last executing test programs: 4.089875901s ago: executing program 1 (id=993): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r0, &(0x7f0000000980)="a9", 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) syz_usb_connect(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1392106d04d308280b011a030109024700010000000009046900000e010000082402010202"], 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x145dc3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000019c0)={0x2020}, 0x2020) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4010054}, 0x24000048) readv(r2, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 3.376191419s ago: executing program 0 (id=1003): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r1, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 3.317894495s ago: executing program 0 (id=1004): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000040)={0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r3, 0xfffffee8) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/121, 0x0, 0x0, 0x2a}}, &(0x7f0000000140)}}], 0xffffffffffffff43, 0x0, 0x0}) 3.316979885s ago: executing program 0 (id=1005): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESOCT], 0xb8}}, 0x20040014) poll(&(0x7f0000000140)=[{r0, 0x6002}, {r1, 0x4}, {r2, 0x8040}, {r3, 0x4}, {r0, 0x123}, {r0, 0xa222}], 0x6, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0xd002, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@dont_hash}]}}) 3.291264327s ago: executing program 0 (id=1006): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setuid(0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) close_range(r2, r0, 0x2) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f00000000c0)=0x401) socket(0x21, 0x6, 0x80) write(r1, &(0x7f0000000100)="fdf65ec26a9416f7a4a975f2e24bb129f08401f4d2b9a7ccd9584809dfe0ab456e1d7dce2eada75570fcf2c52ef77ea20d69c13ad0e43b8e5a71324ed22a522178442f9733f768cbef1a4f14ad00d0daf88c69b96b6f00dbcc4f32992f80f894a975e4f2c61c31abc507bcfb03b5afbdd473e407773f9bd5f0cfc3d019d3f2d032c08164b20b683e7ce8e7d05d3d3bea0b5f0f6b735fceee340e53ad3c4d516ca7ec58fb0090baa418b21b0105a5bc99328148059a0fc8fd4f77340dba", 0xbd) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) copy_file_range(r7, &(0x7f0000000040)=0x401, r7, 0x0, 0x6, 0x0) readv(r7, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 1.126293193s ago: executing program 3 (id=1031): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc5696000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcc776000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.098324585s ago: executing program 1 (id=1032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x18, 0x54, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0xffffffff, 0x4}}) (async) lseek(r5, 0x4, 0x1) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="a5da34ad", @ANYRES16=r3, @ANYBLOB="100025bd7000fedbdf251a0000000700210061610000080001001100000008009a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000010) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 989.828626ms ago: executing program 1 (id=1033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x81, 0x7fc00000}]}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 924.054772ms ago: executing program 1 (id=1034): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000016c0)={&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/246, 0xf6}, {&(0x7f0000001340)=""/98, 0x62}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f00000014c0)=""/91, 0x5b}, {&(0x7f0000000080)=""/33, 0x21}], 0x7, &(0x7f00000015c0)=""/251, 0xfb}, 0x0) 621.879491ms ago: executing program 2 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0xd, 0x4e24, 0x8, 0xa, 0x20, 0x0, 0x73}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xf3, 0x0, 0x9, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x4, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x100000, 0x200064, 0x8, 0x8000, 0x2000, [0x9d3, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r4 = getpgid(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='maps\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 620.924421ms ago: executing program 2 (id=1037): unshare(0x44040200) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x664, 0x0, 0x7ff, 0x8, 0x1]}, &(0x7f00000001c0)=0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r2, 0x301, 0x70bd28, 0x25dfdc06, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000005c0)={0x1f, 0x1, 0x5}, 0x6) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 604.543732ms ago: executing program 2 (id=1038): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) (async) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x162) close(r1) syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x1}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 591.714814ms ago: executing program 2 (id=1039): sync() sync() sync() sync() r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x90, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x7, 0x0, 0x8}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x4, 0x10001, 0xc01, 0x7f, 0x4, 0x8, 0x2, 0x7, 0x81, 0x100000001, 0x10, 0x5, 0x2, 0x0, 0x3], 0x22221002, 0x6b625dcaf87ced6d}) sync() sync() 269.883695ms ago: executing program 0 (id=1040): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) fadvise64(r0, 0x1fe, 0x7ffc, 0x3) (async) fadvise64(r0, 0x1fe, 0x7ffc, 0x3) 169.270214ms ago: executing program 3 (id=1041): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005640)='ns/cgroup\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 139.740577ms ago: executing program 3 (id=1042): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000640), 0x3) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000000)=0xf62, 0x4) shutdown(r1, 0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r4, 0x0, 0xffffffff004) (async) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x5, 0x8000, 0x8, 0x80000000}) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 93.849261ms ago: executing program 2 (id=1043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x10000, 0x7e, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}], 0x1}}], 0x1, 0x4000000) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xa}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (rerun: 32) 93.115681ms ago: executing program 3 (id=1044): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000840)=""/79, 0x4f}, {&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f00000012c0)=""/249, 0xf9}], 0x4}, 0x9}], 0x1, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100265e14c73f5ddeca2b0000000800090008000000180001801400020064756d6d7930"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000200)=0x1, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x81, 0x8000, 0x2}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@register_looper, @free_buffer={0x40086303, r2}], 0x50, 0x0, &(0x7f0000000280)="6dc005603ca76fed2aea2f95710ad49f288d9047c96cf3f4f63290a48c074818003a648d6dcf2e0c6792f34db27736127b730a840214d3cca9d51513848e4b5c0011a1dd6564b8e6a347e91fec5f02ba"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x10000}, @request_death={0x400c630e, 0x20002}, @register_looper, @clear_death={0x400c630f, 0x1}, @register_looper], 0x0, 0x0, 0x0}) 73.527173ms ago: executing program 1 (id=1045): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_clone(0x23054200, &(0x7f0000000000)="e559884a2f74d553a28e0767a6e9b7b30b14eaafbfcd50c03a9e2011216db586bb66d47e27f413b4f6ca81427186774a3d07289013ae80cee85fcd3f828c4a2802984b3c92c743744f0860859d6a9a03b474263364874ad83e2feafd94df82c056c976dbb27c4cf253735c5df0ebda4fb705302eb21d30e956", 0x79, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="8f13b9a2beda612976927c33d0fe7dc4b4ff380ca91f9aaa5134e2c709ee8784a01e1675f6d7d87e0e1e4a77a91b78d9addfb45a8b3880612f7d97646376b1e06f0397021d345e4fc84a6f5df290f44eb47ab24e23") 55.289725ms ago: executing program 3 (id=1046): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x0, 0x2, 0x24}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x0, 0x2d}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 2.67968ms ago: executing program 1 (id=1047): r0 = gettid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x60040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='O', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xdb33}], 0x1, 0x40002042, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_nanosleep(0x5, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r3, 0x1fe, 0x7ffc, 0x3) 2.01738ms ago: executing program 2 (id=1048): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) getdents(r4, &(0x7f0000001400)=""/4120, 0x1018) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) write(r1, &(0x7f0000000400)="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", 0xfffffcf1) 468.55µs ago: executing program 3 (id=1049): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x7f, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="3303120081fd140000007ef570235f", 0xf, 0x40008c1, &(0x7f00000000c0)={0x11, 0x2, r3, 0x1, 0xcf, 0x6, @local}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x8, r6, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r6, 0x5}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200110e0000000000000000cb00000097"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2c}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xa44, 0x10, 0x0, 0x6]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=18432,\x00'/33]) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152", 0xc8, 0x0) r9 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006600"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 0s ago: executing program 0 (id=1050): setresgid(0xffffffffffffffff, 0xee01, 0x0) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x7, "1f00"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="00141000000041"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000740)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x7d4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 23.457756][ T36] audit: type=1400 audit(1760937736.590:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.459180][ T282] cgroup: Unknown subsys name 'net' [ 23.480485][ T36] audit: type=1400 audit(1760937736.590:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.508139][ T36] audit: type=1400 audit(1760937736.620:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.508328][ T282] cgroup: Unknown subsys name 'devices' [ 23.616930][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.622558][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.777861][ T36] audit: type=1400 audit(1760937736.910:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.801062][ T36] audit: type=1400 audit(1760937736.910:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.825971][ T36] audit: type=1400 audit(1760937736.910:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.833619][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.858080][ T36] audit: type=1400 audit(1760937736.990:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.883516][ T36] audit: type=1400 audit(1760937736.990:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.893870][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.909289][ T36] audit: type=1400 audit(1760937737.030:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.943334][ T36] audit: type=1400 audit(1760937737.030:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.323485][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.330688][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.337841][ T290] bridge_slave_0: entered allmulticast mode [ 25.344212][ T290] bridge_slave_0: entered promiscuous mode [ 25.351698][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.358812][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.365914][ T290] bridge_slave_1: entered allmulticast mode [ 25.372210][ T290] bridge_slave_1: entered promiscuous mode [ 25.415129][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422201][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.429318][ T289] bridge_slave_0: entered allmulticast mode [ 25.435638][ T289] bridge_slave_0: entered promiscuous mode [ 25.447516][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454687][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.461802][ T289] bridge_slave_1: entered allmulticast mode [ 25.468279][ T289] bridge_slave_1: entered promiscuous mode [ 25.495046][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.502108][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.509256][ T292] bridge_slave_0: