last executing test programs: 21.452554732s ago: executing program 0 (id=3681): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x393083, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000480), 0x2d76, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x1) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) 21.402073423s ago: executing program 0 (id=3682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) pipe(&(0x7f0000000040)) socket$inet6(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x1, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) write(r4, &(0x7f0000000140)="edea31c0084d6bb97b448d3be7fe2957e156991b8063d575cd6063a258f33b645707fd01fa39b1244aa9ad8208f7883956f5ba33e00dc5e8d8bdc908b0f042da84b877f493bef3fcf8813eec33e720c630c6dbc243db1ac5f69d6e1345af0d804e543c4a22af6b86efc06e1604a79e48a5608e117ec1caf8b96950ca481075cd90978be257bf35cc2de465771281bacf22720389e329d98ced2e864e9e4a6a72daf3", 0xa2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x4, 0x80, 0xbc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9bcbd6"}, {0x5, 0x24, 0x0, 0xa6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x200, 0x216, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x240, 0xff, 0x80, 0xd7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x85, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x80, 0xb3, 0x5, 0x40, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0x6a, &(0x7f0000000340)=@string={0x6a, 0x3, "0e9fb256835f9865b883c1f259df83b3b0823e6ab86263e0cb032f431b8027c9d3cf7ee78e8648d11fbf8e6e0a1ed6796a6b8ce380759cd91d66c1aa8cfa17054487f826f75f6eb4ed64d315f22bc161b3c50aa6fc8f64d916bc540d9819666d07d9bcba76076169"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0xab, &(0x7f0000000480)=@string={0xab, 0x3, "2d49cc3f2d64c495857eb9260b815df8f4f4ff2c82946da1b2fc627f401b466811df3b2970d90db9d3b559c135347649c90ea9e688bb4ebc102876b04dbc9df3a90e03b2702daab0352c9c5f5c3cee1f8607a0cabe02b058114b5fe1c3b09b1824090ce5f3fcbfc4fcff31e2a05c41bc18e8141364c0756a1627826b14d10edeb4fb9274bb87c7cb7668cd727bb83f85bf34e5e0195484308381ef89e1882ae710fec8453ab5af0de7"}}]}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 20.894107376s ago: executing program 0 (id=3690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x9, {0x9, 0xa, "a7ea3163fd3bc5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@free_buffer, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) chdir(&(0x7f00000003c0)='./cgroup/cgroup.procs\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)={0x208b03, 0x0, 0xa}, 0x18) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') (async) r2 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 20.893484865s ago: executing program 0 (id=3691): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2200402, &(0x7f0000000200)={[{@subsystem='cpu'}]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0x40485404, &(0x7f0000000180)={{0x3}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) 20.892731336s ago: executing program 0 (id=3693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (rerun: 64) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x0, 0x3, 0x1c, 0x0, 0x0, 0x40007, 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x2, 0x200000) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000180)={0x1, 0x3ff}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) capset(0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) dup3(r4, r0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 20.829043636s ago: executing program 0 (id=3697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) (async) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@privport}]}}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.794883346s ago: executing program 32 (id=3697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) (async) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@privport}]}}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.110658894s ago: executing program 1 (id=3737): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @none, 0x9}, 0xa) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000a00000000000100", 0x58}], 0x1) preadv2(r1, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 9.106520074s ago: executing program 2 (id=3738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x145100, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f2054c4e39922c9a43e0fc759c9c74424001d010000c74424025f000000ff2c24c7442400f5ffffffc744240200b00000c7442406000000000f011424c46249002d0b000080c4e22d37f8f30f0966b81f000f00d00f20d835080000000f22d8", 0x60}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0xff, 0xff, 0x8}) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="12010002000000085804155040000102030109022400010101106b0904000d0103010200000000000000001203090581030800400009"], &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0x8c, 0xfb, 0x8, 0x7, 0x6, 0x4, 0x2, 0x9, 0x3, 0x9, 0x6, 0x3, 0xfb, 0x7, 0x4, 0xb7}}) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x0}) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000a00)=&(0x7f0000000200)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000001c0)=0x200, 0x4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) (rerun: 64) 9.106128304s ago: executing program 3 (id=3739): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a2935706000000000000004d", 0x32}], 0x1, 0x7, 0x1) io_setup(0x7, &(0x7f0000000040)=0x0) r4 = eventfd(0x100) r5 = syz_open_procfs(0x0, &(0x7f0000002980)='net/ip6_mr_cache\x00') syz_fuse_handle_req(r5, &(0x7f0000000980)="5214aadb6fea8708350708a7000bf8ebc55438f6a2297ad81aaef475eac323c480be3bbbfa4d8c8f214f2bba038e4fa8460f7f043442b554b74b41a68625d393ac5e65253057bf16312727cfd8e93204bc2d56a68814d424ea5e3d3f31429f301e4119c89e7f250f0ebce73245292c6b3e37990e6274a4e9c9a0afa65e160825a4daf0256c5bbd5d8ff39ee07932f889e0a688e7b3f8186502f084c4f743d4ecf65210ab0eac0ff866b6fd98eb7ab12fc5cf8d4c43ee02b05fd1dbcbeb54bfa3751f370493982aa6b9d9be6f1772d52157d481f9ccfd29fdd0d7c0733fd57c0a45a1a9280e8c85dd758a8d0953758ff7e4e715a940762fc798e6c986dd2e4e70f537d1b3c40ae17a470fdbbf1b52212c08653536ab824d0cd53e4752c238753e15c90d60287aa63068549f2ab32b7b45e2fd1c538ff44617d55ae5526d5bccc7e482cebe9e6abdcf307aac46ff7cdd7f84328b46e5d96c0629fe775c5bf9770f9528f854563c2dd09dd33262efedbb22421e4e8695279877a50194d190b67b75761ef0e65fe98d6ce26e390a4979cf05932f42325f9af4f4297bfa31413b34f1de0931d981e34dc45fc4aec756ea32f84a69ecc357267d4d8392a2698788bd5b333331c7b8a41415cd28f5f7b820daf797b6236b51a32bc3b6ab729567ddbc27cd937418196bdd2824edfa7c72a5bc3ce40f26be559472b2d4ede2c148311a3d77b697b5c8d2825c0fa5f9cb0e460cb482932220cb325815f9f67103ec337eefa93412f4aab67c2a353e0578c5e43064bffe3412d4d354b7d2d6f07cc489f34544bbf0ce7dff75b7a8c3d9bbadbb01204269cf4ad84217071b837fab1660852f932e0efb306ce1a10e31a5786754e53c64ce1f9a7dd114477f91481c2513b23be17eda48d422b7bac6d1bc9860e05ec184f6222529153d44b82414c02f1d0c7b64f85473891eb1251b514ad31b7440f01f34afb9ee560838239d04df09f61b503964318a427d368c0a6bc5e792b4f3fb92cd41943b5d8ddeb67ccf540dc1457fd288db8fc60f00bbb6548cebc860679cce557a271131d0df18a9b1f1c04692b28ff4bb346b648dd969d286ce3bfa60df0c0502daa3ca83e12eea70e520cde982d4b998b6b9f6d911efb7658875c155d6c32a2ddff1d4b34c01f6b1454e42ee76056826429f5ab0ca4260e044f25380d82c5a643044adc70e9d714ab6e9fc2cf757131c9454b9bd5f17f6429bfe378d8d95c965ba7d7d79b6e0568468b0dc92fb06712e481424017d9c1ebcfb47a0589438fed1693d1b398c14ac2329f32ca7434353b5c18fe6e56ebf646a133c0d9d90aef03f3a4cf625da2492ada6cd9283d519178905f51b26a50c55fff3cdc5185e6f88ebc6b2dbf4db8d9f3c569d0e296a1a83b4a17dc9ca704cf08719cdddc7d9af15ba3a2aba032a36b186ce27fc5245a5ff2ffc0b5ff630a3c77007dcf23fdc1b7cb8125be8b2116c0b3b0e57f95594133eccbb7eb8e0500923e22905fac58139f725e959e5b98fbd614dcd6532e922693843474acefcd83afb7224eb0a7fd2862b267bd7120c85b8242229750c90f78ec30f2d03c609d6b3973d58fdf5b0ae8a7a34e8c6adcfb65688fa2ece7d2636c2a8bd0f70f9a7aff5e5cf4a4ce14051f93b84021b69dbd4548c9b81843be59d5028cc4f69b2d2e250ed67d0e5f54deaac129e8e04a6ee01f13e108073c13d30bfbceb6fa72d97330cc90b14fab2cfe7a439b207d70a63a637547225077f00fadc49d1bfe86995bbac4a379d36fccfae613da9ddb7bb0e829460b0b636d9582bd204884359dbe01f7b8184a14267ed727a54b81d52149719cda7a77afdf74379414d07fa909175bd7c31f2cec24bf5e86254d208180c9797cdd977f0ea4b7a98091487ecf95aa070e44a4d152ecccfb778e36054781bae1581ebed326b7dbd0fc7416092e065eb75583ef35e23d5ec9dfc909db3f886a837c0237c5d26e67884682330eedea0bfbe6ebb1170f02353ea61f087afe42346a9a5a62b1e8c3a5746b91f7e235dcc331e3535d08ed4051312f7b55911fc30c070539aa450cc12eca5fec9a6f348c10605f834d90fb7014fd2fa247669ed20e4778a9031bbf18daed659d281c72bd987ffc4f450b9c65f1438f9aeb20edb22f6a967cf742bcade3f120217fe38c39d29cde7fe74edc4d36a061b113ed4397eb604b229285134c63d0689035aad3879baa36fcd9b743f1655b2012c13bad6846d035cb9878fdcecb60f6c16f650d1e37ce38754f245cdb12529adc34fb1a6fc85d7226a187411801274b6a7df6bb36f4b52dcf2f3ca25aa5ad98b7f54bb7a93775781934d4a57786affdbc94b1b6cd8d7b15ba24c8258ec67b17b8d0c89d3982f7d1fbb8977a3d946bd22a437d17ee0fb80a517cb16280b0dde71e09b55366951eb42575e469b65fda2d507e35cd80606740790f3a1467cc0771f33b16da017775c8ef263a78dde37127ab834e66295cfd95d59da7e9c32dea711ddd59d3007aedb8c6075d4f4abfd6561c5fe1bc0ad044697ce9f5a2117c8ec25a0a503dfb29e1b0bf87fe8af01042ac20781e502d1b1c3cebd3e230403aee13f3c0a32b89c1ff1f8e1f2a2f43f1132fbd2ecfc236b3f194d9457be8bab9b174c15f3ae0bdf651144380b291f26ddf72e3606a88d871b0059a70c5bdcfef28cc96ec4327f4b8919f9836cf0c168249b26937ae44def50f38973620f954c61cc54aed164280370a58bd39237cdd28470c5037905e3730914c76dd0b8447290bea082f9b0ec2cf57c6c934a3693e61ad41fd1727cbb22dfa92a36b5811b8702fa3273badbe2803dc79784ee1988be01299a4f218f0d60d5e518a06353cbe1c9980301671809a93f7580887767b8f47898c78f0132696425e3115cee4ada08bef41abad7fa4b811d58e03c1f6c6c0dbcc7b5cc93edc4e5b79650e40837e9ffd3ff4e39706f06e6493b5300782fb0b2da07b4c103360b3f9be4e6489bb80209780ae0aee0c71f1915a6e8c2bf219ccbbe9d2f4b4eb74b35ac4d10b826cffd8a2cf9096c0b4026448ccd2a81f9402119057c90241cfdab39eef8e695f8ac07161b26c83a4d5068baf2acad11033ffc4c5ccee34afea247a4e6f7fa7d1860e9f2fc323415b42002684b2b7fdfe2e23956e6476580eeac1f387ed26f5f5d6fe1eebfa654748ded0f327a603d77800dfa8686dec37e8f27b4ba32986ae4064605f06f7db7a7d9f4273dddf5a1a117062d119eeb3d3ad2e6f90529e48d4b9fa073c6d2ea7963e5379cbb4f683b6fa289afd7aa93fbfd17af0052f525e9d3dd65e92d84dbfa663a34043c414689b38c951520114db7831fd305d6bfa7952e7e15618f5aebe4895e333db91b27445c1d9064ff6edacfdecaa1752460ad75881ce03865b7e43ed44e2d69e951b7468fa1d5d002b4ef008a520d11d8075a8b68a5fd44cffa44b99b57d499ca2be7dad938ecec184816f8b53671bca8d3404004cf8eeb9764a9e3d6f90a81adb62a3005a73886c6ea2a693bbe42a81e69a4d28b3abee12ce3b0b629b26ef8a8517855db501ed8058ae63ace58dadd5f2603d4a08716595c53da8c94e2b72a245fbd6bfd1cd3198a61358030adbd683151a462725a5b78bed03e6e36eabf12ee829678d78133868e9af2bcebdfa0597c657a9ef0f1be11b2d1dd07b6d9f92f3e198da9d7ed6623ea561f2b1bf54794da2259e6ec075876deb9154f1f9c297c444b402f0c95370ada27217be5bcc897639d2c8433a6f79922f48995a6d91623937c40e994f588eef52d6cb0d2c113132180a19c4fc68ad4a401032971fa58f45b145b5a039855b01ed6ae06bcd1631435af122f75913af5642229c5d97d568bd14ebc0200266c5aa93593f4318d443f2dfbc7e356d5a4c2b3bff397747be48634ec9426cccc5cd7e6a973d5d3275ea7e6a1380d4d885835f32c5220871fc194d00cd414d7df8362b62a36258a372a5c111b593a845d05c615bc954b3551af26b35cd084445493b25f0535bf5ce30af791c0f1f5d54762214634ef6649d9efd3d4dda3f21ffdeb459790945b96de8db461d68372af1df35693680dc604101d8572cfc3fbfef3346a14caf64f2205952ea629d88bcfac09fddcc4a085611d5983e7cbd89c27bd56ce43b6f087ac56da6819b86514c7fadeb573d027d2eb07c64f5467095529e4dcabe6f2b8864844ff2fb302a989d819fae50b0abb3864ef0f1c305cf46e4c06f53a643ff208907bf27aeb7ec4451ee15ed1118e7367435ff62e91e54156842ba6a676a3c07ee9818dbd8e8e77fccbca102bd22b620e2da8c029d3cd7b11453a74707e0a250757f9db6968114dd8e466ca1bc75f0d0d1e94b8d7123b4b5fe1bce3cbb14025d00978facd8f582f5cbf0336bf9510bc5f72cadbb3490916cd46f41f68ab2c6fbdbf24b74ff9d7b1437a35574898721c293e4d08b1141e42808e83367db7c9e93e73c1794ed7173235555a6bf33a53392c3ae11884b03ca1b00c02339798cf808c640277d5e8626ac98de6ce09a021bda760a6851881a6623c022d1ec90b92fb43c8339ca071ae4ef65c825bbb65fb41d82371c0437bf332b51f1023d40c2c86a0f42c8773ba5ce12815439f182eedd499e1a69e86f72c68583aa7cf54ff7e3f4629567218af3282901d0e004aa779cc32784276e8d1e9e97a94217a2f0280321ee090bcf5d8e5fdf1a38030d993a7cffe84ad84adb825134eff50c074505a533f9b63d4e6d2d91fa235867e978ba5d89a4beefe2eb9237efb281bda1d6809e68f86d072c255811764559e2a1294fe4df7dd81b8875bcdec8923fd980e72cf97a76068a919cd6d59c7dd934a4c3a4c141e9023e72caba79b778ae90ccbf86f12960f45d9aa45a13277f76f2379cb8736ca6654d54bb38c5489c7792b6699357c5385ee5ae7ef0519115af583b13218580054e6b80e6f35aa4de991ec70865b4b63deb89f666c537f0162280d0099adb2e8be4db06f3f92f908e56c12e2ce1e7480efbc0eb83e5d412f52195c422426512a4defa5c77fb888ac75fabae73d60001477777229eb7a73c2948e06853abdb9970ef0acec52cc5449f799ba941886af5f7a77286f2b7c6a322f5d22d202c4c2979e929165cc1430a3cddb2cf53a4c23c21cd9ab8dbd30204ac63947ac49cb17133747f9468fd0935d9ec90ea81cb906a4f0b8eb2198a9a6d0efee195f6d80dcb53c1940bc5519cd3b83c15ffb8d5f1d1e968af07784da045a7ac1a8a1dbb4cf8561ebf822b35c6e786c16d8cfa63b45f5ee1da3cf2265cfcebf1fc1c4d8b65ebba18da06e053185a89591723a7b1b57ccc1cd358f25a26affa7558426c4bf888645f63d50a30e048c0395c0a6cf193a16ea352399d1a95c86eeb475b3048bc6d52675d4905fa19a435c71e268d5206a195de9901775ceaee42ed1b61fe37e39238637bbed1d1d3093d2b76213b2c15eadc39663674933f4698d97b1e982ec1f910619fd209c94d5a5d9ffb22150410aebed11aa40984fa54eb2ce26d46f067e9c0492c17d77a7abb46b4069492d7be9f8a3f43dd22c8dc236ddcfa2a250ecb88b527465a346acf7a521b06369bac1bf771810ff139675bb02c20258eba065fa680c95b8aa9b03d62d7654de11aac1445655d4ad4da4cbc0c31696296dcdf3322277a7a5ff9d0feef3cc582d34936f5ebe244ba76ddc5ff9633cdfdeac878f3ae7efa9fae037c119f5e8b3207c96d75698cb1ea082f1d586fbfb270f8c2d05e4a16ac080d625263323001a1b0fe880df4bc3805cc39678b2f438e02214812d21bfff15f8004c1f1b98751a423c7b2ee217dc269e28409d1f92bce0b8fbc164a91dfb7405a2fa423bdad5a0798008f76c0f4d14d13c7dddc328be3642d648a26c58db92d829f920fb1b496cb563356f1bf51377bcadf8eb69404372c6a407e612f8e850e0909e80d6bacf9864bb28004c33027be49120b1df26034383662e7c585e09aa76cc27c71889deeff79337c4271642b82376dbbb4d9c66bd0127dcc2d47b9d4f1a3c1e37285f8d253f4526d39822db62c83ea843e0dee1e5b89ab470259ad76407fd87a99b7c259bdb6b0ca4add071df207ebb3c1c93b69155fc31655cb783c34154df5f4df212d4f6b6c773fbd2be0e8fa33bf4f5f243c1def3c5463c80d863ef62f51b204886ab1a9d30d8f9e28c34a51ea2b71fc2edf94106fc03b4280e1a764236452923287c868715fb7b94521e0dd74c56c92a8f4b537d0bcecc928522a530dd17202099a19f17f7b3bbc9416baa4df8a8052aecff8c98e26e93a22dcf64daca287f3bf8a68579656694d68f4cb72ac393ea64518181e6a74891524c009b8025f557b926b565d3a83867456fb4eb0f1bcd15cb5705c36799b6602ca804359a1d8770b8ddd0072ea3c6bb786fdb2146cae16e062e30c78f31df5eea9740050feba0e9028e444f725b74e83eaad7779e7243ac5d7f7e877cd1070dba662a8abb81926992e794a200be76bbb28c3011e5209f2364883b41c4aaf9957279640d2db32ae7c14b70f57263230560cc80d1cbc2ee7f5c276458a22d6abfe98b8615dcdfbbac08760e76d7dd539c7f47ae9d6717bd40254a3809b38df99ce654d2f532fd807ac944ab5a3bfeeb198f13e1e63ba9900c5900bcb620451872bbde3a6bf66d13407b442e3c07c7c58670c8ccf7a577e9bb3b1bb0a247de0f838f4a94efb16cff6ec004cb018add1458df671e3d185de91e15f0688cad76149142d847dde43016e85e380d68f9d7b5ac74a365b12d8586c7b32aa4740e15b5bfa4c8506bc0c6a09b3e9f92ebf08f7d1261657cd225c1cac7ed4511aa7deeb4d2f2e821a39f658bcd8b4c7711be40f81d4f7289a06577ce2ecf50e9bc7fc392f25901a66d2f1d49feb089c7806897421b70d442a2b6719308c9a7030ba9e389beddc5d47d59755d6ba4f803d06546db3a31c8ac05d018fc4e6399cc0aa83d390a1f4388037cc765af52f941eed02689cc5bf4e4763127f273bd8a229f20823b6cf2f30243dc57cad892051b5ae6f93ffbfef084580dad8dd62e758635380b7ced948a3f0e2eeaa00ce3b8a138b74259a3d5ae586c3c08352afe0b57490d58aaa7dd010c4e1b2f7e0ab8b78f7f846031ddd3ad8295d58d3540d45ec4a54b686a58da43073f7c5604c2bf59b01dda75a98b4ef07f7a2f54b004edbf2179923821d05f6200fcf71b1883eda3abe552b656f941a6d330be6c7a56249010deab75a125c653a824beede7870ca057175f457e0a613523ed37108b4f2de05157b247f62db3b1da528d565a95970df776671dcbc768b43c72f09c22bbea237f7fa16c5495a15b53678762828e36f83cccc81ff9eb9650546e231bebc9378d3b0598c9bcfb46bf0211295b0fb4be2e80950244879c3872c4ce05cbd72600f65dbe8850b8288785056037c95a954c3ceb5e128ba7fc344328a726eb2ac5571bc155c6b1df40f7a8a48a6abc82fe6ea9659248f8713ababee748f8ab3bd70a746dafc49dd2edbc0d197903e9cdb085039acc6d11eedb20a73badb6651140de70fbf7fce9f939d6e2e030e72fc27109b8c0ab56a79001377d9f195ae13a2e73552f585b664798d28984b860d554d98e31f90ab5612215c92b05d5aa45b49ab2b014662c150423d3b2a1e3b4d8acc9eec0cc41e7305a57932f83ff13581e48dba8b874641bf0beaf8a58dbd77b6aad0762343ebf9a8aa4072bfcb9de559151df20b4bb905b1153ed3dbe848b6c1a9c52ff0ea39ddbe52dd08962b882bd63d85cc1392a788c0265610cf01d4463367b1f03c7c205638be9f1338bd6793418bd2f1847949b4c96c740bd46a46e8b9b7dbf980a917c4f7e3b35dc1fd5b25d2f4089914886148365632dbd02c49fc284cddd26cf54a90398d1dd4065262690bffc250c38d3d7eafe826660b66a975772f5f980a8b33a568ccee82e4f1c381d59c17c6001cd03014e6d0343ccba48d9ebf2e503d4b4b98d441a46541f5a459616293753d7447220b9fd59d16a812cae0874f463ceeedbd6a15214522dd13765dd998810395f790900b9b9942c7b1b2bdb0beb868e0a2bbb14326583bb174852d18f3d1840dfb461bf50f8af4fbaa6c6dd9df1363714010f667388102af59517bc487ca457c1eb930898deaadbef0fdd52fbe65337a04844536b199d7fe0ba661e219e9e82682f59f82c45449a1239fbc34eb56ce510b394382d18952c6abf5a54d30bfa9ea35b394ac4fb37ed4830c111ed6e09274bca9c1f9dd6f28b088f76e984c43ae457a5622b1f57e3a19def81260c39116a4b5e7fe633c58e07dc55c21dca11bbd56e651a9684778cb9b9d9bb1cc86ae2f34ac6743b082ceb8cc46684b1f66653b399518c7a002760ce224313479c2cd11f455560fbdaa4957e21e73defe6e4f05acad7d40f7735f4831501fad6e65149bb90060a0a383759ad875c55594f601adfea717354e7bbe93b1bed9c2c60c13622f540d677897cfd85f9005b618f4e069c6429063239252af4dece42e0ab0849e53ef246eb9cc862aaef472d252ea49ec79cbb380302f57279575b24132683d3dd4202b9fdff5741fd7968ca4da26f6a28756bc4e7266bd619b7d6daf6a7d21a9e3b7e41661b4d5df07005949a6dafa8349fd7cc0181aac710cf6bc5f208878bfde9ba304b1c52e2b91bd1083e562580a60597f54626f10c327668f03fdc631b4d52bee355cb6096616b1608fba65ab36808cd2bd869c62eaf2c86ea518e1d35a75c9ce95e58408d86f5b303106da865a4f72f54e3623a5bff15785a32e9668da4952064a3f8a68511bc325bbc52465317be9154770d7b0314f56048473f5335cf9877b58e9a3cda4381b203c564b3987b9415fad4d15ae67eb1a808d055f21cf4783bca59468b53fb2b43abdb69bb42a85f47f3ffa430f4ddc51b233810b432a9f357d06a6886b089c2aa2db3503ec3b391a3c209f6afa7fca43f45683fd8a67e2a84d238703695cbafcf9322734b29db89cf87d945c5294dff4d588f80c0e7487ce42b371b1f29a7ca368ae791a70af42d43b25d9161edf5f2179457f4c20a905a9ad0235fbb1d76f2d0bdc34bd701bea88b09a850034edf922d27f66aaf81ff32a4edc9af5b52373ea36f6f16c9018d4cbec809b53be22a7676da0f497e12b003761588a9f0413755d7952443a43cfc09afb7e91b845f3eea774f2327343a9ddd33cd5da4f808c77a79123fae9206cf2024f2b6b6fa0afd8794f9a0f236d3ded1f511d47866d80866ef97efb5464de7cc4d4b428f3a0f68fc2619922db376d2ae69522b36fedd7c3a1b7473992b941d1b66abb72651c1cc765ed68d748760b9f3681a4b85f334a0fc00a1d5b746750ba730b60b5d9a2a749af1b03e2bbc3168cecfba24a2a76f19952d7286331f888404b4e72d2c8d998103ef49b06a64854cf7e640b2b5d25f675dbd6436c65eeb80fc1f82f68e35d5d54dcdc6649665753d3de9f124f6aef3bee527c795a612e421d7ffa66e73766b22a3049577f7a2c6eb477d0ae55c98f5fdfb7eb53035ca251848f9bd3c79b623b7a0461772875ff18ebaed05824ab2e6cb54f373f57dda9d426b090b3623d2a7344d65cba05ce43a626c0a824bf64381ffb08aa5664858dbca0d25d9730ed366ed80c022805542eae20831f143e8144ccb9b57e26cd980ca346403e160a73912d3dc8263b4c6cffa2c95d1f446f40195437e7a243b400d02f5cfee3ceca56c72e64804d0f6c7d43bee467189fd97b19556b846cc19f96d6490afc1cf5f5496843534b966833b66c97bdcd51f4fb4dd175b2b30a39aee2e1816f0b9f037615cce03a7a326a40f6cdc1505ce57f32d240184a4e1f039b0c041ff0cc5c336e920fbf30b3db648568e5b60050236c28d9d1e36582deb271f0196f32efada9b464a8de8148fd5a9f3405b7fb3191c1cf8972d16885d0a624a891e991ac3965585989179f87ceadea5ffdad0e758d2bb92760ae6d7bdd4e2695e71872134143886d86df8768b9aeee55b08df4123ae83644f0bbbc516e56525923ff492bf1b0cc748523642ea7b09a1131ea86831608558af018c4deec11246cd9e1b518787aa41fefe1cd8781a177114ecd3ebe1c2b5527e74d9d5e0f4853d15bb083b91b41837a619927dd1d8facd704013fa01ec065d3212be51a92c00afd083e4e2888d45a175a98db902be18214fe80b7f0b05762a96fdca034878ddea84788446bcdab48d57989b76541f1bf5e1280fcfc6ea65de593990207ec4ea67de126014ed306350261f2225a1dd568ca44e8dda6fac906da5b1eba679c69b08dfc0579e350faa51cd6c7be34ec2a0c7bfc65c830ce78c04795676a0c01290f08920b2cf8dc74632fd98adea6d35cb843049b9042b1970d17cd668772bbbd0b90a7451d8fe6027398707ab01dc886dc51621fae2974165bfae14a72ab6dff9e43e5589b17467845800e34ff2198f1ef6812f0a25d4d37deec3feafa77dde636f4cdefaf9c555d089b86bf599f76149c827f8c3392dd49c2d8371b5e95f3eb17b97a5a416db6194406f05ef41b45df3cfaafc19b5d6ce814636b92808de3dff262345b8fabcf7abe39d7c45cfd43f40b12672bff6cfb9716623ad50e1436e19895a72d8d19f253efc628f6d4986020051315aef35343ce44167824a53c93bcc85a4bb3e47caa60dec3ca8588ecc1ed508e4f4c526f5283cce5252105cd388726109bfd2224743d1acff6c62b45708681e4ce926b5065055e45134f1dad59454cd1b2478b3dfc65fbb5e65eaf84dd5af10148a276af41b58bf679d90090c3ed2f6e3b03bbd78edc7fd50270d24149484f8bf0e3ce2842ffafa62e7bb0cc6fbf87c6808513f3a0c59565bbb743a426bc4bf782b1f1ea748b9209474300b7e5d86dc071c8b8254399ce57fbab49f6569dfc4993f0dd57761ba4341fc53de03c7a4c06ec64da13c811080455391a022f6af1312f73099bc724a2958765126c35a7c556c2eae50aae8f0187fb52b22b93d3b8ac96d6cdabda582710f20e0167686b2d0d5153c77c379de5aeaf53b4d11e15d1c6db03b4a4d41d1a4ea06aca106a9085981693a8200aab69467eec8657cef7e5489188e990cad212be68f8ce07941704731acfe13e66aa07c03735992b82c21f91ba9fee85f7034056c490b63bee9de8ed06c285d7a9f6d262be281decbac0692bd403347a505f14154c7c7cd37a4840e1871ddcaaaca61f7930fd12841928029c6210d7c58abddd62cc433a0f61325ce33c9041e7ecf82412840760c94ec229cfd02fe22c4baf94bfa27e46a7f5e4e1d1923f1813dfbb9bb2791ee6c6d21bd25f079ec2174ba6fd37ef5fb0e7e8565fcf10cf0f5ee8cfb02954d1048880d22a44d3067db254715748a349f8a606bb8d22f6d84483c51e6f277ff62957469565ccdeeca134644c0151312fd1a8a1007806225aaf742f9246e202fd681e0465a2ecb405f0a3b7210da42b7d00bd39578d8c661ea2dbe4baa83ba53d912e37993a1a220e23250cbab07fe4ec623ce85b1c5b45af1c98e6d5c70aec5d7d78193f1c28396921e86b66ebf", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = eventfd2(0x0, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) io_submit(r3, 0x6, &(0x7f00000015c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x7, r2, &(0x7f0000000340)="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", 0xf80, 0xa3b, 0x0, 0x1, r4}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000001340)="d0f0187407321e91c00de86aad0b261671ec679e84986125b9d88989b9a8e82febdcec5d0fbcc9301955661fb928ab0f0576da4a727d9e5b3c36ed1999c3b0d6cd23eecbe972446735225602784ef74c41a3e1087ca74fab290f7e8b1f8385ebbd64fd6374e65d54eb38dc93bf048882a7990f18955e3c4ffebeb717671c1d43f9e265ccba80aa7c727e91754e5519fe8014ed39093ba3a8a48f1e392cc590e1de6396f88f475a8f72e4e4113b64a73d7ba92d2ff7c52c4a9d86768f6eec6414e446542c2e986944519d12a3606a62276373ae9e0c1f2e31532e0796f86bdc7ce68f9f01d4e5", 0xe6, 0x80000001, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000140)="ed92c25f33776af2a01421e79bc41ff1af36383c9e509a396440c4cc241ca03a8e77a17b90a9a30a509348ae7c10db632a7a4deaef1fd4b0967469ec3ffb7cf1321737198db313c70a83ed29d45007205ddcc40cc29e2584702a6a9cb40000", 0x5f, 0x1, 0x0, 0x2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000240)="7daf7dcb72b571b13ae421363e5b33c40539b78d7569762cea4e35b9b42134ed085287c18d535ab26bcd342eb027", 0x2e, 0x0, 0x0, 0x0, r5}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x3e38, r2, &(0x7f0000001480)="5202902a29959035b76c82080e4fb2bd73fbbbaad0764d2ef2cd9243d3abddc0dff6239f08d3cb42d1442419c52fcf62f416b0ef57ddbedf83161e7f6d1df15f812436f0d6c6d322ced390abcb9ba4ecbc", 0x51, 0x1e, 0x0, 0x2, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000001540)="1f40d42926814396c7", 0x9, 0x5, 0x0, 0x2, r7}]) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x80000, 0x80) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) io_cancel(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="3ef121a1638e7111fc86a97b839a9ca4761bc790fe2a8ce526f4677c0debefa095162d5f5fbd70c95998d1d4be826dddee69368b7c76a596dcd40d310f7df8031c00983a312cf0eb0727a6a6662451f682bec80846f4a36ebe8d0b955c3ba445c427fe5ec83e4453494f00b42fbc5910bd73fc1a8802751dc3b58c147e473b9d97753fe36270dffb4923dacf0643514f22f9a250e5fe5cc70a83b1a98de9a410c0d49564e026184471dc1eb952efa17c5044b960b8d5074002331a44baf128f2aedc7b664adc4d8c9e572e5780972144afce1385f15bf36ff8e5b73ea0", 0xdd, 0x266, 0x0, 0x2, r8}, &(0x7f00000005c0)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000480), 0x0, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'pimreg0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x3, 0x7, 0x81, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xff, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x0, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x2, 0x4, 0xfdf, 0x4, 0xffffffff, 0x7584, 0x1, 0xff, 0x1a5a, 0x10, 0x0, 0xfffffff7, 0x4, 0x89, 0xffffff00, 0xa, 0x224, 0xa, 0x6, 0x9, 0x400, 0x3d, 0x80000001, 0xfffffff5, 0x2b6395a6, 0x8005510, 0x4, 0x3ff, 0x6, 0x6, 0x7f, 0x7, 0xaf96, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x5, 0x3, 0x4, 0xa, 0x1, 0xd640, 0x7, 0x4000008, 0x3, 0x1, 0x8000011, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7ffb, 0x8, 0x8001, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x3509, 0xde9, 0x7fff, 0x80, 0x105, 0x80000000, 0x6, 0x5, 0x2, 0xc, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2001004}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) 7.500925562s ago: executing program 1 (id=3740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'erspan0\x00', 0xb413}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; QF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaa\x0epRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88\x01\x80\x00\x00\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85E\xc5\xe7\xc0s\xc1\x81^\x10\x80\x84m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdd\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na', 0x3) write$binfmt_misc(r1, &(0x7f0000000140)="f09bda31", 0x4) fcntl$addseals(r1, 0x409, 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}, {&(0x7f0000000240)=""/95, 0x5f}], 0x3, 0x2, 0x1) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000005c0)={r1, 0x1, 0xfffff000, 0xfffffffffffff000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x701080, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) ftruncate(r5, 0x3) openat(r5, &(0x7f00000013c0)='./file0/file0\x00', 0x634243, 0x156) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7.499110322s ago: executing program 2 (id=3741): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x7d4) 7.498922972s ago: executing program 3 (id=3742): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000180)='\a\xd8\xf2\xe0\xa8B\x13%\xce\xa4\"N\xabGK\xf6\xba\xfc\xd6\rR\xdc\xe7\xa8\xb2>B\xb2IC\x9c\x06\xdf\xce\xa0\xac\x13\xc9i=\x1er\x18\xf9Q\xa5\x99\x87iV\x19\xcf\xac\xaf\r\x17\x1e\xf2(\xf3\xa8:\xbf\x8a\nY\n\x9c\x7f\xc6v#\xd8p\x9fka\xa0\x1f\x05z\x83\x8c\xaa\xd8q\n\xfc\xd0zQ\xab\x95*\xd9\xc6I\x9e\x0f\xea3\x1c\xc6\x17\xa9\xd9\xcaI\t\xcaD\xd3\xbf\r\xaa?