last executing test programs: 1m20.132247284s ago: executing program 1 (id=822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x0, 0x2) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x9c, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 1m19.248331001s ago: executing program 1 (id=841): prctl$PR_SET_TSC(0x1a, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) (async) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a007) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r8}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) 1m19.071808586s ago: executing program 1 (id=847): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 1m19.058990827s ago: executing program 1 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m19.041281858s ago: executing program 1 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) r3 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) fcntl$dupfd(r3, 0x404, r3) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @random="98a122c7ff0f"}) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) (async, rerun: 64) r6 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') move_mount(r7, &(0x7f0000000280)='./cgroup\x00', r7, &(0x7f00000002c0)='./cgroup\x00', 0x1) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x2, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0xfc, 0xa, [0x4000000, 0xff]}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.856695844s ago: executing program 1 (id=850): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) (async) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) 1m18.856484324s ago: executing program 32 (id=850): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) (async) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) 3.778734543s ago: executing program 4 (id=1969): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xbc, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/211, 0xd3, 0x2, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/184, 0xb8, 0x0, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/63, 0x3f, 0x2, 0x32}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x2}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/23, 0x17, 0x0, 0x39}, @fda={0x66646185, 0x7, 0x0, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/161, 0xa1, 0x1, 0x15}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}, @increfs={0x40046304, 0x2}, @request_death], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket(0xa, 0x2400000001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 3.770252454s ago: executing program 4 (id=1970): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0) fstatfs(r3, &(0x7f0000000300)=""/219) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 3.696663371s ago: executing program 4 (id=1971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) setuid(0xee00) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) syz_io_uring_setup(0x171c, &(0x7f0000000080)={0x0, 0x3f21, 0x800, 0x2, 0x213, 0x0, r1}, 0x0, 0x0) getpgrp(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) 3.692521121s ago: executing program 4 (id=1972): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x800, &(0x7f0000000440)=0x0) r7 = eventfd(0x0) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r7, 0x0, 0x4f}]) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05"], 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) write(r3, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) 1.85572465s ago: executing program 3 (id=1997): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 1.804509104s ago: executing program 3 (id=1998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x2, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@generic="579d06ab3d77bdea0c5872b296a14470992a821be6ffdbf32c5366d1e30fbdf4979f70e209020724c90325a8f94f1c8d11dd08335526a4f561b8df1fc39ae9311177a9ba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f9219f29924203db97abdd9640c62b8"]}]}, 0x24}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/191, 0x1028000, 0x1000, 0x8001, 0x1}, 0x20) sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) r3 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) close(r2) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0xdddd0004, 0xeeee0000, 0x7f, 0xf7, 0xf8}) syz_usb_control_io(r3, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) read(r2, &(0x7f0000001400)=""/255, 0xff) 1.587248932s ago: executing program 2 (id=2000): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x1, 0x80, 0x5, 0x20000004, 0x80000003f7, 0x0, 0x80000000000, 0x81, 0x9c1, 0x8001, 0x100000001015, 0x5, 0x3d4, 0x5, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7c3c3b592a40f01f, &(0x7f0000000440)={[{@index_on}, {@xino_auto}, {@xino_off}, {@default_permissions}, {@metacopy_off}, {@uuid_auto}, {@nfs_export_on}, {@nfs_export_on}, {@nfs_export_on}, {@verity_off}], [{@fsmagic={'fsmagic', 0x3d, 0xbee0}}, {@dont_measure}, {@appraise}]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000000)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x6}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000000)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x2, 0xe}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x20, 0x40}}}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000006c0)={0x0, {}, 0x0, {}, 0x9e, 0x4, 0x4, 0x4, "2f40db2151650b22746b6939843c057efcc4bf8ec9c96faf2bb6bba80477ea2a9cc34461ea9872dbdf9aa52124dde80d8ed4b48cdc6f4b82b3bd0ded65752446", "909ca0def06e14e7f32de00aecc92fca5b4e2a27a7083196f5e6fe7369a94373", [0x7, 0x9]}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x4000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) 1.456334324s ago: executing program 2 (id=2001): sched_setscheduler(0x0, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8170081"], 0x27) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02033e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) write(r7, &(0x7f0000000400)="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", 0xfffffcf1) 1.455519524s ago: executing program 2 (id=2002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r0, 0x3000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r2, 0xc040128b, &(0x7f0000000240)={&(0x7f0000000180)="e04aab6b58ed89b244e333e3b6aa1e7222a7c99d51cad07b077cf54610f652700ed85090fc5a313abd84f8861379717fe91eea3b8b35ebec6d53838eec871e2eb5409639d3a7cf1e97b2f4de0c5ea8675b11dd937007e53df187739bbe9d1a53d64e84a3c8f7b8b14ea4b76391435505", 0x70, &(0x7f0000000200)=""/38, 0x26}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r4], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.327994975s ago: executing program 3 (id=2003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)="3a75cc6b6a795659d577b92fcc45bfbd431c4083c1c8aa0dd7bacd20d760cc709716b2a28809bbb8c276a2cdfae61d84cb0fbeb4ea772dba622314de4e2305769c5990a99e3405afb466c73731a33d07e99dd1abe7a92314f85c333a1f02133b09134ad04406a2", 0x67}, {&(0x7f0000000280)="cd1001d6c6eb5b6225cafb6850426647ff75f9ff33af3ab01d4657e694ef9feb8490f2f5b66eedf5a81a5d8ed9020351b174cc4038a1335505edf34fce30f18a1eeadf8377b085cd92c5711a107296111a1ba229916e72e1f89b1fa2060cfbc3470074b65b4fe169026a302e131174f1c41e3543e4729e11cd58c374bd3b14cc5978c93f0beabc431933be0c12f3a47d42641ef3f713955d2a3d747a637d54972992b00bbca3bb116e86e50b151119ee8ca343a1ec2b7847eaa2649cdc2136b59b58f789cc56819be466959332d44f23ee78ded0ce62770475728d5efd36ae3bc60a71838f0c6780ccaa409135acca841e4a", 0xf2}, {&(0x7f0000000380)}, {&(0x7f0000001400)="c080f12f436781a9fe883b2a7c9f0ddbae6d48c2cc80cc4815b56c5ea014b8c4c0a77fb29c9392d47e5d39b49a6dbcee11688a8aa4a6997f3feab4ebb3adf43282a96f7a0f15", 0x46}, {&(0x7f0000001480)="8ce15092592b97b2ce47e07bb479f20e4449086a73d719ad4a8b31a5cc0781ccd2724fcb82901b3575fd6ecfc969b3f23529260bd1d6cfd9b074db7ec3e0be2be7da1d8cddd1817d17223d1a896e669c283650d4957a399373", 0x59}], 0x5, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x60}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x4000000) mprotect(&(0x7f0000575000/0x3000)=nil, 0x3000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r6, &(0x7f0000000400)="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", 0x1f000) 1.259352051s ago: executing program 3 (id=2004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) r1 = userfaultfd(0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x10000, 0x3, 0xad, 0xf, 0x41, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x4000, 0x3, 0x0, 0x40, 0x9, 0x80, 0xcb, 0x5, 0x6, 0x3, 0x2}, {0x80a0000, 0x1000, 0x0, 0x9, 0x1, 0x2, 0x8, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x0, 0xa, 0xe7, 0x2, 0x13, 0x4, 0x4, 0x8, 0x7, 0x5, 0xf1}, {0xeeee8000, 0x2000, 0xd, 0xf7, 0x5, 0x88, 0xa, 0x6, 0x2, 0x0, 0xf7}, {0xeeee0000, 0xdddd1000, 0x3, 0x7, 0x7, 0xc, 0x4, 0x40, 0x80, 0xc, 0x1, 0x1}, {0x2000, 0x100000, 0x3, 0x7, 0xce, 0x3, 0x1, 0x3, 0xf6, 0x80, 0x3, 0x6}, {0x8000000, 0x1, 0x9, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0x4, 0x1}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x1, 0x800, 0x3000, [0x5, 0x5, 0x15e, 0x2]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x79, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 920.530861ms ago: executing program 0 (id=2015): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x20a00, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x11000a8, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) (async, rerun: 32) r2 = open(&(0x7f0000000100)='./file0\x00', 0x400c00, 0x0) (rerun: 32) mknodat$loop(r2, 0x0, 0x800, 0x1) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 920.06062ms ago: executing program 0 (id=2016): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x501102) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 907.935711ms ago: executing program 0 (id=2017): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 897.359162ms ago: executing program 0 (id=2018): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r3, &(0x7f0000000400)="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", 0x1f000) 704.559869ms ago: executing program 3 (id=2019): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f03", 0x2, 0x10, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @random="61e4b3a6212f"}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 704.103669ms ago: executing program 3 (id=2020): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xffff0001, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc02063a1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x81, 0x7fc00000}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000007c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x22020600) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000340)=@dstopts={0x0, 0x10, '\x00', [@generic={0x3, 0x77, "5491662d0f8c7e8b67bb2fee9339ff955aa29f986a2994adc493e0e3d5e6363b32de9dc84656277758b55470d7d2ce9482b05e9006b8ab3b27fcad07ebdf9abc1225c89525bb4db8a5f0ee43f5bdb686997ffe40d166a8098ad50c2865ed23ea5aa19ef8ed3620d92f515bd1afcbfe3cfe2a3635f97ffb"}, @jumbo={0xc2, 0x4, 0xa}, @ra]}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x6b3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) 635.030285ms ago: executing program 4 (id=2021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect$cdc_ncm(0x4, 0x67, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab2a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x8, 0xa9}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x79, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x0, 0x23}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x9, 0x9}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 549.504112ms ago: executing program 0 (id=2022): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) fchdir(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/247, 0xf7, 0x40002100, &(0x7f0000000180)=@x25, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000240)="47f4f6448473d15326156baf45cefdb826c6400043104182d5ae7f3512b5fa27a247b46d012cdbf3fc4d8a33e75d35d0e3b345cc2cccc188fe4d9f51e9966e350c8a843785a58f2e5ff32564f2443f63ab393863ed42e2f8afc622cb8b318bb21e9d814e67e92e68aca26d0637a0d598c5690e278bae52cc47e25200809304d2c228fb7518c77441b753eada3af342822ea01f1e09f0a28de25d2d21062dc591213b756de22ba0cccc2b00b0847b43d2ded9ddcab50720da22beb316f66767498949dd689b0fbf0ab0", 0xc9, 0x20000004, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000380)=0x1, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = dup3(r1, r1, 0x0) fchmod(r2, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xac, 0x14, 0x14, 0x2b}, 0xc, 0x19}}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) tee(r2, 0xffffffffffffffff, 0x4, 0x5) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x0, 0x11, 0x6e, {0x6e, 0x21, "74e0b5b9c810bf730a0e7413798e2cf777d28f4c7a31f04b9a55c7600643102339ceec1c318e1401a219913732eb09f4e6b20f4a71def5f07e995874439a3846c8665554f0c98ce4d6905529262de04097c2719cb57d6afc1289f909489e9eb5ef49388820863272ee29eca8"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x20, 0xd, 0xa9, "478168d44a34db36eb62aed281817173681cc0fe8fd8bd318de64937d751bf84d65161706c999e5334b3f5f84b4c8517673d131b0d976c3a275f3bd805968e50d75c2ec60116dbf920dbc5b2a2a94d8f7a402a7c61e0662004c8aa1fed30b88357831f99afbe5f0a72b2d91f4a7f5bdb49bd46548e98d39ca845b44c2b0000fcf64bde2e00b3a194afe5c9ee1bc331b3e88ee13116f39093e9a55b56f21ca02b15a1d90aaf686de5b5"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xd}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vxcan0\x00', 0x0}) fcntl$setown(r1, 0x8, 0x0) r5 = socket(0x25, 0x80006, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000a40)=@nullb, r7, &(0x7f0000000b40)={0x5, 0x7, 0x0, 0x6}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000b80)="03d85abbac486d926b372a2193e9f0a3fa8279c268849aa9262a5fef90675678972f47934ac37357f8914aaf4803ad27774a9c3f4ab453e4f86558f98048859afd58ef23e17bba65e75b0fe65c3e57eb3fa375893d650e87d3e37e03d81a1feaa043b70a5c3ed4039d74458f05ec49555866e86e72bb71db623dff9dcdb092d19df3aec316f5cf3294be4942fca1fb560eb889589372b53d98b7aaa1872a692c8571b9b228d934b711c03815b7c4b82271f0a29f1ec1cba64a11b90a21e82599196f4c249f456679cdaff5c1e837bbc650d05093c97ac624ea4e418061bc6eb38fe5c92863d4c56cc87ea668c6f30ede0630d0f7a42d3f76de96e1ba4875e5e8") setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000c80), 0x4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000cc0), &(0x7f0000000d00)={0x0, 0xfb, 0x19, 0x4, 0xc, "9688d18742fa83cc79d70a09c2d99a8a", "63d162b8"}, 0x19, 0x0) 212.483512ms ago: executing program 2 (id=2023): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 86.443272ms ago: executing program 2 (id=2024): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000080), 0x100808, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) 56.915735ms ago: executing program 2 (id=2025): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x40400, 0x8a) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000100)=0x9) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x0, 0xa3, 0x100000001, 0x2, 0x3e, 0xefd7, 0x2e6, 0x38, 0x20f, 0x3, 0x4, 0x20, 0x3, 0x0, 0x2, 0x9}, [{0x2, 0x6, 0x10000, 0x6, 0x76b, 0xffff7fff, 0x9, 0x371a}, {0x5, 0x2, 0x2c78, 0x85, 0x0, 0x101, 0x4d}, {0x1, 0x2, 0x9, 0xffff16e2, 0x1, 0x6, 