entered allmulticast mode [ 25.515680][ T292] bridge_slave_0: entered promiscuous mode [ 25.533563][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.540659][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.547790][ T292] bridge_slave_1: entered allmulticast mode [ 25.554043][ T292] bridge_slave_1: entered promiscuous mode [ 25.643052][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.650182][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.657323][ T291] bridge_slave_0: entered allmulticast mode [ 25.663616][ T291] bridge_slave_0: entered promiscuous mode [ 25.670206][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.677324][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.684443][ T291] bridge_slave_1: entered allmulticast mode [ 25.690692][ T291] bridge_slave_1: entered promiscuous mode [ 25.767864][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.774962][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.802891][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.809987][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.817331][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.824405][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.850833][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.857942][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.865259][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.872388][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.907745][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.915787][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.923142][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.930762][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.938151][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.966538][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.973623][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.981397][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.988589][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.012779][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.019900][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.027694][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.034760][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.044896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.051953][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.067468][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.074557][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.092691][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.099801][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.107926][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.114994][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.157297][ T289] veth0_vlan: entered promiscuous mode [ 26.177482][ T290] veth0_vlan: entered promiscuous mode [ 26.196650][ T291] veth0_vlan: entered promiscuous mode [ 26.205975][ T292] veth0_vlan: entered promiscuous mode [ 26.212467][ T289] veth1_macvtap: entered promiscuous mode [ 26.244646][ T290] veth1_macvtap: entered promiscuous mode [ 26.255237][ T292] veth1_macvtap: entered promiscuous mode [ 26.261960][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.294509][ T291] veth1_macvtap: entered promiscuous mode [ 26.346573][ T333] syz.1.2 (333): attempted to duplicate a private mapping with mremap. This is not supported. [ 26.390726][ T342] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 26.399685][ T342] rust_binder: 2: no such ref 2 [ 26.513107][ T350] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.545313][ T350] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 26.584379][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.618503][ T352] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 26.618533][ T352] rust_binder: Error while translating object. [ 26.628312][ T352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.634809][ T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 26.744467][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 26.762170][ T66] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.771097][ T66] usb 3-1: config 179 has no interface number 0 [ 26.781257][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.793770][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.807717][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.819729][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.833246][ T66] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.847104][ T66] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.857403][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.867489][ T335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.182603][ T357] rust_binder: Error while translating object. [ 27.182651][ T357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.189811][ T357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 27.244352][ T360] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 27.313551][ T335] usb usb8: usbfs: process 335 (syz.2.3) did not claim interface 0 before use [ 27.345537][ T45] usb 3-1: USB disconnect, device number 2 [ 27.345588][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 27.345621][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 27.724902][ T374] overlayfs: overlapping lowerdir path [ 27.779185][ T385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.780701][ T385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=385 comm=syz.0.20 [ 28.014338][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.033947][ T397] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 28.069422][ T400] overlayfs: overlapping lowerdir path [ 28.175445][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 28.183018][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.198436][ T414] rust_binder: 26: no such ref 1 [ 28.199878][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.203472][ T414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 28.205452][ T415] rust_binder: 26: no such ref 1 [ 28.216501][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.225993][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 28.231374][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.269785][ T45] usb 4-1: config 0 descriptor?? [ 28.394350][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.449171][ T431] rust_binder: 42: no such ref 3 [ 28.454198][ T431] rust_binder: 42: no such ref 2 [ 28.472619][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 28.472638][ T36] audit: type=1400 audit(1760937741.600:176): avc: denied { mounton } for pid=432 comm="syz.2.37" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.472748][ T433] binder: Bad value for 'max' [ 28.546054][ T36] audit: type=1400 audit(1760937741.680:177): avc: denied { write } for pid=434 comm="syz.2.38" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.564202][ T435] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.568479][ T435] rust_binder: Read failure Err(EFAULT) in pid:46 [ 28.572546][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.593244][ T31] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 28.602363][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.611758][ T31] usb 2-1: config 0 descriptor?? [ 28.656756][ T36] audit: type=1400 audit(1760937741.790:178): avc: denied { ioctl } for pid=439 comm="syz.0.40" path="socket:[4413]" dev="sockfs" ino=4413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.664955][ T440] rust_binder: Write failure EFAULT in pid:13 [ 28.682127][ T440] rust_binder: Write failure EFAULT in pid:13 [ 28.687251][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 28.700959][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.724857][ T444] overlayfs: overlapping lowerdir path [ 28.733248][ T45] usb 4-1: USB disconnect, device number 2 [ 28.740610][ T36] audit: type=1400 audit(1760937741.870:179): avc: denied { create } for pid=445 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 28.784175][ T36] audit: type=1400 audit(1760937741.910:180): avc: denied { ioctl } for pid=450 comm="syz.0.45" path="socket:[3804]" dev="sockfs" ino=3804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.784915][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.822012][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.823180][ T31] usb 2-1: USB disconnect, device number 2 [ 28.830061][ T451] rust_binder: Write failure EFAULT in pid:51 [ 28.854986][ T458] udevd[458]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.876658][ T462] rust_binder: Write failure EFAULT in pid:56 [ 28.880430][ T462] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 28.895763][ T462] rust_binder: Write failure EINVAL in pid:56 [ 28.962109][ T36] audit: type=1400 audit(1760937742.090:181): avc: denied { setopt } for pid=464 comm="syz.2.48" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.962289][ T465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.968291][ T36] audit: type=1400 audit(1760937742.090:182): avc: denied { getopt } for pid=464 comm="syz.2.48" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.021198][ T36] audit: type=1400 audit(1760937742.160:183): avc: denied { create } for pid=464 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 29.041686][ T36] audit: type=1400 audit(1760937742.180:184): avc: denied { connect } for pid=464 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.188157][ T472] overlayfs: overlapping lowerdir path [ 29.231458][ T36] audit: type=1400 audit(1760937742.360:185): avc: denied { setopt } for pid=475 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.274169][ T478] rust_binder: 22: no such ref 1 [ 29.279320][ T478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 29.286910][ T478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 29.310086][ T480] capability: warning: `syz.3.55' uses deprecated v2 capabilities in a way that may be insecure [ 29.374654][ T482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.56'. [ 29.394411][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.410590][ T482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.56'. [ 29.554339][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 29.575245][ T10] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 29.583558][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 29.604440][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.618512][ T10] usb 3-1: config 0 has no interface number 0 [ 29.635667][ T10] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 29.644863][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.664296][ T10] usb 3-1: Product: syz [ 29.668523][ T10] usb 3-1: Manufacturer: syz [ 29.673284][ T10] usb 3-1: SerialNumber: syz [ 29.682069][ T498] overlayfs: overlapping lowerdir path [ 29.695190][ T10] usb 3-1: config 0 descriptor?? [ 29.814875][ T502] rust_binder: 41: no such ref 0 [ 29.819892][ T502] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 29.844335][ T502] rust_binder: 41: no such ref 2 [ 29.849404][ T502] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 29.902348][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 29.966244][ T509] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 29.985458][ T509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.994000][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:61 [ 30.125758][ T513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.135264][ T513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 30.150811][ T515] rust_binder: Write failure EFAULT in pid:28 [ 30.177028][ T517] rust_binder: Write failure EFAULT in pid:39 [ 30.208639][ T523] rust_binder: Error while translating object. [ 30.215118][ T523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.221489][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 30.914895][ T551] rust_binder: Write failure EINVAL in pid:57 [ 31.354329][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.514818][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 31.519683][ T577] IPv6: NLM_F_CREATE should be specified when creating new route [ 31.528280][ T577] IPv6: NLM_F_REPLACE set, but no existing node found! [ 31.528846][ T10] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 31.536627][ T577] 9pnet_fd: Insufficient options for proto=fd [ 31.553140][ T10] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 31.569701][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 31.587607][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 31.601196][ T10] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 31.620207][ T10] usb 2-1: Product: syz [ 31.624542][ T10] usb 2-1: Manufacturer: syz [ 31.630047][ T10] usb 2-1: config 0 descriptor?? [ 31.633747][ T579] /dev/rnullb0: Can't open blockdev [ 31.636536][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 31.648862][ T10] usb 2-1: Detected FT2232C/D [ 31.901007][ T596] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.909002][ T596] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 31.909038][ T596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.917156][ T596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:78 [ 31.947171][ T598] Zero length message leads to an empty skb [ 31.980523][ T600] overlayfs: missing 'lowerdir' [ 32.014578][ T457] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 32.026006][ T604] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 32.026052][ T604] rust_binder: Error while translating object. [ 32.036858][ T604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.043130][ T604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 32.078063][ T31] usb 3-1: USB disconnect, device number 3 [ 32.185911][ T457] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 32.197047][ T457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.206560][ T457] usb 1-1: config 0 descriptor?? [ 32.261284][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 32.272213][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 32.304532][ T10] usb 2-1: USB disconnect, device number 3 [ 32.314356][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.325198][ T10] ftdi_sio 2-1:0.0: device disconnected [ 32.414360][ T457] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 32.607623][ T638] incfs: Options parsing error. -22 [ 32.613023][ T638] incfs: mount failed -22 [ 32.692070][ T650] binder: Unknown parameter '0x0000000000000000' [ 32.698895][ T650] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.704410][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.734963][ T653] 9pnet_fd: Insufficient options for proto=fd [ 32.766346][ T658] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 32.773999][ T658] SELinux: failed to load policy [ 32.817945][ T457] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 32.831161][ T457] asix 1-1:0.0: probe with driver asix failed with error -32 [ 32.865543][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 32.876785][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33792, setting to 1024 [ 32.887998][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0005, bcdDevice= 0.00 [ 32.897266][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.905956][ T10] usb 2-1: config 0 descriptor?? [ 33.044341][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.145411][ T673] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=80 sclass=netlink_xfrm_socket pid=673 comm=syz.2.122 [ 33.195638][ T31] usb 4-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 33.206004][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 33.215935][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 33.225058][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.233168][ T31] usb 4-1: SerialNumber: syz [ 33.315708][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.324775][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.331875][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.338821][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.345760][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.352652][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.359592][ T10] wacom 0003:056A:0005.0001: unknown main item tag 0x0 [ 33.366858][ T10] wacom 0003:056A:0005.0001: Unknown device_type for 'HID 056a:0005'. Ignoring. [ 33.442215][ T31] usb 4-1: USB disconnect, device number 3 [ 33.514779][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 33.514797][ T36] audit: type=1400 audit(1760938006.649:226): avc: denied { getopt } for pid=623 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.515481][ T624] netlink: 'syz.1.106': attribute type 13 has an invalid length. [ 33.548753][ T624] erspan0: refused to change device tx_queue_len [ 33.556416][ T36] audit: type=1400 audit(1760938006.689:227): avc: denied { create } for pid=623 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.564920][ T624] veth0_to_batadv: entered allmulticast mode [ 33.575695][ T36] audit: type=1400 audit(1760938006.699:228): avc: denied { ioctl } for pid=623 comm="syz.1.106" path="socket:[4903]" dev="sockfs" ino=4903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.583409][ T624] veth0_to_batadv: left allmulticast mode [ 33.966959][ T684] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 33.966978][ T684] rust_binder: Error while translating object. [ 33.975987][ T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.982184][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 34.004846][ T36] audit: type=1400 audit(1760938007.139:229): avc: denied { setopt } for pid=685 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.009220][ T686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.033540][ T686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 34.058727][ T36] audit: type=1400 audit(1760938007.189:230): avc: denied { unlink } for pid=688 comm="syz.3.127" name="#b" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.090250][ T36] audit: type=1400 audit(1760938007.189:231): avc: denied { mount } for pid=688 comm="syz.3.127" name="/" dev="overlay" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.112552][ T36] audit: type=1400 audit(1760938007.219:232): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.152841][ T36] audit: type=1400 audit(1760938007.279:233): avc: denied { sqpoll } for pid=692 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.302109][ T36] audit: type=1400 audit(1760938007.429:234): avc: denied { write } for pid=695 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.386672][ T36] audit: type=1400 audit(1760938007.519:235): avc: denied { map } for pid=697 comm="syz.3.131" path="/proc/145/task/146/mountinfo" dev="proc" ino=4950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 34.803575][ T712] rust_binder: 83: no such ref 1 [ 34.846053][ T719] netlink: 104 bytes leftover after parsing attributes in process `syz.2.137'. [ 34.924872][ T721] rust_binder: Write failure EFAULT in pid:92 [ 35.004193][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 35.019811][ T724] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 35.027816][ T724] rust_binder: Write failure EINVAL in pid:94 [ 35.122054][ T731] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 35.157951][ T731] overlayfs: missing 'lowerdir' [ 35.248789][ T735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=735 comm=syz.2.143 [ 35.381461][ T425] usb 2-1: USB disconnect, device number 4 [ 35.565362][ T743] netlink: 84 bytes leftover after parsing attributes in process `syz.1.145'. [ 35.639963][ T425] usb 1-1: USB disconnect, device number 2 [ 35.713152][ T749] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 35.721895][ T749] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 35.813628][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.966445][ T330] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 35.975654][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.983775][ T330] usb 2-1: Product: syz [ 35.988008][ T330] usb 2-1: Manufacturer: syz [ 35.992664][ T330] usb 2-1: SerialNumber: syz [ 36.425460][ T752] rust_binder: Write failure EFAULT in pid:161 [ 36.437428][ T330] rtl8150 2-1:1.0: couldn't reset the device [ 36.449937][ T330] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 36.459762][ T330] usb 2-1: USB disconnect, device number 5 [ 36.628891][ T760] rust_binder: Read failure Err(EAGAIN) in pid:86 [ 36.664526][ T764] overlayfs: missing 'lowerdir' [ 36.703403][ T425] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 36.833741][ T425] usb 4-1: device descriptor read/64, error -71 [ 37.039845][ T799] overlayfs: missing 'lowerdir' [ 37.058957][ T801] rust_binder: Error while translating object. [ 37.058994][ T801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.065310][ T801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 37.083311][ T425] usb 4-1: device descriptor read/64, error -71 [ 37.133317][ T330] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.154957][ T805] veth0_to_team: entered promiscuous mode [ 37.160815][ T805] veth0_to_team: entered allmulticast mode [ 37.293309][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 37.299708][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.310744][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.320530][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.333406][ T330] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.342479][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.351227][ T330] usb 1-1: config 0 descriptor?? [ 37.355696][ T425] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 37.493308][ T425] usb 4-1: device descriptor read/64, error -71 [ 37.733190][ T425] usb 4-1: device descriptor read/64, error -71 [ 37.760247][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.768411][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.775695][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.782936][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.790275][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.797556][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.804828][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.812062][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.819444][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.826728][ T330] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 37.837180][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input9 [ 37.849741][ T330] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 37.853439][ T425] usb usb4-port1: attempt power cycle [ 37.960422][ T783] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 37.960752][ T330] usb 1-1: USB disconnect, device number 3 [ 38.088745][ T810] ======================================================= [ 38.088745][ T810] WARNING: The mand mount option has been deprecated and [ 38.088745][ T810] and is ignored by this kernel. Remove the mand [ 38.088745][ T810] option from the mount to silence this warning. [ 38.088745][ T810] ======================================================= [ 38.127031][ T810] netlink: 'syz.1.166': attribute type 14 has an invalid length. [ 38.203083][ T425] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 38.224067][ T425] usb 4-1: device descriptor read/8, error -71 [ 38.354115][ T425] usb 4-1: device descriptor read/8, error -71 [ 38.372985][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.400009][ T825] overlayfs: missing 'lowerdir' [ 38.529535][ T45] usb 2-1: config 192 has an invalid interface number: 162 but max is 0 [ 38.538331][ T45] usb 2-1: config 192 has no interface number 0 [ 38.544835][ T45] usb 2-1: config 192 interface 162 has no altsetting 0 [ 38.553521][ T45] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 38.562772][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.571072][ T45] usb 2-1: Product: syz [ 38.575639][ T45] usb 2-1: Manufacturer: syz [ 38.580373][ T45] usb 2-1: SerialNumber: syz [ 38.592948][ T425] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 38.624063][ T425] usb 4-1: device descriptor read/8, error -71 [ 38.753962][ T425] usb 4-1: device descriptor read/8, error -71 [ 38.810934][ T45] usb-storage 2-1:192.162: USB Mass Storage device detected [ 38.824174][ T45] usb-storage 2-1:192.162: device ignored [ 38.863243][ T425] usb usb4-port1: unable to enumerate USB device [ 38.875166][ T45] usb 2-1: USB disconnect, device number 6 [ 39.367626][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 39.367644][ T36] audit: type=1400 audit(1760938012.500:253): avc: denied { ioctl } for pid=839 comm="syz.1.177" path="socket:[7228]" dev="sockfs" ino=7228 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.506400][ T847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.179'. [ 39.519431][ T36] audit: type=1400 audit(1760938012.581:254): avc: denied { connect } for pid=841 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.544934][ T849] overlayfs: missing 'lowerdir' [ 39.596421][ T36] audit: type=1400 audit(1760938012.731:255): avc: denied { setopt } for pid=857 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.624397][ T860] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 39.624640][ T858] __vm_enough_memory: pid: 858, comm: syz.3.184, bytes: 18014402804453376 not enough memory