\xa8\xe4^\xa1\xe2\xbf\xd6x\xb4i\xc6\xf8\xc2\x9a\xc9Q\xe3\x19\xf8\x9d9\xc3j\x12\xb24\x87\xa4\xf0\xb2\x95\xf4j\x02\x03\xdf\x17\xd7\xef#NOD\x12hz\xb5\x85J\xe9\xaa\x90/\xe3\x97\x86\xf8J\x82\xd2J\xff}\xe4\xd8J\x90\xb9\x86\xfcW\xe1') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 5.730131861s ago: executing program 1 (id=3743): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f00000000c0)) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xa}, @flat=@weak_binder={0x77622a85, 0xb}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 5.728074211s ago: executing program 2 (id=3744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async, rerun: 32) r2 = socket$inet6(0xa, 0x400000000001, 0x0) (rerun: 32) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001540)='./binderfs/custom1\x00', 0x0, 0x0) (async) sendmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)="e1", 0x1}], 0x1}}], 0x3, 0x15) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(r5) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000026000305000000000000000008000000", @ANYRES32, @ANYBLOB="f16677fce30ae9fffda97d70f270354e7bbf0a7f8cbad06a9087809e214b3928eb2255aa74e503e4bf571e50a85882bae91800ee51768d2cf4528c08cdce975309b5c8081878183f05e9fbcaf8a8147f76d57c55e5c839b5712f9b5bf7e9c9b7e23a0799aaaa4b7e022ff9a6edc727aa27f2b78bde637702c3495408e9ad25e667fc6f7ae6a8a5efd7b1e4c24585e9c349ea326f1aefd5647e01e149b3d1cdc23466b6dc20afd45b5ae63891900af12baa614c4afbffa827f735ca274b6bf18acb404de36473eea0b5000e0bb96ec41e9dea1067fd5cf1943992ad48ceb97e563eaed7bfd94909c2ea8c88"], 0x18}], 0x1}, 0x0) (async, rerun: 32) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) (rerun: 32) recvmmsg$unix(r8, &(0x7f00000016c0)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x4}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f00000008c0)=""/120, 0x78}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/72, 0x60}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000000cc0)=""/70, 0x46}], 0xa}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000ec0)=""/214, 0xd6}, {&(0x7f0000001840)=""/111, 0x6f}, {&(0x7f0000001040)=""/140, 0x8c}, {&(0x7f0000000980)=""/5, 0x5}], 0x4, &(0x7f0000001100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001140)=""/74, 0x4a}], 0x1, &(0x7f0000001240)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001600)=[{&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/255, 0xff}, {&(0x7f0000001480)=""/165, 0xa5}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/11, 0xb}, {&(0x7f0000001580)=""/76, 0x4c}], 0x6, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x10102, &(0x7f0000001800)) kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5.727327151s ago: executing program 3 (id=3745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x100000001) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x200000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3.93810485s ago: executing program 1 (id=3746): socket$inet6(0xa, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cf2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x3, 0xff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r3 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r7}}}], 0x18, 0x40804}}], 0x1, 0x14008004) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f00000001c0)={0x20, 0x0, r8, {0x9, 0x4, 0x7fff, 0x1a6}}, 0x20) pread64(r2, &(0x7f0000000040)=""/48, 0x30, 0x200087) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x6000, 0x8ac40067f42244ec, 0x1}, 0x18) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 3.93716328s ago: executing program 2 (id=3747): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) write(r0, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e40)=@broute={'broute\x00', 0x20, 0x4, 0xd30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x1b, 0x0, 'syzkaller0\x00', 'batadv_slave_1\x00', 'xfrm0\x00', 'netdevsim0\x00', @random="f633cd432351", [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0x156, 0x186, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0x6, 0x8, 0x5, @empty, [0x0, 0xff, 0x0, 0x0, 0xff], 0xfc8, 0x2, 0x4, 0x101, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x4e21, 0x4e23, 0x5, 0xf, 0x80, 0x5, 0x9, 0x8ad9, 0x8, 0x1}, 0x9a, 0x200}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}, @common=@ERROR={'ERROR\x00', 0x20, {"4675c3557b9eb8702baaad3328df190ec9a734ca9faf85afcbd0707535d9"}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88e5, 'syzkaller1\x00', 'pim6reg\x00', 'veth1_to_batadv\x00', 'bridge0\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0x0, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}, {0x11, 0x2, 0x88a2, 'bridge0\x00', 'wg1\x00', 'gretap0\x00', 'ip6_vti0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0x1fe, 0xff], 0xce, 0x116, 0x15e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffffd, 0x5}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x7, 0x800, 0x2, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xaa, 0x9, {0x9}}}}], @common=@ERROR={'ERROR\x00', 0x20, {"60c5c2582e9c98401f4c2d3c200f8e392d75cc799e2e2e1c5ec8323d220e"}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x2, 0x6004, 'pim6reg1\x00', 'bridge_slave_1\x00', 'wg0\x00', 'veth0_vlan\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x856, 0x856, 0x886, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x6, 0x3}, {0x1000, 0x1}, {0x9}, {0x8}, {0xffff}, {0x7f, 0x1}, {0x0, 0x2}, {0x100, 0x3}, {0x4, 0x1}, {0x3, 0x2}, {0x80000000, 0x3}], [{0x7, 0xfffffff7}, {0x2, 0x89}, {0xfffffc01, 0x10000}, {0x3}, {0x650}, {0x3}, {0x2, 0xa89}, {0x6}, {0x80000000, 0x4}, {0xa, 0x7ff}, {0x0, 0x400}], 0x4, 0x2}, {[{0x6, 0x3}, {0x7fff, 0x1}, {0x1}, {0x80000000, 0x3}, {0xffff8001}, {0x0, 0x3}, {0x6, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x3}], [{0xfffffff8, 0x7}, {0xfff, 0xffffff81}, {0xd4, 0x4}, {0xbe6, 0x6}, {0x5, 0xffff}, {0x8, 0x3}, {0x400, 0x4}, {0x8, 0x4}, {0x1000, 0xfff}, {0x6, 0x1}, {0x7, 0x7}], 0x3, 0x6}, {[{0x51, 0x1}, {0x2, 0x3}, {0x3}, {0x8, 0x1}, {0x101, 0x2}, {0x5}, {0x5, 0x3}, {0x36}, {0x2}, {0x50000}, {0xa, 0x1}], [{0xfffffff9, 0x54}, {0x80000000, 0x7}, {0x6, 0x4}, {0x4, 0x1}, {0xa20, 0x280000}, {0x7, 0x8850}, {0x0, 0x5}, {0x0, 0x5}, {0x607, 0x81}, {0x3, 0x9}, {0x7, 0x7}], 0x5, 0xb}, {[{0x2bd8, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x1}, {0x6}, {0x7fff, 0x3}, {0x1}, {0x8, 0x2}, {0x7f, 0x3}, {0x7, 0x1}, {0x402, 0x2}], [{0xaf0, 0x25}, {0xfffff001, 0x17}, {0xffffffff, 0x400}, {0xabe4, 0xfffffff9}, {0xab, 0x40}, {0x80000001, 0xff}, {0x0, 0x1}, {0x8, 0x200}, {0x175, 0x3}, {0xa, 0x7}, {0x5, 0x1}], 0xa, 0x7}, {[{0x7, 0x2}, {0x200, 0x2}, {0x9}, {0x8}, {0x267b, 0x3}, {0xcf8e, 0x2}, {0x3, 0x2}, {0x2, 0x1}, {}, {0x5, 0x3}, {0x9}], [{0x40, 0xcf}, {0x800, 0x6}, {0x0, 0x6}, {0xfffffff7, 0x765b4c33}, {0x5, 0x8}, {0x4, 0x4}, {0xa, 0x2}, {0x89e, 0x7}, {0x9, 0x7}, {0x1000}, {0xc5, 0x7}], 0x8, 0x2}, {[{0x606, 0x1}, {0x2, 0x1}, {0x1}, {0x907, 0x2}, {0xa92, 0x1}, {0x1, 0x2}, {0x33, 0x3}, {0x1, 0x3}, {0x5a3, 0x1}, {0x7fffffff, 0x1}, {0x8, 0x3}], [{0x40, 0xffffffff}, {0x2c00, 0x8}, {0x2, 0x5}, {0x6, 0x200}, {0x0, 0x4}, {0x10000, 0xd}, {0x80, 0x5}, {0x81, 0x6}, {0x6, 0x52}, {0x9, 0x4}, {0x3, 0x9}], 0xa, 0x2}, {[{0x5}, {0x1ff, 0x1}, {0x7, 0x3}, {0x4}, {0x8, 0x3}, {0x8}, {0x4, 0x2}, {0x9, 0x2}, {0x7, 0x1}, {0xffffacd7, 0x2}, {0x400, 0x3}], [{0x9}, {0x2, 0x10}, {0x9, 0x3}, {0x7f, 0x1}, {0x68f, 0x9}, {0x7, 0xfffffffc}, {0x1}, {0x800, 0x1c0000}, {0x0, 0x6}, {0x4c3, 0x7c}, {0x6, 0x35}], 0x5, 0x6}, {[{0x0, 0x2}, {0x86, 0x3}, {0x101, 0x3}, {0x80000001}, {0x3, 0x3}, {0x10000, 0x1}, {0x1000, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x3}], [{0x8000, 0x2}, {0x1ff, 0x7f}, {0x8, 0x5}, {0x1bad, 0x1ff}, {0x7f, 0x6}, {0x0, 0x7df7}, {0x9, 0x3}, {0x2, 0x7e24}, {0x7fffffff, 0xd074}, {0x401, 0x2}, {0x7ff, 0x3}], 0x6, 0x3}, {[{0x101, 0x3}, {0x173, 0x3}, {0x9, 0x1}, {0x9, 0x1}, {0x10000, 0x1}, {0xfffffffa, 0x3}, {0x9, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x8, 0x1}, {0x1, 0x1}], [{0x7, 0x2}, {0x6, 0x8}, {0x6, 0x8001}, {0x9, 0xc4}, {0xffffffff, 0x1}, {0xfc, 0x8546}, {0x7}, {0x3, 0x27}, {0xb8, 0x7}, {0xb5, 0x2}, {0xd9c, 0x5}], 0x9, 0xa}, {[{0xebb9, 0x1}, {0x1, 0x3}, {0x3e}, {0x5}, {0x4, 0x2}, {0x1, 0x1}, {0xcc}, {0x3, 0x2}, {0x80000001, 0x2}, {0x10001}, {0x3, 0x56929641df04fe48}], [{0x7, 0xf}, {0x56c, 0x7}, {0x7, 0x2}, {0x7fff, 0x49e2}, {0x7f, 0x3}, {0x7, 0x4}, {0xaf, 0x6}, {0x1, 0xdae}, {0x400, 0x3}, {0x7ff, 0x5c90}, {0x1, 0x9}], 0x4, 0x2}, {[{0x6, 0x3}, {0x7}, {0xa, 0x1}, {0x6, 0x1}, {0x1ff, 0x3}, {0x9d, 0x1}, {0x4, 0x1}, {0x400, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {0x8}], [{0x4e9, 0x7b}, {0x3, 0x5}, {0x7, 0xff}, {0x3ff, 0x7}, {0x69d, 0x6}, {0x1e, 0x3}, {0xf4, 0x2}, {0x7, 0x4}, {0x9f, 0x6}, {0x10001, 0x1}, {0xf, 0xfffffffc}], 0x1, 0x4}], 0xb, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xaf}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0xda8) r1 = dup(r0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f00)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000ec0)="1ab936e782936e39243ea0f75634", 0xe, r0}, 0x68) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000f80)=""/4096, &(0x7f0000001f80)=0x1000) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001fc0)={0x87, @loopback, 0xfff, 0x2, 'sh\x00', 0x20, 0x8, 0x6f}, 0x2c) preadv(r0, &(0x7f0000002540)=[{&(0x7f0000002000)=""/154, 0x9a}, {&(0x7f00000020c0)=""/144, 0x90}, {&(0x7f0000002180)=""/61, 0x3d}, {&(0x7f00000021c0)=""/107, 0x6b}, {&(0x7f0000002240)=""/255, 0xff}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/194, 0xc2}, {&(0x7f0000002480)=""/174, 0xae}], 0x8, 0x3, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000025c0)={'dummy0\x00', @local}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000002600)={{0x41, 0xc91}, {0x5, 0x7}, 0xc2d5}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002640)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000002680)=@arm64={0x2, 0x10, 0x0, '\x00', 0x7fff}) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008894}, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xc0, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "6e181c34e4eb564886e1ab5a5793fc74d8a40da10310c6d26e5924c303e27ea155e085750e59f598c9e9d9d3f31e3fd1c4ad029430fa9334014e8eb643ac"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "1f9bfc4aa1f14992bf9a5b563516c13bf7838d0fb266c5e465ef"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x12, 0x3, "9a88334b9f0ac0ec61180ab6ac2b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000001) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000002980)={0x9, 0x0, [{0xa91, 0x0, 0xc}, {0x862, 0x0, 0x9}, {0xa71, 0x0, 0x3}, {0x802, 0x0, 0x3}, {0xbf9, 0x0, 0x1}, {0x96a, 0x0, 0x6}, {0xab3, 0x0, 0x3}, {0x183, 0x0, 0x800}, {0x84b, 0x0, 0x40}]}) connect$inet6(r1, &(0x7f0000002a40)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002a80)={'virt_wifi0\x00', @multicast}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000002ac0)={0x1, 0x3, 0x4}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002b00), 0x2a0600, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000002b40)={@rand_addr=' \x01\x00', 0xc}) r5 = dup3(r1, r4, 0x0) mkdirat$cgroup(r2, &(0x7f0000002b80)='syz0\x00', 0x1ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002c40)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000002d40)=0xe8) mount$9p_fd(0x0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00), 0x2100000, &(0x7f0000002d80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@msize={'msize', 0x3d, 0x8f}}, {@afid={'afid', 0x3d, 0x9}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_mmap}, {@directio}]}}) ioctl$int_out(r2, 0x0, &(0x7f0000002e40)) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r6, &(0x7f0000002e80)='./file0\x00') 3.91551411s ago: executing program 3 (id=3748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.96999596s ago: executing program 1 (id=3749): rt_sigprocmask(0x0, &(0x7f0000000000)={[0x9]}, &(0x7f0000000040), 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x118) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r1], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.96780583s ago: executing program 2 (id=3750): openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xca, 0x8c, 0xa2, 0x10, 0x2a39, 0x3f8c, 0xdb4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x8, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0xff, 0xc8, 0x8f, 0x80, [], [{{0x9, 0x5, 0x3, 0x4, 0x0, 0x10, 0x65, 0xa}}]}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000980)={@val={0x0, 0x6001}, @val={0x7, 0x1, 0x0, 0x300, 0x8, 0x80}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x3, 0x0, 0x8a, 0x64, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x9, 0x3, [{0x7, 0x3, "bb"}]}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x2, 0x0, 0x5, {[@generic={0x0, 0xd, "bc00768a12ecd47ffeba90"}]}}, {"51db2312544f5e35b761204cabb2f4fc1318eacf564f75e6326ab33be395a39fc0e8791deee3d5ff1f499d5e3db42be394be96cd21b928b7dc98eff554b25f33cff40e2bc3ea"}}}}}, 0x98) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000b44000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x7f, 0x7fff, 0x3, 0x1, "502f6e423d26d2f0a21e82000aa57b282c32e5"}) 1.96748084s ago: executing program 3 (id=3751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') unshare(0x22020400) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x7ff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r2, 0x7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) 2.13444ms ago: executing program 1 (id=3752): r0 = memfd_create(&(0x7f0000000000)=',\x00', 0x1) dup(r0) (async) r1 = dup(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x4, 0x2}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x10000}) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x7]}, 0x8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = signalfd4(r3, &(0x7f0000000200)={[0x55a]}, 0x8, 0x800) pwritev(r4, &(0x7f00000013c0)=[{&(0x7f0000000240)="1808cfe9926bf936b9fcdb28fef388ec4319a363539a70", 0x17}, {&(0x7f0000000280)="2a8dabe96f278ec8efcbdb77916290c96f4efdd028942a1bad6fa35345f15c6db2a8c05cc77875999e636bd65f018fc7d714fdbfedf9d790d0c60eb85f8710baf433ab69c5d5ad2c6fc8cf90e053b563ffc70079753c258e2455d92eebf3bf79d984c12019cb177f398d3c3cefd320f3c17b909b2ff5a6af1a6eecc33e988ec03e3ac93dae7244602d9243ebac222b078608aa711b0bf3da82c10070dd4416617fea034736195431c9c3bb65cd5bfdb3658ad54912de9052bcbd0a8dd663312ddf0d", 0xc2}, {&(0x7f0000000380)="fd0b45d68fc9662336fc01b4aca3e7ca6082560b68", 0x15}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, 0x6b17, 0xaaa2) (async) pwritev(r4, &(0x7f00000013c0)=[{&(0x7f0000000240)="1808cfe9926bf936b9fcdb28fef388ec4319a363539a70", 0x17}, {&(0x7f0000000280)="2a8dabe96f278ec8efcbdb77916290c96f4efdd028942a1bad6fa35345f15c6db2a8c05cc77875999e636bd65f018fc7d714fdbfedf9d790d0c60eb85f8710baf433ab69c5d5ad2c6fc8cf90e053b563ffc70079753c258e2455d92eebf3bf79d984c12019cb177f398d3c3cefd320f3c17b909b2ff5a6af1a6eecc33e988ec03e3ac93dae7244602d9243ebac222b078608aa711b0bf3da82c10070dd4416617fea034736195431c9c3bb65cd5bfdb3658ad54912de9052bcbd0a8dd663312ddf0d", 0xc2}, {&(0x7f0000000380)="fd0b45d68fc9662336fc01b4aca3e7ca6082560b68", 0x15}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, 0x6b17, 0xaaa2) getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001440)=0x14) read(r3, &(0x7f0000001480), 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000018c0)={0x0, 0x1, 0x1e, 0x3, 0x189, &(0x7f00000014c0)="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"}) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000018c0)={0x0, 0x1, 0x1e, 0x3, 0x189, &(0x7f00000014c0)="be368d04e5036c9d83236452865f0fa295903ca100ad26187d596f71a943fbde00d3d824a2135159bc3b37526872219396b1aff307f5c9d99b44a6cd9890b45abce78bd5cba179365a0ba82146df53a8f8aeac5fd4ad86fba8987736715650e245f44754d581804325c726a4b602abd8ee230690bdd66f046732ea04f2263c9e483eb413d32260a5363abf75d0863da3a00ac69d0cb22f9654d257cf4451700121aa981de5294ebf1357b84163ce4b734101245b32fb3dc01a1b03124b8eb76cc4c5636d2593c6ee7478a90fc8bc4ca0fa01975b9eb96cb8c3aa891c01afc422dd48a363ffd74c92d705aec30faf46cf84ecbcf8a31003a69f137547b6095c71c1d06e12ce103df12d3a4faa7642c76730535491c8e790ae10bc2e9872bf4885381499676eae77bda27cc76658cd0c2b6a740e52287c1603745c855d24183be1f1ae0a6b4127d8822ef5e86440eb2a1106043cf75e06c95f415482d1fa0ea049ae296b9f213c290433cb29e2411320cc3f856d9a0f32ccd8ef1bf81f381c6d38b9f58bab9cb3e39641458e9c96acf69f3c87432bca9fcdd14672f941e00cc618aa08e2b219ed7499d1c22a2999d5495f03d1863ca53fdc6d9e14f1d17cc8d71a408e0ed96c79da5b1aecb29da5c1bd3e330101bd8b3261d302303ef83e96bb984378687a858210f289d0a82e6fbc2ab66fdabe93cd223e4cb58ae44d462d979e71fb8abd8744d8b9131e03ccf53b399447c72aafd3f4239397bf084f12b0af3e301f3738ce4cda6132f4768691f40c5f465091eafdd84dafbdd6df3f18e919fa0f7e8e14a5307baa1e3f30c5a972d1760df3c6a3904d31d60428dd02c1f2cbe947940921fbcba34c83a6a6093009b135d9eacb6b4c4855a75da23dd2253cf2219f18a910ae608c8913266e619159b004ea69e992a1668d7edbe813272c4b07b287c85c0fcd44d628dcef933f2034b4bec65767b660a0e91d3148f99c80e9b88e544a255cbe26830234c4b9a7d328a1c53e471ecbb0dc7d428e05f0a5c4e15f057ce815d4dfebd8970ec2a60f7e7b3a5ca30915742db51964c5e0a0ec80e0bd4c6107f7a3bc1be252a46ecc471b92a0d8a09657bdb8c404f3d417304e5aada7fd5aaa35504399e3980b40ced10c5e51aa40c87bd6f13b059d0bbc1078355617e9a7eab390c2496b25b56c9aeeef5eb99ee6cb773225a8d61abe9387e6ce06e492467c0695b4ce3f5f1054d25344895afc3c9b25d1098c79b309b23f19c8798ee94a73523a1ac305f724250996a031675c96ae6ad28dc46301e598839379cd3ba2b2f4d42aba7ae8bb74c34c5312575c0db7c3c0bb1596a4187c5fc08e4ec17d62e832f689f28aa41ce85b2a3aafa0b6f714c1e5358f8bfe721d2de4f2c441615abbc9f2bb7e9373be881ca18752ba809c8dc013e074adbc1f0a0703861b4594e5"}) splice(r3, &(0x7f0000001900)=0x1, r0, &(0x7f0000001940)=0xfff, 0x7, 0x1) (async) splice(r3, &(0x7f0000001900)=0x1, r0, &(0x7f0000001940)=0xfff, 0x7, 0x1) write$selinux_load(r1, &(0x7f0000001980)={0xf97cff8c, 0x8, 'SE Linux', "6de5c84a380d67c7f79422a8420059012e8f6eb3ea7f34600d86c3657d80b3009520af9abae01c86fd2b9a7188fe76fd62ea38c15f7d21079b2b5a712bda8ad761d71f19a3e504f3c78a1b74d4f41ee3edaca78038d10ed5d8d53adb5e4f136773c3ce0365227fb92c77db25c21002086f8240155e2c054b43489679986578eb50ece451c50e46de40a3a1c0e5bb86b8e327be2368f19700f6574db49d43d2473202bf26"}, 0xb4) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sendmsg$AUDIT_SET(r2, &(0x7f0000001b00)={&(0x7f0000001a40), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x3c, 0x3e9, 0x10, 0x70bd29, 0x25dfdbfd, {0x8, 0x1, 0x1, 0xffffffffffffffff, 0xff, 0x3, 0x10, 0x7fff, 0x0, 0x6e5, 0x5e}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001b40)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000001b80)={0x2, r6}) r7 = syz_open_procfs(r6, &(0x7f0000001bc0)='net/ip6_tables_names\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000001c00)={0x3, 0x6}) read(r4, &(0x7f0000001c40)=""/88, 0x58) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000001cc0)={0x2, [0xffff, 0x776f]}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000001cc0)={0x2, [0xffff, 0x776f]}, 0x10) readlinkat(r1, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)=""/159, 0x9f) close(r7) (async) close(r7) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000001e00)={@multicast1, @private=0xa010102, r5}, 0xc) (async) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000001e00)={@multicast1, @private=0xa010102, r5}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001e80)={0x2, &(0x7f0000001e40)=[{0x0, 0x0, 0x8, 0x7}, {0x0, 0x9, 0x7f, 0x6}]}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r7, 0x4068aea3, &(0x7f0000001ec0)) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r7, 0x4068aea3, &(0x7f0000001ec0)) 648.95µs ago: executing program 2 (id=3753): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000008900)={0x27, 0x4c21, 0x1, @local, 0x7}, 0x5) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async, rerun: 64) sendfile(r3, r3, 0x0, 0x7ffff000) (rerun: 64) 0s ago: executing program 3 (id=3754): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001040)="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", 0xfa) preadv2(r1, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) kernel console output (not intermixed with test programs): 73] +$<¶: port 1(bridge_slave_0) entered blocking state [ 84.447962][ T3873] +$<¶: port 1(bridge_slave_0) entered forwarding state [ 84.619204][ T3900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.620576][ T36] audit: type=1400 audit(1762282880.883:513): avc: denied { watch watch_reads } for pid=3899 comm="syz.1.1261" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 84.637862][ T3900] SELinux: unknown common r [ 84.668770][ T36] audit: type=1400 audit(1762282880.893:514): avc: denied { load_policy } for pid=3899 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.688942][ T3900] SELinux: failed to load policy [ 84.763160][ T3902] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 85.042355][ T36] audit: type=1400 audit(1762282881.287:515): avc: denied { create } for pid=3930 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.071396][ T36] audit: type=1400 audit(1762282881.327:516): avc: denied { read } for pid=3930 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.275671][ T3959] cgroup: fork rejected by pids controller in /syz0 [ 85.368509][ T4100] /dev/rnullb0: Can't lookup blockdev [ 85.487098][ T4136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.925647][ T65] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 86.037055][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 86.098812][ T4136] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 86.100510][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.117370][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.172734][ T65] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 86.189030][ T65] usb 2-1: can't read configurations, error -71 [ 86.200157][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.208618][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.228012][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.236198][ T9] usb 3-1: Product: ⾆∯뀬ےê•蹘䡦犱á­ë‚¦ã•ºé¯é®´ë†¬ï£è´¥È†ï –ãœî¨î§ˆï•‰ë šë³¨à¿©ä¦½êœ‘奔啀⓼å³àª™ê¾á˜€ë‡€î¾¬å«†æ¶„⻴ᯗ┒鱖嫥践촥黨㼺势慥⨹⻱쿫伸é€á‰ºæ±ªÌœèœ²ç²â¸°ì£ç¡µç©Šì±¼â®€áŽƒë°ºîº´æ’ºæ¨¾à©šÐ©à¦‹é¿”ï¿´ï­ïœ¨â³€à¨¿â°±èˆì™âš´ì¥•é¢ç¼å££èŸšêˆ®èšëŒŽã°å‹ˆí™ˆá¦Ÿë”³ë‚†ë·’å‚´í‹—â䮃ê”┽Ფⲡ∉ᖛ鿯玚ﺳꡭ [ 86.271208][ T9] usb 3-1: Manufacturer: ç¼ã˜“⯵榎얬洤⎢çŒêŽ±é½¨áœ‘é»™í–¢â°¥ä´¦ê££ì´¬éŽˆç•»â½¥î’Žîœ·ä ¡ê¤·æ½ì›æ«•í¯å¹«à¯ƒå´™ì·¯è„´î¡½ïªè³¤ã”€â²¨ìŽ†ä°·é“ªé§í¸æšœê¡™Ü–቗뮯猺Ü∌儬١๕☑翴ꄹ憲ꚠì­ç·µÛ‘áŒæ°¸Å¨ï·§ã¸„æ¹ë¡¾ã·ˆé‘©ç±¡ä†à ¦è¿Žè‰ƒìº¤ï”¸â— æ’‰èŠ¹èª¡á»´áš¨ä‰ï–®ï½—塓ᬡ╚꫟Ⱗ驊åî„햊숲믞꘦媙௩ꢆꜾ [ 86.314549][ T9] usb 3-1: SerialNumber: Ð [ 86.407594][ T4167] overlayfs: failed to clone upperpath [ 86.732971][ T9] usb 3-1: USB disconnect, device number 39 [ 86.912706][ T4180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.913339][ T4180] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 87.018092][ T36] audit: type=1400 audit(1762282883.242:517): avc: denied { lock } for pid=4185 comm="syz.3.1314" path="socket:[19972]" dev="sockfs" ino=19972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 87.065086][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.065115][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.081427][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.081447][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.094957][ T4194] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 87.095025][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.120640][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.120662][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.147668][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.147693][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.171236][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.171260][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.185750][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.185771][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.200194][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.200210][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.208391][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.214935][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.221431][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.237300][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.244086][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.250632][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.257397][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.264021][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.290599][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.304861][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.311456][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.333093][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.339574][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.345963][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.353251][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.360897][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.367935][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.374713][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.381533][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.394971][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.401468][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.408142][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.414733][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.421225][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.427956][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.434639][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.441108][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.447768][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.454226][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.460793][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.467234][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.473698][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.480134][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.486617][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.493023][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.499456][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.505942][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.512344][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.518766][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.525283][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.531692][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.538124][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.544605][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.551475][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.557932][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.564421][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.570860][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.577384][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.583791][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.590243][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.599841][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.606242][ T1634] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 87.631558][ T4221] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 87.638735][ T4221] rust_binder: Write failure EINVAL in pid:569 [ 87.688928][ T4228] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.703067][ T4228] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 87.711660][ T4228] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.722984][ T4228] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 87.747951][ T36] audit: type=1400 audit(1762282883.963:518): avc: denied { read write } for pid=4229 comm="syz.1.1329" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.776971][ T36] audit: type=1400 audit(1762282883.963:519): avc: denied { open } for pid=4229 comm="syz.1.1329" path="/194/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.805177][ T4232] rust_binder: Write failure EINVAL in pid:580 [ 87.805411][ T1634] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.821822][ T1634] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.842209][ T1634] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 87.859185][ T1634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.880154][ T1634] usb 3-1: config 0 descriptor?? [ 88.089790][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.099863][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.109754][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.118966][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.127840][ T4210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.187060][ T1634] usb 3-1: string descriptor 0 read error: -71 [ 88.202901][ T1634] usb 3-1: USB disconnect, device number 40 [ 88.747827][ T4269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.758785][ T4269] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 88.802397][ T4272] rust_binder: 588: no such ref 0 [ 88.858172][ T4274] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 88.890599][ T4274] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 88.943590][ T4282] cgroup: name respecified [ 89.044445][ T36] audit: type=1400 audit(1762282885.249:520): avc: denied { name_bind } for pid=4293 comm="syz.3.1347" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 89.406576][ T651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.749360][ T4311] /dev/rnullb0: Can't lookup blockdev [ 89.755495][ T4311] /dev/rnullb0: Can't lookup blockdev [ 89.954926][ T4336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.986943][ T36] audit: type=1400 audit(1762282886.179:521): avc: denied { setattr } for pid=4340 comm="syz.1.1362" name="IEEE-802.15.4-MAC" dev="sockfs" ino=20266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.038058][ T4346] netlink: 'syz.1.1363': attribute type 19 has an invalid length. [ 90.046023][ T4346] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1363'. [ 90.114469][ T4352] 9pnet_fd: Insufficient options for proto=fd [ 90.453547][ T4358] overlayfs: failed to clone upperpath [ 90.459419][ T4361] overlayfs: failed to clone upperpath [ 90.567947][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'. [ 90.688786][ T365] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 90.830173][ T365] usb 2-1: device descriptor read/64, error -71 [ 91.061197][ T36] audit: type=1400 audit(1762282887.239:522): avc: denied { mount } for pid=4383 comm="syz.0.1377" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.092601][ T365] usb 2-1: device descriptor read/64, error -71 [ 91.154277][ T4401] overlayfs: failed to clone upperpath [ 91.334818][ T365] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 91.354979][ T65] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 91.476078][ T365] usb 2-1: device descriptor read/64, error -71 [ 91.516438][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 91.549802][ T4382] rust_binder: Error in use_page_slow: ESRCH [ 91.549823][ T4382] rust_binder: use_range failure ESRCH [ 91.555867][ T4382] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 91.561479][ T4382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.569530][ T4382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:590 [ 91.608890][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.626332][ T65] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 91.633940][ T65] usb 3-1: can't read configurations, error -71 [ 91.718308][ T365] usb 2-1: device descriptor read/64, error -71 [ 91.810519][ T4469] netlink: 'syz.3.1401': attribute type 27 has an invalid length. [ 91.829393][ T365] usb usb2-port1: attempt power cycle [ 91.938843][ T36] audit: type=1400 audit(1762282888.111:523): avc: denied { bind } for pid=4491 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.127516][ T4515] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 92.138442][ T36] audit: type=1400 audit(1762282888.319:524): avc: denied { ioctl } for pid=4514 comm="syz.2.1415" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.164936][ T4515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.165060][ T4515] rust_binder: Error in use_page_slow: ESRCH [ 92.171477][ T4515] rust_binder: use_range failure ESRCH [ 92.177798][ T4515] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 92.183421][ T4515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.191504][ T4515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:595 [ 92.202540][ T365] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 92.227842][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.227870][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.235054][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.241988][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.253942][ T365] usb 2-1: device descriptor read/8, error -71 [ 92.258487][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.268512][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.275812][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.290947][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.297668][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.304515][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.311078][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.318163][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.324889][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.331375][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.338469][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.345384][ T36] audit: type=1400 audit(1762282888.527:525): avc: denied { write } for pid=4522 comm="syz.0.1418" name="/" dev="configfs" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.373860][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.373880][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.380670][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.387620][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.394443][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.400949][ T36] audit: type=1400 audit(1762282888.527:526): avc: denied { add_name } for pid=4522 comm="syz.0.1418" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.414577][ T365] usb 2-1: device descriptor read/8, error -71 [ 92.429457][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.441943][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.448415][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.455061][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.461500][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.467950][ T36] audit: type=1400 audit(1762282888.527:527): avc: denied { create } for pid=4522 comm="syz.0.1418" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 92.495936][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.495958][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.502532][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.509168][ T36] audit: type=1400 audit(1762282888.636:528): avc: denied { accept } for pid=4527 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.534891][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.534912][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.541430][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.547862][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.554270][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.573242][ T4531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.696786][ T365] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 92.748475][ T365] usb 2-1: device descriptor read/8, error -71 [ 92.889326][ T365] usb 2-1: device descriptor read/8, error -71 [ 92.999369][ T365] usb usb2-port1: unable to enumerate USB device [ 93.274476][ T4564] SELinux: security_context_str_to_sid () failed with errno=-22 [ 93.371912][ T4583] /dev/rnullb0: Can't lookup blockdev [ 93.466432][ T4594] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 3944. macoff=96 [ 93.540837][ T4598] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 93.565173][ T4598] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 93.629439][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.667219][ T4581] input: syz0 as /devices/virtual/input/input9 [ 94.215817][ T4625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.269206][ T4633] rust_binder: Error in use_page_slow: ESRCH [ 94.281831][ T4633] rust_binder: use_range failure ESRCH [ 94.296194][ T4633] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 94.302959][ T4633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.311661][ T4633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:611 [ 94.334016][ T4640] 9pnet_fd: Insufficient options for proto=fd [ 94.853155][ T4655] sock: sock_set_timeout: `syz.0.1461' (pid 4655) tries to set negative timeout [ 95.598977][ T65] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 95.660340][ T4684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1472'. [ 95.699691][ T651] Bluetooth: hci0: command 0x1003 tx timeout [ 95.699690][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.756331][ T4695] fuse: Bad value for 'fd' [ 95.763598][ T4693] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 95.780392][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 95.794840][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.823451][ T65] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 95.842576][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.863388][ T65] usb 3-1: Product: syz [ 95.867565][ T65] usb 3-1: Manufacturer: syz [ 95.879904][ T65] usb 3-1: SerialNumber: syz [ 95.892922][ T65] usb 3-1: config 0 descriptor?? [ 95.910095][ T65] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 95.970371][ T4706] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 96.116011][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.125239][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.134945][ T4670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.142895][ T4670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 96.151433][ T4670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.159605][ T4670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 96.574833][ T4735] veth0_to_team: mtu greater than device maximum [ 96.754460][ T4743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 96.805544][ T4746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.815405][ T4746] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 96.882615][ T4750] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 97.048501][ T36] audit: type=1400 audit(1762282893.182:529): avc: denied { create } for pid=4775 comm="syz.0.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.976812][ T36] audit: type=1400 audit(1762282894.117:530): avc: denied { map } for pid=4802 comm="syz.1.1510" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 98.122871][ T4807] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 98.130276][ T4807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 98.131220][ T36] audit: type=1400 audit(1762282894.266:531): avc: denied { relabelfrom } for pid=4806 comm="syz.1.1512" name="NETLINK" dev="sockfs" ino=21415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.131305][ T4807] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 98.174660][ T36] audit: type=1400 audit(1762282894.306:532): avc: denied { relabelto } for pid=4806 comm="syz.1.1512" name="NETLINK" dev="sockfs" ino=21415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 98.236831][ T36] audit: type=1400 audit(1762282894.375:533): avc: denied { map } for pid=4806 comm="syz.1.1512" path="socket:[21415]" dev="sockfs" ino=21415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.260718][ T36] audit: type=1400 audit(1762282894.375:534): avc: denied { getopt } for pid=4806 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 98.322151][ T1634] usb 3-1: USB disconnect, device number 43 [ 98.496538][ T36] audit: type=1400 audit(1762282894.624:535): avc: denied { ioctl } for pid=4817 comm="syz.2.1516" path="socket:[22144]" dev="sockfs" ino=22144 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.564886][ T4820] tipc: Started in network mode [ 98.569917][ T4820] tipc: Node identity 5ac125f5984f, cluster identity 4711 [ 98.577200][ T4820] tipc: Enabled bearer , priority 0 [ 98.586410][ T4820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.586499][ T4820] rust_binder: Error in use_page_slow: ESRCH [ 98.593148][ T4820] rust_binder: use_range failure ESRCH [ 98.599275][ T4820] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 98.604727][ T4820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.612825][ T4820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:635 [ 98.623154][ T4819] tipc: Resetting bearer [ 98.646662][ T4819] tipc: Disabling bearer [ 98.815726][ T36] audit: type=1400 audit(1762282894.942:536): avc: denied { accept } for pid=4830 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.851410][ T4833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.968510][ T4835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.100848][ T1634] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 99.211460][ T365] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 99.261724][ T1634] usb 3-1: Using ep0 maxpacket: 16 [ 99.269333][ T1634] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 99.278678][ T1634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.286935][ T1634] usb 3-1: Product: syz [ 99.291195][ T1634] usb 3-1: Manufacturer: syz [ 99.295953][ T1634] usb 3-1: SerialNumber: syz [ 99.301599][ T1634] usb 3-1: config 0 descriptor?? [ 99.307609][ T1634] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 99.363359][ T365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.374389][ T365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.384329][ T365] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 99.393550][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.403728][ T365] usb 2-1: config 0 descriptor?? [ 99.525520][ T4833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.525875][ T1634] usb 3-1: USB disconnect, device number 44 [ 99.814161][ T365] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 99.821943][ T365] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 100.015419][ T4835] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 100.015506][ T365] cp2112 0003:10C4:EA90.000A: error requesting version [ 100.030795][ T4848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.032790][ T365] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 100.062398][ T4852] FAT-fs (rnullb0): bogus number of reserved sectors [ 100.063715][ T365] usb 2-1: USB disconnect, device number 35 [ 100.076149][ T4852] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 100.115026][ T4856] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.115144][ T4856] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.237802][ T4867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.407841][ T365] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 100.488224][ T65] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 100.529961][ T4873] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1536'. [ 100.540182][ T4873] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1536'. [ 100.568797][ T365] usb 2-1: device descriptor read/64, error -71 [ 100.617949][ T36] audit: type=1326 audit(1762282896.732:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.3.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93258f6c9 code=0x0 [ 100.659807][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 100.666047][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.677064][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 100.689623][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.699069][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.707135][ T65] usb 3-1: SerialNumber: syz [ 100.720064][ T4867] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.729051][ T4867] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.830013][ T365] usb 2-1: device descriptor read/64, error -71 [ 100.938611][ T4867] rust_binder: Error in use_page_slow: ESRCH [ 100.938634][ T4867] rust_binder: use_range failure ESRCH [ 100.944948][ T4867] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 100.950798][ T4867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.958854][ T4867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:662 [ 100.970155][ T65] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 100.990890][ T65] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 101.010349][ T65] usb 3-1: USB disconnect, device number 45 [ 101.081244][ T365] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 101.211866][ T365] usb 2-1: device descriptor read/64, error -71 [ 101.453020][ T365] usb 2-1: device descriptor read/64, error -71 [ 101.480565][ T36] audit: type=1400 audit(1762282897.588:538): avc: denied { accept } for pid=4897 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.559648][ T4914] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1552'. [ 101.573739][ T365] usb usb2-port1: attempt power cycle [ 101.624209][ T4902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.624337][ T4902] rust_binder: Error in use_page_slow: ESRCH [ 101.630772][ T4902] rust_binder: use_range failure ESRCH [ 101.636964][ T4902] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 101.642416][ T4902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.650734][ T4902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:664 [ 101.676906][ T4917] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 101.915234][ T365] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 101.935298][ T1634] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 101.944035][ T365] usb 2-1: device descriptor read/8, error -71 [ 102.076954][ T365] usb 2-1: device descriptor read/8, error -71 [ 102.098106][ T1634] usb 3-1: Using ep0 maxpacket: 16 [ 102.110000][ T1634] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.119132][ T1634] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.129457][ T1634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.139846][ T1634] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.149029][ T1634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.160791][ T1634] usb 3-1: Product: Ð’ [ 102.164863][ T1634] usb 3-1: Manufacturer: 慀黌ᆮ颋څ㰃ᤪ挃í‡í’‘Ω늘ꮹ댜뗢 [ 102.177015][ T1634] usb 3-1: SerialNumber: syz [ 102.204767][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 102.204781][ T36] audit: type=1400 audit(1762282898.315:540): avc: denied { execute } for pid=4957 comm="syz.3.1565" name="file1" dev="tmpfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.233540][ T36] audit: type=1400 audit(1762282898.315:541): avc: denied { execute_no_trans } for pid=4957 comm="syz.3.1565" path="/542/file1" dev="tmpfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.337119][ T365] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 102.358200][ T365] usb 2-1: device descriptor read/8, error -71 [ 102.390839][ T1634] usb 3-1: 0:2 : does not exist [ 102.397994][ T1634] usb 3-1: USB disconnect, device number 46 [ 102.412514][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.490263][ T365] usb 2-1: device descriptor read/8, error -71 [ 102.598397][ T365] usb usb2-port1: unable to enumerate USB device [ 102.690850][ T36] audit: type=1400 audit(1762282898.802:542): avc: denied { mounton } for pid=4972 comm="syz.0.1572" path="/syzcgroup/unified/syz0" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.779163][ T4981] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1574'. [ 102.809759][ T4981] GUP no longer grows the stack in syz.0.1574 (4981): 200000001000-200000c01000 (200000000000) [ 102.829330][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: syz.0.1574 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 102.829372][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.829393][ T4981] Call Trace: [ 102.829400][ T4981] [ 102.829408][ T4981] __dump_stack+0x21/0x30 [ 102.829448][ T4981] dump_stack_lvl+0x10c/0x190 [ 102.829473][ T4981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.829500][ T4981] ? find_vma+0xcd/0x110 [ 102.829518][ T4981] ? resched_curr+0x113/0x430 [ 102.829546][ T4981] dump_stack+0x19/0x20 [ 102.829569][ T4981] __get_user_pages+0x1e34/0x22d0 [ 102.829593][ T4981] ? __kasan_check_write+0x18/0x20 [ 102.829623][ T4981] ? down_read_killable+0x79/0xf0 [ 102.829645][ T4981] ? populate_vma_page_range+0x230/0x230 [ 102.829667][ T4981] ? kernel_text_address+0xa9/0xe0 [ 102.829691][ T4981] ? unwind_get_return_address+0x51/0x90 [ 102.829714][ T4981] __gup_longterm_locked+0xcb1/0x1580 [ 102.829740][ T4981] ? stack_depot_save_flags+0x38/0x800 [ 102.829762][ T4981] gup_fast_fallback+0x12ae/0x14a0 [ 102.829791][ T4981] ? kasan_save_track+0x3e/0x80 [ 102.829810][ T4981] ? __kmalloc_cache_noprof+0x24c/0x490 [ 102.829829][ T4981] ? futex_lock_pi+0x77a/0xa10 [ 102.829854][ T4981] ? get_user_pages_fast_only+0xc0/0xc0 [ 102.829880][ T4981] get_user_pages_fast+0x73/0xb0 [ 102.829904][ T4981] get_futex_key+0x24d/0x930 [ 102.829922][ T4981] ? __cfi_get_futex_key+0x10/0x10 [ 102.829941][ T4981] ? futex_lock_pi+0x77a/0xa10 [ 102.829962][ T4981] ? futex_setup_timer+0xb4/0xd0 [ 102.829980][ T4981] futex_lock_pi+0x1c0/0xa10 [ 102.830002][ T4981] ? __cfi_futex_lock_pi+0x10/0x10 [ 102.830024][ T4981] ? __kasan_check_write+0x18/0x20 [ 102.830050][ T4981] ? wake_up_q+0x10f/0x1c0 [ 102.830078][ T4981] ? __cfi_futex_wake_mark+0x10/0x10 [ 102.830101][ T4981] ? __seccomp_filter+0x433/0x1a70 [ 102.830120][ T4981] do_futex+0x25c/0x500 [ 102.830138][ T4981] ? __cfi_do_futex+0x10/0x10 [ 102.830157][ T4981] ? vm_mmap_pgoff+0x145/0x4e0 [ 102.830175][ T4981] __se_sys_futex+0x28f/0x300 [ 102.830195][ T4981] ? __x64_sys_futex+0x110/0x110 [ 102.830217][ T4981] __x64_sys_futex+0xe9/0x110 [ 102.830236][ T4981] x64_sys_call+0x227f/0x2ee0 [ 102.830262][ T4981] do_syscall_64+0x58/0xf0 [ 102.830286][ T4981] ? clear_bhb_loop+0x50/0xa0 [ 102.830307][ T4981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.830327][ T4981] RIP: 0033:0x7f5fc2b8f6c9 [ 102.830348][ T4981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.830364][ T4981] RSP: 002b:00007f5fc3aa3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.830387][ T4981] RAX: ffffffffffffffda RBX: 00007f5fc2de5fa0 RCX: 00007f5fc2b8f6c9 [ 102.830403][ T4981] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 102.830416][ T4981] RBP: 00007f5fc2c11f91 R08: 0000000000000000 R09: 0000000000000002 [ 102.830430][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.830442][ T4981] R13: 00007f5fc2de6038 R14: 00007f5fc2de5fa0 R15: 00007ffc3f71e408 [ 102.830459][ T4981] [ 103.252809][ T4998] netlink: 'syz.0.1580': attribute type 32 has an invalid length. [ 103.395391][ T5006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.395707][ T5006] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 103.443203][ T5023] rust_binder: 685: no such ref 3 [ 103.456187][ T5023] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.463469][ T5023] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.470497][ T5023] rust_binder: Write failure EFAULT in pid:685 [ 103.471124][ T5023] FAT-fs (rnullb0): bogus number of reserved sectors [ 103.471282][ T5024] __vm_enough_memory: pid: 5024, comm: syz.2.1589, bytes: 18014402804453376 not enough memory for the allocation [ 103.477603][ T5023] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 103.563296][ T5033] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 103.743311][ T5079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.746306][ T5079] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 103.800284][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.809099][ T36] audit: type=1400 audit(1762282899.918:543): avc: denied { listen } for pid=5098 comm="syz.3.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.835266][ T36] audit: type=1400 audit(1762282899.918:544): avc: denied { accept } for pid=5098 comm="syz.3.