last executing test programs: 4.384012662s ago: executing program 1 (id=1698): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) 4.345317026s ago: executing program 1 (id=1700): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d95000288"], 0x48}}, 0x4000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @fd, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00000000000000000000000d0003"], 0x30}], 0x1}, 0x0) setuid(r2) ioctl$KVM_CREATE_VCPU(r0, 0x770a, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x100000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000300)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x2, 0x21, @empty, @empty, 0x8000, 0x1, 0x100, 0x7}}) sendto$packet(r7, &(0x7f0000000180)="0b0306", 0x3, 0x0, &(0x7f0000000140)={0x11, 0x6558, r8, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', r8, 0x40, 0x1, 0x7, 0x9, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x65, 0x0, 0xd, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x34, 0x39, 0x1, 0x3, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}}, {@remote}, {@broadcast, 0xfffffffc}, {@loopback, 0x6}, {@multicast2, 0x6e}]}, @lsrr={0x83, 0x7, 0x22, [@remote]}]}}}}}) 4.342194357s ago: executing program 1 (id=1702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000040)=""/76, &(0x7f0000000100)=""/154, &(0x7f0000000280)=""/129, 0xeeee8000}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) close_range(r0, r1, 0x0) 4.340745446s ago: executing program 1 (id=1703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x123) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x1f) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 4.286640061s ago: executing program 1 (id=1704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.262716044s ago: executing program 1 (id=1707): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x400, 0xfffffffffffffffc, &(0x7f0000000000)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5f9f815c32bef4c787d37bf37c7d9b6a17dfb0acc813a84e3a9b957c80eb84bae35a59eaca65a935a38b7db8a597fc554ff07286716d92e6f968f7ff7f9afff1eeb7155952846fa4d1d677ad056991fd5037cf395721c3e4bd8700"/104, @ANYBLOB="848240058b662dd5b4fdff1c0f80b8d91d961476a1b03b52d55a4697edfc34efefa714340ac25f42657d98087933b94a97f1ae472e", @ANYRES64=0x0, @ANYRES32=r1], 0x7c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, 0x0, 0x0, 0xc011, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000001340)="05031600d3fc14000000478836bfdf6321f383a6df1533ba9fc4450d6ed77ad73686e94868c841d8dc4b43e9f842d72ddd5214", 0x33, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r8, 0x0, 0x0, 0x80800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000140)='./file1\x00', 0xa4000061) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x32}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4010) recvfrom$unix(r9, &(0x7f0000000200)=""/42, 0x2a, 0x40000040, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x8000) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) 4.226537998s ago: executing program 32 (id=1707): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x400, 0xfffffffffffffffc, &(0x7f0000000000)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5f9f815c32bef4c787d37bf37c7d9b6a17dfb0acc813a84e3a9b957c80eb84bae35a59eaca65a935a38b7db8a597fc554ff07286716d92e6f968f7ff7f9afff1eeb7155952846fa4d1d677ad056991fd5037cf395721c3e4bd8700"/104, @ANYBLOB="848240058b662dd5b4fdff1c0f80b8d91d961476a1b03b52d55a4697edfc34efefa714340ac25f42657d98087933b94a97f1ae472e", @ANYRES64=0x0, @ANYRES32=r1], 0x7c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, 0x0, 0x0, 0xc011, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000001340)="05031600d3fc14000000478836bfdf6321f383a6df1533ba9fc4450d6ed77ad73686e94868c841d8dc4b43e9f842d72ddd5214", 0x33, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r8, 0x0, 0x0, 0x80800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000140)='./file1\x00', 0xa4000061) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x32}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4010) recvfrom$unix(r9, &(0x7f0000000200)=""/42, 0x2a, 0x40000040, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x8000) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) 912.328011ms ago: executing program 4 (id=1824): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0abfd00", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="080022013601000005001801350000000800a0000100008005001801330000002c00238006000400fc000000060010000200000005000e0002000000050011000000000005000f005600000007002400069b85001c00238008001400d5ffffff060012000900000008001a00030000000400cc00040008010a0018000303030303030000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x81) (async) r6 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r7, r8+10000000}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f00000001c0)=@fragment={0x0, 0x0, 0x9, 0x0, 0x0, 0x18, 0x66}, 0x8) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) timer_create(0x0, &(0x7f0000000380)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000280)="bc084d7ebeb56eb35d0d9d6a7ae31b", &(0x7f00000002c0)="ec76ae1f0907627052ffd352cabda0438d3d27097aadf7115d89e7144de1ff344a5be2da4c30498a0d8d8e9c180a8d87c739edb94350e7b494e3f5a0a5f26dd9ad4a1287e8e78891270ede602cdba78a9a66bd99e1d236875de4083b7401cd77b69b8c28d7ec65c514ff5cb0b54caca18bbb59ba9305e177d8e52c31ac5e"}}, &(0x7f00000003c0)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 908.395031ms ago: executing program 4 (id=1826): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0x96}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000100)={0x4, 0x2}) 907.084061ms ago: executing program 0 (id=1828): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r0 = timerfd_create(0x8, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) timerfd_settime(r0, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000280)=""/163, 0xbb) (async) write$cgroup_int(r3, &(0x7f0000000200)=0x38, 0x12) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000000ffff0010000008003950323030302e7523111c522b2ff025d80532474496ed984dc46a64842b663bca5f78851c9a52ddf29eee2273aac47229a133b5ba111f24bacb79078380a18e519db431fd8732664d76deb8531b7cc2b1924a38612c03ed49d1e328c3be780edf"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e803d66642c726601a26f08", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',noxattr,debug=0x000000007fffffff,cache=fscache,k']) (async) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x8, 0x2000008b}, 0x0) (async) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="31000000040000000000000000000000050000000000000008000000000000000900000000000000000000000000000000de53211df5b2a532ce268d4d043a2082d7b82464b167806c7ef7d03d38a92fb6f20330dead1ffd5986a761440e0321f9e62a8dd5ca2f3f32bca8cf10101d2fa6d53a62f4b7"], 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r9, 0xf, &(0x7f0000000140)) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) openat(r7, &(0x7f0000000340)='./bus\x00', 0x80040, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x180}}, 0x404c8c0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') 906.747551ms ago: executing program 3 (id=1829): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x31f, 0x0, 0x0, "", [@generic="7ec709148ba31668197712fa40d4cf815a"]}, 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 896.594422ms ago: executing program 4 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000040)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000000)=0xe7}) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 891.204213ms ago: executing program 3 (id=1831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r0, 0xc0046209, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0) pidfd_send_signal(r2, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)=0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00') pread64(r5, &(0x7f0000000080)=""/233, 0xfe58, 0x800000094) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x11, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_FREEZE(r0, 0xc0046209, &(0x7f0000000140)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0) (async) pidfd_send_signal(r2, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)=0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00') (async) pread64(r5, &(0x7f0000000080)=""/233, 0xfe58, 0x800000094) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x11, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) (async) 842.707628ms ago: executing program 0 (id=1832): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000010c0)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="0b041000e0ff020002004788aa96a13b", 0x10, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 842.213277ms ago: executing program 3 (id=1833): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000002b40)=""/48, 0x30}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000002d80)=""/245, 0xf5}, {&(0x7f0000002d00)=""/118, 0x76}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x6, 0x40000000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c1342, 0x0) sendfile(r1, r1, 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001880)={{r0}, "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"}) 840.215137ms ago: executing program 0 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') getresgid(&(0x7f0000002e00), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x8, @multicast, @rand_addr=0x64010102, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote}}}}}, 0x36) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async) getresgid(&(0x7f0000002e00), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x8, @multicast, @rand_addr=0x64010102, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote}}}}}, 0x36) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)) (async) 815.61525ms ago: executing program 0 (id=1836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, &(0x7f0000000100)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = socket$can_raw(0x1d, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 750.715866ms ago: executing program 0 (id=1838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 749.267496ms ago: executing program 3 (id=1840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x80, 0x8001, 0x6}}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff6) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000878000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xffffc000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5a, 0x0, &(0x7f00000005c0)="70ecc00b398fc2d305dbb8580b48d26fe73063b83c3d675b5567218fb4f08adabd83e0bd58480cf25d17c8e12984ecbf5032b43666f9d797fa58257111c4b96f2d2d70754c704fb01586622812793868a399348a39d27f4f16f0"}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup(r3) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 749.051117ms ago: executing program 0 (id=1841): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xffff0000, @private1, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)}, {0x0}], 0x2, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x4048004) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x8401) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 719.985909ms ago: executing program 3 (id=1843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x80000000, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000680)=[@register_looper, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/243, 0xf3, 0x2, 0xa}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0xd5, 0x0, &(0x7f0000000700)="363a0ee95a288dea676b7ba4797d6d05f4279897af23fa66c15bb87dcf17b5c211aa94f1a536febea54daa577db08ea2292d16b848559c4923740231631236668fcc60500d636e09b414ead4da0046e77c5f147e8506e2fe824b62df46dfd8d1ff288a148d6e0c0ea8983917267c01f7ebbdf4458431600769fdf592cd812575a859bed450e86d361c70d76a1e3ef5a3f9b9094fbad1ee1d9e14cbf175a7f1d010c57ad83699634bd7fd1881100b73fddc078eb1d8a26e01988c1993bb4e11663731ac1b9a2a97ed0f4db0bd61a37cfc4e5bb203c0"}) 695.013272ms ago: executing program 3 (id=1845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2000, @multicast1}, 0x2, 0x0, 0x1}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000001c0)) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) exit(0x2) exit(0x9) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_gettime(r6, &(0x7f0000000100)) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) 122.507787ms ago: executing program 2 (id=1847): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioprio_get$pid(0x3, r0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f00000000c0)='./file0/../file0\x00', 0x240021, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f0000000040)='.\x00', 0x2) 121.605317ms ago: executing program 2 (id=1848): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) (rerun: 64) 120.785038ms ago: executing program 2 (id=1849): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) clock_adjtime(0xa, &(0x7f0000000f40)={0x9, 0x2, 0x5, 0xffffffffffffffff, 0x100, 0x3, 0x9, 0x7, 0x8, 0x1, 0x83, 0x100000000, 0x8, 0x4, 0x9, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7f, 0xa, 0xb07, 0x4, 0x10000000000003ff, 0x80, 0x8d, 0x5}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x801, 0x6542) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) io_setup(0x3, &(0x7f0000000000)=0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket(0x2, 0x3, 0xff) shutdown(r6, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)={0x188, 0x1f, 0x304, 0x70bd23, 0x25dfdbfd, "", [@generic="da00c787fbaad66e90d7702c767a30da9719fa7163a33a10d4a53f46dd4aa123ff8a86bc499d3b8421825b09cc6224a3ec3933889842313de00120ed7e6b2bca1d77e069f13549e48f368c26dd2dd2e703570637a52a164de27a6a4eb5bc20718e1b63f3b774feca557a7c413670c7c4640c2936e949f882959a95697a17db1f6e70804cc2bfb95d408cc3669601ba55eca29dc17afbbb30be7c1a49ef6c7482281905685e2c25216ce1b7387511c467294a81ac37c56cc1e1407972a6943d37e0308ba039144590446373b2a12838824079ff646827645313e35eb9c2", @generic, @generic="a42f3e219bb90ac2d0e425b09a5666e96cc0c7431bcbb4e81f1814988781b187a91d54d053d512a29a526827c360f2da7054918eab5986d1159ec7bc1ff1b147ab31bac2c9c11da92111b4dc1805cd12d0f0358a26dc038afed4cd34cdec3c61b52927957bcb1653461245020615c34ac79e", @nested={0x6, 0x9f, 0x0, 0x1, [@generic="4fc8"]}, @nested={0x1e, 0x13f, 0x0, 0x1, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x1b}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0x3ff}, @generic="acf2e7224a5b"]}]}, 0x188}, {&(0x7f0000000980)={0x298, 0x2b, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x4}, @nested={0x281, 0x74, 0x0, 0x1, [@generic="d7e849880cc27d4fba51be4de5d08f5b00c2e8a2b586fa1d5205a16167c3916a964f3e4505f2894883eebdf64fc302da1cea8fe752d4fe721b4a24780afde9c715c779ac1c4e1ec9e9d6e365623929b8a098810724cca659a5788725a6affd462de120b852bebe46d2a04db9dbe3495596c8d81c51b0dbd75ba16a7ada2c341d04304ba85c2332", @nested={0x109, 0x48, 0x0, 0x1, [@generic="fe4f5793140fe21e43c5d5d46d13838c51aeca37bf85c5b1fa347e289cbc321de1c077ba5a5b5766e65194774a54aae7b291275a7a77dad935fb13b9034493b2c7d48931a63df2438bf78a7c05c6f219b23e6bc1827599f615d70ec935777e3dd2fe6b88f926bf9d5a3d512786701c54262946ec", @generic="d321bd436e5d97cb4dca3c5d32d27420149de2bd8a22969dd8de4beb27f92a5c19f0e55e235cda26753f01e04fcce4196e126db7211bbfa163f7ec4a804d89", @typed={0x4, 0x17}, @typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="26c4a1ff1198befd9b4723fc2a08bd4cbf7d80fa232d80caa02fb68b5149d933b24ca37eae4bfd701e7940d92c3cb97cd803523131b057c07e5f94d6bcc904280b87141b39f6"]}, @generic="9cda02bbe59e4527e9a8f35bc8f9cdeea9ad43050c4ffa8d8e5cdcec42d4cc3cc36fce1934676c9d096ac1fbb07c7d50f3ad9b17709b777ceda4bf46b14a73c90ad72ec917205e796bfab082f8335a2afe8617f080ba40dda897a801c4730ec43b92b9780d7cea80112eaa1f9aac70824e16d1602487a2289d51589af3407b10a5ed910ce236cb1d06076b5b00b97fea30a76c846c5aaf723c4657f6d9f42f061af7825933bceb86dc6949cc49d43901d77a50b6fe95bb5df1707e73cab7b11fb4220800dbda4b50a2acf5068140ea2d363f710a6f1aef566834622992a84e3fa343518987eecba31068"]}]}, 0x298}, {&(0x7f0000000600)={0x7c, 0x26, 0x0, 0x70bd2b, 0x25dfdbff, "", [@generic="b72078fd2b0de24cd83942127b7a72c9240929c2495ad2ad91e664ba6544559e908c59c7be7bdbf67d52aacc72b210d6a658e815a5ef91d4aed76bf364107ffa00c8d5483686481bfa3bd44656fd15f5a139bf975025be5ff5e4465459980bc0a8", @typed={0x8, 0xe5, 0x0, 0x0, @fd}, @generic]}, 0x7c}, {&(0x7f0000000c40)={0x13c, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x115, 0x139, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x139}, @generic, @generic="52d6a34a2f3b899fe7a0210fcfab88"]}, 0x13c}], 0x4, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000280)=0xe3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002042, 0x0) r7 = eventfd2(0xe, 0x1) io_submit(r3, 0xa, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000280)="711a540ea0f0cf59c870f835a734dbadf1c727ebab5b3ee3b97c917be365e243f5bf16de5b38cb7d06b2a7b5618502ce5f34b864a9515524c07fc0c8897c368918b52db9083cd630e0e7beef113ee8b3f28d7d206c207fe78e7b140141a6f5b08d8981b43f5655dd804fda0b7e0c3afa7f5ab6a5b93ab827f1baf82e33c70883f318965b2a5742662a5600ed0a653e29a113a8c6142f2e6f91207cd08f4931954a2887dfd0fc09fb03975235a0", 