for the allocation [ 39.633174][ T36] audit: type=1400 audit(1760938012.751:256): avc: denied { execute } for pid=856 comm="syz.2.183" path="/dev/rnullb0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.667268][ T36] audit: type=1400 audit(1760938012.761:257): avc: denied { bind } for pid=857 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.670722][ T870] netlink: 'syz.2.187': attribute type 4 has an invalid length. [ 39.695801][ T870] netlink: 'syz.2.187': attribute type 21 has an invalid length. [ 39.703863][ T870] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.187'. [ 39.797603][ T894] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 39.812700][ T894] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 39.881792][ T901] kvm: user requested TSC rate below hardware speed [ 39.974004][ T36] audit: type=1400 audit(1760938013.111:258): avc: denied { bind } for pid=918 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.015064][ T926] __vm_enough_memory: pid: 926, comm: syz.3.204, bytes: 18014402804453376 not enough memory for the allocation [ 40.046493][ T932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 40.055590][ T932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 40.071476][ T36] audit: type=1400 audit(1760938013.201:259): avc: denied { create } for pid=933 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.072552][ T934] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 40.096569][ T36] audit: type=1400 audit(1760938013.201:260): avc: denied { ioctl } for pid=933 comm="syz.1.208" path="socket:[7352]" dev="sockfs" ino=7352 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.151468][ T36] audit: type=1400 audit(1760938013.281:261): avc: denied { write } for pid=942 comm="syz.1.211" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.245325][ T958] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 40.254235][ T958] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 40.337612][ T962] rust_binder: Error while translating object. [ 40.337652][ T962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 40.343934][ T962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:201 [ 40.472483][ T358] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 40.535159][ T36] audit: type=1326 audit(1760938013.671:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=973 comm="syz.3.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36c898efc9 code=0x0 [ 40.565834][ T979] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.585351][ T981] overlayfs: missing 'lowerdir' [ 40.602773][ T983] binder: Binderfs stats mode cannot be changed during a remount [ 40.634022][ T358] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 40.644045][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.653142][ T358] usb 2-1: config 0 descriptor?? [ 40.859561][ T358] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 40.891995][ T1002] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.900050][ T1002] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 40.909197][ T1002] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.917348][ T1002] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 41.013545][ T1022] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 41.020747][ T1022] rust_binder: Write failure EINVAL in pid:161 [ 41.026425][ T425] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 41.162448][ T425] usb 4-1: device descriptor read/64, error -71 [ 41.260219][ T358] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 41.270291][ T358] asix 2-1:0.0: probe with driver asix failed with error -61 [ 41.302445][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.402398][ T425] usb 4-1: device descriptor read/64, error -71 [ 41.452403][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 41.458936][ T31] usb 1-1: unable to get BOS descriptor set [ 41.465946][ T31] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 41.475847][ T31] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 41.485637][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 41.493952][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.503656][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.511645][ T31] usb 1-1: Product: syz [ 41.515923][ T31] usb 1-1: Manufacturer: syz [ 41.520538][ T31] usb 1-1: SerialNumber: syz [ 41.527127][ T1026] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 41.534604][ T1026] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 41.652389][ T425] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 41.746590][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 41.756288][ T31] usb 1-1: USB disconnect, device number 4 [ 41.782405][ T425] usb 4-1: device descriptor read/64, error -71 [ 42.022396][ T425] usb 4-1: device descriptor read/64, error -71 [ 42.132516][ T425] usb usb4-port1: attempt power cycle [ 42.296530][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 42.368981][ T1037] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 42.388776][ T1039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 42.400228][ T1042] rust_binder: 177: no such ref 1 [ 42.472512][ T425] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 42.493551][ T425] usb 4-1: device descriptor read/8, error -71 [ 42.623598][ T425] usb 4-1: device descriptor read/8, error -71 [ 42.662449][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.812413][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 42.818940][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.827217][ T31] usb 1-1: config 0 has no interface number 0 [ 42.833382][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 42.841776][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.851071][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.859107][ T31] usb 1-1: Product: syz [ 42.863322][ T425] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 42.870895][ T31] usb 1-1: Manufacturer: syz [ 42.875614][ T31] usb 1-1: SerialNumber: syz [ 42.881027][ T31] usb 1-1: config 0 descriptor?? [ 42.886855][ T31] smsc75xx v1.0.0 [ 42.893579][ T425] usb 4-1: device descriptor read/8, error -71 [ 43.023678][ T425] usb 4-1: device descriptor read/8, error -71 [ 43.088212][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 43.099156][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 43.109252][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 43.119743][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 43.132466][ T425] usb usb4-port1: unable to enumerate USB device [ 43.140539][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 43.149516][ T1060] erspan0: default FDB implementation only supports local addresses [ 43.182886][ T1067] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=1067 comm=syz.2.252 [ 43.442983][ T425] usb 1-1: USB disconnect, device number 5 [ 43.458869][ T1078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 43.459700][ T1079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.496110][ T1085] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 43.512276][ T1085] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 43.615330][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.616421][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 43.688958][ T1095] rust_binder: 1094 RLIMIT_NICE not set [ 43.704517][ T1094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 43.906399][ T1111] /dev/rnullb0: Can't open blockdev [ 44.172454][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.302408][ T330] usb 1-1: device descriptor read/64, error -71 [ 44.340831][ T1127] 9pnet_fd: Insufficient options for proto=fd [ 44.348168][ T457] usb 2-1: USB disconnect, device number 7 [ 44.369440][ T1129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.369477][ T1129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 44.470393][ T1139] rust_binder: Write failure EFAULT in pid:125 [ 44.510620][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 44.510639][ T36] audit: type=1326 audit(1760938017.645:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f538058efc9 code=0x0 [ 44.546041][ T330] usb 1-1: device descriptor read/64, error -71 [ 44.557386][ T36] audit: type=1400 audit(1760938017.695:280): avc: denied { mount } for pid=1149 comm="syz.1.280" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.579711][ T36] audit: type=1326 audit(1760938017.695:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.603063][ T36] audit: type=1326 audit(1760938017.695:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f538058d810 code=0x7ffc0000 [ 44.626488][ T36] audit: type=1326 audit(1760938017.695:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f538058d810 code=0x7ffc0000 [ 44.657574][ T1155] rust_binder: Write failure EFAULT in pid:237 [ 44.658577][ T36] audit: type=1326 audit(1760938017.695:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.674467][ T1157] rust_binder: Error in use_page_slow: ESRCH [ 44.688207][ T1157] rust_binder: use_range failure ESRCH [ 44.689135][ T36] audit: type=1326 audit(1760938017.695:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.700801][ T1159] rust_binder: Error while translating object. [ 44.723814][ T1157] rust_binder: Failed to allocate buffer. len:1112, is_oneway:false [ 44.724249][ T36] audit: type=1326 audit(1760938017.695:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.730096][ T1157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.738079][ T36] audit: type=1326 audit(1760938017.695:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.762137][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pid=1160 comm=syz.3.284 [ 44.770867][ T36] audit: type=1326 audit(1760938017.695:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1136 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538058efc9 code=0x7ffc0000 [ 44.794731][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138 [ 44.807255][ T1159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.829968][ T330] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.839251][ T1159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 44.937154][ T1165] usb usb9: check_ctrlrecip: process 1165 (syz.3.285) requesting ep 01 but needs 81 [ 44.955866][ T1165] usb usb9: usbfs: process 1165 (syz.3.285) did not claim interface 0 before use [ 44.982388][ T330] usb 1-1: device descriptor read/64, error -71 [ 45.036321][ T1177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 45.312412][ T330] usb 1-1: device descriptor read/64, error -71 [ 45.339352][ T1167] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 45.351336][ T1167] File: /dev/rnullb0 PID: 1167 Comm: syz.1.286 [ 45.428391][ T330] usb usb1-port1: attempt power cycle [ 45.772431][ T330] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.818507][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.831641][ T1182] SELinux: policydb version -1287147956 does not match my version range 15-33 [ 45.841012][ T1182] SELinux: failed to load policy [ 45.846310][ T1182] SELinux: policydb magic number 0xc8feb123 does not match expected magic number 0xf97cff8c [ 45.856814][ T1182] SELinux: failed to load policy [ 45.951650][ T1200] 9pnet_fd: Insufficient options for proto=fd [ 45.953528][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.971567][ T1205] rust_binder: Write failure EFAULT in pid:267 [ 45.983030][ T1210] binder: Unknown parameter '0x0000000000000000' [ 46.090586][ T1217] process 'syz.3.299' launched '/dev/fd/3' with NULL argv: empty string added [ 46.118477][ T1222] binder: Unknown parameter 'max ' [ 46.202587][ T330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.231120][ T1237] overlayfs: failed to clone upperpath [ 46.240075][ T330] usb 1-1: device descriptor read/8, error -71 [ 46.383357][ T330] usb 1-1: device descriptor read/8, error -71 [ 46.492521][ T330] usb usb1-port1: unable to enumerate USB device [ 46.767512][ T1269] netlink: 200 bytes leftover after parsing attributes in process `syz.1.314'. [ 46.767836][ T1271] rust_binder: 157: no such ref 1 [ 46.782038][ T1269] tc_dump_action: action bad kind [ 46.821611][ T1274] option changes via remount are deprecated (pid=1273 comm=syz.1.315) [ 46.842396][ T1274] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 47.362130][ T1303] SELinux: failed to load policy [ 47.447888][ T1310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.447928][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:309 [ 47.652541][ T1316] fuse: Unknown parameter 'rooŊYXtCf ftmode' [ 47.685203][ T1316] rust_binder: 315: no such ref 1 [ 47.722360][ T1316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315 [ 47.827214][ T1324] /dev/rnullb0: Can't open blockdev [ 47.892231][ T1333] loop2: detected capacity change from 0 to 7 [ 47.902420][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.911636][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.919908][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.929097][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.937081][ T1333] loop2: unable to read partition table [ 47.945056][ T1333] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 47.955696][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.964916][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.973094][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.982337][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.992631][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.001946][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 48.008253][ T1339] /dev/rnullb0: Can't open blockdev [ 48.010471][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.024186][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 48.042282][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.051500][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 48.167195][ T1353] rust_binder: Error while translating object. [ 48.167245][ T1353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.194588][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 48.343099][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 48.414560][ T1367] overlayfs: failed to clone upperpath [ 48.512356][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 48.520122][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 48.534447][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.562403][ T10] usb 4-1: Product: syz [ 48.567113][ T10] usb 4-1: Manufacturer: syz [ 48.571851][ T10] usb 4-1: SerialNumber: syz [ 48.758309][ T1396] overlayfs: failed to clone upperpath [ 48.905716][ T1403] netlink: 'syz.2.359': attribute type 30 has an invalid length. [ 48.941857][ T1406] can0: slcan on ptm0. [ 49.072008][ T1404] can0 (unregistered): slcan off ptm0. [ 49.110684][ T10] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 49.151450][ T10] usb 4-1: USB disconnect, device number 12 [ 49.180810][ T1430] Z7nz>RA: renamed from lo (while UP) [ 49.182901][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.267690][ T1439] 9pnet_fd: Insufficient options for proto=fd [ 49.359371][ T1449] overlay: ./file0 is not a directory [ 49.392386][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 49.439896][ T1456] overlayfs: failed to clone upperpath [ 49.487523][ T1466] netlink: 84 bytes leftover after parsing attributes in process `syz.2.373'. [ 49.552406][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.626007][ T1478] __vm_enough_memory: pid: 1478, comm: syz.0.377, bytes: 18014402804453376 not enough memory for the allocation [ 49.670262][ T1484] rust_binder: Error while translating object. [ 49.670296][ T1484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.676537][ T1484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 49.731023][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 49.731044][ T36] audit: type=1400 audit(1760938022.865:348): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.758027][ T1490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 49.790458][ T1492] /dev/rnullb0: Can't open blockdev [ 49.794363][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.796453][ T36] audit: type=1400 audit(1760938022.925:349): avc: denied { listen } for pid=1489 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.895024][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.042391][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.049948][ T358] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 50.068316][ T1514] overlay: Unknown parameter 'appraise_type' [ 50.182440][ T31] usb 2-1: device descriptor read/64, error -71 [ 50.203774][ T358] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 50.211928][ T358] usb 4-1: config 0 has no interface number 0 [ 50.218202][ T358] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 50.229147][ T358] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 50.242655][ T358] usb 4-1: config 0 interface 48 has no altsetting 0 [ 50.249423][ T358] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 50.258512][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.267309][ T358] usb 4-1: config 0 descriptor?? [ 50.422395][ T31] usb 2-1: device descriptor read/64, error -71 [ 50.475108][ T358] usb 4-1: string descriptor 0 read error: -32 [ 50.482120][ T358] asix 4-1:0.48 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 50.492348][ T358] asix 4-1:0.48: probe with driver asix failed with error -32 [ 50.532485][ T31] usb usb2-port1: attempt power cycle [ 50.615661][ T36] audit: type=1400 audit(1760938023.755:350): avc: denied { lock } for pid=1521 comm="syz.2.393" path="socket:[8881]" dev="sockfs" ino=8881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 50.646626][ T36] audit: type=1400 audit(1760938023.785:351): avc: denied { mount } for pid=1524 comm="syz.2.394" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.688120][ T1530] overlayfs: failed to clone upperpath [ 50.872430][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 50.893568][ T31] usb 2-1: device descriptor read/8, error -71 [ 50.990366][ T358] usb 4-1: USB disconnect, device number 13 [ 51.023591][ T31] usb 2-1: device descriptor read/8, error -71 [ 51.057806][ T1541] /dev/rnullb0: Can't open blockdev [ 51.074678][ T1545] 9pnet_fd: Insufficient options for proto=fd [ 51.092404][ T1547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.093090][ T1547] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 51.127487][ T1551] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 51.153579][ T1553] IPv6: Can't replace route, no match found [ 51.162530][ T1553] netlink: 17 bytes leftover after parsing attributes in process `syz.3.405'. [ 51.173921][ T1553] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 51.230888][ T1555] overlayfs: failed to clone upperpath [ 51.249273][ T36] audit: type=1400 audit(1760938024.385:352): avc: denied { lock } for pid=1556 comm="syz.2.407" path="socket:[9952]" dev="sockfs" ino=9952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.272350][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.293457][ T31] usb 2-1: device descriptor read/8, error -71 [ 51.422401][ T330] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.433553][ T31] usb 2-1: device descriptor read/8, error -71 [ 51.542493][ T31] usb usb2-port1: unable to enumerate USB device [ 51.572411][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 51.578084][ T330] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 51.586759][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.596903][ T330] usb 4-1: config 0 has no interfaces? [ 51.603383][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.613598][ T330] usb 4-1: config 0 has no interfaces? [ 51.620062][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.630221][ T330] usb 4-1: config 0 has no interfaces? [ 51.636616][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.646865][ T330] usb 4-1: config 0 has no interfaces? [ 51.653098][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.663248][ T330] usb 4-1: config 0 has no interfaces? [ 51.669423][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.679577][ T330] usb 4-1: config 0 has no interfaces? [ 51.685778][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.695919][ T330] usb 4-1: config 0 has no interfaces? [ 51.702466][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.712713][ T330] usb 4-1: config 0 has no interfaces? [ 51.720063][ T1563] IPv6: Can't replace route, no match found [ 51.735944][ T330] usb 4-1: string descriptor 0 read error: -71 [ 51.742236][ T330] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 51.751636][ T330] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 51.761202][ T330] usb 4-1: config 0 descriptor?? [ 51.766548][ T330] usb 4-1: can't set config #0, error -71 [ 51.773216][ T330] usb 4-1: USB disconnect, device number 14 [ 51.814401][ T36] audit: type=1400 audit(1760938024.955:353): avc: denied { connect } for pid=1566 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.835517][ T36] audit: type=1400 audit(1760938024.975:354): avc: denied { write } for pid=1566 comm="syz.3.410" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.857308][ T36] audit: type=1400 audit(1760938024.975:355): avc: denied { remove_name } for pid=1566 comm="syz.3.410" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.882089][ T36] audit: type=1400 audit(1760938024.975:356): avc: denied { unlink } for pid=1566 comm="syz.3.410" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.905504][ T36] audit: type=1326 audit(1760938025.015:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f538058efc9 code=0x0 [ 51.928477][ T1504] Bluetooth: hci0: command 0x1003 tx timeout [ 51.932435][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.944839][ T1581] rust_binder: Error while translating object. [ 51.944906][ T1581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 51.951250][ T1580] rust_binder: Error while translating object. [ 51.960983][ T1581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:357 [ 51.962405][ T1580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 51.976710][ T1584] rust_binder: Got transaction with invalid offset. [ 51.977926][ T1580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:357 [ 51.986560][ T1584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.001980][ T1584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 52.116150][ T1592] rust_binder: 364: no such ref 0 [ 52.130569][ T1593] rust_binder: 364: no such ref 0 [ 52.136258][ T1592] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 52.144521][ T1592] rust_binder: Write failure EINVAL in pid:364 [ 52.315575][ T1605] rust_binder: Got transaction with invalid offset. [ 52.321939][ T1605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.328761][ T1605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 52.380085][ T1614] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 52.399327][ T1614] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 52.426382][ T1616] rust_binder: Write failure EFAULT in pid:210 [ 52.439497][ T1618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.445902][ T1618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.462383][ T330] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.602411][ T330] usb 4-1: device descriptor read/64, error -71 [ 52.722378][ T425] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.842397][ T330] usb 4-1: device descriptor read/64, error -71 [ 52.872448][ T425] usb 2-1: Using ep0 maxpacket: 16 [ 52.879162][ T425] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.887911][ T425] usb 2-1: config 1 interface 0 has no altsetting 0 [ 52.896197][ T425] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 52.905469][ T425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.913818][ T425] usb 2-1: Product: syz [ 52.918046][ T425] usb 2-1: Manufacturer: syz [ 52.922716][ T425] usb 2-1: SerialNumber: syz [ 53.082409][ T330] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.134093][ T1628] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 53.135545][ T425] usblp0: Disabling reads from problematic bidirectional printer [ 53.152352][ T425] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 32 proto 2 vid 0x03F0 pid 0x0004 [ 53.164536][ T425] usb 2-1: USB disconnect, device number 12 [ 53.171807][ T425] usblp0: removed [ 53.212441][ T330] usb 4-1: device descriptor read/64, error -71 [ 53.452394][ T330] usb 4-1: device descriptor read/64, error -71 [ 53.562524][ T330] usb usb4-port1: attempt power cycle [ 53.599330][ T1642] overlayfs: failed to clone upperpath [ 53.605611][ T1642] netlink: 'syz.2.437': attribute type 29 has an invalid length. [ 53.624854][ T1644] netlink: 84 bytes leftover after parsing attributes in process `syz.2.438'. [ 53.902489][ T330] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.902521][ T425] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 53.933359][ T330] usb 4-1: device descriptor read/8, error -71 [ 54.043675][ T1731] binder: Bad value for 'stats' [ 54.063606][ T330] usb 4-1: device descriptor read/8, error -71 [ 54.072465][ T425] usb 2-1: Using ep0 maxpacket: 8 [ 54.078778][ T425] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 54.093518][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.102618][ T425] usb 2-1: config 