last executing test programs: 58.526623868s ago: executing program 3 (id=2152): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x11, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000894) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t'], 0x8) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe000, 0x0) (async) mmap(&(0x7f0000091000/0x4000)=nil, 0x4000, 0x3, 0x932, r5, 0x911d8000) (async) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 58.464363313s ago: executing program 3 (id=2158): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x26e1, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000000e0601030000000000000000050000080900020073797a310000000005000100070000000900020073797a32000000000900020073797a30000082cc65c2107800000900020073797a30000000000900020073797a30000000000900020073797a2900000000050001000700000005000100070000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x48810}, 0x4010) 57.576169964s ago: executing program 3 (id=2164): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) prctl$PR_GET_DUMPABLE(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000aae000/0x3000)=nil, 0xfffffffffffffee0, &(0x7f0000000000)='/dev/rnullb0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 57.573777284s ago: executing program 3 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x33) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 57.569640674s ago: executing program 3 (id=2167): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r1, 0x2) write(r0, &(0x7f0000000400)="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", 0x1f000) 57.384175219s ago: executing program 3 (id=2170): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25010000000000000007410000000000180000001065746836c620dda2e64f16c1ec10cf19ce0b3f3a776c616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25010000000000000007410000000000180000001065746836c620dda2e64f16c1ec10cf19ce0b3f3a776c616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) (async) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001040)=""/133, 0x85}], 0x2}}], 0x1, 0x40000000, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r5 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000080)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 57.37286387s ago: executing program 32 (id=2170): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25010000000000000007410000000000180000001065746836c620dda2e64f16c1ec10cf19ce0b3f3a776c616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25010000000000000007410000000000180000001065746836c620dda2e64f16c1ec10cf19ce0b3f3a776c616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) (async) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001040)=""/133, 0x85}], 0x2}}], 0x1, 0x40000000, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r5 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000080)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 2.532846788s ago: executing program 4 (id=2871): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@redirect_dir_nofollow}, {@uuid_null}]}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x20) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2.455721884s ago: executing program 4 (id=2873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x450981, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) syslog(0x3, &(0x7f0000000080)=""/183, 0xb7) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000040)={0x4000, 0x18000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000100)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0xe6, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x40}, @acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 2.439375335s ago: executing program 4 (id=2876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x304, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xb, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x304}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="68b4", 0x2, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r6, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5aa57ecd2b7a4dbba354c3c00eaaf7db443d7bc57364efcd1b4d25d97838d87cb84a5bc5ece2b745031ec84641cd4e62f5416474400be0a2725a229734aee92d0ab8b489657671e78446864ac543c3fdd6075fb6c362eb282ac752d7f87c53c07abf7b61fe146f81c797212247c26df9fbbd4a2ee2f9d6fe73f75bd5925607670a630aa0d16d860f00c4c9780288df5d88aacb3a77fdc46a7ad3a305e6b40e28a122acbf5ca0be", @ANYRESHEX, @ANYBLOB="6740d04ddd469e6527456da8faff95271c656a88a1ff06ce243ff00db1e71806e09db00f3c8f804ecff7cd55617748228f8a2597e96da23d07e5ecd83661ae360ce86844b28536", @ANYRES16=r0]) 2.37556901s ago: executing program 4 (id=2877): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffb, @mcast2, 0x12}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2400000000000000a9000000325b0000fe800000000000000000000000000043d63a33b3828b9ce03bc9d02a71cd5a51a82bef88a883f55d00013dd1157e0b4bd3d8c12164e200d3ec9e123d46336e977793b2d03cbb39eb7e7de7f98be9e3e79f20ba63b9ab023774c843279b42186f4c29fe26810cae44cebb07286428d79032d6192608797832fb097ae25858582fb7a2fc647c3b0f6bdf573dc1b94ffb7ec70078df09a5a24d94cfcc7a1c66dabd0dafc923f4df03baabd3914ac6b4db8bca900c94b0cf0a1eaf41f381e1c4db97425c8ffbae8d098a33", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x4001c00) recvfrom$inet6(r1, &(0x7f0000000040)=""/4, 0x4, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x5400, @private0, 0x7}, 0x1c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000002400)=""/4085, 0xff5}, {0x0}], 0x3a) 2.180162326s ago: executing program 2 (id=2881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_io_uring_setup(0x657a, &(0x7f00000001c0)={0x0, 0x88be, 0x2000, 0x0, 0x169, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x6) r3 = syz_open_pts(r0, 0x20800) r4 = dup3(r3, r0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x80}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 2.089986973s ago: executing program 2 (id=2882): syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x220580, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x220580, 0x0) madvise(&(0x7f00005cf000/0x1000)=nil, 0x1000, 0xf) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000001c0)=0x7fff) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/33, 0x21}], 0x4) 1.555553496s ago: executing program 4 (id=2885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 842.590632ms ago: executing program 2 (id=2897): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x400}) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r3, 0x8, 0xfffffffffffffff7, 0x7}) bind$pptp(r4, &(0x7f0000000900)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) r5 = gettid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r6, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) syz_open_procfs(r5, &(0x7f0000000880)='task\x00') socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000380)={0x0, 0x30, 0xfa, {0xfa, 0x11, "0091dd15d89bb253ceafe51c7b4a43eb3a7eefdb2a18086315345ee492b0d2ed99da7925170c54fd28389103c738e7b4f19ba0e03742f5dc32017a207420dd702d6fade9d12bd77cc6d89c6ad4b2ae8d4e43ec25cd8000aa909a7c6bbf0dcad4e08e6a21ae9c8203f1f2e5c4447185d3562402cd2b3d67f113a73419647d98fe0391564c104360e6fb697eb49ed1376e4c99699c0c0ec9e6fd646a9e854729e8fcbdec50cc73aed1633836feaff03f6963b7c18ccc1e8198b805ca587e59370454876dccd1c877d5bb8c94eba167c7f0424829a17c230d2669615cec672886c2a2204fd8ca2ce26645585677d066fdd0d2b0beb6ea1761c2"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f0000000040)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x17, 0x8, 0xfff7}, @generic={0x12, 0x10, 0x2, "4fb71c1694d5dabd77d94f7e3388a4"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xa, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x4}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2e, 0x10, 0x5, 0xd4, "610df27f", "80ed0b25"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xe, 0x2, 0x9, 0x4, 0xfff8}}}, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x20, 0x14, 0x13, "89809bf2703d8d1e37e4081863e67ece7e8d00"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x120, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "c1fe"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "28a3"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x80}}) 448.162714ms ago: executing program 0 (id=2908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x4008040}, 0x448d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x7, 0x29000000000, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0x0, 0x100) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0xd, {0xfffffffeffffffff, 0x9, 0x0, {0x2, 0x3, 0x5, 0x9, 0x0, 0xfffffffffffffff9, 0x7, 0x5, 0x3, 0x4000, 0xd7, 0x0, 0x0, 0x158d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYRES32=r1, @ANYRES16=r2, @ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES64=0x0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 388.482739ms ago: executing program 1 (id=2909): ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24000085) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0x40080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000440)=0x6, 0x4) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="0f35baf80c66b81480e98e66efbafc0cb8af9cef66b8990000000f23d80f21f86635400000000f23f8670f73d30ff30fc7b5eb7966b9b709000066b8bc00000066ba000000000f306765550fc7700066b9730000400f32baf80c66b869836f8966efbafc0cec", 0x66}], 0x1, 0x5b, &(0x7f0000000540), 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000580)={0xd4, 0x0, 0x100}) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000640)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000600)=0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r3, 0xa3671332113b03cc, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfe4, 0x44}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) syz_open_dev$usbfs(&(0x7f0000000880), 0x81, 0x10d600) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000008c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000900)=@gcm_128={{0x303}, "f1ed7ef750dcc675", "904c31e6ea646e556b3365d65606cf7c", "77930e4e", "6c6d76f8f5dd0a3a"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x1, 0xff, 0x3, 0x35, 0x3}, 0x20) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000980)={0x1, 0x8, 0x10}) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f00000009c0)={0x80, 0x0, 0xfffffffffffffe00}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x48000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa0, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24044894}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x80) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r7, 0xfe8d4f1d60783e12, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3f}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xb8abe254006e201b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r4) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "d80944"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 320.968124ms ago: executing program 1 (id=2910): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x100010, r0, 0xd6baf000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00') ftruncate(r2, 0x7fffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010900000000"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0x1ff, 0x0, 0x10000, 0xba8, 0x81, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1007], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 232.220791ms ago: executing program 1 (id=2911): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/238, 0xee, 0x10120, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="01060000000000000000090000002c00048013d91f8cd0548c5725636173742d6c696e6b00001400078008000500"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 231.792811ms ago: executing program 0 (id=2912): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000048c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x5, [{{0x10, 0x2, 0x6}, 0x361, 0x4, 0x7, './file0'}, {{0x4, 0x1}, 0x5, 0x5, 0x7, './file0'}]}}, 0x49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 228.058402ms ago: executing program 1 (id=2913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xffffffffffffff4e, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 220.813892ms ago: executing program 0 (id=2914): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c) sendfile(r1, r0, 0x0, 0x2fe4) 205.722303ms ago: executing program 1 (id=2915): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) dup2(r2, 0xffffffffffffffff) tee(r2, r1, 0x547, 0x8) (async) tee(r2, r1, 0x547, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r2, 0x8, 0x4, 0x7fffffffffffffff}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x4009, 0xffffffff808c9d75, 0x400, 0x0, 0x1, 0x4, 0x0, 0x0, 0x11, 0x10001}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x4009, 0xffffffff808c9d75, 0x400, 0x0, 0x1, 0x4, 0x0, 0x0, 0x11, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r7, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) fchown(r3, r4, r7) mount$fuse(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x3003000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}], [{@flag='lazytime'}, {@subj_user={'subj_user', 0x3d, '!/'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fowner_lt={'fowner<', r4}}]}}) 160.087487ms ago: executing program 0 (id=2916): futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='bridge0\x00', 0x0, r0) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000004c0)={0x0, 0x2}) (async) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001400010023bd70000001000005"], 0x14}}, 0x24000084) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r3, &(0x7f0000000300)=""/39, 0x27) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 64) fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x8000, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) (async, rerun: 32) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000480)=@v3={0x3000000, [{0x75c97ba1, 0x80000001}, {0x9, 0x3}], r8}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 157.918637ms ago: executing program 1 (id=2917): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0xa242) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000200)=0x28) poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x62040200) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x9, 0x7}}, 0x30) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000000)=0xa, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r7 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r7}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) getrusage(0x1, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab38fc179f9f9e91dc1ddaaca7bd6447a4b4e00d9683dd010000000000000000030000000000000000000002000000000000000000ecff00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c551240460fba6e00000000000000000000000000000000001000", [0x4, 0x40000000000000]}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000821d2dcf5a5aa71", @ANYRES16=r9, @ANYBLOB="100028bd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x200418d1}, 0x20044800) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x3010068, &(0x7f0000000000)=ANY=[]) 134.447069ms ago: executing program 0 (id=2918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c40)={"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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) (async) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c40)={"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"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 132.996839ms ago: executing program 0 (id=2919): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788801c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/route\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x3e, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r10, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 71.552864ms ago: executing program 4 (id=2920): bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002800), 0x0, 0x40000022, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="004efb42540e85e9ca3d81901542df067500"/27], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 54.895595ms ago: executing program 2 (id=2921): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x180) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) r3 = syz_open_dev$loop(0x0, 0xd5d1, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x9]}}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000200)={0xd13, 0x0, 0x6, 0x7, 0x7, "ea710600000000f9000000020200", 0x0, 0x400}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.stat\x00', 0x275a, 0x0) r7 = dup(r5) inotify_rm_watch(r7, r6) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000280)) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r8) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000084}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="040025bd7000fedbdf257300000008000300", @ANYRES32=r10, @ANYBLOB="0c009900980200004a0000000800ef000f0000000500ee00090000000800ef00010000000800ef0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffff) 208.31µs ago: executing program 2 (id=2922): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0xc5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x6, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x200, 0x8005, 0x4}) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'userxattr'}, {0x20, 'V'}, {0x20, '('}, {0x20, ','}, {0x20, '$.\''}, {0x20, '$'}], 0xa, "4673c676a162a3c10ea6045967255b883b9b7aaaba59fc29460b758337a9c2ba792fc7d274cfba53271294f6a6edc88f40613277a3d826c83180832689a85746ed072afcdad2551fa71966a997e731b41a14e7ddb0b642cdea14e498b7e83b18830554777977d4fa191dc5206a6255bd5f827bab459e3574d1d5d1acbef5bdc5"}, 0xa1) 0s ago: executing program 2 (id=2923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) clock_gettime(0x1, &(0x7f0000000240)) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0x8, {0x8, 0x1, "d0d8c9c0a8a7"}}, 0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0x0, 0x10}, {0x9, 0x0, 0x0, 0x800000, 0x100, 0x5, 0x0, 0x24}, {0x0, 0x4, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x7ff, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x4, 0xe0, 0x3, 0x0}) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x80000, 0x80) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): _MGR already set [ 77.828488][ T2786] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 77.835008][ T2786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.842969][ T2786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:581 [ 78.464705][ T2812] netlink: 'syz.0.836': attribute type 2 has an invalid length. [ 78.626655][ T2827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.626850][ T2827] rust_binder: Error while translating object. [ 78.633671][ T2827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.640068][ T2827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 78.703192][ T2834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.801219][ T2841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 78.808141][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.834035][ T2846] overlayfs: failed to clone upperpath [ 78.894274][ T2852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:599 [ 78.966420][ T36] audit: type=1326 audit(2000000004.290:34029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2857 comm="syz.3.