0xad, 0x5, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000340)="29fd84e617c50a1d22207b99ce0c82fc30faa3394a3e1eef6069e2367b028c2282c73b97c674f2626cc484570f3870c0f359d28b665f74f0b756f31efd7d856cdb493e50c951257e347281fa7852ba0af0b3a9cdde43a1381b20bcbcdfd2a476332f58feb47f3928768401300254e85c74aee2ad8647983db228808bf94b6d4a7ccc8825ddb97ac38dee6e46d37e7ce81bc8c79c521dc3aba09841ffe761d910f0e4", 0xa2, 0xfa, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x8000, r1, &(0x7f0000000400)="c68c5f036d84beb24648e10e5ff40ee591e35dc5a3e760a9d08fcdf9c6007f2208d5db94e638e3f6a7d2bc91c83f786204ba4968a22b4f8aa2c328daa91a7c8af6f4cbd7adcf04e8a0d3fc887f7b89dfac2da4148670a3e5ffe1b1b230d306c4779b63f375382bf9b09304dcceff394096535af8", 0x74, 0xb, 0x0, 0x1, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x400, r4, &(0x7f00000004c0)="0db8c23365982f0975ec3fbd40a5b00aafc6ddc35634ac0b959265fdde8427332a1d6e783f352a48be533af2f5d339da2c811284d9dfc34f578d064b7ae9ba2bd0e09b5e6c53d2608ddb4915", 0x4c, 0x7fff}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000000580)="080ccf0a3ff455621c4a72d7d4f8d5a9705dc1bba596ab0d92aa0b55886ee9b6936f4de3fc0bcf9c2f7ebfabc8c3898c77d723100a4ebacb536a6abcfdbfe243f8dd3dac1aba2b3d33a19b45b3c9ec2c310c0dbcdf2002e5e56f3a72e5bfa21b301a137ba79a43b20ebaa7b0dbd737b77c7e00", 0x73, 0x0, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f0000000640)="72f478f201d12b62d45142bde59fa25b4a7b6fc0238d0d13", 0x18, 0x3, 0x0, 0x1, r7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f00000006c0)="b416c3e3dbff6081cd4ff5043214ad418769b1f429c8c2db114a0d5c7b6b463e72737c2df4fcb1d8998677cc7ef7e7327aa5d2e209e9ea3f12d897c686797aabdf8b542b21b8477e024663be00d880b529fda4d67198bbebf91a42c27caa0f40de85860a2b8d55a74155fea97e262e58269ace96351af589a2eb57dbb14fd7b7cbf670482f761353923032a8035a97b130f5b16d5bb7b509393b5d82bf6fdb78dc3180e60703d796b03a45af73597b13d319958ce4f1c27f05be97cd8057769c1aab5dbaa24c9b293079e70da53ab2ad336de8654406af4754", 0xd9, 0x9, 0x0, 0x0, r2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000800)="c4f5923d58a3f491980049ae30d746c5f060cc7edcfd36050ccd8912a4c79a77", 0x20, 0x1000, 0x0, 0x2, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000880)="2fffde21e376ccb2e546cc7913f956e7ae2e8c61e613b5b3314ffee1b0f2", 0x1e, 0x779, 0x0, 0x1, r2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xdfb1, r0, &(0x7f0000000900)="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", 0xfc, 0x10, 0x0, 0x3, r2}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000001480)={0x2020}, 0x2020) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 60.612154ms ago: executing program 4 (id=1850): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) fcntl$getownex(r1, 0x10, &(0x7f0000003640)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/mnt\x00') setns(r2, 0x40000000) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000380)={{}, "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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 46.711205ms ago: executing program 4 (id=1851): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0xc02, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x236a83, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001b80)=[{{&(0x7f0000000a40)={0xa, 0x4e20, 0x8, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x4001c40) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xc0010117, 0x0, 0x2}, {0x8d9, 0x0, 0x4}]}) 7.531529ms ago: executing program 2 (id=1852): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x431}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="49e21f6dc5dff91aba5f6b3000000080611a6b26b92fedb23a5a851e10e9371e"], 0x34}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000240), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x72, 0x4) write(r0, &(0x7f0000000400)="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", 0x1f000) 4.580969ms ago: executing program 4 (id=1853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844632,\x00']) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') close_range(r3, r3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) sendmmsg$inet(r2, &(0x7f0000000040), 0x0, 0x10) 747.369µs ago: executing program 2 (id=1854): mknod(0x0, 0x836fac3ed7542db, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80400) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r1, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba74d6a717d19f0797fde80e383d0f06834ec2455c762dcbb20c6e615768ae1ef2855bd90b1506abb8c58a7bcd64d753141e4710c3b58be77add5f8439c1afe4f5dfe3838f453e6ac1fbb2ef1c7e4322f66500cf993a948fd4580f12f47228eb0cf1fee169e666c555c49b99b5183c90797dff8b211a06cd041864fa82d2aa6a8bcc52c1316575a9ec287a5d23ddee28c25ef09fc40ef3801342b95b929ab1f622109d7adcff323dce8d88db9d01350e8d92273fbbc7186663b52c61048cc1dd663877a6ca365e1055d25f6f88f7bc480d820130636c1e99d7966cac5743f503baa549aa32be1c3c5da052b025cfc82c23bdffd7baf10b8da9099ce5c60009124cd0076b59b1dd3e7f267a83a2557ce64f074a6b0dd0d2a1a0908a04dd139764dd4b9aa55fea5e73ec674784613a2b045a8a9fb02aec4bb0fab3840cfef0d65e53d6dfc412b78ff0611b6fe39360427ab2cdb4ac00cfe931f7f539f929ad1fecebdf9b32b62fc460a1f89b87b422e41c945887e4e87936651f316e764b7b83d7add0a0c7d2555250afcefe83d889929d59bb6400ae3c5fbbe569b7855910cc28ead46a98dfe55b15bbb7d45e87126c39e16195fd9e815766d86755bc51dc89fcda44838fae895bef3452fcb44362754708436baa516c609baec2fdfa21601296240b7db905ecdb18bd720a283677f38472aa8edd5f86e5df59f29cf11e373e47176219231694d5f41a3ad0fa0e7f368164242230ffeb9c96b4683bb369dd3ab9d744e1296ae24da9b7bae7c548d34b4d40a3ec3241572923935b10bee949550808d977958e734a306f1d4154fe313815ffdfed2f709ea2150c73f9eecf6eddfcef8975cc7d9fd6812fdf03723638b4a33aae25f8a8e4fb766d0f5af2ef6340d7a1f03193faee24ee2aa9ad3cdb22cf97f5f5e1637c5e3dcc2e0e533845876d877c3d3ef445eca621b69858d4049d32c28eeaa304d274752f6ecbcac9d0b0fd792ae043fee30546ac2b73000ad48e6d037adad0a5aab5566008994d7e87eecc01135b049c10c7154cc3291f21d71089d5f515ab42c7f96dee5b76ce9dc2e86d159410256add91c3b36de1cd3af25345ccda3fa1d4ea2efa39aa479cd586d05c9cbadbcbec665dfcf16913d7c4aa2526483bd8754595887b244024673f093ed606f38a4d1ef05d9487c4e50c368db27679c507b032869901f43a0c030855074485e6064b47e04ddc213b87f69b444b552d033af4839c50417611b9e4e085ce9c91efd55484e20757e8deb494bb2d1a679b6140a15b80469f1fa2afb6ab2cb281226ed5b9f31b0c4f9ee79df1e6988802205531e93fc32f1e9d16f091818223891ea22a1d5a3397d4162809527febb5cc92d1b2c42b78196a65de99ea4b8558651ad31aa1a3fafd05052e071d2508198c25bc785bb3d96f82fbb67bae7931a33873a95fad8a28220f29a62fd456af2f214f772a0dc3ec35f89c1ac29e1f167b5020105dcf505d461e2f8ba6fbdf37fc1865df25861d59c7f9aab4670df824bcbb4a54b8927b3270a039974a4c9db6fcc249b18268ada4d63ded7961d72a6dcbf98edbdf2bc6c65c8e1b2e0b0712878b88a8a909374a327ce3918a773a5f787f042c71e5645f66eaf9f931f97f2cb3d11cdd35db0795dc0c2beb43ef727e0582236f74d9d62fcfca760e3de403b4dd65c781025b042991be215b11e08cc0557685f2a9cbfd66df9ab14d7d1962c8ba36c7c4ccc722c63e2f0e422582fc42e22b8c6d830346be1a9d08950f8bd6c66e54f05b0fb47e1e0137c93313823f63ad76a00862fb6ca19f7f9039940e4fb2176366c65e4c6380ff9d527df470f8a506ada84c2fba29f0c832e124101acd72ae837ecafae1027905b4a627c8d82582cd04fd2bc0e4c296e46f14bcd4d488e509ad92b15ffffb5975a05ffbb065e70e852412575ad7ed463f6889aace479bc97eb398d4cd7cb415f5c1953862cbe08ee2e428428475f69ea82e6e4da4613be4849ec73f05e72bf9e7e20e3a1d9938886b8ad80f6883f9f8f37094efd1502600307bfbe977250b5dc9d0bfb11b40ec58bb21ebae884da3e4776ee05de3077cd00caaa3892c9e4e9ab62011c20761fae89656c8b699214c05cd9617edf6ba3d295d49c7eeae245ec604b9bdaa44c5370278f0775e30c8a7992b50d6b1d10568d8ebaf96f63a4c3b30d1be1da72a2690d1d6a08209f07ba79718d4b37a8647efe45bd33f7afff4e6a10a3398c0befb6653cb139e52e59c84fd760bb9d52ee6fe2d9c592abaa41c979b06676bca37834eba8941213b100c8a237c84c9052b84bc973ea7738982679bd97b3805a36d6c67b145ced3a8329dcd115c13f120de5eaa188afa4a08680a924f65a1d922b4b25a60a140e91cf897635d6a881ba6856936ee852dd48992d0309ece305e0e50a87a93cc2a0ad6c8a2ebd2b958eceebc225274e344ca95b8bf98d5615bff6ad41e66f45010d7156e91fdb584b01942bc868eaeb9b234fd91a1b62812f8815bdc693842ab81b93bc885542e917bc8fa8f477a1568407179ba34f239584cace7925dc6bd4e70a140c137b21aca820b9ac18cee4a089e644ed01341e5c72616d9fd838ad110e841c27d45b3003f12c8a84b94c1d4a7bb6fae0763bb8635403fcd576e49aba43d628db611be371b97a0ffd88736651eef087f88748d89c0cf02be76242ac244e6f4a344ab58630c5d5c15bd3adf1535c498ce893416d2c6033bb9f904e1781d88260bec2ba176bf795daef73d97630e33f1481bf3f1d8fdc984cb0c6d78bc1297852f607f166f0658da2c55ec71f84664fed8537cb8e1934e904fb99db035590c874e0aae5d4004cfa8a4cb1002eb931850dcfc9a8ae59893eb36dbf40ef93991c29c808b9aaa99a6e852ab026a68bea76a3060d4e21efe502de33a7ca0363654eff9c75d1969a838aa90ee0e2ed268f1f9cedf10d1693bdb4512fcbb7484a1d054fe6f1c180e7cde130d933aace81bd7d7efe7db0bb8bafcbd0c6e839739c51f199f77aefde6d70bf110d2c046345a3a339cd9f1418ff6393eca2569580c05a0f8f9fb2f0ca55d744a8905660986968461f3982a4d6297a41d1a11248daa29d4167d6b0e328dde7fd969a0f7327ed24842ca2884c6a7dd2a43953145f720a52f6f0255a5166e5dc7cfb050c804b66486200796fb5892a70bfb4899bd9eb6c71a0d3075218e14f4846f6fad63b63b2fa414f0599cfdc2e1def25d562670a42b7d3448745ff7f56db33970a012e294270e1a546cb12969daf7b439fa26963692c97d33d24ca69b76ea3ee9068df0847b00e9a7b95f337ac5a7a27eae55037ee23f07685fddc5561a541e01998a6a2e36d5cee5a026452a07fd3af076cb7d5769d4129f753b0a9c3482f64c54e898ff7a3698d4d469e8553384f3846d987e94a5fc7bf5d48c0c0c1101d3ff5713b361aa6aeec90c3c15d3cc734e470c9038196fd746de384c2b8c755f4d68aed2f9356698821de1269467cd1d4d31d7e9a2d6bb35d5f8dbe6bce23f7e291c1c67aa1510adaff776e22fd73d5f8546d47b8b499d582965b3ef5f64ef0321b98279d3d37b5fe897658cf455182f3e69748fdcd3c355b0011bfa13bc3c3f8ce99aee8a7ed81cc54f3b6538f5bef27f46dd19cff52bad3d7bd383202fc1b5240a256c1edd9a90a1d1b08a2d3aea0639f786b6c24a90034ff355169f384a6d4b6e8fb1409796331c0302eac25ee9058bfaf5a784a3bff9724f703bd1ded0ef4fe5f3e0343bfed4047273575908ed616631c8f41fcf5469305f31edd3908ddd14e1929b6be6869ecb5a05a6f647e85614d0bacc985532ff695ee5244b91b1e080e281b87853f046c62dba4404e688326bbbec450cbe548038faccdf0d6b73bf2d20f11e1efd10efd2afea1d75b31b7d494f857574b0b509a7aa2782888c4b87e98bacdd0221cdff4bc28f0051f6090c1d32dd0f24fca891dd53a59719d2d4f199de60a60daf1c0620d886e2a2f1e77fd4bd2f910f2fae481f1af552d495bc8ea2d00ee1d0337b4cb4d4772c15c83bbdfdbdc7c323e6f7a7c117f23f9f22bf5a76e75b3df1f1eea4f3a89053d980163dcba294ff566c14ca7b9063f9df301123752c0cd83cabb1da4dde0099a4acd685284a0b8917c6047c08d7be1af3d0f32b4b6cbfb9789acf3d10eabf64689838305cc237961a4e258d062b37cbfd109c0657ad5b25face2b00e40a852a4f528eebd0f7aeff10e22802e63c69c4e139697f7fbfa4844586f5ed540c63b53440f066449bb86fb2c3f98ce4a63cf62a87b5ef7ca06239d61f1ba4d2b3e73c55550099cef61be5f771f814dd840ebb8cc6565675cc05d6458a952bafbf7a3afee7ef222271c8037cc8e4f1fffcbe43c4e16f109cf125d9a620dd5d3f95fd252911f542d4774c9a2b6e8ca5b167c3d69104cc5c7680379a979e45e03f26a3e694b852fec3ea763710b5479ea60fa2a31015c0a32665911f7e2e89da1ab7f69cef9e22916a5245dccd6758ee55216220c96562fa8f4db62a66b257a64eb961ec54ded72d22d2238103089d1f3166005e9cb306849eeb74782db08142910915fa29e61527004c55dfc8b9c79d50554557092042ded1c4d8e23b0fb62c755a93c3cdce9acfb048b4c45399f0264d85f93746c21e0448d73724563961c5e6ea4d323d12ddc9bf376dfa8e081e8403b8d832ce0735817b50ae9339e7b8bf4198c812a115f9c11261111295990acd257b9e87a671a71d42148fe6008db7b6a1e91934f6e05eb85f2166998a5c298408671886b27599dfcd81554ebbf86dd767416815cd9b11ea8f54905b973f2f2334e4bdbdb869a9ebdc249084e72cbc67772cf14494f795946155f6a14e2c76a8f4100aca32ab2dc4627834160f49b40dc2cc4d78e9042260b85710d9105e5a18bd40f8010e14384d147e0f1573f2ad91c7c1b9d9dfb3f0d12733ebcae4427bfdd2f503f52a3b0a8b540d24928b7a94157c50eee903dfa56a28dd4ef0a8408bbf0334748694c0fae63c6f012c5e23d601100cea62d07ef27bc77f6d51727bc668f01eb54a42d91834771b5c67c9b909028f88e327845df30679294fbf7561e99efbab5ca94c0a947881b7e556998a865ed98931d3c896d8ecb8fb8442a9fa199c5ddde043bbabcfdb59c25b3db8a500fc38efa36edbb20f68d5e8664cc0b30c4b5c75fdf4dc23f186b6942bd5e62d6adee3ae1fbca5a88bcc5da5280d4ccb1ebb64366fb62604083186862f9dc12c8ab63ef23534dc28ed013bae135f849cee657586a3df7db56199e0eff1a877563e993e61278db96012fc388bb61fcaba9153a06965c9ef9f571737b85269f96d1c96b4c991f2944dcd74de9ae9f2f9e468e936de71b84f65da35b8df07b4a2ffe6d9786520c9646bed1db85ff10534fc420867106a8715d70391673bf89b02f4be57710618df3158011981cdfb252191565957d4dfec48c73bc5ca520c8bce2c8e5ef98e6f2978e7da45c0357b39ef89b0", 0xf3d}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f5, 0x400, 0x70bd2c, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc040008}, 0x24040c81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.403626][ T769] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 35.407227][ T36] audit: type=1400 audit(1760702566.386:245): avc: denied { bind } for pid=768 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.413837][ T769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.432594][ T769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:156 [ 35.455266][ T771] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 35.465478][ T771] : renamed from veth1_to_hsr (while UP) [ 35.489377][ T773] rust_binder: Write failure EFAULT in pid:158 [ 35.557377][ T65] usb usb4-port1: unable to enumerate USB device [ 35.583153][ T771] exFAT-fs (rnullb0): invalid boot record signature [ 35.595257][ T771] exFAT-fs (rnullb0): failed to read boot sector [ 35.602996][ T771] exFAT-fs (rnullb0): failed to recognize exfat type [ 35.667899][ T782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.667940][ T782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 35.764686][ T793] rust_binder: 144: no such ref 1 [ 35.785071][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.785106][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:144 [ 35.795098][ T793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 35.939229][ T810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.068430][ T803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:152 [ 36.068764][ T817] rust_binder: Write failure EFAULT in pid:62 [ 36.166303][ T831] rust_binder: Error while translating object. [ 36.172743][ T831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.179110][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 36.188681][ T833] netlink: 'syz.0.168': attribute type 63 has an invalid length. [ 36.218039][ T833] netlink: 5 bytes leftover after parsing attributes in process `syz.0.168'. [ 36.227072][ T833] gretap0: entered allmulticast mode [ 36.232701][ T833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.354647][ T849] /dev/rnullb0: Can't open blockdev [ 36.362836][ T847] x_tables: unsorted underflow at hook 4 [ 36.393957][ T852] mmap: syz.3.174 (852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.529515][ T860] netlink: 'syz.3.177': attribute type 9 has an invalid length. [ 36.540819][ T860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 36.659907][ T877] __vm_enough_memory: pid: 877, comm: syz.2.181, bytes: 18014402804453376 not enough memory for the allocation [ 36.729522][ T880] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 36.988723][ T335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.148707][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 37.155106][ T335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.165482][ T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 37.174448][ T335] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.191663][ T335] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.200812][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.208864][ T335] usb 3-1: Product: syz [ 37.213054][ T335] usb 3-1: Manufacturer: syz [ 37.217674][ T335] usb 3-1: SerialNumber: syz [ 37.227577][ T335] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 37.235699][ T335] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 37.242601][ T335] cdc_ncm 3-1:1.0: bind() failure [ 37.280842][ T898] GUP no longer grows the stack in syz.0.188 (898): 200000001000-200000c01000 (200000000000) [ 37.291216][ T898] CPU: 1 UID: 0 PID: 898 Comm: syz.0.188 Not tainted syzkaller #0 815521559dbd70f1614977c300fd16d58acb59ef [ 37.291248][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.291268][ T898] Call Trace: [ 37.291277][ T898] [ 37.291284][ T898] __dump_stack+0x21/0x30 [ 37.291316][ T898] dump_stack_lvl+0x10c/0x190 [ 37.291337][ T898] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.291359][ T898] ? find_vma+0xcd/0x110 [ 37.291374][ T898] dump_stack+0x19/0x20 [ 37.291395][ T898] __get_user_pages+0x1e34/0x22d0 [ 37.291415][ T898] ? __kasan_check_write+0x18/0x20 [ 37.291442][ T898] ? down_read_killable+0x79/0xf0 [ 37.291459][ T898] ? populate_vma_page_range+0x230/0x230 [ 37.291479][ T898] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 37.291501][ T898] __gup_longterm_locked+0xcb1/0x1580 [ 37.291522][ T898] ? stack_trace_save+0x9d/0xe0 [ 37.291546][ T898] ? stack_depot_save_flags+0x399/0x800 [ 37.291563][ T898] ? __kasan_check_write+0x18/0x20 [ 37.291589][ T898] gup_fast_fallback+0x12ae/0x14a0 [ 37.291609][ T898] ? do_futex+0x330/0x500 [ 37.291625][ T898] ? __se_sys_futex+0x28f/0x300 [ 37.291640][ T898] ? __x64_sys_futex+0xe9/0x110 [ 37.291656][ T898] ? do_syscall_64+0x58/0xf0 [ 37.291681][ T898] ? get_user_pages_fast_only+0xc0/0xc0 [ 37.291703][ T898] get_user_pages_fast+0x73/0xb0 [ 37.291723][ T898] get_futex_key+0x24d/0x930 [ 37.291738][ T898] ? __cfi_get_futex_key+0x10/0x10 [ 37.291752][ T898] ? __asan_memset+0x39/0x50 [ 37.291776][ T898] ? refill_pi_state_cache+0x147/0x220 [ 37.291794][ T898] futex_requeue+0x21c/0x12e0 [ 37.291814][ T898] ? __cfi_futex_requeue+0x10/0x10 [ 37.291833][ T898] ? __kasan_check_read+0x15/0x20 [ 37.291862][ T898] ? futex_setup_timer+0xb4/0xd0 [ 37.291877][ T898] ? futex_wait+0x29a/0x7a0 [ 37.291897][ T898] ? __cfi_down_read+0x10/0x10 [ 37.291913][ T898] ? __kasan_check_write+0x18/0x20 [ 37.291937][ T898] do_futex+0x330/0x500 [ 37.291953][ T898] ? __cfi_do_futex+0x10/0x10 [ 37.291969][ T898] ? vm_mmap_pgoff+0x145/0x4e0 [ 37.291984][ T898] __se_sys_futex+0x28f/0x300 [ 37.292001][ T898] ? __x64_sys_futex+0x110/0x110 [ 37.292018][ T898] ? __kasan_check_write+0x18/0x20 [ 37.292042][ T898] __x64_sys_futex+0xe9/0x110 [ 37.292076][ T898] x64_sys_call+0x227f/0x2ee0 [ 37.292100][ T898] do_syscall_64+0x58/0xf0 [ 37.292120][ T898] ? clear_bhb_loop+0x50/0xa0 [ 37.292139][ T898] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.292160][ T898] RIP: 0033:0x7fd63558efc9 [ 37.292176][ T898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.292190][ T898] RSP: 002b:00007fd63649f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.292212][ T898] RAX: ffffffffffffffda RBX: 00007fd6357e5fa0 RCX: 00007fd63558efc9 [ 37.292225][ T898] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000200000000b00 [ 37.292235][ T898] RBP: 00007fd635611f91 R08: 0000000000000000 R09: 0000000000000002 [ 37.292246][ T898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.292256][ T898] R13: 00007fd6357e6038 R14: 00007fd6357e5fa0 R15: 00007fff8fb33128 [ 37.292270][ T898] [ 37.437517][ T731] usb 3-1: USB disconnect, device number 4 [ 37.808797][ T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.958731][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 37.965224][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.973668][ T65] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 37.986910][ T65] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 37.997351][ T65] usb 1-1: config 13 has no interface number 0 [ 38.003848][ T65] usb 1-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.017382][ T65] usb 1-1: config 13 interface 50 has no altsetting 0 [ 38.025999][ T65] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 38.035279][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.040557][ T925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.043376][ T65] usb 1-1: Product: syz [ 38.056201][ T65] usb 1-1: Manufacturer: syz [ 38.060879][ T65] usb 1-1: SerialNumber: syz [ 38.126853][ T930] __vm_enough_memory: pid: 930, comm: syz.2.198, bytes: 21200099725312 not enough memory for the allocation [ 38.408801][ T948] 9pnet_fd: Insufficient options for proto=fd [ 38.507374][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.516176][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.526237][ T960] rust_binder: Error in use_page_slow: ESRCH [ 38.526262][ T960] rust_binder: use_range failure ESRCH [ 38.531014][ T959] rust_binder: Error in use_page_slow: ESRCH [ 38.532333][ T960] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 38.538327][ T959] rust_binder: use_range failure ESRCH [ 38.543867][ T960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.552539][ T959] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 38.558310][ T960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 38.566991][ T959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.584014][ T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 38.714292][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 38.738738][ T731] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.789444][ T971] rust_binder: 191: no such ref 0 [ 38.794727][ T971] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.802148][ T971] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 38.899853][ T731] usb 4-1: config 26 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 38.911704][ T731] usb 4-1: config 26 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 38.922783][ T731] usb 4-1: config 26 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 38.934884][ T731] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 38.944013][ T731] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 38.952138][ T731] usb 4-1: Manufacturer: syz [ 38.957935][ T958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.128728][ T331] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.168629][ T731] aiptek 4-1:26.0: Aiptek using 400 ms programming speed [ 39.176488][ T731] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:26.0/input/input12 [ 39.189230][ C0] aiptek 4-1:26.0: aiptek_irq - usb_submit_urb failed with result -19 [ 39.197449][ T731] usb 4-1: USB disconnect, device number 9 [ 39.278744][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 39.286599][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 39.295815][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.303883][ T331] usb 3-1: Product: syz [ 39.308083][ T331] usb 3-1: Manufacturer: syz [ 39.312741][ T331] usb 3-1: SerialNumber: syz [ 39.321694][ T331] r8152-cfgselector 3-1: Unknown version 0x0000 [ 39.328032][ T331] r8152-cfgselector 3-1: config 0 descriptor?? [ 39.430308][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 39.430326][ T36] audit: type=1326 audit(1760703083.379:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=993 comm="syz.1.220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0198efc9 code=0x0 [ 39.474793][ T999] netlink: 72 bytes leftover after parsing attributes in process `syz.1.221'. [ 39.536471][ T331] r8152-cfgselector 3-1: Needed 1 retries to read version [ 39.738861][ T980] rust_binder: Error while translating object. [ 39.738909][ T980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.745277][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:200 [ 39.755794][ T410] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 39.919706][ T36] audit: type=1400 audit(1760703083.869:274): avc: denied { execute } for pid=1018 comm="syz.3.227" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.919833][ T1020] __vm_enough_memory: pid: 1020, comm: syz.3.227, bytes: 18014402804453376 not enough memory for the allocation [ 40.472416][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 40.488363][ T65] usb 1-1: USB disconnect, device number 5 [ 40.507220][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.538742][ T410] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.538767][ T1039] rust_binder: Write failure EFAULT in pid:193 [ 40.557695][ T1041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 40.587577][ T36] audit: type=1400 audit(1760703084.529:275): avc: denied { getopt } for pid=1044 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.619218][ T36] audit: type=1400 audit(1760703084.529:276): avc: denied { ioctl } for pid=1044 comm="syz.1.240" path="socket:[7110]" dev="sockfs" ino=7110 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.704118][ T410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.722185][ T410] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1576, setting to 1024 [ 40.733624][ T410] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 40.747821][ T410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.770045][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.778451][ T410] usb 3-1: Product: syz [ 40.783516][ T410] usb 3-1: Manufacturer: syz [ 40.788379][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 40.788454][ T1060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 40.798009][ T410] usb 3-1: SerialNumber: syz [ 40.835138][ T1063] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 40.910050][ T36] audit: type=1400 audit(1760703084.859:277): avc: denied { create } for pid=1067 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.930868][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.962485][ T36] audit: type=1400 audit(1760703084.909:278): avc: denied { connect } for pid=1071 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.001199][ T36] audit: type=1400 audit(1760703084.939:279): avc: denied { map } for pid=1071 comm="syz.0.247" path="socket:[7270]" dev="sockfs" ino=7270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.017537][ T1024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 41.024761][ T36] audit: type=1400 audit(1760703084.939:280): avc: denied { read } for pid=1071 comm="syz.0.247" path="socket:[7270]" dev="sockfs" ino=7270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.091536][ T1079] binder: Bad value for 'defcontext' [ 41.122189][ T1089] binder: Bad value for 'max' [ 41.127341][ T1089] binder: Bad value for 'max' [ 41.132277][ T1089] binder: Bad value for 'max' [ 41.137062][ T1089] binder: Bad value for 'max' [ 41.141869][ T1089] binder: Bad value for 'max' [ 41.146645][ T1089] binder: Bad value for 'max' [ 41.151433][ T1089] binder: Bad value for 'max' [ 41.156200][ T1089] binder: Bad value for 'max' [ 41.160987][ T1089] binder: Bad value for 'max' [ 41.165755][ T1089] binder: Bad value for 'max' [ 41.170540][ T1089] binder: Bad value for 'max' [ 41.175925][ T1089] binder: Bad value for 'max' [ 41.180764][ T1089] binder: Bad value for 'max' [ 41.185549][ T1089] binder: Bad value for 'max' [ 41.190341][ T1089] binder: Bad value for 'max' [ 41.195108][ T1089] binder: Bad value for 'max' [ 41.199895][ T1089] binder: Bad value for 'max' [ 41.204666][ T1089] binder: Bad value for 'max' [ 41.209452][ T1089] binder: Bad value for 'max' [ 41.214216][ T1089] binder: Bad value for 'max' [ 41.219006][ T1089] binder: Bad value for 'max' [ 41.223787][ T1089] binder: Bad value for 'max' [ 41.228574][ T1089] binder: Bad value for 'max' [ 41.233362][ T1089] binder: Bad value for 'max' [ 41.238125][ T1089] binder: Bad value for 'max' [ 41.242961][ T1089] binder: Bad value for 'max' [ 41.247733][ T1089] binder: Bad value for 'max' [ 41.252543][ T1089] binder: Bad value for 'max' [ 41.257413][ T1089] binder: Bad value for 'max' [ 41.262228][ T1089] binder: Bad value for 'max' [ 41.266990][ T1089] binder: Bad value for 'max' [ 41.271776][ T1089] binder: Bad value for 'max' [ 41.276576][ T1089] binder: Bad value for 'max' [ 41.286323][ T1089] binder: Bad value for 'max' [ 41.291154][ T1089] binder: Bad value for 'max' [ 41.295918][ T1089] binder: Bad value for 'max' [ 41.300734][ T1089] binder: Bad value for 'max' [ 41.305490][ T1089] binder: Bad value for 'max' [ 41.310272][ T1089] binder: Bad value for 'max' [ 41.315028][ T1089] binder: Bad value for 'max' [ 41.319870][ T1089] binder: Bad value for 'max' [ 41.324650][ T1089] binder: Bad value for 'max' [ 41.329450][ T1089] binder: Bad value for 'max' [ 41.334212][ T1089] binder: Bad value for 'max' [ 41.339013][ T1089] binder: Bad value for 'max' [ 41.343793][ T1089] binder: Bad value for 'max' [ 41.348582][ T1089] binder: Bad value for 'max' [ 41.353403][ T1089] binder: Bad value for 'max' [ 41.358221][ T1089] binder: Bad value for 'max' [ 41.363042][ T1089] binder: Bad value for 'max' [ 41.367806][ T1089] binder: Bad value for 'max' [ 41.372596][ T1089] binder: Bad value for 'max' [ 41.377367][ T1089] binder: Bad value for 'max' [ 41.382164][ T1089] binder: Bad value for 'max' [ 41.386944][ T1089] binder: Bad value for 'max' [ 41.391828][ T1089] binder: Bad value for 'max' [ 41.396590][ T1089] binder: Bad value for 'max' [ 41.401758][ T1089] binder: Bad value for 'max' [ 41.406551][ T1089] binder: Bad value for 'max' [ 41.411355][ T1089] binder: Bad value for 'max' [ 41.416116][ T1089] binder: Bad value for 'max' [ 41.420921][ T1089] binder: Bad value for 'max' [ 41.425688][ T1089] binder: Bad value for 'max' [ 41.430493][ T1089] binder: Bad value for 'max' [ 41.435272][ T1089] binder: Bad value for 'max' [ 41.658092][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 41.667598][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.667866][ T1024] rust_binder: Error while translating object. [ 41.674380][ T1024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.680640][ T1024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:204 [ 41.691146][ T410] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 41.706063][ T410] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 41.731454][ T410] cdc_ncm 3-1:1.0: bind() failure [ 41.737389][ T410] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 41.744272][ T410] cdc_ncm 3-1:1.1: bind() failure [ 41.750493][ T410] usb 3-1: USB disconnect, device number 6 [ 42.226211][ T1102] syz.2.258: attempt to access beyond end of device [ 42.226211][ T1102] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 42.239084][ T1102] FAT-fs (loop2): unable to read boot sector [ 42.247846][ T36] audit: type=1400 audit(1760703086.189:281): avc: denied { create } for pid=1101 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.548735][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.699842][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.710842][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.720735][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 42.733669][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 42.742766][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.751937][ T10] usb 1-1: config 0 descriptor?? [ 42.809369][ T36] audit: type=1326 audit(1760703086.759:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e918efc9 code=0x7fc00000 [ 42.893506][ T1120] PM: Enabling pm_trace changes system date and time during resume. [ 42.893506][ T1120] PM: Correct system time has to be restored manually after resume. [ 42.965533][ T10] elecom 0003:056E:00E6.0003: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 43.161757][ T10] usb 1-1: USB disconnect, device number 6 [ 43.742265][ T1164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.742296][ T1164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:126 [ 43.767693][ T1166] binder: Unknown parameter '' [ 43.767693][ T1167] binder: Unknown parameter '' [ 43.800274][ T1171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.800301][ T1171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 43.810411][ T1171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.908712][ T447] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.010425][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 44.020201][ T1200] rust_binder: Error in use_page_slow: ESRCH [ 44.026296][ T1200] rust_binder: use_range failure ESRCH [ 44.026420][ T1200] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 44.032725][ T1200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.040279][ T1200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:223 [ 44.058756][ T447] usb 1-1: device descriptor read/64, error -71 [ 44.281654][ T1202] binder: Bad value for 'stats' [ 44.298734][ T447] usb 1-1: device descriptor read/64, error -71 [ 44.538783][ T447] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.668787][ T447] usb 1-1: device descriptor read/64, error -71 [ 44.728724][ T331] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.802179][ T1208] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 44.809937][ T1208] netlink: 'syz.2.289': attribute type 2 has an invalid length. [ 44.817983][ T1209] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 44.828538][ T1209] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 44.890944][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 44.897165][ T331] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 44.907123][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.912625][ T447] usb 1-1: device descriptor read/64, error -71 [ 44.923602][ T331] usb 4-1: config 0 has no interface number 0 [ 44.923638][ T331] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.941771][ T1227] netlink: 3 bytes leftover after parsing attributes in process `syz.2.297'. [ 44.959947][ T331] usb 4-1: config 0 interface 200 has no altsetting 0 [ 44.972499][ T1234] 9pnet_fd: Insufficient options for proto=fd [ 44.985179][ T331] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 44.994440][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.002607][ T331] usb 4-1: Product: syz [ 45.005203][ T1241] 9pnet_fd: Insufficient options for proto=fd [ 45.006802][ T331] usb 4-1: Manufacturer: syz [ 45.023831][ T331] usb 4-1: SerialNumber: syz [ 45.029314][ T331] usb 4-1: config 0 descriptor?? [ 45.048890][ T447] usb usb1-port1: attempt power cycle [ 45.062236][ T1247] netlink: 'syz.1.303': attribute type 4 has an invalid length. [ 45.074796][ T1247] netlink: 