last executing test programs: 3m54.944224249s ago: executing program 2 (id=1640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x69, 0x0, '\x00', 0x1, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000008c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/45, 0x2d, 0x2, 0x1b}, @fd, @fda={0x66646185, 0x6, 0x1, 0x30}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m54.078279692s ago: executing program 2 (id=1650): write(0xffffffffffffffff, &(0x7f0000000600)="fc0000001c000704ab5b2509b86803000aab02000000000000001193210001c0f0030584050060100000000081", 0x2d) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000080ff0000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffff09000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 3m54.049081972s ago: executing program 2 (id=1651): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = timerfd_create(0x0, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) (async) read(r1, &(0x7f0000000000)=""/162, 0xa2) (async) splice(r1, &(0x7f00000000c0)=0x3aea, r1, &(0x7f0000000140)=0x8, 0x8, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4010, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async, rerun: 64) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34030000", @ANYRES16=r4, @ANYBLOB="00042bbd7000feaf0a2502000000a4000180240002800800040006000000080001000e6800000800020005000000080004002f0f00001c00028008000300000500000008000100170000001400028008000200ae00000008000200060000001400028008000300060000000800030001000000380004001400010002004e22ac1414400000000000000000200002000a004e2400000009200100000000000000000000000000020400000020000180ec2e7a3c080001000e000000080003000400000008000300070000001c0003800800010009000000080002000500000008000300020000001c0007800c00030000000000000000000c000400fbffffffffffffff800106800800010001000000080001000e0000000400020008000600050000006c0003004eba8ae34ec2a4c30971a246b7420e26cf0831adbc5755a33634e9502b93658d157300e1893831d43eeeaede1263af941425e410add2c12c94a0c2a360143b7759a565b014ed3d7a67c8380316ef45b67e522d31886aebbbcc781d14e7cf58b4ac77b4a5019ba96904000200ed00030023f941c7ceb8bae699620d433182389829c3d7a7d538bb3c5801000000480aa4623636ff9284327f07de23c48a97e17ed31b2c0594df7864096cd19fbb51b310ca1753bd883c3726def3bf7f5f0c60d367a42d7225a2f9a7ab44c4cbd5cfbd510b108e5e1fe9a3c9ad953aec2daa9c875ff0804ed029fc79a6cac746e3211bd43b3437f2df39914559f098c8255902338884bee25cb778ae53751216f2bd033d7deaede30d246cbfc7854eb14b98a36213b3dbb6abba5b3842993461e8397e958ea8ebcdcb52950fd5ea7c3b508188ac8b44d92342112b4f4ffa98bc8bf6a7c266d094d812ec4a01acfedcc744570000003c00098008000100faffffff080002000800000008000116040000e807000100970600000800010000480000080001004000000008000200000000006800018038000400140001000200ff22ffffffff0000000000000000200002000a004e2400000009fc010000000000000000000000000000020000002c0004001400010002004e2300000000000000000000000014000200"/807], 0x334}, 0x1, 0x0, 0x0, 0x2040000}, 0x8054) (async) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x1d08, 0x8) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) syz_clone(0x100000, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount(0x0, 0x0, 0x0, 0x200081, &(0x7f0000000180)=')\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f00000005c0), 0x4) (async, rerun: 32) sendmsg$can_raw(r7, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000400)=0xfffffff8, 0x4) 3m53.700055027s ago: executing program 2 (id=1656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000440)='./file0/../file0\x00', 0x200) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x5, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/178, 0xb2}], 0x6}, 0xf80}], 0x1, 0x2020, &(0x7f0000000100)={r4, r5+10000000}) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) r6 = dup3(r1, r0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xc0046209, 0x1) 3m52.784041231s ago: executing program 2 (id=1676): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x501a00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000100)='./file0\x00', 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl(r2, 0x5451, 0x0) ioperm(0x3, 0x7, 0x7) ioperm(0x8, 0x5, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x2000804) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={r5, 0x80000000, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m52.091319332s ago: executing program 2 (id=1679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) (async) close(r3) (async) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd) 3m51.974317964s ago: executing program 32 (id=1679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) (async) close(r3) (async) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd) 41.201289754s ago: executing program 4 (id=5326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="64c7e649"], 0x18}, 0x8841) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x3a}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x200, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') read$FUSE(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) getpriority(0x0, r3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffffffffffffe0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 41.137404855s ago: executing program 4 (id=5327): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pwritev(r1, 0x0, 0x0, 0x7, 0x0) munlock(&(0x7f0000d9f000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munlockall() r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001180)="c532c4bc9f0a72136b051af8d80a3987a4730d29a91baa88cf1ecdf76be02f67aebe842cad50304320bf31b02b981ed5b4b738f426ec659a6e2c453eb695a6b7c51df4e8f37b953f236573552ed1d2810bea51d54ae3ba7c727e193c6252c6ff3da255ec2018ec12321e25ca013c34e98b6e150cad9e7087e597406606ee7b2907bc231dbd46aeaa997e04ed0cfec9c3fb30ed1254d9df03fa04d61986273c42ce03e961245f198fc45c91e32547d20a22888d19f634f9378ef40cd4acee3cf3020b6491afe5672da323a2df0dfe4313ce12c3de06bbb2ea8d59cac3a41a034b3898aeef7ba4e87715ddf66158fcc9ff3c4f19cb", 0xf4}, {&(0x7f0000001280)="b6f0106cec732df0c9652308bb6d140aae7bee0edf54d8ab5ce38d2c19ea5f380230fe20bd995cd775308ce328604012c28a453219eb4567bd1904a446fce0fe4c30736ffeaf44bdeac64afe64ecf0", 0x4f}, {&(0x7f0000001300)="66d5c2f298d5d437c7e09cd9daf7a8dcceb6a7b0beffe59f850bff4b4208475c9767c6735637cf4b61e44ff640928a73f5e1dc56fa5e380671977e2b3911c32b9eb7a72ef17cc870f120d23b5cd2", 0x4e}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="a07cb6fb13627ef3b8c2cca071668b7ed6fb8a12e213b0241b0bd7f741d4ae744f83a900915a5e353acdf23a5f2b5f6b9bd61e6d424a34d4e38ddf5199a2623ff82e89cda61a9a857f572182c76620ff3ce790c9334deb79516bbd3fe6361c41d622f2ebfe5c3607944b208551373c50d2dde0ee1a9f8d7dc159e394f58547eb9e5c79cbeff08bb182422dc9adc89e90577861d004f270dd245a0be5fce22c226b94536065b8", 0xa6}, {&(0x7f0000002440)="28215783a50f1cb4b66126ea5d04c36664e9e10b342f3c22d9ec467d781650ec69e2c2339ffff67626ba2b52789b101aaa011131a8a9406602269dda165d98fb06a5d2bf113f", 0x46}, {&(0x7f0000001100)="e0acb69c3c57f07633fb", 0xa}, {&(0x7f00000024c0)="57e6f6ebf239eaf4df18c76c7dbbbfed8bd5f3694eaf13b5636922514d78b6d0e793b3262ee2485179d84f7b3091f50d03169f2a141d379693758a59e613b811340ce016211431f1a451ab1f07c82b9b27744d772add0646226e2dc558e4ab9f616c33a7b434cd48da59b5bc60f091a968e54405c956c25e4c3acb49b23c358578ac3254d394ccd6769dcf1ff22c72522833f75aaa69feda09637a7526d3ea546424127371224dd7af263dedc5be255c66ff515997b6b144379990187a6bbb38a73e8382ad3eaf198330a63e7740d3d737b68a4632ddd658f2527f", 0xdb}], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x0, 0x1}) 41.137103305s ago: executing program 4 (id=5328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 41.092308496s ago: executing program 4 (id=5329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x20010, r2, 0x4d75c000) 41.083048966s ago: executing program 4 (id=5330): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {0x0, 0x4000}, {0x10, 0x13, @l2={'ib', 0x3a, 'bond0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x48080) write$cgroup_int(r3, &(0x7f0000000300)=0x4078c1d5, 0x12) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x7c, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x3}, @clear_death, @acquire={0x40046305, 0x2}, @register_looper, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/65, 0x41, 0x2, 0x19}, @fda={0x66646185, 0x6, 0x2, 0x2c}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}, 0x40}], 0xe4, 0x0, &(0x7f0000000340)="cb36d6c8e10b364bb8fdd8f2055880a2c4fafe901214497d26919416eeb5659cfb07cbf3e3e4ab8ce4438c2ed1c281c2975ab72a3bd6eac3fa80b6ed962d4eb1a89f843dc058ac4c7d0647a650a5234bea9fe3c26edcf9770de2cdd5d1f9d0ab668c9b54f530a71b935c359ade33ec50a6738826255ecc4241c1b4ea7277b3753f5b89156c0879f84147fbff7449241947aff51f821221a42ae87f7294ba3ab8529784f67e800e823f6b70c28fd16adda582b8f63b2e3774adfca46b0cc031031243acfcaff9357f42da95553290f483a56989173a4acb0fc584bb77e559c45af81f3525"}) close_range(r0, 0xffffffffffffffff, 0x0) 40.905428859s ago: executing program 4 (id=5331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f00000002c0)={0x40, 0x22, 0xc6, {0xc6, 0x10, "22882fd5db44702bcb7ed3de05d947199f2134bc65e7d99adef21cf13d11a72a4f446371fbb4ad47dfb288462fc7ab8aaa54a039781abeb441502be8ed81485286bc528d5f9efa1425aa55798e5e7f8b26a87df665ee3f90a63f41ab49666be2202af17c6a66f8c0680ea53be5be7a0b1c17338158af5c9b8f91ba7f0b24d92ed8122f2399d613d0134795768c1f8c9208d3d62186d864bc6fdad512e066002d0d967c45f171320689a1da5468bc0f9e767e3069f0b751424244fcd3d9b669611a423c61"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "e57dc9a0"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x2d1}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x15, 0xc, "18d981251495d95ff668b067"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x30, "99e73d5620cb4cd79cfcd6eff1d430a8dc6b0feae4f6ac4717574de5aa3fb53a010316c82a5a2d06142b9c982eeb7262"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/237, 0xed, 0x2, 0x3}, @fda={0x66646185, 0x0, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/134, 0x86, 0x2, 0x2f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 40.905160829s ago: executing program 33 (id=5331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f00000002c0)={0x40, 0x22, 0xc6, {0xc6, 0x10, "22882fd5db44702bcb7ed3de05d947199f2134bc65e7d99adef21cf13d11a72a4f446371fbb4ad47dfb288462fc7ab8aaa54a039781abeb441502be8ed81485286bc528d5f9efa1425aa55798e5e7f8b26a87df665ee3f90a63f41ab49666be2202af17c6a66f8c0680ea53be5be7a0b1c17338158af5c9b8f91ba7f0b24d92ed8122f2399d613d0134795768c1f8c9208d3d62186d864bc6fdad512e066002d0d967c45f171320689a1da5468bc0f9e767e3069f0b751424244fcd3d9b669611a423c61"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "e57dc9a0"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x2d1}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x15, 0xc, "18d981251495d95ff668b067"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x30, "99e73d5620cb4cd79cfcd6eff1d430a8dc6b0feae4f6ac4717574de5aa3fb53a010316c82a5a2d06142b9c982eeb7262"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/237, 0xed, 0x2, 0x3}, @fda={0x66646185, 0x0, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/134, 0x86, 0x2, 0x2f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 4.445111173s ago: executing program 3 (id=6060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e00000010000000000000000ff800000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 4.385510514s ago: executing program 3 (id=6061): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a000000050201020000"], 0x20}}], 0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f0000000440)="60f9a8d41bf24b5e8aaeb76caabde5e329ef50c179798b070d25cd969ff38ad0a69daa02e1d42e8637c4b5344becbb87ca649bbdf220f8497e4cd98e3aea8e696a9f1e52445d815e9a1f022a51a4092378"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 4.385242994s ago: executing program 3 (id=6062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x25, 0x1, 0x70bd26, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.354824754s ago: executing program 3 (id=6063): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000064d564b"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x45809000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) 4.287334935s ago: executing program 3 (id=6064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="f3ed6fed07f126970a9eff36e7e08730383bc13a3a6db14d43f5d92ac75b9c284811a12eb4e3671e94799431000dcc78e97f1fa514163357acd833a55d1e03c3decf8facb5fecc2c59b5e757dc537a856b9547f431d18cab138e3ae36f3092d785180bc00f5c5a2b3184c5720a23d1992a81cbeb08c751684455de2b0421fd2da3d81b9baa41f292d945c33a0fec63613b299c5d31e3350b2b2f3086b6734338bcba2c5fffcdb85b1be80c626939e8f78821a2d23e0bfef0b3714da003b5bb70887bfafd4cdde1f0f8ee9be41a"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x82, 0xa000) close_range(r4, 0xffffffffffffffff, 0x0) 2.767247058s ago: executing program 0 (id=6088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000002ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2.765564948s ago: executing program 0 (id=6089): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x810008d2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="f3"}) 2.761934088s ago: executing program 0 (id=6091): ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_clone(0x8000100, &(0x7f00000003c0)="0d239f160c42bc6475727452e2f1226974922fb158a7c619a7c65fe53f1f7ee184fc5dc4331c48b28edb98fc58ade1cf7756ec19f1f73a419db3f4870f856c3b7e02769cc7fbcb797da166d2f51d0dc790fdf6356fa0dec063f1e14c08e285fc4cc5da8ad5870c42e5f052e9f1d33b6c159de5d221c4f9cd3a60a1fc8c620233f3d37e688108f542f0172c4b4d0f68c31485ea08374405f6c49e29612a2a6a72157ec8725674b24270a7824bae584ced17025def24", 0xb5, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="163ef1bd297b6c437efbbb289bd806d8092623801bb7dddefbdd062cc2b085ce4d5605438570ae03f8de83363ba59586b4530e57d5e6132c45fc6f333fe6b0be362b22e108694d4b299cea2378de52dc5f24d87c9ee12103a5863389c1601d9f7c4667a0612b7ee21d5e56557b7f3acc8a2040daee1e33e1d34b40e8819df9ac03ca3cb7080f55b721c25bd4") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@initdev}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setresgid(0x0, r5, 0xee01) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000007c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x2000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="56a77de9f818977341faa619c6c5f5c7d88b9508000000e3920c872b2ce3a88ffa6cf5535f4e6e945c7087", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419890400050008000600ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000001380)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x40040}, 0x4890) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="58010000000000000000000000000000000000000000000000000000000000000400000000000000abe1000000000000030000007f00000000000000000000000900000000000000060000000000000001010000000000000c0000000000000006000000000000000200000009000000030000000020000000080000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="660e000009000000000000000000000000000000324600000000000002"], 0x0, 0x0, 0x0}) accept(r6, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x100, 0x0) 2.732019319s ago: executing program 0 (id=6093): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086201, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001180)={0x0, r2, "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", "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"}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff7) close_range(r0, 0xffffffffffffffff, 0x0) 2.68511469s ago: executing program 0 (id=6097): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @mcast2, 0x63}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000000540)=""/217, &(0x7f0000003080)=0xd9) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000002940)) 2.62951785s ago: executing program 0 (id=6098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d74736", 0xb1}], 0x1}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd646, 0x7, 0x10000000000f, 0x100000000, 0x1fe, 0x0, 0x58, 0x8000000000000001, 0xc7, 0x7fff, 0x101, 0x392ad71a, 0x1], 0xdddd1000, 0x141a54}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x7f, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x1, 0xfe, 0x9, 0x8, 0x5, 0x0, 0x80000001, 0x81e, 0x8, 0xe, 0xb6, 0x61, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406000005240004000d240f010900000000000000000424020a090581032000037fff09058202000000010009050302"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x400c630e, r4}], 0x0, 0x0, 0x0}) 2.580754891s ago: executing program 5 (id=6099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000003ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2.571415981s ago: executing program 5 (id=6100): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2c}], 0x1}, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/135, 0xfffffffffffffeca}], 0x1, 0xfffffffc, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.497388702s ago: executing program 5 (id=6101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) gettid() (rerun: 32) r1 = signalfd4(r0, 0x0, 0x0, 0x80800) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (rerun: 32) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x2404c004, 0x0, 0x0) (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 