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd018ebe9 code=0x0 [ 79.111999][ T2863] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 79.120330][ T2863] rust_binder: Write failure EINVAL in pid:607 [ 79.146850][ T2869] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 79.174651][ T2871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.184075][ T2871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.192291][ T2871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.377243][ T347] usb 3-1: USB disconnect, device number 15 [ 79.609291][ T36] audit: type=1400 audit(2000000004.940:34030): avc: denied { mount } for pid=2877 comm="syz.0.862" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.632023][ T36] audit: type=1400 audit(2000000004.940:34031): avc: denied { search } for pid=2877 comm="syz.0.862" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.719334][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.720501][ T36] audit: type=1400 audit(2000000005.050:34032): avc: denied { accept } for pid=2884 comm="syz.1.865" path="socket:[20507]" dev="sockfs" ino=20507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.736388][ T2885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.751848][ T2885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 79.818510][ T347] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 79.991050][ T347] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.008547][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.019585][ T347] usb 3-1: Product: syz [ 80.023854][ T347] usb 3-1: Manufacturer: syz [ 80.037061][ T36] audit: type=1400 audit(2000000005.360:34033): avc: denied { mounton } for pid=2930 comm="syz.0.881" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.038513][ T347] usb 3-1: SerialNumber: syz [ 80.099459][ T2917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.099642][ T2936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 80.108694][ T2936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:626 [ 80.122116][ T36] audit: type=1400 audit(2000000005.450:34034): avc: denied { setattr } for pid=2915 comm="syz.1.873" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 80.178380][ T36] audit: type=1400 audit(2000000005.500:34035): avc: denied { write } for pid=2940 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.206167][ T2946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.207281][ T2946] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 80.214012][ T2946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 80.222980][ T2946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:631 [ 80.226133][ T2948] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 80.253466][ T2948] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 80.298965][ T2966] __vm_enough_memory: pid: 2966, comm: syz.1.889, bytes: 18014402804453376 not enough memory for the allocation [ 80.334095][ T2972] netlink: 165 bytes leftover after parsing attributes in process `syz.0.892'. [ 80.347892][ T2972] netlink: 'syz.0.892': attribute type 11 has an invalid length. [ 80.476758][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.495584][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.755279][ T2994] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 80.769624][ T347] rtl8150 3-1:1.0: couldn't reset the device [ 80.775720][ T347] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.786958][ T347] usb 3-1: USB disconnect, device number 16 [ 80.854581][ T2996] binder: Bad value for 'stats' [ 80.889300][ T36] audit: type=1400 audit(2000000006.220:34036): avc: denied { create } for pid=2997 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 80.989770][ T3009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.997162][ T3009] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 81.009111][ T3009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.017263][ T3009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:659 [ 81.288543][ T36] audit: type=1400 audit(2000000006.610:34037): avc: denied { setattr } for pid=3035 comm="syz.0.912" name="" dev="pipefs" ino=20263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 81.345375][ T36] audit: type=1400 audit(2000000006.650:34038): avc: denied { ioctl } for pid=3040 comm="syz.1.914" path="socket:[20819]" dev="sockfs" ino=20819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.493495][ T3063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.515534][ T3063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.607970][ T3069] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 81.621819][ T3069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:686 [ 81.628814][ T3072] /dev/loop0: Can't lookup blockdev [ 82.018497][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 82.179395][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 82.187730][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.198138][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.209483][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.218773][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.226953][ T45] usb 3-1: Product: syz [ 82.231230][ T45] usb 3-1: Manufacturer: syz [ 82.236081][ T45] usb 3-1: SerialNumber: syz [ 82.455939][ T45] usb 3-1: 0:2 : does not exist [ 82.464018][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 82.474963][ T45] usb 3-1: USB disconnect, device number 17 [ 82.484014][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.248506][ T377] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 83.400051][ T377] usb 3-1: not running at top speed; connect to a high speed hub [ 83.408867][ T377] usb 3-1: config 1 has an invalid interface number: 185 but max is 0 [ 83.417064][ T377] usb 3-1: config 1 has no interface number 0 [ 83.423241][ T377] usb 3-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 83.434257][ T377] usb 3-1: config 1 interface 185 has no altsetting 0 [ 83.442506][ T377] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=9f.80 [ 83.451625][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.460136][ T377] usb 3-1: Product: syz [ 83.464314][ T377] usb 3-1: Manufacturer: syz [ 83.468958][ T377] usb 3-1: SerialNumber: syz [ 83.733472][ T377] usb 3-1: unknown interface protocol 0x6c, assuming v1 [ 83.740532][ T377] usb 3-1: cannot find UAC_HEADER [ 83.748054][ T377] snd-usb-audio 3-1:1.185: probe with driver snd-usb-audio failed with error -22 [ 83.759693][ T377] usb 3-1: USB disconnect, device number 18 [ 83.772793][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.185/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.795031][ T3109] fuse: Unknown parameter 'fq0x0000000000000004' [ 84.249599][ T3113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.252073][ T3113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.258930][ T3113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:644 [ 84.308762][ T3121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.323502][ T3121] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 84.337662][ T3121] rust_binder: Write failure EINVAL in pid:652 [ 84.481833][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 84.481855][ T36] audit: type=1400 audit(2000000009.810:34044): avc: denied { name_bind } for pid=3141 comm="syz.3.947" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 84.530715][ T36] audit: type=1400 audit(2000000009.860:34045): avc: denied { execmem } for pid=3145 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.550967][ T3136] loop7: detected capacity change from 16384 to 16383 [ 84.669272][ T3151] rust_binder: Error while translating object. [ 84.669330][ T3151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.675594][ T3151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 84.698976][ T3151] /dev/loop0: Can't lookup blockdev [ 84.720640][ T3151] /dev/loop0: Can't lookup blockdev [ 84.853082][ T36] audit: type=1400 audit(2000000010.180:34046): avc: denied { create } for pid=3164 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 84.962192][ T3185] netlink: 'syz.0.962': attribute type 3 has an invalid length. [ 84.969950][ T3185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 85.025434][ T3192] rust_binder: 699: no such ref 2 [ 85.030682][ T3192] rust_binder: Write failure EINVAL in pid:699 [ 85.043994][ T3194] cgroup2: Unknown parameter 'net_cls' [ 85.279376][ T3202] tipc: Can't bind to reserved service type 0 [ 85.318251][ T3206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.318730][ T3206] rust_binder: Error while translating object. [ 85.325284][ T3206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 85.331745][ T3206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:658 [ 85.341946][ T3206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.392033][ T36] audit: type=1400 audit(2000000010.720:34047): avc: denied { ioctl } for pid=3217 comm="syz.1.973" path="/238/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.448737][ T36] audit: type=1400 audit(2000000010.780:34048): avc: denied { execute } for pid=3223 comm="syz.2.975" path="/proc/665/mountinfo" dev="proc" ino=21183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 85.602043][ T3236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.612445][ T3236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.626355][ T3228] binder: Bad value for 'stats' [ 85.730745][ T36] audit: type=1400 audit(2000000011.060:34049): avc: denied { create } for pid=3239 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.731039][ T3240] netlink: 80 bytes leftover after parsing attributes in process `syz.0.981'. [ 85.750969][ T36] audit: type=1400 audit(2000000011.060:34050): avc: denied { write } for pid=3239 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.751003][ T36] audit: type=1400 audit(2000000011.060:34051): avc: denied { nlmsg_write } for pid=3239 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.805075][ T3276] rust_binder: Error in use_page_slow: ESRCH [ 86.805104][ T3276] rust_binder: use_range failure ESRCH [ 86.811356][ T3276] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 86.816980][ T3276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.825785][ T3276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:680 [ 87.185333][ T3301] netlink: 'syz.1.1001': attribute type 13 has an invalid length. [ 87.218007][ T3308] tmpfs: Bad value for 'nr_inodes' [ 87.247724][ T3310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1003'. [ 87.581496][ T36] audit: type=1400 audit(2000000012.910:34052): avc: denied { mount } for pid=3321 comm="syz.1.1008" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 88.008483][ T378] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 88.169491][ T378] usb 3-1: Using ep0 maxpacket: 16 [ 88.189540][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 88.208479][ T378] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.221596][ T378] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 88.239088][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.261679][ T378] usb 3-1: config 0 descriptor?? [ 88.541250][ T36] audit: type=1400 audit(2000000013.870:34053): avc: denied { accept } for pid=3374 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.582187][ T3381] tipc: Cannot configure node identity twice [ 88.588252][ T3381] tipc: Cannot configure node identity twice [ 88.679356][ T378] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 88.870229][ T378] playstation 0003:054C:0DF2.000C: Invalid byte count transferred, expected 20 got 0 [ 88.879962][ T378] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 88.889846][ T378] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 88.899217][ T378] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 88.909715][ T378] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 89.135406][ T377] usb 3-1: USB disconnect, device number 19 [ 89.427932][ T3401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3401 comm=syz.0.1033 [ 89.440899][ T3401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3401 comm=syz.0.1033 [ 89.900636][ T3503] binder: Unknown parameter '00000000000000000000' [ 89.986185][ T3513] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.120663][ T36] audit: type=1326 audit(2000000015.450:34054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.1.1077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f574d18ebe9 code=0x0 [ 90.269345][ T3533] cgroup2: Unknown parameter 'fav2net_c' [ 90.929759][ T36] audit: type=1326 audit(2000000016.260:34055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3562 comm="syz.3.1091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fafd0185ba7 code=0x0 [ 91.000540][ T3571] 9pnet: Could not find request transport: d [ 91.143100][ T36] audit: type=1400 audit(2000000016.470:34056): avc: denied { create } for pid=3577 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 91.206606][ T36] audit: type=1326 audit(2000000016.530:34057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3547 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064898ebe9 code=0x7fc00000 [ 91.235537][ T36] audit: type=1400 audit(2000000023.564:34058): avc: denied { create } for pid=3587 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.255498][ T36] audit: type=1400 audit(2000000023.584:34059): avc: denied { write } for pid=3587 comm="syz.2.1099" name="ip_tables_matches" dev="proc" ino=4026532414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.528483][ T347] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 91.536177][ T3612] sit0: entered promiscuous mode [ 91.547183][ T3612] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1107'. [ 91.658493][ T347] usb 3-1: device descriptor read/64, error -71 [ 91.728562][ T36] audit: type=1400 audit(2000000024.054:34060): avc: denied { lock } for pid=3633 comm="syz.0.1116" path="socket:[22894]" dev="sockfs" ino=22894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 91.898514][ T347] usb 3-1: device descriptor read/64, error -71 [ 91.920413][ T3668] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1125'. [ 91.930410][ T36] audit: type=1400 audit(2000000024.254:34061): avc: denied { nlmsg_read } for pid=3667 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.081007][ T3679] /dev/loop0: Can't lookup blockdev [ 92.087762][ T36] audit: type=1400 audit(2000000024.414:34062): avc: denied { accept } for pid=3678 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.138504][ T347] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 92.268506][ T347] usb 3-1: device descriptor read/64, error -71 [ 92.508496][ T347] usb 3-1: device descriptor read/64, error -71 [ 92.623534][ T347] usb usb3-port1: attempt power cycle [ 92.771137][ T36] audit: type=1400 audit(2000000025.104:34063): avc: denied { ioctl } for pid=3698 comm="syz.3.1137" path="socket:[22979]" dev="sockfs" ino=22979 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.978534][ T347] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 93.002516][ T347] usb 3-1: device descriptor read/8, error -71 [ 93.140582][ T347] usb 3-1: device descriptor read/8, error -71 [ 93.378508][ T347] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 93.399709][ T347] usb 3-1: device descriptor read/8, error -71 [ 93.530393][ T347] usb 3-1: device descriptor read/8, error -71 [ 93.615836][ T3737] SELinux: Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped). [ 93.648562][ T347] usb usb3-port1: unable to enumerate USB device [ 93.894296][ T3761] 9pnet_fd: Insufficient options for proto=fd [ 95.112088][ T3886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1207'. [ 95.214774][ T3916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.217398][ T3916] rust_binder: Error while translating object. [ 95.224335][ T3916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.230849][ T3916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:736 [ 95.299357][ T3926] cgroup2: Unknown parameter 'ls2tdelegaten^f' [ 95.338786][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 95.338806][ T36] audit: type=1400 audit(2000000000.080:34075): avc: denied { mount } for pid=3935 comm="syz.3.1222" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.472779][ T36] audit: type=1400 audit(2000000000.210:34076): avc: denied { map } for pid=3958 comm="syz.3.1228" path="socket:[23297]" dev="sockfs" ino=23297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.590405][ T36] audit: type=1400 audit(2000000000.330:34077): avc: denied { read } for pid=3965 comm="syz.2.1230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.646311][ T36] audit: type=1400 audit(2000000000.330:34078): avc: denied { open } for pid=3965 comm="syz.2.1230" path="/248/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.657553][ T3969] 9pnet_fd: Insufficient options for proto=fd [ 95.685252][ T36] audit: type=1400 audit(2000000000.330:34079): avc: denied { write } for pid=3965 comm="syz.2.1230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.709602][ T36] audit: type=1400 audit(2000000000.330:34080): avc: denied { mounton } for pid=3965 comm="syz.2.1230" path="/248/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.750070][ T36] audit: type=1326 audit(2000000000.420:34081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.0.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2e958ebe9 code=0x0 [ 95.773865][ T36] audit: type=1400 audit(2000000000.510:34082): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.805583][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 95.839534][ T3985] rust_binder: Write failure EINVAL in pid:754 [ 96.148322][ T377] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 96.288337][ T377] usb 3-1: device descriptor read/64, error -71 [ 96.336164][ T4005] netlink: 'syz.3.1244': attribute type 58 has an invalid length. [ 96.528281][ T377] usb 3-1: device descriptor read/64, error -71 [ 96.768309][ T377] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 96.898460][ T377] usb 3-1: device descriptor read/64, error -71 [ 97.138291][ T377] usb 3-1: device descriptor read/64, error -71 [ 97.248350][ T377] usb usb3-port1: attempt power cycle [ 97.588267][ T377] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 97.609369][ T377] usb 3-1: device descriptor read/8, error -71 [ 97.693641][ T36] audit: type=1400 audit(2000000002.430:34083): avc: denied { setopt } for pid=4032 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.739304][ T377] usb 3-1: device descriptor read/8, error -71 [ 97.913709][ T4066] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 97.922803][ T4066] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 97.931784][ T4067] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 97.978420][ T377] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 97.993306][ T4067] fuseblk: Bad value for 'fd' [ 97.999684][ T377] usb 3-1: device descriptor read/8, error -71 [ 98.129403][ T377] usb 3-1: device descriptor read/8, error -71 [ 98.238330][ T377] usb usb3-port1: unable to enumerate USB device [ 98.308413][ T4070] 9pnet_fd: Insufficient options for proto=fd [ 98.740390][ T36] audit: type=1400 audit(2000000003.480:34084): avc: denied { map } for pid=4083 comm="syz.0.1274" path="socket:[23449]" dev="sockfs" ino=23449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.794689][ T4099] overlayfs: failed to clone upperpath [ 99.015313][ T4111] rust_binder: Error in use_page_slow: ESRCH [ 99.015334][ T4111] rust_binder: use_range failure ESRCH [ 99.021635][ T4111] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 99.027149][ T4111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 99.035298][ T4111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:764 [ 99.356502][ T4131] sock: sock_timestamping_bind_phc: sock not bind to device [ 99.416362][ T4137] overlayfs: failed to clone upperpath [ 99.433746][ T4139] tipc: Trying to set illegal importance in message [ 99.442290][ T4139] mmap: syz.1.1295 (4139): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 99.865729][ T4144] netlink: 'syz.0.1297': attribute type 6 has an invalid length. [ 99.921166][ T4149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:769 [ 100.017354][ T4158] rust_binder: Error while translating object. [ 100.019226][ T4160] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 100.026685][ T4158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 100.040021][ T4158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:773 [ 100.078113][ T4168] netlink: 'syz.1.1307': attribute type 4 has an invalid length. [ 100.096228][ T4168] netlink: 'syz.1.1307': attribute type 4 has an invalid length. [ 100.130891][ T4174] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 100.130923][ T4174] rust_binder: Error while translating object. [ 100.143259][ T4174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.149778][ T4174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:775 [ 100.234179][ T4194] overlayfs: disabling nfs_export due to verity=require [ 100.250495][ T4194] overlayfs: failed to clone upperpath [ 100.800585][ T4204] 9pnet_fd: Insufficient options for proto=fd [ 100.883596][ T4219] overlayfs: failed to resolve './file1/file0': -2 [ 101.154614][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 101.264019][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 101.264039][ T36] audit: type=1400 audit(2000000006.000:34087): avc: denied { setattr } for pid=4239 comm="syz.1.1328" name="AF_VSOCK" dev="sockfs" ino=24747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.321934][ T36] audit: type=1400 audit(2000000006.000:34088): avc: denied { ioctl } for pid=4239 comm="syz.1.1328" path="socket:[24747]" dev="sockfs" ino=24747 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.356881][ T36] audit: type=1400 audit(2000000006.090:34089): avc: denied { create } for pid=4246 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 101.378064][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 101.776759][ T4250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4250 comm=syz.1.1331 [ 101.776781][ T4251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4251 comm=syz.1.1331 [ 101.853968][ T4262] overlayfs: failed to clone upperpath [ 101.859643][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 101.861510][ T36] audit: type=1400 audit(2000000006.600:34090): avc: denied { read write } for pid=4263 comm="syz.2.1336" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.892188][ T36] audit: type=1400 audit(2000000006.600:34091): avc: denied { open } for pid=4263 comm="syz.2.1336" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.917450][ T36] audit: type=1400 audit(2000000006.600:34092): avc: denied { ioctl } for pid=4263 comm="syz.2.1336" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.992657][ T4276] fuse: Bad value for 'fd' [ 101.997636][ T4276] fuse: Unknown parameter '' [ 102.098173][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 102.248192][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 102.254544][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.265642][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.275572][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 102.284691][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.294154][ T45] usb 3-1: config 0 descriptor?? [ 102.545358][ T36] audit: type=1400 audit(2000000007.280:34093): avc: denied { read } for pid=4294 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.548678][ T4295] overlayfs: failed to clone upperpath [ 102.703324][ T45] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 102.711788][ T45] koneplus 0003:1E7D:2D51.000D: item fetching failed at offset 3/5 [ 102.720164][ T45] koneplus 0003:1E7D:2D51.000D: parse failed [ 102.726366][ T45] koneplus 0003:1E7D:2D51.000D: probe with driver koneplus failed with error -22 [ 102.909698][ T4264] random: crng reseeded on system resumption [ 102.944912][ T4264] Unrecognized hibernate image header format! [ 102.951238][ T4264] PM: hibernation: Image mismatch: architecture specific data [ 102.960869][ T45] usb 3-1: USB disconnect, device number 28 [ 103.202958][ T4331] overlayfs: failed to clone upperpath [ 103.272356][ T4345] bridge0: entered allmulticast mode [ 103.301018][ T4348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1365'. [ 103.399926][ T4355] overlayfs: failed to clone upperpath [ 103.416861][ T36] audit: type=1400 audit(2000000008.150:34094): avc: denied { create } for pid=4356 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 103.437947][ T36] audit: type=1400 audit(2000000008.150:34095): avc: denied { write } for pid=4356 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 103.581549][ T4374] tipc: Enabling of bearer rejected, failed to enable media [ 103.644155][ T4374] netlink: 'syz.3.1377': attribute type 16 has an invalid length. [ 103.652127][ T4374] netlink: 'syz.3.1377': attribute type 3 has an invalid length. [ 103.659897][ T4374] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 103.667656][ T4374] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.1377'. [ 103.691188][ T4378] fuse: Unknown parameter 'f' [ 103.808459][ T4385] rust_binder: Error in use_page_slow: ESRCH [ 103.808480][ T4385] rust_binder: use_range failure ESRCH [ 103.814516][ T4385] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 103.820440][ T4385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.828667][ T4385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:793 [ 103.845732][ T4388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.362428][ T4458] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.473897][ T4466] netlink: 'syz.2.1412': attribute type 4 has an invalid length. [ 104.482551][ T4466] netlink: 'syz.2.1412': attribute type 4 has an invalid length. [ 104.492567][ T4466] tipc: New replicast peer: 10.1.1.2 [ 104.497972][ T4466] tipc: Enabled bearer , priority 10 [ 104.648775][ T4486] rust_binder: Error while translating object. [ 104.648833][ T4486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 104.655112][ T4486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:830 [ 104.775359][ T4490] kvm: emulating exchange as write [ 104.790962][ T4491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2307 sclass=netlink_route_socket pid=4491 comm=syz.3.1418 [ 104.964300][ T4516] overlayfs: failed to clone lowerpath [ 104.995824][ T4520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65281 sclass=netlink_route_socket pid=4520 comm=syz.1.1431 [ 105.066849][ T4527] syz.1.1434(4527): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 105.113314][ T4534] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1436'. [ 105.168128][ T378] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 105.178106][ T36] audit: type=1400 audit(2000000000.560:34096): avc: denied { mount } for pid=4542 comm="syz.1.1440" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.370682][ T378] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.379926][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.387953][ T378] usb 3-1: Product: syz [ 105.392242][ T378] usb 3-1: Manufacturer: syz [ 105.396864][ T378] usb 3-1: SerialNumber: syz [ 105.793782][ T4579] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1453'. [ 106.347752][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 106.347769][ T36] audit: type=1400 audit(2000000001.730:34098): avc: denied { setattr } for pid=4601 comm="syz.0.1461" name="secretmem" dev="secretmem" ino=25985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.426191][ T36] audit: type=1326 audit(2000000001.810:34099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.0.1466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2e958ebe9 code=0x0 [ 106.513180][ T36] audit: type=1400 audit(2000000001.900:34100): avc: denied { sqpoll } for pid=4628 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.603419][ T36] audit: type=1326 audit(2000000001.990:34101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.0.1478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x0 [ 107.218288][ T36] audit: type=1400 audit(2000000002.610:34102): avc: denied { mounton } for pid=4693 comm="syz.1.1493" path="/file0" dev="ramfs" ino=26095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 107.251410][ T36] audit: type=1400 audit(2000000002.640:34103): avc: denied { wake_alarm } for pid=4695 comm="syz.1.1494" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.303552][ T4697] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 107.311395][ T4697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1494'. [ 107.320574][ T4697] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 107.364299][ T4707] bridge0: port 3(erspan0) entered blocking state [ 107.370849][ T4707] bridge0: port 3(erspan0) entered disabled state [ 107.377454][ T4707] erspan0: entered allmulticast mode [ 107.383282][ T4707] erspan0: entered promiscuous mode [ 107.388810][ T4707] bridge0: port 3(erspan0) entered blocking state [ 107.395637][ T4707] bridge0: port 3(erspan0) entered forwarding state [ 107.403623][ T4707] erspan0: left allmulticast mode [ 107.408768][ T4707] erspan0: left promiscuous mode [ 107.413937][ T4707] bridge0: port 3(erspan0) entered disabled state [ 107.510441][ T36] audit: type=1400 audit(2000000002.900:34104): avc: denied { read } for pid=4714 comm="syz.1.1500" path="socket:[25479]" dev="sockfs" ino=25479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.923537][ T378] usb 3-1: USB disconnect, device number 29 [ 108.297260][ T36] audit: type=1400 audit(2000000003.680:34105): avc: denied { bind } for pid=4731 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.416601][ T4742] overlayfs: failed to clone upperpath [ 108.429301][ T36] audit: type=1326 audit(2000000003.820:34106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm="syz.0.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x0 [ 108.472078][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 108.491987][ T4749] SELinux: Context ϧ is not valid (left unmapped). [ 108.499443][ T36] audit: type=1400 audit(2000000003.890:34107): avc: denied { create } for pid=4748 comm="syz.3.1514" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 108.501690][ T4749] overlayfs: failed to clone upperpath [ 108.521768][ T4750] overlayfs: failed to clone upperpath [ 108.649910][ T4755] binder: Unknown parameter 'context' [ 108.715914][ T4759] /dev/rnullb0: Can't open blockdev [ 109.208446][ T4805] overlayfs: failed to resolve './file0': -2 [ 109.221147][ T4811] overlayfs: failed to clone upperpath [ 109.231031][ T4811] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 109.290304][ T4822] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 109.300684][ T4822] cgroup: Invalid name [ 109.451317][ T4831] netlink: 'syz.0.1545': attribute type 27 has an invalid length. [ 109.461350][ T4831] sit0: left promiscuous mode [ 109.523287][ T4837] fuse: Unknown parameter 'B0xffffffffffffffff' [ 110.071381][ T4878] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 110.169872][ T4895] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1567'. [ 110.409827][ T4913] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 110.509632][ T4918] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 110.548135][ T4925] rust_binder: Error while translating object. [ 110.548178][ T4925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 110.554406][ T4925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:889 [ 110.920218][ T4948] overlayfs: failed to clone upperpath [ 110.951445][ T4950] netlink: 'syz.0.1586': attribute type 13 has an invalid length. [ 111.368350][ T4969] netlink: 'syz.1.1594': attribute type 4 has an invalid length. [ 111.378835][ T4969] netlink: 'syz.1.1594': attribute type 4 has an invalid length. [ 111.440223][ T4984] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1599'. [ 111.536541][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 111.536564][ T36] audit: type=1400 audit(2000000006.920:34127): avc: denied { create } for pid=4996 comm="syz.0.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 111.543600][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 111.765434][ T36] audit: type=1400 audit(2000000007.150:34128): avc: denied { associate } for pid=5027 comm="syz.3.1614" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 111.833818][ T5040] overlayfs: failed to clone upperpath [ 111.862832][ T377] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 111.873382][ T5044] /dev/loop0: Can't lookup blockdev [ 111.890274][ T5046] sit0: entered promiscuous mode [ 111.896426][ T5046] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 111.904239][ T5046] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1621'. [ 112.018066][ T377] usb 3-1: Using ep0 maxpacket: 16 [ 112.024411][ T377] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 112.032576][ T377] usb 3-1: config 0 has no interface number 0 [ 112.038755][ T377] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.048626][ T377] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.058616][ T377] usb 3-1: config 0 interface 41 has no altsetting 0 [ 112.066987][ T377] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 112.076085][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.084117][ T377] usb 3-1: Product: syz [ 112.088302][ T377] usb 3-1: Manufacturer: syz [ 112.092935][ T377] usb 3-1: SerialNumber: syz [ 112.098699][ T377] usb 3-1: config 0 descriptor?? [ 112.104016][ T5009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.111529][ T5009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.138012][ T5055] block device autoloading is deprecated and will be removed. [ 112.202250][ T5065] overlayfs: failed to clone upperpath [ 112.210228][ T5069] overlayfs: failed to clone upperpath [ 112.319884][ T5009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.327099][ T5009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.941369][ T377] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 113.063873][ T5131] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1649'. [ 113.738411][ T5146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1654'. [ 113.747474][ T5146] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1654'. [ 113.756536][ T5146] netlink: 'syz.1.1654': attribute type 6 has an invalid length. [ 113.764374][ T5146] netlink: 'syz.1.1654': attribute type 5 has an invalid length. [ 113.772188][ T5146] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1654'. [ 113.910588][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.919171][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.961637][ T36] audit: type=1326 audit(2000000009.350:34129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x7ffc0000 [ 113.985256][ T36] audit: type=1326 audit(2000000009.350:34130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x7ffc0000 [ 114.008948][ T36] audit: type=1326 audit(2000000009.350:34131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe2e958ebe9 code=0x7ffc0000 [ 114.032449][ T36] audit: type=1326 audit(2000000009.350:34132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x7ffc0000 [ 114.056114][ T36] audit: type=1326 audit(2000000009.350:34133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2e958d550 code=0x7ffc0000 [ 114.079766][ T36] audit: type=1326 audit(2000000009.350:34134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e958ebe9 code=0x7ffc0000 [ 114.103494][ T36] audit: type=1326 audit(2000000009.350:34135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2e958d84a code=0x7ffc0000 [ 114.127045][ T36] audit: type=1326 audit(2000000009.350:34136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.0.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e95c14a5 code=0x7ffc0000 [ 114.170938][ T377] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 114.181942][ T377] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 114.191463][ T377] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 114.201978][ T377] usb 3-1: USB disconnect, device number 30 [ 114.740307][ T5185] 9pnet_fd: Insufficient options for proto=fd [ 115.054585][ T5210] netlink: 'syz.3.1678': attribute type 4 has an invalid length. [ 115.068023][ T378] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 115.095758][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 115.229055][ T378] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.237110][ T378] usb 3-1: config 0 has no interface number 0 [ 115.253185][ T378] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.266273][ T378] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.277389][ T378] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 115.286679][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.305397][ T378] usb 3-1: config 0 descriptor?? [ 115.345690][ T5247] overlayfs: failed to clone upperpath [ 115.398876][ T5262] overlayfs: failed to clone upperpath [ 115.472259][ T5274] TCP: TCP_TX_DELAY enabled [ 115.561316][ T5287] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 115.569492][ T5287] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 115.737640][ T378] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.000E/input/input19 [ 115.814724][ T378] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 115.990803][ T64] usb 3-1: USB disconnect, device number 31 [ 116.091957][ T5322] sit0: entered promiscuous mode [ 116.106708][ T5322] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 116.114613][ T5322] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1709'. [ 116.642380][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 116.642398][ T36] audit: type=1400 audit(2000000012.030:34186): avc: denied { getopt } for pid=5358 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.796958][ T36] audit: type=1400 audit(2000000012.180:34187): avc: denied { mounton } for pid=5364 comm="syz.2.1724" path="/proc/924/task" dev="proc" ino=28160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 117.022163][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 117.501903][ T5390] overlayfs: failed to clone upperpath [ 117.508548][ T5390] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1733'. [ 117.554384][ T5392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1734'. [ 117.731122][ T5415] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1741'. [ 117.743748][ T5415] rust_binder: Write failure EFAULT in pid:929 [ 117.988900][ T5433] 9pnet_fd: Insufficient options for proto=fd [ 118.008055][ T377] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 118.169290][ T377] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 118.178414][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.187097][ T377] usb 3-1: config 0 descriptor?? [ 118.548194][ T5442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5442 comm=syz.1.1750 [ 118.549475][ T5443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5443 comm=syz.1.1750 [ 118.997007][ T5420] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 119.876518][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.885162][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.169691][ T5494] fuse: Bad value for 'rootmode' [ 120.410882][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.419734][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.509294][ T5515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=5515 comm=syz.0.1775 [ 120.525140][ T36] audit: type=1400 audit(2000000015.910:34188): avc: denied { nlmsg_write } for pid=5514 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 120.921043][ T5532] 9pnet_fd: Insufficient options for proto=fd [ 120.953230][ T5537] overlayfs: failed to clone upperpath [ 121.333777][ T5549] rust_binder: Error while translating object. [ 121.333853][ T5549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 121.340328][ T5549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:950 [ 121.378254][ T36] audit: type=1400 audit(2000000016.770:34189): avc: denied { attach_queue } for pid=5556 comm="syz.2.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.381373][ T5557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:953 [ 121.516843][ T5573] rust_binder: Write failure EFAULT in pid:963 [ 121.630742][ T5588] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 121.658381][ T5588] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 121.668020][ T5591] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 121.734546][ T5602] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 121.797410][ T5607] rust_binder: 5602 RLIMIT_NICE not set [ 121.805348][ T755] rust_binder: 5601: removing orphan mapping 0:4256 [ 122.759387][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.768031][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.794539][ T5647] netlink: 'syz.0.1821': attribute type 4 has an invalid length. [ 122.804369][ T5647] netlink: 'syz.0.1821': attribute type 17 has an invalid length. [ 122.883030][ T36] audit: type=1400 audit(2000000018.270:34190): avc: denied { create } for pid=5660 comm="syz.0.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 123.112865][ T36] audit: type=1400 audit(2000000018.500:34191): avc: denied { create } for pid=5671 comm="syz.3.