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.864251][ T5102] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 103.914274][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 104.079375][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 104.085700][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.094112][ T9] usb 3-1: config 0 has no interface number 0 [ 104.100369][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 104.108634][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.118011][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.126125][ T9] usb 3-1: Product: syz [ 104.130386][ T9] usb 3-1: Manufacturer: syz [ 104.135145][ T9] usb 3-1: SerialNumber: syz [ 104.146093][ T9] usb 3-1: config 0 descriptor?? [ 104.152423][ T9] smsc75xx v1.0.0 [ 104.704763][ T5118] binder: Bad value for 'stats' [ 104.732696][ T5122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.738150][ T5122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.744673][ T5122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:707 [ 104.772190][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 104.792710][ T5126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.805497][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.815543][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 104.828253][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 104.838573][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 104.849848][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 104.865953][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 105.068884][ T5140] __vm_enough_memory: pid: 5140, comm: syz.1.1632, bytes: 18014402804453376 not enough memory for the allocation [ 105.081169][ T5139] __vm_enough_memory: pid: 5139, comm: syz.1.1632, bytes: 18014402804453376 not enough memory for the allocation [ 105.106904][ T5143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1633'. [ 105.118753][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.285497][ T5149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 105.342149][ T5158] 9pnet_fd: Insufficient options for proto=fd [ 105.928246][ T5171] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 105.998012][ T5185] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 106.126356][ T5194] bridge0: port 3(erspan0) entered blocking state [ 106.133003][ T5194] bridge0: port 3(erspan0) entered disabled state [ 106.139498][ T5194] erspan0: entered allmulticast mode [ 106.145312][ T5194] erspan0: entered promiscuous mode [ 106.150735][ T5194] bridge0: port 3(erspan0) entered blocking state [ 106.157212][ T5194] bridge0: port 3(erspan0) entered forwarding state [ 106.165286][ T36] audit: type=1400 audit(1762282902.200:545): avc: denied { execute } for pid=5044 comm="syz.2.1601" path="pipe:[790]" dev="pipefs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.165776][ T5194] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 106.195655][ T5194] rust_binder: Write failure EINVAL in pid:684 [ 106.514892][ T5196] /dev/rnullb0: Can't lookup blockdev [ 106.556244][ T5201] overlayfs: failed to clone lowerpath [ 106.570633][ T5200] overlayfs: failed to clone lowerpath [ 106.598596][ T36] audit: type=1326 audit(1762282902.618:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc2b8f6c9 code=0x7ffc0000 [ 106.622069][ T36] audit: type=1326 audit(1762282902.618:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc2b8f6c9 code=0x7ffc0000 [ 106.649920][ T36] audit: type=1326 audit(1762282902.618:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5fc2b8f6c9 code=0x7ffc0000 [ 106.673830][ T36] audit: type=1326 audit(1762282902.618:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc2b8f6c9 code=0x7ffc0000 [ 106.676443][ T5210] 9pnet_fd: Insufficient options for proto=fd [ 106.745288][ T5221] /dev/sr0: Can't lookup blockdev [ 106.750562][ T5221] /dev/sr0: Can't lookup blockdev [ 107.199789][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.199841][ T651] Bluetooth: hci0: command 0x1003 tx timeout [ 107.693691][ T9] usb 3-1: USB disconnect, device number 47 [ 107.742979][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 107.742995][ T36] audit: type=1400 audit(1762282903.728:586): avc: denied { setcheckreqprot } for pid=5289 comm="syz.2.1685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.770110][ T5290] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1685'. [ 107.805339][ T5297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.805700][ T5297] rust_binder: Error in use_page_slow: ESRCH [ 107.812146][ T5297] rust_binder: use_range failure ESRCH [ 107.830699][ T5297] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 107.836221][ T5297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.858623][ T5297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:694 [ 107.868502][ T36] audit: type=1400 audit(1762282903.864:587): avc: denied { map } for pid=5302 comm="syz.1.1691" path="socket:[23211]" dev="sockfs" ino=23211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.945392][ T5309] overlayfs: missing 'lowerdir' [ 108.079389][ T5320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.143334][ T5334] fuseblk: Bad value for 'user_id' [ 108.156470][ T5334] fuseblk: Bad value for 'user_id' [ 108.179776][ T5339] /dev/nbd0: Can't lookup blockdev [ 108.235831][ T5353] overlay: Unknown parameter 'audit' [ 108.348843][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 108.365551][ T36] audit: type=1400 audit(1762282904.342:588): avc: denied { mounton } for pid=5356 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.432788][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.439875][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.447262][ T5356] bridge_slave_0: entered allmulticast mode [ 108.453810][ T5356] bridge_slave_0: entered promiscuous mode [ 108.478885][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.488727][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.495848][ T5356] bridge_slave_1: entered allmulticast mode [ 108.502228][ T5356] bridge_slave_1: entered promiscuous mode [ 108.515134][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.524361][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.532424][ T9] usb 2-1: Product: syz [ 108.536864][ T9] usb 2-1: Manufacturer: syz [ 108.541514][ T9] usb 2-1: SerialNumber: syz [ 108.609557][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.616643][ T5356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.623925][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.630963][ T5356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.656654][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.664134][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.686837][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.693901][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.718047][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.725130][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.732876][ T36] audit: type=1400 audit(1762282904.693:589): avc: denied { create } for pid=5366 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.775048][ T5356] veth0_vlan: entered promiscuous mode [ 108.790210][ T5356] veth1_macvtap: entered promiscuous mode [ 108.815103][ T36] audit: type=1400 audit(1762282904.781:590): avc: denied { mounton } for pid=5356 comm="syz-executor" path="/root/syzkaller.0wtzmo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.858430][ T5378] 9pnet: Could not find request transport: zd [ 109.020788][ T5389] rust_binder: Error while translating object. [ 109.020844][ T5389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 109.027475][ T5389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2 [ 109.761320][ T36] audit: type=1326 audit(1762282905.700:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8778f6c9 code=0x7ffc0000 [ 109.801257][ T36] audit: type=1326 audit(1762282905.700:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8778f6c9 code=0x7ffc0000 [ 109.803527][ T5407] rust_binder: Error while translating object. [ 109.825410][ T36] audit: type=1326 audit(1762282905.700:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8778f6c9 code=0x7ffc0000 [ 109.851708][ T5407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 109.854997][ T36] audit: type=1326 audit(1762282905.700:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8778f6c9 code=0x7ffc0000 [ 109.862232][ T5407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 109.864409][ T36] audit: type=1326 audit(1762282905.700:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fec8778f6c9 code=0x7ffc0000 [ 109.940086][ T5409] fuseblk: Bad value for 'fd' [ 109.964318][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 109.973613][ T5412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 109.973637][ T5412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:18 [ 110.010415][ T5418] 9pnet: Could not find request transport: xen [ 110.052466][ T5423] netlink: 'syz.3.1725': attribute type 33 has an invalid length. [ 110.060906][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 110.090053][ T5428] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.498513][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.505619][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.512909][ T5465] bridge_slave_0: entered allmulticast mode [ 110.519440][ T5465] bridge_slave_0: entered promiscuous mode [ 110.525896][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.533164][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.540390][ T5465] bridge_slave_1: entered allmulticast mode [ 110.546735][ T5465] bridge_slave_1: entered promiscuous mode [ 110.617583][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.624668][ T5465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.631953][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.638968][ T5465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.646462][ T365] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.660618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.668142][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.677927][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.684983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.699880][ T46] bridge_slave_1: left allmulticast mode [ 110.705598][ T46] bridge_slave_1: left promiscuous mode [ 110.711210][ T46] +$<¶: port 2(bridge_slave_1) entered disabled state [ 110.718815][ T46] bridge_slave_0: left allmulticast mode [ 110.724611][ T46] bridge_slave_0: left promiscuous mode [ 110.730268][ T46] +$<¶: port 1(bridge_slave_0) entered disabled state [ 110.738078][ T46] tipc: Resetting bearer [ 110.751497][ T46] tipc: Disabling bearer [ 110.796789][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.803828][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.811329][ T365] usb 4-1: Using ep0 maxpacket: 16 [ 110.817733][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.833111][ T5465] veth0_vlan: entered promiscuous mode [ 110.837197][ T365] usb 4-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 110.844774][ T5465] veth1_macvtap: entered promiscuous mode [ 110.857289][ T46] tipc: Disabling bearer [ 110.857485][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.866295][ T46] tipc: Left network mode [ 110.881158][ T365] usb 4-1: config 0 descriptor?? [ 110.897494][ T46] veth1_macvtap: left promiscuous mode [ 110.903030][ T46] >: left promiscuous mode [ 111.022480][ T5491] overlayfs: missing 'lowerdir' [ 111.099628][ T5496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1742'. [ 111.175057][ T9] usb 2-1: USB disconnect, device number 40 [ 111.222099][ T5505] overlayfs: failed to resolve './file1/file0': -13 [ 111.307265][ T365] wacom 0003:056A:006B.000B: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 111.338332][ T365] wacom 0003:056A:006B.000B: hidraw0: USB HID v0.02 Device [HID 056a:006b] on usb-dummy_hcd.3-1/input0 [ 111.375003][ T365] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:006B.000B/input/input10 [ 111.498060][ T5513] 9pnet_fd: Insufficient options for proto=fd [ 111.519275][ T5464] SELinux: security_context_str_to_sid () failed with errno=-22 [ 111.538236][ T9] usb 4-1: USB disconnect, device number 8 [ 112.037211][ T5573] overlayfs: failed to clone upperpath [ 112.088391][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.088420][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.101306][ T5585] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 112.118775][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.118793][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.128079][ T5576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.128770][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.139496][ T5576] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 112.150755][ T5585] rust_binder: 48: no such ref 1 [ 112.157702][ T5582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.192554][ T5600] incfs: Error accessing: ./file0. [ 112.208186][ T5600] incfs: mount failed -20 [ 112.232723][ T5606] rust_binder: Write failure EFAULT in pid:748 [ 112.233236][ T5606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.302023][ T5625] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 112.497957][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.663465][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 112.672608][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.680616][ T9] usb 4-1: Product: syz [ 112.684821][ T9] usb 4-1: Manufacturer: syz [ 112.689413][ T9] usb 4-1: SerialNumber: syz [ 113.216471][ T5644] veth0_virt_wifi: mtu less than device minimum [ 113.241053][ T5646] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1799'. [ 114.266405][ T5680] exFAT-fs (rnullb0): invalid boot record signature [ 114.273115][ T5680] exFAT-fs (rnullb0): failed to read boot sector [ 114.279476][ T5680] exFAT-fs (rnullb0): failed to recognize exfat type [ 114.295194][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 114.295210][ T36] audit: type=1400 audit(1762282910.151:623): avc: denied { remount } for pid=5681 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 114.337609][ T5686] rust_binder: Write failure EFAULT in pid:771 [ 114.457939][ T5691] netlink: 'syz.1.1815': attribute type 27 has an invalid length. [ 115.257893][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 115.266863][ T5693] erspan0: default FDB implementation only supports local addresses [ 115.275361][ T5693] FAT-fs (rnullb0): bogus number of reserved sectors [ 115.282131][ T5693] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 115.317096][ T5699] input: syz0 as /devices/virtual/input/input13 [ 115.323969][ T9] usb 4-1: USB disconnect, device number 9 [ 115.363092][ T5708] overlay: ./file0 is not a directory [ 115.994427][ T5741] fuseblk: Bad value for 'fd' [ 116.139171][ T1634] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 116.271061][ T1634] usb 2-1: device descriptor read/64, error -71 [ 116.423773][ T36] audit: type=1326 audit(1762282912.248:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.0.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7fc00000 [ 116.459904][ T5748] 9pnet_fd: Insufficient options for proto=fd [ 116.514589][ T1634] usb 2-1: device descriptor read/64, error -71 [ 116.544316][ T5759] batadv_slave_1: entered promiscuous mode [ 116.551102][ T5759] batadv_slave_1: left promiscuous mode [ 116.768269][ T1634] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 116.900118][ T1634] usb 2-1: device descriptor read/64, error -71 [ 117.109304][ T36] audit: type=1400 audit(1762282912.918:625): avc: denied { map } for pid=5787 comm="syz.0.1851" path="socket:[25216]" dev="sockfs" ino=25216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 117.143643][ T1634] usb 2-1: device descriptor read/64, error -71 [ 117.251635][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1853'. [ 117.255292][ T1634] usb usb2-port1: attempt power cycle [ 117.266035][ T36] audit: type=1400 audit(1762282913.076:626): avc: denied { bpf } for pid=5795 comm="syz.0.1853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.478182][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.478230][ T651] Bluetooth: hci0: command 0x1003 tx timeout [ 117.505501][ T5803] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 117.522754][ T5805] input: syz1 as /devices/virtual/input/input14 [ 117.555396][ T36] audit: type=1400 audit(1762282913.362:627): avc: denied { accept } for pid=5810 comm="syz.3.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.555690][ T5811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 117.576982][ T36] audit: type=1400 audit(1762282913.362:628): avc: denied { write } for pid=5810 comm="syz.3.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.579041][ T5811] rust_binder: 5811 RLIMIT_NICE not set [ 117.606798][ T5811] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 117.612405][ T5811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 117.620477][ T5811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:72 [ 117.630265][ T1634] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 117.645790][ T5813] binder: Unknown parameter 'uid>00000000000000000000' [ 117.647789][ T5814] binder: Unknown parameter 'uid>00000000000000000000' [ 117.661685][ T1634] usb 2-1: device descriptor read/8, error -71 [ 117.683636][ T5822] rust_binder: Failed copying remainder into alloc: EFAULT [ 117.683653][ T5822] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 117.690876][ T5822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.699199][ T5822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:83 [ 117.803581][ T1634] usb 2-1: device descriptor read/8, error -71 [ 117.965211][ T5844] fuse: Bad value for 'fd' [ 117.975049][ T365] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 118.056085][ T1634] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 118.077315][ T1634] usb 2-1: device descriptor read/8, error -71 [ 118.138207][ T365] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.149074][ T365] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 118.160833][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.170788][ T365] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.171139][ T5857] 9pnet_fd: Insufficient options for proto=fd [ 118.185477][ T365] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 118.203538][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.211700][ T365] usb 4-1: Product: syz [ 118.215880][ T365] usb 4-1: Manufacturer: syz [ 118.220647][ T365] usb 4-1: SerialNumber: syz [ 118.226084][ T1634] usb 2-1: device descriptor read/8, error -71 [ 118.232609][ T365] usb 4-1: config 0 descriptor?? [ 118.339793][ T1634] usb usb2-port1: unable to enumerate USB device [ 118.441299][ T9] usb 4-1: USB disconnect, device number 10 [ 118.599378][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 118.950229][ T5886] rust_binder: Read failure Err(EAGAIN) in pid:795 [ 118.990430][ T5888] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1884'. [ 119.005883][ T5888] 0ªî{X¹¦: renamed from bridge_slave_1 (while UP) [ 119.013305][ T5888] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 119.110605][ T5894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.117809][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 119.137903][ T5897] input: syz1 as /devices/virtual/input/input15 [ 119.156043][ T5899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.392904][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 119.554806][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 119.561034][ T9] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 119.569199][ T9] usb 2-1: config 0 has no interface number 0 [ 119.575313][ T9] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 119.585367][ T9] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 119.596586][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 119.605659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.613650][ T9] usb 2-1: Product: syz [ 119.617814][ T9] usb 2-1: Manufacturer: syz [ 119.622403][ T9] usb 2-1: SerialNumber: syz [ 119.627565][ T9] usb 2-1: config 0 descriptor?? [ 119.632820][ T5899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.640023][ T5899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.647696][ T9] usb-storage 2-1:0.20: USB Mass Storage device detected [ 119.655424][ T9] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 119.694400][ T5907] rust_binder: Error while translating object. [ 119.694448][ T5907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 119.700669][ T5907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:93 [ 119.721137][ T36] audit: type=1400 audit(1762282915.504:629): avc: denied { write } for pid=5909 comm="syz.3.1891" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 119.753673][ T36] audit: type=1400 audit(1762282915.514:630): avc: denied { create } for pid=5909 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.786083][ T5914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1892'. [ 119.806836][ T5918] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.812133][ T5920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5920 comm=syz.0.1895 [ 119.857228][ T9] scsi host1: usb-storage 2-1:0.20 [ 119.984402][ T5932] overlayfs: failed to clone lowerpath [ 119.990641][ T5935] overlayfs: failed to clone upperpath [ 120.011110][ T5937] netlink: 'syz.0.1901': attribute type 4 has an invalid length. [ 120.021308][ T5937] netlink: 'syz.0.1901': attribute type 17 has an invalid length. [ 120.038153][ T5939] can: request_module (can-proto-0) failed. [ 120.115375][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.126543][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.138837][ T5952] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 120.209076][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 120.227385][ T36] audit: type=1400 audit(1762282915.998:631): avc: denied { ioctl } for pid=5972 comm="syz.3.1914" path="pid:[4026532544]" dev="nsfs" ino=4026532544 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.232593][ T5973] __vm_enough_memory: pid: 5973, comm: syz.3.1914, bytes: 18014402804453376 not enough memory for the allocation [ 120.264187][ T5974] __vm_enough_memory: pid: 5974, comm: syz.3.1914, bytes: 18014402804453376 not enough memory for the allocation [ 120.377718][ T5985] rust_binder: 133: no such ref 3 [ 120.382914][ T5985] rust_binder: 133: no such ref 1 [ 120.399784][ T5987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 120.399806][ T5987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:135 [ 120.409732][ T5987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.547663][ T5998] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 120.554270][ T5998] rust_binder: Read failure Err(EFAULT) in pid:143 [ 120.601280][ T65] usb 2-1: USB disconnect, device number 45 [ 121.069575][ T36] audit: type=1400 audit(1762282916.829:632): avc: denied { create } for pid=6040 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.093022][ T6041] 9pnet_fd: Insufficient options for proto=fd [ 121.140867][ T6046] cgroup: Name too long [ 121.152367][ T6051] netlink: 1292 bytes leftover after parsing attributes in process `syz.0.1943'. [ 121.280536][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 121.423478][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.423505][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.435884][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.436545][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.442966][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.450053][ T6093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.477811][ T6106] tmpfs: Unknown parameter 'measure' [ 121.487718][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 121.518100][ T6114] overlayfs: failed to clone upperpath [ 121.629006][ T6131] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 121.660156][ T36] audit: type=1400 audit(1762282917.423:633): avc: denied { relabelto } for pid=6130 comm="syz.3.1969" name="file0" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 121.719917][ T36] audit: type=1400 audit(1762282917.423:634): avc: denied { associate } for pid=6130 comm="syz.3.1969" name="file0" dev="tmpfs" ino=326 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 121.778450][ T6140] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 121.802652][ T6143] 9pnet_fd: Insufficient options for proto=fd [ 121.962754][ T6159] cgroup2: Unknown parameter 'cpu' [ 122.103099][ T1634] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 122.184903][ T6203] tmpfs: Unknown parameter 'hܽ€w.gÄÕ¹en’îÑmGuge' [ 122.234462][ T1634] usb 4-1: device descriptor read/64, error -71 [ 122.264764][ T365] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 122.417454][ T365] usb 2-1: No LPM exit latency info found, disabling LPM. [ 122.429448][ T365] usb 2-1: config 4 has an invalid interface number: 33 but max is 3 [ 122.437586][ T365] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 122.447680][ T365] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 122.456533][ T365] usb 2-1: config 4 has no interface number 0 [ 122.462663][ T365] usb 2-1: config 4 interface 33 altsetting 6 has an endpoint descriptor with address 0x24, changing to 0x4 [ 122.474150][ T365] usb 2-1: config 4 interface 33 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 122.487044][ T365] usb 2-1: config 4 interface 33 has no altsetting 0 [ 122.493776][ T1634] usb 4-1: device descriptor read/64, error -71 [ 122.739984][ T1634] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 122.870700][ T1634] usb 4-1: device descriptor read/64, error -71 [ 123.113169][ T1634] usb 4-1: device descriptor read/64, error -71 [ 123.224658][ T1634] usb usb4-port1: attempt power cycle [ 123.310049][ T6387] wireguard: wg0: Could not create IPv4 socket [ 123.327942][ T6390] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 123.353554][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2017'. [ 123.567333][ T1634] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 123.598614][ T1634] usb 4-1: device descriptor read/8, error -71 [ 123.657715][ T6462] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.729747][ T1634] usb 4-1: device descriptor read/8, error -71 [ 123.971042][ T1634] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 123.992161][ T1634] usb 4-1: device descriptor read/8, error -71 [ 124.123415][ T1634] usb 4-1: device descriptor read/8, error -71 [ 124.233504][ T1634] usb usb4-port1: unable to enumerate USB device [ 124.905677][ T6501] exFAT-fs (rnullb0): invalid boot record signature [ 124.912386][ T6501] exFAT-fs (rnullb0): failed to read boot sector [ 124.918730][ T6501] exFAT-fs (rnullb0): failed to recognize exfat type [ 124.942028][ T6503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=6503 comm=syz.3.2056 [ 125.008533][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 125.016473][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.054415][ T365] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=cc.79 [ 125.064017][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.072201][ T365] usb 2-1: Product: п [ 125.073767][ T6509] rust_binder: 817: no such ref 1 [ 125.076383][ T365] usb 2-1: Manufacturer: ã« [ 125.081312][ T6509] rust_binder: 817: no such ref 1 [ 125.087441][ T365] usb 2-1: can't set config #4, error -71 [ 125.096697][ T6509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:817 [ 125.098256][ T365] usb 