0x5}], "1fe231dd193b5ccec082bdea6c7d3dfd78b47121bc641071a896e650a461d300acfcb3b7b3b22605671f638f91add39c261dba7841d216f0dbec1e2fa6eb550a1cbb6fef72a1c230d4697ff1ac129895179ef9b5596fad3b1a66f6d67b96f77aa463b20bff202363014f0ab428fbee3a509e1d0f1cb62d34f71b18f3dd0aa666c9583829720ff0fb7fbdc469527f70e2dd2223053e0f0e839472f9707f5f5e578207e1d684f277b075018319f34725fda17166046c224c8576aa99e9f1dbc516fbbb36fe0c4e69519802cf232e3cdea2c3939d300b6db9f26a6949e033f8e0f4706b2e18ed86d902f63562532deb92eff47a19e690eedebca1", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x691) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 8.523739ms ago: executing program 4 (id=2026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2027): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, &(0x7f0000001140)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x80106725, &(0x7f00000000c0)) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r3, 0x1fe, 0x7ffc, 0x3) kernel console output (not intermixed with test programs): 1] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 81.507177][ T36] audit: type=1400 audit(81.479:516): avc: denied { mount } for pid=2428 comm="syz.0.671" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 81.529657][ T36] audit: type=1400 audit(81.509:517): avc: denied { map } for pid=2425 comm="syz.1.670" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 81.533332][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 81.688875][ T65] usb 4-1: device descriptor read/64, error -71 [ 81.716470][ T2447] fuse: Bad value for 'fd' [ 81.740628][ T2455] netlink: 'syz.2.679': attribute type 13 has an invalid length. [ 81.928845][ T65] usb 4-1: device descriptor read/64, error -71 [ 82.038896][ T65] usb usb4-port1: attempt power cycle [ 82.112588][ T2465] netlink: 172 bytes leftover after parsing attributes in process `syz.0.684'. [ 82.131365][ T36] audit: type=1400 audit(82.099:518): avc: denied { ioctl } for pid=2466 comm="syz.0.685" path="socket:[17214]" dev="sockfs" ino=17214 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.300100][ T2479] overlayfs: failed to clone upperpath [ 82.319953][ T2481] tipc: Started in network mode [ 82.324992][ T2481] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.334121][ T2481] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 82.342420][ T2481] tipc: Enabled bearer , priority 10 [ 82.373100][ T36] audit: type=1400 audit(82.349:519): avc: denied { read write } for pid=2491 comm="syz.1.694" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.378841][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 82.395924][ T36] audit: type=1400 audit(82.349:520): avc: denied { open } for pid=2491 comm="syz.1.694" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.419833][ T65] usb 4-1: device descriptor read/8, error -71 [ 82.559813][ T65] usb 4-1: device descriptor read/8, error -71 [ 82.618836][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 82.768845][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 82.775045][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.783417][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.792028][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.800995][ T65] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 82.808573][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.818254][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.827927][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.840951][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.850025][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.859284][ T65] usb 4-1: device descriptor read/8, error -71 [ 82.870050][ T9] usb 2-1: config 0 descriptor?? [ 82.872057][ T406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=406 comm=kworker/1:3 [ 82.888405][ T10] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 [ 82.977720][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 82.977736][ T36] audit: type=1400 audit(82.949:541): avc: denied { read } for pid=2511 comm="syz.3.701" name="binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.979375][ T2512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.984004][ T36] audit: type=1400 audit(82.949:542): avc: denied { open } for pid=2511 comm="syz.3.701" path="/dev/binderfs/binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.006274][ T65] usb 4-1: device descriptor read/8, error -71 [ 83.012629][ T36] audit: type=1400 audit(82.959:543): avc: denied { ioctl } for pid=2511 comm="syz.3.701" path="/dev/binderfs/binder1" dev="binder" ino=24 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.074407][ T2512] rust_binder: 450: no such ref 1 [ 83.075754][ T36] audit: type=1400 audit(83.019:544): avc: denied { map } for pid=2511 comm="syz.3.701" path="/dev/binderfs/binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.087173][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.105498][ T36] audit: type=1400 audit(83.019:545): avc: denied { read } for pid=2511 comm="syz.3.701" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.120905][ T9] usb 2-1: USB disconnect, device number 27 [ 83.135913][ T36] audit: type=1400 audit(83.019:546): avc: denied { open } for pid=2511 comm="syz.3.701" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.143193][ T9] usblp0: removed [ 83.166818][ T36] audit: type=1400 audit(83.019:547): avc: denied { ioctl } for pid=2511 comm="syz.3.701" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.169066][ T65] usb usb4-port1: unable to enumerate USB device [ 83.191055][ T36] audit: type=1400 audit(83.049:548): avc: denied { write } for pid=2511 comm="syz.3.701" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.219238][ T36] audit: type=1400 audit(83.059:549): avc: denied { call } for pid=2511 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 83.237265][ T36] audit: type=1400 audit(83.079:550): avc: denied { mount } for pid=2513 comm="syz.0.702" name="/" dev="ramfs" ino=17300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.359258][ T406] tipc: Node number set to 1 [ 83.508821][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 83.658819][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 83.665017][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.673386][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.681997][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.690949][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.700602][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.710574][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.713805][ T2520] 9pnet_fd: Insufficient options for proto=fd [ 83.723573][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.738665][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.749018][ T9] usb 2-1: config 0 descriptor?? [ 83.799252][ T2527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 83.959322][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.035698][ T2552] rust_binder: Write failure EFAULT in pid:464 [ 84.278845][ T573] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 84.438814][ T573] usb 4-1: Using ep0 maxpacket: 32 [ 84.445044][ T573] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.455954][ T573] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.462577][ T573] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 84.471608][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.480093][ T573] usb 4-1: config 0 descriptor?? [ 84.888505][ T573] lg-g15 0003:046D:C225.000B: hidraw0: USB HID vb.27 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 85.089163][ T573] usb 4-1: USB disconnect, device number 27 [ 85.368075][ T573] usb 2-1: USB disconnect, device number 28 [ 85.375317][ T573] usblp0: removed [ 85.382046][ T2568] random: crng reseeded on system resumption [ 85.543093][ T2577] devpts: called with bogus options [ 85.768992][ T573] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 85.808707][ T2597] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 85.816517][ T2597] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.731'. [ 85.859543][ T2603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.860543][ T2604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 85.866995][ T2604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:485 [ 85.892068][ T2607] input: syz0 as /devices/virtual/input/input10 [ 85.908850][ T573] usb 2-1: device descriptor read/64, error -71 [ 85.950840][ T2615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 85.958073][ T2617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.019765][ T2618] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 86.026256][ T2618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 86.034173][ T2618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:499 [ 86.148872][ T573] usb 2-1: device descriptor read/64, error -71 [ 86.178572][ T2635] tipc: Enabling of bearer rejected, failed to enable media [ 86.398874][ T573] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 86.528823][ T573] usb 2-1: device descriptor read/64, error -71 [ 86.696718][ T2639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 86.768851][ T573] usb 2-1: device descriptor read/64, error -71 [ 86.878900][ T573] usb usb2-port1: attempt power cycle [ 87.124619][ T2665] fuse: Bad value for 'user_id' [ 87.129509][ T2665] fuse: Bad value for 'user_id' [ 87.228835][ T573] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 87.249796][ T573] usb 2-1: device descriptor read/8, error -71 [ 87.389857][ T573] usb 2-1: device descriptor read/8, error -71 [ 87.488823][ T65] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 87.638848][ T573] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 87.639919][ T65] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 87.656611][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.659872][ T573] usb 2-1: device descriptor read/8, error -71 [ 87.666208][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 87.680678][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.688689][ T65] usb 4-1: SerialNumber: syz [ 87.694843][ T65] usb 4-1: 0:2 : does not exist [ 87.699783][ T65] usb 4-1: unit 7 not found! [ 87.799805][ T573] usb 2-1: device descriptor read/8, error -71 [ 87.908930][ T573] usb usb2-port1: unable to enumerate USB device [ 88.188361][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 88.188377][ T36] audit: type=1400 audit(88.159:619): avc: denied { execute } for pid=2693 comm="syz.2.766" path="/189/net_prio.prioidx" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.218300][ T36] audit: type=1400 audit(88.159:620): avc: denied { ioctl } for pid=2693 comm="syz.2.766" path="socket:[18285]" dev="sockfs" ino=18285 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.253241][ T2675] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 88.259309][ T36] audit: type=1400 audit(88.229:621): avc: denied { create } for pid=2697 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.260500][ T2675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 88.292487][ T36] audit: type=1400 audit(88.259:622): avc: denied { sys_admin } for pid=2697 comm="syz.2.768" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.298191][ T2708] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 88.301788][ T36] audit: type=1400 audit(88.259:623): avc: denied { mounton } for pid=2697 comm="syz.2.768" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 88.349993][ T36] audit: type=1400 audit(88.259:624): avc: denied { mount } for pid=2697 comm="syz.2.768" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.476100][ T2719] rust_binder: 397: no such ref 1 [ 89.023705][ T36] audit: type=1400 audit(88.999:625): avc: denied { ioctl } for pid=2727 comm="syz.2.778" path="socket:[18325]" dev="sockfs" ino=18325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.048551][ T36] audit: type=1400 audit(89.009:626): avc: denied { getopt } for pid=2727 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.226604][ T36] audit: type=1400 audit(89.199:627): avc: denied { write } for pid=2729 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.373856][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.583423][ T36] audit: type=1400 audit(89.559:628): avc: denied { create } for pid=2753 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.610661][ T2754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2754 comm=syz.2.788 [ 89.819565][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 89.837639][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 89.850921][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 89.864205][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 89.886494][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 89.899459][ T2762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=2762 comm=syz.2.791 [ 90.104874][ T2781] fuse: Bad value for 'fd' [ 90.252656][ T65] usb 4-1: USB disconnect, device number 28 [ 90.290179][ T2784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.290336][ T2783] rust_binder: Error while translating object. [ 90.296808][ T2783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 90.303002][ T2783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:519 [ 90.318898][ T2786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.328105][ T2787] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 90.334545][ T2787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.342502][ T2787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:522 [ 