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.186590][ T5678] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1831'. [ 123.214482][ T36] audit: type=1326 audit(2000000018.600:34192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.1.1832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f574d18ebe9 code=0x0 [ 123.320484][ T5690] rust_binder: Write failure EFAULT in pid:1002 [ 123.457578][ T5692] raw_sendmsg: syz.2.1836 forgot to set AF_INET. Fix it! [ 123.478065][ T36] audit: type=1400 audit(2000000018.870:34193): avc: denied { map } for pid=5700 comm="syz.0.1839" path="socket:[28643]" dev="sockfs" ino=28643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 123.679382][ T36] audit: type=1400 audit(2000000019.070:34194): avc: denied { map } for pid=5712 comm="syz.3.1844" path="socket:[29247]" dev="sockfs" ino=29247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 123.788910][ T5719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.797487][ T5719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.018030][ T377] usb 3-1: Cannot set autoneg [ 124.023074][ T377] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -110 [ 124.329486][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.338947][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.641140][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 124.727127][ T5768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1865'. [ 124.914326][ T5801] netlink: 'syz.1.1876': attribute type 2 has an invalid length. [ 124.936512][ T36] audit: type=1400 audit(2000000020.320:34195): avc: denied { accept } for pid=5800 comm="syz.1.1876" path="socket:[29821]" dev="sockfs" ino=29821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.983655][ T5804] rust_binder: Error in use_page_slow: ESRCH [ 124.983683][ T5804] rust_binder: use_range failure ESRCH [ 124.989871][ T5804] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 125.004932][ T5804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 125.029351][ T5804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1015 [ 125.067594][ T5805] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 125.085321][ T5805] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 125.096359][ T5815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1879'. [ 125.312761][ T36] audit: type=1400 audit(2000000020.700:34196): avc: denied { read } for pid=5846 comm="syz.2.1891" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.341251][ T5845] veth1_macvtap: mtu less than device minimum [ 125.341728][ T36] audit: type=1400 audit(2000000020.700:34197): avc: denied { open } for pid=5846 comm="syz.2.1891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.373755][ T36] audit: type=1400 audit(2000000020.700:34198): avc: denied { map } for pid=5846 comm="syz.2.1891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.407923][ T36] audit: type=1400 audit(2000000020.700:34199): avc: denied { execute } for pid=5846 comm="syz.2.1891" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.449005][ T5858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.517462][ T5865] rust_binder: Write failure EFAULT in pid:1028 [ 125.551345][ T5877] overlayfs: failed to clone lowerpath [ 126.337028][ T5905] rust_binder: Write failure EFAULT in pid:1033 [ 126.404175][ T5915] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 126.433049][ T5920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1045 [ 126.476934][ T5930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5930 comm=syz.2.1918 [ 126.501729][ T5930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=5930 comm=syz.2.1918 [ 126.519312][ T5932] 9pnet_fd: Insufficient options for proto=fd [ 126.885653][ T5958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.944540][ T5971] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 126.986442][ T5975] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 126.994618][ T5975] rust_binder: Error while translating object. [ 127.004953][ T5975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.011312][ T5975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1079 [ 127.263761][ T5997] overlayfs: failed to clone upperpath [ 127.308956][ T6002] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1943'. [ 127.516116][ T6019] tipc: Started in network mode [ 127.521171][ T6019] tipc: Node identity ac14140f, cluster identity 7 [ 127.528059][ T6019] tipc: New replicast peer: 255.255.255.255 [ 127.534596][ T6019] tipc: Enabled bearer , priority 10 [ 127.541902][ T6019] overlayfs: failed to clone upperpath [ 128.040457][ T6074] netlink: 'syz.0.1968': attribute type 4 has an invalid length. [ 128.049604][ T6074] netlink: 'syz.0.1968': attribute type 4 has an invalid length. [ 128.193793][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 128.193812][ T36] audit: type=1400 audit(2000000023.580:34207): avc: denied { setattr } for pid=6099 comm="syz.2.1977" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.296151][ T6119] netlink: 'syz.1.1982': attribute type 4 has an invalid length. [ 128.317990][ T6119] netlink: 'syz.1.1982': attribute type 4 has an invalid length. [ 128.657741][ T755] tipc: Node number set to 2886997007 [ 128.771218][ T6138] /dev/loop0: Can't lookup blockdev [ 129.310613][ T6174] overlayfs: failed to clone upperpath [ 129.509858][ T6205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.511507][ T6205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.557451][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.573457][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.583495][ T6208] rust_binder: inc_ref_done called when no active inc_refs [ 129.625634][ T36] audit: type=1400 audit(2000000025.010:34208): avc: denied { getopt } for pid=6211 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.696972][ T6221] tipc: Enabling of bearer rejected, failed to enable media [ 129.867309][ T6233] fuse: Unknown parameter 'roo' [ 129.884238][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 129.926729][ T36] audit: type=1401 audit(2000000025.310:34209): op=fscreate invalid_context=CFA7AE [ 129.982453][ T6241] netlink: 'syz.0.2028': attribute type 46 has an invalid length. [ 129.990439][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2028'. [ 130.048944][ T36] audit: type=1400 audit(2000000025.440:34210): avc: denied { getopt } for pid=6251 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.119436][ T6257] binder: Unknown parameter 'seclabel' [ 130.126059][ T6259] overlayfs: failed to clone upperpath [ 130.169032][ T36] audit: type=1400 audit(2000000025.560:34211): avc: denied { lock } for pid=6267 comm="syz.0.2038" path="socket:[30656]" dev="sockfs" ino=30656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.259909][ T755] usb 1-1: USB disconnect, device number 9 [ 130.467377][ T6293] rust_binder: Failed copying into alloc: EFAULT [ 130.467406][ T6293] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 130.479054][ T6293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 130.487642][ T6293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1144 [ 130.504808][ T6291] can: request_module (can-proto-0) failed. [ 130.546801][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.553962][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.574734][ T6288] bridge_slave_0: entered allmulticast mode [ 130.582165][ T6304] overlay: Unknown parameter 'smackfsroot' [ 130.583401][ T6288] bridge_slave_0: entered promiscuous mode [ 130.648193][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.655283][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.662811][ T6288] bridge_slave_1: entered allmulticast mode [ 130.669270][ T6288] bridge_slave_1: entered promiscuous mode [ 130.762882][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.770012][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.777365][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.784464][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.812297][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.820260][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.831635][ T806] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.838827][ T806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.860072][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.867155][ T806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.897299][ T6288] veth0_vlan: entered promiscuous mode [ 130.910351][ T6288] veth1_macvtap: entered promiscuous mode [ 130.940224][ T36] audit: type=1400 audit(2000000026.330:34212): avc: denied { mounton } for pid=6288 comm="syz-executor" path="/root/syzkaller.tSRCfb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 131.000806][ T6348] syz.3.2063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 131.015858][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.3.2063 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 131.015895][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.015919][ T6348] Call Trace: [ 131.015928][ T6348] [ 131.015937][ T6348] __dump_stack+0x21/0x30 [ 131.015982][ T6348] dump_stack_lvl+0x10c/0x190 [ 131.016009][ T6348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.016032][ T6348] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 131.016058][ T6348] dump_stack+0x19/0x20 [ 131.016079][ T6348] warn_alloc+0x1bc/0x2a0 [ 131.016101][ T6348] ? stack_depot_save_flags+0x38/0x800 [ 131.016118][ T6348] ? __cfi_warn_alloc+0x10/0x10 [ 131.016139][ T6348] ? kasan_save_track+0x4f/0x80 [ 131.016156][ T6348] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 131.016181][ T6348] ? xskq_create+0x68/0x2a0 [ 131.016196][ T6348] ? xsk_init_queue+0xb6/0x120 [ 131.016221][ T6348] ? xsk_setsockopt+0x43f/0x6f0 [ 131.016254][ T6348] ? do_sock_setsockopt+0x26d/0x400 [ 131.016281][ T6348] ? __x64_sys_setsockopt+0x1b8/0x250 [ 131.016307][ T6348] ? x64_sys_call+0x2adc/0x2ee0 [ 131.016333][ T6348] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.016352][ T6348] __vmalloc_node_range_noprof+0x135/0x1420 [ 131.016380][ T6348] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 131.016404][ T6348] ? avc_has_perm+0x144/0x220 [ 131.016427][ T6348] ? kasan_save_alloc_info+0x40/0x50 [ 131.016450][ T6348] ? __kasan_kmalloc+0x96/0xb0 [ 131.016468][ T6348] vmalloc_user_noprof+0x77/0x90 [ 131.016492][ T6348] ? xskq_create+0xdb/0x2a0 [ 131.016507][ T6348] xskq_create+0xdb/0x2a0 [ 131.016522][ T6348] xsk_init_queue+0xb6/0x120 [ 131.016548][ T6348] xsk_setsockopt+0x43f/0x6f0 [ 131.016574][ T6348] ? __cfi_xsk_setsockopt+0x10/0x10 [ 131.016599][ T6348] ? do_futex+0x309/0x500 [ 131.016616][ T6348] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 131.016638][ T6348] ? security_socket_setsockopt+0x33/0xd0 [ 131.016654][ T6348] ? __cfi_xsk_setsockopt+0x10/0x10 [ 131.016679][ T6348] do_sock_setsockopt+0x26d/0x400 [ 131.016706][ T6348] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 131.016734][ T6348] __x64_sys_setsockopt+0x1b8/0x250 [ 131.016761][ T6348] x64_sys_call+0x2adc/0x2ee0 [ 131.016786][ T6348] do_syscall_64+0x58/0xf0 [ 131.016814][ T6348] ? clear_bhb_loop+0x50/0xa0 [ 131.016834][ T6348] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.016852][ T6348] RIP: 0033:0x7fafd018ebe9 [ 131.016871][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.016886][ T6348] RSP: 002b:00007fafd107f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.016905][ T6348] RAX: ffffffffffffffda RBX: 00007fafd03c5fa0 RCX: 00007fafd018ebe9 [ 131.016918][ T6348] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 131.016930][ T6348] RBP: 00007fafd0211e19 R08: 0000000000000004 R09: 0000000000000000 [ 131.016941][ T6348] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.016953][ T6348] R13: 00007fafd03c6038 R14: 00007fafd03c5fa0 R15: 00007ffe3f867188 [ 131.016968][ T6348] [ 131.017033][ T6348] Mem-Info: [ 131.067434][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 131.069851][ T6348] active_anon:16133 inactive_anon:3 isolated_anon:0 [ 131.069851][ T6348] active_file:21737 inactive_file:17115 isolated_file:0 [ 131.069851][ T6348] unevictable:0 dirty:42 writeback:0 [ 131.069851][ T6348] slab_reclaimable:6329 slab_unreclaimable:75470 [ 131.069851][ T6348] mapped:24222 shmem:7223 pagetables:1623 [ 131.069851][ T6348] sec_pagetables:0 bounce:0 [ 131.069851][ T6348] kernel_misc_reclaimable:0 [ 131.069851][ T6348] free:1487518 free_pcp:6328 free_cma:0 [ 131.214772][ T6351] overlayfs: failed to clone upperpath [ 131.218508][ T6348] Node 0 active_anon:64516kB inactive_anon:12kB active_file:86948kB inactive_file:68460kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:96904kB dirty:168kB writeback:0kB shmem:28908kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:7104kB pagetables:6396kB sec_pagetables:0kB all_unreclaimable? no [ 131.414692][ T6348] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:5748kB free_cma:0kB [ 131.445890][ T6348] lowmem_reserve[]: 0 3921 3921 [ 131.450973][ T6348] Normal free:3002232kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64588kB inactive_anon:12kB active_file:86948kB inactive_file:68460kB unevictable:12kB writepending:168kB present:5242880kB managed:4016120kB mlocked:12kB bounce:0kB free_pcp:7676kB local_pcp:6984kB free_cma:0kB [ 131.482721][ T6348] lowmem_reserve[]: 0 0 0 [ 131.500361][ T6348] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 131.516426][ T6348] Normal: 118*4kB (U) 287*8kB (UME) 830*16kB (UME) 525*32kB (UM) 317*64kB (UM) 141*128kB (UME) 173*256kB (UME) 81*512kB (UM) 49*1024kB (UME) 21*2048kB (UME) 670*4096kB (ME) = 2994448kB [ 131.535075][ T6348] 47204 total pagecache pages [ 131.541676][ T6348] 4 pages in swap cache [ 131.546228][ T6348] Free swap = 124388kB [ 131.551204][ T6348] Total swap = 124996kB [ 131.565853][ T6348] 2097051 pages RAM [ 131.572156][ T6348] 0 pages HighMem/MovableOnly [ 131.577245][ T6348] 351531 pages reserved [ 131.594143][ T6348] 0 pages cma reserved [ 131.615758][ T6348] Memory allocations: [ 131.625492][ T6348] 0 B 0 init/main.c:1370 func:do_initcalls [ 131.630994][ T6360] option changes via remount are deprecated (pid=6359 comm=syz.2.2068) [ 131.633281][ T36] audit: type=1400 audit(2000000027.020:34213): avc: denied { remount } for pid=6359 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.651406][ T6360] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 131.661229][ T6348] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 131.678298][ T6348] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 131.686313][ T6348] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 131.702899][ T6348] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 131.711380][ T6348] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 131.721953][ T6348] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 131.732523][ T6360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.733069][ T6360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.740265][ T6348] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 131.758388][ T6360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1162 [ 131.760836][ T6348] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 131.779403][ T6348] 0 B 0 init/initramfs.c:101 func:find_link [ 131.871205][ T36] audit: type=1400 audit(2000000027.260:34214): avc: denied { search } for pid=6380 comm="syz.3.2073" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.892925][ T6375] tmpfs: Invalid uid '0x00000000ffffffff' [ 131.899863][ T6375] fuse: Unknown parameter '' [ 131.912347][ T36] audit: type=1400 audit(2000000027.280:34215): avc: denied { getopt } for pid=6374 comm="syz.2.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.946754][ T36] audit: type=1400 audit(2000000027.280:34216): avc: denied { write } for pid=6380 comm="syz.3.2073" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.984390][ T6389] rust_binder: Write failure EFAULT in pid:1170 [ 131.998514][ T6391] netlink: 'syz.2.2078': attribute type 4 has an invalid length. [ 132.028534][ T6391] netlink: 'syz.2.2078': attribute type 4 has an invalid length. [ 132.050131][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.059579][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.399716][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.399749][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.406330][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.412942][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.419509][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.425991][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.432540][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.439272][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.445731][ T6397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.614276][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.615087][ T6433] x_tables: duplicate underflow at hook 2 [ 132.628993][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.812437][ T6442] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 132.812471][ T6442] rust_binder: Error while translating object. [ 132.824988][ T6442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.831334][ T6442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 133.361035][ T6470] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 133.379869][ T6470] __vm_enough_memory: pid: 6470, comm: syz.2.2102, bytes: 18014402804453376 not enough memory for the allocation [ 133.471803][ T6475] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 133.481033][ T6475] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 133.490045][ T6475] overlayfs: missing 'lowerdir' [ 133.625643][ T6482] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2106'. [ 133.637824][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 134.239895][ T6496] overlayfs: missing 'lowerdir' [ 142.069476][ T6521] binder: Bad value for 'stats' [ 142.074778][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.093766][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.397553][ T378] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 142.527601][ T378] usb 1-1: device descriptor read/64, error -71 [ 142.767580][ T378] usb 1-1: device descriptor read/64, error -71 [ 142.878487][ T6581] 9pnet_fd: Insufficient options for proto=fd [ 142.944743][ T6590] netlink: 'syz.2.2145': attribute type 1 has an invalid length. [ 142.952777][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2145'. [ 143.007618][ T378] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 143.087927][ T6601] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2150'. [ 143.130972][ T6610] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 143.157526][ T378] usb 1-1: device descriptor read/64, error -71 [ 143.174595][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.188778][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.198274][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 143.198290][ T36] audit: type=1326 audit(2000000038.590:34219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafd018ebe9 code=0x0 [ 143.427592][ T378] usb 1-1: device descriptor read/64, error -71 [ 143.537662][ T378] usb usb1-port1: attempt power cycle [ 143.877520][ T378] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 143.899974][ T378] usb 1-1: device descriptor read/8, error -71 [ 143.910209][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.918806][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.977252][ T6636] rust_binder: Error while translating object. [ 143.977287][ T6636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.983841][ T6636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1230 [ 144.045224][ T378] usb 1-1: device descriptor read/8, error -71 [ 144.045524][ T6640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.186175][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.201371][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.221680][ T801] bridge_slave_1: left allmulticast mode [ 144.228430][ T801] bridge_slave_1: left promiscuous mode [ 144.234457][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.242760][ T801] bridge_slave_0: left allmulticast mode [ 144.248725][ T801] bridge_slave_0: left promiscuous mode [ 144.254399][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.298172][ T378] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 144.328540][ T378] usb 1-1: device descriptor read/8, error -71 [ 144.379675][ T801] tipc: Disabling bearer [ 144.385111][ T801] tipc: Left network mode [ 144.399018][ T801] veth1_macvtap: left promiscuous mode [ 144.404736][ T801] veth0_vlan: left promiscuous mode [ 144.459613][ T378] usb 1-1: device descriptor read/8, error -71 [ 144.505364][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.512568][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.520013][ T6655] bridge_slave_0: entered allmulticast mode [ 144.526385][ T6655] bridge_slave_0: entered promiscuous mode [ 144.533026][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 144.542058][ T6661] bridge_slave_1: left allmulticast mode [ 144.547772][ T6661] bridge_slave_1: left promiscuous mode [ 144.553736][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.561409][ T6661] bridge_slave_0: left allmulticast mode [ 144.567094][ T6661] bridge_slave_0: left promiscuous mode [ 144.573010][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.581439][ T378] usb usb1-port1: unable to enumerate USB device [ 144.589161][ T6661] bridge0 (unregistering): left allmulticast mode [ 144.628587][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.635676][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.642874][ T6655] bridge_slave_1: entered allmulticast mode [ 144.649286][ T6655] bridge_slave_1: entered promiscuous mode [ 144.694341][ T6664] overlayfs: failed to clone upperpath [ 144.710245][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.715064][ T6672] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2177'. [ 144.717330][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.733676][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.740762][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.766453][ T804] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.775815][ T804] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.786052][ T806] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.793148][ T806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.807314][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.814444][ T806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.838832][ T6655] veth0_vlan: entered promiscuous mode [ 144.851023][ T6655] veth1_macvtap: entered promiscuous mode [ 144.904912][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 144.906046][ T6678] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 144.914467][ T6678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 144.924348][ T6678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:2 [ 144.986508][ T6693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.004011][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.019838][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.170536][ T6711] rust_binder: Error while translating object. [ 145.170585][ T6711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.176935][ T6711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 145.666869][ T6735] binder: Bad value for 'defcontext' [ 145.697691][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'. [ 145.763198][ T36] audit: type=1400 audit(2000000041.150:34220): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.147476][ T36] audit: type=1400 audit(2000000041.530:34221): avc: denied { read } for pid=6752 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.254755][ T36] audit: type=1400 audit(2000000041.640:34222): avc: denied { accept } for pid=6758 comm="syz.1.2206" lport=11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.669977][ T6788] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.721047][ T6796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263 [ 146.927522][ T377] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.089659][ T377] usb 5-1: Using ep0 maxpacket: 32 [ 147.097962][ T377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.106428][ T377] usb 5-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 147.122566][ T377] usb 5-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.135775][ T377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 147.145727][ T377] usb 5-1: string descriptor 0 read error: -22 [ 147.153234][ T377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.160643][ T6831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25706 sclass=netlink_route_socket pid=6831 comm=syz.1.2231 [ 147.162379][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.183329][ T6832] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 147.195344][ T6795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 147.204218][ T6795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 147.412352][ T6795] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 147.486855][ T377] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 147.503883][ T377] usb 5-1: USB disconnect, device number 2 [ 147.515800][ T377] usblp0: removed [ 147.609619][ T6851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6851 comm=syz.2.2238 [ 147.717866][ T6853] rust_binder: Error in use_page_slow: ESRCH [ 147.717894][ T6853] rust_binder: use_range failure ESRCH [ 147.723961][ T6853] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 147.729514][ T6853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.737659][ T6853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1275 [ 147.859335][ T36] audit: type=1400 audit(2000000043.250:34223): avc: denied { remount } for pid=6861 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 147.888599][ T36] audit: type=1400 audit(2000000043.260:34224): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 147.909237][ T36] audit: type=1400 audit(2000000043.280:34225): avc: denied { append } for pid=6865 comm="syz.2.2242" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.973239][ T6873] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 148.031945][ T6876] rust_binder: 6873 RLIMIT_NICE not set [ 148.039879][ T755] rust_binder: 6872: removing orphan mapping 0:4256 [ 148.111413][ T6889] netlink: 'syz.2.2250': attribute type 4 has an invalid length. [ 148.120946][ T6889] netlink: 'syz.2.2250': attribute type 4 has an invalid length. [ 148.172757][ T36] audit: type=1400 audit(2000000043.560:34226): avc: denied { checkpoint_restore } for pid=6892 comm="syz.2.2252" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.268504][ T6898] /dev/rnullb0: Can't open blockdev [ 148.324762][ T6901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.324798][ T6901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 148.334771][ T6901] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 148.345028][ T6901] rust_binder: Read failure Err(EFAULT) in pid:60 [ 148.407438][ T378] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 148.412309][ T6906] rust_binder: 1306: no such ref 3 [ 148.451416][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.460425][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.469494][ T6910] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 148.547479][ T378] usb 1-1: device descriptor read/64, error -71 [ 148.687456][ T377] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 148.787478][ T378] usb 1-1: device descriptor read/64, error -71 [ 148.838572][ T377] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 68, setting to 64 [ 148.849405][ T377] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.856028][ T377] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 148.865190][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.874190][ T377] usb 5-1: config 0 descriptor?? [ 148.879490][ T6908] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 149.027491][ T378] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 149.097042][ T6918] binder: Unknown parameter 'vwIg;1b' [ 149.124813][ T36] audit: type=1326 audit(2000000044.510:34227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.2.2264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f064898ebe9 code=0x0 [ 149.160328][ T378] usb 1-1: device descriptor read/64, error -71 [ 149.302225][ T6950] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2269'. [ 149.333661][ T36] audit: type=1400 audit(2000000044.720:34228): avc: denied { watch } for pid=6948 comm="syz.2.2271" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.397474][ T378] usb 1-1: device descriptor read/64, error -71 [ 149.526139][ T378] usb usb1-port1: attempt power cycle [ 149.870903][ T36] audit: type=1326 audit(2000000045.260:34229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.2.2273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f064898ebe9 code=0x0 [ 149.893909][ T378] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 149.918543][ T378] usb 1-1: device descriptor read/8, error -71 [ 150.049558][ T378] usb 1-1: device descriptor read/8, error -71 [ 150.287442][ T378] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 150.308475][ T378] usb 1-1: device descriptor read/8, error -71 [ 150.438472][ T378] usb 1-1: device descriptor read/8, error -71 [ 150.547587][ T378] usb usb1-port1: unable to enumerate USB device [ 150.893803][ T6968] usb usb8: usbfs: process 6968 (syz.2.2276) did not claim interface 0 before use [ 151.412276][ T6975] pim6reg1: entered promiscuous mode [ 151.417645][ T6975] pim6reg1: entered allmulticast mode [ 151.476029][ T377] usbhid 5-1:0.0: can't add hid device: -71 [ 151.487415][ T377] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.500429][ T377] usb 5-1: USB disconnect, device number 3 [ 151.636278][ T6989] binder: Bad value for 'stats' [ 151.688668][ T36] audit: type=1400 audit(2000000047.080:34230): avc: denied { append } for pid=6997 comm="syz.2.2287" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.824894][ T36] audit: type=1400 audit(2000000047.210:34231): avc: denied { execute } for pid=7008 comm="syz.0.2291" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.914602][ T7013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1351 [ 151.921804][ T9] rust_binder: 7012: removing orphan mapping 0:24 [ 151.945482][ T9] rust_binder: 0: removing orphan mapping 24:1112 [ 152.063862][ T7025] 9pnet_fd: Insufficient options for proto=fd [ 152.064261][ T36] audit: type=1400 audit(2000000047.450:34232): avc: denied { open } for pid=7017 comm="syz.0.2293" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.159850][ T801] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.379925][ T7045] overlayfs: failed to clone upperpath [ 152.397983][ T7047] netlink: 'syz.2.2305': attribute type 40 has an invalid length. [ 152.406281][ T7047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7047 comm=syz.2.2305 [ 152.762887][ T7064] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2311'. [ 152.999257][ T7071] rust_binder: Read failure Err(EAGAIN) in pid:95 [ 152.999429][ T7071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 153.162073][ T36] audit: type=1400 audit(2000000048.550:34233): avc: denied { map } for pid=7072 comm="syz.4.2315" path="socket:[35883]" dev="sockfs" ino=35883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.185632][ T36] audit: type=1400 audit(2000000048.550:34234): avc: denied { create } for pid=7072 comm="syz.4.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.549070][ T7087] overlayfs: failed to clone upperpath [ 153.617789][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.658451][ T755] usb 2-1: USB disconnect, device number 17 [ 153.667437][ T45] rust_binder: 0: removing orphan mapping 0:24 [ 153.678553][ T755] ftdi_sio 2-1:11.63: device disconnected [ 153.684403][ T45] rust_binder: 0: removing orphan mapping 24:1112 [ 153.734227][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.741561][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.748696][ T7089] bridge_slave_0: entered allmulticast mode [ 153.755081][ T7089] bridge_slave_0: entered promiscuous mode [ 153.761752][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.768871][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.776509][ T7089] bridge_slave_1: entered allmulticast mode [ 153.782917][ T7089] bridge_slave_1: entered promiscuous mode [ 153.788582][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.798489][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.808229][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.822731][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.831918][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.840114][ T9] usb 5-1: Product: syz [ 153.844400][ T9] usb 5-1: Manufacturer: syz [ 153.849081][ T9] usb 5-1: SerialNumber: syz [ 153.923223][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.930459][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.937853][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.944917][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.970265][ T806] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.978168][ T806] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.986830][ T804] tipc: Disabling bearer [ 153.992394][ T804] tipc: Left network mode [ 153.995798][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.003845][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.012947][ T804] veth1_macvtap: left promiscuous mode [ 154.018989][ T804] veth0_vlan: left promiscuous mode [ 154.061620][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.079859][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.087075][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.117207][ T7089] veth0_vlan: entered promiscuous mode [ 154.129991][ T7089] veth1_macvtap: entered promiscuous mode [ 154.177384][ T1604] Bluetooth: hci0: command 0x1003 tx timeout [ 154.177664][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.261978][ T36] audit: type=1400 audit(2000000049.650:34235): avc: denied { read write } for pid=7084 comm="syz.4.2318" name="lp0" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.264023][ T378] usb 5-1: USB disconnect, device number 4 [ 154.289729][ T36] audit: type=1400 audit(2000000049.650:34236): avc: denied { open } for pid=7084 comm="syz.4.2318" path="/dev/usb/lp0" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.292717][ T378] usblp0: removed [ 154.377041][ T7114] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 154.386910][ T36] audit: type=1400 audit(2000000049.780:34237): avc: denied { relabelto } for pid=7113 comm="syz.1.2323" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 154.414062][ T36] audit: type=1400 audit(2000000049.780:34238): avc: denied { associate } for pid=7113 comm="syz.1.2323" name="file0" dev="tmpfs" ino=28 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 154.523628][ T36] audit: type=1400 audit(2000000049.910:34239): avc: denied { unlink } for pid=7089 comm="syz-executor" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 154.643526][ T7117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 154.649096][ T377] rust_binder: 7116: removing orphan mapping 0:24 [ 154.664674][ T377] rust_binder: 0: removing orphan mapping 24:1112 [ 154.666957][ T7120] rust_binder: Error while translating object. [ 154.671376][ T7120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 154.677727][ T7120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:17 [ 154.830660][ T7128] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2328'. [ 154.863722][ T7131] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 154.863745][ T7131] rust_binder: Error while translating object. [ 154.876021][ T7131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.882406][ T7131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 154.905183][ T36] audit: type=1400 audit(2000000050.290:34240): avc: denied { append } for pid=7132 comm="syz.4.2330" name="pfkey" dev="proc" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.070583][ T7141] rust_binder: Error while translating object. [ 155.070635][ T7141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.076904][ T7141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 155.207379][ T377] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.367392][ T377] usb 5-1: Using ep0 maxpacket: 32 [ 155.373633][ T377] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 155.381826][ T377] usb 5-1: config 0 has no interface number 0 [ 155.387408][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 155.388037][ T377] usb 5-1: config 0 interface 72 has no altsetting 0 [ 155.404031][ T377] usb 5-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=c1.16 [ 155.413147][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.421205][ T377] usb 5-1: Product: syz [ 155.425380][ T377] usb 5-1: Manufacturer: syz [ 155.430002][ T377] usb 5-1: SerialNumber: syz [ 155.435336][ T377] usb 5-1: config 0 descriptor?? [ 155.478079][ T7154] sit0: entered promiscuous mode [ 155.485070][ T7154] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 155.493051][ T7154] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2337'. [ 155.502839][ T7154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7154 comm=syz.2.2337 [ 155.537409][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 155.544384][ T9] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 155.552852][ T9] usb 1-1: config 0 has no interface number 0 [ 155.562046][ T9] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 155.577825][ T9] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 155.589163][ T9] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 155.602317][ T9] usb 1-1: config 0 interface 200 has no altsetting 0 [ 155.610649][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 155.619999][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.628063][ T9] usb 1-1: Product: syz [ 155.632253][ T9] usb 1-1: Manufacturer: syz [ 155.636858][ T9] usb 1-1: SerialNumber: syz [ 155.642414][ T9] usb 1-1: config 0 descriptor?? [ 155.648136][ T7152] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 155.653982][ T36] audit: type=1400 audit(2000000051.040:34241): avc: denied { remount } for pid=7132 comm="syz.4.2330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 155.661255][ T377] usb 5-1: MIDIStreaming interface descriptor not found [ 155.685766][ T377] usb 5-1: USB disconnect, device number 5 [ 155.696484][ T6529] udevd[6529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.72/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.940001][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input25 [ 155.951826][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 155.959007][ C0] usb 1-1: hanwang_irq - usb_submit_urb failed with result -1 [ 155.967298][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 155.974633][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 155.975340][ T9] usb 1-1: USB disconnect, device number 18 [ 155.981817][ C1] usb 1-1: hanwang_irq - usb_submit_urb failed with result -19 [ 156.229804][ T7172] netlink: 'syz.4.2344': attribute type 2 has an invalid length. [ 156.481288][ T7178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 156.511699][ T7180] __vm_enough_memory: pid: 7180, comm: syz.0.2349, bytes: 18014402804453376 not enough memory for the allocation [ 156.602206][ T36] audit: type=1400 audit(2000000051.990:34242): avc: denied { setattr } for pid=7185 comm="syz.0.2351" name="PACKET" dev="sockfs" ino=37253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.638429][ T36] audit: type=1400 audit(2000000052.030:34243): avc: denied { watch watch_reads } for pid=7187 comm="syz.0.2352" path="/47/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.747320][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.899497][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.910729][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.919922][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.933049][ T9] usb 2-1: config 0 descriptor?? [ 157.049497][ T7200] rust_binder: Error while translating object. [ 157.049534][ T7200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 157.055762][ T7200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:155 [ 157.082736][ T7202] binder: Unknown parameter 'fscontext?}' [ 157.185611][ T7214] 9pnet_fd: Insufficient options for proto=fd [ 157.205175][ T7216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2362'. [ 157.214438][ T7216] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2362'. [ 157.235566][ T7216] netlink: 'syz.2.2362': attribute type 5 has an invalid length. [ 157.243720][ T7216] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2362'. [ 157.326748][ T7226] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 157.345506][ T9] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 157.371483][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input26 [ 157.401855][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 157.449944][ T9] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 157.541346][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 157.751188][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2348'. [ 157.756071][ T7250] x_tables: duplicate underflow at hook 1 [ 157.760725][ T7182] /dev/rnullb0: Can't open blockdev [ 157.772406][ T377] usb 2-1: USB disconnect, device number 18 [ 157.789950][ T7254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.790834][ T7254] rust_binder: 181: no such ref 1 [ 157.802615][ T7254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 157.815501][ T36] audit: type=1400 audit(2000000053.200:34244): avc: denied { mount } for pid=7255 comm="syz.0.2374" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.823166][ T7256] /dev/rnullb0: Can't open blockdev [ 157.948567][ T7270] netlink: 'syz.2.2379': attribute type 12 has an invalid length. [ 157.971176][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 158.227388][ T7284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 158.421029][ T7308] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 158.477272][ T377] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.631556][ T377] usb 5-1: Using ep0 maxpacket: 16 [ 158.648893][ T377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.667266][ T377] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.697262][ T377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 158.708588][ T377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.717692][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.725701][ T377] usb 5-1: Product: 寭燝㑛ꯕ観ᨬᤣ㑁₩艌㪤輕穲 [ 158.733834][ T377] usb 5-1: Manufacturer: ӿ [ 158.738545][ T377] usb 5-1: SerialNumber: ㊀歗䗧럷큛蠡팸챇Ⰳ蕡櫙솵ﾴ⬶嘍휊䊠ᝍ龉㪆퓥뢝㬄㿕ꩽ㳛狇୲僬ᡣᄱㄦአ耥퉍볪귲䥭强ᢵ僰渋ॼ亢呺휋⾈鹃拦ࠤ竰ѿ᪾ᶕ耉漃⫝̸혙쑹쟣뻓⦹唘瓥霢햷殲웯撨웏뤥⼁˚铦繣㚊햿 [ 158.797896][ T7316] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 158.976272][ T377] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.989096][ T377] usb 5-1: USB disconnect, device number 6 [ 159.155618][ T7340] binder: Unknown parameter 'fscontext?