'syz.1.303': attribute type 4 has an invalid length. [ 45.237077][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 45.237095][ T36] audit: type=1326 audit(1760703089.179:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1204 comm="syz.3.288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94e918efc9 code=0x0 [ 45.282990][ T36] audit: type=1400 audit(1760703089.219:293): avc: denied { create } for pid=1262 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 45.383895][ T1268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=1268 comm=syz.2.309 [ 45.399353][ T36] audit: type=1400 audit(1760703089.349:294): avc: denied { append } for pid=1204 comm="syz.3.288" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.407285][ T447] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.432014][ T36] audit: type=1400 audit(1760703089.349:295): avc: denied { ioctl } for pid=1204 comm="syz.3.288" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.471226][ T447] usb 1-1: device descriptor read/8, error -71 [ 45.600132][ T447] usb 1-1: device descriptor read/8, error -71 [ 45.848748][ T447] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.869827][ T447] usb 1-1: device descriptor read/8, error -71 [ 46.000019][ T447] usb 1-1: device descriptor read/8, error -71 [ 46.108864][ T447] usb usb1-port1: unable to enumerate USB device [ 46.230341][ T36] audit: type=1400 audit(1760703090.179:296): avc: denied { nlmsg_read } for pid=1285 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.250855][ T1286] netlink: 104 bytes leftover after parsing attributes in process `syz.2.316'. [ 46.277261][ T1288] 9pnet_fd: Insufficient options for proto=fd [ 46.656507][ T36] audit: type=1326 audit(1760703090.600:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1301 comm="syz.1.321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0198efc9 code=0x0 [ 46.747281][ T36] audit: type=1400 audit(1760703090.690:298): avc: denied { getopt } for pid=1303 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.230414][ T36] audit: type=1400 audit(1760703091.180:299): avc: denied { unmount } for pid=1316 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.304775][ T1326] tipc: Trying to set illegal importance in message [ 47.312248][ T36] audit: type=1400 audit(1760703091.260:300): avc: denied { create } for pid=1325 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 47.504482][ T331] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 47.514635][ T1332] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 47.522922][ T331] usb 4-1: USB disconnect, device number 10 [ 47.523241][ T1332] rust_binder: Write failure EINVAL in pid:147 [ 47.540701][ T36] audit: type=1400 audit(1760703091.490:301): avc: denied { sqpoll } for pid=1333 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.648492][ T1341] rust_binder: Error while translating object. [ 47.648526][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.654895][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 47.918742][ T731] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 48.053094][ T1347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 48.080960][ T731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.087383][ T1349] /dev/sr0: Can't lookup blockdev [ 48.092071][ T731] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 48.106619][ T731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.115725][ T731] usb 1-1: config 0 descriptor?? [ 48.140156][ T1351] __vm_enough_memory: pid: 1351, comm: syz.3.341, bytes: 18014402804453376 not enough memory for the allocation [ 48.357005][ T731] usbhid 1-1:0.0: can't add hid device: -71 [ 48.383498][ T731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.393892][ T1397] overlayfs: failed to clone upperpath [ 48.398482][ T731] usb 1-1: USB disconnect, device number 11 [ 48.467215][ T1416] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12308 sclass=netlink_xfrm_socket pid=1416 comm=syz.2.363 [ 48.470090][ T1417] rust_binder: Write failure EFAULT in pid:254 [ 48.494370][ T1419] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=1419 comm=syz.2.364 [ 48.539053][ T1426] devpts: called with bogus options [ 48.572098][ T1434] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 48.580955][ T1434] netlink: 17 bytes leftover after parsing attributes in process `syz.3.370'. [ 48.645620][ T1441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.645648][ T1441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:181 [ 48.878737][ T731] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 49.039907][ T731] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.048248][ T731] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 49.058625][ T731] usb 1-1: config 179 has no interface number 0 [ 49.064931][ T731] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 49.074997][ T731] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 49.088616][ T731] usb 1-1: config 179 interface 65 has no altsetting 0 [ 49.095738][ T731] usb 1-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 49.104918][ T731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.238776][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.388727][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 49.394985][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 49.403291][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.413498][ T10] usb 4-1: config 0 has no interface number 0 [ 49.419661][ T10] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 49.430366][ T10] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.443393][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 49.451628][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 49.460774][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.468974][ T10] usb 4-1: Product: syz [ 49.473138][ T10] usb 4-1: Manufacturer: syz [ 49.477742][ T10] usb 4-1: SerialNumber: syz [ 49.483227][ T10] usb 4-1: config 0 descriptor?? [ 49.690031][ T1445] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.699898][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 49.707151][ T10] usb 4-1: USB disconnect, device number 11 [ 49.824924][ T731] usb 1-1: USB disconnect, device number 12 [ 49.898803][ T1465] rust_binder: Error while translating object. [ 49.898839][ T1465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 49.905189][ T1465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270 [ 50.050641][ T1481] 9pnet_fd: Insufficient options for proto=fd [ 50.229578][ T1499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 50.318763][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.458777][ T31] usb 1-1: device descriptor read/64, error -71 [ 50.708766][ T31] usb 1-1: device descriptor read/64, error -71 [ 50.948817][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 50.984240][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 50.990464][ T36] audit: type=1400 audit(1760703094.930:323): avc: denied { getopt } for pid=1532 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.010210][ T36] audit: type=1400 audit(1760703094.940:324): avc: denied { nlmsg_write } for pid=1532 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 51.088773][ T31] usb 1-1: device descriptor read/64, error -71 [ 51.197161][ T36] audit: type=1400 audit(1760703095.140:325): avc: denied { create } for pid=1536 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.294722][ T1555] netlink: 'syz.3.409': attribute type 4 has an invalid length. [ 51.302739][ T1555] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 51.311835][ T36] audit: type=1400 audit(1760703095.260:326): avc: denied { name_bind } for pid=1554 comm="syz.3.409" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.371378][ T1557] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 51.380404][ T1557] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 51.400549][ T1562] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 51.400580][ T1562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 51.408737][ T1562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:210 [ 51.428773][ T31] usb 1-1: device descriptor read/64, error -71 [ 51.453858][ T1567] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.548883][ T31] usb usb1-port1: attempt power cycle [ 51.618185][ T36] audit: type=1400 audit(1760703095.560:327): avc: denied { nlmsg_read } for pid=1578 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 51.708753][ T447] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.858736][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 51.868788][ T447] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 51.871348][ T1608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=1608 comm=syz.2.426 [ 51.878337][ T447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.899576][ T447] usb 4-1: config 0 descriptor?? [ 51.906900][ T447] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 51.917187][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 51.929331][ T447] usb 4-1: Detected FT4232H [ 51.946198][ T1612] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 51.955012][ T31] usb 1-1: device descriptor read/8, error -71 [ 52.089842][ T31] usb 1-1: device descriptor read/8, error -71 [ 52.107896][ T447] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 52.115033][ T447] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 52.122672][ T447] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.131997][ T447] usb 4-1: USB disconnect, device number 12 [ 52.141164][ T447] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.150815][ T447] ftdi_sio 4-1:0.0: device disconnected [ 52.338781][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.359859][ T31] usb 1-1: device descriptor read/8, error -71 [ 52.489738][ T31] usb 1-1: device descriptor read/8, error -71 [ 52.598865][ T31] usb usb1-port1: unable to enumerate USB device [ 52.618597][ T36] audit: type=1400 audit(1760703096.560:328): avc: denied { mounton } for pid=1647 comm="syz.3.444" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 52.648628][ T1651] /dev/rnullb0: Can't open blockdev [ 52.665273][ T1653] rust_binder: Write failure EFAULT in pid:226 [ 52.686539][ T1658] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 52.948790][ T731] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.051072][ T36] audit: type=1400 audit(1760703097.000:329): avc: denied { execheap } for pid=1659 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.098738][ T731] usb 4-1: Using ep0 maxpacket: 32 [ 53.105224][ T731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.115978][ T731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.125171][ T731] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.141661][ T731] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.158838][ T731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.172554][ T731] usb 4-1: Product: syz [ 53.181110][ T731] usb 4-1: Manufacturer: syz [ 53.186815][ T731] usb 4-1: SerialNumber: syz [ 53.201863][ T731] cdc_ncm 4-1:1.0: skipping garbage [ 53.212950][ T1680] rust_binder: Write failure EFAULT in pid:288 [ 53.213327][ T731] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 53.228649][ T731] cdc_ncm 4-1:1.0: bind() failure [ 53.350047][ T1701] overlayfs: failed to clone lowerpath [ 53.363367][ T36] audit: type=1400 audit(1760703097.310:330): avc: denied { getopt } for pid=1700 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.417256][ T731] usb 4-1: USB disconnect, device number 13 [ 53.464654][ T1713] x_tables: duplicate entry at hook 1 [ 53.471612][ T1713] 9pnet_fd: Insufficient options for proto=fd [ 53.538686][ T36] audit: type=1400 audit(1760703097.480:331): avc: denied { write } for pid=1714 comm="syz.0.468" path="socket:[10358]" dev="sockfs" ino=10358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.544303][ T1715] rust_binder: Write failure EFAULT in pid:307 [ 54.014528][ T1734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.473'. [ 54.029804][ T1734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 54.060426][ T1737] syz.2.474 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.416512][ T1761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.416549][ T1761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 54.468741][ T731] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.629770][ T731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.639637][ T731] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 54.648884][ T731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.657566][ T731] usb 4-1: config 0 descriptor?? [ 54.745802][ T1770] __vm_enough_memory: pid: 1770, comm: syz.0.486, bytes: 18014402804453376 not enough memory for the allocation [ 54.945081][ T1781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1781 comm=syz.1.490 [ 54.957820][ T1781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1781 comm=syz.1.490 [ 55.276620][ T36] audit: type=1400 audit(1760703099.220:332): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.458378][ T1807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.500'. [ 55.548003][ T1822] rust_binder: Error while translating object. [ 55.548052][ T1822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.554786][ T1822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 55.574655][ T1820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.504'. [ 55.594085][ T1827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.504'. [ 56.245581][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.250813][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 56.250834][ T36] audit: type=1400 audit(1777480545.193:337): avc: denied { mounton } for pid=1868 comm="syz.2.518" path="/176/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 56.280135][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.285569][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.290875][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.296061][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.301316][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.306537][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.311776][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.316954][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.322269][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.327502][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.332793][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.337987][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.343247][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.348472][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.353758][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.359287][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.364500][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.369738][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.374927][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.380167][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.386110][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.391397][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.396610][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.401826][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.407016][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.412272][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.417480][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.422708][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.427884][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.433132][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.438321][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.443531][ T1869] tmpfs: Unknown parameter 'chgdk' [ 56.460351][ T36] audit: type=1400 audit(1777480545.413:338): avc: denied { lock } for pid=1872 comm="syz.2.519" path="socket:[9664]" dev="sockfs" ino=9664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.490788][ T1876] netlink: 'syz.2.520': attribute type 29 has an invalid length. [ 56.508418][ T36] audit: type=1400 audit(1777480545.453:339): avc: denied { execute } for pid=1878 comm="syz.0.521" path="/selinux/access" dev="selinuxfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 56.621130][ T36] audit: type=1400 audit(1777480545.573:340): avc: denied { create } for pid=1901 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.838723][ T65] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.988707][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 56.994834][ T65] usb 1-1: config index 0 descriptor too short (expected 30482, got 18) [ 57.003313][ T65] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 57.012052][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 57.022444][ T65] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 57.031544][ T65] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 57.039931][ T65] usb 1-1: Product: syz [ 57.044091][ T65] usb 