: device descriptor read/64, error -71 [ 67.516550][ T1693] rust_binder: Write failure EINVAL in pid:273 [ 67.751111][ T339] usb 2-1: device descriptor read/64, error -71 [ 67.779039][ T36] audit: type=1400 audit(1758123189.970:360): avc: denied { create } for pid=1700 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.813538][ T36] audit: type=1326 audit(1758123190.010:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.2.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564478eba9 code=0x0 [ 67.864560][ T1704] fuse: Unknown parameter '' [ 67.871760][ T1704] fuse: Invalid rootmode [ 68.001113][ T339] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 68.131433][ T339] usb 2-1: device descriptor read/64, error -71 [ 68.371119][ T339] usb 2-1: device descriptor read/64, error -71 [ 68.376105][ T1707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.377483][ T36] audit: type=1400 audit(1758123190.570:362): avc: denied { map } for pid=1706 comm="syz.3.399" path="socket:[13968]" dev="sockfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.406900][ T36] audit: type=1400 audit(1758123190.570:363): avc: denied { read } for pid=1706 comm="syz.3.399" path="socket:[13968]" dev="sockfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.429961][ T36] audit: type=1400 audit(1758123190.570:364): avc: denied { create } for pid=1706 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 68.484586][ T1709] rust_binder: 281: no such ref 5 [ 68.489663][ T1709] rust_binder: Write failure EINVAL in pid:281 [ 68.511185][ T339] usb usb2-port1: attempt power cycle [ 68.771100][ T1119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.772059][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 68.796666][ T1726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 68.861146][ T339] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 68.892174][ T339] usb 2-1: device descriptor read/8, error -71 [ 68.931115][ T10] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 68.981090][ T835] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 69.022091][ T339] usb 2-1: device descriptor read/8, error -71 [ 69.041075][ T837] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 69.061067][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.132223][ T835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.143162][ T835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.152931][ T835] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 69.162034][ T835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.170679][ T835] usb 4-1: config 0 descriptor?? [ 69.191044][ T837] usb 1-1: Using ep0 maxpacket: 8 [ 69.197157][ T837] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 69.206167][ T837] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 69.216069][ T837] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 69.225144][ T837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.261112][ T339] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 69.282099][ T339] usb 2-1: device descriptor read/8, error -71 [ 69.301057][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.412161][ T339] usb 2-1: device descriptor read/8, error -71 [ 69.521257][ T339] usb usb2-port1: unable to enumerate USB device [ 69.541094][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 69.548992][ T837] usb 1-1: string descriptor 0 read error: -71 [ 69.559239][ T837] usb 1-1: USB disconnect, device number 12 [ 69.681098][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.859264][ T1732] rust_binder: Write failure EINVAL in pid:278 [ 69.921118][ T10] usb 3-1: device descriptor read/64, error -71 [ 69.981221][ T835] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 70.012396][ T835] hid-led 0003:27B8:01ED.0007: ThingM blink(1) initialized [ 70.041662][ T10] usb usb3-port1: attempt power cycle [ 70.122831][ T1739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 70.180534][ T835] usb 4-1: USB disconnect, device number 16 [ 70.319032][ T1749] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 70.328010][ T36] audit: type=1400 audit(1758123192.510:365): avc: denied { load_policy } for pid=1745 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.348202][ T1749] SELinux: failed to load policy [ 70.391079][ T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 70.422067][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.552067][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.697773][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 70.801082][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 70.832173][ T10] usb 3-1: device descriptor read/8, error -71 [ 70.921110][ T1768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.921276][ T1768] rust_binder: Error while translating object. [ 70.927754][ T1768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 70.935490][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:293 [ 70.964097][ T10] usb 3-1: device descriptor read/8, error -71 [ 71.081147][ T10] usb usb3-port1: unable to enumerate USB device [ 71.363026][ T1782] netlink: 188 bytes leftover after parsing attributes in process `syz.0.424'. [ 71.389254][ T36] audit: type=1400 audit(1758123193.580:366): avc: denied { map } for pid=1783 comm="syz.0.425" path="socket:[16397]" dev="sockfs" ino=16397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 71.581548][ T1796] rust_binder: 302: no such ref 3 [ 71.588594][ T1796] rust_binder: Error while translating object. [ 71.588635][ T1796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.595091][ T1796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 71.649719][ T36] audit: type=1400 audit(1758123193.840:367): avc: denied { mounton } for pid=1801 comm="syz.1.432" path="/proc/304/task" dev="proc" ino=16433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 71.692768][ T1806] bridge0: port 3(syz_tun) entered blocking state [ 71.699240][ T1806] bridge0: port 3(syz_tun) entered disabled state [ 71.708625][ T1806] syz_tun: entered allmulticast mode [ 71.714498][ T1806] syz_tun: entered promiscuous mode [ 71.719833][ T1806] bridge0: port 3(syz_tun) entered blocking state [ 71.726306][ T1806] bridge0: port 3(syz_tun) entered forwarding state [ 71.734064][ T1806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.735254][ T1806] rust_binder: Error while translating object. [ 71.745045][ T1806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 71.752555][ T1806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304 [ 71.762979][ T1809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.773040][ T1806] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.779707][ T1809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 71.788033][ T1806] rust_binder: Read failure Err(EFAULT) in pid:304 [ 71.797640][ T1809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:308 [ 71.805994][ T1809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.815517][ T1812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 71.822247][ T1812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:308 [ 71.860600][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 71.868923][ T1818] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 71.870571][ T1816] rust_binder: Error while translating object. [ 71.891157][ T1818] rust_binder: Write failure EINVAL in pid:308 [ 71.891643][ T1816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.906882][ T1816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 71.948200][ T1821] ./cgroup: Can't lookup blockdev [ 72.016037][ T1826] random: crng reseeded on system resumption [ 72.021061][ T36] audit: type=1400 audit(1758123194.210:368): avc: denied { write } for pid=1825 comm="syz.1.439" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.061320][ T1828] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 72.082374][ T36] audit: type=1400 audit(1758123194.280:369): avc: denied { ioctl } for pid=1825 comm="syz.1.439" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.107843][ T1826] rust_binder: got new transaction with bad transaction stack [ 72.107868][ T1826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 72.209498][ T36] audit: type=1400 audit(1758123194.400:370): avc: denied { write } for pid=1835 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.238417][ T36] audit: type=1400 audit(1758123194.430:371): avc: denied { accept } for pid=1835 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.265825][ T1843] tmpfs: Bad value for 'size' [ 72.272003][ T1843] __vm_enough_memory: pid: 1843, comm: syz.2.444, bytes: 18014402804453376 not enough memory for the allocation [ 72.390110][ T1849] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 72.457218][ T1853] rust_binder: Error while translating object. [ 72.466339][ T1853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.472792][ T1853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 72.517994][ T835] hid-generic 000D:0008:0009.0008: unknown main item tag 0x0 [ 72.534960][ T835] hid-generic 000D:0008:0009.0008: unknown main item tag 0x1 [ 72.542472][ T835] hid-generic 000D:0008:0009.0008: unknown main item tag 0x5 [ 72.549922][ T835] hid-generic 000D:0008:0009.0008: item fetching failed at offset 18/21 [ 72.558511][ T835] hid-generic 000D:0008:0009.0008: probe with driver hid-generic failed with error -22 [ 72.694702][ T1871] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 72.768405][ T1875] usb usb9: usbfs: process 1875 (syz.3.454) did not claim interface 0 before use [ 72.785942][ T1876] binder: Unknown parameter 'fowner<00000000000000000000' [ 72.792070][ T36] audit: type=1400 audit(1758123194.990:372): avc: denied { remount } for pid=1872 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.808774][ T1880] binder: Unknown parameter '' [ 72.812785][ T1878] tmpfs: Unknown parameter 'n_inodm' [ 72.825260][ T1878] rust_binder: Error while translating object. [ 72.825304][ T1878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.831689][ T1878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 72.861184][ T1882] kvm: user requested TSC rate below hardware speed [ 72.877805][ T1882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 72.939233][ T357] bridge0: port 3(syz_tun) entered disabled state [ 72.946615][ T357] syz_tun (unregistering): left allmulticast mode [ 72.953111][ T357] syz_tun (unregistering): left promiscuous mode [ 72.959479][ T357] bridge0: port 3(syz_tun) entered disabled state [ 73.142347][ T1884] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.149456][ T1884] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.156898][ T1884] bridge_slave_0: entered allmulticast mode [ 73.163335][ T1884] bridge_slave_0: entered promiscuous mode [ 73.169861][ T1884] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.177070][ T1884] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.184208][ T1884] bridge_slave_1: entered allmulticast mode [ 73.190527][ T1884] bridge_slave_1: entered promiscuous mode [ 73.200083][ T13] bridge_slave_1: left allmulticast mode [ 73.205832][ T13] bridge_slave_1: left promiscuous mode [ 73.211512][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.219094][ T13] bridge_slave_0: left allmulticast mode [ 73.224922][ T13] bridge_slave_0: left promiscuous mode [ 73.230538][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.332871][ T13] tipc: Left network mode [ 73.338904][ T13] veth1_macvtap: left promiscuous mode [ 73.344498][ T13] veth0_vlan: left promiscuous mode [ 73.393315][ T1884] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.400432][ T1884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.407779][ T1884] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.414842][ T1884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.438408][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.445828][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.458272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.465363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.482242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.489369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.509425][ T1895] can0: slcan on ttyS3. [ 73.555938][ T1884] veth0_vlan: entered promiscuous mode [ 73.573266][ T1884] veth1_macvtap: entered promiscuous mode [ 73.602473][ T1894] can0 (unregistered): slcan off ttyS3. [ 73.887313][ T1940] rust_binder: Error while translating object. [ 73.887369][ T1940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.893813][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.907768][ T1940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 73.942534][ T36] audit: type=1400 audit(1758123196.140:373): avc: denied { connect } for pid=1944 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.970052][ T1947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385 [ 74.091083][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 74.106612][ T45] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 74.114838][ T45] usb 5-1: config 0 has no interface number 0 [ 74.121501][ T45] usb 5-1: config 0 interface 184 has no altsetting 0 [ 74.125652][ T1949] binder: Unknown parameter 'defcontext01777777777777777777777' [ 74.129757][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.145064][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.153173][ T45] usb 5-1: Product: syz [ 74.157356][ T45] usb 5-1: Manufacturer: syz [ 74.162141][ T45] usb 5-1: SerialNumber: syz [ 74.167429][ T45] usb 5-1: config 0 descriptor?? [ 74.173243][ T45] smsc75xx v1.0.0 [ 74.221111][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.372315][ T31] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 74.381075][ T31] usb 1-1: config 0 has no interface number 0 [ 74.387188][ T31] usb 1-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.398516][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 74.407629][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.415671][ T31] usb 1-1: Product: syz [ 74.419863][ T31] usb 1-1: Manufacturer: syz [ 74.424496][ T31] usb 1-1: SerialNumber: syz [ 74.429863][ T31] usb 1-1: config 0 descriptor?? [ 74.435881][ T31] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 74.442290][ T31] usb 1-1: No valid video chain found. [ 74.642157][ T383] usb 1-1: USB disconnect, device number 13 [ 74.781279][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 74.792200][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 75.002164][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 75.002918][ T36] audit: type=1400 audit(1758123197.200:374): avc: denied { append } for pid=1909 comm="syz.4.460" name="binder0" dev="binder" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.013161][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 75.036860][ T1910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 75.045722][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 75.065209][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 75.074679][ T45] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 75.085203][ T45] usb 5-1: USB disconnect, device number 2 [ 75.177872][ T1957] rust_binder: got new transaction with bad transaction stack [ 75.177891][ T1957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 75.242040][ T1968] rust_binder: inc_ref_done called when no active inc_refs [ 75.281956][ T36] audit: type=1400 audit(1758123197.480:375): avc: denied { audit_read } for pid=1969 comm="syz.0.477" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.498895][ T1980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.499232][ T1980] rust_binder: Write failure EINVAL in pid:414 [ 75.621057][ T36] audit: type=1400 audit(1758123197.800:376): avc: denied { shutdown } for pid=1979 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.700422][ T1991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.483'. [ 75.885965][ T2005] netlink: 'syz.4.487': attribute type 4 has an invalid length. [ 75.976440][ T2007] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 75.984284][ T2007] netlink: 17 bytes leftover after parsing attributes in process `syz.4.488'. [ 76.414407][ T2019] EXT4-fs: dax option not supported [ 76.458014][ T2024] rust_binder: 425: no such ref 3 [ 76.463149][ T2024] rust_binder: 425: no such ref 2 [ 76.468199][ T2024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 76.630957][ T2033] rust_binder: Error while translating object. [ 76.640291][ T2033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.646709][ T2033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 77.134680][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.134709][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.141292][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.147737][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.158946][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.165609][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.173315][ T2058] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 77.187021][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.221731][ T2071] rust_binder: Write failure EFAULT in pid:458 [ 77.346205][ T2078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 77.378229][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 77.378251][ T36] audit: type=1400 audit(1758123199.570:378): avc: denied { create } for pid=2080 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.476970][ T2087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 77.738861][ T36] audit: type=1400 audit(1758123199.930:379): avc: denied { setopt } for pid=2109 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.866309][ T36] audit: type=1400 audit(1758123200.060:380): avc: denied { ioctl } for pid=2113 comm="syz.4.522" path="socket:[18582]" dev="sockfs" ino=18582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.901326][ T2114] rust_binder: Read failure Err(EAGAIN) in pid:45 [ 78.267433][ T2133] rust_binder: Error while translating object. [ 78.274091][ T2133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 78.280436][ T2133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:55 [ 78.369279][ T36] audit: type=1400 audit(1758123200.560:381): avc: denied { lock } for pid=2136 comm="syz.4.531" path="/dev/binderfs/binder1" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.404688][ T2139] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 78.413366][ T2139] rust_binder: Write failure EINVAL in pid:473 [ 78.471100][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 78.642114][ T45] usb 3-1: config 13 has an invalid interface number: 172 but max is 1 [ 78.650437][ T45] usb 3-1: config 13 has an invalid interface number: 77 but max is 1 [ 78.670492][ T45] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 78.691176][ T45] usb 3-1: config 13 has no interface number 0 [ 78.701061][ T45] usb 3-1: config 13 has no interface number 1 [ 78.707365][ T45] usb 3-1: config 13 interface 172 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 78.731167][ T45] usb 3-1: config 13 interface 172 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 78.742571][ T45] usb 3-1: config 13 interface 172 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 78.753522][ T45] usb 3-1: config 13 interface 172 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 78.764644][ T45] usb 3-1: config 13 interface 172 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 78.777342][ T45] usb 3-1: config 13 interface 172 altsetting 4 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 78.797763][ T45] usb 3-1: config 13 interface 172 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 78.808890][ T45] usb 3-1: config 13 interface 172 altsetting 4 has an endpoint descriptor with address 0x55, changing to 0x5 [ 78.824223][ T45] usb 3-1: config 13 interface 172 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 78.835168][ T45] usb 3-1: config 13 interface 172 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 78.849650][ T45] usb 3-1: config 13 interface 172 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 78.859844][ T45] usb 3-1: config 13 interface 172 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 78.875948][ T45] usb 3-1: config 13 interface 172 altsetting 4 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 78.891154][ T45] usb 3-1: config 13 interface 77 altsetting 207 has a duplicate endpoint with address 0x2, skipping [ 78.902347][ T45] usb 3-1: config 13 interface 77 altsetting 207 has a duplicate endpoint with address 0xF, skipping [ 78.913423][ T45] usb 3-1: config 13 interface 77 altsetting 207 has a duplicate endpoint with address 0xC, skipping [ 78.924525][ T45] usb 3-1: config 13 interface 77 altsetting 207 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 78.938186][ T45] usb 3-1: config 13 interface 172 has no altsetting 0 [ 78.945265][ T45] usb 3-1: config 13 interface 77 has no altsetting 0 [ 78.954769][ T45] usb 3-1: New USB device found, idVendor=07aa, idProduct=0004, bcdDevice=b3.c2 [ 78.964078][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.972351][ T45] usb 3-1: Product: Ч [ 78.976549][ T45] usb 3-1: Manufacturer: 벪䤧๠㹋㋄鞓瀐쮏런纊ᶅ獻朢㿮︙輡蟽चꕫ䔕쪵徲㧣ꕮ͋⎨ະ퀍䡫鍴㌴᱂錻슮ᠽᝠ᧼兘昝⮯릇ኧ昤梊棺ḳ⁌댋퓋ꂏᨕ㌰猌ါ蚦ṟ⃰٩륂넋距凞迪愳⭮儅㑃༽ [ 79.001973][ T45] usb 3-1: SerialNumber: щ [ 79.007395][ T45] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 79.019237][ T45] usb 3-1: no configuration chosen from 1 choice [ 79.251070][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 79.251143][ T1119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.321064][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 79.472599][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.485031][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.494316][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.502439][ T45] usb 1-1: Product: syz [ 79.506670][ T45] usb 1-1: Manufacturer: syz [ 79.511309][ T45] usb 1-1: SerialNumber: syz [ 79.516490][ T2155] /dev/rnullb0: Can't open blockdev [ 79.519958][ T45] usb 1-1: config 0 descriptor?? [ 79.575824][ T2164] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.575843][ T2164] rust_binder: Read failure Err(EFAULT) in pid:75 [ 79.730947][ T2153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.745972][ T2153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.765709][ T45] usb 1-1: USB disconnect, device number 14 [ 81.306271][ T10] usb 3-1: USB disconnect, device number 14 [ 87.508277][ T2195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.650257][ T36] audit: type=1400 audit(1758123209.840:382): avc: denied { nlmsg_write } for pid=2201 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 87.671065][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 87.701081][ T837] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 87.841060][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 87.847555][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 87.858031][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.869250][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.879159][ T10] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.892043][ T837] usb 1-1: Using ep0 maxpacket: 8 [ 87.897353][ T463] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 87.905087][ T10] usb 2-1: config 7 interface 0 has no altsetting 0 [ 87.912218][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 87.921545][ T837] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 87.930923][ T837] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 87.940973][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.949342][ T837] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 87.958778][ T837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.072544][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.083535][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.093318][ T463] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 88.102429][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.111123][ T463] usb 3-1: config 0 descriptor?? [ 88.182291][ T837] usb 1-1: string descriptor 0 read error: -71 [ 88.193747][ T837] usb 1-1: USB disconnect, device number 15 [ 88.230181][ T2209] __vm_enough_memory: pid: 2209, comm: syz.0.554, bytes: 18014402804453376 not enough memory for the allocation [ 88.255755][ T2211] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 88.255774][ T2211] rust_binder: Error while translating object. [ 88.267974][ T2211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.274252][ T2211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 88.379035][ T10] hid (null): invalid report_size 28531 [ 88.400825][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0009/input/input13 [ 88.417467][ T2221] rust_binder: 502: no such ref 0 [ 88.421490][ T10] kye 0003:0458:5010.0009: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 88.425167][ T2221] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 88.442702][ T2221] rust_binder: Write failure EINVAL in pid:502 [ 88.480036][ T2226] exFAT-fs (rnullb0): invalid boot record signature [ 88.492959][ T2226] exFAT-fs (rnullb0): failed to read boot sector [ 88.499313][ T2226] exFAT-fs (rnullb0): failed to recognize exfat type [ 88.522359][ T463] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 88.577314][ T2184] rust_binder: pid 2184 performed invalid decrement on ref [ 88.585346][ T837] usb 2-1: USB disconnect, device number 20 [ 88.591978][ T463] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 88.599921][ T463] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 88.616438][ T463] hid-steam 0003:28DE:1142.000B: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 88.723197][ T463] usb 3-1: USB disconnect, device number 15 [ 88.730773][ T463] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 89.228398][ T2244] 9pnet_fd: Insufficient options for proto=fd [ 89.269589][ T2249] cgroup: Unknown subsys name 'pcr' [ 89.275233][ T2249] exFAT-fs (rnullb0): invalid boot record signature [ 89.282595][ T2249] exFAT-fs (rnullb0): failed to read boot sector [ 89.288948][ T2249] exFAT-fs (rnullb0): failed to recognize exfat type [ 89.356282][ T2258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.356307][ T2258] rust_binder: Read failure Err(EFAULT) in pid:377 [ 89.378891][ T2256] rust_binder: Error while translating object. [ 89.387223][ T2256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 89.394115][ T2256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:375 [ 89.457646][ T2267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.574'. [ 89.457664][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.482749][ T2267] netlink: 43 bytes leftover after parsing attributes in process `syz.1.574'. [ 89.491828][ T2267] netlink: 'syz.1.574': attribute type 6 has an invalid length. [ 89.499568][ T2267] netlink: 'syz.1.574': attribute type 5 has an invalid length. [ 89.507461][ T2267] netlink: 43 bytes leftover after parsing attributes in process `syz.1.574'. [ 89.595711][ T2254] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 89.596070][ T2255] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 89.603517][ T2254] netlink: 'syz.0.570': attribute type 2 has an invalid length. [ 89.610845][ T2255] rust_binder: 509: no such ref 3 [ 89.623612][ T2255] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 89.630696][ T2255] rust_binder: 509: no such ref 3 [ 89.635871][ T2255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 89.817491][ T2279] netlink: 'syz.4.577': attribute type 16 has an invalid length. [ 89.834537][ T2279] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 89.842209][ T2279] netlink: 64086 bytes leftover after parsing attributes in process `syz.4.577'. [ 90.287018][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.287050][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.293739][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.306477][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.306547][ T2283] rust_binder: Error while translating object. [ 90.313157][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.321252][ T2283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.325604][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325624][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325639][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325655][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325670][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325685][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325701][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325716][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325732][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325747][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.325763][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.333445][ T2283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:513 [ 90.341801][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.421629][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.428082][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.434567][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.443067][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.449964][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.460107][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.466718][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.473311][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.479761][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.486290][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.492769][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.499221][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.505716][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.512193][ T2290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.521059][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.527526][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.541346][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.548005][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.554527][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.562573][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.570370][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.889768][ T2329] rust_binder: Write failure EFAULT in pid:397 [ 90.943211][ T2333] x_tables: duplicate entry at hook 2 [ 90.970022][ T2335] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.040684][ T36] audit: type=1400 audit(1758123214.228:383): avc: denied { create } for pid=2330 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 91.348546][ T2361] overlay: Unknown parameter 'subj_type' [ 91.394776][ T2365] batadv_slave_1: entered promiscuous mode [ 91.401931][ T2364] batadv_slave_1: left promiscuous mode [ 91.491086][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 91.497157][ T1119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.570064][ T36] audit: type=1400 audit(1758123214.758:384): avc: denied { setopt } for pid=2372 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.588787][ T2375] overlayfs: failed to clone upperpath [ 91.600325][ T2375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2375 comm=syz.4.609 [ 91.712661][ T2392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.715623][ T2392] rust_binder: Error while translating object. [ 91.739933][ T2392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 91.761683][ T2392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:537 [ 91.762095][ T2397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 91.857529][ T2399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=2399 comm=syz.0.618 [ 91.882264][ T2399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=2399 comm=syz.0.618 [ 91.894972][ T2399] netlink: 5200 bytes leftover after parsing attributes in process `syz.0.618'. [ 92.131922][ T36] audit: type=1400 audit(1758123215.328:385): avc: denied { write } for pid=2427 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 92.152856][ T36] audit: type=1400 audit(1758123215.358:386): avc: denied { ioctl } for pid=2427 comm="syz.2.625" path="socket:[20482]" dev="sockfs" ino=20482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 92.201901][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 92.212157][ T2436] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 92.216883][ T2435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.219882][ T2436] SELinux: failed to load policy [ 92.220250][ T2435] rust_binder: Error while translating object. [ 92.231452][ T2435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 92.238696][ T2435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:419 [ 92.352266][ T2441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 92.412688][ T330] bridge_slave_1: left allmulticast mode [ 92.418641][ T330] bridge_slave_1: left promiscuous mode [ 92.424604][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.432720][ T330] bridge_slave_0: left allmulticast mode [ 92.438394][ T330] bridge_slave_0: left promiscuous mode [ 92.444321][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.557591][ T330] veth1_macvtap: left promiscuous mode [ 92.563201][ T330] veth0_vlan: left promiscuous mode [ 92.650927][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.668031][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.677872][ T2445] bridge_slave_0: entered allmulticast mode [ 92.689958][ T2445] bridge_slave_0: entered promiscuous mode [ 92.698304][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.705561][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.713596][ T2445] bridge_slave_1: entered allmulticast mode [ 92.720014][ T2445] bridge_slave_1: entered promiscuous mode [ 92.767456][ T2474] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 92.767486][ T2474] rust_binder: Error while translating object. [ 92.784665][ T2474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.790908][ T2474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 92.872640][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.886537][ T2495] fuse: Unknown parameter 'AsHfٟ/wr c/N43?UGt#tr]oN>MOhgv&@˾7ʣDchb"@MWaafJ^hB8`q' [ 92.888856][ T2445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.888958][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.928547][ T2445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.958242][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.967950][ T2502] rust_binder: Write failure EFAULT in pid:562 [ 92.968521][ T36] audit: type=1400 audit(1758123216.158:387): avc: denied { ioctl } for pid=2501 comm="syz.0.652" path="socket:[20672]" dev="sockfs" ino=20672 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.000248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.028680][ T2410] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.035786][ T2410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.061700][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.068787][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.078756][ T2517] rust_binder: 564: no such ref 2 [ 93.100233][ T2445] veth0_vlan: entered promiscuous mode [ 93.111447][ T2445] veth1_macvtap: entered promiscuous mode [ 93.129567][ T2518] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 93.130425][ T2519] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 128 [ 93.441095][ T383] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 93.591096][ T383] usb 6-1: Invalid ep0 maxpacket: 64 [ 93.741219][ T383] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 93.862760][ T2534] rust_binder: 568: no such ref 3 [ 93.867834][ T2534] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 93.875161][ T2534] rust_binder: 568: no such ref 1 [ 93.880217][ T2534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 93.880720][ T2534] rust_binder: Write failure EINVAL in pid:568 [ 93.892415][ T36] audit: type=1400 audit(1758123217.088:388): avc: denied { watch } for pid=2533 comm="syz.0.661" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.922428][ T383] usb 6-1: Invalid ep0 maxpacket: 64 [ 93.928189][ T383] usb usb6-port1: attempt power cycle [ 93.983700][ T2537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.983845][ T2537] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 94.239448][ T36] audit: type=1400 audit(1758123217.428:389): avc: denied { setattr } for pid=2542 comm="syz.4.664" path="socket:[20879]" dev="sockfs" ino=20879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.271295][ T383] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 94.291105][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 94.300332][ T383] usb 6-1: Invalid ep0 maxpacket: 64 [ 94.337901][ T2551] GUP no longer grows the stack in syz.4.668 (2551): 200000001000-200000c01000 (200000000000) [ 94.348360][ T2551] CPU: 0 UID: 0 PID: 2551 Comm: syz.4.668 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 94.348387][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.348400][ T2551] Call Trace: [ 94.348406][ T2551] [ 94.348414][ T2551] __dump_stack+0x21/0x30 [ 94.348441][ T2551] dump_stack_lvl+0x10c/0x190 [ 94.348464][ T2551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.348486][ T2551] ? find_vma+0xcd/0x110 [ 94.348501][ T2551] ? update_cfs_group+0x260/0x260 [ 94.348518][ T2551] dump_stack+0x19/0x20 [ 94.348539][ T2551] __get_user_pages+0x1e34/0x22d0 [ 94.348559][ T2551] ? __kasan_check_write+0x18/0x20 [ 94.348588][ T2551] ? down_read_killable+0x79/0xf0 [ 94.348610][ T2551] ? populate_vma_page_range+0x230/0x230 [ 94.348630][ T2551] ? kernel_text_address+0xa9/0xe0 [ 94.348652][ T2551] __gup_longterm_locked+0xcb1/0x1580 [ 94.348674][ T2551] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 94.348692][ T2551] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 94.348709][ T2551] gup_fast_fallback+0x12ae/0x14a0 [ 94.348731][ T2551] ? kasan_save_track+0x4f/0x80 [ 94.348746][ T2551] ? kasan_save_track+0x3e/0x80 [ 94.348763][ T2551] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.348787][ T2551] ? get_user_pages_fast_only+0xc0/0xc0 [ 94.348809][ T2551] get_user_pages_fast+0x73/0xb0 [ 94.348829][ T2551] get_futex_key+0x24d/0x930 [ 94.348845][ T2551] ? __cfi_get_futex_key+0x10/0x10 [ 94.348861][ T2551] ? futex_setup_timer+0xb4/0xd0 [ 94.348875][ T2551] futex_lock_pi+0x1c0/0xa10 [ 94.348894][ T2551] ? futex_unqueue+0x136/0x160 [ 94.348911][ T2551] ? __cfi_futex_lock_pi+0x10/0x10 [ 94.348930][ T2551] ? __cfi_futex_wake_mark+0x10/0x10 [ 94.348952][ T2551] ? futex_setup_timer+0xb4/0xd0 [ 94.348967][ T2551] ? __cfi_futex_wake_mark+0x10/0x10 [ 94.348988][ T2551] ? __kasan_check_write+0x18/0x20 [ 94.349012][ T2551] ? up_read+0x26/0x1d0 [ 94.349032][ T2551] do_futex+0x2de/0x500 [ 94.349049][ T2551] ? __cfi_do_futex+0x10/0x10 [ 94.349066][ T2551] ? vm_mmap_pgoff+0x145/0x4e0 [ 94.349096][ T2551] __se_sys_futex+0x28f/0x300 [ 94.349121][ T2551] ? __x64_sys_futex+0x110/0x110 [ 94.349144][ T2551] ? __kasan_check_write+0x18/0x20 [ 94.349168][ T2551] __x64_sys_futex+0xe9/0x110 [ 94.349186][ T2551] x64_sys_call+0x227f/0x2ee0 [ 94.349210][ T2551] do_syscall_64+0x58/0xf0 [ 94.349225][ T2551] ? clear_bhb_loop+0x50/0xa0 [ 94.349252][ T2551] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.349283][ T2551] RIP: 0033:0x7fe14e38eba9 [ 94.349334][ T2551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.349352][ T2551] RSP: 002b:00007fe14f2dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.349394][ T2551] RAX: ffffffffffffffda RBX: 00007fe14e5d5fa0 RCX: 00007fe14e38eba9 [ 94.349408][ T2551] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00 [ 94.349419][ T2551] RBP: 00007fe14e411e19 R08: 0000000000000000 R09: 0000000000000002 [ 94.349430][ T2551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.349440][ T2551] R13: 00007fe14e5d6038 R14: 00007fe14e5d5fa0 R15: 00007ffd04aebd68 [ 94.349455][ T2551] [ 94.491173][ T383] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 94.681695][ T383] usb 6-1: Invalid ep0 maxpacket: 64 [ 94.687182][ T383] usb usb6-port1: unable to enumerate USB device [ 94.694431][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.705433][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.715429][ T31] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 94.724703][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.738619][ T31] usb 1-1: config 0 descriptor?? [ 95.146016][ T2536] netlink: 'syz.0.662': attribute type 3 has an invalid length. [ 95.155584][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 95.161763][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.170412][ T31] usb 1-1: USB disconnect, device number 16 [ 95.633823][ T2568] veth0_virt_wifi: entered allmulticast mode [ 95.648338][ T2568] veth0_virt_wifi: left allmulticast mode [ 95.701448][ T36] audit: type=1400 audit(1758123218.898:390): avc: denied { read } for pid=2574 comm="syz.4.678" path="socket:[21573]" dev="sockfs" ino=21573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.759153][ T2589] capability: warning: `syz.4.681' uses 32-bit capabilities (legacy support in use) [ 95.809773][ T2599] mmap: syz.4.684 (2599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.032346][ T36] audit: type=1400 audit(1758123219.228:391): avc: denied { getopt } for pid=2628 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.094000][ T2631] 9pnet_fd: Insufficient options for proto=fd [ 96.102936][ T2633] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.137981][ T36] audit: type=1400 audit(1758123219.328:392): avc: denied { map } for pid=2636 comm="syz.2.699" path="socket:[21688]" dev="sockfs" ino=21688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.162123][ T36] audit: type=1400 audit(1758123219.328:393): avc: denied { read } for pid=2636 comm="syz.2.699" path="socket:[21688]" dev="sockfs" ino=21688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.231079][ T36] audit: type=1400 audit(1758123219.418:394): avc: denied { getopt } for pid=2642 comm="syz.5.701" laddr=fe80::aa lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.276233][ T2643] 8021q: VLANs not supported on ip_vti0 [ 96.469907][ T2653] overlayfs: failed to clone upperpath [ 96.471082][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 96.633164][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.643008][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.655858][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 96.665145][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.666529][ T36] audit: type=1400 audit(1758123219.868:395): avc: denied { setopt } for pid=2664 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.692993][ T31] usb 3-1: config 0 descriptor?? [ 97.100164][ T31] kovaplus 0003:1E7D:2D50.000C: item fetching failed at offset 2/5 [ 97.108311][ T31] kovaplus 0003:1E7D:2D50.000C: parse failed [ 97.114359][ T31] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -22 [ 97.271929][ T2675] overlayfs: failed to clone upperpath [ 97.281809][ T2675] overlayfs: failed to clone upperpath [ 97.763039][ T2717] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.787264][ T36] audit: type=1400 audit(1758123220.978:396): avc: denied { create } for pid=2722 comm="syz.5.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.091161][ T36] audit: type=1400 audit(1758123221.288:397): avc: denied { setattr } for pid=2753 comm="syz.5.740" name="XDP" dev="sockfs" ino=21292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.112338][ T2754] 9pnet_fd: p9_fd_create_tcp (2754): problem connecting socket to 127.0.0.1 [ 98.841822][ T2802] fuse: Bad value for 'fd' [ 98.841822][ T2803] fuse: Bad value for 'fd' [ 99.137515][ T36] audit: type=1400 audit(1758123222.328:398): avc: denied { append } for pid=2804 comm="syz.0.754" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.174108][ T2808] netlink: 328 bytes leftover after parsing attributes in process `syz.0.755'. [ 99.238878][ T837] usb 3-1: USB disconnect, device number 16 [ 99.402884][ T2824] overlayfs: failed to clone upperpath [ 99.421098][ T2815] rust_binder: validate_parent_fixup: new_min_offset=31, sg_entry.length=0 [ 99.421137][ T2815] rust_binder: Error while translating object. [ 99.438340][ T2815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.446422][ T2815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 100.076070][ T36] audit: type=1400 audit(1758123223.268:399): avc: denied { accept } for pid=2847 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.174213][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.181562][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.211513][ T2853] bridge0: entered promiscuous mode [ 100.216813][ T2853] bridge0: entered allmulticast mode [ 100.432928][ T2857] 9pnet_fd: p9_fd_create_unix (2857): problem connecting socket: ./cgroup: -111 [ 100.541093][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 100.691059][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 100.697264][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.708132][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.720958][ T31] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 100.730033][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.738749][ T31] usb 1-1: config 0 descriptor?? [ 100.752525][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 100.957989][ T2864] rust_binder: Write failure EFAULT in pid:611 [ 100.959591][ T2911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.960139][ T837] usb 1-1: USB disconnect, device number 17 [ 100.966487][ T2911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.241066][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 101.331111][ T837] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 101.392365][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.400757][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 101.414709][ T31] usb 3-1: config 4 has an invalid interface number: 56 but max is 12 [ 101.423338][ T31] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 13 [ 101.432669][ T31] usb 3-1: config 4 has no interface number 0 [ 101.438781][ T31] usb 3-1: config 4 interface 56 has no altsetting 0 [ 101.447243][ T31] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 101.456558][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.464751][ T31] usb 3-1: Product: syz [ 101.468978][ T31] usb 3-1: Manufacturer: syz [ 101.473876][ T31] usb 3-1: SerialNumber: syz [ 101.502125][ T837] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 101.521804][ T837] usb 1-1: config 127 has no interfaces? [ 101.528932][ T837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.541159][ T837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.549208][ T837] usb 1-1: Product: syz [ 101.553447][ T837] usb 1-1: Manufacturer: syz [ 101.558061][ T837] usb 1-1: SerialNumber: syz [ 101.768429][ T837] usb 1-1: USB disconnect, device number 18 [ 102.185549][ T31] snd-usb-audio 3-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 102.203394][ T31] usb 3-1: USB disconnect, device number 17 [ 102.232199][ T2926] rust_binder: Error while translating object. [ 102.232238][ T2926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.238734][ T2926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 102.381946][ T36] audit: type=1400 audit(1758123225.578:400): avc: denied { lock } for pid=2943 comm="syz.2.802" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.484175][ T2950] netlink: 'syz.2.804': attribute type 4 has an invalid length. [ 103.061078][ T383] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 103.106398][ T2959] overlayfs: failed to clone upperpath [ 103.161805][ T2966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2966 comm=syz.4.810 [ 103.215082][ T36] audit: type=1400 audit(1758123226.408:401): avc: denied { lock } for pid=2975 comm="syz.4.812" path="socket:[22734]" dev="sockfs" ino=22734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.222206][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.249947][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.260205][ T383] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 103.269602][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.279031][ T383] usb 1-1: config 0 descriptor?? [ 103.467236][ T2978] rust_binder: Error while translating object. [ 103.467274][ T2978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 103.473641][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:472 [ 103.483500][ T2978] random: crng reseeded on system resumption [ 104.148421][ T383] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 104.164663][ T383] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 104.206648][ T36] audit: type=1400 audit(1758123227.398:402): avc: denied { getopt } for pid=3009 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.239486][ T3012] rust_binder: Write failure EFAULT in pid:479 [ 104.350371][ T9] usb 1-1: USB disconnect, device number 19 [ 104.411593][ T3016] fuseblk: Unknown parameter 'allow_ot' [ 104.489366][ T3027] fuse: Bad value for 'fd' [ 104.714272][ T36] audit: type=1400 audit(1758123227.908:403): avc: denied { lock } for pid=3050 comm="syz.4.839" path="socket:[22487]" dev="sockfs" ino=22487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.041249][ T3079] 9pnet_fd: Insufficient options for proto=fd [ 105.055843][ T3079] incfs: Error accessing: ./file0. [ 105.069536][ T3079] incfs: mount failed -20 [ 105.141064][ T383] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 105.277717][ T3092] rust_binder: 3092 RLIMIT_NICE not set [ 105.301078][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 105.344565][ T9] rust_binder: 3091: removing orphan mapping 0:1048 [ 105.402631][ T3103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.402729][ T3102] rust_binder: 504: no such ref 3 [ 105.414256][ T3102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 105.414720][ T3102] rust_binder: Error while translating object. [ 105.423897][ T3102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.430081][ T3102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 105.451109][ T383] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 105.498049][ T3111] __vm_enough_memory: pid: 3111, comm: syz.2.857, bytes: 18014402804453376 not enough memory for the allocation [ 105.523168][ T3113] rust_binder: Error while translating object. [ 105.523202][ T3113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.529436][ T3113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 105.559903][ T3115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.569829][ T3115] rust_binder: Error while translating object. [ 105.576392][ T3115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 105.582670][ T3115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 105.592130][ T3115] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.601287][ T3115] rust_binder: Read failure Err(EFAULT) in pid:517 [ 105.631058][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 105.643266][ T383] usb usb1-port1: attempt power cycle [ 105.922140][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 105.991053][ T383] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 106.011441][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 106.081049][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 106.092144][ T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 106.111219][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.121917][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.141083][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.146670][ T36] audit: type=1400 audit(1758123229.338:404): avc: denied { create } for pid=3139 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 106.149155][ T31] usb 3-1: Product: syz [ 106.149177][ T31] usb 3-1: Manufacturer: syz [ 106.178946][ T383] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 106.198844][ T31] usb 3-1: SerialNumber: syz [ 106.211586][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 106.217038][ T383] usb usb1-port1: unable to enumerate USB device [ 106.296339][ T3148] fuse: Bad value for 'rootmode' [ 107.234845][ T3161] netlink: 80 bytes leftover after parsing attributes in process `syz.4.877'. [ 107.806839][ T3172] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 107.817868][ T36] audit: type=1400 audit(1758123231.008:405): avc: denied { relabelto } for pid=3171 comm="syz.4.881" name="file0" dev="tmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 107.866183][ T36] audit: type=1400 audit(1758123231.038:406): avc: denied { associate } for pid=3171 comm="syz.4.881" name="file0" dev="tmpfs" ino=941 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 107.900282][ T36] audit: type=1400 audit(1758123231.048:407): avc: denied { unlink } for pid=1884 comm="syz-executor" name="file0" dev="tmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 107.992104][ T36] audit: type=1400 audit(1758123231.188:408): avc: denied { mounton } for pid=3177 comm="syz.0.884" path="/204/file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.041911][ T36] audit: type=1400 audit(1758123231.208:409): avc: denied { listen } for pid=3179 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.081867][ T36] audit: type=1400 audit(1758123231.208:410): avc: denied { accept } for pid=3179 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.640810][ T31] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 108.660355][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.673494][ T31] usb 3-1: USB disconnect, device number 18 [ 108.683292][ T2193] udevd[2193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.689795][ T3203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.892'. [ 108.981067][ T31] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 109.133754][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.141839][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 109.150348][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 109.162883][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.172013][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.179998][ T31] usb 3-1: Product: syz [ 109.184184][ T31] usb 3-1: Manufacturer: syz [ 109.188789][ T31] usb 3-1: SerialNumber: syz [ 109.402637][ T3201] rust_binder: 522: no such ref 0 [ 109.407845][ T3201] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 109.422451][ T3201] rust_binder: 522: no such ref 64 [ 109.434697][ T3201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 109.439588][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 109.471793][ T31] usb 3-1: USB disconnect, device number 19 [ 109.484233][ T2193] udevd[2193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.951628][ T3247] rust_binder: 3247 RLIMIT_NICE not set [ 109.957410][ T383] rust_binder: 3246: removing orphan mapping 0:1048 [ 110.338307][ T3296] overlayfs: failed to clone lowerpath [ 111.126291][ T36] audit: type=1326 audit(1758123234.318:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ff8eba9 code=0x7fc00000 [ 111.181933][ T36] audit: type=1400 audit(1758123234.378:412): avc: denied { setopt } for pid=3306 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.591069][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 112.751067][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 112.758404][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.766997][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.767020][ T36] audit: type=1400 audit(1758123235.968:413): avc: denied { getopt } for pid=3361 comm="syz.5.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.778038][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.797068][ T3363] tmpfs: Invalid uid '0x00000000ffffffff' [ 112.806051][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 112.822742][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 112.822817][ T3363] tmpfs: Invalid uid '0x00000000ffffffff' [ 112.832953][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.848279][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.858077][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.871200][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 112.880360][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.889505][ T9] usb 1-1: config 0 descriptor?? [ 112.894865][ T3360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.902928][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 113.030407][ T3366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.030852][ T3366] rust_binder: Write failure EFAULT in pid:533 [ 113.038065][ T36] audit: type=1400 audit(1758123236.228:414): avc: denied { nlmsg_read } for pid=3365 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.038069][ T3366] netlink: 180 bytes leftover after parsing attributes in process `syz.2.951'. [ 113.074278][ T3366] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 18446744073709551614) [ 113.074304][ T3366] rust_binder: Error while translating object. [ 113.086516][ T3366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.092755][ T3366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533 [ 113.102641][ T3360] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 113.161367][ T3368] rust_binder: Write failure EFAULT in pid:535 [ 113.334341][ T9] usblp 1-1:0.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 113.368164][ T9] usb 1-1: USB disconnect, device number 24 [ 113.384030][ T9] usblp0: removed [ 113.393039][ T3380] 9pnet_fd: Insufficient options for proto=fd [ 113.420523][ T3388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 113.459369][ T3400] syz.0.960: attempt to access beyond end of device [ 113.459369][ T3400] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 113.476117][ T3400] exFAT-fs (loop0): unable to read boot sector [ 113.482690][ T3400] exFAT-fs (loop0): failed to read boot sector [ 113.488951][ T3400] exFAT-fs (loop0): failed to recognize exfat type [ 113.528082][ T3415] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 113.537481][ T3415] incfs: Can't find or create .index dir in ./cgroup [ 113.545494][ T3416] incfs: Can't find or create .incomplete dir in ./cgroup [ 113.552893][ T3415] incfs: mount failed -22 [ 113.557315][ T3416] incfs: mount failed -22 [ 113.601965][ T36] audit: type=1400 audit(1758123236.798:415): avc: denied { setopt } for pid=3428 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.641115][ T383] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 113.723484][ T3434] input: syz1 as /devices/virtual/input/input15 [ 113.792161][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.803303][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 113.814386][ T383] usb 3-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 113.823525][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.832220][ T383] usb 3-1: config 0 descriptor?? [ 113.837490][ T3391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.190980][ T36] audit: type=1400 audit(1758123237.378:416): avc: denied { create } for pid=3459 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.447729][ T383] usbhid 3-1:0.0: can't add hid device: -71 [ 114.454009][ T383] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.463323][ T383] usb 3-1: USB disconnect, device number 20 [ 114.527602][ T3501] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 114.632329][ T3509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.632356][ T3509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:681 [ 114.642326][ T3510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.661846][ T3514] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.677889][ T36] audit: type=1400 audit(1758123237.868:417): avc: denied { mounton } for pid=3513 comm="syz.0.995" path="/221/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 114.747815][ T36] audit: type=1400 audit(1758123237.938:418): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.952517][ T36] audit: type=1400 audit(1758123238.148:419): avc: denied { name_bind } for pid=3519 comm="syz.4.998" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 115.076855][ T3541] fuse: Bad value for 'group_id' [ 115.091088][ T3541] fuse: Bad value for 'group_id' [ 115.301057][ T383] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 115.451063][ T383] usb 3-1: Using ep0 maxpacket: 32 [ 115.457481][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.468609][ T383] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 115.477858][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.487142][ T383] usb 3-1: config 0 descriptor?? [ 115.896506][ T383] cypress 0003:04B4:07B1.000E: hidraw0: USB HID v0.10 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 116.154576][ T3559] rust_binder: Read failure Err(EAGAIN) in pid:694 [ 116.154693][ T3559] rust_binder: got new transaction with bad transaction stack [ 116.161344][ T3559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 116.257033][ T3575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.266306][ T3576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.273642][ T36] audit: type=1400 audit(1758123239.478:420): avc: denied { write } for pid=3574 comm="syz.0.1015" name="file2" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.308043][ T3576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.308065][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.321154][ T3576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:704 [ 116.445662][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.463505][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.514840][ T3595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1020'. [ 116.524808][ T3595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 116.816948][ T3623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3623 comm=syz.5.1029 [ 116.923010][ T36] audit: type=1400 audit(1758123240.118:421): avc: denied { wake_alarm } for pid=3633 comm="syz.5.1033" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.989419][ T3638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=3638 comm=syz.0.1035 [ 117.039641][ T3636] fuse: Unknown parameter 'Nid' [ 117.127415][ T3644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 117.241079][ T463] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 117.393447][ T463] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 117.402625][ T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.410620][ T463] usb 1-1: Product: syz [ 117.414918][ T463] usb 1-1: Manufacturer: syz [ 117.419548][ T463] usb 1-1: SerialNumber: syz [ 117.424778][ T463] usb 1-1: config 0 descriptor?? [ 117.431923][ T463] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 117.439695][ T463] usb 1-1: Detected FT2233HP [ 117.631061][ T463] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.638810][ T463] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.839379][ T3638] rust_binder: Write failure EFAULT in pid:734 [ 117.839752][ T463] usb 1-1: USB disconnect, device number 25 [ 117.853197][ T463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.863524][ T463] ftdi_sio 1-1:0.0: device disconnected [ 118.067835][ T463] usb 3-1: USB disconnect, device number 21 [ 118.082845][ T3650] rust_binder: Error while translating object. [ 118.082886][ T3650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.089219][ T3650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 118.258054][ T3678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1048'. [ 118.277390][ T3678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 118.286131][ T3678] overlayfs: missing 'lowerdir' [ 118.291422][ T3678] bridge0: entered allmulticast mode [ 118.296893][ T3678] bridge0: left allmulticast mode [ 118.367985][ T3685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.382727][ T3687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.389223][ T3687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:739 [ 118.413774][ T3690] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.431430][ T3690] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 118.439804][ T3690] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.448101][ T3690] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 118.457087][ T3691] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.467319][ T3691] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 118.475800][ T3691] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.483906][ T3691] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 118.660664][ T3701] rust_binder: Write failure EFAULT in pid:746 [ 118.689057][ T3710] fuse: Bad value for 'fd' [ 118.753669][ T36] audit: type=1400 audit(1758123241.948:422): avc: denied { create } for pid=3720 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.875933][ T3724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.990401][ T3736] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1067'. [ 119.063525][ T36] audit: type=1400 audit(1758123242.258:423): avc: denied { bpf } for pid=3758 comm="syz.2.1073" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.116966][ T3767] tipc: Enabling of bearer rejected, failed to enable media [ 119.459759][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 119.459775][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 120.133306][ T3838] tipc: Enabling of bearer rejected, failed to enable media [ 120.178063][ T3845] 9pnet_fd: Insufficient options for proto=fd [ 120.331827][ T3856] 9pnet_fd: Insufficient options for proto=fd [ 120.762197][ T36] audit: type=1400 audit(1758123243.958:424): avc: denied { bind } for pid=3881 comm="syz.4.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.053925][ T36] audit: type=1400 audit(1758123244.248:425): avc: denied { mount } for pid=3886 comm="syz.0.1117" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 121.182016][ T36] audit: type=1400 audit(1758123244.378:426): avc: denied { bind } for pid=3912 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 121.340433][ T3918] fuse: Bad value for 'user_id' [ 121.345489][ T3918] fuse: Bad value for 'user_id' [ 121.374654][ T36] audit: type=1400 audit(1758123244.568:427): avc: denied { read } for pid=3921 comm="syz.4.1131" name="/" dev="configfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.396896][ T36] audit: type=1400 audit(1758123244.568:428): avc: denied { open } for pid=3921 comm="syz.4.1131" path="/" dev="configfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.717992][ T3929] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1133'. [ 122.028172][ T3961] raw_sendmsg: syz.4.1142 forgot to set AF_INET. Fix it! [ 122.045820][ T3957] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff00000000000000000000' [ 122.081565][ T3966] lo: entered allmulticast mode [ 122.091250][ T3966] lo: left allmulticast mode [ 122.126056][ T36] audit: type=1400 audit(1758123245.318:429): avc: denied { name_bind } for pid=3958 comm="syz.5.1141" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 122.615564][ T3970] fuse: Bad value for 'fd' [ 122.838692][ T36] audit: type=1400 audit(1758123246.028:430): avc: denied { create } for pid=3980 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.432566][ T36] audit: type=1400 audit(1758123246.628:431): avc: denied { execute } for pid=4000 comm="syz.5.1156" path="/dev/rnullb0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.506529][ T4017] overlayfs: failed to clone upperpath [ 124.104101][ T4087] 9pnet_fd: Insufficient options for proto=fd [ 124.201982][ T4105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=4105 comm=syz.2.1189 [ 124.634176][ T4128] overlayfs: failed to clone lowerpath [ 124.884210][ T36] audit: type=1400 audit(1758123248.078:432): avc: denied { mounton } for pid=4144 comm="syz.2.1202" path="/231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.928263][ T4145] fuse: blksize only supported for fuseblk [ 125.410849][ T36] audit: type=1400 audit(1758123248.598:433): avc: denied { nlmsg_read } for pid=4209 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 125.606869][ T4222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47187 sclass=netlink_audit_socket pid=4222 comm=syz.0.1232 [ 125.620493][ T4222] overlayfs: failed to clone upperpath [ 125.643743][ T4227] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1233'. [ 125.684944][ T4231] fuse: Bad value for 'fd' [ 125.785443][ T4238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pid=4238 comm=syz.4.1238 [ 125.973322][ T4258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3679 sclass=netlink_route_socket pid=4258 comm=syz.5.1245 [ 126.283406][ T4271] 9pnet_fd: Insufficient options for proto=fd [ 126.313159][ T4278] overlayfs: failed to clone upperpath [ 126.335321][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'. [ 126.551532][ T36] audit: type=1400 audit(1758123249.748:434): avc: denied { create } for pid=4306 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 126.622963][ T4323] veth0_to_team: entered promiscuous mode [ 126.628913][ T4323] veth0_to_team: entered allmulticast mode [ 126.635924][ T4327] overlayfs: failed to clone upperpath [ 126.767695][ T36] audit: type=1400 audit(1758123249.958:435): avc: denied { mount } for pid=4344 comm="syz.5.1276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.882659][ T4357] tipc: Can't bind to reserved service type 0 [ 127.353076][ T4377] fuse: Bad value for 'fd' [ 127.373766][ T36] audit: type=1400 audit(1758123250.568:436): avc: denied { module_load } for pid=4380 comm="syz.5.1289" path="/186/file0/bus" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 127.373784][ T4381] Invalid ELF header len 56 [ 127.705480][ T4402] 9pnet_fd: Insufficient options for proto=fd [ 127.732732][ T36] audit: type=1400 audit(1758123250.928:437): avc: denied { read } for pid=4405 comm="syz.2.1298" name="file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.761040][ T36] audit: type=1400 audit(1758123250.928:438): avc: denied { open } for pid=4405 comm="syz.2.1298" path="/258/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.191932][ T36] audit: type=1400 audit(1758123251.388:439): avc: denied { execute_no_trans } for pid=4463 comm="syz.2.1322" path="/277/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.364270][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 128.417622][ T4472] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 128.425504][ T4472] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1326'. [ 128.440338][ T4472] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 128.448177][ T4472] netlink: 'syz.4.1326': attribute type 2 has an invalid length. [ 128.585657][ T36] audit: type=1400 audit(1758123251.778:440): avc: denied { listen } for pid=4503 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.627849][ T4511] tmpfs: Bad value for 'nr_blocks' [ 129.247814][ T4545] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1353'. [ 129.257169][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 129.325402][ T4547] overlayfs: missing 'workdir' [ 129.364803][ T4551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1356'. [ 129.374514][ T4551] 9pnet_fd: p9_fd_create_tcp (4551): problem connecting socket to 127.0.0.1 [ 129.796218][ T4586] netlink: 'syz.2.1367': attribute type 4 has an invalid length. [ 129.818352][ T4586] netlink: 'syz.2.1367': attribute type 12 has an invalid length. [ 129.837655][ T4588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1368'. [ 130.257448][ T4594] !@: renamed from xfrm0 [ 130.288618][ T4602] tipc: Enabling of bearer rejected, failed to enable media [ 130.310223][ T4606] 9pnet_fd: Insufficient options for proto=fd [ 130.361918][ T4612] fuse: Bad value for 'user_id' [ 130.366901][ T4612] fuse: Bad value for 'user_id' [ 130.372949][ T4612] bpf: Bad value for 'uid' [ 130.377692][ T4612] fuse: Bad value for 'group_id' [ 130.382817][ T4612] fuse: Bad value for 'group_id' [ 130.396661][ T4618] 9pnet_fd: Insufficient options for proto=fd [ 130.426549][ T4622] fuse: Bad value for 'fd' [ 130.583878][ T4645] devpts: called with bogus options [ 130.718718][ T4658] /dev/loop0: Can't lookup blockdev [ 130.931149][ C0] syz_tun: tun_net_xmit 42 [ 131.106817][ T4675] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.342260][ T36] audit: type=1400 audit(1758123254.538:441): avc: denied { setopt } for pid=4691 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 131.373874][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 131.500680][ T4714] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1411'. [ 131.525221][ T4719] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1412'. [ 131.971078][ C0] syz_tun: tun_net_xmit 42 [ 132.410010][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 132.435140][ T36] audit: type=1326 audit(1758123255.628:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.1429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc090d8eba9 code=0x0 [ 132.723451][ T4802] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 132.912127][ T36] audit: type=1400 audit(1758123256.108:443): avc: denied { setopt } for pid=4825 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.944218][ T4831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1450'. [ 132.953366][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 133.011081][ C0] syz_tun: tun_net_xmit 42 [ 133.476126][ T4858] tipc: Enabling of bearer rejected, failed to enable media [ 133.512198][ T4864] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1462'. [ 133.794007][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.801238][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.808580][ T4901] bridge0: entered promiscuous mode [ 133.813839][ T4901] bridge0: entered allmulticast mode [ 133.820742][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.827834][ T4901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.835173][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.842241][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.874504][ T4910] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 133.884201][ T4912] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1477'. [ 134.477713][ T4968] @0: renamed from bond_slave_1 [ 134.517434][ T4983] netlink: 'syz.4.1501': attribute type 4 has an invalid length. [ 134.525313][ T4983] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1501'. [ 134.534483][ T4985] tipc: Enabling of bearer rejected, failed to enable media [ 134.608971][ T4998] overlayfs: failed to clone lowerpath [ 134.610262][ T4999] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 134.614584][ T36] audit: type=1400 audit(1758123257.798:444): avc: denied { write } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28487 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.664859][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1507'. [ 135.219916][ T5020] overlayfs: missing 'lowerdir' [ 135.275722][ T5032] tipc: Enabling of bearer rejected, failed to enable media [ 135.368058][ T5048] cgroup: Name too long [ 135.523676][ T5056] overlayfs: failed to clone lowerpath [ 136.065369][ T36] audit: type=1400 audit(1758123259.258:445): avc: denied { accept } for pid=5064 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.954310][ T5112] netlink: 'syz.4.1550': attribute type 12 has an invalid length. [ 136.963016][ T5112] netlink: 'syz.4.1550': attribute type 12 has an invalid length. [ 137.006518][ T36] audit: type=1400 audit(1758123260.198:446): avc: denied { map } for pid=5122 comm="syz.4.1553" path="socket:[28654]" dev="sockfs" ino=28654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 137.092005][ T36] audit: type=1400 audit(1758123260.288:447): avc: denied { ioctl } for pid=5137 comm="syz.0.1559" path="socket:[28933]" dev="sockfs" ino=28933 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.251351][ C0] syz_tun: tun_net_xmit 42 [ 137.750801][ T5170] incfs: Error accessing: ./file0. [ 137.756075][ T5170] incfs: mount failed -20 [ 137.973707][ T5176] __nla_validate_parse: 3 callbacks suppressed [ 137.973723][ T5176] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1573'. [ 138.232690][ T5188] cgroup: Unknown subsys name 'measure' [ 138.291057][ C0] syz_tun: tun_net_xmit 42 [ 138.350825][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 138.455451][ T5211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=5211 comm=syz.4.1585 [ 138.481010][ T36] audit: type=1326 audit(1758123261.668:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.4.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x0 [ 138.634430][ T5226] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.642370][ T5226] IPv6: NLM_F_REPLACE set, but no existing node found! [ 139.094787][ T36] audit: type=1400 audit(1758123262.288:449): avc: denied { getattr } for pid=5231 comm="syz.0.1593" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.194761][ T36] audit: type=1400 audit(1758123262.388:450): avc: denied { search } for pid=5248 comm="syz.2.1600" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 139.331093][ C0] syz_tun: tun_net_xmit 42 [ 139.497334][ T5270] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1607'. [ 139.510204][ T5272] 9pnet_fd: Insufficient options for proto=fd [ 139.517717][ T36] audit: type=1326 audit(1758123262.708:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.5.1608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ff8eba9 code=0x0 [ 139.954680][ T5299] syz_tun: tun_net_xmit 42 [ 140.006057][ T5300] 9pnet_fd: Insufficient options for proto=fd [ 140.255561][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 140.276726][ T5314] 9pnet_fd: Insufficient options for proto=fd [ 140.411389][ T5328] mmap: syz.0.1625 (5328): VmData 17453056 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 140.521138][ T36] audit: type=1326 audit(1758123263.708:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc090d8eba9 code=0x0 [ 140.844821][ T5387] fuse: Bad value for 'fd' [ 141.011068][ C1] syz_tun: tun_net_xmit 42 [ 141.536529][ T5432] overlayfs: missing 'workdir' [ 141.592727][ T36] audit: type=1400 audit(1758123264.788:453): avc: denied { create } for pid=5437 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.051090][ C1] syz_tun: tun_net_xmit 42 [ 142.283092][ T5499] cgroup: noprefix used incorrectly [ 142.302686][ T5501] overlayfs: failed to clone upperpath [ 142.374957][ T5516] overlayfs: failed to clone upperpath [ 142.412711][ T13] bridge_slave_1: left allmulticast mode [ 142.418510][ T13] bridge_slave_1: left promiscuous mode [ 142.424485][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.433818][ T13] bridge_slave_0: left allmulticast mode [ 142.439822][ T13] bridge_slave_0: left promiscuous mode [ 142.446044][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.501510][ T5521] overlayfs: failed to clone upperpath [ 142.565882][ T5531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5531 comm=syz.4.1693 [ 142.578845][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'. [ 142.588810][ T13] veth1_macvtap: left promiscuous mode [ 142.594456][ T13] veth0_vlan: left promiscuous mode [ 143.125502][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 143.172586][ T5566] cgroup: Unknown subsys name 'measure' [ 143.184743][ T5564] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1703'. [ 143.205440][ T36] audit: type=1326 audit(1758123266.398:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ff8eba9 code=0x7ffc0000 [ 143.231931][ T36] audit: type=1326 audit(1758123266.398:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ff8eba9 code=0x7ffc0000 [ 143.255740][ T36] audit: type=1326 audit(1758123266.428:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f600ff8eba9 code=0x7ffc0000 [ 143.289975][ T36] audit: type=1326 audit(1758123266.428:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ff8eba9 code=0x7ffc0000 [ 143.326043][ T5579] tipc: Enabling of bearer rejected, failed to enable media [ 143.474450][ T5597] netlink: 372 bytes leftover after parsing attributes in process `syz.5.1717'. [ 143.525221][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 143.525241][ T36] audit: type=1400 audit(1758123266.718:482): avc: denied { getopt } for pid=5601 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.559568][ T36] audit: type=1400 audit(1758123266.748:483): avc: denied { getopt } for pid=5601 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.915676][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 144.029586][ T5629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1732'. [ 144.049973][ T5636] /dev/loop0: Can't lookup blockdev [ 144.570271][ T5667] overlayfs: missing 'lowerdir' [ 144.631109][ T5677] /dev/loop0: Can't lookup blockdev [ 144.643662][ T5685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1751'. [ 144.748440][ T5700] overlayfs: failed to clone upperpath [ 144.936629][ T5718] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1762'. [ 144.947154][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 145.043761][ T5722] netlink: 'syz.2.1764': attribute type 13 has an invalid length. [ 145.227106][ T31] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=31 comm=kworker/1:0 [ 145.240486][ T383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=383 comm=kworker/1:3 [ 145.317277][ T5756] 9pnet_fd: Insufficient options for proto=fd [ 146.165530][ T5823] fuseblk: Unknown parameter 'maa$j4&x_read' [ 146.209135][ T5830] incfs: Error accessing: ./file0. [ 146.221070][ T5830] incfs: mount failed -20 [ 146.330842][ T5852] netlink: 'syz.0.1808': attribute type 4 has an invalid length. [ 146.345972][ T5852] netlink: 'syz.0.1808': attribute type 4 has an invalid length. [ 146.938766][ T36] audit: type=1400 audit(1758123270.128:484): avc: denied { read } for pid=5867 comm="syz.0.1815" name="file0" dev="tmpfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.939549][ T5868] fuse: Unknown parameter 'Ud' [ 146.995426][ T36] audit: type=1400 audit(1758123270.188:485): avc: denied { audit_write } for pid=5871 comm="syz.5.1817" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.016682][ T36] audit: type=1107 audit(1758123270.188:486): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 147.257789][ T5904] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1828'. [ 147.494897][ T5921] overlayfs: failed to clone upperpath [ 147.506028][ T36] audit: type=1400 audit(1758123270.698:487): avc: denied { link } for pid=5920 comm="syz.4.1833" name="file1" dev="tmpfs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.915674][ T5939] syz_tun: tun_net_xmit 42 [ 147.920903][ T36] audit: type=1400 audit(1758123271.108:488): avc: denied { mounton } for pid=5938 comm="syz.2.1840" path="/413/file0" dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 148.704548][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 148.721197][ T6023] overlay: ./file0 is not a directory [ 148.726305][ T6025] netlink: 'syz.2.1870': attribute type 6 has an invalid length. [ 148.737099][ T36] audit: type=1400 audit(1758123271.938:489): avc: denied { append } for pid=6000 comm="syz.4.1861" name="file0" dev="tmpfs" ino=2287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.759735][ T36] audit: type=1326 audit(1758123271.938:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.783768][ T36] audit: type=1326 audit(1758123271.938:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.810738][ T36] audit: type=1326 audit(1758123271.938:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.839219][ T36] audit: type=1326 audit(1758123271.938:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.862702][ T36] audit: type=1326 audit(1758123271.938:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.886054][ T36] audit: type=1326 audit(1758123271.938:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.909435][ T36] audit: type=1326 audit(1758123271.938:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.932794][ T36] audit: type=1326 audit(1758123271.938:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 148.941077][ C1] syz_tun: tun_net_xmit 42 [ 148.956260][ T36] audit: type=1326 audit(1758123271.938:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe14e38eba9 code=0x7ffc0000 [ 149.136271][ T6049] veth0_virt_wifi: entered allmulticast mode [ 149.142709][ T6048] veth0_virt_wifi: left allmulticast mode [ 149.240491][ T6056] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 149.252287][ T6056] overlayfs: missing 'lowerdir' [ 149.258388][ T6056] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 149.270293][ T6056] overlayfs: missing 'lowerdir' [ 149.326039][ T6061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6061 comm=syz.2.1882 [ 149.529940][ T6076] sit0: entered promiscuous mode [ 149.542811][ T6076] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 149.564385][ T6076] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1887'. [ 149.925359][ T6123] IPv6: Can't replace route, no match found [ 150.494273][ T6172] /dev/loop0: Can't lookup blockdev [ 150.601149][ T6189] overlay: Unknown parameter 'obj_role' [ 151.212080][ T6223] overlayfs: failed to clone upperpath [ 151.789936][ T6252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6252 comm=syz.5.1949 [ 151.828976][ T6258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1951'. [ 151.836830][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1952'. [ 151.838083][ T6258] tipc: Invalid UDP bearer configuration [ 151.847138][ T6258] tipc: Enabling of bearer rejected, failed to enable media [ 153.348144][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 153.378384][ T6342] overlayfs: failed to clone upperpath [ 153.439777][ T6358] netlink: 'syz.5.1989': attribute type 1 has an invalid length. [ 153.462351][ T6363] incfs_lookup_dentry err:-13 [ 153.467106][ T6363] incfs: Can't find or create .index dir in ./bus [ 153.473680][ T6363] incfs: mount failed -13 [ 153.479026][ T6363] overlayfs: failed to clone upperpath [ 153.485294][ T6363] overlayfs: failed to clone upperpath [ 153.513973][ T6376] netlink: 'syz.5.1996': attribute type 4 has an invalid length. [ 153.522000][ T6376] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1996'. [ 154.142096][ T6408] overlayfs: failed to clone upperpath [ 154.195899][ T36] kauditd_printk_skb: 437 callbacks suppressed [ 154.195902][ T6413] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 154.195917][ T36] audit: type=1400 audit(1758123277.388:936): avc: denied { relabelfrom } for pid=6412 comm="syz.0.2010" name="NETLINK" dev="sockfs" ino=32479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 154.236307][ T36] audit: type=1400 audit(1758123277.408:937): avc: denied { relabelto } for pid=6412 comm="syz.0.2010" name="NETLINK" dev="sockfs" ino=32479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 154.298219][ T36] audit: type=1326 audit(1758123277.488:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6422 comm="syz.4.2014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe14e38eba9 code=0x0 [ 154.412031][ T6428] overlayfs: failed to clone upperpath [ 154.454937][ T6432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6432 comm=syz.4.2017 [ 155.021270][ T6460] fuse: Bad value for 'fd' [ 155.021475][ T6461] fuse: Bad value for 'fd' [ 155.563388][ T6479] fuse: Bad value for 'rootmode' [ 155.589766][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 155.668402][ T6503] tipc: Started in network mode [ 155.673365][ T6503] tipc: Node identity 72c4f7a79eb2, cluster identity 4711 [ 155.680581][ T6503] tipc: Enabled bearer , priority 0 [ 156.263127][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 156.272480][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 156.505771][ T36] audit: type=1400 audit(1758123279.698:939): avc: denied { relabelfrom } for pid=6550 comm="syz.0.2056" name="" dev="pipefs" ino=32617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 156.604708][ T6556] veth0_to_team: mtu greater than device maximum [ 156.801071][ T837] tipc: Node number set to 3967219623 [ 156.824591][ T36] audit: type=1400 audit(1758123280.018:940): avc: denied { sqpoll } for pid=6581 comm="syz.4.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.929700][ T6599] overlayfs: failed to clone upperpath [ 156.936803][ T6599] overlayfs: failed to clone upperpath [ 157.062588][ T36] audit: type=1400 audit(1758123280.258:941): avc: denied { map } for pid=6606 comm="syz.4.2079" path="socket:[33821]" dev="sockfs" ino=33821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 157.157229][ T36] audit: type=1400 audit(1758123280.348:942): avc: denied { listen } for pid=6630 comm="syz.0.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.172227][ T6631] overlayfs: failed to clone upperpath [ 157.195986][ T6633] fuse: Bad value for 'fd' [ 157.541185][ T6647] overlayfs: failed to clone upperpath [ 157.587997][ T6655] netlink: 'syz.2.2097': attribute type 46 has an invalid length. [ 157.935679][ T6697] netlink: 'syz.0.2115': attribute type 13 has an invalid length. [ 157.954414][ T6696] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2115'. [ 158.034845][ T6709] fuse: Bad value for 'fd' [ 158.119310][ T6726] tmpfs: Unknown parameter '0xffffffffffffffff00000000000000000003i.H%:M$HoMvgkո3O97Ca' [ 158.955967][ T6760] fuse: Bad value for 'fd' [ 159.017447][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2142'. [ 159.182615][ T36] audit: type=1400 audit(1758123282.378:943): avc: denied { create } for pid=6789 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.232332][ T6800] overlayfs: failed to clone upperpath [ 159.312195][ T6812] overlayfs: failed to clone upperpath [ 159.377464][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2158'. [ 160.016540][ T6858] overlayfs: failed to clone upperpath [ 160.022877][ T6858] overlayfs: failed to clone upperpath [ 160.356012][ T36] audit: type=1400 audit(1758123283.548:944): avc: denied { associate } for pid=6887 comm="syz.4.2182" name="kvm" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 160.384353][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 160.597955][ T6925] netlink: 'syz.5.2196': attribute type 46 has an invalid length. [ 160.605861][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2196'. [ 160.628375][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 160.643855][ T6927] 9pnet_fd: Insufficient options for proto=fd [ 161.625163][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 161.974224][ T7061] vlan0: entered promiscuous mode [ 161.979518][ T7061] vlan0: entered allmulticast mode [ 161.984735][ T7061] veth0_vlan: entered allmulticast mode [ 162.537609][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7078 comm=syz.2.2249 [ 162.549138][ T7082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2249'. [ 162.852820][ T7119] netlink: 'syz.5.2261': attribute type 5 has an invalid length. [ 162.860616][ T7119] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2261'. [ 162.957434][ T7142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2268'. [ 162.966582][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2268'. [ 162.975715][ T7142] netlink: 'syz.5.2268': attribute type 1 has an invalid length. [ 163.383411][ T36] audit: type=1400 audit(1758123286.578:945): avc: denied { create } for pid=7177 comm="syz.4.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 163.544588][ T7208] overlayfs: failed to clone upperpath [ 163.999110][ T7212] 9pnet_fd: Insufficient options for proto=fd [ 164.825858][ T7269] overlayfs: failed to resolve './file1': -2 [ 164.896137][ T7271] tipc: Enabling of bearer rejected, failed to enable media [ 165.069457][ T7284] veth1: entered allmulticast mode [ 165.075597][ T7283] veth1: left allmulticast mode [ 165.116953][ T7289] tipc: Enabling of bearer rejected, failed to enable media [ 165.141048][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2326'. [ 165.317598][ T7334] overlayfs: failed to clone upperpath [ 165.386786][ T7337] netlink: 'syz.4.2341': attribute type 4 has an invalid length. [ 165.394806][ T7337] netlink: 'syz.4.2341': attribute type 4 has an invalid length. [ 165.697104][ T7358] netlink: 'syz.2.2349': attribute type 30 has an invalid length. [ 165.706554][ T7360] 9pnet_fd: Insufficient options for proto=fd [ 166.164504][ T7391] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 166.174971][ T7391] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 166.198083][ T7396] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2362'. [ 166.207235][ T7396] gretap0: entered promiscuous mode [ 166.549769][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 166.594333][ T7451] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2383'. [ 166.603565][ T7451] tc_dump_action: action bad kind [ 166.630657][ T7455] overlay: ./file0 is not a directory [ 167.201045][ T7484] overlayfs: failed to clone lowerpath [ 167.318412][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 169.644387][ T7580] fuse: Unknown parameter 'mode' [ 169.656049][ T7578] .N: renamed from veth0_to_bond (while UP) [ 169.667695][ T7584] overlayfs: failed to clone upperpath [ 169.692561][ T7589] fuse: Bad value for 'fd' [ 169.716460][ T7596] overlayfs: failed to clone upperpath [ 169.717161][ T7597] overlayfs: failed to clone upperpath [ 169.768053][ T7610] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 169.778044][ T36] audit: type=1400 audit(1758123292.968:946): avc: denied { relabelto } for pid=7607 comm="syz.0.2434" name="585" dev="tmpfs" ino=3190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 169.810115][ T36] audit: type=1400 audit(1758123292.968:947): avc: denied { associate } for pid=7607 comm="syz.0.2434" name="585" dev="tmpfs" ino=3190 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 169.838570][ T36] audit: type=1400 audit(1758123292.998:948): avc: denied { write } for pid=295 comm="syz-executor" name="585" dev="tmpfs" ino=3190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 169.881019][ T36] audit: type=1400 audit(1758123292.998:949): avc: denied { remove_name } for pid=295 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 169.911212][ T36] audit: type=1400 audit(1758123292.998:950): avc: denied { rmdir } for pid=295 comm="syz-executor" name="585" dev="tmpfs" ino=3190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 169.939369][ T7635] netlink: 'syz.2.2444': attribute type 4 has an invalid length. [ 169.982012][ T7650] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.139620][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.146915][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.154663][ T7655] bridge_slave_0: entered allmulticast mode [ 170.161174][ T7655] bridge_slave_0: entered promiscuous mode [ 170.167924][ T2410] bridge_slave_1: left allmulticast mode [ 170.173632][ T2410] bridge_slave_1: left promiscuous mode [ 170.179388][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.186816][ T2410] bridge_slave_0: left allmulticast mode [ 170.192502][ T2410] bridge_slave_0: left promiscuous mode [ 170.198132][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.223025][ T36] audit: type=1400 audit(1758123293.418:951): avc: denied { map } for pid=7661 comm="syz.5.2453" path="socket:[35398]" dev="sockfs" ino=35398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.247026][ T36] audit: type=1400 audit(1758123293.418:952): avc: denied { read } for pid=7661 comm="syz.5.2453" path="socket:[35398]" dev="sockfs" ino=35398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.274755][ T2410] tipc: Disabling bearer [ 170.311999][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.319081][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.326264][ T7655] bridge_slave_1: entered allmulticast mode [ 170.332677][ T7655] bridge_slave_1: entered promiscuous mode [ 170.355122][ T2410] tipc: Left network mode [ 170.360785][ T2410] veth1_macvtap: left promiscuous mode [ 170.446084][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.453201][ T7655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.460542][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.462214][ T36] audit: type=1326 audit(1758123293.658:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.5.2457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ff8eba9 code=0x0 [ 170.467620][ T7655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.515842][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.524677][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.534973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.542075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.552583][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.559647][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.586806][ T7655] veth0_vlan: entered promiscuous mode [ 170.598201][ T7655] veth1_macvtap: entered promiscuous mode [ 170.650783][ T7688] 9pnet_fd: Insufficient options for proto=fd [ 170.737488][ T7696] binder: Unknown parameter 'fscontext?