}' [ 159.417262][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 159.483590][ T9] rust_binder: 7283: removing orphan mapping 0:24 [ 159.495893][ T9] rust_binder: 0: removing orphan mapping 24:1112 [ 159.567330][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 159.574541][ T45] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.584101][ T7349] netlink: 'syz.4.2406': attribute type 12 has an invalid length. [ 159.590656][ T45] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.602162][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 159.610899][ T7354] __vm_enough_memory: pid: 7354, comm: syz.4.2407, bytes: 18014402804453376 not enough memory for the allocation [ 159.648085][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.657147][ T7361] rust_binder: Error while translating object. [ 159.657180][ T7361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.661121][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.664442][ T7361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 159.673135][ T45] usb 2-1: Product: 垢룕률㗡췯銹鶮麌壙駆䊋쩓ꃧ裃뫛곗쌉赭ᨀ楐냠䉑♗뫊썯ｺ踨蒆슈榐㎐닇铯䛊劘했ﲅ믃䰋垼놰㗡쥵팝빞髚煯藵ェ䔎馋凁贆䘝劔伬埍䍂᧚ﯝ⥪늜뛄ɒ嚯蜷鐥䂄鸉ꖿ庺鹜ዐ︸辩ꨡ式빍 [ 159.727414][ T45] usb 2-1: Manufacturer: 濧䡩꜔羀⋡˴츛퀲坓ꦕ猯戜נ贱蠝⟪퓑ꃅᰕ쭷ꜜ㳙ㄍ蹝្偬뱅䎻ꦗꒉ䩋풟꧎珡䟮砏㧷ψ㖯맚輷䍉诙ὂ祻飁킈즥沖ખ뒵鄂魕⛜縃婤ꗽ梉蜗甠⫍冨摠ⲯ̏㐉䱜揀갇받挃蒩男ꬂ䱅콺尊ﮖ䉣⮌ݸ⬃﮷㑞疲뎷᡼祷㱹ࣨⴾ쌧稠齴鈧ᡔЧ [ 159.759605][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 159.759630][ T36] audit: type=1400 audit(2000000055.120:34250): avc: denied { setattr } for pid=7368 comm="syz.4.2414" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.763183][ T45] usb 2-1: SerialNumber: 㗤绳⿉痂潸Ⱥ撎涍㙙鏿ክ縏ᱝ׺䴠備샭콑㍦⼧関岟銲띚ᇫờ吰퍒ົ䰂죧ᤅ磃蹉䓼䡾⒢ꊲ켑邔쓓Ὦ秸徟﵊愲樌醞턋ʜᵛ᪎↧樅뉵苢⤺켁힄莓Ꞝ莑⏪廚㖷秨镍黶숥쯉ㅮ뛳늭뛢馲雷装樗鵉肵㺵늗옥馔䎄脈模Ⓐఱ꪿莄땯༩䮃꥜መ [ 159.851398][ T7384] overlayfs: failed to clone upperpath [ 159.851463][ T7372] 9pnet: Could not find request transport: }M̬tfd [ 159.887262][ T347] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.915993][ T7394] overlayfs: conflicting options: userxattr,verity=require [ 160.232351][ T45] usb 2-1: USB disconnect, device number 19 [ 160.789970][ T7419] overlayfs: failed to resolve './file1': -2 [ 160.807815][ T36] audit: type=1400 audit(2000000056.200:34251): avc: denied { load_policy } for pid=7415 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.807847][ T7419] SELinux: policydb string length 1836477231 does not match expected length 8 [ 160.838657][ T7419] SELinux: failed to load policy [ 160.848745][ T347] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.875208][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.891421][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.903894][ T347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.914745][ T7429] binder: Unknown parameter '000000000000000000030x00000000000000030x0000000000000003' [ 160.917607][ T347] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.942491][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.954153][ T347] usb 1-1: config 0 descriptor?? [ 160.961918][ T36] audit: type=1400 audit(2000000056.350:34252): avc: denied { map } for pid=7430 comm="syz.4.2436" path="socket:[39008]" dev="sockfs" ino=39008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.367028][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.374541][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.382001][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.389484][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.396911][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.404427][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.411895][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.419015][ T7441] fuse: Unknown parameter '' [ 161.419394][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.431791][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.439450][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.447309][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.454739][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.467301][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.474747][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.484125][ T347] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 161.500731][ T347] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 161.502286][ T7448] fuseblk: Unknown parameter 'smackfstransmute' [ 161.517640][ T347] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.637616][ T755] usb 1-1: USB disconnect, device number 19 [ 162.222741][ T7459] binder: Bad value for 'stats' [ 162.258693][ T7461] netlink: 'syz.0.2445': attribute type 4 has an invalid length. [ 162.266566][ T7461] netlink: 'syz.0.2445': attribute type 5 has an invalid length. [ 162.274358][ T7461] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2445'. [ 162.393250][ T7474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.393702][ T7474] overlayfs: missing 'lowerdir' [ 162.409026][ T7474] rust_binder: Error while translating object. [ 162.409069][ T7474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.415294][ T7474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237 [ 162.439066][ T7476] netlink: 'syz.0.2449': attribute type 16 has an invalid length. [ 162.472128][ T36] audit: type=1400 audit(2000000057.860:34253): avc: denied { ioctl } for pid=7477 comm="syz.0.2450" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 162.472572][ T7478] rust_binder: Write failure EFAULT in pid:241 [ 162.613352][ T7482] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 162.613820][ T36] audit: type=1326 audit(2000000058.000:34254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70058ebe9 code=0x7fc00000 [ 162.619687][ T7482] rust_binder: Error while translating object. [ 162.658211][ T7482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.664511][ T7482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 162.703448][ T7490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.714067][ T7490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.720931][ T7490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 162.910220][ T7495] netlink: 'syz.2.2455': attribute type 4 has an invalid length. [ 162.928183][ T7496] netlink: 'syz.2.2455': attribute type 4 has an invalid length. [ 162.977258][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.501281][ T7512] SELinux: security_context_str_to_sid () failed with errno=-22 [ 163.528529][ T7518] usb usb9: usbfs: process 7518 (syz.0.2464) did not claim interface 0 before use [ 163.683865][ T7534] /dev/rnullb0: Can't open blockdev [ 163.853640][ T7559] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 163.907828][ T7564] rust_binder: 7559 RLIMIT_NICE not set [ 163.913004][ T45] rust_binder: 7558: removing orphan mapping 0:4256 [ 163.958500][ T7571] rust_binder: 82: no such ref 3 [ 163.963528][ T7571] rust_binder: 82: no such ref 3 [ 163.968802][ T347] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 163.984891][ T7573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 163.985531][ T7573] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2486'. [ 164.128267][ T347] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.139355][ T347] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 164.153384][ T347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.162488][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.170526][ T347] usb 1-1: SerialNumber: syz [ 164.287212][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.410945][ T7583] overlayfs: failed to clone upperpath [ 164.437301][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 164.472820][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.482355][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.590657][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.600893][ T45] usb 5-1: no configurations [ 164.605985][ T45] usb 5-1: can't read configurations, error -22 [ 164.956244][ T7605] sit0: entered promiscuous mode [ 164.963288][ T7605] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 164.971579][ T7605] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2497'. [ 164.981536][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=7605 comm=syz.1.2497 [ 165.012609][ T7607] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 165.012636][ T7607] rust_binder: Read failure Err(EFAULT) in pid:93 [ 165.039454][ T7609] binder: Unknown parameter '00000000000000000004' [ 165.069810][ T7612] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2500'. [ 165.309182][ T7632] rust_binder: Error while translating object. [ 165.309211][ T7632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.315480][ T7632] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 165.324982][ T7632] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:180 [ 165.343018][ T9] rust_binder: 7631: removing orphan mapping 0:24 [ 165.394163][ T7635] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2507'. [ 165.457177][ T377] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 165.483458][ T7639] binder: Bad value for 'defcontext' [ 165.489386][ T7639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.489422][ T7639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 165.525075][ T7643] binder: Bad value for 'max' [ 165.627605][ T377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.637171][ T377] usb 2-1: not running at top speed; connect to a high speed hub [ 165.657828][ T377] usb 2-1: config 9 has an invalid interface number: 49 but max is 0 [ 165.665989][ T377] usb 2-1: config 9 has no interface number 0 [ 165.677436][ T377] usb 2-1: config 9 interface 49 has no altsetting 0 [ 165.687084][ T377] usb 2-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 165.696219][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.705306][ T377] usb 2-1: Product: syz [ 165.709771][ T377] usb 2-1: Manufacturer: syz [ 165.714487][ T377] usb 2-1: SerialNumber: syz [ 165.766218][ T7653] rust_binder: Error while translating object. [ 165.766280][ T7653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.772972][ T7653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 165.996314][ T377] usb-storage 2-1:9.49: USB Mass Storage device detected [ 166.018164][ T377] usb-storage 2-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 166.030813][ T36] audit: type=1326 audit(2000000061.420:34255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.2.2522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f064898ebe9 code=0x0 [ 166.075796][ T377] usb 2-1: USB disconnect, device number 20 [ 166.421378][ T347] usb 1-1: USB disconnect, device number 21 [ 166.769884][ T7689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.873704][ T7692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51308 sclass=netlink_tcpdiag_socket pid=7692 comm=syz.2.2528 [ 166.947919][ T7702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.968016][ T7702] rust_binder: Error while translating object. [ 166.968031][ T7703] rust_binder: Error while translating object. [ 166.968062][ T7702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 166.974366][ T7703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 166.980948][ T377] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 166.991738][ T7703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273 [ 166.999461][ T7702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273 [ 167.027169][ T347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.048216][ T7706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7706 comm=syz.0.2533 [ 167.061874][ T7706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.062369][ T7706] rust_binder: Error while translating object. [ 167.068954][ T7706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 167.075298][ T7706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 167.100540][ T7708] binder: Unknown parameter '' [ 167.170511][ T377] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.183829][ T377] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.193867][ T377] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.205621][ T377] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 167.208224][ T347] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 167.214957][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.226621][ T7719] netlink: 'syz.0.2537': attribute type 11 has an invalid length. [ 167.237288][ T7718] netlink: 'syz.0.2537': attribute type 11 has an invalid length. [ 167.242050][ T347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.249958][ T377] usb 2-1: config 0 descriptor?? [ 167.256559][ T347] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 167.270449][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.284512][ T7721] binder: Bad value for 'defcontext' [ 167.286030][ T347] usb 5-1: config 0 descriptor?? [ 167.338840][ T7726] rust_binder: Write failure EFAULT in pid:297 [ 167.371732][ T7731] rust_binder: 302: no such ref 2 [ 167.683175][ T377] usbhid 2-1:0.0: can't add hid device: -71 [ 167.697216][ T347] a4tech 0003:09DA:001A.0011: invalid report_size -795022069 [ 167.704805][ T377] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 167.709960][ T347] a4tech 0003:09DA:001A.0011: item 0 4 1 7 parsing failed [ 167.720264][ T347] a4tech 0003:09DA:001A.0011: parse failed [ 167.725952][ T377] usb 2-1: USB disconnect, device number 21 [ 167.729545][ T347] a4tech 0003:09DA:001A.0011: probe with driver a4tech failed with error -22 [ 167.888722][ T7746] rust_binder: 130: no such ref 2 [ 167.893883][ T7746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 167.895071][ T7746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 168.128098][ T9] usb 5-1: USB disconnect, device number 9 [ 168.196607][ T7764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7764 comm=syz.1.2553 [ 168.242020][ T7766] rust_binder: Failed to allocate buffer. len:10771147061988852000, is_oneway:false [ 168.242052][ T7766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 168.251955][ T7766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:141 [ 168.342959][ T36] audit: type=1400 audit(2000000063.730:34256): avc: denied { bind } for pid=7775 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.372821][ T7776] /dev/rnullb0: Can't open blockdev [ 168.487134][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.638229][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.649677][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.659839][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 168.669380][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.679079][ T9] usb 5-1: config 0 descriptor?? [ 168.847131][ T377] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 168.997134][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 169.003448][ T377] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.011625][ T377] usb 1-1: config 0 has no interface number 0 [ 169.019464][ T377] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.028636][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.036658][ T377] usb 1-1: Product: syz [ 169.040928][ T377] usb 1-1: Manufacturer: syz [ 169.045547][ T377] usb 1-1: SerialNumber: syz [ 169.051016][ T377] usb 1-1: config 0 descriptor?? [ 169.086163][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 169.094051][ T9] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 169.262447][ T377] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 169.269029][ T377] usb 1-1: No streaming interface found for terminal 6. [ 169.276093][ T377] usb 1-1: Failed to create links for entity 5 [ 169.282448][ T377] usb 1-1: Failed to register entities (-22). [ 169.289122][ T9] cp2112 0003:10C4:EA90.0012: error requesting version [ 169.290980][ T377] usb 1-1: USB disconnect, device number 22 [ 169.303866][ T9] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -5 [ 169.491494][ T377] usb 5-1: USB disconnect, device number 10 [ 169.524283][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 169.795762][ T7880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 169.829840][ T7886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.910758][ T36] audit: type=1400 audit(2000000065.300:34257): avc: denied { create } for pid=7900 comm="syz.2.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.977735][ T7909] netlink: 'syz.2.2606': attribute type 12 has an invalid length. [ 170.127147][ T377] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 170.278242][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.289329][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.299171][ T377] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 170.308277][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.317230][ T377] usb 1-1: config 0 descriptor?? [ 170.433675][ T7941] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 170.784490][ T7962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.784543][ T7962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 170.816359][ T7964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 170.817192][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.835287][ T7964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:183 [ 170.843401][ T7965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.867367][ T7969] binder: Bad value for 'defcontext' [ 170.868604][ T36] audit: type=1400 audit(2000000066.251:34258): avc: denied { map } for pid=7968 comm="syz.1.2625" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 170.988179][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.002155][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.002356][ T36] audit: type=1400 audit(2000000066.391:34259): avc: denied { relabelfrom } for pid=7976 comm="syz.1.2628" name="RAWv6" dev="sockfs" ino=41725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.012398][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 171.035453][ T7977] SELinux: Context %/ is not valid (left unmapped). [ 171.045153][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.051959][ T36] audit: type=1400 audit(2000000066.441:34260): avc: denied { relabelto } for pid=7976 comm="syz.1.2628" name="RAWv6" dev="sockfs" ino=41725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="%/" [ 171.086041][ T9] usb 5-1: config 0 descriptor?? [ 171.129552][ T7982] loop2: detected capacity change from 0 to 8388608 [ 171.340267][ T7993] 9pnet_fd: Insufficient options for proto=fd [ 171.365991][ T36] audit: type=1326 audit(2000000066.751:34261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.2.2635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f064898ebe9 code=0x0 [ 171.451930][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2636'. [ 171.493708][ T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 171.507221][ T9] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 171.638777][ T8014] netlink: 'syz.2.2642': attribute type 4 has an invalid length. [ 171.646653][ T8014] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2642'. [ 171.656857][ T8014] overlayfs: failed to clone upperpath [ 171.692988][ T9] cp2112 0003:10C4:EA90.0014: error requesting version [ 171.700725][ T9] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -5 [ 171.772339][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.780898][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.789149][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.797386][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.805582][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.813798][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.822098][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.830671][ T8019] futex_wake_op: syz.2.2644 tries to shift op by -1; fix this program [ 171.907479][ T45] usb 5-1: USB disconnect, device number 11 [ 172.055468][ T755] usb 3-1: USB disconnect, device number 32 [ 172.136614][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.143756][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.150960][ T8027] bridge_slave_0: entered allmulticast mode [ 172.159518][ T8027] bridge_slave_0: entered promiscuous mode [ 172.166527][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.173787][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.181081][ T8027] bridge_slave_1: entered allmulticast mode [ 172.187770][ T8027] bridge_slave_1: entered promiscuous mode [ 172.194846][ T801] bridge_slave_1: left allmulticast mode [ 172.200785][ T801] bridge_slave_1: left promiscuous mode [ 172.206468][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.214282][ T801] bridge_slave_0: left allmulticast mode [ 172.220588][ T801] bridge_slave_0: left promiscuous mode [ 172.226251][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.361084][ T801] tipc: Disabling bearer [ 172.366519][ T801] tipc: Disabling bearer [ 172.376357][ T801] tipc: Left network mode [ 172.388667][ T801] veth1_macvtap: left promiscuous mode [ 172.394241][ T801] veth0_vlan: left promiscuous mode [ 172.561671][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.568889][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.590666][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.597771][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.650624][ T8027] veth0_vlan: entered promiscuous mode [ 172.665866][ T8027] veth1_macvtap: entered promiscuous mode [ 172.746014][ T36] audit: type=1400 audit(2000000068.131:34262): avc: denied { map } for pid=8051 comm="syz.1.2652" path="socket:[42387]" dev="sockfs" ino=42387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.818397][ T36] audit: type=1400 audit(2000000068.211:34263): avc: denied { lock } for pid=8057 comm="syz.1.2653" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.844144][ T377] usb 1-1: string descriptor 0 read error: -71 [ 172.858932][ T377] uclogic 0003:256C:006E.0013: failed retrieving string descriptor #200: -71 [ 172.878965][ T377] uclogic 0003:256C:006E.0013: failed retrieving pen parameters: -71 [ 172.887148][ T377] uclogic 0003:256C:006E.0013: failed probing pen v2 parameters: -71 [ 172.895289][ T377] uclogic 0003:256C:006E.0013: failed probing parameters: -71 [ 172.907083][ T377] uclogic 0003:256C:006E.0013: probe with driver uclogic failed with error -71 [ 172.921818][ T377] usb 1-1: USB disconnect, device number 23 [ 172.937088][ T378] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.008818][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2655'. [ 173.087144][ T378] usb 5-1: Using ep0 maxpacket: 8 [ 173.093581][ T378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.102084][ T378] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 173.110237][ T378] usb 5-1: config 0 has no interface number 0 [ 173.116356][ T378] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 173.127433][ T378] usb 5-1: config 0 interface 88 has no altsetting 0 [ 173.136173][ T378] usb 5-1: string descriptor 0 read error: -22 [ 173.142628][ T378] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 173.151866][ T378] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 173.160807][ T378] usb 5-1: config 0 descriptor?? [ 173.167526][ T378] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input31 [ 173.253515][ T36] audit: type=1400 audit(2000000068.641:34264): avc: denied { create } for pid=8072 comm="syz.2.