2.494321952s ago: executing program 5 (id=6102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010117, 0x0, 0x100000000}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x400000000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (rerun: 64) 2.480469153s ago: executing program 5 (id=6103): write(0xffffffffffffffff, &(0x7f0000000600)="fc0000001c000704ab5b2509b86803000aab02000000000000001193210001c0f0030584050060100000000081", 0x2d) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffff09000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2.471521233s ago: executing program 5 (id=6104): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/151, 0x1205000, 0x1000, 0x5, 0x2}, 0x20) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x7, 0x1}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) socket$xdp(0x2c, 0x3, 0x0) 965.142456ms ago: executing program 3 (id=6110): mkdir(&(0x7f00000020c0)='./file1\x00', 0x1d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0xffdd) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket(0x1e, 0x1, 0x0) stat(0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{0x0, 0x14, 0x5, 0x1}, {0x703a, 0xdf, 0xd, 0xb}]}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000000000000000000007000000071714"], 0x28}}], 0x1, 0x40) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8203b, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1301}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 77.385299ms ago: executing program 1 (id=6122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 75.216239ms ago: executing program 1 (id=6123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x62442000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, 0x0}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 62.67939ms ago: executing program 1 (id=6124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, &(0x7f00000004c0)="09921ed1caab15024f4d0b92a2497e5a0ca68c7c3d968b627c92fad0491073a7c2ea56ad66a76e1258bf950d83534c8eebcb7760a311fb63fd7d4bd127c48263538b1a4ba5503fad42067296960b17814e9307f36a13897342b8f4cf693e018aa685dc1f9bd951402a8901969a90d7f911241e5691aec589c35dec3c5b8eb06a426193ef8cdc7fbd4fa7aaa6bec6d733d707c068137d403849c6a96082b8befd86793f495bd90f930f792b1ebff7bbb2a379fc3affee32f4c2dc", 0xba, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @empty, 0x800}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f0000000440)="60f9a8d41bf24b5e8aaeb76caabde5e329ef50c179798b070d25cd969ff38ad0a69daa02e1d42e8637c4b5344becbb87ca649bbdf220f8497e4cd98e3aea8e696a9f1e52445d815e9a1f022a51a4092378"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 53.52126ms ago: executing program 1 (id=6125): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c82, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xfffffffffffffff9, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.588081ms ago: executing program 1 (id=6126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000032ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 0s ago: executing program 1 (id=6127): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x400000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x80300) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/84, 0x54, 0x1, 0x24}, @fda={0x66646185, 0x3, 0x1, 0x1d}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/84, 0x54, 0x1, 0x24}, @fda={0x66646185, 0x3, 0x1, 0x1d}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T458] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 252.818930][ T458] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.827961][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.835967][ T458] usb 1-1: Product: syz [ 252.840162][ T458] usb 1-1: Manufacturer: syz [ 252.844742][ T458] usb 1-1: SerialNumber: syz [ 252.989699][T12497] overlayfs: failed to clone upperpath [ 253.609014][ T458] usb 1-1: 0:2 : does not exist [ 253.618205][ T458] usb 1-1: USB disconnect, device number 11 [ 253.632929][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.639657][T12504] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 253.652378][T12504] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 253.660181][T12504] rust_binder: Read failure Err(EFAULT) in pid:439 [ 254.241644][T12512] rust_binder: Write failure EFAULT in pid:443 [ 254.264379][T12514] loop2: detected capacity change from 0 to 7 [ 254.310996][T12518] rust_binder: inc_ref_done called when no active inc_refs [ 254.311021][T12518] rust_binder: Write failure EINVAL in pid:449 [ 254.370335][T12520] tipc: Started in network mode [ 254.381536][T12520] tipc: Node identity e65b8bf8e3ad, cluster identity 4711 [ 254.388811][T12520] tipc: Enabled bearer , priority 0 [ 254.399957][T12521] tipc: Disabling bearer [ 254.512290][T12548] fuseblk: Bad value for 'fd' [ 254.518313][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 254.518330][ T2257] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.582977][T12560] overlay: ./file0 is not a directory [ 254.744552][ T36] audit: type=1326 audit(1751892652.381:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.4378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66638e929 code=0x0 [ 254.874503][ T373] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 255.043219][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.054213][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.063984][ T373] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 255.073076][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.081748][ T373] usb 1-1: config 0 descriptor?? [ 255.302441][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.310968][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.534414][ T373] usbhid 1-1:0.0: can't add hid device: -71 [ 255.545904][ T373] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.556571][ T373] usb 1-1: USB disconnect, device number 12 [ 255.739737][T12595] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4387'. [ 256.173415][T12627] tipc: Enabled bearer , priority 0 [ 256.180829][T12628] tipc: Disabling bearer [ 257.014120][T12683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.014150][T12683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.021019][T12683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.021036][T12683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.202269][ T36] audit: type=1400 audit(1751892654.673:1080): avc: denied { setattr } for pid=12689 comm="syz.0.4419" path="socket:[57826]" dev="sockfs" ino=57826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.332530][T12695] fuse: Unknown parameter 'obj_user' [ 257.337921][T12695] fuse: Unknown parameter 'obj_user' [ 257.343481][T12695] fuse: Unknown parameter 'obj_user' [ 257.645613][T12715] overlayfs: failed to resolve './file1': -2 [ 257.707256][T12723] fuseblk: Bad value for 'fd' [ 257.758106][T12730] overlayfs: conflicting options: userxattr,redirect_dir=on [ 257.766300][T12730] netlink: 'syz.1.4435': attribute type 4 has an invalid length. [ 257.780602][T12730] netlink: 'syz.1.4435': attribute type 4 has an invalid length. [ 257.896911][T12734] input: syz0 as /devices/virtual/input/input24 [ 257.916028][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4438'. [ 257.963417][T12750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.103246][T12754] netlink: 'syz.3.4442': attribute type 5 has an invalid length. [ 258.117659][T12754] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4442'. [ 258.158446][T12762] rust_binder: Error while translating object. [ 258.158482][T12762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.169599][T12762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 258.205715][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 258.495253][ T458] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 258.634211][ T458] usb 1-1: device descriptor read/64, error -71 [ 258.890815][ T458] usb 1-1: device descriptor read/64, error -71 [ 259.147440][ T458] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.286340][ T458] usb 1-1: device descriptor read/64, error -71 [ 259.542899][ T458] usb 1-1: device descriptor read/64, error -71 [ 259.661380][ T458] usb usb1-port1: attempt power cycle [ 259.861457][T12849] mmap: syz.1.4480 (12849): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 259.885130][T12852] overlayfs: failed to clone upperpath [ 260.024016][ T458] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 260.046370][ T458] usb 1-1: device descriptor read/8, error -71 [ 260.185498][ T458] usb 1-1: device descriptor read/8, error -71 [ 260.226486][T12875] can: request_module (can-proto-6) failed. [ 260.440930][ T458] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 260.463386][ T458] usb 1-1: device descriptor read/8, error -71 [ 260.602407][ T458] usb 1-1: device descriptor read/8, error -71 [ 260.718968][ T458] usb usb1-port1: unable to enumerate USB device [ 261.130795][T12894] overlayfs: failed to clone upperpath [ 261.173905][T12900] overlay: Unknown parameter 'subj_type' [ 261.232996][T12919] fuse: Unknown parameter '^0hu$$NlPǛmqU4' [ 261.251694][T12921] 9pnet_fd: Insufficient options for proto=fd [ 261.343605][T12931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4507'. [ 261.425466][T12944] overlayfs: failed to resolve './file2': -2 [ 262.130193][ T306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 262.290381][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 262.296626][ T306] usb 1-1: config index 0 descriptor too short (expected 20061, got 68) [ 262.305156][ T306] usb 1-1: config 131 has too many interfaces: 219, using maximum allowed: 32 [ 262.314148][ T306] usb 1-1: config 131 has an invalid descriptor of length 222, skipping remainder of the config [ 262.324595][ T306] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 219 [ 262.334672][ T306] usb 1-1: config index 1 descriptor too short (expected 20061, got 68) [ 262.343018][ T306] usb 1-1: config 131 has too many interfaces: 219, using maximum allowed: 32 [ 262.351887][ T306] usb 1-1: config 131 has an invalid descriptor of length 222, skipping remainder of the config [ 262.362415][ T306] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 219 [ 262.372409][ T306] usb 1-1: config index 2 descriptor too short (expected 20061, got 68) [ 262.380789][ T306] usb 1-1: config 131 has too many interfaces: 219, using maximum allowed: 32 [ 262.389670][ T306] usb 1-1: config 131 has an invalid descriptor of length 222, skipping remainder of the config [ 262.400202][ T306] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 219 [ 262.410177][ T306] usb 1-1: config index 3 descriptor too short (expected 20061, got 68) [ 262.418502][ T306] usb 1-1: config 131 has too many interfaces: 219, using maximum allowed: 32 [ 262.427403][ T306] usb 1-1: config 131 has an invalid descriptor of length 222, skipping remainder of the config [ 262.437894][ T306] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 219 [ 262.447920][ T306] usb 1-1: config index 4 descriptor too short (expected 20061, got 68) [ 262.456319][ T306] usb 1-1: config 131 has too many interfaces: 219, using maximum allowed: 32 [ 262.465188][ T306] usb 1-1: config 131 has an invalid descriptor of length 222, skipping remainder of the config [ 262.475623][ T306] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 219 [ 262.485704][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.494776][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.502742][ T306] usb 1-1: SerialNumber: syz [ 262.691005][T13024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 262.691037][T13024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:247 [ 262.727266][ T306] usb 1-1: USB disconnect, device number 17 [ 262.837257][T13028] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 263.193406][T13061] overlayfs: failed to resolve './file0': -2 [ 263.268515][T13082] 9pnet_fd: Insufficient options for proto=fd [ 263.294989][ T36] audit: type=1400 audit(2000000001.159:1081): avc: denied { execute } for pid=13086 comm="syz.4.4559" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.328025][T13093] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 263.328040][T13093] rust_binder: Read failure Err(EFAULT) in pid:278 [ 263.539987][T13129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.829856][ T799] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 264.001933][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.012905][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.022647][ T799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.035479][ T799] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 264.044517][ T799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.053125][ T799] usb 1-1: config 0 descriptor?? [ 264.430468][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.437523][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.446752][T13153] bridge_slave_0: entered allmulticast mode [ 264.453285][T13153] bridge_slave_0: entered promiscuous mode [ 264.459771][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.467159][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.474244][T13153] bridge_slave_1: entered allmulticast mode [ 264.480574][T13153] bridge_slave_1: entered promiscuous mode [ 264.486981][T13108] veth0_to_bridge: left allmulticast mode [ 264.488591][T13168] syz.3.4582 (13168): attempted to duplicate a private mapping with mremap. This is not supported. [ 264.492916][T13108] veth0_to_bridge: left promiscuous mode [ 264.509572][T13108] bridge0: port 3(veth0_to_bridge) entered disabled state [ 264.517327][T13108] bridge_slave_1: left allmulticast mode [ 264.523047][T13108] bridge_slave_1: left promiscuous mode [ 264.528908][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.549703][T13108] bridge0 (unregistering): left allmulticast mode [ 264.643017][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.650085][T13153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.657376][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.664415][T13153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.672283][T13108] tipc: Left network mode [ 264.686962][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.694219][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.703297][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.710377][T13103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.719725][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.726782][T13104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.734854][T13132] binder: Unknown parameter 'c' [ 264.741875][ T799] usbhid 1-1:0.0: can't add hid device: -71 [ 264.747958][ T799] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 264.760627][ T799] usb 1-1: USB disconnect, device number 18 [ 264.790028][T13153] veth0_vlan: entered promiscuous mode [ 264.801077][T13153] veth1_macvtap: entered promiscuous mode [ 265.123442][ T325] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 265.262386][ T325] usb 2-1: device descriptor read/64, error -71 [ 265.436280][T13198] netlink: 'syz.0.4591': attribute type 1 has an invalid length. [ 265.518980][ T325] usb 2-1: device descriptor read/64, error -71 [ 265.834224][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4612'. [ 265.851632][T13258] overlayfs: conflicting options: userxattr,redirect_dir=on [ 265.861057][ T325] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 266.000046][ T325] usb 2-1: device descriptor read/64, error -71 [ 266.256607][ T325] usb 2-1: device descriptor read/64, error -71 [ 266.374264][ T325] usb usb2-port1: attempt power cycle [ 266.737719][ T325] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 266.760244][ T325] usb 2-1: device descriptor read/8, error -71 [ 266.899054][ T325] usb 2-1: device descriptor read/8, error -71 [ 267.165314][ T325] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 267.187771][ T325] usb 2-1: device descriptor read/8, error -71 [ 267.226964][T13312] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4634'. [ 267.236714][T13312] tmpfs: Unknown parameter 'Voswap' [ 267.326862][ T325] usb 2-1: device descriptor read/8, error -71 [ 267.443344][ T325] usb usb2-port1: unable to enumerate USB device [ 268.126186][T13323] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 268.135996][ T36] audit: type=1400 audit(2000000005.696:1082): avc: denied { relabelto } for pid=13322 comm="syz.1.4637" name="file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 268.147067][T13323] 9pnet_fd: Insufficient options for proto=fd [ 268.162577][ T36] audit: type=1400 audit(2000000005.696:1083): avc: denied { associate } for pid=13322 comm="syz.1.4637" name="file0" dev="tmpfs" ino=36 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 268.195783][ T36] audit: type=1400 audit(2000000005.705:1084): avc: denied { mounton } for pid=13322 comm="syz.1.4637" path="/3/file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 268.226476][ T36] audit: type=1400 audit(2000000005.780:1085): avc: denied { unlink } for pid=13153 comm="syz-executor" name="file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 268.233997][T13325] overlayfs: workdir and upperdir must be separate subtrees [ 