0 descriptor?? [ 54.195396][ T1737] syz.0.450(1737): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 54.208317][ T1737] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 54.216814][ T1737] rust_binder: Write failure EINVAL in pid:298 [ 54.234431][ T1743] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 54.302421][ T330] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 54.325651][ T330] usb 4-1: device descriptor read/8, error -71 [ 54.372650][ T425] usb 2-1: string descriptor 0 read error: -71 [ 54.378889][ T425] usb 2-1: Found UVC 0.00 device (2833:0201) [ 54.392256][ T425] usb 2-1: No valid video chain found. [ 54.405462][ T425] usb 2-1: USB disconnect, device number 13 [ 54.453348][ T330] usb 4-1: device descriptor read/8, error -71 [ 54.572483][ T330] usb usb4-port1: unable to enumerate USB device [ 54.900347][ T1769] rust_binder: Error while translating object. [ 54.900384][ T1769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 54.907050][ T1769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:227 [ 55.080769][ T1773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.090092][ T1773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:231 [ 55.101495][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 55.101514][ T36] audit: type=1400 audit(1760938028.235:365): avc: denied { connect } for pid=1772 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.272387][ T36] audit: type=1400 audit(1760938028.405:366): avc: denied { shutdown } for pid=1780 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.339199][ T1789] overlayfs: failed to clone upperpath [ 55.339203][ T36] audit: type=1400 audit(1760938028.475:367): avc: denied { write } for pid=1790 comm="syz.1.473" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.341436][ T36] audit: type=1400 audit(1760938028.475:368): avc: denied { ioctl } for pid=1790 comm="syz.1.473" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.345696][ T1791] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 55.441456][ T1796] overlayfs: missing 'lowerdir' [ 55.467938][ T1801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.478123][ T1801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.487728][ T1801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.496773][ T1801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.500607][ T1798] rust_binder: Error in use_page_slow: ESRCH [ 55.504590][ T1798] rust_binder: use_range failure ESRCH [ 55.510800][ T1798] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 55.516478][ T1798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.526413][ T1798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:245 [ 55.556184][ T1809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.565322][ T1809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 55.604092][ T1818] rust_binder: Write failure EFAULT in pid:324 [ 55.644939][ T1829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.659925][ T1829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.668578][ T425] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 55.764643][ T1847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.490'. [ 55.812990][ T36] audit: type=1400 audit(1760938028.955:369): avc: denied { read } for pid=1852 comm="syz.1.492" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.836656][ T36] audit: type=1400 audit(1760938028.955:370): avc: denied { open } for pid=1852 comm="syz.1.492" path="/87/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.861264][ T36] audit: type=1400 audit(1760938028.955:371): avc: denied { ioctl } for pid=1852 comm="syz.1.492" path="/87/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.894604][ T425] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.905722][ T1861] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 55.912448][ T36] audit: type=1400 audit(1760938029.045:372): avc: denied { relabelfrom } for pid=1860 comm="syz.1.494" name="NETLINK" dev="sockfs" ino=10721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 55.939792][ T425] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.948955][ T36] audit: type=1400 audit(1760938029.055:373): avc: denied { relabelto } for pid=1860 comm="syz.1.494" name="NETLINK" dev="sockfs" ino=10721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 55.978177][ T425] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 55.987601][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.995681][ T425] usb 4-1: SerialNumber: syz [ 56.003230][ T425] usb 4-1: 0:2 : does not exist [ 56.114071][ T1867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 56.174168][ T1867] 9pnet_fd: Insufficient options for proto=fd [ 56.365434][ T36] audit: type=1400 audit(1760938029.505:374): avc: denied { create } for pid=1879 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.405022][ T1787] /dev/rnullb0: Can't open blockdev [ 56.413058][ T632] usb 4-1: USB disconnect, device number 19 [ 56.445494][ T1885] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.454360][ T1885] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.488684][ T1887] binder: Binderfs stats mode cannot be changed during a remount [ 56.590050][ T1900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:338 [ 56.610103][ T1902] 9pnet_fd: Insufficient options for proto=fd [ 56.707889][ T1909] capability: warning: `syz.2.511' uses 32-bit capabilities (legacy support in use) [ 56.774960][ T1916] overlayfs: missing 'lowerdir' [ 56.982456][ T330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.077257][ T1937] __vm_enough_memory: pid: 1937, comm: syz.3.522, bytes: 18014402804453376 not enough memory for the allocation [ 57.100489][ T1940] overlayfs: missing 'lowerdir' [ 57.132388][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 57.141588][ T330] usb 1-1: config 1 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.152733][ T330] usb 1-1: config 1 interface 0 has no altsetting 0 [ 57.160950][ T330] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 57.170101][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.178165][ T330] usb 1-1: Product: syz [ 57.182464][ T330] usb 1-1: Manufacturer: syz [ 57.188042][ T330] usb 1-1: SerialNumber: syz [ 57.306359][ T1949] No source specified [ 57.403682][ T330] usbhid 1-1:1.0: can't add hid device: -71 [ 57.416634][ T330] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 57.419568][ T1962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.425107][ T1962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.432132][ T1962] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 57.435892][ T330] usb 1-1: USB disconnect, device number 10 [ 57.483663][ T1967] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 57.558476][ T1979] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.536'. [ 57.645323][ T1996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 57.733780][ T358] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.735315][ T1998] tmpfs: Bad value for 'nr_blocks' [ 57.883831][ T358] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.894883][ T358] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84 [ 57.904917][ T358] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.914480][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.924605][ T1969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.935246][ T2004] binder: Bad value for 'max' [ 57.941242][ T2004] rust_binder: Write failure EFAULT in pid:346 [ 58.133728][ T2017] binder: Bad value for 'stats' [ 58.145101][ T425] usb 4-1: USB disconnect, device number 20 [ 58.662668][ T2038] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 58.688131][ T2041] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 58.696124][ T2041] rust_binder: Write failure EINVAL in pid:401 [ 58.697091][ T2041] rust_binder: Error while translating object. [ 58.703441][ T2041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.709985][ T2041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401 [ 58.786620][ T2053] /sys/power/pm_print_times: Can't lookup blockdev [ 58.882360][ T2073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'. [ 58.972045][ T2086] 9pnet_fd: Insufficient options for proto=fd [ 59.072435][ T330] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 59.242454][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 59.252519][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.272983][ T330] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 59.280602][ T330] usb 4-1: can't read configurations, error -71 [ 60.003722][ T2133] fuse: Bad value for 'fd' [ 60.017021][ T2135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 60.017056][ T2135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:414 [ 60.045841][ T2140] Unsupported ieee802154 address type: 0 [ 60.120549][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 60.120569][ T36] audit: type=1400 audit(1760938033.255:394): avc: denied { setattr } for pid=2139 comm="syz.3.590" path="socket:[11152]" dev="sockfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.175366][ T2154] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 60.175395][ T2154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.183780][ T2154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:306 [ 60.263697][ T2170] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 60.281662][ T2170] rust_binder: Write failure EINVAL in pid:318 [ 60.375695][ T36] audit: type=1400 audit(1760938033.515:395): avc: denied { ioctl } for pid=2186 comm="syz.1.604" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.407125][ T2187] netlink: 104 bytes leftover after parsing attributes in process `syz.1.604'. [ 60.462547][ T36] audit: type=1400 audit(1760938033.595:396): avc: denied { create } for pid=2190 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.468560][ T2194] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 60.491059][ T2191] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 60.508939][ T2194] rust_binder: Write failure EINVAL in pid:325 [ 60.576742][ T36] audit: type=1400 audit(1760938033.715:397): avc: denied { write } for pid=2202 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.687138][ T2212] __vm_enough_memory: pid: 2212, comm: syz.1.612, bytes: 18014402804453376 not enough memory for the allocation [ 60.722446][ T2217] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 60.722475][ T2217] rust_binder: Error while translating object. [ 60.731489][ T2217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.737876][ T2217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 60.906668][ T2239] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 60.942861][ T2239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 60.962562][ T2248] netlink: 'syz.0.626': attribute type 39 has an invalid length. [ 61.009922][ T2249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.009962][ T2249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:420 [ 61.039738][ T2253] /dev/rnullb0: Can't open blockdev [ 61.061540][ T2255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'. [ 61.107463][ T2259] fuse: Bad value for 'fd' [ 61.111649][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 61.121374][ T2262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.631'. [ 61.134837][ T36] audit: type=1400 audit(1760938034.275:398): avc: denied { getopt } for pid=2261 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.172515][ T2277] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 61.515536][ T2283] netlink: 182 bytes leftover after parsing attributes in process `syz.2.638'. [ 61.577802][ T36] audit: type=1400 audit(1760938034.715:399): avc: denied { ioctl } for pid=2290 comm="syz.2.641" path="/211/file0" dev="tmpfs" ino=1187 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.771107][ T2300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 61.773526][ T36] audit: type=1400 audit(1760938034.905:400): avc: denied { create } for pid=2299 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.239129][ T36] audit: type=1400 audit(1760938035.375:401): avc: denied { mount } for pid=2318 comm="syz.2.652" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.247593][ T2321] rust_binder: Write failure EFAULT in pid:365 [ 62.263259][ T36] audit: type=1400 audit(1760938035.405:402): avc: denied { search } for pid=2318 comm="syz.2.652" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.308017][ T2324] rust_binder: Error while translating object. [ 62.308059][ T2324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.314489][ T2324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 