90.501709][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.510900][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.517314][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.523779][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.530217][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.536661][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.543213][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.549685][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.556131][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.562702][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.569184][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.575613][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.582089][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.588569][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.595034][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.601514][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.607954][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.614467][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.621814][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.628279][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.634753][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.641249][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.647725][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.654208][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.660692][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.667179][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.674715][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.681185][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.687724][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.694411][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.700912][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.707630][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.714501][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.721584][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.729870][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.736356][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.742838][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.749450][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.755855][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.762332][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.770062][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.778069][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.785089][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.791712][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.798230][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.804743][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.811235][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.817729][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.825203][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.831786][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.838316][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.844962][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.851578][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.858029][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.864709][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.871270][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.877773][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.884415][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.891029][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.897484][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.904199][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.910765][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.917307][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.923937][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.930604][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.937070][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.966556][ T2823] rust_binder: Write failure EFAULT in pid:538 [ 90.969148][ T2821] netlink: 'syz.0.813': attribute type 12 has an invalid length. [ 90.987205][ T331] Bluetooth: hci1: Frame reassembly failed (-84) [ 91.438835][ T2826] Bluetooth: hci0: command 0x1003 tx timeout [ 91.438833][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.536718][ T2857] vcan0: entered allmulticast mode [ 91.567312][ T2868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 91.637717][ T2872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2872 comm=syz.0.832 [ 91.651992][ T2872] 9pnet_fd: Insufficient options for proto=fd [ 92.297011][ T2901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 92.309501][ T2901] netlink: 596 bytes leftover after parsing attributes in process `syz.0.840'. [ 92.535957][ T2919] rust_binder: Write failure EFAULT in pid:419 [ 92.680494][ T329] bridge_slave_1: left allmulticast mode [ 92.692364][ T329] bridge_slave_1: left promiscuous mode [ 92.697974][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.706216][ T329] bridge_slave_0: left allmulticast mode [ 92.711958][ T329] bridge_slave_0: left promiscuous mode [ 92.717616][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.825377][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.832467][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.839669][ T2926] bridge_slave_0: entered allmulticast mode [ 92.845810][ T2926] bridge_slave_0: entered promiscuous mode [ 92.852142][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.859197][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.866251][ T2926] bridge_slave_1: entered allmulticast mode [ 92.872496][ T2926] bridge_slave_1: entered promiscuous mode [ 92.893237][ T329] tipc: Disabling bearer [ 92.898603][ T329] tipc: Left network mode [ 92.904648][ T329] veth1_macvtap: left promiscuous mode [ 92.910236][ T329] veth0_vlan: left promiscuous mode [ 92.963280][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.970380][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.977632][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.984666][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.006020][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.027934][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.035011][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.043447][ T721] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 93.049564][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 93.078324][ T2950] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.079472][ T2950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:543 [ 93.086275][ T2926] veth0_vlan: entered promiscuous mode [ 93.107306][ T2926] veth1_macvtap: entered promiscuous mode [ 93.109873][ T2954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.252811][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 93.252829][ T36] audit: type=1400 audit(6555220202.304:676): avc: denied { connect } for pid=2964 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.311690][ T36] audit: type=1400 audit(6555220202.334:677): avc: denied { write } for pid=2964 comm="syz.2.861" path="socket:[19837]" dev="sockfs" ino=19837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.535927][ T36] audit: type=1400 audit(6555220202.584:678): avc: denied { remount } for pid=3009 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.555664][ T36] audit: type=1400 audit(6555220202.594:679): avc: denied { create } for pid=3009 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 93.605759][ T36] audit: type=1400 audit(6555220202.654:680): avc: denied { write } for pid=3018 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.656350][ T3020] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 93.664145][ T3020] netlink: 992 bytes leftover after parsing attributes in process `syz.0.881'. [ 93.683205][ T36] audit: type=1400 audit(6555220202.734:681): avc: denied { append } for pid=3021 comm="syz.3.882" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.950289][ T3029] tipc: MTU too low for tipc bearer [ 93.963581][ T3034] overlayfs: failed to clone upperpath [ 95.050984][ T3062] overlayfs: missing 'lowerdir' [ 95.056480][ T3062] 9pnet_fd: Insufficient options for proto=fd [ 95.091453][ T3067] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 95.348848][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.401382][ T3074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.401562][ T3075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 95.408075][ T3075] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 95.425897][ T3073] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 95.425912][ T3073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 95.433935][ T3073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:559 [ 95.509775][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 95.530171][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 95.539243][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.547707][ T9] usb 5-1: config 0 descriptor?? [ 95.552993][ T3071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.762646][ T9] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 95.962754][ T406] usb 5-1: USB disconnect, device number 2 [ 96.307841][ T3088] tipc: Started in network mode [ 96.312771][ T3088] tipc: Node identity 4, cluster identity 4711 [ 96.318994][ T3088] tipc: Node number set to 4 [ 96.374992][ T36] audit: type=1400 audit(6555220205.424:682): avc: denied { ioctl } for pid=3087 comm="syz.2.904" path="socket:[19941]" dev="sockfs" ino=19941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.478990][ T406] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 96.508408][ T3108] rust_binder: Write failure EFAULT in pid:31 [ 96.516697][ T36] audit: type=1400 audit(6555220205.564:683): avc: denied { mount } for pid=3110 comm="syz.4.910" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.523916][ T3111] input: syz1 as /devices/virtual/input/input11 [ 96.629290][ T406] usb 4-1: Using ep0 maxpacket: 32 [ 96.636624][ T406] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.645101][ T406] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.653731][ T406] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.662690][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.672330][ T406] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.681970][ T406] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.694923][ T406] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.703952][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.712509][ T406] usb 4-1: config 0 descriptor?? [ 96.868820][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.920454][ T406] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.931347][ T36] audit: type=1400 audit(6555220205.984:684): avc: denied { getopt } for pid=3119 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.936052][ T406] usb 4-1: USB disconnect, device number 29 [ 96.959886][ T406] usblp0: removed [ 96.962661][ T3122] 9pnet_fd: p9_fd_create_unix (3122): problem connecting socket: ./file0: -111 [ 97.028816][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 97.034917][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.046021][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.052680][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 97.061757][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.070260][ T9] usb 5-1: config 0 descriptor?? [ 97.282288][ T36] audit: type=1400 audit(6555220206.334:685): avc: denied { setopt } for pid=3117 comm="syz.4.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.304658][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 97.310629][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.319342][ T9] usb 5-1: USB disconnect, device number 3 [ 97.418825][ T406] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 97.568807][ T406] usb 4-1: Using ep0 maxpacket: 32 [ 97.575059][ T406] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.583521][ T406] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.592131][ T406] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.601094][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.610733][ T406] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.620387][ T406] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.633348][ T406] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.642387][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.650835][ T406] usb 4-1: config 0 descriptor?? [ 97.856716][ T406] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.942775][ T3136] loop7: detected capacity change from 0 to 7 [ 97.949340][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.958458][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.966506][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.975642][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.983483][ T333] loop7: unable to read partition table [ 97.989531][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.998684][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.007137][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.016310][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.024511][ T3136] loop7: unable to read partition table [ 98.030579][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.030669][ T3136] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 98.041314][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.056725][ T3142] 9p filesystem being mounted at /256/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 98.062292][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.081412][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.090563][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.098571][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.107709][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.115714][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.124826][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.132890][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.142042][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.200989][ T3146] netlink: 'syz.4.923': attribute type 9 has an invalid length. [ 98.208715][ T3146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 98.221416][ T9] usb 4-1: USB disconnect, device number 30 [ 98.236042][ T9] usblp0: removed [ 98.270649][ T3162] rust_binder: 57: no such ref 3 [ 98.275667][ T3162] rust_binder: 57: no such ref 1 [ 98.280808][ T3162] rust_binder: 57: no such ref 1 [ 98.285871][ T3162] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 98.293153][ T3162] rust_binder: 57: no such ref 1 [ 98.326287][ T3164] netlink: 68 bytes leftover after parsing attributes in process `syz.2.928'. [ 98.350367][ T3165] netlink: 'syz.4.929': attribute type 28 has an invalid length. [ 98.935176][ T3171] __vm_enough_memory: pid: 3171, comm: syz.3.931, bytes: 18014402804453376 not enough memory for the allocation [ 99.025130][ T3180] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 99.032503][ T3180] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 99.032527][ T3180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 99.040552][ T3180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:578 [ 99.335370][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 99.335386][ T36] audit: type=1400 audit(6555220208.384:691): avc: denied { mounton } for pid=3185 comm="syz.3.935" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.373398][ T3186] SELinux: security_context_str_to_sid () failed with errno=-22 [ 99.396965][ T36] audit: type=1400 audit(6555220208.444:692): avc: denied { ioctl } for pid=3188 comm="syz.3.936" path="cgroup:[4026532300]" dev="nsfs" ino=4026532300 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.399067][ T3189] rust_binder: 585: no such ref 2 [ 99.449201][ T3196] binder: Bad value for 'defcontext' [ 99.460263][ T3198] rust_binder: Write failure EFAULT in pid:587 [ 99.688817][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.848808][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 99.854989][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.863356][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.871964][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.880922][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.890566][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.900204][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.913157][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.922189][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.930701][ T9] usb 5-1: config 0 descriptor?? [ 100.014542][ T36] audit: type=1400 audit(6555220209.064:693): avc: denied { read } for pid=3204 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.065231][ T36] audit: type=1400 audit(6555220209.114:694): avc: denied { setopt } for pid=3204 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.138789][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.150739][ T9] usb 5-1: USB disconnect, device number 4 [ 100.157086][ T9] usblp0: removed [ 100.166337][ T3214] /dev/nbd2: Can't lookup blockdev [ 100.408838][ T65] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 100.559817][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.570730][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.580481][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.587974][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.600886][ T65] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.610045][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.618580][ T65] usb 4-1: config 0 descriptor?? [ 100.758807][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 100.765008][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.773401][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.782018][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.790973][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.800822][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.810516][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.823477][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.832532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.841212][ T9] usb 5-1: config 0 descriptor?? [ 100.966362][ T36] audit: type=1400 audit(6555220210.014:695): avc: denied { setopt } for pid=3219 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.033095][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 101.040653][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 101.046630][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.048033][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.059701][ T65] usb 4-1: USB disconnect, device number 31 [ 101.066236][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.068720][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 101.082688][ C1] usblp0: nonzero read bulk status received: -71 [ 101.090406][ T9] usb 5-1: USB disconnect, device number 5 [ 101.161048][ T3233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 101.161273][ T3233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.174849][ T36] audit: type=1400 audit(6555220210.224:696): avc: denied { setattr } for pid=3227 comm="syz.3.949" name="binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.310758][ T3195] usblp0: removed [ 101.664386][ T3238] fuse: Bad value for 'fd' [ 101.682800][ T3245] netlink: 'syz.2.954': attribute type 63 has an invalid length. [ 101.690597][ T3245] netlink: 5 bytes leftover after parsing attributes in process `syz.2.954'. [ 101.699398][ T3245] gretap0: entered allmulticast mode [ 101.704810][ T3245] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.730963][ T36] audit: type=1400 audit(6555220210.784:697): avc: denied { bind } for pid=3246 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.751305][ T36] audit: type=1400 audit(6555220210.784:698): avc: denied { setopt } for pid=3246 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.840586][ T36] audit: type=1400 audit(6555220210.894:699): avc: denied { listen } for pid=3254 comm="syz.4.958" path=2F32312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.854919][ T3255] 9pnet_fd: Insufficient options for proto=fd [ 101.863706][ T36] audit: type=1400 audit(6555220210.894:700): avc: denied { create } for pid=3256 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.926442][ T3274] overlayfs: missing 'lowerdir' [ 102.110068][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 102.121485][ T3292] netlink: 'syz.4.970': attribute type 19 has an invalid length. [ 102.288824][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 102.439783][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.450694][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.460498][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.473413][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.483051][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.491796][ T9] usb 4-1: config 0 descriptor?? [ 102.655151][ T3311] raw_sendmsg: syz.2.977 forgot to set AF_INET. Fix it! [ 102.900937][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.908459][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.915917][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.923338][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.930772][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.938154][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.945557][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.953032][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.960478][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.967857][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.975290][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.982690][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.990131][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 102.997511][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 103.004905][ T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 103.012504][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 103.025895][ T9] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.132768][ T3331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 103.169327][ T575] usb 4-1: USB disconnect, device number 32 [ 103.358864][ T406] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 103.509793][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.520835][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.530585][ T406] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.539665][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.548348][ T406] usb 5-1: config 0 descriptor?? [ 103.554197][ T406] hub 5-1:0.0: USB hub found [ 103.754194][ T406] hub 5-1:0.0: 7 ports detected [ 103.759398][ T406] hub 5-1:0.0: insufficient power available to use all downstream ports [ 103.779533][ T3381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.779667][ T3381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.786139][ T3381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:607 [ 103.871864][ T3402] 9pnet_fd: Insufficient options for proto=fd [ 103.919142][ T3412] fuse: Unknown parameter 'fuõskç$ô\d' [ 103.942623][ T3416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=3416 comm=syz.0.1015 [ 103.955910][ T406] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 103.956759][ T3418] fuse: Bad value for 'fd' [ 103.962754][ T406] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 103.975520][ T406] usbhid 5-1:0.0: can't add hid device: -71 [ 103.981499][ T406] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.009476][ T406] usb 5-1: USB disconnect, device number 6 [ 104.467032][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 104.467051][ T36] audit: type=1400 audit(6555220213.514:747): avc: denied { getopt } for pid=3428 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.670460][ T3437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1021'. [ 104.741432][ T3443] rust_binder: 100: no such ref 1 [ 104.743291][ T3446] fuse: Bad value for 'fd' [ 104.746575][ T3443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 104.791812][ T3454] netlink: 'syz.4.1027': attribute type 4 has an invalid length. [ 104.812324][ T3454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3454 comm=syz.4.1027 [ 104.882729][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1031'. [ 104.953286][ T3485] rust_binder: 115: no such ref 0 [ 104.958357][ T3485] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 104.965569][ T36] audit: type=1400 audit(6555220214.004:748): avc: denied { ioctl } for pid=3482 comm="syz.0.1034" path="socket:[21905]" dev="sockfs" ino=21905 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.966768][ T3485] rust_binder: 115: no such ref 2 [ 104.990983][ T3487] syz.2.1033 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.995903][ T3485] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 105.050094][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.066715][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.074944][ T3505] __vm_enough_memory: pid: 3505, comm: syz.3.1040, bytes: 18014402804453376 not enough memory for the allocation [ 105.083880][ T36] audit: type=1400 audit(6555220214.124:749): avc: denied { setopt } for pid=3508 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.088648][ T3505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.115099][ T3505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.338809][ T65] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 105.488817][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 105.495165][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.503467][ T65] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 105.513228][ T65] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 105.523000][ T65] usb 4-1: config 8 interface 0 has no altsetting 0 [ 105.531124][ T65] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 105.540231][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.548286][ T65] usb 4-1: Product: syz [ 105.552518][ T65] usb 4-1: Manufacturer: syz [ 105.557209][ T65] usb 4-1: SerialNumber: syz [ 105.566863][ T3519] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1046'. [ 105.766277][ T65] usb 4-1: selecting invalid altsetting 0 [ 105.778199][ T65] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 105.791440][ T65] usb 4-1: USB disconnect, device number 33 [ 105.801124][ T3543] fuse: Bad value for 'fd' [ 105.802569][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.817062][ T3545] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1055'. [ 105.936893][ T36] audit: type=1400 audit(6555220214.984:750): avc: denied { setattr } for pid=3565 comm="syz.2.1060" name="NETLINK" dev="sockfs" ino=22850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.245194][ T3576] rust_binder: Error while translating object. [ 106.245227][ T3576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.253804][ T3576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 106.268371][ T3580] overlayfs: failed to clone upperpath [ 106.291094][ T3584] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 106.302008][ T36] audit: type=1400 audit(6555220215.354:751): avc: denied { connect } for pid=3588 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.305188][ T3591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.322688][ T36] audit: type=1400 audit(6555220215.374:753): avc: denied { write } for pid=3588 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.348373][ T36] audit: type=1400 audit(6555220215.374:752): avc: denied { relabelto } for pid=3581 comm="syz.4.1067" name="40" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 106.374684][ T36] audit: type=1400 audit(6555220215.374:754): avc: denied { associate } for pid=3581 comm="syz.4.1067" name="40" dev="tmpfs" ino=229 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 106.402192][ T3592] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 106.402218][ T3592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 106.402374][ T36] audit: type=1400 audit(6555220215.374:755): avc: denied { write } for pid=3581 comm="syz.4.1067" name="40" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 106.410276][ T3592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:642 [ 106.419581][ T36] audit: type=1400 audit(6555220215.374:756): avc: denied { add_name } for pid=3581 comm="syz.4.1067" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 106.748824][ T406] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.899852][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.910920][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.921112][ T406] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 106.930165][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.938571][ T406] usb 5-1: config 0 descriptor?? [ 107.148465][ T2427] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.328368][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 107.345294][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.352183][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.358981][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.365763][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.372665][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.379444][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.386202][ T406] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 107.393498][ T406] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 107.549393][ T406] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 107.556826][ T406] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 107.564168][ T406] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 107.573818][ T406] usb 5-1: USB disconnect, device number 7 [ 107.853574][ T3628] 9pnet_fd: Insufficient options for proto=fd [ 109.198844][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 109.198839][ T721] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.198886][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.368856][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 109.376046][ T65] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 109.385100][ T65] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.393279][ T65] usb 5-1: Product: syz [ 109.397422][ T65] usb 5-1: Manufacturer: syz [ 109.402009][ T65] usb 5-1: SerialNumber: syz [ 109.407131][ T65] usb 5-1: config 0 descriptor?? [ 109.619593][ T3704] binder: Bad value for 'stats' [ 109.702140][ T65] usb 5-1: USB disconnect, device number 8 [ 122.054504][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 122.064410][ T3733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.064550][ T3729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 122.071258][ T3729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:658 [ 122.102158][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 122.102173][ T36] audit: type=1400 audit(6555220231.154:777): avc: denied { bind } for pid=3735 comm="syz.3.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.113786][ T3736] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 122.124190][ T36] audit: type=1400 audit(6555220231.164:778): avc: denied { mounton } for pid=3735 comm="syz.3.1120" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.268852][ T65] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.428814][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 122.435093][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.446289][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.456259][ T65] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 122.465758][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.475687][ T65] usb 5-1: config 0 descriptor?? [ 122.538811][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 122.661633][ T36] audit: type=1400 audit(6555220231.714:779): avc: denied { create } for pid=3778 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 122.711780][ T36] audit: type=1400 audit(6555220231.744:780): avc: denied { unmount } for pid=2926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.101544][ T65] usbhid 5-1:0.0: can't add hid device: -71 [ 123.107830][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.119579][ T65] usb 5-1: USB disconnect, device number 9 [ 123.129663][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 123.138278][ T9] usb 4-1: can't read configurations, error -71 [ 123.213733][ T36] audit: type=1400 audit(6555220232.264:781): avc: denied { create } for pid=3796 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.304365][ T36] audit: type=1326 audit(6555220232.354:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.0.