268.293551][T13332] rust_binder: Error while translating object. [ 268.293573][T13332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 268.299805][T13332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:23 [ 268.369599][T13334] 9pnet_fd: Insufficient options for proto=fd [ 268.565769][ T325] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 268.727225][ T325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.737416][ T325] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.746369][ T325] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 268.755454][ T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.764038][ T325] usb 2-1: config 0 descriptor?? [ 268.985272][T13332] tmpfs: Bad value for 'nr_inodes' [ 269.015110][ T325] usb 2-1: USB disconnect, device number 55 [ 269.581023][T13371] netlink: 'syz.1.4656': attribute type 27 has an invalid length. [ 269.589063][T13371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 269.998301][ T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 270.169574][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 270.175737][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 270.185987][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 270.195065][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.205712][ T31] usb 2-1: Product: syz [ 270.209868][ T31] usb 2-1: Manufacturer: syz [ 270.214461][ T31] usb 2-1: SerialNumber: syz [ 270.219573][ T31] usb 2-1: config 0 descriptor?? [ 270.225482][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 270.233196][ T31] usb 2-1: Detected FT232R [ 270.651422][T13424] fuse: Bad value for 'fd' [ 270.661538][T13377] binder: Unknown parameter 'fowner>00000000000000000000' [ 270.674140][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 270.681447][ T31] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 270.693532][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 270.703119][ T31] usb 2-1: USB disconnect, device number 56 [ 270.711716][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 270.735406][ T31] ftdi_sio 2-1:0.0: device disconnected [ 270.739839][T13434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4677'. [ 271.274340][T13463] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 271.283360][T13463] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 271.359615][T13479] syz.4.4693: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 271.377520][T13479] CPU: 0 UID: 0 PID: 13479 Comm: syz.4.4693 Not tainted 6.12.30-syzkaller-ge87018c5f9d0 #0 5b8259740197b16b9e7f8b82a160421e9e39f8e6 [ 271.377550][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.377563][T13479] Call Trace: [ 271.377569][T13479] [ 271.377578][T13479] __dump_stack+0x21/0x30 [ 271.377618][T13479] dump_stack_lvl+0x10c/0x190 [ 271.377638][T13479] ? __cfi_dump_stack_lvl+0x10/0x10 [ 271.377659][T13479] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 271.377676][T13479] dump_stack+0x19/0x20 [ 271.377696][T13479] warn_alloc+0x1bc/0x2a0 [ 271.377716][T13479] ? __kasan_slab_free+0x5f/0x80 [ 271.377740][T13479] ? __cfi_warn_alloc+0x10/0x10 [ 271.377758][T13479] ? __get_vm_area_node+0x1dc/0x3a0 [ 271.377777][T13479] ? xskq_create+0xdb/0x2a0 [ 271.377797][T13479] __vmalloc_node_range_noprof+0x68e/0x1420 [ 271.377821][T13479] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 271.377843][T13479] ? avc_has_perm+0x144/0x220 [ 271.377863][T13479] ? kasan_save_alloc_info+0x40/0x50 [ 271.377882][T13479] ? __kasan_kmalloc+0x96/0xb0 [ 271.377905][T13479] vmalloc_user_noprof+0x77/0x90 [ 271.377925][T13479] ? xskq_create+0xdb/0x2a0 [ 271.377944][T13479] xskq_create+0xdb/0x2a0 [ 271.377964][T13479] xsk_init_queue+0xb6/0x120 [ 271.377983][T13479] xsk_setsockopt+0x4dc/0x6f0 [ 271.378003][T13479] ? __cfi_xsk_setsockopt+0x10/0x10 [ 271.378023][T13479] ? do_futex+0x309/0x500 [ 271.378051][T13479] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 271.378071][T13479] ? security_socket_setsockopt+0x33/0xd0 [ 271.378096][T13479] ? __cfi_xsk_setsockopt+0x10/0x10 [ 271.378117][T13479] do_sock_setsockopt+0x26a/0x400 [ 271.378140][T13479] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 271.378162][T13479] __x64_sys_setsockopt+0x1b8/0x250 [ 271.378185][T13479] x64_sys_call+0x2adc/0x2ee0 [ 271.378210][T13479] do_syscall_64+0x58/0xf0 [ 271.378229][T13479] ? clear_bhb_loop+0x50/0xa0 [ 271.378251][T13479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 271.378271][T13479] RIP: 0033:0x7f83b7f8e929 [ 271.378295][T13479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.378312][T13479] RSP: 002b:00007f83b8e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.378334][T13479] RAX: ffffffffffffffda RBX: 00007f83b81b5fa0 RCX: 00007f83b7f8e929 [ 271.378349][T13479] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 271.378363][T13479] RBP: 00007f83b8010b39 R08: 0000000000000004 R09: 0000000000000000 [ 271.378377][T13479] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 271.378390][T13479] R13: 0000000000000000 R14: 00007f83b81b5fa0 R15: 00007ffcb8528688 [ 271.378407][T13479] [ 271.378419][T13479] Mem-Info: [ 271.645426][T13479] active_anon:6974 inactive_anon:549 isolated_anon:0 [ 271.645426][T13479] active_file:21879 inactive_file:2554 isolated_file:0 [ 271.645426][T13479] unevictable:1 dirty:48 writeback:0 [ 271.645426][T13479] slab_reclaimable:5753 slab_unreclaimable:70644 [ 271.645426][T13479] mapped:24653 shmem:229 pagetables:1091 [ 271.645426][T13479] sec_pagetables:0 bounce:0 [ 271.645426][T13479] kernel_misc_reclaimable:0 [ 271.645426][T13479] free:1520748 free_pcp:3513 free_cma:0 [ 271.690350][T13479] Node 0 active_anon:27896kB inactive_anon:2196kB active_file:87516kB inactive_file:10216kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:98612kB dirty:192kB writeback:0kB shmem:916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5280kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no [ 271.722258][T13479] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5788kB free_cma:0kB [ 271.752142][T13479] lowmem_reserve[]: 0 3921 3921 [ 271.757006][T13479] Normal free:3122780kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27896kB inactive_anon:2196kB active_file:87516kB inactive_file:10216kB unevictable:4kB writepending:192kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:8260kB local_pcp:1552kB free_cma:0kB [ 271.788471][T13479] lowmem_reserve[]: 0 0 0 [ 271.792810][T13479] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 271.808183][T13479] Normal: 3773*4kB (UME) 372*8kB (UME) 580*16kB (UME) 1182*32kB (UME) 437*64kB (UME) 225*128kB (UME) 140*256kB (UME) 59*512kB (UME) 20*1024kB (UME) 15*2048kB (UME) 704*4096kB (UM) = 3122772kB [ 271.827137][T13479] 25211 total pagecache pages [ 271.831802][T13479] 552 pages in swap cache [ 271.836100][T13479] Free swap = 122164kB [ 271.840265][T13479] Total swap = 124996kB [ 271.844405][T13479] 2097051 pages RAM [ 271.848278][T13479] 0 pages HighMem/MovableOnly [ 271.852941][T13479] 351521 pages reserved [ 271.857094][T13479] 0 pages cma reserved [ 271.862405][T13479] Memory allocations: [ 271.866377][T13479] 0 B 0 init/main.c:1370 func:do_initcalls [ 271.873611][T13479] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 271.881688][T13479] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 271.889296][T13479] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 271.897195][T13479] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 271.905182][T13479] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 271.913781][T13479] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 271.921660][T13479] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 271.929554][T13479] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 271.937463][T13479] 0 B 0 init/initramfs.c:101 func:find_link [ 271.977359][T13493] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4696'. [ 271.990288][T13494] rust_binder: Error in use_page_slow: ESRCH [ 271.990310][T13494] rust_binder: use_range failure ESRCH [ 271.996312][T13494] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 272.002755][T13494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 272.010548][T13494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 272.084434][T13524] netlink: 'syz.4.4706': attribute type 27 has an invalid length. [ 272.494364][T13545] rust_binder: Write failure EFAULT in pid:394 [ 272.844407][T13550] overlayfs: failed to resolve './file0': -2 [ 273.038272][T13569] rust_binder: got new transaction with bad transaction stack [ 273.038296][T13569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 273.201957][ T36] audit: type=1400 audit(2000000010.429:1086): avc: denied { sys_module } for pid=13580 comm="syz.3.4727" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.029611][ T306] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 274.189051][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 274.195715][ T306] usb 2-1: config 0 has no interfaces? [ 274.202617][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.211950][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.219941][ T306] usb 2-1: SerialNumber: syz [ 274.229667][ T306] usb 2-1: config 0 descriptor?? [ 274.454788][ T36] audit: type=1400 audit(2000000011.598:1087): avc: denied { read write } for pid=13599 comm="syz.1.4734" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.478368][ T36] audit: type=1400 audit(2000000011.598:1088): avc: denied { open } for pid=13599 comm="syz.1.4734" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.501772][ T36] audit: type=1400 audit(2000000011.636:1089): avc: denied { map } for pid=13599 comm="syz.1.4734" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.502854][ T325] usb 2-1: USB disconnect, device number 57 [ 275.231282][T13716] tmpfs: Unknown parameter 'n' [ 275.522596][ T36] audit: type=1400 audit(2000000012.599:1090): avc: denied { audit_read } for pid=13740 comm="syz.3.4789" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.527637][T13727] rust_binder: Write failure EFAULT in pid:68 [ 276.075013][T13749] fuseblk: Unknown parameter '0x0000000000000004' [ 276.348580][ T10] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 276.509974][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.521048][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.530804][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 276.539886][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.548491][ T10] usb 2-1: config 0 descriptor?? [ 276.982520][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.991147][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.266793][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 277.273076][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.284995][ T10] usb 2-1: USB disconnect, device number 58 [ 277.818906][T13834] overlayfs: missing 'lowerdir' [ 277.832049][T13836] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 277.832071][T13836] rust_binder: Error while translating object. [ 277.842575][T13836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.848901][T13836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 277.989196][T13852] >: renamed from veth0_vlan [ 278.005239][T13104] Bluetooth: hci0: Frame reassembly failed (-84) [ 280.175777][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 280.176454][ T2257] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.216911][ T36] audit: type=1400 audit(2000000016.996:1091): avc: denied { append } for pid=13912 comm="syz.1.4850" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.259228][T13917] netlink: 'syz.1.4852': attribute type 40 has an invalid length. [ 280.341288][T13925] input: syz1 as /devices/virtual/input/input25 [ 280.397952][T13928] rust_binder: 13928: no such ref 4294967295 [ 280.403983][T13928] rust_binder: 13928: no such ref 0 [ 280.494532][T13933] netlink: 'syz.1.4858': attribute type 11 has an invalid length. [ 280.502429][T13933] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 280.510183][T13933] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.4858'. [ 280.881383][ T31] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 281.042662][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.053693][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.063447][ T31] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 281.072484][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.081084][ T31] usb 2-1: config 0 descriptor?? [ 281.284986][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 281.317077][T13956] 9pnet_fd: Insufficient options for proto=fd [ 281.571441][ T31] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 281.578951][ T31] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 281.586323][ T31] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 281.593764][ T31] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 281.601171][ T31] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 281.608835][ T31] hid-generic 0003:04F3:0754.001B: failed to start in urb: -90 [ 281.616816][ T31] hid-generic 0003:04F3:0754.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.1-1/input0 [ 281.794812][ T31] usb 2-1: USB disconnect, device number 59 [ 282.036118][T14006] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=14006 comm=syz.0.4883 [ 282.878082][T14018] overlayfs: failed to clone upperpath [ 282.900736][T14022] 9pnet_fd: Insufficient options for proto=fd [ 283.167612][T13104] Bluetooth: hci0: Frame reassembly failed (-84) [ 283.676366][T14068] overlayfs: failed to resolve './file1': -2 [ 284.161356][ T36] audit: type=1400 audit(2000000020.681:1092): avc: denied { watch watch_reads } for pid=14096 comm="syz.1.4915" path="/49/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 284.185831][T14101] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 284.333818][ T31] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 284.342622][ T31] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.424803][ T36] audit: type=1326 audit(2000000020.934:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.1.4924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647ab8e929 code=0x0 [ 284.953484][ T36] audit: type=1400 audit(2000000021.420:1094): avc: denied { nlmsg_write } for pid=14152 comm="syz.0.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 284.966025][T14156] overlayfs: failed to resolve './bus': -2 [ 285.190267][ T36] audit: type=1400 audit(2000000021.654:1095): avc: denied { lock } for pid=14173 comm="syz.3.4941" path="socket:[64110]" dev="sockfs" ino=64110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 285.275682][T14188] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 285.296154][ T36] audit: type=1326 audit(2000000021.738:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14189 comm="syz.3.4946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8e929 code=0x0 [ 285.307280][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 285.328793][ T2257] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 285.348607][T14193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.348797][T14193] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 285.356350][T14193] rust_binder: Read failure Err(EFAULT) in pid:431 [ 285.523738][T14209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.590237][T14214] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 285.596730][T14214] rust_binder: Read failure Err(EFAULT) in pid:441 [ 285.692745][T14225] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 285.692780][T14224] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 285.699276][T14225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 285.699300][T14225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:172 [ 285.725665][T14224] rust_binder: Error while translating object. [ 285.735267][T14224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.741495][T14224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 286.109077][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 286.291879][ T10] usb 2-1: config 1 has an invalid interface number: 229 but max is 1 [ 286.300148][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.310448][ T10] usb 2-1: config 1 has no interface number 0 [ 286.316678][ T10] usb 2-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 286.329116][ T10] usb 2-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 286.355056][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.371605][ T10] usb 2-1: config 1 interface 229 has no altsetting 0 [ 286.378587][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 286.386653][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.395976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.408397][ T10] usb 2-1: Product: syz [ 286.412622][ T10] usb 2-1: Manufacturer: syz [ 286.417254][ T10] usb 2-1: SerialNumber: syz [ 286.653538][T14228] __vm_enough_memory: pid: 14228, comm: syz.1.4956, bytes: 70373039144960 not enough memory for the allocation [ 286.697794][T14257] /dev/loop0: Can't lookup blockdev [ 288.156645][T14303] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4984'. [ 289.013809][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 289.027850][T14339] : renamed from lo (while UP) [ 289.030537][ T10] usb 