1-1: Manufacturer: syz [ 57.049496][ T65] usb 1-1: config 0 descriptor?? [ 57.055303][ T65] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 57.063359][ T65] usb 1-1: Detected FT2232C/D [ 57.162224][ T331] usb 4-1: USB disconnect, device number 14 [ 57.200595][ T1971] netlink: 'syz.2.554': attribute type 30 has an invalid length. [ 57.410170][ T1998] 9pnet_fd: p9_fd_create_tcp (1998): problem connecting socket to 127.0.0.1 [ 57.447204][ T2001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=2001 comm=syz.2.564 [ 57.460269][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 57.471208][ T65] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 57.486934][ T65] usb 1-1: USB disconnect, device number 17 [ 57.496290][ T2008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.505126][ T2005] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 57.505858][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 57.517059][ T2008] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 57.530425][ T65] ftdi_sio 1-1:0.0: device disconnected [ 57.542458][ T2011] tmpfs: Unknown parameter '' [ 57.547712][ T2012] tmpfs: Unknown parameter '' [ 57.553037][ T2008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.798729][ T31] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 57.950119][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.961223][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 57.970602][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.981139][ T31] usb 4-1: config 0 descriptor?? [ 57.986617][ T2010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.218746][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.229643][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.238973][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.248125][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.257291][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.297167][ T2062] netlink: 'syz.0.583': attribute type 16 has an invalid length. [ 58.305635][ T2062] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 58.330454][ T2064] erspan0: entered promiscuous mode [ 58.337466][ T36] audit: type=1400 audit(1777480547.284:341): avc: denied { create } for pid=2063 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.338971][ T2064] 9pnet_fd: Insufficient options for proto=fd [ 58.394571][ T36] audit: type=1400 audit(1777480547.344:342): avc: denied { setopt } for pid=2070 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.423918][ T31] hid-generic 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 58.469612][ T2078] rust_binder: Write failure EFAULT in pid:386 [ 58.536566][ T36] audit: type=1400 audit(1777480547.484:343): avc: denied { execute } for pid=2087 comm="syz.0.593" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.541419][ T2088] rust_binder: Fixups oob 178 180 369 186 [ 58.566768][ T2088] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 58.572627][ T2088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.581022][ T2088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 58.591156][ T2089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.618965][ T36] audit: type=1400 audit(1777480547.574:344): avc: denied { bind } for pid=2009 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.624659][ T2095] rust_binder: Error while translating object. [ 58.633369][ T731] usb 4-1: USB disconnect, device number 15 [ 58.645357][ T2095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.657367][ T2095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 58.739108][ T2108] __vm_enough_memory: pid: 2108, comm: syz.0.601, bytes: 18014402804453376 not enough memory for the allocation [ 59.021904][ T36] audit: type=1400 audit(1777480547.969:345): avc: denied { create } for pid=2118 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.211240][ T2134] rust_binder: inc_ref_done called when no active inc_refs [ 59.878720][ T731] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 59.978742][ T331] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 60.013657][ T2147] x_tables: duplicate underflow at hook 1 [ 60.030728][ T731] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 60.038903][ T731] usb 1-1: config 0 has no interface number 0 [ 60.040435][ T2149] __nla_validate_parse: 31 callbacks suppressed [ 60.040460][ T2149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'. [ 60.045165][ T731] usb 1-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 60.070543][ T731] usb 1-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.080473][ T731] usb 1-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.093063][ T731] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 60.102224][ T731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.110272][ T731] usb 1-1: Product: syz [ 60.114476][ T731] usb 1-1: Manufacturer: syz [ 60.115641][ T2150] veth0_virt_wifi: entered allmulticast mode [ 60.119224][ T731] usb 1-1: SerialNumber: syz [ 60.130740][ T731] usb 1-1: config 0 descriptor?? [ 60.131013][ T2150] veth0_virt_wifi: left allmulticast mode [ 60.141603][ T2138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.152150][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.163213][ T731] ftdi_sio 1-1:0.99: FTDI USB Serial Device converter detected [ 60.171261][ T731] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 60.178462][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.189601][ T331] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 60.198762][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.207440][ T331] usb 4-1: config 0 descriptor?? [ 60.353557][ T2138] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 60.353913][ T447] usb 1-1: USB disconnect, device number 18 [ 60.368741][ T447] ftdi_sio 1-1:0.99: device disconnected [ 60.616424][ T331] playstation 0003:054C:0DF2.0005: unknown main item tag 0x1 [ 60.623974][ T331] playstation 0003:054C:0DF2.0005: item fetching failed at offset 3/5 [ 60.632524][ T331] playstation 0003:054C:0DF2.0005: Parse failed [ 60.638980][ T331] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22 [ 60.826874][ T331] usb 4-1: USB disconnect, device number 16 [ 60.955346][ T36] audit: type=1400 audit(1777480549.899:346): avc: denied { connect } for pid=2159 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.049922][ T2161] incfs: Error accessing: ./file0/file0/file0. [ 61.056154][ T2161] incfs: mount failed -20 [ 61.343603][ T2171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 61.465447][ T2176] rust_binder: Error while translating object. [ 61.465506][ T2176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.471923][ T2176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 61.525245][ T2178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.535065][ T2178] rust_binder: 280: no such ref 1 [ 61.589640][ T2179] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 61.589671][ T2179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.597784][ T2179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:280 [ 62.058730][ T731] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 62.219823][ T731] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 62.228206][ T731] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 62.239574][ T731] usb 1-1: config 8 has no interface number 0 [ 62.245745][ T731] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 62.260258][ T731] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 62.269453][ T731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.277683][ T731] usb 1-1: Product: syz [ 62.282042][ T731] usb 1-1: Manufacturer: syz [ 62.286691][ T36] audit: type=1400 audit(1777480551.229:347): avc: denied { shutdown } for pid=2197 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.306216][ T731] usb 1-1: SerialNumber: syz [ 62.404656][ T36] audit: type=1400 audit(1777480551.349:348): avc: denied { lock } for pid=2207 comm="syz.3.635" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.469230][ T2216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.470991][ T2216] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 233) [ 62.477513][ T2216] rust_binder: Error while translating object. [ 62.488138][ T2216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.494473][ T2216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 62.522922][ T731] usb 1-1: USB disconnect, device number 19 [ 62.587558][ T2220] veth0_virt_wifi: entered allmulticast mode [ 62.593835][ T2219] veth0_virt_wifi: left allmulticast mode [ 62.805486][ T36] audit: type=1400 audit(1777480551.749:349): avc: denied { read } for pid=2240 comm="syz.2.644" path="socket:[11588]" dev="sockfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.812483][ T2241] 9pnet_fd: Insufficient options for proto=fd [ 63.181891][ T2254] netlink: 'syz.1.649': attribute type 13 has an invalid length. [ 63.234060][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 63.318736][ T31] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 63.333767][ T2278] 9pnet_fd: Insufficient options for proto=fd [ 63.340987][ T2278] futex_wake_op: syz.3.658 tries to shift op by -1; fix this program [ 63.351782][ T36] audit: type=1400 audit(1777480552.299:350): avc: denied { write } for pid=2277 comm="syz.3.658" name="ptype" dev="proc" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.470011][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 63.479787][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 63.498711][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 63.511314][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.520455][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.528478][ T31] usb 1-1: Product: syz [ 63.532722][ T31] usb 1-1: Manufacturer: syz [ 63.537456][ T31] usb 1-1: SerialNumber: syz [ 63.543831][ T2251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.599118][ T2289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 63.608821][ T2289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.608959][ T2289] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 63.615488][ T2289] rust_binder: Error while translating object. [ 63.624381][ T2289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.630709][ T2289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 63.750021][ T2308] batadv_slave_1: entered promiscuous mode [ 63.765870][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.774665][ T36] audit: type=1400 audit(1777480552.719:351): avc: denied { getopt } for pid=2309 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.793899][ T2306] batadv_slave_1: left promiscuous mode [ 63.796305][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.804008][ T36] audit: type=1400 audit(1777480552.749:352): avc: denied { getopt } for pid=2313 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.816369][ T2251] binder: Binderfs stats mode cannot be changed during a remount [ 63.828253][ T2314] tmpfs: Invalid uid '0x00000000ffffffff' [ 63.844499][ T31] cdc_ncm 1-1:1.0: bind() failure [ 63.851393][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 63.867106][ T31] cdc_ncm 1-1:1.1: bind() failure [ 63.877205][ T31] usb 1-1: USB disconnect, device number 20 [ 63.893506][ T2321] netlink: 'syz.2.671': attribute type 11 has an invalid length. [ 64.148721][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 64.329748][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.349292][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 64.363815][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 64.374098][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.384232][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.402458][ T36] audit: type=1400 audit(1777480553.349:353): avc: denied { getopt } for pid=2363 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.430995][ T2368] rust_binder: Read failure Err(EAGAIN) in pid:439 [ 64.461736][ T36] audit: type=1400 audit(1777480553.379:354): avc: denied { write } for pid=2357 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.473687][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.499227][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 64.643981][ T10] usb 4-1: USB disconnect, device number 17 [ 64.655647][ T2394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.655684][ T2394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 64.723732][ T2401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.695'. [ 64.741935][ T36] audit: type=1400 audit(1777480553.679:355): avc: denied { mount } for pid=2402 comm="syz.0.696" name="/" dev="pstore" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 64.788581][ T36] audit: type=1400 audit(1777480553.729:356): avc: denied { accept } for pid=2400 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.866207][ T2409] 9pnet_fd: Insufficient options for proto=fd [ 65.181571][ T2416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.181855][ T2416] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 65.188461][ T2416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 65.196776][ T2416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:310 [ 65.250869][ T2432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.260435][ T2432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 65.293569][ T2436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.305529][ T2436] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 65.312069][ T2436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 65.320181][ T2436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:320 [ 65.342463][ T2438] incfs: Can't find or create .index dir in ./file0 [ 65.358336][ T2438] incfs: mount failed -1 [ 65.599015][ T2443] netlink: 76 bytes leftover after parsing attributes in process `syz.0.712'. [ 65.636615][ T2450] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 65.636641][ T2450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 65.644798][ T2450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:458 [ 65.659093][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 65.712690][ T2459] rust_binder: 462: no such ref 0 [ 65.717867][ T2459] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 65.728465][ T2459] rust_binder: 462: no such ref 2 [ 65.740976][ T2459] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 65.818815][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 65.833324][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.843960][ T10] usb 4-1: config 179 has no interface number 0 [ 65.850857][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.868318][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.891023][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.903554][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.915651][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.929204][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.940870][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.953825][ T2440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.070413][ T2517] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.135724][ T2519] netlink: 188 bytes leftover after parsing attributes in process `syz.1.741'. [ 66.163257][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 66.218716][ T448] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 66.363393][ T2440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.711'. [ 66.374844][ T2440] tipc: Invalid UDP bearer configuration [ 66.374909][ T2440] tipc: Enabling of bearer rejected, failed to enable media [ 66.388706][ T448] usb 1-1: Using ep0 maxpacket: 16 [ 66.397404][ T448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.400907][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.416801][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.417345][ T448] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.426427][ T10] usb 4-1: USB disconnect, device number 18 [ 66.448311][ T10] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 66.453195][ T448] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.485565][ T448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.503361][ T448] usb 1-1: config 0 descriptor?? [ 66.714743][ T448] usbhid 1-1:0.0: can't add hid device: -71 [ 66.720806][ T448] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.735236][ T448] usb 1-1: USB disconnect, device number 21 [ 66.927702][ T2528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.927969][ T2528] rust_binder: Error while translating object. [ 66.934548][ T2528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 66.940815][ T2528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:328 [ 67.198744][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.231255][ T2539] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 67.239499][ T2539] rust_binder: Write failure EINVAL in pid:478 [ 67.240534][ T2540] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 67.254969][ T2540] rust_binder: Write failure EINVAL in pid:478 [ 