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd31a78f6c9 code=0x0 [ 123.448811][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.599846][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.610814][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.620556][ T65] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 123.629633][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.638312][ T65] usb 5-1: config 0 descriptor?? [ 123.659818][ T3810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.660782][ T3811] fuse: Bad value for 'fd' [ 123.726995][ T36] audit: type=1400 audit(6555220232.774:783): avc: denied { bind } for pid=3812 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.746432][ T36] audit: type=1400 audit(6555220232.774:784): avc: denied { name_bind } for pid=3812 comm="syz.2.1144" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 123.767477][ T36] audit: type=1400 audit(6555220232.774:785): avc: denied { node_bind } for pid=3812 comm="syz.2.1144" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 123.768486][ T3818] rust_binder: 670: no such ref 3 [ 123.795195][ T3818] rust_binder: inc_ref_done called when no active inc_refs [ 123.795214][ T3818] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 123.809480][ T3818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:670 [ 124.046855][ T65] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 124.062992][ T65] lenovo 0003:17EF:6047.000F: item fetching failed at offset 3/5 [ 124.070965][ T65] lenovo 0003:17EF:6047.000F: hid_parse failed [ 124.077138][ T65] lenovo 0003:17EF:6047.000F: probe with driver lenovo failed with error -22 [ 124.184116][ T3828] mmap: syz.0.1148 (3828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.247416][ T3786] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 124.248621][ T406] usb 5-1: USB disconnect, device number 10 [ 124.502081][ T36] audit: type=1400 audit(6555220233.554:786): avc: denied { create } for pid=3836 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.601045][ T3841] fuse: Bad value for 'fd' [ 124.605554][ T3841] fuse: Bad value for 'fd' [ 124.738863][ T65] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 124.868810][ T65] usb 4-1: device descriptor read/64, error -71 [ 124.999826][ T3888] SELinux: security_context_str_to_sid () failed with errno=-22 [ 125.108823][ T65] usb 4-1: device descriptor read/64, error -71 [ 125.150964][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.150989][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.157522][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.163931][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.170400][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.176808][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.183278][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.189827][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.196525][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.202914][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.348814][ T65] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 125.498822][ T65] usb 4-1: device descriptor read/64, error -71 [ 125.530461][ T3917] fuse: Bad value for 'fd' [ 125.738806][ T65] usb 4-1: device descriptor read/64, error -71 [ 125.848916][ T65] usb usb4-port1: attempt power cycle [ 126.087290][ T3952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.188828][ T65] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 126.209884][ T65] usb 4-1: device descriptor read/8, error -71 [ 126.236961][ T3961] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 126.244855][ T3961] netlink: 'syz.2.1195': attribute type 6 has an invalid length. [ 126.252678][ T3961] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1195'. [ 126.278977][ T3966] overlay: Unknown parameter 'euid' [ 126.285492][ T3966] overlay: Unknown parameter 'euid' [ 126.316219][ T3973] fuse: Bad value for 'fd' [ 126.359760][ T65] usb 4-1: device descriptor read/8, error -71 [ 126.598818][ T65] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 126.619798][ T65] usb 4-1: device descriptor read/8, error -71 [ 126.749844][ T65] usb 4-1: device descriptor read/8, error -71 [ 126.858883][ T65] usb usb4-port1: unable to enumerate USB device [ 127.089514][ T3987] rust_binder: Error while translating object. [ 127.089546][ T3987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 127.095703][ T3987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 127.155926][ T3991] fuse: Bad value for 'fd' [ 127.198819][ T3995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 127.209320][ T3995] rust_binder: Error while translating object. [ 127.209381][ T3995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 127.215589][ T3995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:212 [ 127.247810][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 127.247825][ T36] audit: type=1400 audit(6555220236.294:796): avc: denied { setopt } for pid=3997 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.284578][ T36] audit: type=1400 audit(6555220236.334:797): avc: denied { create } for pid=3999 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.359125][ T4021] 9p: Unknown access argument : -22 [ 127.383748][ T4021] binder: Unknown parameter 'defcontext01777777777777777777777' [ 127.383749][ T36] audit: type=1400 audit(6555220236.434:798): avc: denied { remount } for pid=4020 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.514645][ T4027] rust_binder: Write failure EFAULT in pid:676 [ 127.515158][ T4028] netlink: 'syz.3.1217': attribute type 2 has an invalid length. [ 127.529257][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 127.544631][ T4032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.545015][ T4032] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 127.551478][ T4032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 127.559497][ T4032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:681 [ 127.582804][ T4037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.658841][ T573] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 127.799504][ T4047] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 127.807324][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 127.819886][ T573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 127.830852][ T573] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.840225][ T573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.848964][ T573] usb 5-1: config 0 descriptor?? [ 127.854170][ T4025] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.918818][ T406] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 128.062939][ T4025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.069897][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.071836][ T4025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.081605][ T406] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 128.097845][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.106447][ T406] usb 4-1: config 0 descriptor?? [ 128.309428][ T573] hid-generic 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 128.313720][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.331443][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.443263][ T4052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1225'. [ 128.507875][ T573] usb 5-1: USB disconnect, device number 11 [ 128.544408][ T406] nintendo 0003:057E:200E.0011: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 128.608835][ T406] nintendo 0003:057E:200E.0011: Failed charging grip handshake [ 128.616435][ T406] nintendo 0003:057E:200E.0011: Failed to initialize controller; ret=-110 [ 128.625547][ T406] nintendo 0003:057E:200E.0011: probe - fail = -110 [ 128.632243][ T406] nintendo 0003:057E:200E.0011: probe with driver nintendo failed with error -110 [ 128.711258][ T36] audit: type=1400 audit(6555220237.764:799): avc: denied { bind } for pid=4055 comm="syz.2.1226" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.711951][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 128.731381][ T36] audit: type=1400 audit(6555220237.764:800): avc: denied { name_bind } for pid=4055 comm="syz.2.1226" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 128.760567][ T36] audit: type=1400 audit(6555220237.764:801): avc: denied { node_bind } for pid=4055 comm="syz.2.1226" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 128.767194][ T10] usb 4-1: USB disconnect, device number 40 [ 128.796684][ T36] audit: type=1400 audit(6555220237.844:802): avc: denied { read } for pid=4058 comm="syz.2.1227" path="socket:[24048]" dev="sockfs" ino=24048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.820891][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 128.829956][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 128.890116][ T4072] fuse: Bad value for 'fd' [ 128.908200][ T36] audit: type=1400 audit(6555220237.954:803): avc: denied { create } for pid=4073 comm="syz.2.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 128.938821][ T36] audit: type=1400 audit(6555220237.984:804): avc: denied { create } for pid=4073 comm="syz.2.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.027381][ T4084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'. [ 129.120040][ T4090] rust_binder: Error while translating object. [ 129.120915][ T4090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 129.134917][ T4090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:247 [ 129.189965][ T36] audit: type=1400 audit(6555220238.244:805): avc: denied { read write } for pid=4091 comm="syz.4.1239" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.292007][ T4106] overlayfs: failed to clone upperpath [ 129.297749][ T4104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.298271][ T4104] rust_binder: 688: no such ref 1 [ 129.361640][ T4137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.430115][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 129.481473][ T4145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.498809][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.659852][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 129.670259][ T10] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 129.679458][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 129.687971][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.697202][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.705325][ T10] usb 5-1: Product: syz [ 129.709637][ T10] usb 5-1: Manufacturer: syz [ 129.714333][ T10] usb 5-1: SerialNumber: syz [ 129.718802][ T573] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 129.854066][ T4147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 129.879863][ T573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.889905][ T573] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 129.898992][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.907572][ T573] usb 4-1: config 0 descriptor?? [ 129.993764][ T10] usb 5-1: USB disconnect, device number 12 [ 130.315401][ T573] wacom 0003:056A:0000.0012: unknown main item tag 0x0 [ 130.322351][ T573] wacom 0003:056A:0000.0012: unknown main item tag 0x0 [ 130.329246][ T573] wacom 0003:056A:0000.0012: unknown main item tag 0x0 [ 130.336261][ T573] wacom 0003:056A:0000.0012: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 130.346199][ T573] wacom 0003:056A:0000.0012: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 130.357926][ T573] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0012/input/input12 [ 130.515799][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.515819][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:693 [ 130.738848][ T573] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.900196][ T573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.907790][ T573] usb 5-1: can't read configurations, error -61 [ 131.038852][ T573] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.190118][ T573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.197721][ T573] usb 5-1: can't read configurations, error -61 [ 131.204119][ T573] usb usb5-port1: attempt power cycle [ 131.548843][ T573] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.570376][ T573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.577940][ T573] usb 5-1: can't read configurations, error -61 [ 131.708810][ T573] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 131.730440][ T573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.738009][ T573] usb 5-1: can't read configurations, error -61 [ 131.744376][ T573] usb usb5-port1: unable to enumerate USB device [ 132.392052][ T65] usb 4-1: USB disconnect, device number 41 [ 132.420649][ T4160] rust_binder: Write failure EFAULT in pid:697 [ 132.435728][ T4163] rust_binder: 700: no such ref 524288 [ 132.447589][ T4163] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 67108864 [ 132.455588][ T4163] rust_binder: Write failure EINVAL in pid:700 [ 132.469366][ T4167] random: crng reseeded on system resumption [ 132.577939][ T4170] fuse: Unknown parameter '' [ 132.585711][ T4170] overlay: ./file0 is not a directory [ 132.594872][ T4170] 9p filesystem being mounted at /239/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 132.674921][ T4181] rust_binder: 710: no such ref 1 [ 132.680024][ T4181] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 132.680039][ T4181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 132.688024][ T4181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:710 [ 132.705592][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 132.705608][ T36] audit: type=1400 audit(6555220241.754:809): avc: denied { getopt } for pid=4184 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.753697][ T4187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4187 comm=syz.3.1263 [ 133.505481][ T4207] fuse: Bad value for 'fd' [ 133.539212][ T4211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4211 comm=syz.2.1272 [ 133.570379][ T36] audit: type=1400 audit(6555220242.614:810): avc: denied { execute } for pid=4212 comm="syz.0.1273" path="/memory.events.local" dev="ramfs" ino=24498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.595743][ T36] audit: type=1400 audit(6555220242.634:811): avc: denied { execute_no_trans } for pid=4216 comm="syz.0.1276" path="/404/file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.635053][ T36] audit: type=1400 audit(6555220242.684:812): avc: denied { create } for pid=4227 comm="syz.3.