2-1: USB disconnect, device number 60 [ 290.044926][T14376] can0: slcan on ttyS3. [ 290.048596][ T36] audit: type=1400 audit(2000000026.191:1097): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 290.070720][ T36] audit: type=1400 audit(2000000026.191:1098): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.092889][ T36] audit: type=1400 audit(2000000026.191:1099): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=5902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.143388][ T36] audit: type=1400 audit(2000000026.191:1100): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.218772][ T36] audit: type=1400 audit(2000000026.191:1101): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.278396][ T36] audit: type=1400 audit(2000000026.237:1102): avc: denied { read } for pid=14379 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.337297][ T36] audit: type=1400 audit(2000000026.237:1103): avc: denied { open } for pid=14379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.337760][T14407] can0 (unregistered): slcan off ttyS3. [ 290.387497][ T36] audit: type=1400 audit(2000000026.237:1104): avc: denied { getattr } for pid=14379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.434500][ T36] audit: type=1400 audit(2000000026.350:1105): avc: denied { write } for pid=14378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.487271][ T36] audit: type=1400 audit(2000000026.350:1106): avc: denied { add_name } for pid=14378 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.669681][T14441] netlink: 'syz.3.5028': attribute type 4 has an invalid length. [ 290.679406][T14441] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5028'. [ 290.827686][T14455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 290.927774][T14470] rust_binder: Error while translating object. [ 290.951929][T14470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 290.958178][T14470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 291.219184][ T306] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 291.391225][ T306] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 291.399934][ T306] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 291.410202][ T306] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 291.421538][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.433146][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.441182][ T306] usb 2-1: SerialNumber: syz [ 291.631123][T14476] fuse: Unknown parameter '00000000000000000000006' [ 291.669288][ T306] usb 2-1: USB disconnect, device number 61 [ 291.687866][T14483] 9pnet_fd: Insufficient options for proto=fd [ 291.751284][T14495] binfmt_misc: register: failed to install interpreter file ./file0 [ 292.229660][T14526] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5059'. [ 292.491386][ T306] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 292.653778][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.659271][T14561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.664975][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 292.682303][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 292.691369][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.699513][ T306] usb 2-1: SerialNumber: syz [ 292.708230][ T306] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 292.716618][ T306] usb-storage 2-1:1.0: USB Mass Storage device detected [ 292.722869][T14562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 292.724795][ T306] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 292.742198][ T306] scsi host1: usb-storage 2-1:1.0 [ 293.180240][T14575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=14575 comm=syz.0.5073 [ 293.253014][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'. [ 293.262176][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5077'. [ 293.618574][T14630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.618885][T14630] rust_binder: 14630: no such ref 2 [ 293.688071][T14633] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 293.688098][T14633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 293.696541][T14633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:505 [ 294.074922][ T799] usb 2-1: USB disconnect, device number 62 [ 294.518625][T14656] cgroup: No subsys list or none specified [ 294.650267][T14665] rust_binder: inc_ref_done called when no active inc_refs [ 294.650286][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.657598][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.663796][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.670002][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.676181][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.682352][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.688543][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.694725][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.700872][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.707045][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.713199][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.719385][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.725548][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.731725][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.737899][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.744040][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.750209][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.756364][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.762529][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.768716][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.774862][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.781043][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.787196][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.793393][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.799568][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.805759][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.812242][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.818398][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.824588][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.830747][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.836932][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.843096][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.849293][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.855474][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.861641][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.867830][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.873995][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.880195][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.886420][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.892580][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.898767][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.905077][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.911294][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.917476][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.923683][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.929884][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.936043][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.942227][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.948401][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.954612][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.960778][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.966980][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.973323][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.979709][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.985935][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.992114][T14665] rust_binder: Write failure EINVAL in pid:200 [ 294.998332][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.004532][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.011126][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.017310][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.023470][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.029805][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.036020][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.042184][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.048500][T14665] rust_binder: Write failure EINVAL in pid:200 [ 295.101075][T14678] rust_binder: 14678: no such ref 0 [ 295.367141][ T45] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 295.506102][ T45] usb 2-1: device descriptor read/64, error -71 [ 295.762711][ T45] usb 2-1: device descriptor read/64, error -71 [ 296.019253][ T45] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 296.158236][ T45] usb 2-1: device descriptor read/64, error -71 [ 296.414810][ T45] usb 2-1: device descriptor read/64, error -71 [ 296.532930][ T45] usb usb2-port1: attempt power cycle [ 296.895885][ T45] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 296.918275][ T45] usb 2-1: device descriptor read/8, error -71 [ 297.057373][ T45] usb 2-1: device descriptor read/8, error -71 [ 297.312822][ T45] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 297.326513][T14714] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5124'. [ 297.336522][ T45] usb 2-1: device descriptor read/8, error -71 [ 297.417446][T14743] netlink: 'syz.3.5134': attribute type 46 has an invalid length. [ 297.418100][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 297.418115][ T36] audit: type=1326 audit(2000000033.082:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.5134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8e929 code=0x0 [ 297.458519][T14750] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5136'. [ 297.486334][ T45] usb 2-1: device descriptor read/8, error -71 [ 297.511216][T14764] tipc: Enabling of bearer rejected, failed to enable media [ 297.612269][ T45] usb usb2-port1: unable to enumerate USB device [ 297.663125][T14777] bpf: Bad value for 'gid' [ 297.676925][T14779] xt_NFQUEUE: number of total queues is 0 [ 297.743464][T14804] /dev/rnullb0: Can't lookup blockdev [ 297.818733][T14814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.392908][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.400653][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.400861][T14839] rust_binder: 14839: no such ref 2 [ 298.407499][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.419167][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.426035][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.432605][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.439236][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.445691][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.452414][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.458896][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.465412][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.471870][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.478996][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.485424][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.491845][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.498256][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.504715][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.511138][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.517535][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.524003][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.530414][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.536840][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.543330][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.549788][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.556213][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.562618][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.569058][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.575476][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.581869][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.588286][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.594699][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.618226][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 298.632668][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.796643][T14858] netlink: 'syz.4.5171': attribute type 64 has an invalid length. [ 298.897800][ T36] audit: type=1400 audit(2000000034.476:1120): avc: denied { read } for pid=14872 comm="syz.1.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.918026][ T36] audit: type=1400 audit(2000000034.476:1121): avc: denied { read } for pid=14872 comm="syz.1.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.952110][T14875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5176'. [ 298.963936][ T36] audit: type=1326 audit(2000000034.532:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz.3.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3eb8e929 code=0x7fc00000 [ 298.988425][T14874] /dev/rnullb0: Can't open blockdev [ 299.283586][T14884] fuse: Bad value for 'fd' [ 299.939669][ T36] audit: type=1400 audit(2000000035.439:1123): avc: denied { execute } for pid=14906 comm="syz.1.5185" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.018853][T14921] netlink: 'syz.0.5190': attribute type 12 has an invalid length. [ 300.813938][ T36] audit: type=1400 audit(2000000036.262:1124): avc: denied { map } for pid=14948 comm="syz.1.5202" path="socket:[66747]" dev="sockfs" ino=66747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.837218][ T36] audit: type=1326 audit(2000000036.262:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.1.5202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f647ab8e929 code=0x0 [ 301.879472][T14989] rust_binder: Failed to allocate buffer. len:80, is_oneway:false [ 301.923303][T14995] netlink: 'syz.3.5219': attribute type 4 has an invalid length. [ 302.055107][T15000] cgroup: fork rejected by pids controller in /syz3 [ 302.092041][T15028] SELinux: policydb magic number 0x656b6177 does not match expected magic number 0xf97cff8c [ 302.102401][T15028] SELinux: failed to load policy [ 302.108062][T15028] rust_binder: Write failure EINVAL in pid:531 [ 302.108144][T15028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531 [ 303.249537][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5225'. [ 303.273544][T15144] ip6_vti0: entered promiscuous mode [ 303.279136][T15144] ip6_vti0: entered allmulticast mode [ 303.316519][T15150] tipc: Enabling of bearer rejected, failed to enable media [ 303.357556][T15153] tipc: Enabling of bearer rejected, failed to enable media [ 303.442192][T15167] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 303.465508][T15167] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 303.528712][T15174] overlayfs: failed to clone upperpath [ 303.542346][T15174] overlayfs: failed to clone upperpath [ 303.801261][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.816703][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.026046][T15209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.026207][T15209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 304.032740][T15209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:542 [ 304.047905][ T325] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 304.097389][ T36] audit: type=1400 audit(2000000039.331:1126): avc: denied { remount } for pid=15212 comm="syz.4.5249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 304.219378][ T325] usb 2-1: Using ep0 maxpacket: 16 [ 304.225565][ T325] usb 2-1: config 0 has no interfaces? [ 304.231797][ T325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.240869][ T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 304.248868][ T325] usb 2-1: SerialNumber: syz [ 304.254094][ T325] usb 2-1: config 0 descriptor?? [ 304.474164][ T325] usb 2-1: USB disconnect, device number 67 [ 305.156426][T15232] kvm: pic: non byte write [ 305.161345][T15232] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 305.448380][ T325] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 305.608716][ T325] usb 2-1: Invalid ep0 maxpacket: 64 [ 305.747712][ T325] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 305.908093][ T325] usb 2-1: Invalid ep0 maxpacket: 64 [ 305.913548][ T325] usb usb2-port1: attempt power cycle [ 306.282237][ T325] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 306.304005][ T325] usb 2-1: Invalid ep0 maxpacket: 64 [ 306.442602][ T325] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 306.464301][ T325] usb 2-1: Invalid ep0 maxpacket: 64 [ 306.469721][ T325] usb usb2-port1: unable to enumerate USB device [ 306.686007][T15297] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5276'. [ 306.695118][T15297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.702350][T15297] IPv6: NLM_F_CREATE should be set when creating new route [ 306.709569][T15297] IPv6: NLM_F_CREATE should be set when creating new route [ 306.850170][T15320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15320 comm=syz.0.5285 [ 306.902428][T15329] netlink: 'syz.0.5288': attribute type 4 has an invalid length. [ 306.939254][ T36] audit: type=1400 