2-1: USB disconnect, device number 46 [ 125.242114][ T395] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 125.394453][ T395] usb 4-1: config 0 has no interfaces? [ 125.400761][ T395] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.409999][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.418135][ T395] usb 4-1: SerialNumber: syz [ 125.423745][ T395] usb 4-1: config 0 descriptor?? [ 125.443796][ T365] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 125.594980][ T365] usb 2-1: Using ep0 maxpacket: 16 [ 125.601270][ T365] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 125.609500][ T365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.619596][ T365] usb 2-1: config 0 has no interface number 0 [ 125.627140][ T365] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 125.636270][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.644253][ T365] usb 2-1: Product: syz [ 125.648591][ T365] usb 2-1: Manufacturer: syz [ 125.653174][ T365] usb 2-1: SerialNumber: syz [ 125.658320][ T365] usb 2-1: config 0 descriptor?? [ 125.664109][ T365] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 125.670475][ T365] usb 2-1: No valid video chain found. [ 125.846093][ T65] usb 4-1: USB disconnect, device number 15 [ 126.415074][ T36] audit: type=1400 audit(1762282922.130:635): avc: denied { map } for pid=6529 comm="syz.3.2066" path="socket:[28159]" dev="sockfs" ino=28159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.441746][ T36] audit: type=1400 audit(1762282922.130:636): avc: denied { accept } for pid=6529 comm="syz.3.2066" path="socket:[28159]" dev="sockfs" ino=28159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.703700][ T65] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 126.854843][ T65] usb 4-1: Invalid ep0 maxpacket: 16 [ 126.985821][ T65] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 127.136979][ T65] usb 4-1: Invalid ep0 maxpacket: 16 [ 127.142447][ T65] usb usb4-port1: attempt power cycle [ 127.489553][ T65] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 127.510032][ T65] usb 4-1: Invalid ep0 maxpacket: 16 [ 127.572396][ T6578] x_tables: unsorted entry at hook 2 [ 127.587204][ T36] audit: type=1400 audit(1762282923.291:637): avc: denied { read } for pid=6579 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.640614][ T65] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 127.661082][ T65] usb 4-1: Invalid ep0 maxpacket: 16 [ 127.666489][ T65] usb usb4-port1: unable to enumerate USB device [ 128.140521][ T365] usb 2-1: USB disconnect, device number 47 [ 128.170066][ T6600] 9pnet_fd: Insufficient options for proto=fd [ 128.302967][ T6611] rust_binder: 824: no such ref 4294967294 [ 128.345309][ T6612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2098'. [ 128.441698][ T6616] overlay: Bad value for 'verity' [ 128.457922][ T6616] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2099'. [ 128.561729][ T6630] overlayfs: failed to clone upperpath [ 129.176222][ T6643] rust_binder: Write failure EFAULT in pid:828 [ 129.227030][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 129.246914][ T6661] overlayfs: failed to clone upperpath [ 129.320145][ T36] audit: type=1400 audit(1762282925.009:638): avc: denied { create } for pid=6662 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 129.377062][ T6683] veth0: entered promiscuous mode [ 129.384842][ T6684] bridge0: entered allmulticast mode [ 129.397151][ T6684] veth0: left promiscuous mode [ 129.427943][ T6692] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.452892][ T6692] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.543471][ T36] audit: type=1400 audit(1762282925.228:639): avc: denied { create } for pid=6701 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.575406][ T6700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.575528][ T6700] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 129.621601][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 129.643120][ T6710] input: syz1 as /devices/virtual/input/input16 [ 130.022518][ T36] audit: type=1400 audit(1762282925.715:640): avc: denied { execmem } for pid=6730 comm="syz.2.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.055378][ T6733] tipc: Enabling of bearer rejected, failed to enable media [ 130.142095][ T36] audit: type=1400 audit(1762282925.834:641): avc: denied { create } for pid=6744 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.163110][ T6745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6745 comm=syz.2.2140 [ 130.176206][ T36] audit: type=1400 audit(1762282925.854:642): avc: denied { connect } for pid=6744 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.196549][ T6745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6745 comm=syz.2.2140 [ 130.208670][ T36] audit: type=1400 audit(1762282925.854:643): avc: denied { write } for pid=6744 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.217884][ T6745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6745 comm=syz.2.2140 [ 130.229083][ T36] audit: type=1400 audit(1762282925.854:644): avc: denied { nlmsg_write } for pid=6744 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.264916][ T6745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6745 comm=syz.2.2140 [ 130.278704][ T6745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6745 comm=syz.2.2140 [ 130.424783][ T6753] rust_binder: Write failure EFAULT in pid:198 [ 130.510168][ T6760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 130.516380][ T6760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 130.720611][ T65] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 130.861443][ T65] usb 2-1: device descriptor read/64, error -71 [ 131.102839][ T65] usb 2-1: device descriptor read/64, error -71 [ 131.178230][ T6772] netlink: 'syz.2.2150': attribute type 5 has an invalid length. [ 131.186037][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 131.203076][ T6774] !@ÿ: renamed from xfrm0 (while UP) [ 131.344253][ T65] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 131.474983][ T65] usb 2-1: device descriptor read/64, error -71 [ 131.716295][ T65] usb 2-1: device descriptor read/64, error -71 [ 131.827001][ T65] usb usb2-port1: attempt power cycle [ 132.168812][ T65] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 132.189775][ T65] usb 2-1: device descriptor read/8, error -71 [ 132.320534][ T65] usb 2-1: device descriptor read/8, error -71 [ 132.560815][ T65] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 132.581817][ T65] usb 2-1: device descriptor read/8, error -71 [ 132.712571][ T65] usb 2-1: device descriptor read/8, error -71 [ 132.822268][ T65] usb usb2-port1: unable to enumerate USB device [ 132.958579][ T6825] overlay: ./file0 is not a directory [ 132.964417][ T6825] overlay: ./file0 is not a directory [ 133.041625][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 133.041641][ T36] audit: type=1400 audit(1762282928.708:647): avc: denied { setattr } for pid=6857 comm="syz.2.2179" name="" dev="pipefs" ino=28881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.170941][ T6869] netlink: 'syz.0.2184': attribute type 27 has an invalid length. [ 133.504353][ T6876] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 133.518383][ T36] audit: type=1400 audit(1762282929.195:648): avc: denied { accept } for pid=6877 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 133.519596][ T6878] rust_binder: Write failure EFAULT in pid:855 [ 133.637191][ T6884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.697900][ T6885] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 134.305146][ T6915] raw_sendmsg: syz.0.2201 forgot to set AF_INET. Fix it! [ 134.479204][ T6920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.623417][ T6930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.629914][ T6931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.649954][ T6931] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 134.952360][ T365] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 135.082983][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 135.123799][ T365] usb 4-1: Using ep0 maxpacket: 16 [ 135.138006][ T365] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 135.151265][ T365] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 135.169916][ T365] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.182504][ T365] usb 4-1: config 0 has no interface number 0 [ 135.187742][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2213'. [ 135.188852][ T365] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 135.207607][ T365] usb 4-1: config 0 interface 104 has no altsetting 1 [ 135.214783][ T6954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2213'. [ 135.225144][ T365] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 135.236254][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.249773][ T365] usb 4-1: Product: syz [ 135.254079][ T365] usb 4-1: Manufacturer: syz [ 135.254734][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.258713][ T365] usb 4-1: SerialNumber: syz [ 135.275124][ T365] usb 4-1: config 0 descriptor?? [ 135.282280][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.292155][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 135.301225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.314238][ T9] usb 2-1: config 0 descriptor?? [ 135.594873][ T6989] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2228'. [ 135.726897][ T9] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 135.733898][ T9] lenovo 0003:17EF:6047.000D: item fetching failed at offset 3/5 [ 135.743599][ T9] lenovo 0003:17EF:6047.000D: hid_parse failed [ 135.755230][ T7002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.755256][ T7002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.755577][ T9] lenovo 0003:17EF:6047.000D: probe with driver lenovo failed with error -22 [ 135.895709][ T395] usb 2-1: USB disconnect, device number 52 [ 135.914398][ T7020] syz.1.2240 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.925831][ T7020] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2240'. [ 135.937174][ T36] audit: type=1400 audit(1762282931.604:649): avc: denied { bind } for pid=7019 comm="syz.1.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.956971][ T7020] Unsupported ieee802154 address type: 0 [ 136.243001][ T36] audit: type=1400 audit(1762282931.903:650): avc: denied { bind } for pid=7030 comm="syz.0.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.268190][ T395] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 136.278101][ T7033] overlayfs: failed to clone upperpath [ 136.399230][ T7049] bridge0: entered allmulticast mode [ 136.405148][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 136.414613][ T7049] bridge_slave_1: left allmulticast mode [ 136.420833][ T7049] bridge_slave_1: left promiscuous mode [ 136.426672][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.433998][ T395] usb 2-1: Using ep0 maxpacket: 16 [ 136.440487][ T7049] bridge_slave_0: left allmulticast mode [ 136.440579][ T395] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 136.456123][ T7049] bridge_slave_0: left promiscuous mode [ 136.462316][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.469948][ T395] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.483395][ T395] usb 2-1: config 1 interface 0 has no altsetting 0 [ 136.492476][ T7049] bridge0 (unregistering): left allmulticast mode [ 136.500591][ T395] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.519064][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.532342][ T395] usb 2-1: Product: syz [ 136.540908][ T395] usb 2-1: Manufacturer: syz [ 136.550649][ T395] usb 2-1: SerialNumber: syz [ 136.563241][ T7020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.574835][ T7020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.994199][ T395] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 137.008256][ T395] usb 2-1: USB disconnect, device number 53 [ 137.665325][ T365] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.675700][ T365] asix 4-1:0.104: probe with driver asix failed with error -71 [ 137.687290][ T365] usb 4-1: USB disconnect, device number 20 [ 137.783949][ T1634] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 137.914024][ T7100] overlayfs: failed to clone upperpath [ 137.934503][ T1634] usb 2-1: Using ep0 maxpacket: 32 [ 137.947695][ T1634] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.957130][ T1634] usb 2-1: config 0 has no interface number 0 [ 137.963315][ T1634] usb 2-1: config 0 interface 184 has no altsetting 0 [ 137.973386][ T1634] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.984038][ T1634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.992192][ T1634] usb 2-1: Product: syz [ 137.996508][ T1634] usb 2-1: Manufacturer: syz [ 138.001101][ T1634] usb 2-1: SerialNumber: syz [ 138.009687][ T1634] usb 2-1: config 0 descriptor?? [ 138.015437][ T1634] smsc75xx v1.0.0 [ 138.037767][ T13] bridge_slave_1: left allmulticast mode [ 138.043471][ T13] bridge_slave_1: left promiscuous mode [ 138.049393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.059596][ T13] bridge_slave_0: left allmulticast mode [ 138.065337][ T13] bridge_slave_0: left promiscuous mode [ 138.071006][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.166264][ T36] audit: type=1400 audit(1762282933.826:651): avc: denied { create } for pid=7105 comm="syz.3.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.186416][ T36] audit: type=1400 audit(1762282933.846:652): avc: denied { shutdown } for pid=7105 comm="syz.3.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.208203][ T36] audit: type=1400 audit(1762282933.846:653): avc: denied { setattr } for pid=7105 comm="syz.3.2272" name="[userfaultfd]" dev="anon_inodefs" ino=29347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.238236][ T13] veth1_macvtap: left promiscuous mode [ 138.243932][ T13] veth0_vlan: left promiscuous mode [ 138.246414][ T7110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7110 comm=syz.0.2273 [ 138.283114][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 138.543833][ T36] audit: type=1326 audit(1762282934.194:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.0.2285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 138.636414][ T1634] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 138.647278][ T1634] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.817696][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 138.858171][ T7090] rust_binder: Write failure EFAULT in pid:883 [ 138.968191][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.980521][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.991427][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.001416][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.008024][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 139.017062][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.025677][ T9] usb 4-1: config 0 descriptor?? [ 139.439603][ T9] input: HID 28bd:0905 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0905.000E/input/input17 [ 139.460058][ T9] uclogic 0003:28BD:0905.000E: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.3-1/input0 [ 139.472505][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.482651][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.490944][ T1634] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 139.501737][ T1634] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 139.511401][ T1634] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 139.520856][ T1634] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 139.640730][ T45] usb 4-1: USB disconnect, device number 21 [ 140.202205][ T36] audit: type=1400 audit(1762282935.839:655): avc: denied { create } for pid=7164 comm="syz.3.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 140.643712][ T1634] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 140.794133][ T1634] usb 4-1: Using ep0 maxpacket: 8 [ 140.804738][ T1634] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.823917][ T1634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.831970][ T1634] usb 4-1: Product: syz [ 140.836172][ T1634] usb 4-1: Manufacturer: syz [ 140.840758][ T1634] usb 4-1: SerialNumber: syz [ 141.057328][ T1634] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.071859][ T332] usb 2-1: USB disconnect, device number 54 [ 141.258937][ T36] audit: type=1400 audit(1762282936.905:656): avc: denied { read write } for pid=7168 comm="syz.3.2293" name="lp0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 141.302938][ T36] audit: type=1400 audit(1762282936.925:657): avc: denied { open } for pid=7168 comm="syz.3.2293" path="/dev/usb/lp0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 141.436094][ T332] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 141.518924][ T7177] netlink: 'syz.2.2296': attribute type 4 has an invalid length. [ 141.548197][ T36] audit: type=1326 audit(1762282937.195:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.2.2299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12c578f6c9 code=0x0 [ 141.573873][ T1634] usb 4-1: USB disconnect, device number 22 [ 141.596491][ T7198] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 141.604353][ T7198] netlink: 'syz.0.2303': attribute type 2 has an invalid length. [ 141.612985][ T332] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 141.622072][ T332] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 141.631774][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.646099][ T332] usb 2-1: config 0 descriptor?? [ 141.653905][ T332] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 141.825926][ T7168] usblp0: removed [ 141.857710][ T1634] usb 2-1: USB disconnect, device number 55 [ 141.923752][ T7220] tmpfs: Unknown parameter 'quota' [ 141.929813][ T7220] overlayfs: failed to clone upperpath [ 142.352686][ T7227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7227 comm=syz.3.2314 [ 142.375191][ T7229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.426582][ T7230] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 142.443326][ T7234] loop2: detected capacity change from 0 to 8388607 [ 142.461366][ T343] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 142.609514][ T1634] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 142.760833][ T1634] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 142.773187][ T1634] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.783320][ T1634] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 142.797548][ T1634] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 142.806638][ T1634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.814642][ T1634] usb 4-1: Product: syz [ 142.818798][ T1634] usb 4-1: Manufacturer: syz [ 142.823421][ T1634] usb 4-1: SerialNumber: syz [ 142.828520][ T1634] usb 4-1: config 0 descriptor?? [ 142.834249][ T1634] usb-storage 4-1:0.0: USB Mass Storage device detected [ 142.841917][ T1634] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 143.057018][ T332] usb 4-1: USB disconnect, device number 23 [ 143.319255][ T36] audit: type=1400 audit(1762282938.950:659): avc: denied { append } for pid=7264 comm="syz.1.2325" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.372001][ T36] audit: type=1326 audit(1762282939.010:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.2325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f911a18f6c9 code=0x0 [ 143.423063][ T36] audit: type=1400 audit(1762282939.059:661): avc: denied { ioctl } for pid=7264 comm="syz.1.2325" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.634660][ T7270] rust_binder: 249: no such ref 3 [ 143.639762][ T7270] rust_binder: inc_ref_done called when no active inc_refs [ 143.639776][ T7270] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.654229][ T7270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 143.664434][ T7273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252 [ 143.685685][ T7275] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 143.736508][ T36] audit: type=1400 audit(1762282939.369:662): avc: denied { mounton } for pid=7276 comm="syz.3.2329" path="/" dev="ramfs" ino=31861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 144.174534][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.183085][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.262192][ T36] audit: type=1400 audit(1762282939.887:663): avc: denied { create } for pid=7290 comm="syz.1.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.389179][ T36] audit: type=1400 audit(1762282940.017:664): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 144.408801][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 144.414088][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'. [ 144.426394][ T7295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:918 [ 144.487795][ T7297] input: syz1 as /devices/virtual/input/input18 [ 144.606987][ T7300] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 144.630051][ T7303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 144.630081][ T7303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:264 [ 144.720486][ T7312] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 144.730049][ T7312] rust_binder: Error while translating object. [ 144.738867][ T7312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.745298][ T7312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 145.246067][ T9] usb 2-1: device descriptor read/64, error -71 [ 145.517743][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.528704][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.538698][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.551580][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.560627][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.570108][ T9] usb 2-1: config 0 descriptor?? [ 145.691046][ T7355] tmpfs: Unknown parameter '' [ 145.749995][ T7363] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 145.768946][ T36] audit: type=1326 audit(1762282941.404:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 145.796093][ T36] audit: type=1326 audit(1762282941.404:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 145.819606][ T36] audit: type=1326 audit(1762282941.404:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 145.843103][ T36] audit: type=1326 audit(1762282941.404:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 145.923632][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'. [ 145.979761][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 145.987496][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 145.995305][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.003067][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.010481][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.018410][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.025780][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.033402][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.041014][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.057048][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.064693][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.096050][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.107015][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.115025][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.122628][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 146.130430][ T9] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 146.148813][ T9] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.254087][ T1634] usb 2-1: USB disconnect, device number 56 [ 146.460102][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'. [ 146.573094][ T7392] cgroup: Name too long [ 146.770306][ T7401] incfs: Options parsing error. -22 [ 146.775617][ T7401] incfs: mount failed -22 [ 146.781720][ T7401] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 147.029950][ T1634] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 147.181322][ T1634] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 147.190481][ T1634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.198912][ T1634] usb 2-1: config 0 descriptor?? [ 147.410887][ T1634] usbhid 2-1:0.0: can't add hid device: -71 [ 147.417589][ T1634] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.429939][ T1634] usb 2-1: USB disconnect, device number 57 [ 147.837978][ T7426] rust_binder: Write failure EINVAL in pid:276 [ 147.867576][ T7434] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 148.152559][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.161721][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.382629][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 148.416520][ T7443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.416715][ T7445] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 148.441674][ T7447] bridge0: port 3(syz_tun) entered blocking state [ 148.448138][ T7447] bridge0: port 3(syz_tun) entered disabled state [ 148.454658][ T7447] syz_tun: entered allmulticast mode [ 148.460237][ T7447] syz_tun: entered promiscuous mode [ 148.465640][ T7447] bridge0: port 3(syz_tun) entered blocking state [ 148.472036][ T7447] bridge0: port 3(syz_tun) entered forwarding state [ 148.512879][ T45] usb 4-1: device descriptor read/64, error -71 [ 148.612022][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 148.612039][ T36] audit: type=1400 audit(1762282944.228:688): avc: denied { map } for pid=7464 comm="syz.1.2394" path="socket:[31370]" dev="sockfs" ino=31370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.614096][ T7465] rust_binder: Write failure EFAULT in pid:960 [ 148.768375][ T7473] syzkaller0: entered promiscuous mode [ 148.773353][ T45] usb 4-1: device descriptor read/64, error -71 [ 148.774679][ T7473] syzkaller0: entered allmulticast mode [ 149.014498][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 149.024211][ T36] audit: type=1326 audit(1762282944.647:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.0.2398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 149.174087][ T45] usb 4-1: device descriptor read/64, error -71 [ 149.414533][ T45] usb 4-1: device descriptor read/64, error -71 [ 149.726220][ T7519] syz_tun: mtu less than device minimum [ 149.762355][ T36] audit: type=1400 audit(1762282945.386:690): avc: denied { mounton } for pid=7524 comm="syz.1.2413" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.787659][ T7525] __vm_enough_memory: pid: 7525, comm: syz.1.2413, bytes: 18014402804453376 not enough memory for the allocation [ 149.813528][ T36] audit: type=1326 audit(1762282945.436:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 