67.358706][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 67.375364][ T10] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 67.383797][ T10] usb 4-1: config 1 has no interface number 0 [ 67.390231][ T10] usb 4-1: config 1 interface 232 has no altsetting 0 [ 67.398488][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5 [ 67.407719][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.415836][ T10] usb 4-1: Product: syz [ 67.420140][ T10] usb 4-1: Manufacturer: syz [ 67.424772][ T10] usb 4-1: SerialNumber: syz [ 67.473569][ T2552] netlink: 80 bytes leftover after parsing attributes in process `syz.0.752'. [ 67.488703][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 67.488721][ T36] audit: type=1326 audit(2000000002.240:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.503051][ T2552] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 67.518644][ T36] audit: type=1326 audit(2000000002.240:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.551310][ T36] audit: type=1326 audit(2000000002.240:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.588535][ T36] audit: type=1326 audit(2000000002.240:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.612119][ T36] audit: type=1326 audit(2000000002.240:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.636640][ T36] audit: type=1326 audit(2000000002.240:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.648547][ T10] usb 4-1: Found UVC 0.00 device syz (174f:8a34) [ 67.666683][ T36] audit: type=1326 audit(2000000002.240:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.677747][ T10] usb 4-1: No valid video chain found. [ 67.696902][ T36] audit: type=1326 audit(2000000002.240:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.730201][ T36] audit: type=1326 audit(2000000002.240:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.755217][ T36] audit: type=1326 audit(2000000002.240:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f538efc9 code=0x7fc00000 [ 67.874523][ T10] usb 4-1: USB disconnect, device number 19 [ 68.191360][ T2579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 68.419556][ T2591] batadv_slave_1: entered promiscuous mode [ 68.435280][ T2592] batadv_slave_1: left promiscuous mode [ 68.467844][ T2598] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 68.475639][ T2598] netlink: 'syz.1.767': attribute type 5 has an invalid length. [ 68.483352][ T2598] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.767'. [ 68.580528][ T2609] overlayfs: conflicting options: metacopy=off,verity=require [ 68.604276][ T2611] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 68.631447][ T2614] rust_binder: Write failure EFAULT in pid:515 [ 68.665412][ T2618] binder: Unknown parameter 'fscontext?}' [ 68.747599][ T2624] tipc: Started in network mode [ 68.752687][ T2624] tipc: Node identity e6613fecc4f9, cluster identity 4711 [ 68.760354][ T2624] tipc: Enabled bearer , priority 10 [ 69.011808][ T2654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.012731][ T2654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 69.268755][ T2671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.279766][ T2674] netlink: 'syz.1.794': attribute type 27 has an invalid length. [ 69.296087][ T2674] 9pnet_fd: Insufficient options for proto=fd [ 69.383338][ T2687] /dev/rnullb0: Can't open blockdev [ 69.401906][ T2689] netlink: 56 bytes leftover after parsing attributes in process `syz.3.801'. [ 69.412282][ T2689] tipc: Enabling of bearer rejected, failed to enable media [ 69.818735][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 69.878744][ T731] tipc: Node number set to 580403180 [ 69.968706][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 69.974837][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.983185][ T10] usb 4-1: config 179 has no interface number 0 [ 69.989499][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 70.000755][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 70.012178][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.022396][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.035732][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 70.042689][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 70.051834][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.264104][ T731] usb 4-1: USB disconnect, device number 20 [ 70.281469][ T2719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2719 comm=syz.1.811 [ 70.294777][ T2719] netlink: 64 bytes leftover after parsing attributes in process `syz.1.811'. [ 70.338708][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 70.468749][ T10] usb 1-1: device descriptor read/64, error -71 [ 70.708728][ T10] usb 1-1: device descriptor read/64, error -71 [ 70.827384][ T2741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 70.841755][ T2745] rust_binder: Write failure EFAULT in pid:366 [ 70.893142][ T2763] overlayfs: failed to clone upperpath [ 70.948714][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 71.078716][ T10] usb 1-1: device descriptor read/64, error -71 [ 71.148744][ T448] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 71.299860][ T448] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.318467][ T448] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.327666][ T448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.335705][ T448] usb 4-1: SerialNumber: 㐉 [ 71.338704][ T10] usb 1-1: device descriptor read/64, error -71 [ 71.448805][ T10] usb usb1-port1: attempt power cycle [ 71.788742][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 71.809794][ T10] usb 1-1: device descriptor read/8, error -71 [ 71.939798][ T10] usb 1-1: device descriptor read/8, error -71 [ 71.955014][ T448] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 72.188725][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 72.219811][ T10] usb 1-1: device descriptor read/8, error -71 [ 72.369887][ T10] usb 1-1: device descriptor read/8, error -71 [ 72.489693][ T10] usb usb1-port1: unable to enumerate USB device [ 72.867694][ T10] usb 4-1: USB disconnect, device number 21 [ 73.536588][ T10] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 73.601301][ T2824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.601496][ T2824] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 73.642754][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 73.659078][ T2826] rust_binder: Write failure EINVAL in pid:543 [ 73.719760][ T2835] 9pnet_fd: Insufficient options for proto=fd [ 73.813053][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 73.813073][ T36] audit: type=1400 audit(2000000008.570:455): avc: denied { execmem } for pid=2846 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.963569][ T2867] rust_binder: Error while translating object. [ 73.963627][ T2867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 73.969895][ T2867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:384 [ 74.004011][ T2871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:386 [ 74.132272][ T2881] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 74.140771][ T2888] netlink: 'syz.1.855': attribute type 8 has an invalid length. [ 74.145683][ T36] audit: type=1400 audit(2000000008.900:456): avc: denied { mounton } for pid=2886 comm="syz.0.854" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.168766][ T2881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 74.245700][ T36] audit: type=1400 audit(2000000008.990:457): avc: denied { execute } for pid=2895 comm="syz.1.856" path="/dev/rnullb0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.260666][ T2904] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.285603][ T36] audit: type=1400 audit(2000000009.040:458): avc: denied { relabelto } for pid=2901 comm="syz.2.857" name="file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 74.313315][ T36] audit: type=1400 audit(2000000009.070:459): avc: denied { associate } for pid=2901 comm="syz.2.857" name="file0" dev="tmpfs" ino=1472 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 74.350512][ T36] audit: type=1400 audit(2000000009.110:460): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 74.392378][ T36] audit: type=1400 audit(2000000009.140:461): avc: denied { create } for pid=2914 comm="syz.2.862" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.428704][ T36] audit: type=1400 audit(2000000009.140:462): avc: denied { rename } for pid=2914 comm="syz.2.862" name="file0" dev="tmpfs" ino=1478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.476824][ T36] audit: type=1400 audit(2000000009.190:463): avc: denied { write } for pid=2916 comm="syz.0.863" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.538735][ T36] audit: type=1400 audit(2000000009.190:464): avc: denied { remove_name } for pid=2916 comm="syz.0.863" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.573053][ T2946] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 74.595000][ T2946] rust_binder: Write failure EINVAL in pid:556 [ 74.759668][ T2979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2979 comm=syz.2.882 [ 74.766689][ T2984] rust_binder: Write failure EFAULT in pid:399 [ 74.795226][ T2986] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 74.871862][ T2999] /dev/rnullb0: Can't open blockdev [ 74.927786][ T3005] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 74.941462][ T3005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 75.198713][ T447] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 75.340478][ T3034] 8021q: VLANs not supported on ip6tnl0 [ 75.368694][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 75.375258][ T447] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 75.382936][ T447] usb 4-1: can't read configurations, error -61 [ 75.518718][ T447] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 75.668704][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 75.675326][ T447] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 75.683116][ T447] usb 4-1: can't read configurations, error -61 [ 75.689657][ T447] usb usb4-port1: attempt power cycle [ 75.759009][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 75.865959][ T3042] netlink: 'syz.1.904': attribute type 6 has an invalid length. [ 75.918726][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 75.924982][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.936256][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.946193][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.952931][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 75.962095][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.971481][ T10] usb 1-1: config 0 descriptor?? [ 76.038732][ T447] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 76.059094][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 76.065851][ T447] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 76.073864][ T447] usb 4-1: can't read configurations, error -61 [ 76.148856][ T3048] netlink: 'syz.1.906': attribute type 3 has an invalid length. [ 76.185485][ T3053] veth0_to_team: entered promiscuous mode [ 76.191391][ T3053] veth0_to_team: entered allmulticast mode [ 76.211643][ T447] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 76.249108][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 76.255782][ T447] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 76.263522][ T447] usb 4-1: can't read configurations, error -61 [ 76.270018][ T447] usb usb4-port1: unable to enumerate USB device [ 76.382945][ T10] hid (null): unknown global tag 0xc3 [ 76.388382][ T10] hid (null): report_id 12928 is invalid [ 76.394085][ T10] hid (null): unknown global tag 0xd [ 76.399409][ T10] hid (null): global environment stack underflow [ 76.407287][ T10] hid (null): global environment stack underflow [ 76.413664][ T10] hid (null): bogus close delimiter [ 76.418929][ T10] hid (null): unknown global tag 0xd [ 76.424354][ T10] hid (null): invalid report_size 59046 [ 76.429981][ T10] hid (null): invalid report_count 212524555 [ 76.436003][ T10] hid (null): invalid report_count 38268 [ 76.441668][ T10] hid (null): unknown global tag 0xc [ 76.582043][ T3036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.590604][ T3036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.599715][ T10] usb 1-1: USB disconnect, device number 26 [ 76.985517][ T3089] Invalid ELF header magic: != ELF [ 77.115010][ T3116] netlink: 76 bytes leftover after parsing attributes in process `syz.2.933'. [ 77.119494][ T3118] binder: Bad value for 'stats' [ 77.268013][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.277213][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.286190][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.295185][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.304100][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.313013][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.322021][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.331075][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.340047][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 77.395890][ T3138] rust_binder: Write failure EFAULT in pid:584 [ 77.419041][ T3144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:590 [ 77.727835][ T3151] overlayfs: failed to clone upperpath [ 77.833220][ T3161] raw_sendmsg: syz.1.947 forgot to set AF_INET. Fix it! [ 78.010887][ T3188] incfs: Error accessing: ./file0. [ 78.016193][ T3188] incfs: mount failed -20 [ 78.057389][ T3201] binder: Unknown parameter 'max0x0000000000000003' [ 78.184192][ T3214] rust_binder: Write failure EFAULT in pid:617 [ 78.195077][ T3218] __vm_enough_memory: pid: 3218, comm: syz.0.967, bytes: 18014402804453376 not enough memory for the allocation [ 78.388756][ T448] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 78.549492][ T448] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 78.557901][ T448] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 78.568463][ T448] usb 4-1: config 220 has no interface number 2 [ 78.575066][ T448] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.588455][ T448] usb 4-1: config 220 interface 0 has no altsetting 0 [ 78.595470][ T448] usb 4-1: config 220 interface 76 has no altsetting 0 [ 78.602576][ T448] usb 4-1: config 220 interface 1 has no altsetting 0 [ 78.611054][ T448] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 78.620423][ T448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.628488][ T448] usb 4-1: Product: syz [ 78.632944][ T448] usb 4-1: Manufacturer: syz [ 78.637624][ T448] usb 4-1: SerialNumber: syz [ 78.719631][ T3242] overlayfs: disabling nfs_export due to verity=on [ 78.726222][ T3242] overlayfs: missing 'lowerdir' [ 78.751807][ T3248] binder: Bad value for 'max' [ 78.768835][ T3250] rust_binder: 630: no such ref 3 [ 78.774013][ T3250] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.774034][ T3250] rust_binder: Read failure Err(EFAULT) in pid:630 [ 78.799807][ T3253] netlink: 'syz.1.977': attribute type 3 has an invalid length. [ 78.811095][ T3252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 78.908811][ T448] usb 4-1: selecting invalid altsetting 0 [ 78.924035][ T448] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 78.930485][ T448] usb 4-1: No valid video chain found. [ 78.938271][ T448] usb 4-1: USB disconnect, device number 26 [ 79.048716][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 79.199106][ T65] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 79.208055][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.215834][ T65] usb 1-1: can't read configurations, error -61 [ 79.348745][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 79.393678][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 79.393697][ T36] audit: type=1400 audit(2000000014.150:479): avc: denied { audit_write } for pid=3260 comm="syz.2.983" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.398163][ T3262] netlink: 'syz.2.983': attribute type 4 has an invalid length. [ 79.400144][ T36] audit: type=1107 audit(2000000014.150:480): pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 79.468971][ T3269] netlink: 'syz.2.986': attribute type 46 has an invalid length. [ 79.509210][ T65] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 79.518202][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.525907][ T65] usb 1-1: can't read configurations, error -61 [ 79.532526][ T65] usb usb1-port1: attempt power cycle [ 79.636350][ T3287] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 79.748216][ T3293] netlink: 'syz.1.995': attribute type 4 has an invalid length. [ 79.868732][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 79.889460][ T65] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 79.898543][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.906190][ T65] usb 1-1: can't read configurations, error -61 [ 80.038735][ T65] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 80.059427][ T65] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 