audit(2000000041.996:1127): avc: denied { create } for pid=15337 comm="syz.0.5291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 306.943382][T15338] netlink: 'syz.0.5291': attribute type 153 has an invalid length. [ 307.376190][T15356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.378202][T15356] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 307.384858][T15356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 307.392923][T15356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:556 [ 307.535553][T15374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.595256][T15372] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.608838][T15372] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.615948][T15372] bridge_slave_0: entered allmulticast mode [ 307.624696][T15372] bridge_slave_0: entered promiscuous mode [ 307.631297][T15372] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.638326][T15372] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.645407][T15372] bridge_slave_1: entered allmulticast mode [ 307.651734][T15372] bridge_slave_1: entered promiscuous mode [ 307.712565][T15372] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.719609][T15372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.726877][T15372] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.733891][T15372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.752413][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.760993][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.781419][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.788470][T13105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.797670][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.804730][T13105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.825338][T15372] veth0_vlan: entered promiscuous mode [ 307.837356][T15372] veth1_macvtap: entered promiscuous mode [ 307.854601][ T36] audit: type=1400 audit(2000000042.857:1128): avc: denied { mounton } for pid=15372 comm="syz-executor" path="/root/syzkaller.i1wAij/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 308.195951][ T31] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 308.325291][T15400] rust_binder: 15400: no such ref 1 [ 308.330503][T15400] rust_binder: Write failure EINVAL in pid:566 [ 308.366929][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 308.474727][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.482396][ T31] usb 4-1: no configurations [ 308.487311][ T31] usb 4-1: can't read configurations, error -22 [ 308.496256][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.496382][T15427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 308.508826][T15427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:585 [ 308.508895][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.518498][T15427] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 308.527434][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.560195][T15427] rust_binder: Read failure Err(EFAULT) in pid:585 [ 308.560365][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.579350][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.591953][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.604443][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.616976][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.629476][T15426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15426 comm=syz.4.5325 [ 308.651878][T15429] /dev/rnullb0: Can't open blockdev [ 308.660150][T15429] rust_binder: Write failure EINVAL in pid:589 [ 308.847989][ T306] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 309.019084][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 309.028779][ T306] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 309.039021][ T306] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.049919][ T306] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.059693][ T306] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.072611][ T306] usb 2-1: config 7 interface 0 has no altsetting 0 [ 309.079385][ T306] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 309.088924][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.097066][T13105] bridge_slave_1: left allmulticast mode [ 309.102735][T13105] bridge_slave_1: left promiscuous mode [ 309.108475][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.116078][T13105] bridge_slave_0: left allmulticast mode [ 309.121722][T13105] bridge_slave_0: left promiscuous mode [ 309.127438][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.255342][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.262552][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.271217][T15443] bridge_slave_0: entered allmulticast mode [ 309.283343][T15443] bridge_slave_0: entered promiscuous mode [ 309.294642][T13105] veth1_macvtap: left promiscuous mode [ 309.300197][T13105] veth0_vlan: left promiscuous mode [ 309.338976][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.346097][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.353234][T15443] bridge_slave_1: entered allmulticast mode [ 309.359608][T15443] bridge_slave_1: entered promiscuous mode [ 309.441408][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.448505][T15443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.455756][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.462809][T15443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.489158][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.496558][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.506669][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.513733][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.523459][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.530489][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.570188][T15443] veth0_vlan: entered promiscuous mode [ 309.583333][T15443] veth1_macvtap: entered promiscuous mode [ 309.729354][T15485] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 309.790318][ T36] audit: type=1400 audit(2000000044.662:1129): avc: denied { append } for pid=15492 comm="syz.5.5349" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.830696][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'. [ 309.846615][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'. [ 309.874842][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5350'. [ 309.915583][ T36] audit: type=1400 audit(2000000044.775:1130): avc: denied { connect } for pid=15510 comm="syz.3.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.949282][ T306] usbhid 2-1:7.0: can't add hid device: -71 [ 309.956380][ T306] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 309.965167][ T306] usb 2-1: USB disconnect, device number 72 [ 309.986775][T15515] tipc: Started in network mode [ 309.991681][T15515] tipc: Node identity 56e9e155b6c, cluster identity 4711 [ 309.999329][T15515] tipc: Enabled bearer , priority 0 [ 310.007337][T15515] tipc: Disabling bearer [ 310.026038][ T36] audit: type=1326 audit(2000000044.887:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15522 comm="syz.1.5362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f647ab8e929 code=0x0 [ 310.124886][T15547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 310.125016][T15548] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 310.154407][T15554] netlink: 'syz.0.5371': attribute type 1 has an invalid length. [ 310.183327][T15558] netlink: 'syz.5.5374': attribute type 27 has an invalid length. [ 310.220078][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.227300][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.282435][T15571] SELinux: failed to load policy [ 310.558490][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 310.592029][T15598] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 310.637645][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'. [ 310.740215][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 310.746693][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.755068][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 310.763272][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 310.773416][ T10] usb 2-1: config 4 has no interface number 0 [ 310.781839][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 310.790886][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.798936][ T10] usb 2-1: Product: syz [ 310.803095][ T10] usb 2-1: Manufacturer: syz [ 310.807884][ T10] usb 2-1: SerialNumber: syz [ 310.824536][T15621] rust_binder: Write failure EINVAL in pid:58 [ 310.990746][T15633] rust_binder: Error while translating object. [ 310.997022][T15633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 311.003185][T15633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 311.013063][T15634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.013388][ T36] audit: type=1326 audit(2000000045.804:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f8e929 code=0x7fc00000 [ 311.060532][ T10] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 311.066944][ T10] usb 2-1: No streaming interface found for terminal 6. [ 311.075383][ T10] usb 2-1: USB disconnect, device number 73 [ 311.104374][T15637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.220215][ T799] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 311.232475][ T799] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.316664][T15655] SELinux: security_context_str_to_sid (syGй :) failed with errno=-22 [ 311.340059][T15659] tipc: Started in network mode [ 311.344947][T15659] tipc: Node identity 8abe72d38ecb, cluster identity 4711 [ 311.352141][T15659] tipc: Enabled bearer , priority 0 [ 311.370052][T15659] syzkaller0: entered promiscuous mode [ 311.375560][T15659] syzkaller0: entered allmulticast mode [ 311.381280][T15659] tipc: Resetting bearer [ 311.404699][T15658] tipc: Resetting bearer [ 311.416563][T15658] tipc: Disabling bearer [ 311.697248][ T36] audit: type=1400 audit(2000000046.440:1133): avc: denied { mounton } for pid=15681 comm="syz.1.5418" path="/syzcgroup/unified/syz1" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 311.707333][T15684] rust_binder: 15684: no such ref 3 [ 311.735798][T15688] kvm: kvm [15669]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 311.750430][T15688] rust_binder: Write failure EFAULT in pid:91 [ 311.770127][T15694] tipc: Enabled bearer , priority 0 [ 311.783439][T15694] tipc: Disabling bearer [ 311.904288][T15699] binder: Unknown parameter 'fscontext?}' [ 312.056952][T15720] input: syz0 as /devices/virtual/input/input27 [ 312.125290][T15720] rust_binder: Error in use_page_slow: ESRCH [ 312.125315][T15720] rust_binder: use_range failure ESRCH [ 312.131638][T15720] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 312.137193][T15720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 312.145235][T15720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63 [ 312.537754][T15736] overlayfs: failed to clone upperpath [ 312.621794][ T325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 312.782120][ T325] usb 6-1: Using ep0 maxpacket: 16 [ 312.788336][ T325] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.799359][ T325] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.809218][ T325] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.815845][ T325] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 312.824895][ T325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.833499][ T325] usb 6-1: config 0 descriptor?? [ 312.838509][ T799] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 313.007732][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.018783][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.028568][ T799] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 313.037610][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.046235][ T799] usb 4-1: config 0 descriptor?? [ 313.276568][ T325] apple 0003:05AC:0247.001F: unexpected long global item [ 313.283780][ T325] apple 0003:05AC:0247.001F: parse failed [ 313.289631][ T325] apple 0003:05AC:0247.001F: probe with driver apple failed with error -22 [ 313.480847][ T799] hid-generic 0003:04F3:0754.0020: unknown main item tag 0x0 [ 313.488348][ T799] hid-generic 0003:04F3:0754.0020: unknown main item tag 0x0 [ 313.493886][ T306] usb 6-1: USB disconnect, device number 2 [ 313.495739][ T799] hid-generic 0003:04F3:0754.0020: unknown main item tag 0x0 [ 313.508955][ T799] hid-generic 0003:04F3:0754.0020: unknown main item tag 0x0 [ 313.516373][ T799] hid-generic 0003:04F3:0754.0020: unknown main item tag 0x0 [ 313.523913][ T799] hid-generic 0003:04F3:0754.0020: failed to start in urb: -90 [ 313.531975][ T799] hid-generic 0003:04F3:0754.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.3-1/input0 [ 313.730406][T15761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.738955][T15761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.747524][ T799] usb 4-1: USB disconnect, device number 71 [ 314.170258][T15800] fuse: Bad value for 'fd' [ 314.186482][T15804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 314.186586][T15804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 314.196057][T15804] rust_binder: Write failure EINVAL in pid:132 [ 314.300350][ T799] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.449878][ T799] usb 6-1: device descriptor read/64, error -71 [ 314.495394][T15817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5463'. [ 314.529713][T15828] overlayfs: failed to resolve './bus': -2 [ 314.587355][T15837] netlink: 'syz.1.5470': attribute type 6 has an invalid length. [ 314.706455][ T799] usb 6-1: device descriptor read/64, error -71 [ 314.963027][ T799] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 315.102021][ T799] usb 6-1: device descriptor read/64, error -71 [ 315.252972][ T36] audit: type=1400 audit(2000000049.770:1134): avc: denied { create } for pid=15870 comm="syz.1.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 315.360111][ T799] usb 6-1: device descriptor read/64, error -71 [ 315.382182][T15900] overlayfs: failed to clone lowerpath [ 315.400757][ T36] audit: type=1400 audit(2000000049.901:1135): avc: denied { sys_nice } for pid=15905 comm="syz.1.5497" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 315.455190][T15906] fuseblk: Bad value for 'fd' [ 315.487007][ T799] usb usb6-port1: attempt power cycle [ 315.499888][T15909] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5498'. [ 315.626906][T15913] rust_binder: Error while translating object. [ 315.626946][T15913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 315.633166][T15913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 315.715201][T15919] netlink: 57 bytes leftover after parsing attributes in process `syz.3.5503'. [ 315.803666][T15926] batadv_slave_0: entered promiscuous mode [ 315.810719][T15925] batadv_slave_0: left promiscuous mode [ 315.850411][ T799] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 315.865210][T15928] rust_binder: Failed to allocate buffer. len:80, is_oneway:false [ 315.872744][ T799] usb 6-1: device descriptor read/8, error -71 [ 315.948526][T15932] netlink: 'syz.3.5509': attribute type 2 has an invalid length. [ 316.022487][ T799] usb 6-1: device descriptor read/8, error -71 [ 316.044314][T15945] rust_binder: Write failure EINVAL in pid:193 [ 316.052913][T15947] rust_binder: Write failure EINVAL in pid:197 [ 316.059234][T15947] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 316.065416][T15947] rust_binder: Read failure Err(EFAULT) in pid:197 [ 316.073665][T15948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.277966][ T799] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 316.311091][ T799] usb 6-1: device descriptor read/8, error -71 [ 316.336054][T15965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 316.336283][T15965] rust_binder: Error while translating object. [ 316.345499][T15965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.351669][T15965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 316.450444][ T799] usb 6-1: device descriptor read/8, error -71 [ 316.577402][ T799] usb usb6-port1: unable to enumerate USB device [ 316.737651][ T45] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 316.899053][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 316.907064][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 316.916126][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.924127][ T45] usb 4-1: Product: syz [ 316.928278][ T45] usb 4-1: Manufacturer: syz [ 316.932883][ T45] usb 4-1: SerialNumber: syz [ 317.153270][T15982] tmpfs: Unknown parameter 'mMAY_READ' [ 317.159759][T15982] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5524'. [ 317.190656][ T45] usb 4-1: USB disconnect, device number 72 [ 317.266865][ T36] audit: type=1400 audit(2000000000.636:1136): avc: denied { nlmsg_tty_audit } for pid=16004 comm="syz.5.5532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 317.411003][T16032] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 317.531364][T16045] 9pnet_fd: Insufficient options for proto=fd [ 318.009868][ T799] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 318.171307][ T799] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.182348][ T799] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 318.193158][ T799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.199757][ T799] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 318.208815][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.217312][ T799] usb 4-1: config 0 descriptor?? [ 318.222567][T16051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 318.659528][ T799] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0 [ 318.668241][ T799] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0 [ 318.676352][ T799] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0 [ 318.684463][ T799] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0 [ 318.692552][ T799] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0 [ 318.880291][ T799] usb 4-1: USB disconnect, device number 73 [ 319.548660][T16149] __vm_enough_memory: pid: 16149, comm: syz.0.5586, bytes: 21199986176000 not enough memory for the allocation [ 319.589384][T16151] rust_binder: inc_ref_done called when no active inc_refs [ 319.589403][T16151] rust_binder: Write failure EINVAL in pid:133 [ 319.760077][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5590'. [ 319.784490][ T799] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 319.945907][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.956951][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.966738][ T799] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 319.975769][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.984328][ T799] usb 4-1: config 0 descriptor?? [ 320.008974][ T306] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 320.170508][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.181517][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.191330][ T306] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 320.200471][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.212169][ T306] usb 6-1: config 0 descriptor?? [ 320.223176][ T799] usbhid 4-1:0.0: can't add hid device: -71 [ 320.229372][ T799] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 320.250398][ T799] usb 4-1: USB disconnect, device number 74 [ 320.285450][T16194] 9pnet: p9_errstr2errno: server reported unknown error 1 .