149.837392][ T7528] __vm_enough_memory: pid: 7528, comm: syz.1.2414, bytes: 18014402804453376 not enough memory for the allocation [ 149.856684][ T45] usb usb4-port1: attempt power cycle [ 149.862402][ T36] audit: type=1326 audit(1762282945.436:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 149.875279][ T7530] kernel read not supported for file /policy (pid: 7530 comm: syz.1.2415) [ 149.885731][ T36] audit: type=1326 audit(1762282945.486:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 149.918315][ T36] audit: type=1326 audit(1762282945.486:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 149.942414][ T36] audit: type=1400 audit(1762282945.486:695): avc: denied { module_load } for pid=7529 comm="syz.1.2415" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 149.966402][ T36] audit: type=1326 audit(1762282945.546:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 149.989843][ T36] audit: type=1326 audit(1762282945.546:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c578f6c9 code=0x7fc00000 [ 150.205875][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 150.226894][ T45] usb 4-1: device descriptor read/8, error -71 [ 150.357166][ T45] usb 4-1: device descriptor read/8, error -71 [ 150.461182][ T7543] SELinux: security_context_str_to_sid () failed with errno=-22 [ 150.596519][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 150.617512][ T45] usb 4-1: device descriptor read/8, error -71 [ 150.747684][ T45] usb 4-1: device descriptor read/8, error -71 [ 150.857002][ T45] usb usb4-port1: unable to enumerate USB device [ 150.917029][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 151.067252][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 151.073479][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.084996][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 151.094049][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.102093][ T9] usb 2-1: Product: syz [ 151.106253][ T9] usb 2-1: Manufacturer: syz [ 151.110911][ T9] usb 2-1: SerialNumber: syz [ 151.116074][ T9] usb 2-1: config 0 descriptor?? [ 151.121735][ T9] usb 2-1: bad CDC descriptors [ 151.126617][ T9] usb 2-1: unsupported MDLM descriptors [ 151.323476][ T7545] rust_binder: Write failure EFAULT in pid:1000 [ 151.323804][ T65] usb 2-1: USB disconnect, device number 58 [ 151.558043][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 151.708279][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 151.714440][ T45] usb 4-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 151.724708][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.735227][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.744292][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.752290][ T45] usb 4-1: Product: syz [ 151.756445][ T45] usb 4-1: Manufacturer: à “ [ 151.761049][ T45] usb 4-1: SerialNumber: syz [ 151.968223][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.976766][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.987701][ T45] usb 4-1: 0:2 : does not exist [ 151.994728][ T45] usb 4-1: USB disconnect, device number 28 [ 152.108883][ T31] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 152.217678][ T7562] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2425'. [ 152.227147][ T7562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2425'. [ 152.261050][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.269207][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 152.277737][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.286797][ T31] usb 2-1: config 1 has no interface number 1 [ 152.292950][ T31] usb 2-1: too many endpoints for config 1 interface 2 altsetting 173: 56, using maximum allowed: 30 [ 152.303864][ T31] usb 2-1: config 1 interface 2 altsetting 173 endpoint 0x1 has an invalid bInterval 132, changing to 4 [ 152.315036][ T31] usb 2-1: config 1 interface 2 altsetting 173 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 152.326226][ T31] usb 2-1: config 1 interface 2 altsetting 173 has 1 endpoint descriptor, different from the interface descriptor's value: 56 [ 152.339304][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 4 [ 152.350379][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 152.361464][ T31] usb 2-1: config 1 interface 2 has no altsetting 2 [ 152.369434][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.378454][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.386482][ T31] usb 2-1: Product: syz [ 152.390666][ T31] usb 2-1: Manufacturer: syz [ 152.395278][ T31] usb 2-1: SerialNumber: syz [ 152.602734][ T7553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.602843][ T7553] rust_binder: 1003: no such ref 2 [ 152.621716][ T31] usb 2-1: USB disconnect, device number 59 [ 152.723607][ T7584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7584 comm=syz.2.2432 [ 152.731069][ T7585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7585 comm=syz.2.2432 [ 152.766359][ T7590] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 153.074029][ T7624] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 153.184710][ T7640] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 153.194590][ T7640] rust_binder: Write failure EINVAL in pid:322 [ 153.233218][ T7662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.239639][ T7662] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 153.270505][ T7662] rust_binder: 1007: no such ref 2 [ 153.280625][ T7662] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 153.300027][ T7673] incfs: mount failed -22 [ 153.530897][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 153.682069][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.693022][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.702772][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 153.711833][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.720232][ T31] usb 4-1: config 0 descriptor?? [ 154.331247][ T7664] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 154.402025][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 154.563279][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.574362][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.584137][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.593225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.601864][ T9] usb 2-1: config 0 descriptor?? [ 154.607711][ T9] hub 2-1:0.0: USB hub found [ 154.813670][ T9] hub 2-1:0.0: 1 port detected [ 155.344272][ T7712] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 155.669728][ T7714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1018 [ 155.671015][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.688799][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.773253][ T332] usb 2-1: USB disconnect, device number 60 [ 155.779230][ T9] hub 2-1:0.0: activate --> -19 [ 155.892676][ T7726] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2473'. [ 156.255570][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 156.261687][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.272767][ T31] usb 4-1: USB disconnect, device number 29 [ 156.297303][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.411886][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 156.411902][ T36] audit: type=1400 audit(1762282952.027:790): avc: denied { search } for pid=7736 comm="syz.2.2477" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 156.439789][ T36] audit: type=1400 audit(1762282952.027:791): avc: denied { write } for pid=7736 comm="syz.2.2477" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 157.125641][ T7745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.125958][ T7745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 157.220009][ T7756] rust_binder: Write failure EFAULT in pid:1031 [ 157.237547][ T7758] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 157.251114][ T36] audit: type=1400 audit(1762282952.866:792): avc: denied { setattr } for pid=7759 comm="syz.1.2487" path="/" dev="configfs" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.306556][ T7766] netlink: 'syz.1.2490': attribute type 29 has an invalid length. [ 157.314738][ T36] audit: type=1400 audit(1762282952.926:793): avc: denied { remount } for pid=7765 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.521165][ T7781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.521797][ T7781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.528423][ T7781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048 [ 157.562082][ T7782] netlink: 'syz.2.2496': attribute type 58 has an invalid length. [ 157.572562][ T7784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.579225][ T7782] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 157.581260][ T7784] cgroup: Unknown subsys name 'measure' [ 157.783287][ T7791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.785435][ T7791] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 157.808828][ T36] audit: type=1400 audit(1762282953.425:794): avc: denied { ioctl } for pid=7796 comm="syz.1.2502" path="/360/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.866686][ T7798] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 158.316459][ T651] Bluetooth: hci0: command 0x1003 tx timeout [ 158.316459][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.704726][ T7810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1068 [ 158.754468][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 158.773236][ T7818] +$<¶: renamed from bridge0 (while UP) [ 159.087215][ T65] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 159.137234][ T332] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 159.268388][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.279652][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.291015][ T65] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 159.300989][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.316195][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.327504][ T65] usb 4-1: config 0 descriptor?? [ 159.333258][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.344243][ T332] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 159.355505][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.365476][ T332] usb 2-1: config 0 descriptor?? [ 159.745647][ T65] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 159.752732][ T65] lenovo 0003:17EF:6047.0010: item fetching failed at offset 3/5 [ 159.760644][ T65] lenovo 0003:17EF:6047.0010: hid_parse failed [ 159.766836][ T65] lenovo 0003:17EF:6047.0010: probe with driver lenovo failed with error -22 [ 159.777617][ T332] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 159.784640][ T332] lenovo 0003:17EF:6047.0011: item fetching failed at offset 3/5 [ 159.792519][ T332] lenovo 0003:17EF:6047.0011: hid_parse failed [ 159.798706][ T332] lenovo 0003:17EF:6047.0011: probe with driver lenovo failed with error -22 [ 159.917023][ T36] audit: type=1400 audit(1762282955.523:795): avc: denied { unmount } for pid=7874 comm="syz.2.2526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 159.949417][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.958364][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.966837][ T7826] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 159.967275][ T31] usb 4-1: USB disconnect, device number 30 [ 159.983318][ T7824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.983411][ T7824] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 159.995069][ T65] usb 2-1: USB disconnect, device number 61 [ 160.253051][ T7889] overlayfs: failed to clone upperpath [ 160.539571][ T7907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.604522][ T7914] overlayfs: missing 'lowerdir' [ 160.626291][ T7916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.626663][ T7916] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 160.665120][ T7920] rust_binder: Write failure EFAULT in pid:1095 [ 160.690657][ T7925] /dev/rnullb0: Can't open blockdev [ 160.725166][ T7929] overlayfs: failed to clone upperpath [ 160.736396][ T7928] /dev/rnullb0: Can't open blockdev [ 161.466326][ T7978] can: request_module (can-proto-5) failed. [ 161.601054][ T7988] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 161.608186][ T7988] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 161.615245][ T7988] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 161.623906][ T7988] rust_binder: pid 7988 performed invalid decrement on ref [ 161.643772][ T7994] usb usb8: usbfs: process 7994 (syz.1.2566) did not claim interface 0 before use [ 161.653476][ T7994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 161.653495][ T7994] rust_binder: Read failure Err(EFAULT) in pid:1107 [ 161.674171][ T8001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.681727][ T36] audit: type=1400 audit(1762282957.292:796): avc: denied { read write } for pid=8000 comm="syz.1.2568" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.711583][ T36] audit: type=1400 audit(1762282957.292:797): avc: denied { open } for pid=8000 comm="syz.1.2568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.734900][ T36] audit: type=1400 audit(1762282957.292:798): avc: denied { ioctl } for pid=8000 comm="syz.1.2568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.919647][ T365] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 162.070801][ T365] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.080613][ T365] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.093414][ T365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.100047][ T365] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 162.109059][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.117631][ T365] usb 2-1: config 0 descriptor?? [ 162.209651][ T36] audit: type=1326 audit(1762282957.811:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.0.2569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 162.525336][ T365] saitek 0003:06A3:0621.0012: hidraw0: USB HID v80.01 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 162.724502][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.733042][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.740905][ T8001] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 162.741297][ T8007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.750871][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.764208][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.775538][ T789] usb 2-1: USB disconnect, device number 62 [ 162.785538][ T8011] rust_binder: Write failure EFAULT in pid:1117 [ 162.899874][ T8024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.906398][ T8025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.913267][ T8024] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 162.973527][ T8025] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 162.973738][ T8026] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 163.061671][ T36] audit: type=1400 audit(1762282958.671:800): avc: denied { sys_module } for pid=8031 comm="syz.0.2577" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.122905][ T8047] 9pnet_fd: Insufficient options for proto=fd [ 163.308927][ T8060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8060 comm=syz.0.2585 [ 163.330110][ T36] audit: type=1326 audit(1762282958.930:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.0.2586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 163.353086][ T36] audit: type=1326 audit(1762282958.930:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.0.2586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 163.581067][ T8072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2589'. [ 163.590146][ T36] audit: type=1400 audit(1762282959.190:803): avc: denied { nlmsg_read } for pid=8071 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.694273][ T36] audit: type=1400 audit(1762282959.300:804): avc: denied { getopt } for pid=8095 comm="syz.0.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.748830][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.1.2598 [ 163.772632][ T8107] overlayfs: missing 'lowerdir' [ 164.024131][ T8140] can: request_module (can-proto-6) failed. [ 164.243924][ T8144] 9pnet_fd: Insufficient options for proto=fd [ 164.324838][ T8153] netlink: 'syz.2.2613': attribute type 12 has an invalid length. [ 164.743163][ T36] audit: type=1400 audit(1762282960.349:805): avc: denied { ioctl } for pid=8191 comm="syz.1.2627" path="socket:[34521]" dev="sockfs" ino=34521 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.857141][ T8213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.857486][ T8214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.864022][ T8214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1174 [ 164.880671][ T8216] rust_binder: Write failure EFAULT in pid:1177 [ 164.896672][ T8218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.104147][ T8218] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 165.333178][ T8278] cgroup: name respecified [ 165.595122][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2666'. [ 165.810337][ T8308] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 166.051979][ T8346] futex_wake_op: syz.1.2681 tries to shift op by 144; fix this program [ 166.069911][ T8348] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 166.144805][ T8363] cgroup: subsys name conflicts with all [ 166.197665][ T8374] netlink: 'syz.0.2692': attribute type 46 has an invalid length. [ 166.321881][ T8389] overlayfs: failed to clone lowerpath [ 166.328510][ T8389] overlayfs: failed to clone lowerpath [ 166.737131][ T8466] overlayfs: failed to clone upperpath [ 167.193357][ T8491] netlink: 'syz.1.2730': attribute type 13 has an invalid length. [ 168.421693][ T8617] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2777'. [ 168.804723][ T8639] fuse: Bad value for 'fd' [ 168.810462][ T8639] fuse: Bad value for 'fd' [ 168.817731][ T8639] 9pnet_fd: Insufficient options for proto=fd [ 169.136214][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 169.136234][ T36] audit: type=1400 audit(1762282964.747:808): avc: denied { execute } for pid=8654 comm="syz.3.2791" path="/cpuacct.usage_percpu" dev="rootfs" ino=36583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 169.188350][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2794'. [ 169.326230][ T8666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8666 comm=syz.2.2796 [ 169.338727][ T8666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8666 comm=syz.2.2796 [ 169.456626][ T8677] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 169.547194][ T36] audit: type=1400 audit(1762282965.157:809): avc: denied { setopt } for pid=8703 comm="syz.0.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 170.343781][ T8760] fuse: Bad value for 'fd' [ 170.541775][ T8805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2848'. [ 170.575800][ T8809] 9pnet_fd: Insufficient options for proto=fd [ 170.605881][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'. [ 170.608884][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'. [ 170.872022][ T36] audit: type=1400 audit(1762282966.476:810): avc: denied { nlmsg_write } for pid=8841 comm="syz.0.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 170.904066][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 170.922528][ T8857] overlayfs: failed to clone upperpath [ 170.970513][ T8863] veth0: entered promiscuous mode [ 170.975747][ T8864] veth0: left promiscuous mode [ 171.037788][ T8884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8884 comm=syz.2.2875 [ 171.050661][ T8884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2875'. [ 171.062187][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 171.374313][ T8919] overlayfs: failed to clone upperpath [ 171.382170][ T8919] overlayfs: failed to clone upperpath [ 171.692216][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 172.146492][ T9047] 9pnet_fd: Insufficient options for proto=fd [ 172.656665][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 172.665625][ T9060] erspan0: default FDB implementation only supports local addresses [ 172.899437][ T9076] fuse: Bad value for 'fd' [ 172.899500][ T9077] fuse: Bad value for 'fd' [ 172.942076][ T9089] fuse: Bad value for 'fd' [ 173.456230][ T9108] tmpfs: Invalid uid '0x00000000ffffffff' [ 173.544645][ T9118] 9pnet_fd: Insufficient options for proto=fd [ 173.611480][ T9142] fuse: Bad value for 'fd' [ 174.141460][ T9152] vlan1: entered promiscuous mode [ 174.146673][ T9152] vlan1: entered allmulticast mode [ 174.151793][ T9152] veth0_vlan: entered allmulticast mode [ 174.165041][ T9152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 174.172086][ T9152] overlayfs: failed to set xattr on upper [ 174.177822][ T9152] overlayfs: ...falling back to redirect_dir=nofollow. [ 174.184676][ T9152] overlayfs: ...falling back to index=off. [ 174.190500][ T9152] overlayfs: ...falling back to uuid=null. [ 174.213379][ T36] audit: type=1400 audit(173.238:811): avc: denied { execmod } for pid=9155 comm="syz.1.2967" path="/dev/rnullb0" dev="tmpfs" ino=2186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.275113][ T9160] fuseblk: Bad value for 'fd' [ 174.487102][ T9189] overlayfs: failed to clone upperpath [ 174.492619][ T9188] overlayfs: failed to clone upperpath [ 174.934764][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.942047][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.949210][ T9228] bridge_slave_0: entered allmulticast mode [ 174.955569][ T9228] bridge_slave_0: entered promiscuous mode [ 174.962508][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.969675][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.976782][ T9228] bridge_slave_1: entered allmulticast mode [ 174.983157][ T9228] bridge_slave_1: entered promiscuous mode [ 175.063106][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.070202][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.077487][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.078332][ T9237] 9pnet_fd: Insufficient options for proto=fd [ 175.084511][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.113670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.121027][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.132876][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.139951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.153072][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.160130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.182289][ T9228] veth0_vlan: entered promiscuous mode [ 175.194344][ T9228] veth1_macvtap: entered promiscuous mode [ 175.260726][ T9262] rust_binder: Error while translating object. [ 175.260774][ T9262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 175.268522][ T9262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:7 [ 175.338835][ T36] audit: type=1400 audit(174.368:812): avc: denied { append } for pid=9280 comm="syz.2.3009" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.393442][ T36] audit: type=1400 audit(174.418:813): avc: denied { read write } for pid=9284 comm="syz.2.3011" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.426022][ T36] audit: type=1400 audit(174.418:814): avc: denied { open } for pid=9284 comm="syz.2.3011" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.449919][ T36] audit: type=1400 audit(174.418:815): avc: denied { map } for pid=9284 comm="syz.2.3011" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.473431][ T36] audit: type=1400 audit(174.418:816): avc: denied { execute } for pid=9284 comm="syz.2.3011" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.496560][ T36] audit: type=1326 audit(174.478:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.3012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac898f6c9 code=0x0 [ 175.539864][ T9296] __vm_enough_memory: pid: 9296, comm: syz.2.3014, bytes: 18014402804453376 not enough memory for the allocation [ 175.586448][ T9300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.586880][ T9299] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 175.600759][ T9299] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 175.608002][ T9299] rust_binder: 30: no such ref 1 [ 175.634961][ T9306] rust_binder: 37: no such ref 0 [ 175.640157][ T9307] rust_binder: 37: no such ref 0 [ 175.645416][ T9306] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 175.652693][ T9306] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 175.670503][ T36] audit: type=1400 audit(174.698:818): avc: denied { write } for pid=9308 comm="syz.2.3018" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.803924][ T9313] cgroup: Unknown subsys name 'measure' [ 175.935864][ T789] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 176.085880][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 176.091977][ T9320] fuse: Bad value for 'fd' [ 176.096748][ T789] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.105403][ T9319] netlink: 'syz.1.3022': attribute type 3 has an invalid length. [ 176.107950][ T789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.115877][ T9319] netlink: 944 bytes leftover after parsing attributes in process `syz.1.3022'. [ 176.122235][ T789] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 176.140239][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.149125][ T789] usb 3-1: config 0 descriptor?? [ 176.195476][ T9322] overlayfs: failed to clone lowerpath [ 176.217268][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3024'. [ 176.338910][ T9341] netlink: 'syz.3.3028': attribute type 64 has an invalid length. [ 176.346915][ T9341] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3028'. [ 176.356116][ T9311] sit0: entered promiscuous mode [ 176.362276][ T9311] netlink: 'syz.2.3019': attribute type 1 has an invalid length. [ 176.370276][ T9311] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3019'. [ 176.379342][ T9343] netlink: 'syz.3.3028': attribute type 64 has an invalid length. [ 176.390144][ T9343] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3028'. [ 176.395283][ T789] usbhid 3-1:0.0: can't add hid device: -71 [ 176.405176][ T789] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.419103][ T789] usb 3-1: USB disconnect, device number 48 [ 176.442531][ T9361] /dev/loop0: Can't lookup blockdev [ 176.481354][ T9371] netlink: 'syz.3.3038': attribute type 4 has an invalid length. [ 176.495849][ T9371] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3038'. [ 176.916043][ T9374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 176.938591][ T9381] __vm_enough_memory: pid: 9381, comm: syz.2.3041, bytes: 18014402804453376 not enough memory for the allocation [ 177.004033][ T9392] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 