62.391112][ T2326] cgroup: fork rejected by pids controller in /syz2 [ 62.453474][ T2363] rust_binder: 2354 RLIMIT_NICE not set [ 62.487005][ T2368] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 62.529575][ T36] audit: type=1400 audit(1760938035.665:403): avc: denied { relabelto } for pid=2367 comm="syz.1.658" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 62.709107][ T2387] 9pnet_fd: Insufficient options for proto=fd [ 62.963390][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 63.093443][ T10] usb 4-1: device descriptor read/64, error -71 [ 63.306632][ T2421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'. [ 63.343489][ T10] usb 4-1: device descriptor read/64, error -71 [ 63.550881][ T2431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2431 comm=syz.0.670 [ 63.593516][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 63.733547][ T10] usb 4-1: device descriptor read/64, error -71 [ 63.745085][ T2447] overlayfs: failed to clone upperpath [ 63.868856][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 63.973658][ T10] usb 4-1: device descriptor read/64, error -71 [ 64.040203][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.050640][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 64.063641][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.085513][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 64.093899][ T10] usb usb4-port1: attempt power cycle [ 64.100583][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.108783][ T31] usb 2-1: Product: syz [ 64.113100][ T31] usb 2-1: Manufacturer: syz [ 64.119280][ T31] usb 2-1: SerialNumber: syz [ 64.125168][ T31] usb 2-1: config 0 descriptor?? [ 64.135065][ T31] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 64.141597][ T31] usb 2-1: No valid video chain found. [ 64.334523][ T2432] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 64.448513][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 64.484792][ T10] usb 4-1: device descriptor read/8, error -71 [ 64.618725][ T10] usb 4-1: device descriptor read/8, error -71 [ 64.694346][ T2462] incfs: Error accessing: ./file0. [ 64.699653][ T2462] incfs: mount failed -20 [ 64.863933][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 64.885087][ T10] usb 4-1: device descriptor read/8, error -71 [ 64.904915][ T2490] x_tables: duplicate underflow at hook 1 [ 65.015126][ T10] usb 4-1: device descriptor read/8, error -71 [ 65.069218][ T2519] tipc: Started in network mode [ 65.075338][ T2519] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.082737][ T2519] tipc: Enabling of bearer rejected, failed to enable media [ 65.124625][ T10] usb usb4-port1: unable to enumerate USB device [ 66.118466][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 66.118484][ T36] audit: type=1400 audit(1760938039.254:412): avc: denied { ioctl } for pid=2586 comm="syz.3.722" path="socket:[13872]" dev="sockfs" ino=13872 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.137877][ T2588] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.160194][ T36] audit: type=1400 audit(1760938039.294:413): avc: denied { bind } for pid=2586 comm="syz.3.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.187418][ T2593] raw_sendmsg: syz.2.724 forgot to set AF_INET. Fix it! [ 66.480117][ T36] audit: type=1400 audit(1760938039.614:414): avc: denied { create } for pid=2598 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.517221][ T10] usb 2-1: USB disconnect, device number 14 [ 66.524273][ T36] audit: type=1400 audit(1760938039.654:415): avc: denied { create } for pid=2602 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.550620][ T2605] rust_binder: Error while translating object. [ 66.550654][ T2605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.556942][ T2605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 66.580599][ T36] audit: type=1400 audit(1760938039.714:416): avc: denied { read } for pid=2606 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.631747][ T36] audit: type=1400 audit(1760938039.764:417): avc: denied { setopt } for pid=2606 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.674670][ T2610] netlink: 'syz.0.731': attribute type 25 has an invalid length. [ 66.790156][ T2618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.800792][ T36] audit: type=1400 audit(1760938039.933:418): avc: denied { create } for pid=2620 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 66.825643][ T36] audit: type=1400 audit(1760938039.933:419): avc: denied { map } for pid=2620 comm="syz.3.735" path="socket:[12963]" dev="sockfs" ino=12963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.869230][ T36] audit: type=1400 audit(1760938039.933:420): avc: denied { read accept } for pid=2620 comm="syz.3.735" path="socket:[12963]" dev="sockfs" ino=12963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.873952][ T2632] binder: Unknown parameter 'maxZqrx' [ 66.906426][ T36] audit: type=1326 audit(1760938040.003:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.3.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c898efc9 code=0x0 [ 67.081782][ T2651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.744'. [ 67.096415][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 67.105576][ T2651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.744'. [ 67.132617][ T2656] batadv_slave_0: entered promiscuous mode [ 67.299332][ T2668] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 67.324457][ T2668] netlink: 'syz.2.746': attribute type 5 has an invalid length. [ 67.332171][ T2668] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 67.364585][ T2683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.364685][ T2683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 67.384598][ T2683] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.395536][ T2683] rust_binder: Read failure Err(EFAULT) in pid:404 [ 67.523938][ T2695] netlink: 196 bytes leftover after parsing attributes in process `syz.0.759'. [ 67.560201][ T2700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 67.581270][ T2704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 67.605196][ T2706] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 67.605223][ T2706] rust_binder: Error while translating object. [ 67.617603][ T2706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.624426][ T2706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 67.629570][ T2709] overlayfs: failed to clone upperpath [ 67.707935][ T2714] rust_binder: 419: no such ref 0 [ 67.713058][ T2714] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 67.720317][ T2714] rust_binder: 419: no such ref 2 [ 67.725592][ T2714] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 67.994869][ T2655] batadv_slave_0: left promiscuous mode [ 68.159388][ T2731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 68.184677][ T2736] overlayfs: failed to clone upperpath [ 68.397799][ T2742] mmap: syz.2.778 (2742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.524835][ T2748] netlink: 76 bytes leftover after parsing attributes in process `syz.1.780'. [ 68.857659][ T2762] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 68.949166][ T2766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.972624][ T2768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 68.979531][ T2768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:437 [ 69.002875][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 69.093342][ T2779] overlayfs: failed to clone upperpath [ 69.167301][ T2789] 9pnet_fd: Insufficient options for proto=fd [ 69.301263][ T2796] tipc: Cannot configure node identity twice [ 69.545013][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 69.612237][ T2809] overlayfs: missing 'lowerdir' [ 69.669245][ T2809] overlayfs: failed to clone upperpath [ 69.694983][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 69.702979][ T2812] netlink: 'syz.0.804': attribute type 27 has an invalid length. [ 69.712042][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.725543][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.748000][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.759618][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.771046][ T45] usb 2-1: config 0 descriptor?? [ 70.181033][ T2795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.190564][ T2795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.200488][ T2795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.209315][ T2795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.221308][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 70.228010][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 70.237800][ T45] usb 2-1: USB disconnect, device number 15 [ 70.743654][ T2859] rust_binder: Write failure EFAULT in pid:447 [ 71.025361][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 71.187773][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.199116][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.209119][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 71.222242][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 71.231370][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.240107][ T10] usb 2-1: config 0 descriptor?? [ 71.541783][ T2873] overlay: Unknown parameter 'fowner>00000000000000000000' [ 71.649512][ T10] nintendo 0003:057E:2019.0003: hidraw0: USB HID v88.07 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 71.715620][ T10] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-38 [ 71.723762][ T10] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-38 [ 71.732523][ T10] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-38 [ 71.741705][ T10] nintendo 0003:057E:2019.0003: probe - fail = -38 [ 71.748346][ T10] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -38 [ 71.822274][ T2879] bridge0: entered allmulticast mode [ 71.849298][ T2865] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 72.365740][ T330] usb 2-1: USB disconnect, device number 16 [ 72.384814][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 72.384832][ T36] audit: type=1400 audit(1760938045.512:436): avc: denied { read } for pid=2887 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.456889][ T2890] /dev/rnullb0: Can't open blockdev [ 72.463143][ T36] audit: type=1400 audit(1760938045.592:437): avc: denied { setopt } for pid=2889 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.613106][ T2895] rust_binder: Write failure EFAULT in pid:462 [ 72.718879][ T2910] 9pnet_fd: Insufficient options for proto=fd [ 72.768757][ T2916] 9pnet_fd: Insufficient options for proto=fd [ 73.082900][ T2923] rust_binder: Failed copying remainder into alloc: EFAULT [ 73.082930][ T2923] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 73.090496][ T2923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.098923][ T2923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:472 [ 73.195235][ T2927] netlink: 140 bytes leftover after parsing attributes in process `syz.0.844'. [ 73.214462][ T2927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.844'. [ 73.296530][ T2927] IPv6: syztnl0: Disabled Multicast RS [ 73.322788][ T2931] netlink: 2 bytes leftover after parsing attributes in process `syz.1.845'. [ 73.397323][ T2938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.397422][ T2938] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 73.570775][ T36] audit: type=1400 audit(1760938046.702:438): avc: denied { append } for pid=2948 comm="syz.1.851" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.622424][ T36] audit: type=1400 audit(1760938046.752:439): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.645101][ T2952] __vm_enough_memory: pid: 2952, comm: syz.1.852, bytes: 18014402804453376 not enough memory for the allocation [ 73.834174][ T2966] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 73.843368][ T2966] overlayfs: missing 'lowerdir' [ 74.216689][ T3004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.867'. [ 74.267980][ T3015] 9pnet_fd: Insufficient options for proto=fd [ 74.275101][ T3015] 9pnet_fd: Insufficient options for proto=fd [ 74.463886][ T3032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3032 comm=syz.0.876 [ 74.495177][ T3034] fuse: Unknown parameter 'E'Q\;0x0000000000000006' [ 74.555166][ T3035] 9pnet_fd: Insufficient options for proto=fd [ 74.687883][ T3045] netlink: 252 bytes leftover after parsing attributes in process `syz.3.882'. [ 75.002688][ T36] audit: type=1400 audit(1760938048.131:440): avc: denied { connect } for pid=3065 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.023671][ T3069] netlink: 'syz.2.889': attribute type 