Ԟt9_ιٛ.Ӆ# [ 320.321528][T16196] /dev/rnullb0: Can't lookup blockdev [ 320.654047][ T306] hid-generic 0003:04F3:0754.0022: unknown main item tag 0x0 [ 320.672614][ T306] hid-generic 0003:04F3:0754.0022: unknown main item tag 0x0 [ 320.687398][ T306] hid-generic 0003:04F3:0754.0022: unknown main item tag 0x0 [ 320.702107][ T306] hid-generic 0003:04F3:0754.0022: unknown main item tag 0x0 [ 320.714962][ T306] hid-generic 0003:04F3:0754.0022: unknown main item tag 0x0 [ 320.723373][ T306] hid-generic 0003:04F3:0754.0022: failed to start in urb: -90 [ 320.735446][ T306] hid-generic 0003:04F3:0754.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 320.880635][ T799] usb 6-1: USB disconnect, device number 7 [ 321.412741][ T36] audit: type=1400 audit(2000000004.517:1137): avc: denied { validate_trans } for pid=16233 comm="syz.3.5621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 321.775032][T16278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5636'. [ 322.236405][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5639'. [ 322.325223][T16289] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 322.325382][T16289] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 322.333335][T16289] rust_binder: Read failure Err(EFAULT) in pid:156 [ 322.458820][T16309] rust_binder: Error while translating object. [ 322.465455][T16309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.473193][T16309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 322.613385][T16313] 9pnet: Could not find request transport: f~ [ 322.724750][ T799] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 322.896833][ T799] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.904828][ T799] usb 4-1: not running at top speed; connect to a high speed hub [ 322.913291][ T799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.923411][ T799] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 322.932399][ T799] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 322.944734][ T799] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.954076][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.962168][ T799] usb 4-1: Product: syz [ 322.966338][ T799] usb 4-1: Manufacturer: syz [ 322.970938][ T799] usb 4-1: SerialNumber: syz [ 323.210006][ T799] usb 4-1: 0:2 : does not exist [ 323.218131][ T799] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 323.228369][ T799] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 323.238551][ T799] usb 4-1: USB disconnect, device number 75 [ 323.246236][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.921400][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 324.082717][T16438] netlink: 'syz.0.5691': attribute type 63 has an invalid length. [ 324.090710][T16438] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5691'. [ 324.101919][T16438] gretap0: entered allmulticast mode [ 324.112870][T16438] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 324.185580][T16455] netlink: 928 bytes leftover after parsing attributes in process `syz.0.5699'. [ 324.481342][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.488549][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.495634][T16481] bridge_slave_0: entered allmulticast mode [ 324.502177][T16481] bridge_slave_0: entered promiscuous mode [ 324.509001][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.516397][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.523677][T16481] bridge_slave_1: entered allmulticast mode [ 324.530014][T16481] bridge_slave_1: entered promiscuous mode [ 324.595357][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.602428][T16481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.609715][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.616748][T16481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.642363][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.650316][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.660362][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.667402][T13106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.677314][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.680790][ T306] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 324.684402][T13108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.721099][T16481] veth0_vlan: entered promiscuous mode [ 324.733552][T16481] veth1_macvtap: entered promiscuous mode [ 324.810065][T16489] binder: Unknown parameter '' [ 324.867459][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 324.875118][ T306] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 324.883212][ T306] usb 4-1: config 0 has no interface number 0 [ 324.890361][ T306] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 324.900673][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.918732][ T306] usb 4-1: config 0 descriptor?? [ 325.281784][ T306] usb 4-1: USB disconnect, device number 76 [ 325.664323][ T306] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 325.760722][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 325.835354][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 325.847996][ T306] usb 4-1: config 58 has an invalid interface number: 159 but max is 0 [ 325.856336][ T306] usb 4-1: config 58 has no interface number 0 [ 325.862576][ T306] usb 4-1: config 58 interface 159 has no altsetting 0 [ 325.871664][ T306] usb 4-1: New USB device found, idVendor=0421, idProduct=0445, bcdDevice=e6.38 [ 325.880768][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.888818][ T306] usb 4-1: Product: syz [ 325.893019][ T306] usb 4-1: Manufacturer: syz [ 325.897635][ T306] usb 4-1: SerialNumber: syz [ 325.921932][ T45] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 325.930114][ T45] usb 6-1: config 0 has no interface number 0 [ 325.937762][ T45] usb 6-1: config 0 interface 208 has no altsetting 0 [ 325.946612][ T45] usb 6-1: New USB device found, idVendor=0403, idProduct=fa04, bcdDevice=97.e1 [ 325.955805][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.963862][ T45] usb 6-1: Product: syz [ 325.968052][ T45] usb 6-1: Manufacturer: syz [ 325.972682][ T45] usb 6-1: SerialNumber: syz [ 325.985337][ T45] usb 6-1: config 0 descriptor?? [ 326.129916][ T306] usb 4-1: bad CDC descriptors [ 326.135349][ T306] cdc_acm 4-1:58.159: Zero length descriptor references [ 326.142338][ T306] cdc_acm 4-1:58.159: probe with driver cdc_acm failed with error -22 [ 326.152178][ T306] usb 4-1: USB disconnect, device number 77 [ 326.208265][ T45] ftdi_sio 6-1:0.208: FTDI USB Serial Device converter detected [ 326.216406][ T45] ftdi_sio ttyUSB0: unknown device type: 0x97e1 [ 326.227082][ T45] usb 6-1: USB disconnect, device number 8 [ 326.237814][ T45] ftdi_sio 6-1:0.208: device disconnected [ 326.414968][T16509] overlayfs: failed to clone upperpath [ 327.077031][T16584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.077596][T16584] rust_binder: Error while translating object. [ 327.084154][T16584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.090608][T16584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 327.289275][ T325] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 327.364113][ T799] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 327.439044][ T325] usb 4-1: device descriptor read/64, error -71 [ 327.524468][ T799] usb 6-1: Using ep0 maxpacket: 16 [ 327.530768][ T799] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.541859][ T799] usb 6-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.555036][ T799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 327.561865][ T799] usb 6-1: New USB device found, idVendor=04c9, idProduct=a070, bcdDevice= 0.00 [ 327.571289][ T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.586479][ T799] usb 6-1: config 0 descriptor?? [ 327.632751][T13105] bridge_slave_1: left allmulticast mode [ 327.638531][T13105] bridge_slave_1: left promiscuous mode [ 327.644553][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.652259][T13105] bridge_slave_0: left allmulticast mode [ 327.658165][T13105] bridge_slave_0: left promiscuous mode [ 327.663880][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.716962][ T325] usb 4-1: device descriptor read/64, error -71 [ 327.845353][T13105] tipc: Left network mode [ 327.920809][T13105] veth1_macvtap: left promiscuous mode [ 327.926403][T13105] veth0_vlan: left promiscuous mode [ 327.973528][ T325] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 328.025061][ T799] usbhid 6-1:0.0: can't add hid device: -71 [ 328.031051][ T799] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 328.042077][ T799] usb 6-1: USB disconnect, device number 9 [ 328.112460][ T325] usb 4-1: device descriptor read/64, error -71 [ 328.126030][ T36] audit: type=1326 audit(309.494:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.0.5710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3413b858e7 code=0x7fc00000 [ 328.172465][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5750'. [ 328.181595][T16601] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5750'. [ 328.367523][T16608] incfs: Error accessing: ./file0. [ 328.369066][ T325] usb 4-1: device descriptor read/64, error -71 [ 328.372703][T16608] incfs: mount failed -20 [ 328.393207][T16610] 9pnet_fd: Insufficient options for proto=fd [ 328.443873][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 328.486677][ T325] usb usb4-port1: attempt power cycle [ 328.615562][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 328.627974][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 328.647067][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 328.657187][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.680229][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.689286][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.700440][ T10] usb 1-1: Product: [ [ 328.704824][ T10] usb 1-1: Manufacturer: ȱ餈鉲㟻罁觇吝两譻씮풴껃튂㎜餌⪹ࢋ븞祿ၞ㈘襊뇏齜羣ቜऋ慛縦촅䘴↸גּ࿒ᜧ砈㜬㸭肹獮刘ᎉ梪净⫰掻뻸쒼ﯗ邯⮯풆㻏눤°頛ꠅ [ 328.725045][ T10] usb 1-1: SerialNumber: с [ 328.770116][T16636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.860859][ T325] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 328.883206][ T325] usb 4-1: device descriptor read/8, error -71 [ 329.022135][ T325] usb 4-1: device descriptor read/8, error -71 [ 329.277757][ T325] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 329.300143][ T325] usb 4-1: device descriptor read/8, error -71 [ 329.439112][ T325] usb 4-1: device descriptor read/8, error -71 [ 329.536494][ T10] usb 1-1: 0:2 : does not exist [ 329.543090][ T10] usb 1-1: USB disconnect, device number 19 [ 329.552755][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 329.569458][ T325] usb usb4-port1: unable to enumerate USB device [ 330.079975][T16685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.080506][T16685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 330.087161][T16685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:242 [ 330.274391][T16695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.292884][T16695] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 330.292908][T16695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 330.301652][T16695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:336 [ 330.483724][ T36] audit: type=1326 audit(311.692:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.3.5791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f8e929 code=0x0 [ 330.696325][ T36] audit: type=1326 audit(311.898:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.5.5792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92b5f8e929 code=0x0 [ 330.784560][T16719] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 330.859324][T16724] rust_binder: Error while translating object. [ 330.867326][T16724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.873655][T16724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 331.631814][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5802'. [ 331.967952][T16782] can0: slcan on ttyS3. [ 332.027805][T16782] can0 (unregistered): slcan off ttyS3. [ 332.152015][T16806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.226817][T16827] binder: Unknown parameter 'maxMhQ#Dwm̕)r' [ 332.456120][T16868] incfs: Options parsing error. -22 [ 332.463450][T16868] incfs: mount failed -22 [ 332.497223][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.497251][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.497804][T16883] rust_binder: Write failure EINVAL in pid:96 [ 332.503839][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.516358][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.522830][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.529365][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.535779][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.542316][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.548733][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.555265][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.564735][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.571330][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.577911][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.584536][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.591016][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.597462][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.602504][ T325] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 332.606255][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.617832][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.624343][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.630762][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.637123][T16897] netlink: 'syz.1.5843': attribute type 12 has an invalid length. [ 332.637420][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.651675][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.658343][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.664929][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.671624][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.678158][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.684581][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.691356][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.697777][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.704506][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.711077][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.717642][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.724523][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.731199][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.737623][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.744377][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.750867][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.757485][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.764062][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.771683][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.778204][ T325] usb 6-1: Using ep0 maxpacket: 16 [ 