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.683353][ T4226] rust_binder: inc_ref_done called when no active inc_refs [ 133.683398][ T4226] rust_binder: 260: no such ref 1 [ 133.760681][ T4239] 9p filesystem being mounted at /406/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 133.769333][ T4240] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 133.796848][ T4246] fuse: Bad value for 'fd' [ 133.804210][ T4246] netlink: 'syz.2.1286': attribute type 16 has an invalid length. [ 133.866273][ T4255] No source specified [ 133.878824][ T406] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 133.895557][ T4255] __nla_validate_parse: 1 callbacks suppressed [ 133.895574][ T4255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1289'. [ 133.910801][ T4255] netlink: 'syz.0.1289': attribute type 6 has an invalid length. [ 133.918582][ T4255] netlink: 'syz.0.1289': attribute type 5 has an invalid length. [ 133.926372][ T4255] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 134.028794][ T406] usb 4-1: Using ep0 maxpacket: 32 [ 134.035558][ T406] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 134.045827][ T406] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.056115][ T406] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.065178][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.073170][ T406] usb 4-1: Product: syz [ 134.077321][ T406] usb 4-1: Manufacturer: syz [ 134.081921][ T406] usb 4-1: SerialNumber: syz [ 134.291763][ T406] usb 4-1: 0:2 : does not exist [ 134.298030][ T406] usb 4-1: USB disconnect, device number 42 [ 134.306033][ T3723] udevd[3723]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.353239][ T4274] 9p filesystem being mounted at /412/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 134.412308][ T4277] veth0: entered promiscuous mode [ 134.417638][ T4277] veth0: left promiscuous mode [ 134.799867][ T4285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:724 [ 134.806249][ T4287] rust_binder: 726: no such ref 3 [ 134.820470][ T4287] rust_binder: 726: no such ref 1 [ 134.825557][ T4287] rust_binder: Write failure EFAULT in pid:726 [ 134.826406][ T4287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4287 comm=syz.3.1302 [ 134.852579][ T4289] netlink: 'syz.3.1303': attribute type 27 has an invalid length. [ 134.933228][ T4291] fuse: Bad value for 'fd' [ 134.972309][ T4305] veth0_vlan: left promiscuous mode [ 135.014696][ T36] audit: type=1400 audit(6555220244.064:813): avc: denied { mount } for pid=4310 comm="syz.0.1312" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 135.016551][ T4312] overlayfs: failed to clone lowerpath [ 135.042849][ T4311] overlayfs: failed to clone lowerpath [ 135.043041][ T4312] overlayfs: failed to clone lowerpath [ 135.054193][ T4311] overlayfs: failed to clone lowerpath [ 135.054244][ T4312] overlayfs: failed to clone lowerpath [ 135.065393][ T4312] overlayfs: failed to clone lowerpath [ 135.065415][ T4311] overlayfs: failed to clone lowerpath [ 135.098846][ T65] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 135.136453][ T36] audit: type=1400 audit(6555220244.184:814): avc: denied { map } for pid=4315 comm="syz.0.1313" path="socket:[25710]" dev="sockfs" ino=25710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 135.251685][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.262691][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 135.271894][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.282596][ T65] usb 4-1: config 0 descriptor?? [ 135.326250][ T36] audit: type=1400 audit(6555220244.374:815): avc: denied { write } for pid=4330 comm="syz.0.1319" name="file2" dev="tmpfs" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.334273][ T4331] block device autoloading is deprecated and will be removed. [ 135.348700][ T36] audit: type=1400 audit(6555220244.374:816): avc: denied { open } for pid=4330 comm="syz.0.1319" path="/425/file2" dev="tmpfs" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.378845][ T36] audit: type=1400 audit(6555220244.414:817): avc: denied { ioctl } for pid=4330 comm="syz.0.1319" path="/425/file2" dev="tmpfs" ino=2294 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.694384][ T65] logitech-hidpp-device 0003:046D:C086.0013: item fetching failed at offset 0/3 [ 135.703660][ T65] logitech-hidpp-device 0003:046D:C086.0013: hidpp_probe:parse failed [ 135.711912][ T65] logitech-hidpp-device 0003:046D:C086.0013: probe with driver logitech-hidpp-device failed with error -22 [ 135.894072][ T4289] fuse: Bad value for 'user_id' [ 135.899026][ T4289] fuse: Bad value for 'user_id' [ 135.904749][ T406] usb 4-1: USB disconnect, device number 43 [ 136.139947][ T36] audit: type=1400 audit(6555220245.194:818): avc: denied { accept } for pid=4360 comm="syz.0.1328" path=2F3433312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 136.469722][ T4371] binder: Bad value for 'stats' [ 136.558821][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 136.558823][ T721] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.814216][ T4401] fuse: Bad value for 'fd' [ 137.103331][ T4405] exFAT-fs (rnullb0): invalid boot record signature [ 137.110005][ T4405] exFAT-fs (rnullb0): failed to read boot sector [ 137.116335][ T4405] exFAT-fs (rnullb0): failed to recognize exfat type [ 137.388800][ T406] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.539811][ T406] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 137.548909][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.557320][ T406] usb 5-1: config 0 descriptor?? [ 137.822852][ T36] audit: type=1400 audit(6555220246.874:819): avc: denied { read } for pid=4444 comm="syz.3.1355" name="file0" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.844666][ T4450] overlayfs: failed to clone upperpath [ 137.854894][ T36] audit: type=1400 audit(6555220246.904:820): avc: denied { remount } for pid=4444 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 137.880157][ T36] audit: type=1400 audit(6555220246.904:821): avc: denied { lock } for pid=4453 comm="syz.0.1360" path="socket:[25387]" dev="sockfs" ino=25387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.904124][ T36] audit: type=1400 audit(6555220246.934:822): avc: denied { associate } for pid=4458 comm="syz.3.1361" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.924658][ T36] audit: type=1400 audit(6555220246.934:823): avc: denied { create } for pid=4460 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 137.944997][ T36] audit: type=1400 audit(6555220246.934:824): avc: denied { ioctl } for pid=4460 comm="syz.0.1362" path="socket:[25411]" dev="sockfs" ino=25411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 137.970516][ T36] audit: type=1400 audit(6555220246.934:825): avc: denied { write } for pid=4460 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 137.972473][ T406] ryos 0003:1E7D:3138.0014: unknown main item tag 0x2 [ 138.003846][ T406] ryos 0003:1E7D:3138.0014: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 138.176200][ T4409] rust_binder: Got transaction with invalid offset. [ 138.176227][ T4409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.182896][ T4409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 138.192647][ T65] usb 5-1: USB disconnect, device number 17 [ 138.707092][ T4488] rust_binder: Write failure EFAULT in pid:274 [ 138.878544][ T36] audit: type=1400 audit(6555220247.924:826): avc: denied { setattr } for pid=4496 comm="syz.3.1373" name="XDP" dev="sockfs" ino=25513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.909521][ T4497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.962650][ T4498] rust_binder: Write failure EFAULT in pid:748 [ 139.086047][ T36] audit: type=1400 audit(6555220248.134:827): avc: denied { read } for pid=4499 comm="syz.0.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.339398][ T4512] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1378'. [ 139.633334][ T4528] rust_binder: 286: no such ref 0 [ 139.638377][ T4528] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 139.645454][ T4528] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 139.652490][ T4528] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 139.659534][ T4528] rust_binder: 286: no such ref 0 [ 139.684990][ T4533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:290 [ 139.694361][ T4536] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 139.711466][ T4536] rust_binder: Write failure EINVAL in pid:294 [ 139.779076][ T4541] rust_binder: Error while translating object. [ 139.785276][ T4541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.791523][ T4541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 139.813140][ T4543] pim6reg1: entered promiscuous mode [ 139.827599][ T4543] pim6reg1: entered allmulticast mode [ 139.878620][ T36] audit: type=1326 audit(6555220248.924:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.4.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ef8f6c9 code=0x7ffc0000 [ 140.037788][ T4566] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.052311][ T4566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 140.060993][ T4566] overlayfs: failed to look up (bus) for ino (-40) [ 140.068111][ T4566] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 140.319350][ T432] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 140.478825][ T432] usb 5-1: Using ep0 maxpacket: 32 [ 140.485025][ T432] usb 5-1: config 6 has an invalid interface number: 36 but max is 0 [ 140.493147][ T432] usb 5-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 140.503227][ T432] usb 5-1: config 6 has no interface number 0 [ 140.509330][ T432] usb 5-1: config 6 interface 36 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.522287][ T432] usb 5-1: config 6 interface 36 has no altsetting 0 [ 140.531033][ T432] usb 5-1: string descriptor 0 read error: -22 [ 140.537256][ T432] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=42.51 [ 140.546349][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.559694][ T432] usb 5-1: unknown interface protocol 0x92, assuming v1 [ 140.566672][ T432] usb 5-1: 36:2 : does not exist [ 140.647987][ T4584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:758 [ 140.760814][ T4568] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 140.770029][ T4568] rust_binder: Error while translating object. [ 140.782157][ T4568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.788322][ T4568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 140.798301][ T432] usb 5-1: USB disconnect, device number 18 [ 140.888812][ T330] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 141.038827][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 141.044825][ T330] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.053091][ T330] usb 4-1: config 179 has no interface number 0 [ 141.059364][ T330] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.070441][ T330] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.081672][ T330] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.092801][ T330] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.104191][ T330] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.117410][ T330] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.126456][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.135370][ T4586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 141.545846][ T4586] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 141.554539][ T4586] rust_binder: Write failure EINVAL in pid:760 [ 141.554955][ T432] usb 4-1: USB disconnect, device number 44 [ 141.554984][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.575749][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 141.827612][ T4612] tipc: Enabling of bearer rejected, failed to enable media [ 142.004649][ T4618] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 142.013614][ T4618] rust_binder: Error while translating object. [ 142.013639][ T4618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.019874][ T4618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 142.319315][ T330] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 142.384142][ T4637] overlayfs: failed to clone upperpath [ 142.449807][ T573] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 142.480084][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.488434][ T330] usb 4-1: config 2 has an invalid interface number: 34 but max is 2 [ 142.496562][ T330] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 142.504573][ T330] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 142.514805][ T330] usb 4-1: config 2 has no interface number 0 [ 142.521186][ T330] usb 4-1: config 2 has no interface number 2 [ 142.527271][ T330] usb 4-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 142.538177][ T330] usb 4-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 142.549218][ T330] usb 4-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.562075][ T330] usb 4-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 142.572785][ T330] usb 4-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 142.585733][ T330] usb 4-1: config 2 interface 1 has no altsetting 0 [ 142.592381][ T330] usb 4-1: config 2 interface 34 has no altsetting 0 [ 142.599120][ T330] usb 4-1: config 2 interface 6 has no altsetting 0 [ 142.607018][ T330] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 142.616087][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.624105][ T330] usb 4-1: Product: syz [ 142.628271][ T330] usb 4-1: Manufacturer: syz [ 142.632947][ T330] usb 4-1: SerialNumber: syz [ 142.638537][ T573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.646627][ T573] usb 5-1: not running at top speed; connect to a high speed hub [ 142.656353][ T573] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.665438][ T573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.673438][ T573] usb 5-1: Product: syz [ 142.677583][ T573] usb 5-1: Manufacturer: syz [ 142.682176][ T573] usb 5-1: SerialNumber: syz [ 142.848582][ T4627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:765 [ 142.888624][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.906305][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.916406][ T4667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.922541][ T573] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.944017][ T573] usb 5-1: USB disconnect, device number 19 [ 142.947666][ T4670] rust_binder: Error while translating object. [ 142.950663][ T330] usb 4-1: selecting invalid altsetting 0 [ 142.955953][ T4670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.956927][ T4671] rust_binder: Error while translating object. [ 142.968785][ T4670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 142.974044][ T4671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.992881][ T330] usb 4-1: USB disconnect, device number 45 [ 142.994605][ T4671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 143.016519][ T3766] udevd[3766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 143.417628][ T4687] 9pnet_fd: Insufficient options for proto=fd [ 143.418839][ T573] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 143.490593][ T4698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.501340][ T4702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.508436][ T4705] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 143.514945][ T4705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 143.523129][ T4705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:784 [ 143.540731][ T4707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.549945][ T4708] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 143.556348][ T4708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 143.564435][ T4708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:787 [ 143.581557][ T4711] netlink: 'syz.3.1445': attribute type 3 has an invalid length. [ 143.590214][ T573] usb 5-1: not running at top speed; connect to a high speed hub [ 143.590819][ T4711] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1445'. [ 143.599070][ T573] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 143.624885][ T4713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.626034][ T573] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 143.626206][ T4713] rust_binder: 792: no such ref 0 [ 143.634044][ T573] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.643790][ T4713] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.648416][ T573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.658383][ T4713] rust_binder: 792: no such ref 2 [ 143.664458][ T573] usb 5-1: Product: syz [ 143.664476][ T573] usb 5-1: Manufacturer: syz [ 143.672752][ T4713] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 143.677437][ T573] usb 5-1: SerialNumber: syz [ 143.681676][ T4683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.687140][ T4713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 143.705884][ T4713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:792 [ 143.896106][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.913739][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.924367][ T573] cdc_ncm 5-1:1.0: bind() failure [ 143.931226][ T573] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 143.938003][ T573] cdc_ncm 5-1:1.1: bind() failure [ 143.945691][ T573] usb 5-1: USB disconnect, device number 20 [ 144.312901][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 144.312916][ T36] audit: type=1400 audit(6555220253.364:842): avc: denied { getopt } for pid=4736 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.338641][ T36] audit: type=1400 audit(6555220253.364:843): avc: denied { wake_alarm } for pid=4736 comm="syz.3.1456" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.379039][ T2427] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.385416][ T2427] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.407311][ T4782] kvm: kvm [4781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 145.415866][ T4782] kvm: kvm [4781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 145.430333][ T4782] kvm_intel: kvm [4781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 145.440873][ T4782] kvm: kvm [4781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 145.449541][ T4782] kvm: kvm [4781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 145.998589][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1479'. [ 146.162860][ T36] audit: type=1326 audit(6555220255.214:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.186331][ T36] audit: type=1326 audit(6555220255.214:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.209726][ T36] audit: type=1326 audit(6555220255.214:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.232930][ T36] audit: type=1326 audit(6555220255.214:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.256330][ T36] audit: type=1326 audit(6555220255.214:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.279629][ T36] audit: type=1326 audit(6555220255.214:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.303019][ T36] audit: type=1326 audit(6555220255.214:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd31a78f6c9 code=0x7ffc0000 [ 146.326491][ T36] audit: type=1326 audit(6555220255.214:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 146.725479][ T4869] overlayfs: failed to clone upperpath [ 146.893403][ T4898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1510'. [ 146.941024][ T4912] 8021q: VLANs not supported on lo [ 147.438817][ T721] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.438850][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 147.510379][ T4952] 9pnet: p9_errstr2errno: server reported unknown error 0000 [ 148.678811][ T1365] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 148.831092][ T1365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.839999][ T1365] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 148.847543][ T1365] usb 5-1: can't read configurations, error -71 [ 149.342391][ T5053] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 149.349682][ T5053] rust_binder: 388: no such ref 0 [ 149.354792][ T5053] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 149.362242][ T5053] rust_binder: 388: no such ref 2 [ 149.416292][ T5075] overlayfs: failed to clone lowerpath [ 149.418006][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 149.418020][ T36] audit: type=1400 audit(6555220258.464:871): avc: granted { setsecparam } for pid=5076 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 149.447297][ T36] audit: type=1400 audit(6555220258.474:872): avc: granted { setsecparam } for pid=5076 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 149.461871][ T5080] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1568'. [ 149.502213][ T5088] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 149.510043][ T5088] netlink: 'syz.2.1572': attribute type 3 has an invalid length. [ 149.517760][ T5088] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.538061][ T5090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1570'. [ 149.600955][ T5104] SELinux: Context is not valid (left unmapped). [ 149.607932][ T36] audit: type=1400 audit(6555220258.654:873): avc: denied { relabelto } for pid=5103 comm="syz.2.1576" name="file0" dev="tmpfs" ino=2598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="" [ 149.631544][ T36] audit: type=1400 audit(6555220258.654:874): avc: denied { associate } for pid=5103 comm="syz.2.1576" name="file0" dev="tmpfs" ino=2598 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 149.688267][ T5127] fuse: Bad value for 'fd' [ 149.728551][ T36] audit: type=1400 audit(6555220258.774:875): avc: denied { accept } for pid=5145 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.816268][ T5148] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 150.058804][ T1365] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 150.218810][ T1365] usb 5-1: Using ep0 maxpacket: 32 [ 150.224995][ T1365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.236050][ T1365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.245864][ T1365] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 150.255044][ T1365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.263869][ T1365] usb 5-1: config 0 descriptor?? [ 150.378680][ T5168] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1593'. [ 150.684021][ T1365] elecom 0003:056E:010D.0015: unknown main item tag 0x7 [ 150.692275][ T1365] elecom 0003:056E:010D.0015: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0 [ 150.734154][ T65] usb 5-1: USB disconnect, device number 23 [ 151.056837][ T5198] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1603'. [ 151.065974][ T5198] gretap0: entered promiscuous mode [ 151.071227][ T65] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 151.161268][ T5200] netlink: 'syz.0.1604': attribute type 12 has an invalid length. [ 151.230487][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.240616][ T65] usb 5-1: config 0 has no interfaces? [ 151.246070][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.255096][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.263921][ T65] usb 5-1: config 0 descriptor?? [ 151.471068][ T5213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.471098][ T5213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.480923][ T10] usb 5-1: USB disconnect, device number 24 [ 151.688046][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.697870][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.978819][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 152.129777][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.140737][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 152.149775][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.158615][ T10] usb 5-1: config 0 descriptor?? [ 152.163852][ T5237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.372994][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 152.379031][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 152.387582][ T10] usb 5-1: USB disconnect, device number 25 [ 153.119028][ T1365] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 153.269802][ T1365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.280923][ T1365] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 153.290032][ T1365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.298545][ T1365] usb 5-1: config 0 descriptor?? [ 153.303794][ T5267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.716243][ T1365] hid-generic 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 153.903212][ T5284] overlayfs: failed to resolve './bus': -2 [ 153.917826][ T10] usb 5-1: USB disconnect, device number 26 [ 154.013841][ T36] audit: type=1400 audit(6555220263.064:876): avc: denied { search } for pid=5293 comm="syz.3.1636" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.035571][ T36] audit: type=1400 audit(6555220263.064:877): avc: denied { write } for pid=5293 comm="syz.3.1636" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.163728][ T5312] bridge0: port 3(erspan0) entered blocking state [ 154.170896][ T5312] bridge0: port 3(erspan0) entered disabled state [ 154.177391][ T5312] erspan0: entered allmulticast mode [ 154.183362][ T5312] erspan0: entered promiscuous mode [ 154.188735][ T5312] bridge0: port 3(erspan0) entered blocking state [ 154.195173][ T5312] bridge0: port 3(erspan0) entered forwarding state [ 154.426526][ T5331] rust_binder: Write failure EFAULT in pid:446 [ 154.447281][ T36] audit: type=1400 audit(6555220263.494:878): avc: denied { create } for pid=5334 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.817319][ T5362] rust_binder: Error while translating object. [ 154.817377][ T5362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 154.823766][ T5362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:467 [ 154.850136][ T5367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:469 [ 154.878512][ T1365] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 154.879507][ T36] audit: type=1400 audit(6555220263.924:879): avc: denied { read write } for pid=5373 comm="syz.4.1662" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.889053][ T1365] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.908047][ T36] audit: type=1400 audit(6555220263.924:880): avc: denied { open } for pid=5373 comm="syz.4.1662" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.118835][ T575] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 155.269783][ T575] usb 5-1: config 0 has no interfaces? [ 155.275942][ T575] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.285303][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.293338][ T575] usb 5-1: SerialNumber: syz [ 155.298413][ T575] usb 5-1: config 0 descriptor?? [ 155.406055][ T5400] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1671'. [ 155.508274][ T10] usb 5-1: USB disconnect, device number 27 [ 155.530339][ T5408] Invalid logical block size (16384) [ 155.935600][ T5431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1683'. [ 155.949575][ T5430] 9p filesystem being mounted at /505/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 155.999161][ T5431] fuse: Bad value for 'group_id' [ 156.004211][ T5431] fuse: Bad value for 'group_id' [ 156.108596][ T36] audit: type=1400 audit(6555220265.154:881): avc: denied { mount } for pid=5463 comm="syz.2.1695" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.343850][ T36] audit: type=1400 audit(6555220265.394:882): avc: denied { setopt } for pid=5467 comm="syz.2.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.887118][ T36] audit: type=1400 audit(6555220265.934:883): avc: denied { mount } for pid=5484 comm="syz.2.1704" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 157.022376][ T5501] fuse: Unknown parameter 'fä' [ 157.034752][ T5503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=5503 comm=syz.2.1710 [ 157.211073][ T5532] 9p filesystem being mounted at /516/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 157.608836][ T575] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 157.738793][ T575] usb 5-1: device descriptor read/64, error -71 [ 157.978807][ T575] usb 5-1: device descriptor read/64, error -71 [ 158.218844][ T575] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 158.348828][ T575] usb 5-1: device descriptor read/64, error -71 [ 158.442367][ T5605] 9p filesystem being mounted at /389/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 158.588796][ T575] usb 5-1: device descriptor read/64, error -71 [ 158.698860][ T575] usb usb5-port1: attempt power cycle [ 159.038838][ T575] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 159.059752][ T575] usb 5-1: device descriptor read/8, error -71 [ 159.189953][ T575] usb 5-1: device descriptor read/8, error -71 [ 159.354998][ T5670] 9pnet_fd: Insufficient options for proto=fd [ 159.363444][ T5670] 9pnet_fd: Insufficient options for proto=fd [ 159.428821][ T575] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 159.449756][ T575] usb 5-1: device descriptor read/8, error -71 [ 159.509771][ T5692] netlink: 'syz.3.1776': attribute type 22 has an invalid length. [ 159.579873][ T575] usb 5-1: device descriptor read/8, error -71 [ 159.693769][ T575] usb usb5-port1: unable to enumerate USB device [ 159.838926][ T36] audit: type=1400 audit(6555220268.884:884): avc: denied { create } for pid=5720 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.014869][ T5727] 9p filesystem being mounted at /533/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 160.155116][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1790'. [ 160.619246][ T5775] overlayfs: failed to clone lowerpath [ 160.788793][ T575] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 160.847198][ T5833] overlayfs: failed to clone upperpath [ 160.949826][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.960852][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.970616][ T575] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.983504][ T575] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.992571][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.001018][ T575] usb 5-1: config 0 descriptor?? [ 161.206796][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.215366][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.228380][ T575] usbhid 5-1:0.0: can't add hid device: -71 [ 161.234802][ T575] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.247315][ T575] usb 5-1: USB disconnect, device number 32 [ 161.251901][ T36] audit: type=1400 audit(6555220270.294:885): avc: denied { accept } for pid=5843 comm="syz.4.