80.068404][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 80.076032][ T65] usb 1-1: can't read configurations, error -61 [ 80.082501][ T65] usb usb1-port1: unable to enumerate USB device [ 80.228320][ T3304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3304 comm=syz.3.999 [ 80.478769][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 80.633492][ T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 80.641831][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.652182][ T10] usb 4-1: config 0 has no interface number 0 [ 80.659965][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 80.669147][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.677173][ T10] usb 4-1: Product: syz [ 80.681595][ T10] usb 4-1: Manufacturer: syz [ 80.686233][ T10] usb 4-1: SerialNumber: syz [ 80.692480][ T10] usb 4-1: config 0 descriptor?? [ 80.701857][ T3314] 9pnet_fd: Insufficient options for proto=fd [ 80.822975][ T3328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3328 comm=syz.1.1008 [ 80.904540][ T10] usb 4-1: USB disconnect, device number 27 [ 81.372816][ T3334] 9pnet_fd: Insufficient options for proto=fd [ 81.466641][ T3341] rust_binder: Error while translating object. [ 81.466669][ T3341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.470463][ T3342] rust_binder: Error while translating object. [ 81.473106][ T3341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:428 [ 81.482269][ T3342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.497466][ T3342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:428 [ 81.748717][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 81.875629][ T36] audit: type=1400 audit(2000000016.630:481): avc: denied { execute_no_trans } for pid=3346 comm="syz.0.1016" path="/221/file1" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.877989][ T3347] rust_binder: Error while translating object. [ 81.899347][ T3347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 81.905662][ T3347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:634 [ 81.919803][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.941167][ T3350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:636 [ 81.941273][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.960345][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 81.969621][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.978220][ T10] usb 4-1: config 0 descriptor?? [ 82.400068][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.418860][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.435725][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.452948][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.465485][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.478748][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.495030][ T10] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 82.547994][ T10] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 82.609242][ T3345] rust_binder: 431: no such ref 0 [ 82.622411][ T3345] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 82.629811][ T3345] rust_binder: 431: no such ref 2 [ 82.634987][ T3345] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 82.678734][ T10] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 82.696291][ T10] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 82.707370][ T10] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -71 [ 82.721901][ T10] usb 4-1: USB disconnect, device number 28 [ 83.236213][ T3406] SELinux: security_context_str_to_sid () failed with errno=-22 [ 83.259907][ T3411] bpf: Bad value for 'gid' [ 83.281900][ T3415] __nla_validate_parse: 20 callbacks suppressed [ 83.281915][ T36] audit: type=1400 audit(2000000018.040:482): avc: denied { nlmsg_read } for pid=3414 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.281920][ T3415] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1043'. [ 83.332121][ T36] audit: type=1400 audit(2000000018.090:483): avc: denied { accept } for pid=3424 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.336020][ T3428] rust_binder: 454: no such ref 3 [ 83.356802][ T3428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 83.372314][ T3432] netlink: 'syz.1.1049': attribute type 46 has an invalid length. [ 83.389931][ T3431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 83.479470][ T3448] 9pnet_fd: Insufficient options for proto=fd [ 83.684701][ T3463] fuse: Unknown parameter 'b' [ 83.690437][ T36] audit: type=1400 audit(2000000018.450:484): avc: denied { append } for pid=3461 comm="syz.0.1060" name="file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.047168][ T3490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3490 comm=syz.2.1071 [ 84.260126][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 84.276599][ T3504] netlink: 680 bytes leftover after parsing attributes in process `syz.1.1076'. [ 84.431444][ T3509] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 84.436717][ T36] audit: type=1400 audit(2000000019.190:485): avc: denied { load_policy } for pid=3508 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.440939][ T3509] SELinux: failed to load policy [ 85.236008][ T36] audit: type=1400 audit(2000000019.990:486): avc: denied { lock } for pid=3558 comm="syz.1.1096" path="socket:[16844]" dev="sockfs" ino=16844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.564391][ T3588] overlayfs: workdir and upperdir must reside under the same mount [ 85.574088][ T36] audit: type=1400 audit(2000000020.330:487): avc: denied { write } for pid=3587 comm="syz.3.1103" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 85.618729][ T36] audit: type=1400 audit(2000000020.370:488): avc: denied { create } for pid=3590 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 85.648393][ T36] audit: type=1400 audit(2000000020.370:489): avc: denied { getopt } for pid=3590 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 85.669266][ T36] audit: type=1400 audit(2000000020.400:490): avc: denied { write } for pid=3590 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 86.147022][ T3616] netlink: 'syz.0.1113': attribute type 6 has an invalid length. [ 86.228831][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 86.308954][ T3649] fuse: Bad value for 'user_id' [ 86.314250][ T36] audit: type=1400 audit(2000004373.071:491): avc: denied { wake_alarm } for pid=3647 comm="syz.0.1125" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.330071][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 86.335487][ T3649] fuse: Bad value for 'user_id' [ 86.342607][ T3649] 9pnet_fd: Insufficient options for proto=fd [ 86.664652][ T36] audit: type=1400 audit(2000004373.421:492): avc: denied { listen } for pid=3661 comm="syz.3.1130" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 86.732919][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1133'. [ 86.903274][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'. [ 86.921470][ T3690] 9pnet_fd: Insufficient options for proto=fd [ 87.045413][ T36] audit: type=1326 audit(2000004373.791:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.3.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e918efc9 code=0x7fc00000 [ 87.069182][ T36] audit: type=1326 audit(2000004373.791:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.3.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e918efc9 code=0x7fc00000 [ 87.635452][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.643299][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.643445][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.657429][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.657480][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.671605][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.671657][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.686936][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.686994][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.701953][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.702014][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.723179][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.723229][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.737635][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.737685][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.757047][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.757100][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.770924][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.770972][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.784695][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.784746][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.799332][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.799384][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.813959][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.814019][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.828078][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.828128][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.842193][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.842244][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.862270][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.862321][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.877430][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.884872][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.900471][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.901190][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.914913][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.914961][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.928709][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.928760][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.942469][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.942518][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.956264][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.956315][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.970568][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.970620][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.984619][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.984665][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 87.998203][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 87.998254][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.012293][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.012341][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.025901][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.025949][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.039702][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.039751][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.053598][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.053651][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.067521][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.067571][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.081281][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.081333][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.095173][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.095222][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.108915][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.108973][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.122591][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.122641][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.142632][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.142684][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.156292][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.156345][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.170053][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.170102][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.176337][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.183611][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.183660][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.196589][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.202411][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.209940][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.222766][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.230865][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.241192][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.249032][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.260972][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.267003][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.279659][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.286689][ T3804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=3804 comm=syz.0.1182 [ 88.299749][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.325149][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.325200][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.339134][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.339345][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.353249][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.353298][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.372390][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.372463][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.386203][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.386258][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.399992][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.400054][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.414401][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.414449][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.423513][ T3819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3819 comm=syz.0.1187 [ 88.428475][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.440736][ T3732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 88.454662][ T3732] rust_binder: Write failure EINVAL in pid:508 [ 88.686432][ T3849] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.704519][ T3826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.704559][ T3826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:516 [ 89.068738][ T335] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 89.229802][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 89.240992][ T335] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 89.250090][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.258756][ T335] usb 4-1: config 0 descriptor?? [ 89.264096][ T3860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.278182][ T3886] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1205'. [ 89.389363][ T3892] 9pnet_fd: Insufficient options for proto=fd [ 89.497947][ T3928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3928 comm=syz.0.1215 [ 89.523460][ T36] kauditd_printk_skb: 6069 callbacks suppressed [ 89.523480][ T36] audit: type=1400 audit(2000004376.281:6564): avc: denied { map } for pid=3929 comm="syz.2.1216" path="socket:[17377]" dev="sockfs" ino=17377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.560281][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 89.599690][ T3945] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1218'. [ 89.642339][ T3953] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1226'. [ 89.651601][ T3953] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1226'. [ 89.676534][ T335] hid-generic 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 89.754791][ T3976] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 89.849435][ T3995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1242'. [ 89.891532][ T335] usb 4-1: USB disconnect, device number 29 [ 90.008790][ T4019] binder: Unknown parameter 'defcontext01777777777777777777777' [ 90.028405][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.037572][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.046149][ T4022] rust_binder: 537: no such ref 2 [ 90.266266][ T4033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1253'. [ 90.318699][ T335] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 90.468715][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 90.479047][ T335] usb 4-1: config 0 has an invalid interface number: 193 but max is 1 [ 90.487362][ T335] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 90.495711][ T335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.506156][ T335] usb 4-1: config 0 has no interface number 0 [ 90.512446][ T335] usb 4-1: config 0 has no interface number 1 [ 90.518608][ T335] usb 4-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.532358][ T335] usb 4-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 90.545582][ T335] usb 4-1: config 0 interface 193 has no altsetting 0 [ 90.552702][ T335] usb 4-1: config 0 interface 4 has no altsetting 0 [ 90.561065][ T335] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 90.570474][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.578599][ T335] usb 4-1: Product: syz [ 90.583273][ T335] usb 4-1: Manufacturer: syz [ 90.588037][ T335] usb 4-1: SerialNumber: syz [ 90.594597][ T335] usb 4-1: config 0 descriptor?? [ 90.808247][ T335] usb 4-1: unknown interface protocol 0x4f, assuming v1 [ 90.814359][ T4101] tmpfs: Unsupported parameter 'mpol' [ 90.818766][ T335] usb 4-1: 193:2 : does not exist [ 90.836693][ T335] usb 4-1: unknown interface protocol 0x5, assuming v1 [ 90.843744][ T335] usb 4-1: 4:0 : does not exist [ 90.850625][ T335] usb 4-1: USB disconnect, device number 30 [ 91.003652][ T4112] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1281'. [ 91.015292][ T36] audit: type=1326 audit(2000004377.771:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.1281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24f538efc9 code=0x0 [ 91.329511][ T4126] rust_binder: 545: no such ref 2 [ 91.334741][ T4126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 91.679945][ T36] audit: type=1400 audit(2000004378.441:6566): avc: denied { accept } for pid=4147 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.685085][ T4148] rust_binder: Read failure Err(EAGAIN) in pid:567 [ 91.725589][ T36] audit: type=1400 audit(2000004378.481:6567): avc: denied { setopt } for pid=4150 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.931362][ T4169] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 91.938730][ T4169] rust_binder: Write failure EINVAL in pid:580 [ 91.950063][ T4172] SELinux: security_context_str_to_sid () failed with errno=-22 [ 91.986210][ T4176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.986247][ T4176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 92.023406][ T4181] batadv_slave_1: entered promiscuous mode [ 92.045150][ T4183] batadv_slave_1: left promiscuous mode [ 92.845132][ T4178] overlayfs: statfs failed on './file0' [ 105.479872][ T4195] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1310'. [ 105.499806][ T4195] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 105.543679][ T36] audit: type=1400 audit(2000004392.301:6568): avc: denied { shutdown } for pid=4211 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.610358][ T4215] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 105.728708][ T4226] 9pnet_fd: Insufficient options for proto=fd [ 105.757741][ T4228] fuse: Bad value for 'group_id' [ 105.778699][ T4228] fuse: Bad value for 'group_id' [ 105.829612][ T4240] 9pnet_fd: Insufficient options for proto=fd [ 105.880103][ T4248] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 105.928768][ T4256] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1333'. [ 105.971659][ T4262] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1335'. [ 106.239383][ T4292] overlayfs: conflicting options: metacopy=off,verity=require [ 106.344641][ T36] audit: type=1400 audit(2000004393.101:6569): avc: denied { accept } for pid=4312 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.513857][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 106.527785][ T4329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 106.669722][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1370'. [ 106.825780][ T36] audit: type=1400 audit(2000004393.581:6570): avc: denied { bind } for pid=4391 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.098211][ T4416] 9pnet_fd: Insufficient options for proto=fd [ 107.266234][ T4445] bpf: Bad value for 'mode' [ 107.425925][ T36] audit: type=1400 audit(2000004394.181:6571): avc: denied { getopt } for pid=4460 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.458131][ T36] audit: type=1400 audit(2000004394.201:6572): avc: denied { ioctl } for pid=4460 comm="syz.1.1403" path="socket:[19457]" dev="sockfs" ino=19457 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.741759][ T4473] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 107.773097][ T4479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=4479 comm=syz.3.1410 [ 107.863825][ T36] audit: type=1326 audit(2000004394.621:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94e918efc9 code=0x0 [ 107.947228][ T4500] netlink: 'syz.2.1417': attribute type 4 has an invalid length. [ 107.955535][ T4500] netlink: 3649 bytes leftover after parsing attributes in process `syz.2.1417'. [ 107.992254][ T4505] coredump: 1136(syz.2.1418): Core dump to core aborted: cannot preserve file permissions [ 108.086421][ T36] audit: type=1400 audit(2000004394.841:6574): avc: denied { read } for pid=4511 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.135337][ T4517] netlink: 'syz.0.1422': attribute type 29 has an invalid length. [ 108.143246][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 108.152597][ T4517] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.185196][ T36] audit: type=1400 audit(2000004394.941:6575): avc: denied { create } for pid=4524 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.206185][ T36] audit: type=1400 audit(2000004394.951:6576): avc: denied { create } for pid=4524 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 108.344602][ T4535] 9pnet_fd: Insufficient options for proto=fd [ 108.407140][ T36] audit: type=1400 audit(2000004395.161:6577): avc: denied { relabelfrom } for pid=4543 comm="syz.1.1434" name="NETLINK" dev="sockfs" ino=19143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.458783][ T4552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4552 comm=syz.1.1438 [ 109.034240][ T4592] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1453'. [ 109.049212][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1453'. [ 111.900073][ T4752] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1510'. [ 111.944040][ T4758] netlink: 'syz.1.1513': attribute type 8 has an invalid length. [ 112.409698][ T4770] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1518'. [ 112.469312][ T4776] netlink: 'syz.3.1520': attribute type 11 has an invalid length. [ 112.616836][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 112.752965][ T4814] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 112.771076][ T4814] netlink: 'syz.0.1533': attribute type 2 has an invalid length. [ 112.813122][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 113.762749][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 113.762773][ T36] audit: type=1326 audit(2000004656.514:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.1557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24f538efc9 code=0x0 [ 114.277242][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 114.370251][ T4915] 9pnet_fd: Insufficient options for proto=fd [ 114.620398][ T36] audit: type=1400 audit(2000004657.374:6586): avc: denied { create } for pid=4925 comm="syz.2.1573" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 114.913707][ T36] audit: type=1400 audit(2000004657.664:6587): avc: denied { bind } for pid=4946 comm="syz.1.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.174461][ T4996] 9pnet_fd: Insufficient options for proto=fd [ 115.938329][ T5054] netlink: 8540 bytes leftover after parsing attributes in process `syz.2.1614'. [ 115.947613][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 116.068173][ T5066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=5066 comm=syz.3.1619 [ 116.221866][ T5088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1627'. [ 117.565273][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 117.721463][ T36] audit: type=1400 audit(2000004660.474:6588): avc: denied { create } for pid=5186 comm="syz.1.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.264471][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 118.698836][ T5267] batadv_slave_1: entered promiscuous mode [ 118.738586][ T5266] batadv_slave_1: left promiscuous mode [ 119.037747][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.045045][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.052466][ T5304] bridge_slave_0: entered allmulticast mode [ 119.058825][ T5304] bridge_slave_0: entered promiscuous mode [ 119.066092][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.073265][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.080437][ T5304] bridge_slave_1: entered allmulticast mode [ 119.086708][ T5304] bridge_slave_1: entered promiscuous mode [ 119.141743][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.148860][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.156172][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.163249][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.184277][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.191802][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.202147][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.209243][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.218356][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.225461][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.267667][ T5304] veth0_vlan: entered promiscuous mode [ 119.287928][ T5304] veth1_macvtap: entered promiscuous mode [ 119.321411][ T36] audit: type=1400 audit(2000004662.074:6589): avc: denied { mounton } for pid=5304 comm="syz-executor" path="/root/syzkaller.IgE8Sw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 119.326067][ T5321] >: renamed from veth0_vlan (while UP) [ 119.359050][ T5321] overlayfs: failed to clone upperpath [ 119.493200][ T5328] rust_binder: Error in use_page_slow: ESRCH [ 119.493222][ T5328] rust_binder: use_range failure ESRCH [ 119.499521][ T5328] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 119.505017][ T5328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 119.513154][ T5328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:7 [ 119.565458][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 119.585054][ T5333] binder: Unknown parameter '' [ 119.744258][ T5353] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1722'. [ 119.880206][ T5369] netlink: 'syz.2.1730': attribute type 58 has an invalid length. [ 119.888309][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 119.901893][ T5370] netlink: 'syz.2.1730': attribute type 58 has an invalid length. [ 119.910496][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 120.001430][ T5374] cgroup: fork rejected by pids controller in /syz3 [ 120.181020][ T5535] netlink: 'syz.0.1746': attribute type 16 has an invalid length. [ 120.181037][ T5537] batadv_slave_1: entered promiscuous mode [ 120.207948][ T5535] netlink: 64122 bytes leftover after parsing attributes in process `syz.0.1746'. [ 120.226137][ T5540] sit0: entered promiscuous mode [ 120.249088][ T5540] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 120.257038][ T5540] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1747'. [ 120.266042][ T5534] batadv_slave_1: left promiscuous mode [ 120.297686][ T5555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 120.478852][ T5567] overlayfs: conflicting options: userxattr,redirect_dir=on [ 121.080389][ T5631] netlink: 'syz.3.1776': attribute type 13 has an invalid length. [ 121.128815][ T5635] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.137619][ T5635] netlink: 'syz.4.1778': attribute type 16 has an invalid length. [ 121.146197][ T5635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5635 comm=syz.4.1778 [ 121.158747][ T36] audit: type=1326 audit(2000004663.894:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.1776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94e918efc9 code=0x0 [ 121.276011][ T5653] netlink: 'syz.2.1785': attribute type 16 has an invalid length. [ 121.288669][ T5653] netlink: 'syz.2.1785': attribute type 25 has an invalid length. [ 121.312605][ T5653] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.1785'. [ 121.377065][ T5671] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 121.595651][ T5722] 9pnet_fd: Insufficient options for proto=fd [ 121.909719][ T5746] netlink: 'syz.4.1813': attribute type 39 has an invalid length. [ 121.974413][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5753 comm=syz.4.1816 [ 121.987596][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60769 sclass=netlink_route_socket pid=5753 comm=syz.4.1816 [ 122.103867][ T5760] overlayfs: failed to clone lowerpath [ 122.180083][ T5773] fuse: Bad value for 'fd' [ 122.296469][ T5806] netlink: 'syz.0.1834': attribute type 27 has an invalid length. [ 122.306808][ T5806] gretap0: left allmulticast mode [ 122.329082][ T5806] 9pnet_fd: Insufficient options for proto=fd [ 122.368824][ T36] audit: type=1400 audit(2000004666.123:6591): avc: denied { remount } for pid=5816 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 122.417327][ T36] audit: type=1326 audit(2000004666.163:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.0.1841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd63558efc9 code=0x0 [ 123.018348][ T36] audit: type=1400 audit(2000004666.763:6593): avc: denied { shutdown } for pid=5851 comm="syz.2.1849" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.137627][ T5862] ------------[ cut here ]------------ [ 123.143233][ T5862] WARNING: CPU: 0 PID: 5862 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 123.152742][ T5862] Modules linked in: [ 123.156688][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.4.1853 Not tainted syzkaller #0 815521559dbd70f1614977c300fd16d58acb59ef [ 123.168358][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.178500][ T5862] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 123.184502][ T5862] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 02 10 ee 05 00 0f 85 be 00 00 00 c6 05 f5 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 123.204195][ T5862] RSP: 0018:ffffc9000ba0f860 EFLAGS: 00010246 [ 123.210330][ T5862] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 123.218340][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ba0f918 [ 123.226385][ T5862] RBP: ffffc9000ba0f988 R08: ffffc9000ba0f917 R09: 0000000000000000 [ 123.234419][ T5862] R10: ffffc9000ba0f900 R11: fffff52001741f23 R12: ffffc9000ba0f8a0 [ 123.242615][ T5862] R13: dffffc0000000000 R14: 1ffff92001741f10 R15: 0000000000000000 [ 123.250655][ T5862] FS: 00007fe27322b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 123.259688][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.266328][ T5862] CR2: 0000200000001000 CR3: 00000001164dc000 CR4: 00000000003526b0 [ 123.274371][ T5862] Call Trace: [ 123.277674][ T5862] [ 123.280649][ T5862] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.286759][ T5862] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 123.292562][ T5862] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 123.298245][ T5862] ___kmalloc_large_node+0x81/0x220 [ 123.303522][ T5862] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 123.309219][ T5862] __kmalloc_large_node_noprof+0x1e/0xe0 [ 123.314876][ T5862] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 123.320710][ T5862] __kmalloc_noprof+0x336/0x530 [ 123.325597][ T5862] ? __cfi_lockref_get+0x10/0x10 [ 123.330618][ T5862] incfs_realloc_mount_info+0xa7/0x4d0 [ 123.336113][ T5862] ? incfs_add_sysfs_node+0x118/0x240 [ 123.341561][ T5862] incfs_alloc_mount_info+0x479/0x600 [ 123.346960][ T5862] incfs_mount_fs+0x3ca/0x960 [ 123.351689][ T5862] ? __cfi_incfs_mount_fs+0x10/0x10 [ 123.356931][ T5862] ? vfs_parse_fs_string+0x102/0x170 [ 123.362260][ T5862] ? selinux_capable+0x38/0x50 [ 123.367065][ T5862] legacy_get_tree+0x103/0x1b0 [ 123.371955][ T5862] ? __cfi_incfs_mount_fs+0x10/0x10 [ 123.377218][ T5862] vfs_get_tree+0xa1/0x290 [ 123.381722][ T5862] do_new_mount+0x251/0xb40 [ 123.386258][ T5862] ? security_capable+0xcf/0xf0 [ 123.391240][ T5862] path_mount+0x688/0x1050 [ 123.395696][ T5862] ? putname+0x113/0x150 [ 123.400028][ T5862] __se_sys_mount+0x2bd/0x480 [ 123.404734][ T5862] ? __x64_sys_mount+0xf0/0xf0 [ 123.409536][ T5862] ? __kasan_check_write+0x18/0x20 [ 123.414688][ T5862] ? fpregs_restore_userregs+0x11d/0x260 [ 123.420359][ T5862] __x64_sys_mount+0xc3/0xf0 [ 123.424978][ T5862] x64_sys_call+0x2021/0x2ee0 [ 123.429752][ T5862] do_syscall_64+0x58/0xf0 [ 123.434209][ T5862] ? clear_bhb_loop+0x50/0xa0 [ 123.439033][ T5862] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.444958][ T5862] RIP: 0033:0x7fe27238efc9 [ 123.449431][ T5862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.469098][ T5862] RSP: 002b:00007fe27322b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.477534][ T5862] RAX: ffffffffffffffda RBX: 00007fe2725e5fa0 RCX: 00007fe27238efc9 [ 123.485729][ T5862] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 123.493773][ T5862] RBP: 00007fe272411f91 R08: 0000200000000280 R09: 0000000000000000 [ 123.501815][ T5862] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 123.509867][ T5862] R13: 00007fe2725e6038 R14: 00007fe2725e5fa0 R15: 00007ffe92a40788 [ 123.517870][ T5862] [ 123.520939][ T5862] ---[ end trace 0000000000000000 ]--- [ 123.527210][ T5862] incfs: Error allocating mount info. -12 [ 123.535535][ T5862] incfs: mount failed -12