177.004050][ T9392] rust_binder: Error while translating object. [ 177.012908][ T9392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.019314][ T9392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 177.464617][ T9414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9414 comm=syz.1.3055 [ 177.486630][ T9414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3055'. [ 178.081655][ T9439] tipc: Started in network mode [ 178.086640][ T9439] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 178.095677][ T9439] tipc: Enabled bearer , priority 10 [ 178.173802][ T789] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 178.211142][ T9448] fuse: Bad value for 'fd' [ 178.249742][ T9454] SELinux: Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped). [ 178.258895][ T36] audit: type=1400 audit(2000000001.814:819): avc: denied { relabelto } for pid=9453 comm="syz.1.3071" name="file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ld_so_t:s0" [ 178.264872][ T9454] overlayfs: failed to clone lowerpath [ 178.284959][ T36] audit: type=1400 audit(2000000001.814:820): avc: denied { associate } for pid=9453 comm="syz.1.3071" name="file0" dev="tmpfs" ino=2897 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ld_so_t:s0" [ 178.313761][ T9455] overlay: Unknown parameter '//file0' [ 178.322930][ T789] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 178.337999][ T789] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.347155][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.355303][ T789] usb 3-1: Product: syz [ 178.359835][ T789] usb 3-1: Manufacturer: syz [ 178.364444][ T789] usb 3-1: SerialNumber: syz [ 178.425142][ T9478] netlink: 'syz.1.3079': attribute type 12 has an invalid length. [ 178.433366][ T9478] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3079'. [ 178.495154][ T9504] netlink: 'syz.0.3088': attribute type 27 has an invalid length. [ 178.647546][ T365] usb 3-1: USB disconnect, device number 49 [ 178.827079][ T9549] netlink: 'syz.0.3102': attribute type 27 has an invalid length. [ 179.096314][ T9555] rust_binder: Write failure EFAULT in pid:71 [ 179.155115][ T9569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.183523][ T9510] tipc: Node number set to 4269801488 [ 179.197945][ T9585] overlay: Bad value for 'uuid' [ 179.204084][ T9585] overlayfs: failed to clone lowerpath [ 179.368944][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 179.369063][ T36] audit: type=1326 audit(2000000002.957:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.398547][ T36] audit: type=1326 audit(2000000002.957:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.422065][ T36] audit: type=1326 audit(2000000002.957:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.445395][ T36] audit: type=1326 audit(2000000002.957:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.468901][ T36] audit: type=1326 audit(2000000002.957:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.492214][ T36] audit: type=1326 audit(2000000002.957:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.515446][ T36] audit: type=1326 audit(2000000002.957:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.538824][ T36] audit: type=1326 audit(2000000002.957:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.562074][ T36] audit: type=1326 audit(2000000002.957:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.585369][ T36] audit: type=1326 audit(2000000002.957:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac898f6c9 code=0x7ffc0000 [ 179.612052][ T9612] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 179.620172][ T9612] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 180.144948][ T9681] binder: Bad value for 'max' [ 180.496384][ T9695] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 180.802762][ T9755] netlink: 'syz.2.3165': attribute type 27 has an invalid length. [ 180.829772][ T9760] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.832565][ T9760] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 181.770676][ T9786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 181.861952][ T9786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:125 [ 181.904405][ T9788] SELinux: failed to load policy [ 181.932312][ T9793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 182.175140][ T9511] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 182.331339][ T9511] usb 3-1: Using ep0 maxpacket: 16 [ 182.337596][ T9511] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 182.349466][ T9511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 182.360701][ T9511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 182.372253][ T9511] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 182.381407][ T9511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.389433][ T9511] usb 3-1: Product: syz [ 182.393874][ T9511] usb 3-1: Manufacturer: syz [ 182.398528][ T9511] usb 3-1: SerialNumber: syz [ 182.404326][ T9808] futex_wake_op: syz.3.3182 tries to shift op by -1; fix this program [ 182.412922][ T9511] usb 3-1: config 0 descriptor?? [ 182.813071][ T31] usb 3-1: USB disconnect, device number 50 [ 183.201451][ T9863] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3201'. [ 183.210604][ T9863] gretap0: entered promiscuous mode [ 183.216685][ T9863] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3201'. [ 183.225625][ T9863] 0ªî{X¹¦: renamed from gretap0 [ 183.231103][ T9863] 0ªî{X¹¦: left promiscuous mode [ 183.236153][ T9863] 0ªî{X¹¦: entered allmulticast mode [ 183.242037][ T9863] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 183.428265][ T9890] netlink: 'syz.2.3208': attribute type 16 has an invalid length. [ 183.436121][ T9890] netlink: 'syz.2.3208': attribute type 2 has an invalid length. [ 183.443874][ T9890] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.3208'. [ 183.454158][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3208'. [ 183.635853][ T9904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.635876][ T9904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158 [ 183.757679][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3218'. [ 183.776323][ T9914] fuse: Unknown parameter 'PUEO¼ìú½2¨^ê ÕÜbÛom­ÿk~³/æ¯oöIYl’M íÖ…v4·JÄx]AàÕHX¤»ÙC}5Ø [ 183.776323][ T9914] 0x0000000000000003' [ 183.841840][ T9915] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3218'. [ 183.935846][ T31] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 183.937524][ T9919] fuse: Bad value for 'fd' [ 184.063116][ T31] usb 3-1: device descriptor read/64, error -71 [ 184.298249][ T31] usb 3-1: device descriptor read/64, error -71 [ 184.511160][ T9931] netlink: 'syz.0.3225': attribute type 4 has an invalid length. [ 184.533404][ T31] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 184.660894][ T31] usb 3-1: device descriptor read/64, error -71 [ 184.847162][ T9937] 9pnet_fd: Insufficient options for proto=fd [ 184.862411][ T9939] fuse: Bad value for 'fd' [ 184.896370][ T31] usb 3-1: device descriptor read/64, error -71 [ 185.004164][ T31] usb usb3-port1: attempt power cycle [ 185.029286][ T9942] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 185.037097][ T9942] netlink: 'syz.0.3230': attribute type 2 has an invalid length. [ 185.054583][ T9944] 9pnet_fd: Insufficient options for proto=fd [ 185.337604][ T31] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 185.358122][ T31] usb 3-1: device descriptor read/8, error -71 [ 185.485915][ T31] usb 3-1: device descriptor read/8, error -71 [ 185.720329][ T31] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 185.751522][ T31] usb 3-1: device descriptor read/8, error -71 [ 185.888243][ T31] usb 3-1: device descriptor read/8, error -71 [ 185.995218][ T31] usb usb3-port1: unable to enumerate USB device [ 186.116443][T10007] /dev/loop0: Can't lookup blockdev [ 186.642966][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 186.642983][ T36] audit: type=1400 audit(2000000010.392:875): avc: denied { read } for pid=10018 comm="syz.2.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.698363][T10028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:168 [ 186.698801][T10028] rust_binder: Error while translating object. [ 186.708118][T10028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.714355][T10028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 186.982916][T10054] tipc: Can't bind to reserved service type 0 [ 187.471820][T10089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 187.525365][ T36] audit: type=1400 audit(2000000011.287:876): avc: denied { remount } for pid=10088 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.762906][T10108] overlayfs: failed to clone lowerpath [ 187.769160][T10108] overlayfs: failed to clone lowerpath [ 187.783184][T10110] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3290'. [ 187.792275][T10110] gretap0: entered promiscuous mode [ 187.798359][T10110] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3290'. [ 187.807374][T10110] 0ªî{X¹¦: renamed from gretap0 [ 187.812841][T10110] 0ªî{X¹¦: left promiscuous mode [ 187.817905][T10110] 0ªî{X¹¦: entered allmulticast mode [ 187.823699][T10110] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 187.893461][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3295'. [ 187.977095][T10152] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 187.991352][T10152] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 188.005748][T10152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.012749][T10152] overlayfs: failed to set xattr on upper [ 188.018456][T10152] overlayfs: ...falling back to uuid=null. [ 188.532082][ T65] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 188.661037][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.668153][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.669957][ T65] usb 3-1: device descriptor read/64, error -71 [ 188.675269][T10170] bridge_slave_0: entered allmulticast mode [ 188.687963][T10170] bridge_slave_0: entered promiscuous mode [ 188.694895][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.701945][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.708999][T10170] bridge_slave_1: entered allmulticast mode [ 188.715503][T10170] bridge_slave_1: entered promiscuous mode [ 188.795762][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.802884][T10170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.810186][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.817203][T10170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.827006][ T5101] +$<¶: port 3(syz_tun) entered disabled state [ 188.834383][ T5101] syz_tun (unregistering): left allmulticast mode [ 188.842370][ T5101] syz_tun (unregistering): left promiscuous mode [ 188.849084][ T5101] +$<¶: port 3(syz_tun) entered disabled state [ 188.866949][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.874217][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.888291][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.895369][ T7657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.913393][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.920463][ T7657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.926065][ T65] usb 3-1: device descriptor read/64, error -71 [ 188.936977][ T12] 0ªî{X¹¦: left promiscuous mode [ 188.942406][ T12] +$<¶: port 2(30ªî{X¹¦) entered disabled state [ 188.955121][ T12] bridge_slave_0: left allmulticast mode [ 188.963537][ T12] bridge_slave_0: left promiscuous mode [ 188.970922][ T12] +$<¶: port 1(bridge_slave_0) entered disabled state [ 189.002740][ T12] +$<¶ (unregistering): left allmulticast mode [ 189.063866][T10170] veth0_vlan: entered promiscuous mode [ 189.080454][T10170] veth1_macvtap: entered promiscuous mode [ 189.104594][ T12] tipc: Disabling bearer [ 189.113619][ T12] tipc: Left network mode [ 189.122902][ T12] veth1_macvtap: left promiscuous mode [ 189.184725][ T65] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 189.241805][ T36] audit: type=1400 audit(2000000013.044:877): avc: denied { append } for pid=10243 comm="syz.1.3332" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.255993][T10248] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 189.264709][T10248] rust_binder: Error while translating object. [ 189.274228][T10248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.280935][T10248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 189.329884][ T65] usb 3-1: device descriptor read/64, error -71 [ 189.335300][T10261] netlink: 'syz.3.3339': attribute type 12 has an invalid length. [ 189.556738][ T31] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 189.576579][ T65] usb 3-1: device descriptor read/64, error -71 [ 189.684849][ T65] usb usb3-port1: attempt power cycle [ 189.705730][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.717307][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.728358][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 189.740769][ T31] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 189.749845][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.757871][ T31] usb 2-1: Product: syz [ 189.762023][ T31] usb 2-1: Manufacturer: syz [ 189.766656][ T31] usb 2-1: SerialNumber: syz [ 189.771793][ T31] usb 2-1: config 0 descriptor?? [ 189.777061][T10257] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 189.784747][ T31] hub 2-1:0.0: USB hub found [ 190.019920][ T65] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 190.027962][ T36] audit: type=1400 audit(2000000013.825:878): avc: denied { setattr } for pid=10256 comm="syz.1.3337" name="NETLINK" dev="sockfs" ino=41194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.041671][ T65] usb 3-1: device descriptor read/8, error -71 [ 190.052529][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 190.069939][ T31] usb 2-1: USB disconnect, device number 63 [ 190.091851][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.178613][ T65] usb 3-1: device descriptor read/8, error -71 [ 190.379618][T10273] overlay: ./file0 is not a directory [ 190.410173][ T36] audit: type=1400 audit(2000000014.221:879): avc: denied { map } for pid=10279 comm="syz.3.3346" path="socket:[41206]" dev="sockfs" ino=41206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.433644][ T65] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 190.454932][ T65] usb 3-1: device descriptor read/8, error -71 [ 190.583101][ T65] usb 3-1: device descriptor read/8, error -71 [ 190.677400][T10290] rust_binder: Write failure EFAULT in pid:20 [ 190.683777][T10293] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 190.690774][ T65] usb usb3-port1: unable to enumerate USB device [ 190.712153][ T36] audit: type=1400 audit(2000000014.525:880): avc: denied { shutdown } for pid=10295 comm="syz.1.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.839225][T10303] rust_binder: 31: no such ref 3 [ 190.844256][T10303] rust_binder: 31: no such ref 1 [ 191.274612][T10307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 191.274645][T10307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:176 [ 191.350658][ T36] audit: type=1400 audit(2000000015.173:881): avc: denied { ioctl } for pid=10308 comm="syz.2.3355" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.522962][T10314] rust_binder: Write failure EFAULT in pid:181 [ 191.713650][T10318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.834780][ T36] audit: type=1400 audit(2000000015.659:882): avc: denied { getopt } for pid=10347 comm="syz.3.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.885264][T10357] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10357 comm=syz.0.3370 [ 192.001139][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.001159][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.007783][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.014308][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.020833][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.027432][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.033910][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.040384][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.046977][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.053559][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.254583][ T36] audit: type=1326 audit(2000000016.085:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10371 comm="syz.2.3376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8658f6c9 code=0x0 [ 192.331870][T10381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.344720][ T36] audit: type=1400 audit(2000000016.176:884): avc: denied { append } for pid=10380 comm="syz.2.3379" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.369171][ T9511] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 192.518534][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.529479][ T9511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.539239][ T9511] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 192.548284][ T9511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.556829][ T9511] usb 2-1: config 0 descriptor?? [ 192.929027][T10400] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 192.938246][T10400] overlayfs: missing 'lowerdir' [ 192.963832][ T9511] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 192.972674][ T9511] lenovo 0003:17EF:6047.0013: item fetching failed at offset 3/5 [ 192.988196][ T9511] lenovo 0003:17EF:6047.0013: hid_parse failed [ 192.997253][ T9511] lenovo 0003:17EF:6047.0013: probe with driver lenovo failed with error -22 [ 193.012116][T10413] overlayfs: failed to clone lowerpath [ 193.027195][T10413] overlayfs: failed to clone lowerpath [ 193.058390][ T36] audit: type=1400 audit(2000000016.894:885): avc: denied { watch } for pid=10418 comm="syz.3.3392" path="/358/file0" dev="tmpfs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.089607][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 193.120139][ T36] audit: type=1326 audit(2000000016.955:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.3.3393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec8778f6c9 code=0x0 [ 193.177112][T10433] netlink: 'syz.0.3397': attribute type 63 has an invalid length. [ 193.184985][T10433] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3397'. [ 193.193864][T10433] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 193.422128][T10438] netlink: 'syz.2.3399': attribute type 5 has an invalid length. [ 193.429927][T10438] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3399'. [ 193.439642][T10438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10438 comm=syz.2.3399 [ 193.453133][T10438] rust_binder: Error while translating object. [ 193.453158][T10438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 193.459666][T10438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:201 [ 193.514367][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.522842][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.529162][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.535756][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.541637][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.548008][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.553997][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.560347][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.566436][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.572693][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.578976][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.585143][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.585159][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.597700][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.603656][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.610052][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.616070][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.622354][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.628556][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.634779][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.640929][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.647326][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.653267][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.659643][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.670063][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.671970][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.678167][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.684309][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.690600][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.696814][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.703001][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.709281][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.715471][T10449] rust_binder: Write failure EINVAL in pid:211 [ 193.823615][T10466] overlayfs: failed to clone lowerpath [ 194.000503][ T65] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 194.169737][ T65] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 194.177998][ T65] usb 3-1: config 1 has no interface number 0 [ 194.184155][ T65] usb 3-1: config 1 interface 105 has no altsetting 0 [ 194.192233][ T65] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 194.201348][ T65] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 194.209887][ T65] usb 3-1: Product: syz [ 194.214051][ T65] usb 3-1: Manufacturer: syz [ 194.218666][ T65] usb 3-1: SerialNumber: syz [ 194.665969][ T36] audit: type=1400 audit(2000000018.526:887): avc: denied { mounton } for pid=10512 comm="syz.3.3426" path="/369/file0" dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.689869][ T36] audit: type=1400 audit(2000000018.546:888): avc: denied { append } for pid=10512 comm="syz.3.3426" name="file0" dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.719491][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 194.740401][T10517] overlayfs: failed to clone upperpath [ 194.772424][T10526] wireguard: wg0: Could not create IPv4 socket [ 194.822946][T10536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.835777][ T65] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 194.869634][T10541] SELinux: security_context_str_to_sid () failed with errno=-22 [ 194.870278][ T65] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 194.883428][T10543] SELinux: security_context_str_to_sid () failed with errno=-22 [ 194.897250][ T65] usb 3-1: USB disconnect, device number 59 [ 194.939826][T10547] netlink: 'syz.2.3437': attribute type 32 has an invalid length. [ 194.948299][T10547] rust_binder: 226: no such ref 0 [ 195.003907][T10555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:233 [ 195.025505][T10557] SELinux: security_context_str_to_sid () failed with errno=-22 [ 195.048471][ T332] usb 2-1: USB disconnect, device number 64 [ 195.076224][ T36] audit: type=1400 audit(2000000018.936:889): avc: granted { setsecparam } for pid=10558 comm="syz.1.3441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 195.216046][T10576] netlink: 'syz.3.3448': attribute type 3 has an invalid length. [ 195.255898][T10579] rust_binder: Write failure EFAULT in pid:239 [ 195.287605][T10583] 9pnet_fd: Insufficient options for proto=fd [ 196.099517][ T36] audit: type=1400 audit(2000000026.963:890): avc: denied { setopt } for pid=10638 comm="syz.1.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.121822][ T36] audit: type=1400 audit(2000000026.983:891): avc: denied { getopt } for pid=10638 comm="syz.1.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.213550][T10652] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 196.549375][T10673] netlink: 680 bytes leftover after parsing attributes in process `syz.1.3479'. [ 196.612973][ T9510] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 196.684851][T10687] netlink: 'syz.1.3484': attribute type 9 has an invalid length. [ 196.692711][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 196.762945][ T9510] usb 3-1: device descriptor read/64, error -71 [ 196.852516][T10707] __vm_enough_memory: pid: 10707, comm: syz.1.3492, bytes: 18014402804453376 not enough memory for the allocation [ 196.920720][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 196.920746][ T36] audit: type=1400 audit(2000000027.783:893): avc: denied { map } for pid=10717 comm="syz.1.3497" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 196.941590][T10720] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3498'. [ 196.982937][ T36] audit: type=1400 audit(2000000027.843:894): avc: denied { mounton } for pid=10721 comm="syz.1.3499" path="/33/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 197.012931][ T9510] usb 3-1: device descriptor read/64, error -71 [ 197.064067][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3501'. [ 197.252934][ T9510] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 197.362920][ T65] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 197.382911][ T9510] usb 3-1: device descriptor read/64, error -71 [ 197.513012][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 197.519173][ T65] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.527520][ T65] usb 2-1: config 0 has no interface number 0 [ 197.533635][ T65] usb 2-1: config 0 interface 184 has no altsetting 0 [ 197.541755][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.550850][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.559106][ T65] usb 2-1: Product: syz [ 197.563806][ T65] usb 2-1: Manufacturer: syz [ 197.568538][ T65] usb 2-1: SerialNumber: syz [ 197.574388][ T65] usb 2-1: config 0 descriptor?? [ 197.580505][ T65] smsc75xx v1.0.0 [ 197.622917][ T9510] usb 3-1: device descriptor read/64, error -71 [ 197.733040][ T9510] usb usb3-port1: attempt power cycle [ 197.787356][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 197.798600][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 197.810378][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 197.821305][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 197.831058][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 197.840008][T10763] overlayfs: failed to clone upperpath [ 197.841642][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 197.856285][ T65] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 197.871107][ T65] usb 2-1: USB disconnect, device number 65 [ 197.883295][T10761] sit0: entered promiscuous mode [ 197.889092][T10761] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 197.896909][T10761] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3514'. [ 197.986281][T10773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.031758][T10778] /dev/rnullb0: Can't open blockdev [ 198.073039][ T9510] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 198.094311][ T9510] usb 3-1: device descriptor read/8, error -71 [ 198.119042][T10782] kvm: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 198.127592][T10782] kvm: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 198.137747][T10782] kvm: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 198.148845][T10782] kvm: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 198.157453][T10782] kvm: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 198.167915][T10782] kvm_intel: kvm [10781]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 198.223949][ T9510] usb 3-1: device descriptor read/8, error -71 [ 198.266732][T10788] rust_binder: Error while translating object. [ 198.266764][T10788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 198.273221][T10788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 198.281721][T10792] overlayfs: failed to clone lowerpath [ 198.298889][T10792] overlayfs: failed to clone lowerpath [ 198.305573][T10801] overlayfs: failed to clone lowerpath [ 198.318571][T10804] tipc: Started in network mode [ 198.323122][T10806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3530'. [ 198.323475][T10804] tipc: Node identity d6dc7fbf976, cluster identity 4711 [ 198.339530][T10804] tipc: Enabled bearer , priority 10 [ 198.462857][ T9510] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 198.483849][ T9510] usb 3-1: device descriptor read/8, error -71 [ 198.614063][ T9510] usb 3-1: device descriptor read/8, error -71 [ 198.723162][ T9510] usb usb3-port1: unable to enumerate USB device [ 198.742864][ T65] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 198.894045][ T65] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 198.904623][ T65] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.917684][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.924327][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=7007, bcdDevice= 0.00 [ 198.933445][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.943725][ T65] usb 2-1: config 0 descriptor?? [ 198.951397][ T65] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 198.961628][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 199.164751][ T36] audit: type=1400 audit(2000000030.033:895): avc: denied { execstack } for pid=10841 comm="syz.3.