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.273445][ T755] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 173.281079][ T377] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 173.294795][ T8075] rust_binder: 6: no such ref 1 [ 173.299807][ T8075] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 173.299825][ T8075] rust_binder: Read failure Err(EFAULT) in pid:6 [ 173.308754][ T8075] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 173.323356][ T8075] rust_binder: Write failure EINVAL in pid:6 [ 173.368128][ T31] usb 5-1: USB disconnect, device number 12 [ 173.437193][ T755] usb 2-1: Using ep0 maxpacket: 16 [ 173.443423][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.454497][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.464448][ T755] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.475774][ T377] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 173.484963][ T755] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 173.495074][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.503167][ T755] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 173.513458][ T755] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.527193][ T377] usb 1-1: config 0 descriptor?? [ 173.532223][ T755] usb 2-1: config 1 interface 0 has no altsetting 0 [ 173.541000][ T755] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.550400][ T755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.558513][ T755] usb 2-1: SerialNumber: syz [ 173.564291][ T8068] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 173.571686][ T8068] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 173.597058][ T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 173.748093][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 173.759372][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 173.768476][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.777660][ T45] usb 3-1: config 0 descriptor?? [ 173.940951][ T377] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 173.948869][ T377] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 174.140520][ T377] cp2112 0003:10C4:EA90.0015: error requesting version [ 174.148161][ T377] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -5 [ 174.167032][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.180333][ T8068] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 174.187638][ T8068] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 174.196358][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.204049][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.211029][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.218019][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.224937][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.231850][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.238814][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.245761][ T45] wacom 0003:056A:0323.0016: unknown main item tag 0x0 [ 174.253160][ T45] wacom 0003:056A:0323.0016: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 174.263705][ T45] wacom 0003:056A:0323.0016: hidraw0: USB HID v4.00 Device [HID 056a:0323] on usb-dummy_hcd.2-1/input0 [ 174.275923][ T45] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0323.0016/input/input32 [ 174.328378][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 174.336804][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 174.343442][ T378] usb 1-1: USB disconnect, device number 24 [ 174.347711][ T31] usb 5-1: config 220 has no interface number 2 [ 174.359807][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 174.373053][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 174.379969][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 174.387323][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 174.396022][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 174.405257][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.405738][ T8068] netlink: 8568 bytes leftover after parsing attributes in process `syz.1.2655'. [ 174.423514][ T31] usb 5-1: Product: syz [ 174.427995][ T31] usb 5-1: Manufacturer: syz [ 174.432660][ T31] usb 5-1: SerialNumber: syz [ 174.523450][ T755] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 174.532930][ T755] usb 2-1: USB disconnect, device number 22 [ 175.067851][ T8094] /dev/loop0: Can't lookup blockdev [ 175.092177][ T8095] /dev/loop0: Can't lookup blockdev [ 175.092619][ T36] audit: type=1400 audit(2000000070.481:34265): avc: denied { mounton } for pid=8093 comm="syz.1.2663" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 175.303761][ T36] audit: type=1400 audit(2000000070.691:34266): avc: denied { mount } for pid=8108 comm="syz.1.2667" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.305261][ T8110] rust_binder: 243: no such ref 0 [ 175.332622][ T8110] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 175.332641][ T8110] rust_binder: Read failure Err(EFAULT) in pid:243 [ 175.347699][ T36] audit: type=1400 audit(2000000070.741:34267): avc: denied { unmount } for pid=7089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 176.385378][ T755] usb 3-1: USB disconnect, device number 33 [ 176.737046][ T755] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 176.888058][ T755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 176.899804][ T755] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 176.909894][ T755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.918838][ T8134] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 176.922880][ T31] usb 5-1: selecting invalid altsetting 0 [ 176.927632][ T8134] rust_binder: Write failure EINVAL in pid:240 [ 176.933656][ T755] usb 3-1: config 0 descriptor?? [ 176.945059][ T31] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 176.952177][ T31] usb 5-1: No valid video chain found. [ 176.962633][ T31] usb 5-1: USB disconnect, device number 13 [ 177.397022][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 177.548105][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.559128][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.569007][ T31] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 177.578244][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.586621][ T755] usbhid 3-1:0.0: can't add hid device: -71 [ 177.592639][ T755] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.600886][ T31] usb 5-1: config 0 descriptor?? [ 177.607976][ T755] usb 3-1: USB disconnect, device number 34 [ 177.903305][ T36] audit: type=1400 audit(2000000073.291:34268): avc: denied { setattr } for pid=8150 comm="syz.0.2681" name="HCI" dev="sockfs" ino=42486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.010268][ T8158] binder: Binderfs stats mode cannot be changed during a remount [ 178.013735][ T36] audit: type=1400 audit(2000000073.401:34269): avc: denied { remount } for pid=8157 comm="syz.1.2684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.227026][ T755] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 178.327019][ T377] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 178.356976][ T755] usb 1-1: device descriptor read/64, error -71 [ 178.478276][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.489269][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.499344][ T377] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 178.508487][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.517386][ T377] usb 3-1: config 0 descriptor?? [ 178.596959][ T755] usb 1-1: device descriptor read/64, error -71 [ 178.611760][ T8139] rust_binder: Write failure EFAULT in pid:245 [ 178.837023][ T755] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 178.924573][ T377] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 178.932338][ T377] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 178.976993][ T755] usb 1-1: device descriptor read/64, error -71 [ 179.118295][ T31] usb 5-1: USB disconnect, device number 14 [ 179.126308][ T377] cp2112 0003:10C4:EA90.0018: error requesting version [ 179.142198][ T377] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -5 [ 179.217068][ T755] usb 1-1: device descriptor read/64, error -71 [ 179.227084][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 179.326032][ T378] usb 3-1: USB disconnect, device number 35 [ 179.327947][ T755] usb usb1-port1: attempt power cycle [ 179.377020][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 179.384331][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.395354][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.405269][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.414441][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.423476][ T45] usb 2-1: config 0 descriptor?? [ 179.429072][ T31] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 179.437755][ T45] hub 2-1:0.0: USB hub found [ 179.588033][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.599189][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.609018][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 179.618180][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.627384][ T31] usb 5-1: config 0 descriptor?? [ 179.638312][ T45] hub 2-1:0.0: 1 port detected [ 179.686980][ T755] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 179.707960][ T755] usb 1-1: device descriptor read/8, error -71 [ 179.838618][ T8175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.838657][ T8175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 179.846299][ T755] usb 1-1: device descriptor read/8, error -71 [ 179.857597][ T8180] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2691'. [ 179.873906][ T45] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 179.876339][ T36] audit: type=1400 audit(2000000075.261:34270): avc: denied { shutdown } for pid=8179 comm="syz.2.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.881238][ T45] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 179.910133][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 179.916141][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.937759][ T45] usb 2-1: USB disconnect, device number 23 [ 180.036781][ T31] isku 0003:1E7D:319C.0019: item fetching failed at offset 3/7 [ 180.037115][ T8188] rust_binder: Error while translating object. [ 180.044491][ T8188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.047675][ T31] isku 0003:1E7D:319C.0019: parse failed [ 180.051074][ T8188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 180.060662][ T31] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -22 [ 180.116946][ T755] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 180.138011][ T755] usb 1-1: device descriptor read/8, error -71 [ 180.182584][ T8200] rust_binder: Failed copying into alloc: EFAULT [ 180.182604][ T8200] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 180.189181][ T8200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 180.197546][ T8200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:41 [ 180.236167][ T36] audit: type=1400 audit(2000000075.623:34271): avc: denied { map } for pid=8176 comm="syz.4.2690" path="socket:[43575]" dev="sockfs" ino=43575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 180.237698][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.277577][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.277893][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.288409][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.302546][ T36] audit: type=1400 audit(2000000075.693:34272): avc: denied { write } for pid=8176 comm="syz.4.2690" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 180.303316][ T378] usb 5-1: USB disconnect, device number 15 [ 180.325993][ T755] usb 1-1: device descriptor read/8, error -71 [ 180.447053][ T755] usb usb1-port1: unable to enumerate USB device [ 180.466949][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 180.618151][ T9] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 180.626559][ T9] usb 3-1: config 160 has no interface number 0 [ 180.633177][ T9] usb 3-1: config 160 interface 200 has no altsetting 0 [ 180.642250][ T9] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 180.651435][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.660401][ T9] usb 3-1: Product: syz [ 180.664598][ T9] usb 3-1: Manufacturer: syz [ 180.669265][ T9] usb 3-1: SerialNumber: syz [ 180.866906][ T36] audit: type=1400 audit(2000000076.253:34273): avc: denied { listen } for pid=8208 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.905579][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 180.915120][ T9] usb 3-1: USB disconnect, device number 36 [ 181.011131][ T8227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 181.992186][ T36] audit: type=1400 audit(2000000077.383:34274): avc: denied { unlink } for pid=8252 comm="syz.1.2715" name="file0" dev="incremental-fs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.992807][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2715'. [ 182.326931][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.367303][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 182.476935][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 182.483413][ T31] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.494454][ T31] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 182.504454][ T31] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 182.514825][ T31] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.527908][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 182.535247][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.536895][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 182.544357][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.551558][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.557533][ T31] usb 5-1: SerialNumber: syz [ 182.573430][ T8262] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.581395][ T8262] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.589882][ T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 182.600517][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.608599][ T10] usb 2-1: Product: syz [ 182.612894][ T10] usb 2-1: Manufacturer: syz [ 182.617655][ T10] usb 2-1: SerialNumber: syz [ 182.623008][ T10] usb 2-1: config 0 descriptor?? [ 182.629079][ T10] usb 2-1: bad CDC descriptors [ 182.634097][ T10] usb 2-1: unsupported MDLM descriptors [ 182.791412][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.800328][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.846917][ T755] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 182.996884][ T755] usb 3-1: Using ep0 maxpacket: 32 [ 183.003110][ T755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.013570][ T755] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.024625][ T755] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.034525][ T755] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.047587][ T755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.054228][ T755] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 183.063316][ T755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.072061][ T755] usb 3-1: config 0 descriptor?? [ 183.240056][ T8282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.292156][ T8283] rust_binder: 376: no such ref 1 [ 183.303858][ T8283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376 [ 183.364008][ T8277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.380475][ T8277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.480682][ T755] hid-thrustmaster 0003:044F:B65D.001A: item fetching failed at offset 2/5 [ 183.489604][ T755] hid-thrustmaster 0003:044F:B65D.001A: parse failed with error -22 [ 183.497737][ T755] hid-thrustmaster 0003:044F:B65D.001A: probe with driver hid-thrustmaster failed with error -22 [ 183.683870][ T755] usb 3-1: USB disconnect, device number 37 [ 184.386915][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 184.476885][ T755] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 184.537996][ T45] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 184.547535][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.556897][ T45] usb 1-1: config 0 descriptor?? [ 184.627871][ T755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.638881][ T755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.648732][ T755] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 184.657905][ T755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.667111][ T755] usb 3-1: config 0 descriptor?? [ 184.899994][ T755] usbhid 3-1:0.0: can't add hid device: -71 [ 184.906102][ T755] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.915048][ T755] usb 3-1: USB disconnect, device number 38 [ 185.131342][ T9] usb 2-1: USB disconnect, device number 24 [ 185.165986][ T36] audit: type=1400 audit(2000000080.553:34275): avc: denied { map } for pid=8289 comm="syz.0.2728" path="/dev/urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 185.170064][ T8290] block device autoloading is deprecated and will be removed. [ 185.204147][ T45] usb 1-1: string descriptor 0 read error: -71 [ 185.210670][ T45] uclogic 0003:5543:004D.001B: failed retrieving string descriptor #200: -71 [ 185.220128][ T45] uclogic 0003:5543:004D.001B: failed retrieving pen parameters: -71 [ 185.228573][ T45] uclogic 0003:5543:004D.001B: failed probing pen v2 parameters: -71 [ 185.236751][ T45] uclogic 0003:5543:004D.001B: failed probing parameters: -71 [ 185.244402][ T45] uclogic 0003:5543:004D.001B: probe with driver uclogic failed with error -71 [ 185.256084][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 185.270674][ T45] usb 1-1: USB disconnect, device number 29 [ 185.278345][ T31] usb 5-1: USB disconnect, device number 16 [ 185.372962][ T8305] __vm_enough_memory: pid: 8305, comm: syz.1.2734, bytes: 21199845126144 not enough memory for the allocation [ 185.386014][ T8307] overlay: filesystem on ./file1 not supported as upperdir [ 185.408840][ T8310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.409423][ T8311] rust_binder: Error in use_page_slow: ESRCH [ 185.416080][ T8311] rust_binder: use_range failure ESRCH [ 185.422276][ T8311] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 185.428157][ T8311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.436439][ T8311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:329 [ 185.466412][ T8315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.476517][ T8315] rust_binder: Error in use_page_slow: ESRCH [ 185.483046][ T8315] rust_binder: use_range failure ESRCH [ 185.489084][ T8315] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 185.494595][ T8315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.502660][ T8315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:332 [ 185.599092][ T804] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.783928][ T8331] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2741'. [ 185.793529][ T8331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.794139][ T8331] rust_binder: Error while translating object. [ 185.800703][ T8331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 185.807014][ T8331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:389 [ 186.066859][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 186.226840][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 186.236859][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 186.248440][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 186.257754][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.266005][ T10] usb 1-1: Product: syz [ 186.270288][ T10] usb 1-1: Manufacturer: syz [ 186.275049][ T10] usb 1-1: SerialNumber: syz [ 186.280384][ T10] usb 1-1: config 0 descriptor?? [ 186.285675][ T8333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.444397][ T8346] cgroup2: Unknown parameter 'ne|_cls' [ 