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.279657][ T5846] x_tables: duplicate entry at hook 2 [ 161.285386][ T5846] rust_binder: Write failure EFAULT in pid:516 [ 161.616350][ T36] audit: type=1400 audit(6555220270.664:886): avc: denied { nlmsg_write } for pid=5867 comm="syz.3.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 161.623424][ T5868] overlayfs: failed to clone upperpath [ 161.643211][ T575] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 161.648906][ T36] audit: type=1400 audit(6555220270.664:887): avc: denied { audit_write } for pid=5867 comm="syz.3.1835" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 161.677299][ T36] audit: type=1107 audit(6555220270.664:888): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 161.680951][ T36] audit: type=1400 audit(6555220270.734:889): avc: denied { link } for pid=5867 comm="syz.3.1835" name="file1" dev="tmpfs" ino=2223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.790691][ T5871] overlayfs: failed to clone upperpath [ 161.799875][ T5874] netlink: 'syz.0.1837': attribute type 4 has an invalid length. [ 161.800527][ T5875] overlayfs: failed to clone upperpath [ 161.807621][ T5874] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1837'. [ 161.849810][ T575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.852503][ T36] audit: type=1400 audit(6555220270.904:890): avc: denied { create } for pid=5882 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.859776][ T575] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 161.888874][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.906540][ T575] usb 5-1: config 0 descriptor?? [ 161.918314][ T5894] /dev/loop0: Can't lookup blockdev [ 161.956483][ T5915] fuse: Bad value for 'fd' [ 161.965530][ T36] audit: type=1400 audit(6555220271.014:891): avc: denied { getopt } for pid=5914 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.986378][ T36] audit: type=1400 audit(6555220271.014:892): avc: denied { getopt } for pid=5914 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.125331][ T5848] netlink: 'syz.4.1827': attribute type 40 has an invalid length. [ 162.360665][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 162.396499][ T36] audit: type=1400 audit(6555220271.444:893): avc: denied { create } for pid=5964 comm="syz.3.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 162.534549][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.543110][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.551717][ T5848] __vm_enough_memory: pid: 5848, comm: syz.4.1827, bytes: 18014402804453376 not enough memory for the allocation [ 162.564375][ T5969] netlink: 'syz.4.1827': attribute type 40 has an invalid length. [ 162.565243][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.580677][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.594278][ T575] usbhid 5-1:0.0: can't add hid device: -71 [ 162.600394][ T575] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.612088][ T575] usb 5-1: USB disconnect, device number 33 [ 162.774844][ T5978] fuse: Bad value for 'fd' [ 162.908809][ T575] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 163.060097][ T575] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 163.068406][ T575] usb 5-1: config 0 has no interface number 0 [ 163.076079][ T575] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 163.085269][ T575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.093312][ T575] usb 5-1: Product: syz [ 163.097673][ T575] usb 5-1: Manufacturer: syz [ 163.102321][ T575] usb 5-1: SerialNumber: syz [ 163.107873][ T575] usb 5-1: config 0 descriptor?? [ 163.322715][ T575] usb 5-1: USB disconnect, device number 34 [ 163.346008][ T6006] veth0_virt_wifi: entered allmulticast mode [ 163.352214][ T6006] veth0_virt_wifi: left allmulticast mode [ 163.786802][ T6033] netlink: 'syz.3.1890': attribute type 64 has an invalid length. [ 163.946499][ T6039] overlayfs: failed to clone upperpath [ 163.962862][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x60000003 [ 163.972001][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x60000307 [ 163.987738][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 163.996949][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 164.005661][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104 [ 164.014316][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100 [ 164.027935][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 164.037093][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 164.045688][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104 [ 164.054360][ T6036] kvm: kvm [6035]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100 [ 164.695600][ T6089] syz.4.1905: attempt to access beyond end of device [ 164.695600][ T6089] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 164.708477][ T6089] FAT-fs (loop4): unable to read boot sector [ 164.735940][ T6094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:540 [ 164.787221][ T6100] rust_binder: Write failure EFAULT in pid:546 [ 164.884839][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 164.884856][ T36] audit: type=1400 audit(6555220273.934:897): avc: denied { bind } for pid=6106 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.911086][ T6109] fuse: Unknown parameter '€' [ 165.038835][ T1365] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 165.168830][ T1365] usb 5-1: device descriptor read/64, error -71 [ 165.186914][ T6154] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1933'. [ 165.418807][ T1365] usb 5-1: device descriptor read/64, error -71 [ 165.658818][ T1365] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 165.788808][ T1365] usb 5-1: device descriptor read/64, error -71 [ 165.821212][ T6167] 9pnet_fd: Insufficient options for proto=fd [ 166.028827][ T1365] usb 5-1: device descriptor read/64, error -71 [ 166.138891][ T1365] usb usb5-port1: attempt power cycle [ 166.478850][ T1365] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 166.499794][ T1365] usb 5-1: device descriptor read/8, error -71 [ 166.557187][ T6197] 9pnet_fd: Insufficient options for proto=fd [ 166.618907][ T6205] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1954'. [ 166.629805][ T1365] usb 5-1: device descriptor read/8, error -71 [ 166.868804][ T1365] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 166.889807][ T1365] usb 5-1: device descriptor read/8, error -71 [ 167.019863][ T1365] usb 5-1: device descriptor read/8, error -71 [ 167.128877][ T1365] usb usb5-port1: unable to enumerate USB device [ 167.149014][ T6215] fuse: Bad value for 'group_id' [ 167.153976][ T6215] fuse: Bad value for 'group_id' [ 167.640666][ T6226] fuse: Bad value for 'fd' [ 167.818322][ T6243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:551 [ 167.828373][ T6245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 167.837555][ T6245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:553 [ 168.208796][ T1365] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 168.369765][ T1365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.388803][ T1365] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.398901][ T1365] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 168.408293][ T1365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 168.408927][ T6273] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1979'. [ 168.416485][ T1365] usb 5-1: SerialNumber: syz [ 168.425443][ T6275] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1979'. [ 169.334346][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.341765][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.349216][ T6298] bridge_slave_0: entered allmulticast mode [ 169.355516][ T6298] bridge_slave_0: entered promiscuous mode [ 169.362777][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.370073][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.377161][ T6298] bridge_slave_1: entered allmulticast mode [ 169.383793][ T6298] bridge_slave_1: entered promiscuous mode [ 169.460892][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.467960][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.475271][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.482321][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.509088][ T2427] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.516665][ T2427] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.526196][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.533257][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.542471][ T2427] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.549511][ T2427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.576561][ T6298] veth0_vlan: entered promiscuous mode [ 169.587970][ T6298] veth1_macvtap: entered promiscuous mode [ 169.691995][ T6332] netlink: 'syz.2.1993': attribute type 6 has an invalid length. [ 169.699992][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 169.709654][ T6332] binder: Bad value for 'stats' [ 169.751082][ T6345] netlink: 'syz.3.1998': attribute type 28 has an invalid length. [ 169.782120][ T6346] rust_binder: 9: no such ref 2 [ 169.999911][ T6350] rust_binder: Write failure EFAULT in pid:14 [ 170.036030][ T6352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 170.408842][ T65] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 170.467913][ T6379] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2009'. [ 170.569939][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.580127][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.589969][ T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.599083][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.607074][ T65] usb 3-1: SerialNumber: syz [ 170.672769][ T6402] 9pnet_fd: Insufficient options for proto=fd [ 170.817746][ T65] usb 3-1: 0:2 : does not exist [ 170.827115][ T65] usb 3-1: USB disconnect, device number 25 [ 170.958194][ T1365] usb 5-1: 0:2 : does not exist [ 170.969303][ T1365] usb 5-1: unit 5: unexpected type 0x0b [ 170.975405][ T6416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2021'. [ 170.986472][ T1365] usb 5-1: USB disconnect, device number 39 [ 171.003921][ T3723] udevd[3723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.007538][ T6416] fuse: Bad value for 'group_id' [ 171.025029][ T6416] fuse: Bad value for 'group_id' [ 171.047817][ T36] audit: type=1400 audit(6555220280.094:898): avc: denied { create } for pid=6417 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.551058][ T6429] ------------[ cut here ]------------ [ 171.552184][ T36] audit: type=1400 audit(6555220280.604:899): avc: denied { load_policy } for pid=6426 comm="syz.2.2025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.556579][ T6429] WARNING: CPU: 0 PID: 6429 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 171.586024][ T6429] Modules linked in: [ 171.589955][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.2.2025 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 171.601636][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.611733][ T6429] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 171.617645][ T6429] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 171.628331][ T6433] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 171.637262][ T6429] RSP: 0018:ffffc900114cf540 EFLAGS: 00010246 [ 171.637286][ T6429] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 171.658033][ T6429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900114cf5f8 [ 171.666027][ T6429] RBP: ffffc900114cf680 R08: ffffc900114cf5f7 R09: 0000000000000000 [ 171.674030][ T6429] R10: ffffc900114cf5e0 R11: fffff52002299ebf R12: ffffc900114cf580 [ 171.682070][ T6429] R13: dffffc0000000000 R14: 1ffff92002299eac R15: 0000000000000000 [ 171.690060][ T6429] FS: 00007f581ab706c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.699011][ T6429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.705622][ T6429] CR2: 00007f581ab6ff98 CR3: 0000000144d04000 CR4: 00000000003526b0 [ 171.713629][ T6429] Call Trace: [ 171.716911][ T6429] [ 171.719853][ T6429] ? vfs_write+0x3c0/0xf30 [ 171.724270][ T6429] ? ksys_write+0x141/0x250 [ 171.728813][ T6429] ? x64_sys_call+0x271c/0x2ee0 [ 171.733676][ T6429] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 171.739410][ T6429] ? hashtab_init+0xdb/0x1f0 [ 171.744171][ T6429] ___kmalloc_large_node+0x81/0x220 [ 171.749396][ T6429] ? hashtab_init+0xdb/0x1f0 [ 171.754032][ T6429] __kmalloc_large_node_noprof+0x1e/0xe0 [ 171.759891][ T6429] ? hashtab_init+0xdb/0x1f0 [ 171.764474][ T6429] __kmalloc_noprof+0x336/0x530 [ 171.769343][ T6429] ? kasan_save_alloc_info+0x40/0x50 [ 171.774637][ T6429] hashtab_init+0xdb/0x1f0 [ 171.779076][ T6429] ? class_read+0x162/0x8a0 [ 171.783588][ T6429] symtab_init+0x44/0x70 [ 171.787814][ T6429] class_read+0x1df/0x8a0 [ 171.792169][ T6429] ? hashtab_init+0xdb/0x1f0 [ 171.796762][ T6429] ? __cfi_class_read+0x10/0x10 [ 171.801652][ T6429] ? hashtab_init+0x105/0x1f0 [ 171.806330][ T6429] policydb_read+0xaab/0x28c0 [ 171.811020][ T6429] ? __kasan_kmalloc+0x96/0xb0 [ 171.815784][ T6429] ? __cfi_policydb_read+0x10/0x10 [ 171.820916][ T6429] ? security_load_policy+0x128/0x12f0 [ 171.826376][ T6429] security_load_policy+0x162/0x12f0 [ 171.831689][ T6429] ? _raw_spin_unlock+0x45/0x60 [ 171.836544][ T6429] ? __check_object_size+0x50a/0x810 [ 171.841868][ T6429] ? __cfi_security_load_policy+0x10/0x10 [ 171.847588][ T6429] ? __kasan_check_write+0x18/0x20 [ 171.852725][ T6429] sel_write_load+0x298/0x5e0 [ 171.857408][ T6429] ? futex_wait+0x29a/0x7a0 [ 171.861933][ T6429] ? __cfi_sel_write_load+0x10/0x10 [ 171.867140][ T6429] ? __cfi_futex_wait+0x10/0x10 [ 171.872004][ T6429] ? bpf_lsm_file_permission+0xd/0x20 [ 171.877380][ T6429] ? __cfi_sel_write_load+0x10/0x10 [ 171.882596][ T6429] vfs_write+0x3c0/0xf30 [ 171.886837][ T6429] ? __cfi_vfs_write+0x10/0x10 [ 171.891632][ T6429] ? __kasan_check_write+0x18/0x20 [ 171.896759][ T6429] ? mutex_lock+0x92/0x1c0 [ 171.901190][ T6429] ? __cfi_mutex_lock+0x10/0x10 [ 171.906038][ T6429] ? __fget_files+0x2c5/0x340 [ 171.910736][ T6429] ksys_write+0x141/0x250 [ 171.915065][ T6429] ? xfd_validate_state+0x68/0x150 [ 171.920205][ T6429] ? __cfi_ksys_write+0x10/0x10 [ 171.925058][ T6429] ? __kasan_check_write+0x18/0x20 [ 171.930182][ T6429] ? fpregs_restore_userregs+0x11d/0x260 [ 171.935817][ T6429] __x64_sys_write+0x7f/0x90 [ 171.940438][ T6429] x64_sys_call+0x271c/0x2ee0 [ 171.945130][ T6429] do_syscall_64+0x58/0xf0 [ 171.949553][ T6429] ? clear_bhb_loop+0x50/0xa0 [ 171.954232][ T6429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.960138][ T6429] RIP: 0033:0x7f5819d8f6c9 [ 171.964560][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.984184][ T6429] RSP: 002b:00007f581ab70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.992627][ T6429] RAX: ffffffffffffffda RBX: 00007f5819fe5fa0 RCX: 00007f5819d8f6c9 [ 172.000645][ T6429] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 172.008613][ T6429] RBP: 00007f5819e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.016604][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.024598][ T6429] R13: 00007f5819fe6038 R14: 00007f5819fe5fa0 R15: 00007ffd33abc088 [ 172.032605][ T6429] [ 172.035619][ T6429] ---[ end trace 0000000000000000 ]--- [ 172.041196][ T6429] SELinux: failed to load policy