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 199.376071][T10847] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 199.384041][T10847] rust_binder: Write failure EINVAL in pid:253 [ 199.418764][T10853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.419556][T10854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 199.432050][T10853] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 199.441276][T10853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 199.449299][T10853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:259 [ 199.462815][ T45] tipc: Node number set to 1102872511 [ 199.510712][T10865] rust_binder: Write failure EFAULT in pid:266 [ 199.512303][ T36] audit: type=1400 audit(2000000030.373:896): avc: denied { setopt } for pid=10864 comm="syz.2.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.526825][T10867] overlayfs: lower data-only dirs require metacopy support. [ 199.551297][T10869] 9pnet_fd: Insufficient options for proto=fd [ 199.558562][T10869] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3557'. [ 199.560535][ T36] audit: type=1400 audit(2000000030.423:897): avc: denied { ioctl } for pid=10868 comm="syz.2.3557" path="socket:[43480]" dev="sockfs" ino=43480 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.568335][T10869] rust_binder: Write failure EFAULT in pid:268 [ 199.618892][T10876] netlink: 182 bytes leftover after parsing attributes in process `syz.2.3560'. [ 199.635330][T10876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.635463][T10876] rust_binder: 270: no such ref 1 [ 199.662687][T10876] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 199.662716][T10876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 199.671206][T10876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:270 [ 199.739330][T10880] rust_binder: 272: no such ref 3 [ 199.798137][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.805234][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.812278][T10881] bridge_slave_0: entered allmulticast mode [ 199.818570][T10881] bridge_slave_0: entered promiscuous mode [ 199.825089][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.832397][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.840810][T10881] bridge_slave_1: entered allmulticast mode [ 199.847342][T10881] bridge_slave_1: entered promiscuous mode [ 199.862200][T10894] /dev/sg0: Can't lookup blockdev [ 199.899314][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.906383][T10881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.913643][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.920659][T10881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.941855][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'. [ 199.953048][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'. [ 199.964122][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.977740][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.988350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.995422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.005773][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.012839][ T7639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.035756][T10881] veth0_vlan: entered promiscuous mode [ 200.046096][T10881] veth1_macvtap: entered promiscuous mode [ 200.074617][T10911] rust_binder: Write failure EFAULT in pid:2 [ 200.332759][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.381688][T10925] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 200.390736][T10925] 9pnet_fd: Insufficient options for proto=fd [ 200.472882][T10927] overlayfs: failed to clone lowerpath [ 200.492745][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 200.499093][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.508941][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.521337][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.530457][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.538497][ T45] usb 1-1: Product: syz [ 200.542704][ T45] usb 1-1: Manufacturer: syz [ 200.547288][ T45] usb 1-1: SerialNumber: syz [ 200.814197][T10928] usb usb7: usbfs: process 10928 (syz.0.3571) did not claim interface 0 before use [ 200.935082][ T45] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 200.943676][ T45] usb 1-1: USB disconnect, device number 3 [ 200.955047][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.999930][T10932] overlay: ./file0 is not a directory [ 201.465909][ T45] usb 2-1: USB disconnect, device number 66 [ 201.501971][T10945] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 201.722722][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 201.832705][ T45] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 201.883791][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.893663][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 201.902726][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.911252][ T65] usb 1-1: config 0 descriptor?? [ 201.933165][T10966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.933240][T10966] rust_binder: 300: no such ref 3 [ 201.944993][T10966] rust_binder: 300: no such ref 3 [ 201.950081][T10966] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 201.982683][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 201.992327][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.001506][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.009544][ T45] usb 2-1: Product: syz [ 202.013742][ T45] usb 2-1: Manufacturer: syz [ 202.018331][ T45] usb 2-1: SerialNumber: syz [ 202.025490][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 202.031745][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 202.202648][ T395] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 202.320326][ T65] logitech-djreceiver 0003:046D:C71F.0014: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 202.332777][ T395] usb 3-1: device descriptor read/64, error -71 [ 202.441330][T10947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.441437][T10947] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 202.448618][ T31] r8152-cfgselector 2-1: USB disconnect, device number 67 [ 202.519680][T10936] binder: Unknown parameter './binderfs' [ 202.526644][ T65] usb 1-1: USB disconnect, device number 4 [ 202.582682][ T395] usb 3-1: device descriptor read/64, error -71 [ 202.822615][ T395] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 202.955552][ T395] usb 3-1: device descriptor read/64, error -71 [ 203.043703][ T7639] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.192754][ T395] usb 3-1: device descriptor read/64, error -71 [ 203.202591][ T65] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 203.302651][ T395] usb usb3-port1: attempt power cycle [ 203.353630][ T65] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 203.361867][ T65] usb 2-1: config 1 has no interface number 0 [ 203.367984][ T65] usb 2-1: config 1 interface 105 has no altsetting 0 [ 203.376084][ T65] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 203.385145][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.393155][ T65] usb 2-1: Product: syz [ 203.397296][ T65] usb 2-1: Manufacturer: syz [ 203.401865][ T65] usb 2-1: SerialNumber: syz [ 203.642565][ T395] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 203.663558][ T395] usb 3-1: device descriptor read/8, error -71 [ 203.793566][ T395] usb 3-1: device descriptor read/8, error -71 [ 204.032586][ T395] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 204.053645][ T395] usb 3-1: device descriptor read/8, error -71 [ 204.183535][ T395] usb 3-1: device descriptor read/8, error -71 [ 204.292606][ T395] usb usb3-port1: unable to enumerate USB device [ 205.006622][T10985] binder: Bad value for 'max' [ 205.093193][T10990] netlink: 'syz.3.3596': attribute type 64 has an invalid length. [ 205.105821][T10992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.112497][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.125067][ T651] Bluetooth: hci0: command 0x1003 tx timeout [ 205.147309][T10998] rust_binder: Error while translating object. [ 205.147367][T10998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 205.158054][T10999] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 205.167513][T10998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:14 [ 205.206083][ T36] audit: type=1400 audit(2000000036.073:898): avc: denied { ioctl } for pid=11002 comm="syz.2.3599" path="socket:[44827]" dev="sockfs" ino=44827 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.354058][ T36] audit: type=1400 audit(2000000036.223:899): avc: denied { execute } for pid=11018 comm="syz.0.3604" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.378859][T11025] rust_binder: 323: no such ref 0 [ 205.388429][T11025] rust_binder: Read failure Err(EAGAIN) in pid:323 [ 205.469621][T11046] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 205.476187][T11046] rust_binder: Read failure Err(EFAULT) in pid:327 [ 205.622014][T11055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.629077][T11055] rust_binder: Error while translating object. [ 205.635569][T11055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 205.641735][T11055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335 [ 205.663028][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3618'. [ 205.682451][ T1634] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.702202][T11062] FAT-fs (rnullb0): bogus number of reserved sectors [ 205.708933][T11062] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 205.736438][T11066] rust_binder: Read failure Err(EAGAIN) in pid:346 [ 205.833402][ T1634] usb 1-1: Using ep0 maxpacket: 16 [ 205.847528][ T1634] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 205.856616][ T1634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.864678][ T1634] usb 1-1: Product: syz [ 205.868833][ T1634] usb 1-1: Manufacturer: syz [ 205.873578][ T1634] usb 1-1: SerialNumber: syz [ 205.880705][ T1634] r8152-cfgselector 1-1: Unknown version 0x0000 [ 205.887031][ T1634] r8152-cfgselector 1-1: config 0 descriptor?? [ 205.961602][ T65] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 205.972505][ T65] usb 2-1: USB disconnect, device number 68 [ 206.073521][ T9510] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 206.083755][T11096] __vm_enough_memory: pid: 11096, comm: syz.1.3631, bytes: 18014402804453376 not enough memory for the allocation [ 206.152803][T11104] rust_binder: Error while translating object. [ 206.152833][T11104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 206.165735][T11104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 206.236802][ T9510] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 206.256851][ T9510] usb 3-1: config 1 has no interface number 0 [ 206.263376][T11114] /dev/sg0: Can't lookup blockdev [ 206.269459][ T9510] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 206.284908][ T9510] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 206.298131][ T65] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 206.305951][ T36] audit: type=1400 audit(2000000037.163:900): avc: denied { append } for pid=11042 comm="syz.0.3613" name="pfkey" dev="proc" ino=4026532444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 206.331111][ T9510] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 206.340408][ T9510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.357134][ T9510] usb 3-1: Product: syz [ 206.371464][ T9510] usb 3-1: Manufacturer: syz [ 206.376287][ T9510] usb 3-1: SerialNumber: syz [ 206.384095][T11127] rust_binder: Error in use_page_slow: ESRCH [ 206.384112][T11127] rust_binder: use_range failure ESRCH [ 206.386648][T11074] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.395514][T11127] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 206.395667][T11074] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.409677][T11127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 206.422420][T11127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:203 [ 206.532298][T11145] rust_binder: Write failure EFAULT in pid:213 [ 206.651208][T11167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 206.843774][T11177] netlink: 679 bytes leftover after parsing attributes in process `syz.0.3657'. [ 206.912435][ T65] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 206.973435][T11075] rust_binder: Write failure EFAULT in pid:354 [ 207.063508][ T65] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 207.080789][ T65] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 207.093677][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.100348][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 207.110030][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.118727][ T65] usb 2-1: config 0 descriptor?? [ 207.124004][T11170] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.222361][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.334200][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 207.335152][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.340163][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.350340][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.380730][ T65] usb 2-1: USB disconnect, device number 69 [ 207.393378][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.405550][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.425381][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.451564][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.468319][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.484724][ T45] usb 1-1: config 0 descriptor?? [ 207.589350][T11210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11210 comm=syz.1.3666 [ 207.628934][ T36] audit: type=1404 audit(2000000038.493:901): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 207.656471][ T36] audit: type=1400 audit(2000000038.523:902): avc: denied { read } for pid=11215 comm="syz.1.3669" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 207.679389][ T36] audit: type=1400 audit(2000000038.523:903): avc: denied { read } for pid=11215 comm="syz.1.3669" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 207.702423][ T36] audit: type=1400 audit(2000000038.523:904): avc: denied { write } for pid=11215 comm="syz.1.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 207.727692][ T36] audit: type=1400 audit(2000000038.523:905): avc: denied { read } for pid=11215 comm="syz.1.3669" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 207.752292][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 207.753822][T11235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.758241][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.764925][T11235] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 207.774956][ T45] usb 1-1: USB disconnect, device number 6 [ 208.045059][T11246] netlink: 'syz.3.3680': attribute type 4 has an invalid length. [ 208.642185][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3687'. [ 208.841420][ T65] usb 3-1: USB disconnect, device number 68 [ 208.901425][ T13] bridge_slave_1: left allmulticast mode [ 208.907532][ T13] bridge_slave_1: left promiscuous mode [ 208.913491][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.923902][ T13] bridge_slave_0: left allmulticast mode [ 208.929756][ T13] bridge_slave_0: left promiscuous mode [ 208.935881][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.074455][ T13] veth1_macvtap: left promiscuous mode [ 209.079994][ T13] veth0_vlan: left promiscuous mode [ 209.418886][T11308] netlink: 'syz.3.3702': attribute type 4 has an invalid length. [ 210.540763][ T36] kauditd_printk_skb: 220 callbacks suppressed [ 210.540779][ T36] audit: type=1400 audit(2000000041.404:1125): avc: denied { execmem } for pid=11319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 210.571029][ T36] audit: type=1400 audit(2000000041.414:1126): avc: denied { read } for pid=11321 comm="syz.2.3707" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 210.593943][ T36] audit: type=1400 audit(2000000041.414:1127): avc: denied { read write } for pid=11322 comm="syz.1.3706" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 210.617536][ T36] audit: type=1400 audit(2000000041.414:1128): avc: denied { read } for pid=11322 comm="syz.1.3706" dev="nsfs" ino=4026532613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 210.638800][ T36] audit: type=1400 audit(2000000041.414:1129): avc: denied { read write } for pid=11322 comm="syz.1.3706" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 210.662351][ T36] audit: type=1400 audit(2000000041.414:1130): avc: denied { read } for pid=11322 comm="syz.1.3706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 210.685135][ T36] audit: type=1400 audit(2000000041.414:1131): avc: denied { read } for pid=11322 comm="syz.1.3706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 210.707894][ T36] audit: type=1400 audit(2000000041.414:1132): avc: denied { read } for pid=11322 comm="syz.1.3706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 210.730698][ T36] audit: type=1400 audit(2000000041.414:1133): avc: denied { read } for pid=11322 comm="syz.1.3706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 210.753520][ T36] audit: type=1400 audit(2000000041.414:1134): avc: denied { read } for pid=11322 comm="syz.1.3706" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 212.094416][T11344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11344 comm=syz.1.3714 [ 212.111733][T11347] netlink: 'syz.3.3716': attribute type 4 has an invalid length. [ 212.119960][T11347] netlink: 'syz.3.3716': attribute type 27 has an invalid length. [ 213.015313][T11350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=11350 comm=syz.1.3717 [ 216.364639][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 216.364656][ T36] audit: type=1400 audit(2000000047.234:1230): avc: denied { execmem } for pid=11375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 216.399082][ T36] audit: type=1400 audit(2000000047.234:1231): avc: denied { mounton } for pid=11376 comm="syz.2.3727" path="/139/file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 216.422421][ T36] audit: type=1400 audit(2000000047.234:1232): avc: denied { read } for pid=11376 comm="syz.2.3727" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 216.445462][ T36] audit: type=1400 audit(2000000047.244:1233): avc: denied { create } for pid=11376 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 216.465306][ T36] audit: type=1400 audit(2000000047.244:1234): avc: denied { read write } for pid=11376 comm="syz.2.3727" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 216.488710][ T36] audit: type=1400 audit(2000000047.244:1235): avc: denied { mounton } for pid=11376 comm="syz.2.3727" path="/139/file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 216.511349][ T36] audit: type=1400 audit(2000000047.254:1236): avc: denied { read write } for pid=9228 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.535542][ T36] audit: type=1400 audit(2000000047.264:1237): avc: denied { read write } for pid=11378 comm="syz.1.3726" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 216.558846][ T36] audit: type=1400 audit(2000000047.264:1238): avc: denied { create } for pid=11378 comm="syz.1.3726" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 216.580249][ T36] audit: type=1400 audit(2000000047.264:1239): avc: denied { create } for pid=11378 comm="syz.1.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 221.491313][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 221.491330][ T36] audit: type=1326 audit(2000000052.354:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11410 comm="syz.3.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8778f6c9 code=0x7fc00000 [ 222.261424][ T36] audit: type=1400 audit(2000000053.124:1283): avc: denied { execmem } for pid=11419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 222.285619][ T36] audit: type=1400 audit(2000000053.134:1284): avc: denied { read } for pid=11421 comm="syz.1.3740" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 222.308651][ T36] audit: type=1400 audit(2000000053.154:1285): avc: denied { mounton } for pid=11422 comm="syz.2.3741" path="/144/file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 222.331314][ T36] audit: type=1400 audit(2000000053.154:1286): avc: denied { mounton } for pid=11421 comm="syz.1.3740" path="/101/bus" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 222.353764][ T36] audit: type=1400 audit(2000000053.154:1287): avc: denied { create } for pid=11421 comm="syz.1.3740" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 222.375200][ T36] audit: type=1400 audit(2000000053.154:1288): avc: denied { read write } for pid=9228 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.437428][ T36] audit: type=1400 audit(2000000053.304:1289): avc: denied { read write } for pid=10170 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.990524][ T36] audit: type=1400 audit(2000000054.854:1290): avc: denied { execmem } for pid=11426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 224.000217][T11433] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.750663][ T36] kauditd_printk_skb: 152 callbacks suppressed [ 227.750681][ T36] audit: type=1400 audit(2000000058.615:1435): avc: denied { execmem } for pid=11445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 227.777192][ T36] audit: type=1400 audit(2000000058.615:1436): avc: denied { mounton } for pid=11448 comm="syz.3.3751" path="/471/file0" dev="tmpfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 227.799952][ T36] audit: type=1400 audit(2000000058.615:1437): avc: denied { create } for pid=11448 comm="syz.3.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 227.819725][ T36] audit: type=1400 audit(2000000058.625:1438): avc: denied { read } for pid=11446 comm="syz.1.3749" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 227.842510][ T36] audit: type=1400 audit(2000000058.625:1439): avc: denied { create } for pid=11446 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.863052][ T36] audit: type=1400 audit(2000000058.625:1440): avc: denied { read write } for pid=11446 comm="syz.1.3749" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 227.886440][ T36] audit: type=1400 audit(2000000058.625:1441): avc: denied { create } for pid=11446 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 227.906185][ T36] audit: type=1400 audit(2000000058.625:1442): avc: denied { read write } for pid=11446 comm="syz.1.3749" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 227.929387][ T36] audit: type=1400 audit(2000000058.625:1443): avc: denied { create } for pid=11446 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 227.948942][ T36] audit: type=1400 audit(2000000058.625:1444): avc: denied { create } for pid=11446 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 229.954550][ T7639] bridge_slave_1: left allmulticast mode [ 229.960234][ T7639] bridge_slave_1: left promiscuous mode [ 229.965905][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.973386][ T7639] bridge_slave_0: left allmulticast mode [ 229.979031][ T7639] bridge_slave_0: left promiscuous mode [ 229.984984][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.992726][ T7639] tipc: Resetting bearer [ 230.005578][ T7639] tipc: Disabling bearer [ 230.133162][ T7639] tipc: Left network mode [ 230.138232][ T7639] veth1_macvtap: left promiscuous mode [ 230.143763][ T7639] veth0_vlan: left promiscuous mode [ 230.402147][ T7639] bridge_slave_1: left allmulticast mode [ 230.407803][ T7639] bridge_slave_1: left promiscuous mode [ 230.413455][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.420824][ T7639] bridge_slave_0: left allmulticast mode [ 230.426593][ T7639] bridge_slave_0: left promiscuous mode [ 230.432220][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.439712][ T7639] bridge_slave_1: left allmulticast mode [ 230.445406][ T7639] bridge_slave_1: left promiscuous mode [ 230.451030][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.458396][ T7639] bridge_slave_0: left allmulticast mode [ 230.464120][ T7639] bridge_slave_0: left promiscuous mode [ 230.469701][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.654076][ T7639] veth1_macvtap: left promiscuous mode [ 230.659689][ T7639] veth1_macvtap: left promiscuous mode [ 230.665217][ T7639] veth0_vlan: left promiscuous mode