186.494635][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.504681][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.517305][ T10] usb 1-1: USB disconnect, device number 30 [ 186.528484][ T7166] udevd[7166]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.686849][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 186.836868][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 186.843269][ T31] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.851318][ T31] usb 2-1: config 0 has no interface number 0 [ 186.857458][ T31] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 186.868621][ T31] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 186.880998][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.890103][ T31] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 186.898219][ T31] usb 2-1: Product: syz [ 186.902385][ T31] usb 2-1: SerialNumber: syz [ 186.907796][ T31] usb 2-1: config 0 descriptor?? [ 187.043925][ T8355] netlink: 'syz.0.2749': attribute type 6 has an invalid length. [ 187.055833][ T8355] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000008' [ 187.064324][ T36] audit: type=1326 audit(2000000082.453:34276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.0.2749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd70058ebe9 code=0x0 [ 187.117689][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.127499][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.141690][ T31] usb 2-1: USB disconnect, device number 25 [ 187.356857][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 187.507988][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.518984][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.528798][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 187.537963][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.546629][ T10] usb 5-1: config 0 descriptor?? [ 187.616846][ T1604] Bluetooth: hci0: command 0x1003 tx timeout [ 187.617623][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.671965][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2751'. [ 187.681971][ T8361] overlay: Unknown parameter 'appraise' [ 187.954756][ T10] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 187.962570][ T10] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 188.153683][ T10] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 188.354292][ T10] cp2112 0003:10C4:EA90.001C: error requesting SMBus config [ 188.362296][ T10] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -71 [ 188.372648][ T10] usb 5-1: USB disconnect, device number 17 [ 188.950071][ T8380] input: syz1 as /devices/virtual/input/input36 [ 188.957869][ T8380] 8021q: VLANs not supported on ip_vti0 [ 188.965412][ T8380] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 189.282543][ T8380] /dev/rnullb0: Can't open blockdev [ 189.449957][ T36] audit: type=1400 audit(2000000084.833:34277): avc: denied { append } for pid=8401 comm="syz.4.2765" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.936775][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 190.100367][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.132936][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.158455][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 190.186773][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.209499][ T9] usb 5-1: config 0 descriptor?? [ 190.218936][ T8414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:406 [ 190.417406][ T8406] batadv0: tun_chr_ioctl cmd 2147767519 [ 190.457314][ T8406] batadv0: tun_chr_ioctl cmd 1074025672 [ 190.473368][ T8406] batadv0: ignored: set checksum enabled [ 190.636833][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 190.787879][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.816747][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.840449][ T8427] rust_binder: Error in use_page_slow: ESRCH [ 190.840477][ T8427] rust_binder: use_range failure ESRCH [ 190.849033][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 1.00 [ 190.886750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.894832][ T8427] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 190.894867][ T8427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.907258][ T10] usb 1-1: config 0 descriptor?? [ 190.926756][ T8427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 190.948236][ T10] usbhid 1-1:0.0: can't add hid device: -22 [ 190.974986][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 191.057932][ T8406] netlink: 'syz.4.2765': attribute type 4 has an invalid length. [ 191.069559][ T8406] netlink: 'syz.4.2765': attribute type 6 has an invalid length. [ 191.077392][ T8406] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2765'. [ 191.336783][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.497890][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.516793][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.536801][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 191.554608][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.574376][ T10] usb 2-1: config 0 descriptor?? [ 191.926770][ T7819] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 191.990697][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 191.994422][ T8435] /dev/rnullb0: Can't open blockdev [ 192.003288][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 192.015235][ T10] usb 2-1: USB disconnect, device number 26 [ 192.076779][ T7819] usb 3-1: Using ep0 maxpacket: 16 [ 192.082781][ T7819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.091833][ T7819] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.099652][ T7819] usb 3-1: can't read configurations, error -61 [ 192.226770][ T7819] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 192.386734][ T7819] usb 3-1: Using ep0 maxpacket: 16 [ 192.392682][ T7819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.401582][ T7819] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.409309][ T7819] usb 3-1: can't read configurations, error -61 [ 192.415787][ T7819] usb usb3-port1: attempt power cycle [ 192.529311][ T8443] fuseblk: Unknown parameter 'root' [ 192.776770][ T7819] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 192.797168][ T7819] usb 3-1: Using ep0 maxpacket: 16 [ 192.803234][ T7819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.812427][ T7819] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.820406][ T7819] usb 3-1: can't read configurations, error -61 [ 192.956814][ T7819] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 192.977509][ T7819] usb 3-1: Using ep0 maxpacket: 16 [ 192.983663][ T7819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.992893][ T7819] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 193.000558][ T7819] usb 3-1: can't read configurations, error -61 [ 193.007121][ T7819] usb usb3-port1: unable to enumerate USB device [ 193.017781][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 193.024114][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 193.036113][ T9] usb 5-1: USB disconnect, device number 18 [ 193.381886][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2783'. [ 193.401213][ T9] usb 1-1: USB disconnect, device number 31 [ 193.465937][ T8465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.466436][ T8465] rust_binder: Error in use_page_slow: ESRCH [ 193.473808][ T8465] rust_binder: use_range failure ESRCH [ 193.480206][ T8465] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 193.485786][ T8465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 193.494141][ T8465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:386 [ 193.658771][ T8474] fuseblk: Unknown parameter 'user_idgc' [ 193.700978][ T8477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.701003][ T8476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.733669][ T8485] fuse: Bad value for 'fd' [ 193.756723][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 193.771431][ T8489] fuseblk: Unknown parameter '9-yɻhO-U#ɹf͂TDahۜ­u"͟N0xffffffffffffffff' [ 193.783510][ T8489] fuseblk: Unknown parameter '9-yɻhO-U#ɹf͂TDahۜ­u"͟N0xffffffffffffffff' [ 193.826768][ T7819] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 193.896741][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.939337][ T8514] netlink: 'syz.1.2802': attribute type 28 has an invalid length. [ 193.976743][ T7819] usb 5-1: Using ep0 maxpacket: 16 [ 193.983052][ T7819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.994149][ T7819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.007302][ T7819] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.016444][ T7819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.025904][ T7819] usb 5-1: config 0 descriptor?? [ 194.146750][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.387369][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 194.436032][ T7819] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001D/input/input38 [ 194.448802][ T7819] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 194.526714][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.734626][ T8542] rust_binder: Fixups oob 164 166 363 196 [ 194.734648][ T8542] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 194.740487][ T8542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.748867][ T8542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 194.776777][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.896896][ T9] usb usb1-port1: attempt power cycle [ 195.086718][ T7819] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 195.236711][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 195.245576][ T7819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.258725][ T7819] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 195.267901][ T7819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.276478][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.283492][ T7819] usb 3-1: config 0 descriptor?? [ 195.291619][ T8562] fuse: Bad value for 'fd' [ 195.427740][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.666743][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 195.687676][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.695506][ T7819] usbhid 3-1:0.0: can't add hid device: -71 [ 195.701726][ T7819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 195.710402][ T7819] usb 3-1: USB disconnect, device number 43 [ 195.817949][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.926781][ T9] usb usb1-port1: unable to enumerate USB device [ 196.261349][ T8572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 196.311830][ T8571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 196.326082][ T31] rust_binder: 8570: removing orphan mapping 0:24 [ 196.341889][ T31] rust_binder: 0: removing orphan mapping 24:1112 [ 196.424042][ T8582] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2826'. [ 196.433547][ T8582] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 196.441009][ T8582] rust_binder: Write failure EINVAL in pid:97 [ 196.474422][ T8591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 196.530075][ T8599] devpts: called with bogus options [ 196.555515][ T31] usb 5-1: USB disconnect, device number 19 [ 196.690230][ T8612] __vm_enough_memory: pid: 8612, comm: syz.4.2838, bytes: 18014402804453376 not enough memory for the allocation [ 196.716088][ T8614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 196.783863][ T8609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 196.821448][ T36] audit: type=1326 audit(2000000092.203:34278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8625 comm="syz.4.2842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f508ef8ebe9 code=0x0 [ 196.824559][ T31] rust_binder: 8607: removing orphan mapping 0:24 [ 196.836735][ T7819] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 196.857224][ T31] rust_binder: 0: removing orphan mapping 24:1112 [ 196.998505][ T8633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 197.005507][ T36] audit: type=1326 audit(2000000092.383:34279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.2844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f508ef8ebe9 code=0x0 [ 197.039207][ T7819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.049181][ T7819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.062226][ T7819] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 197.071455][ T7819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.083700][ T7819] usb 1-1: config 0 descriptor?? [ 197.140388][ T8642] rust_binder: Write failure EFAULT in pid:127 [ 197.427546][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2852'. [ 197.492359][ T7819] cypress 0003:04B4:07B1.001E: hidraw0: USB HID v1.01 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 197.698382][ T8589] rust_binder: Error while translating object. [ 197.698427][ T8589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 197.704652][ T8589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:426 [ 197.759671][ T377] usb 1-1: USB disconnect, device number 36 [ 197.879280][ T8668] rust_binder: 351: no such ref 3 [ 197.899052][ T31] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 197.907307][ T31] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.290069][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 198.566679][ T7819] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 198.717834][ T7819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.728858][ T7819] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.737957][ T7819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.746665][ T7819] usb 1-1: config 0 descriptor?? [ 198.976420][ T8703] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.024078][ T8710] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2870'. [ 199.034459][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 199.120506][ T8712] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 199.157951][ T7819] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 199.176683][ T7819] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0020/input/input39 [ 199.197592][ T8717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 199.223189][ T8724] cgroup2: Unknown parameter 'gavordy݆n*nmod' [ 199.256047][ T7819] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 199.387187][ T8734] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2880'. [ 199.531735][ T36] audit: type=1400 audit(2000000094.913:34280): avc: denied { read } for pid=8739 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 199.555774][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.569481][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.686181][ T31] usb 1-1: USB disconnect, device number 37 [ 199.786677][ T7819] usb 3-1: new high-speed USB device number 44 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 199.936866][ T7819] usb 3-1: Using ep0 maxpacket: 32 [ 199.952924][ T7819] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 199.961723][ T7819] usb 3-1: config 0 has no interface number 0 [ 199.968102][ T7819] usb 3-1: config 0 interface 196 has no altsetting 0 [ 199.987579][ T7819] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 200.006716][ T36] audit: type=1400 audit(2000000095.383:34281): avc: denied { read write } for pid=8769 comm="ip" path="/dev/console" dev="rootfs" ino=30 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 200.030121][ T7819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.038611][ T7819] usb 3-1: Product: syz [ 200.042824][ T7819] usb 3-1: Manufacturer: syz [ 200.048803][ T7819] usb 3-1: SerialNumber: syz [ 200.054328][ T7819] usb 3-1: config 0 descriptor?? [ 200.065816][ T36] audit: type=1400 audit(2000000095.453:34282): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 200.097515][ T36] audit: type=1400 audit(2000000095.453:34283): avc: denied { read write } for pid=6655 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 OK [ 200.128315][ T36] audit: type=1400 audit(2000000095.453:34284): avc: denied { open } for pid=6655 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping iptables: [ 200.166811][ T36] audit: type=1400 audit(2000000095.453:34285): avc: denied { ioctl } for pid=6655 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 OK [ 200.209996][ T36] audit: type=1400 audit(2000000095.483:34286): avc: denied { read append } for pid=8774 comm="syz.4.2885" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 Stopping system message bus: [ 200.247480][ T36] audit: type=1400 audit(2000000095.483:34287): avc: denied { open } for pid=8774 comm="syz.4.2885" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.296916][ T7819] ipheth 3-1:0.196: Unable to find endpoints [ 200.305623][ T8781] overlayfs: empty lowerdir [ 200.306715][ T7819] usb 3-1: USB disconnect, device number 44 done [ 200.416870][ T8788] random: crng reseeded on system resumption Stopping klogd: OK [ 200.693103][ T8815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.731390][ T8819] overlayfs: failed to resolve './file2': -2 Stopping acpid: [ 201.056659][ T7819] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 201.092716][ T8851] fuse: Bad value for 'fd' [ 201.100703][ T8851] fuse: Bad value for 'fd' [ 201.167058][ T8858] fuse: Bad value for 'fd' [ 201.206597][ T7819] usb 3-1: Using ep0 maxpacket: 8 [ 201.215354][ T7819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.225075][ T7819] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 201.241100][ T7819] usb 3-1: config 0 has no interface number 0 [ 201.256615][ T7819] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 201.274987][ T7819] usb 3-1: config 0 interface 88 has no altsetting 0 [ 201.284124][ T7819] usb 3-1: string descriptor 0 read error: -22 [ 201.290488][ T7819] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 201.300271][ T7819] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 201.309538][ T7819] usb 3-1: config 0 descriptor?? [ 201.324228][ T7819] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input40 [ 201.492935][ T8884] batadv_slave_1: entered promiscuous mode [ 201.525695][ T7819] usb 3-1: USB disconnect, device number 45 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 201.816721][ T347] usb 5-1: new high-speed USB device number 20 using dummy_hcd umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 201.946685][ T7819] usb 3-1: new high-speed USB device number 46 using dummy_hcd Sent SIGTERM to all processes [ 201.973288][ T36] kauditd_printk_skb: 23 callbacks suppressed Connection to 10.128.1.250 closed by remote host. [ 201.973311][ T36] audit: type=1400 audit(2000000001.309:34311): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2791]" dev="pipefs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 202.035570][ T8885] batadv_slave_1: left promiscuous mode [ 202.067018][ T347] usb 5-1: device descriptor read/all, error -71 [ 202.401194][ T805] bridge_slave_1: left allmulticast mode [ 202.406904][ T805] bridge_slave_1: left promiscuous mode [ 202.412530][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.420141][ T805] bridge_slave_0: left allmulticast mode [ 202.425783][ T805] bridge_slave_0: left promiscuous mode [ 202.431472][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.439377][ T805] bridge_slave_1: left allmulticast mode [ 202.445024][ T805] bridge_slave_1: left promiscuous mode [ 202.450790][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.458328][ T805] bridge_slave_0: left allmulticast mode [ 202.463968][ T805] bridge_slave_0: left promiscuous mode [ 202.469647][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.477352][ T805] bridge_slave_1: left allmulticast mode [ 202.482994][ T805] bridge_slave_1: left promiscuous mode [ 202.488656][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.496159][ T805] bridge_slave_0: left allmulticast mode [ 202.502162][ T805] bridge_slave_0: left promiscuous mode [ 202.507794][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.515490][ T805] bridge_slave_1: left allmulticast mode [ 202.521248][ T805] bridge_slave_1: left promiscuous mode [ 202.526934][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.534449][ T805] bridge_slave_0: left allmulticast mode [ 202.540254][ T805] bridge_slave_0: left promiscuous mode [ 202.545848][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.774314][ T805] veth1_macvtap: left promiscuous mode [ 202.779903][ T805] veth0_vlan: left promiscuous mode [ 202.785689][ T805] veth1_macvtap: left promiscuous mode [ 202.791255][ T805] veth0_vlan: left promiscuous mode [ 202.796873][ T805] veth1_macvtap: left promiscuous mode [ 202.802406][ T805] veth0_vlan: left promiscuous mode [ 202.808062][ T805] veth1_macvtap: left promiscuous mode [ 202.813595][ T805] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 204.208231][ T8909] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 204.215239][ T8909] ACPI: PM: Preparing to enter system sleep state S5 [ 204.222281][ T8909] kvm: exiting hardware virtualization [ 204.227917][ T8909] reboot: Power down serialport: VM disconnected.