6 has an invalid length. [ 75.044451][ T3069] 9pnet_fd: Insufficient options for proto=fd [ 75.107300][ T3072] rust_binder: Error while translating object. [ 75.107340][ T3072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 75.113566][ T3072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:530 [ 75.164406][ T3076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.893'. [ 75.182695][ T3076] netlink: 'syz.1.893': attribute type 6 has an invalid length. [ 75.190933][ T3076] netlink: 'syz.1.893': attribute type 5 has an invalid length. [ 75.199052][ T3076] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 75.208526][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 75.356070][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 75.420042][ T3090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.900'. [ 75.468641][ T36] audit: type=1326 audit(1760938048.601:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3098 comm="syz.0.903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65538efc9 code=0x0 [ 76.062422][ T3144] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 76.074723][ T36] audit: type=1400 audit(1760938049.201:442): avc: denied { relabelto } for pid=3143 comm="syz.3.920" name="rnullb0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_logind_sessions_t:s0" [ 76.102502][ T36] audit: type=1400 audit(1760938049.201:443): avc: denied { associate } for pid=3143 comm="syz.3.920" name="rnullb0" dev="tmpfs" ino=902 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_sessions_t:s0" [ 76.158979][ T3146] overlayfs: failed to clone upperpath [ 76.165628][ T3146] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 76.198929][ T3150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 76.260571][ T36] audit: type=1400 audit(1760938049.391:444): avc: denied { accept } for pid=3149 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.359142][ T36] audit: type=1326 audit(1760938049.491:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.3.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36c898efc9 code=0x0 [ 76.636679][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 76.786740][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 76.793295][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.801857][ T31] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 76.810116][ T31] usb 2-1: config 4 has no interface number 0 [ 76.817845][ T31] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e [ 76.827058][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.835061][ T31] usb 2-1: Product: syz [ 76.839263][ T31] usb 2-1: Manufacturer: syz [ 76.843885][ T31] usb 2-1: SerialNumber: syz [ 77.052143][ T3168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.060738][ T3168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.072385][ T31] snd-usb-audio 2-1:4.156: probe with driver snd-usb-audio failed with error -71 [ 77.084032][ T31] usb 2-1: USB disconnect, device number 17 [ 77.536468][ T3194] 9pnet_fd: Insufficient options for proto=fd [ 77.588781][ T3206] overlayfs: failed to resolve './file1/file0': -2 [ 77.629480][ T3208] 9pnet_fd: Insufficient options for proto=fd [ 77.848455][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 77.848473][ T36] audit: type=1400 audit(1760938050.981:447): avc: denied { mounton } for pid=3226 comm="syz.1.951" path="/188/file0" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.848567][ T3227] 9pnet_fd: Insufficient options for proto=fd [ 77.907909][ T3231] netlink: 'syz.1.953': attribute type 6 has an invalid length. [ 77.973038][ T36] audit: type=1400 audit(1760938051.101:448): avc: denied { execute } for pid=3232 comm="syz.2.954" path="/289/cpuacct.usage_percpu" dev="tmpfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.994664][ T3237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35742 sclass=netlink_route_socket pid=3237 comm=syz.2.954 [ 78.139927][ T1705] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.212023][ T3241] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.270746][ T3243] rust_binder: Write failure EFAULT in pid:571 [ 78.928032][ T3261] __nla_validate_parse: 4 callbacks suppressed [ 78.928050][ T3261] netlink: 44 bytes leftover after parsing attributes in process `syz.2.962'. [ 78.949358][ T3261] netlink: 35 bytes leftover after parsing attributes in process `syz.2.962'. [ 78.958256][ T3261] netlink: 'syz.2.962': attribute type 6 has an invalid length. [ 78.965917][ T3261] netlink: 'syz.2.962': attribute type 5 has an invalid length. [ 78.974008][ T3261] netlink: 35 bytes leftover after parsing attributes in process `syz.2.962'. [ 79.213494][ T36] audit: type=1400 audit(1760938052.340:449): avc: denied { mounton } for pid=3277 comm="syz.2.967" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.270102][ T3287] 9pnet_fd: Insufficient options for proto=fd [ 79.391866][ T3299] overlayfs: regular lower layers cannot follow data lower layers [ 79.441480][ T3310] netlink: 72 bytes leftover after parsing attributes in process `syz.2.977'. [ 79.466998][ T3314] netlink: 'syz.2.979': attribute type 11 has an invalid length. [ 79.512788][ T36] audit: type=1400 audit(1760938052.640:450): avc: denied { accept } for pid=3317 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.167523][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.167549][ T1504] Bluetooth: hci0: command 0x1003 tx timeout [ 80.447859][ T36] audit: type=1326 audit(1760938053.580:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3348 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65538efc9 code=0x7fc00000 [ 80.517620][ T358] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 80.688979][ T358] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 80.697308][ T358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.707586][ T358] usb 2-1: config 0 has no interface number 0 [ 80.715319][ T358] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 80.724581][ T358] usb 2-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 80.732773][ T358] usb 2-1: Product: syz [ 80.737006][ T358] usb 2-1: Manufacturer: syz [ 80.741647][ T358] usb 2-1: SerialNumber: syz [ 80.747274][ T358] usb 2-1: config 0 descriptor?? [ 80.945914][ T36] audit: type=1326 audit(1760938054.070:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3348 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc65538efc9 code=0x7fc00000 [ 80.979992][ T36] audit: type=1400 audit(1760938054.110:453): avc: denied { audit_write } for pid=3353 comm="syz.1.993" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.472890][ T36] audit: type=1400 audit(1760938054.600:454): avc: denied { shutdown } for pid=3395 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.022271][ T3402] 9pnet_virtio: no channels available for device 127.0.0.1 [ 82.129273][ T3414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 83.247780][ T358] usb 2-1: USB disconnect, device number 18 [ 83.271282][ T36] audit: type=1400 audit(1760938056.399:455): avc: denied { associate } for pid=3464 comm="syz.1.1032" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.293526][ T3465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 83.452456][ T3476] /dev/rnullb0: Can't open blockdev [ 83.611213][ T3479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 84.302349][ T3507] rust_binder: Write failure EFAULT in pid:590 [ 84.374185][ T36] audit: type=1400 audit(1760938057.499:456): avc: denied { bpf } for pid=3528 comm="syz.2.1052" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.375234][ T3526] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.389255][ T36] audit: type=1326 audit(1760938057.509:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3528 comm="syz.2.1052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f538058efc9 code=0x0 [ 84.404581][ T3530] ------------[ cut here ]------------ [ 84.443519][ T3530] WARNING: CPU: 1 PID: 3530 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 84.452960][ T3530] Modules linked in: [ 84.456922][ T3530] CPU: 1 UID: 0 PID: 3530 Comm: syz.3.1049 Not tainted syzkaller #0 13e4930ead2c4bb99e6e1e727baa5d081f82ad96 SYZFAIL: failed to recv rpc [ 84.468560][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.478713][ T3530] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 84.484630][ T3530] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f2 0e ee 05 00 0f 85 be 00 00 00 c6 05 e5 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 84.504459][ T3530] RSP: 0018:ffffc9000f7cf860 EFLAGS: 00010246 fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 84.509675][ T36] audit: type=1400 audit(1760938057.639:458): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2982]" dev="pipefs" ino=2982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 84.510732][ T3530] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 84.541744][ T3530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f7cf918 [ 84.550029][ T3530] RBP: ffffc9000f7cf988 R08: ffffc9000f7cf917 R09: 0000000000000000 [ 84.558046][ T3530] R10: ffffc9000f7cf900 R11: fffff52001ef9f23 R12: ffffc9000f7cf8a0 [ 84.566118][ T3530] R13: dffffc0000000000 R14: 1ffff92001ef9f10 R15: 0000000000000000 [ 84.574207][ T3530] FS: 00007f36c98cc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 84.583474][ T3530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.590149][ T3530] CR2: 0000200000001000 CR3: 0000000137e88000 CR4: 00000000003526b0 [ 84.598157][ T3530] Call Trace: [ 84.601501][ T3530] [ 84.604457][ T3530] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.610595][ T3530] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 84.616375][ T3530] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 84.622095][ T3530] ___kmalloc_large_node+0x81/0x220 [ 84.627326][ T3530] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 84.633043][ T3530] __kmalloc_large_node_noprof+0x1e/0xe0 [ 84.638738][ T3530] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 84.644413][ T3530] __kmalloc_noprof+0x336/0x530 [ 84.649330][ T3530] ? __cfi_lockref_get+0x10/0x10 [ 84.654319][ T3530] incfs_realloc_mount_info+0xa7/0x4d0 [ 84.659858][ T3530] ? incfs_add_sysfs_node+0x118/0x240 [ 84.665279][ T3530] incfs_alloc_mount_info+0x479/0x600 [ 84.670740][ T3530] incfs_mount_fs+0x3ca/0x960 [ 84.675466][ T3530] ? __cfi_incfs_mount_fs+0x10/0x10 [ 84.680763][ T3530] ? vfs_parse_fs_string+0x102/0x170 [ 84.686114][ T3530] ? selinux_capable+0x38/0x50 [ 84.690962][ T3530] legacy_get_tree+0x106/0x1b0 [ 84.695769][ T3530] ? __cfi_incfs_mount_fs+0x10/0x10 [ 84.701075][ T3530] vfs_get_tree+0x9e/0x290 [ 84.705541][ T3530] do_new_mount+0x251/0xb40 [ 84.710181][ T3530] ? security_capable+0xcf/0xf0 [ 84.715096][ T3530] path_mount+0x688/0x1050 [ 84.719618][ T3530] ? putname+0x113/0x150 [ 84.723896][ T3530] __se_sys_mount+0x2bd/0x480 [ 84.728651][ T3530] ? __x64_sys_mount+0xf0/0xf0 [ 84.733454][ T3530] ? __kasan_check_write+0x18/0x20 [ 84.738707][ T3530] ? fpregs_restore_userregs+0x11d/0x260 [ 84.744391][ T3530] __x64_sys_mount+0xc3/0xf0 [ 84.749070][ T3530] x64_sys_call+0x2021/0x2ee0 [ 84.753797][ T3530] do_syscall_64+0x58/0xf0 [ 84.758273][ T3530] ? clear_bhb_loop+0x50/0xa0 [ 84.763049][ T3530] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.769023][ T3530] RIP: 0033:0x7f36c898efc9 [ 84.773479][ T3530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.793169][ T3530] RSP: 002b:00007f36c98cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.801675][ T3530] RAX: ffffffffffffffda RBX: 00007f36c8be6090 RCX: 00007f36c898efc9 [ 84.810048][ T3530] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 84.818055][ T3530] RBP: 00007f36c8a11f91 R08: 0000200000000280 R09: 0000000000000000 [ 84.826145][ T3530] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 84.834177][ T3530] R13: 00007f36c8be6128 R14: 00007f36c8be6090 R15: 00007ffe4f76f898 [ 84.842266][ T3530] [ 84.845345][ T3530] ---[ end trace 0000000000000000 ]--- [ 84.851362][ T3530] incfs: Error allocating mount info. -12 [ 84.857175][ T3530] incfs: mount failed -12 [ 85.132393][ T1705] bridge_slave_1: left allmulticast mode [ 85.138158][ T1705] bridge_slave_1: left promiscuous mode [ 85.144241][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.152269][ T1705] bridge_slave_0: left allmulticast mode [ 85.157946][ T1705] bridge_slave_0: left promiscuous mode [ 85.163921][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.202632][ T1705] bridge0 (unregistering): left allmulticast mode [ 85.349269][ T1705] tipc: Left network mode [ 85.469811][ T1705] veth1_macvtap: left promiscuous mode [ 85.475570][ T1705] veth0_vlan: left promiscuous mode