}' [ 170.785807][ T36] audit: type=1400 audit(1758123293.978:954): avc: denied { read write } for pid=7699 comm="syz.4.2462" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.809378][ T36] audit: type=1400 audit(1758123293.978:955): avc: denied { open } for pid=7699 comm="syz.4.2462" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.937896][ T7721] rust_binder: Read failure Err(EAGAIN) in pid:17 [ 171.008049][ T7726] tipc: Started in network mode [ 171.020333][ T7726] tipc: Node identity 127a3a9e4239, cluster identity 4711 [ 171.031162][ T7726] tipc: Enabled bearer , priority 0 [ 171.044317][ T7726] tipc: Disabling bearer [ 171.076523][ T7733] fuseblk: Bad value for 'group_id' [ 171.081920][ T7733] fuseblk: Bad value for 'group_id' [ 171.157093][ T7735] incfs: Unexpected inode type [ 171.280581][ T7742] SELinux: failed to load policy [ 171.292825][ T7742] veth0_to_bridge: entered allmulticast mode [ 171.300449][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.522523][ T7757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 171.601676][ T463] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.751058][ T463] usb 5-1: Using ep0 maxpacket: 8 [ 171.757252][ T463] usb 5-1: config 9 has an invalid interface number: 241 but max is 2 [ 171.765469][ T463] usb 5-1: config 9 has an invalid interface number: 59 but max is 2 [ 171.773609][ T463] usb 5-1: config 9 has an invalid interface number: 113 but max is 2 [ 171.781806][ T463] usb 5-1: config 9 has no interface number 0 [ 171.787893][ T463] usb 5-1: config 9 has no interface number 1 [ 171.794014][ T463] usb 5-1: config 9 has no interface number 2 [ 171.800120][ T463] usb 5-1: config 9 interface 59 altsetting 13 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 171.811149][ T463] usb 5-1: config 9 interface 113 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 171.822181][ T463] usb 5-1: config 9 interface 113 altsetting 3 endpoint 0x5 has invalid maxpacket 2039, setting to 64 [ 171.833194][ T463] usb 5-1: config 9 interface 113 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 171.844121][ T463] usb 5-1: config 9 interface 113 altsetting 3 has an endpoint descriptor with address 0x65, changing to 0x5 [ 171.855760][ T463] usb 5-1: config 9 interface 113 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 171.866539][ T463] usb 5-1: config 9 interface 113 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 171.879640][ T463] usb 5-1: config 9 interface 241 has no altsetting 0 [ 171.886452][ T463] usb 5-1: config 9 interface 59 has no altsetting 0 [ 171.893199][ T463] usb 5-1: config 9 interface 113 has no altsetting 0 [ 171.901920][ T463] usb 5-1: New USB device found, idVendor=07b8, idProduct=3070, bcdDevice=ce.33 [ 171.911045][ T463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.919066][ T463] usb 5-1: Product: syz [ 171.923274][ T463] usb 5-1: Manufacturer: syz [ 171.927879][ T463] usb 5-1: SerialNumber: syz [ 172.134280][ T7747] binder: Bad value for 'defcontext' [ 172.148784][ T463] rndis_host 5-1:9.113: skipping garbage [ 172.154771][ T463] usb 5-1: bad CDC descriptors [ 172.165305][ T463] usb 5-1: USB disconnect, device number 3 [ 172.279429][ T7786] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 172.388171][ T7789] 9pnet_fd: Insufficient options for proto=fd [ 172.450335][ T7792] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2494'. [ 172.504518][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.511790][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.518939][ T7790] bridge_slave_0: entered allmulticast mode [ 172.526750][ T7790] bridge_slave_0: entered promiscuous mode [ 172.533687][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.540772][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.548097][ T7790] bridge_slave_1: entered allmulticast mode [ 172.554822][ T7790] bridge_slave_1: entered promiscuous mode [ 172.628073][ T7805] tmpfs: Bad value for 'nr_blocks' [ 172.667489][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.674692][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.682039][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.689078][ T7790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.716949][ T7818] fuse: Unknown parameter '00000000000000000000004' [ 172.734395][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.752966][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.778311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.785453][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.805070][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.812262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.849281][ T7830] SELinux: failed to load policy [ 172.860507][ T7790] veth0_vlan: entered promiscuous mode [ 172.868605][ T7830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2504'. [ 172.875793][ T7790] veth1_macvtap: entered promiscuous mode [ 172.930733][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2507'. [ 173.161033][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 173.311064][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 173.317570][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.326003][ T31] usb 3-1: config 6 has an invalid interface number: 232 but max is 0 [ 173.334360][ T31] usb 3-1: config 6 has no interface number 0 [ 173.340486][ T31] usb 3-1: config 6 interface 232 has no altsetting 0 [ 173.349305][ T31] usb 3-1: string descriptor 0 read error: -22 [ 173.355597][ T31] usb 3-1: New USB device found, idVendor=452e, idProduct=a3be, bcdDevice=d4.8d [ 173.364892][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.415204][ T31] usb-storage 3-1:6.232: USB Mass Storage device detected [ 173.533421][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.540565][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.547693][ T7847] bridge_slave_0: entered allmulticast mode [ 173.553928][ T7847] bridge_slave_0: entered promiscuous mode [ 173.560317][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.567375][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.574693][ T7847] bridge_slave_1: entered allmulticast mode [ 173.580960][ T7847] bridge_slave_1: entered promiscuous mode [ 173.614038][ T7841] rust_binder: Error while translating object. [ 173.614084][ T7841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.620330][ T7841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 173.630625][ T383] usb 3-1: USB disconnect, device number 22 [ 173.654605][ T12] bridge_slave_1: left allmulticast mode [ 173.660931][ T12] bridge_slave_1: left promiscuous mode [ 173.666805][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.674442][ T12] bridge_slave_0: left allmulticast mode [ 173.681010][ T12] bridge_slave_0: left promiscuous mode [ 173.686641][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.695800][ T7852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7852 comm=syz.5.2509 [ 173.716568][ T7852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7852 comm=syz.5.2509 [ 173.814809][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.822007][ T7847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.829333][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.836415][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.944425][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.962013][ T2410] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.969122][ T2410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.008013][ T7847] veth0_vlan: entered promiscuous mode [ 174.023414][ T7847] veth1_macvtap: entered promiscuous mode [ 174.037799][ T7873] rust_binder: 7872 RLIMIT_NICE not set [ 174.038115][ T7872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.044335][ T7872] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 174.057015][ T7872] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:47 [ 174.103604][ T7875] SELinux: policydb magic number 0x23b2dddf does not match expected magic number 0xf97cff8c [ 174.166427][ T7875] SELinux: failed to load policy [ 174.181485][ T7881] rust_binder: Got transaction with invalid offset. [ 174.181526][ T7881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.201134][ T7881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 174.243932][ T7888] netlink: 'syz.5.2518': attribute type 1 has an invalid length. [ 174.261721][ T7888] netlink: 'syz.5.2518': attribute type 1 has an invalid length. [ 174.722816][ T7905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.803775][ T7909] __vm_enough_memory: pid: 7909, comm: syz.2.2524, bytes: 18014402804453376 not enough memory for the allocation [ 174.811443][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 174.811461][ T36] audit: type=1326 audit(1758123297.998:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.5.2525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ff8eba9 code=0x0 [ 174.847398][ T7915] vcan0: entered allmulticast mode [ 174.851566][ T36] audit: type=1326 audit(1758123298.038:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.5.2525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ff8eba9 code=0x0 [ 174.936996][ T7927] loop7: detected capacity change from 0 to 7 [ 174.973264][ T36] audit: type=1400 audit(1758123298.168:963): avc: denied { lock } for pid=7923 comm="syz.5.2528" path="socket:[38173]" dev="sockfs" ino=38173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 174.997727][ T61] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.998340][ T7933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.006940][ T61] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.021928][ T7927] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.031169][ T7927] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.039265][ T7927] loop7: unable to read partition table [ 175.045095][ T7927] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 175.111851][ T7941] rust_binder: Write failure EFAULT in pid:31 [ 175.160538][ T7947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2536'. [ 175.203977][ T7953] rust_binder: Error while translating object. [ 175.204034][ T7953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 175.224587][ T7953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 175.241175][ T7954] rust_binder: 13: no such ref 2 [ 175.263176][ T7953] rust_binder: 13: no such ref 2 [ 175.379381][ T7959] bpf: Bad value for 'gid' [ 175.861037][ T463] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 176.022564][ T463] usb 1-1: Using ep0 maxpacket: 32 [ 176.029024][ T463] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.035775][ T8000] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.046732][ T463] usb 1-1: config 1 interface 0 has no altsetting 0 [ 176.062216][ T463] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.40 [ 176.073971][ T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.082269][ T463] usb 1-1: Product: 㖷翍ᑚ蔞셨芏ᘶ낫勇ȥ芭に荚ˮ஀욑낀걄羁￿䨒︧脝❡뭅䷓晟ᄁ䰖ꅄᦡ蓵搐Ꟑ웾뤋燹⪴輂ㅵ梄塅Џሀ쓕役襪燽嫟㍛덼︹픜涽ﱖ錀䂤텲䱤۞谭韅Ą㒨换틁賵膲澠꩜䡜숾젲꼁㦩 [ 176.109973][ T463] usb 1-1: Manufacturer: ｾ캺뗃痯퉗⹃㒣ぎ즴띳⎠ꋍ碧戢扛搩䔕夼ᓹ侯ꗿ䕕ڔશ鱜彺볭≻忁昧㣧䅹⁗๺쏺㤿о᱆ᖒ뀈⸣뺿䤍੪렼闭㱭콹잔뫤橻ᵾ꺜஛ꡃ䍵璛댾ᔘ鏤녃閩ꖀ깅ﻱ锇ᶭ食倁䱠鰐䉠헥ᑻ霪籰眓鰳摸韟싅 [ 176.139097][ T463] usb 1-1: SerialNumber: syz [ 176.328432][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2558'. [ 176.338004][ T8008] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 176.354243][ T8010] overlayfs: failed to clone upperpath [ 176.383183][ T36] audit: type=1400 audit(1758123299.578:964): avc: denied { map } for pid=8011 comm="syz.5.2560" path="pipe:[20509]" dev="pipefs" ino=20509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 176.594092][ T8027] FAT-fs (rnullb0): bogus number of reserved sectors [ 176.600818][ T8027] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 176.624683][ T8029] fuse: Bad value for 'fd' [ 177.024815][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2567'. [ 177.062352][ T463] usbhid 1-1:1.0: can't add hid device: -71 [ 177.068417][ T463] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 177.088640][ T463] usb 1-1: USB disconnect, device number 26 [ 177.117644][ T8041] PM: Enabling pm_trace changes system date and time during resume. [ 177.117644][ T8041] PM: Correct system time has to be restored manually after resume. [ 177.544195][ T8054] tmpfs: Unknown parameter '' [ 177.570900][ T8057] netlink: 'syz.5.2573': attribute type 4 has an invalid length. [ 177.588636][ T8057] netlink: 'syz.5.2573': attribute type 4 has an invalid length. [ 177.737994][ T36] audit: type=1400 audit(1758123300.928:965): avc: denied { mounton } for pid=8061 comm="syz.2.2575" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 177.738150][ T8063] incfs: Can't find or create .index dir in ./bus [ 177.772468][ T8062] incfs: Can't find or create .index dir in ./bus [ 177.779482][ T383] hid (null): global environment stack underflow [ 177.786082][ T8062] incfs: mount failed -1 [ 177.792170][ T383] hid (null): unknown global tag 0xe [ 177.795621][ T8063] incfs: mount failed -1 [ 177.798926][ T383] hid (null): unknown global tag 0xc5 [ 177.807350][ T383] hid (null): global environment stack underflow [ 177.816383][ T383] hid (null): global environment stack underflow [ 177.822866][ T383] hid (null): invalid report_count 49597 [ 177.823707][ T8067] rust_binder: Error while translating object. [ 177.828616][ T8067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.828650][ T383] hid (null): report_id 0 is invalid [ 177.835174][ T8067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 177.844445][ T383] hid (null): invalid report_size 53441 [ 177.865605][ T383] hid (null): report_id 1962096810 is invalid [ 177.871876][ T383] hid (null): unknown global tag 0xd [ 177.877345][ T383] hid (null): report_id 0 is invalid [ 177.882772][ T383] hid (null): unknown global tag 0xe [ 177.888191][ T383] hid (null): global environment stack underflow [ 177.894928][ T383] hid (null): unknown global tag 0xe [ 177.900341][ T383] hid (null): report_id 0 is invalid [ 177.905725][ T383] hid (null): report_id 742316737 is invalid [ 177.911915][ T383] hid (null): unknown global tag 0xc [ 177.917280][ T383] hid (null): unknown global tag 0xe8 [ 177.922748][ T383] hid (null): unknown global tag 0xc [ 177.928066][ T383] hid (null): report_id 0 is invalid [ 177.933480][ T383] hid (null): unknown global tag 0xc [ 177.938795][ T383] hid (null): unknown global tag 0xfb [ 177.944295][ T383] hid (null): report_id 0 is invalid [ 177.949594][ T383] hid (null): report_id 338 is invalid [ 177.955205][ T383] hid (null): report_id 0 is invalid [ 177.960874][ T383] hid (null): unknown global tag 0xd [ 177.970503][ T383] hid (null): unknown global tag 0xd [ 177.976386][ T383] hid (null): invalid report_size -949888277 [ 177.982564][ T383] hid (null): report_id 47010 is invalid [ 177.988294][ T383] hid (null): invalid report_count 2118321686 [ 177.994434][ T383] hid (null): unknown global tag 0x41 [ 178.000018][ T383] hid (null): unknown global tag 0xe [ 178.005571][ T383] hid (null): report_id 20706 is invalid [ 178.011736][ T383] hid (null): unknown global tag 0xe [ 178.017073][ T383] hid (null): report_id 65494 is invalid [ 178.025773][ T383] hid-generic 0007:0009:0000.000F: global environment stack underflow [ 178.034002][ T383] hid-generic 0007:0009:0000.000F: item 0 0 1 11 parsing failed [ 178.045533][ T383] hid-generic 0007:0009:0000.000F: probe with driver hid-generic failed with error -22 [ 178.087989][ T8073] binder: Binderfs stats mode cannot be changed during a remount [ 178.124742][ T8077] can0: slcan on ttyS3. [ 178.159769][ T8078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 178.185949][ T8088] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 178.185988][ T8087] rust_binder: Error while translating object. [ 178.205913][ T8088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 178.224217][ T8088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:41 [ 178.226592][ T8087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 178.256826][ T8087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:41 [ 178.296105][ T8093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.310660][ T8093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 178.330233][ T8105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.359367][ T8105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.371319][ T383] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 178.376507][ T8105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.406558][ T8114] rust_binder: Write failure EINVAL in pid:51 [ 178.424780][ T8116] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 178.430887][ T8116] rust_binder: Read failure Err(EFAULT) in pid:53 [ 178.441375][ T8118] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 178.447886][ T8118] rust_binder: Read failure Err(EFAULT) in pid:53 [ 178.473493][ T8120] tipc: Started in network mode [ 178.485063][ T8120] tipc: Node identity ac14142f, cluster identity 4711 [ 178.492329][ T8120] tipc: New replicast peer: 0.0.0.0 [ 178.498195][ T8120] tipc: Enabled bearer , priority 10 [ 178.505055][ T8120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.505084][ T8120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 178.516916][ T8125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.517790][ T8123] overlayfs: failed to clone upperpath [ 178.551311][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 178.557586][ T383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.570249][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 178.582393][ T383] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 178.594415][ T383] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.603921][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.612224][ T383] usb 3-1: Product: syz [ 178.616710][ T383] usb 3-1: Manufacturer: syz [ 178.622737][ T383] usb 3-1: SerialNumber: syz [ 178.633528][ T383] usb 3-1: config 0 descriptor?? [ 178.763242][ T36] audit: type=1400 audit(1758123301.958:966): avc: denied { append } for pid=8137 comm="syz.0.2595" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.823379][ T8140] SELinux: Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped). [ 178.826903][ T36] audit: type=1400 audit(1758123302.018:967): avc: denied { relabelfrom } for pid=8139 comm="syz.0.2596" name="AF_VSOCK" dev="sockfs" ino=39130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.859231][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.868900][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.879997][ T383] usb 3-1: USB disconnect, device number 23 [ 178.886328][ T36] audit: type=1400 audit(1758123302.038:968): avc: denied { relabelto } for pid=8139 comm="syz.0.2596" name="AF_VSOCK" dev="sockfs" ino=39130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="system_u:object_r:policy_src_t:s0" [ 179.012234][ T36] audit: type=1400 audit(1758123302.198:969): avc: denied { write } for pid=8144 comm="syz.0.2597" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.051547][ T8143] can0 (unregistered): slcan off ttyS3. [ 179.056848][ T36] audit: type=1400 audit(1758123302.198:970): avc: denied { remove_name } for pid=8144 comm="syz.0.2597" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.190946][ T8166] rust_binder: Write failure EFAULT in pid:78 [ 179.218878][ T8173] can0: slcan on ttyS3. [ 179.448248][ T8208] binder: Unknown parameter 'hash' [ 179.450325][ T8206] binder: Unknown parameter 'defcontext01777777777777777777777' [ 179.483972][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.543586][ T8217] tipc: Started in network mode [ 179.550700][ T8217] tipc: Node identity 4a390f54a817, cluster identity 4711 [ 179.560551][ T8217] tipc: Enabled bearer , priority 0 [ 179.581687][ T8217] tipc: Disabling bearer [ 179.611051][ T10] tipc: Node number set to 2886997039 [ 179.651182][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 179.658174][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.678727][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 179.690175][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.699490][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.723171][ T9] usb 5-1: Product: syz [ 179.728799][ T9] usb 5-1: Manufacturer: syz [ 179.741832][ T9] usb 5-1: SerialNumber: syz [ 179.755051][ T9] usb 5-1: config 0 descriptor?? [ 179.832947][ T8267] rust_binder: 90: no such ref 3 [ 179.835810][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 179.835828][ T36] audit: type=1400 audit(1758123303.028:974): avc: denied { setattr } for pid=8266 comm="syz.5.2619" path="pipe:[39938]" dev="pipefs" ino=39938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 179.837946][ T8267] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 179.837963][ T8267] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 179.892123][ T8267] rust_binder: Write failure EFAULT in pid:90 [ 179.935013][ T8277] rust_binder: validate_parent_fixup: new_min_offset=45, sg_entry.length=0 [ 179.944853][ T8277] rust_binder: Error while translating object. [ 179.970632][ T9] usb 5-1: USB disconnect, device number 4 [ 179.970838][ T8277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.994938][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2624'. [ 180.002981][ T8173] can0 (unregistered): slcan off ttyS3. [ 180.012271][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2624'. [ 180.021271][ T8277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 180.076558][ T8296] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 180.309237][ T383] rust_binder: 8320: removing orphan mapping 0:24 [ 180.342084][ T8334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 180.427100][ T8339] input: syz0 as /devices/virtual/input/input17 [ 180.555186][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'. [ 180.591043][ T383] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 180.721994][ T8364] netlink: 203 bytes leftover after parsing attributes in process `syz.4.2643'. [ 180.741031][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 180.871978][ T383] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 181.031037][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 181.041100][ T383] usb usb1-port1: attempt power cycle [ 181.131032][ T9] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 181.223681][ T8409] tipc: Started in network mode [ 181.228758][ T8409] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 181.237969][ T8409] tipc: Enabling of bearer rejected, failed to enable media [ 181.282282][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 181.291591][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.300274][ T9] usb 3-1: config 0 descriptor?? [ 181.392414][ T383] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 181.411786][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 181.443132][ T8435] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 181.468459][ T36] audit: type=1326 audit(1758123304.658:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.5.2667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ff8eba9 code=0x0 [ 181.551038][ T383] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 181.571442][ T383] usb 1-1: Invalid ep0 maxpacket: 64 [ 181.576921][ T383] usb usb1-port1: unable to enumerate USB device [ 181.844284][ T8441] can0: slcan on ttyS3. [ 181.997301][ T36] audit: type=1400 audit(1758123305.188:976): avc: denied { read } for pid=8455 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 182.101018][ T463] usb 5-1: new high-speed USB device number 5 using dummy_hcd Stopping sshd: [ 182.261011][ T463] usb 5-1: Using ep0 maxpacket: 16 stopped /usr/sbi[ 182.267556][ T463] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config n/sshd (pid 201) OK [ 182.288873][ T463] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 182.302455][ T463] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.311641][ T463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.319902][ T463] usb 5-1: Product: syz [ 182.324311][ T463] usb 5-1: Manufacturer: syz [ 182.328961][ T463] usb 5-1: SerialNumber: syz [ 182.335319][ T463] usb 5-1: config 0 descriptor?? Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 182.557688][ T463] usb 5-1: USB disconnect, device number 5 [ 182.580522][ T36] audit: type=1400 audit(1758123305.768:977): avc: denied { read write } for pid=8493 comm="ip" path="/dev/console" dev="rootfs" ino=1133 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 182.666478][ T8441] can0 (unregistered): slcan off ttyS3. OK Stopping iptable[ 182.719091][ T36] audit: type=1400 audit(1758123305.908:978): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 s: [ 182.746935][ T36] audit: type=1400 audit(1758123305.948:979): avc: denied { read write } for pid=8504 comm="iptables" path="/dev/console" dev="rootfs" ino=1133 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping system message bus: [ 182.787462][ T36] audit: type=1400 audit(1758123305.948:980): avc: denied { search } for pid=8504 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.809448][ T36] audit: type=1400 audit(1758123305.948:981): avc: denied { write } for pid=8504 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.831820][ T8508] overlay: ./file0 is not a directory [ 182.837410][ T36] audit: type=1400 audit(1758123305.948:982): avc: denied { add_name } for pid=8504 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.838012][ T8508] overlay: ./file0 is not a directory [ 182.864728][ T36] audit: type=1400 audit(1758123305.948:983): avc: denied { create } for pid=8504 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 182.949788][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. killall: can't kill pid 8038: No such process Stopping klogd: OK Stopping acpid: [ 183.268513][ T8542] rust_binder: 133: no such ref 3 [ 183.319598][ T8544] TCP: TCP_TX_DELAY enabled [ 183.325202][ T8544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 183.408029][ T8550] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 183.425647][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 183.441031][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 183.453314][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 183.461792][ T9] usb 3-1: USB disconnect, device number 24 [ 183.494130][ T8558] netlink: 'syz.5.2690': attribute type 28 has an invalid length. [ 183.952522][ T8575] fuse: Unknown parameter 'gro܆ry0(up_id' [ 183.965333][ T8575] overlay: ./file0 is not a directory [ 183.965740][ T8577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 183.970790][ T8577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:148 [ 184.008805][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 184.117930][ T8596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.119649][ T8596] rust_binder: Read failure Err(EAGAIN) in pid:163 [ 184.126553][ T8596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } OK [ 184.133130][ T8596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 184.167332][ T8598] can0: slcan on ttyS3. Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only [ 184.397934][ T8630] rust_binder: BINDER_SET_CONTEXT_MGR already set umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 184.398064][ T8630] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false The system is g[ 184.431036][ T339] usb 5-1: new high-speed USB device number 6 using dummy_hcd oing down NOW! Connection to 10.128.1.108 closed by remote host. Sent SIGTERM to all processes [ 184.632730][ T330] bridge_slave_1: left allmulticast mode [ 184.638416][ T330] bridge_slave_1: left promiscuous mode [ 184.644111][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.651769][ T330] bridge_slave_0: left allmulticast mode [ 184.657432][ T330] bridge_slave_0: left promiscuous mode [ 184.663180][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.773030][ T330] tipc: Disabling bearer [ 184.778356][ T330] tipc: Left network mode [ 184.783442][ T330] veth1_macvtap: left promiscuous mode [ 184.788937][ T330] veth0_vlan: left promiscuous mode [ 184.794818][ T8598] can0 (unregistered): slcan off ttyS3. [ 185.072805][ T330] bridge_slave_1: left allmulticast mode [ 185.078465][ T330] bridge_slave_1: left promiscuous mode [ 185.084106][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.091556][ T330] bridge_slave_0: left allmulticast mode [ 185.097204][ T330] bridge_slave_0: left promiscuous mode [ 185.102880][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.110496][ T330] bridge_slave_1: left allmulticast mode [ 185.116160][ T330] bridge_slave_1: left promiscuous mode [ 185.121770][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.129217][ T330] bridge_slave_0: left allmulticast mode [ 185.134901][ T330] bridge_slave_0: left promiscuous mode [ 185.140516][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.353241][ T330] tipc: Left network mode [ 185.357914][ T330] tipc: Left network mode [ 185.363629][ T330] veth1_macvtap: left promiscuous mode [ 185.369121][ T330] veth0_vlan: left promiscuous mode [ 185.374647][ T330] veth1_macvtap: left promiscuous mode [ 185.380154][ T330] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 186.558269][ T8636] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 186.565302][ T8636] ACPI: PM: Preparing to enter system sleep state S5 [ 186.572154][ T8636] kvm: exiting hardware virtualization [ 186.577627][ T8636] reboot: Power down serialport: VM disconnected.