332.778223][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.785798][ T325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.789827][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.797437][ T325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.806561][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.814232][ T325] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 332.821774][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.830100][ T325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.837883][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.850960][ T325] usb 6-1: Product: syz [ 332.856373][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.860882][ T325] usb 6-1: Manufacturer: syz [ 332.863794][T16918] binder: Bad value for 'max' [ 332.868426][ T325] usb 6-1: SerialNumber: syz [ 332.876267][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.888048][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.894670][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.901261][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.907932][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.914420][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.920874][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.927863][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.934593][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.941093][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.947986][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.954453][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.961107][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.968206][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.974681][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.981214][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.987712][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.994140][T16881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.117947][T16932] rust_binder: 16932: no such ref 7 [ 333.240139][T13108] Bluetooth: hci0: Frame reassembly failed (-84) [ 333.266714][ T36] audit: type=1400 audit(314.302:1141): avc: denied { relabelfrom } for pid=16946 comm="syz.0.5861" name="" dev="pipefs" ino=77175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 333.303287][T16949] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 333.303312][T16949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 333.312036][T16949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:115 [ 333.316095][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.346857][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.541164][T16961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 334.337861][T16964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5867'. [ 334.357310][ T36] audit: type=1400 audit(315.321:1142): avc: denied { write } for pid=16963 comm="syz.0.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.376840][ T36] audit: type=1400 audit(315.321:1143): avc: denied { map } for pid=16963 comm="syz.0.5867" path="socket:[76319]" dev="sockfs" ino=76319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.400345][ T36] audit: type=1326 audit(315.340:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.0.5867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3413b8e929 code=0x0 [ 335.359748][ T36] audit: type=1326 audit(316.257:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.0.5871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3413b8e929 code=0x0 [ 335.424940][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 335.425981][ T2257] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.445412][T16976] rust_binder: 16976: no such ref 0 [ 335.450733][T16977] rust_binder: Write failure EINVAL in pid:385 [ 335.511131][ T325] usb 6-1: 0:2 : does not exist [ 335.527792][ T325] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 335.544107][T16989] usb usb8: usbfs: process 16989 (syz.3.5877) did not claim interface 32 before use [ 335.546268][ T325] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 335.567188][ T325] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 335.577812][ T325] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 335.589923][ T325] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 335.600370][ T325] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 335.612756][ T325] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 335.623347][ T325] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 335.635904][ T325] usb 6-1: USB disconnect, device number 10 [ 335.743604][T17005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.743640][T17005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.750191][T17005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.756666][T17005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.782536][ T459] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 335.791275][ T459] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.810725][T17009] fido_id[17009]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.985755][ T36] audit: type=1326 audit(316.846:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.1.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647ab8e929 code=0x7fc00000 [ 335.993719][ T325] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 336.183846][ T325] usb 6-1: Using ep0 maxpacket: 32 [ 336.190012][ T325] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 336.199725][ T325] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 336.210814][ T325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.219978][ T325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.227974][ T325] usb 6-1: Product: ﲸ쁓枦ꃞ峾ጛ鳒앒Ż [ 336.234111][ T325] usb 6-1: Manufacturer: ࠝ [ 336.238702][ T325] usb 6-1: SerialNumber: 월룋茨ሑ煺㽭꒮ꆭ躁畹奩⭿䏖䟙蘻鳬趸䮵ᯁ㵏橂㠿敊ꪈ蕿쪀ᰣ㼱찉顊鿣ᐩ㚕睃反톣ꅜ鎝ꇌꪖ퍖蒙☹㏽翛礳뷽䰗檥궜Ꙟ꭭Բ [ 336.266011][T16993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 336.279030][T17017] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5887'. [ 336.279502][T16993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 336.359046][T17021] tun0: tun_chr_ioctl cmd 1074025675 [ 336.364443][T17021] tun0: persist enabled [ 336.371197][T17021] tun0: tun_chr_ioctl cmd 1074025675 [ 336.376790][T17021] tun0: persist enabled [ 336.686321][ T459] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 336.736587][T16993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.745203][T16993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.754068][T16993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.762813][T16993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.773028][T16993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.781888][T16993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.795928][ T325] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 336.801725][T17055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 336.807038][T17056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.822211][ T325] usb 6-1: USB disconnect, device number 11 [ 336.836514][ T325] usblp0: removed [ 336.845684][T17061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 336.846671][ T459] usb 4-1: Using ep0 maxpacket: 32 [ 336.862585][ T459] usb 4-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 336.872872][ T459] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.883092][ T459] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.892145][ T459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.903912][ T459] usb 4-1: Product: ⠁ [ 336.908065][ T459] usb 4-1: Manufacturer: 涩ퟟ饽摖焜捸뜺規怅ᒍ㠃걜ጅ厙ಿ惙핹⚾駪䦇모툇慴蓌￁搶驪䴗섫ﻲ꠨煗渑飜闍ᗉ뢘﫠梩흣リ⓻㵆鬬춀䎅礜帓㾿좊搎ﶱ罢ꞷ嶑궫ﶺ쫹涾美 [ 336.929081][ T459] usb 4-1: SerialNumber: syz [ 337.542950][T17076] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 337.611380][T17086] overlay: ./file0 is not a directory [ 337.947816][ T325] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 337.968502][T17111] netlink: 'syz.0.5919': attribute type 4 has an invalid length. [ 337.976277][T17111] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5919'. [ 338.086786][ T325] usb 6-1: device descriptor read/64, error -71 [ 338.189575][T17122] tc_dump_action: action bad kind [ 338.222967][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5928'. [ 338.289154][T17144] overlayfs: failed to clone lowerpath [ 338.305399][T17146] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 338.343538][ T325] usb 6-1: device descriptor read/64, error -71 [ 338.599955][ T325] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 338.738933][ T325] usb 6-1: device descriptor read/64, error -71 [ 338.883043][T17156] netlink: 'syz.1.5937': attribute type 64 has an invalid length. [ 338.890961][T17156] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5937'. [ 338.995504][ T325] usb 6-1: device descriptor read/64, error -71 [ 339.053008][T17174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205 [ 339.061635][ T36] audit: type=1326 audit(319.727:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.5945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3413b8e929 code=0x0 [ 339.113236][ T325] usb usb6-port1: attempt power cycle [ 339.476579][ T325] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 339.498988][ T325] usb 6-1: device descriptor read/8, error -71 [ 339.648770][ T325] usb 6-1: device descriptor read/8, error -71 [ 339.693505][ T459] usb 4-1: 0:2 : does not exist [ 339.710309][ T459] usb 4-1: USB disconnect, device number 82 [ 339.728048][T17194] rust_binder: Write failure EFAULT in pid:425 [ 339.751229][T17198] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 339.818588][T17205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.818837][T17205] rust_binder: Error in use_page_slow: ESRCH [ 339.825264][T17205] rust_binder: use_range failure ESRCH [ 339.831319][T17205] rust_binder: Failed to allocate buffer. len:296, is_oneway:true [ 339.836800][T17205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 339.844694][T17205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:436 [ 339.914992][ T325] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 339.947977][ T325] usb 6-1: device descriptor read/8, error -71 [ 339.974871][T17217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 339.975085][T17217] rust_binder: Error while translating object. [ 339.984330][T17217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 339.990521][T17217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 340.086951][ T325] usb 6-1: device descriptor read/8, error -71 [ 340.214766][ T325] usb usb6-port1: unable to enumerate USB device [ 340.256998][ T373] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 340.417362][ T373] usb 4-1: device descriptor read/64, error -71 [ 340.684621][ T373] usb 4-1: device descriptor read/64, error -71 [ 340.923167][T17269] __vm_enough_memory: pid: 17269, comm: syz.5.5978, bytes: 1125899906846720 not enough memory for the allocation [ 340.941314][ T373] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 340.977357][T17276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.978244][ T36] audit: type=1400 audit(321.514:1148): avc: denied { mounton } for pid=17275 comm="syz.5.5981" path="/proc/319/cgroup" dev="proc" ino=78212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 340.980279][T17276] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 340.985431][ T36] audit: type=1400 audit(321.514:1149): avc: denied { remount } for pid=17275 comm="syz.5.5981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 341.007277][T17276] rust_binder: Read failure Err(EFAULT) in pid:319 [ 341.055369][T17280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 341.062957][T17280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:321 [ 341.070608][T17282] 9pnet_fd: Insufficient options for proto=fd [ 341.072577][T17280] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 341.088142][T17280] rust_binder: Read failure Err(EFAULT) in pid:321 [ 341.090994][ T373] usb 4-1: device descriptor read/64, error -71 [ 341.116303][ T36] audit: type=1400 audit(321.645:1150): avc: denied { accept } for pid=17281 comm="syz.0.5984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 341.250081][ T36] audit: type=1326 audit(321.766:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.0.5989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3413b8e929 code=0x0 [ 341.336689][T17300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.379749][ T373] usb 4-1: device descriptor read/64, error -71 [ 341.436101][T17304] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.443934][T17304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 341.497338][ C1] Adjusting tsc more than 11% (6175861 vs 8464260) [ 341.509814][ T373] usb usb4-port1: attempt power cycle [ 341.628570][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5995'. [ 341.668729][T17316] 9pnet_fd: Insufficient options for proto=fd [ 341.929535][ T306] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 341.941972][ T373] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 341.967761][ T373] usb 4-1: device descriptor read/8, error -71 [ 342.115918][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.125787][ T306] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 342.134999][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.143983][ T306] usb 6-1: config 0 descriptor?? [ 342.149140][ T373] usb 4-1: device descriptor read/8, error -71 [ 342.294469][T17324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 342.319496][T17328] netlink: 'syz.1.6003': attribute type 58 has an invalid length. [ 342.320060][T17327] rust_binder: Write failure EFAULT in pid:232 [ 342.362186][T17334] overlayfs: failed to clone upperpath [ 342.448172][ T373] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 342.474007][ T373] usb 4-1: device descriptor read/8, error -71 [ 342.634442][ T373] usb 4-1: device descriptor read/8, error -71 [ 342.653360][ T306] wacom 0003:056A:032B.0024: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.5-1/input0 [ 342.779793][ T373] usb usb4-port1: unable to enumerate USB device [ 342.895176][ T10] usb 6-1: USB disconnect, device number 16 [ 343.124450][ T325] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 343.303963][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.313728][ T325] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.322786][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.331292][ T325] usb 1-1: config 0 descriptor?? [ 343.337053][ T325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 343.507210][T17384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.508037][T17384] rust_binder: Error while translating object. [ 343.514532][T17384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.520825][T17384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 [ 343.578999][T17374] rust_binder: Error while translating object. [ 343.590042][T17374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.593714][ T36] audit: type=1400 audit(323.729:1152): avc: denied { setattr } for pid=17391 comm="syz.5.6028" name="PINGv6" dev="sockfs" ino=78676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.596681][T17374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 343.633775][T17374] tipc: Enabling of bearer rejected, failed to enable media [ 343.654549][ T325] usb 1-1: USB disconnect, device number 20 [ 343.883022][T17417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.891663][T17417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.909139][ T373] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 344.084318][ T373] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.092738][ T373] usb 6-1: config 1 interface 1 has no altsetting 0 [ 344.100824][ T373] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.109883][ T373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.118147][ T373] usb 6-1: Product: syz [ 344.122528][ T373] usb 6-1: Manufacturer: syz [ 344.127128][ T373] usb 6-1: SerialNumber: syz [ 344.134295][T17421] bpf: Bad value for 'uid' [ 344.152311][ T45] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 344.200403][T17438] tipc: Enabling of bearer rejected, failed to enable media [ 344.296447][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6047'. [ 344.327310][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.336949][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.346605][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.360864][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 344.365644][T17401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.369929][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 344.371561][T17401] rust_binder: Write failure EFAULT in pid:354 [ 344.376834][ T45] usb 4-1: Product: syz [ 344.394976][ T45] usb 4-1: Manufacturer: syz [ 344.400428][ T45] usb 4-1: SerialNumber: syz [ 344.405497][ T373] usb 6-1: found format II with max.bitrate = 2418, frame size=7 [ 344.413888][ T373] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 344.424435][ T373] usb 6-1: USB disconnect, device number 17 [ 344.431285][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 344.618088][T17460] tap0: tun_chr_ioctl cmd 1074025677 [ 344.623458][T17460] tap0: linktype set to 774 [ 344.628922][ T36] audit: type=1326 audit(324.611:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17459 comm="syz.0.6050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3413b8e929 code=0x0 [ 344.652328][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 344.745811][T17461] binder: Unknown parameter 'context' [ 344.885727][ T36] audit: type=1400 audit(324.836:1154): avc: denied { read write } for pid=17415 comm="syz.3.6035" name="lp0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 344.927267][ T36] audit: type=1400 audit(324.836:1155): avc: denied { open } for pid=17415 comm="syz.3.6035" path="/dev/usb/lp0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 345.000512][T17479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.090828][ T45] usb 4-1: USB disconnect, device number 87 [ 345.111063][ T45] usblp0: removed [ 345.276639][T17488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.338010][T17490] input: syz1 as /devices/virtual/input/input33 [ 345.419292][T17496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 345.419517][T17496] rust_binder: Error while translating object. [ 345.428699][T17496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.434980][T17496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 345.633306][T17512] netlink: 'syz.0.6066': attribute type 2 has an invalid length. [ 345.650460][T17512] rust_binder: Failed to allocate buffer. len:296, is_oneway:true [ 345.848441][ T45] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 346.007161][ T45] usb 4-1: device descriptor read/64, error -71 [ 346.208549][T17536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.208854][T17536] rust_binder: Error in use_page_slow: ESRCH [ 346.215323][T17536] rust_binder: use_range failure ESRCH [ 346.221306][T17536] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 346.226843][T17536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 346.234864][T17536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:371 [ 346.289406][ T45] usb 4-1: device descriptor read/64, error -71 [ 346.568747][ T45] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 346.713782][ T45] usb 4-1: device descriptor read/64, error -71 [ 346.877094][ T36] audit: type=1326 audit(326.597:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3413b8e929 code=0x7fc00000 [ 346.900079][ T36] audit: type=1326 audit(326.597:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3413b8e929 code=0x7fc00000 [ 346.981841][ T45] usb 4-1: device descriptor read/64, error -71 [ 346.983199][T17557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.988577][T17557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.047833][T17576] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 347.054467][T17576] rust_binder: Read failure Err(EFAULT) in pid:324 [ 347.079853][T17583] tipc: Started in network mode [ 347.091567][T17583] tipc: Node identity ac1414aa, cluster identity 4711 [ 347.098952][T17583] tipc: Enabled bearer , priority 10 [ 347.104831][ T45] usb usb4-port1: attempt power cycle [ 347.332923][T17615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.477677][ T45] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 347.499138][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 347.510716][ T45] usb 4-1: device descriptor read/8, error -71 [ 347.649784][ T45] usb 4-1: device descriptor read/8, error -71 [ 347.659407][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 347.665681][ T31] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 347.676527][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.686286][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 347.696013][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.705658][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 347.715333][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 347.728529][ T373] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 347.736860][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.745944][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.754033][ T31] usb 1-1: SerialNumber: syz [ 347.760790][ T31] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 347.768767][ T31] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 347.894579][ T373] usb 6-1: device descriptor read/64, error -71 [ 347.915958][ T45] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 347.938350][ T45] usb 4-1: device descriptor read/8, error -71 [ 347.975567][T17601] rust_binder: Write failure EFAULT in pid:332 [ 348.077338][ T45] usb 4-1: device descriptor read/8, error -71 [ 348.151176][ T373] usb 6-1: device descriptor read/64, error -71 [ 348.204722][ T45] usb usb4-port1: unable to enumerate USB device [ 348.300809][ T799] tipc: Node number set to 2886997162 [ 348.407723][ T373] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 348.546733][ T373] usb 6-1: device descriptor read/64, error -71 [ 348.803313][ T373] usb 6-1: device descriptor read/64, error -71 [ 348.887776][ T36] audit: type=1326 audit(328.459:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.3.6110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f8e929 code=0x0 [ 348.920978][ T373] usb usb6-port1: attempt power cycle [ 349.252283][ T45] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 349.284356][ T373] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 349.317457][ T373] usb 6-1: device descriptor read/8, error -71 [ 349.423333][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 349.435091][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.446186][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.466131][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.479044][ T373] usb 6-1: device descriptor read/8, error -71 [ 349.487488][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.507332][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.516885][ T45] usb 4-1: config 0 descriptor?? [ 349.634293][T17654] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6118'. [ 349.733360][ T373] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 349.755721][ T373] usb 6-1: device descriptor read/8, error -71 [ 349.894843][ T373] usb 6-1: device descriptor read/8, error -71 [ 349.956938][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 349.964208][ T45] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 349.972971][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 349.980202][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 349.987403][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 349.994619][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.001843][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.009030][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.016334][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.023569][ T373] usb usb6-port1: unable to enumerate USB device [ 350.031142][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.038465][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.045694][ T45] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 350.053578][ T45] ================================================================== [ 350.061651][ T45] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 350.069266][ T45] Read of size 1088 at addr ffff888112ca7be1 by task kworker/1:1/45 [ 350.077221][ T45] [ 350.079534][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.30-syzkaller-ge87018c5f9d0 #0 5b8259740197b16b9e7f8b82a160421e9e39f8e6 [ 350.079561][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.079577][ T45] Workqueue: usb_hub_wq hub_event [ 350.079613][ T45] Call Trace: [ 350.079618][ T45] [ 350.079625][ T45] __dump_stack+0x21/0x30 [ 350.079648][ T45] dump_stack_lvl+0x10c/0x190 [ 350.079664][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 350.079680][ T45] ? __cfi__printk+0x10/0x10 [ 350.079697][ T45] print_address_description+0x71/0x220 [ 350.079711][ T45] print_report+0x4a/0x70 [ 350.079721][ T45] kasan_report+0x163/0x1a0 [ 350.079738][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 350.079751][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 350.079764][ T45] kasan_check_range+0x299/0x2a0 [ 350.079780][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 350.079793][ T45] __asan_memcpy+0x31/0x80 [ 350.079809][ T45] mon_bin_event+0x12c1/0x23e0 [ 350.079823][ T45] ? mon_bin_complete+0x50/0x50 [ 350.079835][ T45] ? __kmalloc_noprof+0x1b1/0x450 [ 350.079853][ T45] ? __hid_request+0x1e5/0x410 [ 350.079867][ T45] ? hid_connect+0x49a/0x1a20 [ 350.079880][ T45] ? hid_hw_start+0xcb/0x160 [ 350.079893][ T45] ? ms_probe+0x194/0x460 [ 350.079905][ T45] ? __cfi_mon_bin_submit+0x10/0x10 [ 350.079923][ T45] mon_bin_submit+0x2b/0x40 [ 350.079935][ T45] mon_submit+0x1b9/0x230 [ 350.079951][ T45] usb_hcd_submit_urb+0x12d/0x1a20 [ 350.079970][ T45] ? bus_probe_device+0x18b/0x270 [ 350.079984][ T45] ? usb_probe_device+0x1d4/0x380 [ 350.080003][ T45] ? really_probe+0x2d3/0x890 [ 350.080017][ T45] ? __driver_probe_device+0x198/0x280 [ 350.080032][ T45] ? driver_probe_device+0x54/0x3f0 [ 350.080047][ T45] ? __device_attach_driver+0x2f1/0x4b0 [ 350.080063][ T45] usb_submit_urb+0x111b/0x1800 [ 350.080076][ T45] usb_start_wait_urb+0x11b/0x2f0 [ 350.080089][ T45] ? usb_api_blocking_completion+0xd0/0xd0 [ 350.080103][ T45] ? __kasan_kmalloc+0x96/0xb0 [ 350.080118][ T45] ? __kasan_check_write+0x18/0x20 [ 350.080130][ T45] ? usb_alloc_urb+0x9b/0x200 [ 350.080142][ T45] usb_control_msg+0x25a/0x490 [ 350.080155][ T45] usbhid_raw_request+0x457/0x590 [ 350.080168][ T45] __hid_request+0x1e5/0x410 [ 350.080182][ T45] hidinput_connect+0x241b/0x3340 [ 350.080200][ T45] hid_connect+0x49a/0x1a20 [ 350.080214][ T45] ? usbhid_start+0x1a67/0x2530 [ 350.080226][ T45] ? __cfi_hid_connect+0x10/0x10 [ 350.080240][ T45] hid_hw_start+0xcb/0x160 [ 350.080254][ T45] ms_probe+0x194/0x460 [ 350.080266][ T45] hid_device_probe+0x2c1/0x5d0 [ 350.080281][ T45] ? __cfi_hid_device_probe+0x10/0x10 [ 350.080296][ T45] really_probe+0x2d3/0x890 [ 350.080311][ T45] __driver_probe_device+0x198/0x280 [ 350.080326][ T45] driver_probe_device+0x54/0x3f0 [ 350.080341][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 350.080357][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.080372][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.080384][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 350.080400][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 350.080412][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 350.080424][ T45] __device_attach+0x2bd/0x3a0 [ 350.080439][ T45] ? device_attach+0x40/0x40 [ 350.080452][ T45] ? _raw_spin_lock+0x8c/0x120 [ 350.080462][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 350.080473][ T45] device_initial_probe+0x1e/0x30 [ 350.080487][ T45] bus_probe_device+0x18b/0x270 [ 350.080500][ T45] device_add+0x80c/0xc00 [ 350.080514][ T45] hid_add_device+0x39b/0x560 [ 350.080528][ T45] usbhid_probe+0xde3/0x12b0 [ 350.080542][ T45] usb_probe_interface+0x696/0xc00 [ 350.080558][ T45] ? __cfi_usb_probe_interface+0x10/0x10 [ 350.080573][ T45] really_probe+0x2d3/0x890 [ 350.080594][ T45] __driver_probe_device+0x198/0x280 [ 350.080610][ T45] driver_probe_device+0x54/0x3f0 [ 350.080627][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 350.080653][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.080680][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.080698][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 350.080714][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 350.080726][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 350.080738][ T45] __device_attach+0x2bd/0x3a0 [ 350.080752][ T45] ? device_attach+0x40/0x40 [ 350.080766][ T45] ? _raw_spin_lock+0x8c/0x120 [ 350.080776][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 350.080786][ T45] device_initial_probe+0x1e/0x30 [ 350.080801][ T45] bus_probe_device+0x18b/0x270 [ 350.080813][ T45] device_add+0x80c/0xc00 [ 350.080828][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 350.080847][ T45] usb_generic_driver_probe+0x95/0x160 [ 350.080860][ T45] usb_probe_device+0x1d4/0x380 [ 350.080875][ T45] ? __cfi_usb_probe_device+0x10/0x10 [ 350.080890][ T45] really_probe+0x2d3/0x890 [ 350.080906][ T45] __driver_probe_device+0x198/0x280 [ 350.080920][ T45] driver_probe_device+0x54/0x3f0 [ 350.080935][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 350.080951][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.080966][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.080978][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 350.080998][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 350.081020][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 350.081040][ T45] __device_attach+0x2bd/0x3a0 [ 350.081059][ T45] ? device_attach+0x40/0x40 [ 350.081072][ T45] ? _raw_spin_lock+0x8c/0x120 [ 350.081082][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 350.081093][ T45] device_initial_probe+0x1e/0x30 [ 350.081107][ T45] bus_probe_device+0x18b/0x270 [ 350.081119][ T45] device_add+0x80c/0xc00 [ 350.081134][ T45] usb_new_device+0x9ed/0x1590 [ 350.081148][ T45] ? __cfi_usb_new_device+0x10/0x10 [ 350.081161][ T45] hub_event+0x265b/0x41a0 [ 350.081180][ T45] ? __cfi_hub_event+0x10/0x10 [ 350.081194][ T45] ? __kasan_check_write+0x18/0x20 [ 350.081207][ T45] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 350.081222][ T45] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.081233][ T45] ? kick_pool+0xb9/0x550 [ 350.081243][ T45] process_scheduled_works+0x7d5/0x1020 [ 350.081260][ T45] worker_thread+0xc58/0x1250 [ 350.081277][ T45] kthread+0x2c7/0x370 [ 350.081291][ T45] ? __cfi_worker_thread+0x10/0x10 [ 350.081306][ T45] ? __cfi_kthread+0x10/0x10 [ 350.081321][ T45] ret_from_fork+0x64/0xa0 [ 350.081334][ T45] ? __cfi_kthread+0x10/0x10 [ 350.081350][ T45] ret_from_fork_asm+0x1a/0x30 [ 350.081365][ T45] [ 350.081370][ T45] [ 350.702163][ T45] Allocated by task 45: [ 350.706377][ T45] kasan_save_track+0x3e/0x80 [ 350.711036][ T45] kasan_save_alloc_info+0x40/0x50 [ 350.716121][ T45] __kasan_kmalloc+0x96/0xb0 [ 350.720693][ T45] __kmalloc_noprof+0x1b1/0x450 [ 350.725521][ T45] __hid_request+0xa9/0x410 [ 350.730001][ T45] hidinput_connect+0x241b/0x3340 [ 350.734999][ T45] hid_connect+0x49a/0x1a20 [ 350.739474][ T45] hid_hw_start+0xcb/0x160 [ 350.743861][ T45] ms_probe+0x194/0x460 [ 350.747986][ T45] hid_device_probe+0x2c1/0x5d0 [ 350.752807][ T45] really_probe+0x2d3/0x890 [ 350.757286][ T45] __driver_probe_device+0x198/0x280 [ 350.762541][ T45] driver_probe_device+0x54/0x3f0 [ 350.767538][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.772885][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.777704][ T45] __device_attach+0x2bd/0x3a0 [ 350.782441][ T45] device_initial_probe+0x1e/0x30 [ 350.787441][ T45] bus_probe_device+0x18b/0x270 [ 350.792267][ T45] device_add+0x80c/0xc00 [ 350.796568][ T45] hid_add_device+0x39b/0x560 [ 350.801220][ T45] usbhid_probe+0xde3/0x12b0 [ 350.805786][ T45] usb_probe_interface+0x696/0xc00 [ 350.810871][ T45] really_probe+0x2d3/0x890 [ 350.815346][ T45] __driver_probe_device+0x198/0x280 [ 350.820604][ T45] driver_probe_device+0x54/0x3f0 [ 350.825602][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.830950][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.835775][ T45] __device_attach+0x2bd/0x3a0 [ 350.840513][ T45] device_initial_probe+0x1e/0x30 [ 350.845515][ T45] bus_probe_device+0x18b/0x270 [ 350.850342][ T45] device_add+0x80c/0xc00 [ 350.854648][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 350.860079][ T45] usb_generic_driver_probe+0x95/0x160 [ 350.865510][ T45] usb_probe_device+0x1d4/0x380 [ 350.870339][ T45] really_probe+0x2d3/0x890 [ 350.874816][ T45] __driver_probe_device+0x198/0x280 [ 350.880075][ T45] driver_probe_device+0x54/0x3f0 [ 350.885075][ T45] __device_attach_driver+0x2f1/0x4b0 [ 350.890512][ T45] bus_for_each_drv+0x260/0x2f0 [ 350.895337][ T45] __device_attach+0x2bd/0x3a0 [ 350.900071][ T45] device_initial_probe+0x1e/0x30 [ 350.905071][ T45] bus_probe_device+0x18b/0x270 [ 350.909893][ T45] device_add+0x80c/0xc00 [ 350.914197][ T45] usb_new_device+0x9ed/0x1590 [ 350.918930][ T45] hub_event+0x265b/0x41a0 [ 350.923319][ T45] process_scheduled_works+0x7d5/0x1020 [ 350.928837][ T45] worker_thread+0xc58/0x1250 [ 350.933485][ T45] kthread+0x2c7/0x370 [ 350.937530][ T45] ret_from_fork+0x64/0xa0 [ 350.941919][ T45] ret_from_fork_asm+0x1a/0x30 [ 350.946659][ T45] [ 350.948956][ T45] The buggy address belongs to the object at ffff888112ca7be0 [ 350.948956][ T45] which belongs to the cache kmalloc-8 of size 8 [ 350.962633][ T45] The buggy address is located 1 bytes inside of [ 350.962633][ T45] allocated 7-byte region [ffff888112ca7be0, ffff888112ca7be7) [ 350.976398][ T45] [ 350.978695][ T45] The buggy address belongs to the physical page: [ 350.985080][ T45] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112ca7 [ 350.993897][ T45] flags: 0x4000000000000000(zone=1) [ 350.999064][ T45] page_type: f5(slab) [ 351.003017][ T45] raw: 4000000000000000 ffff888100041500 ffffea0004ceba00 dead000000000002 [ 351.011583][ T45] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 351.020134][ T45] page dumped because: kasan: bad access detected [ 351.026523][ T45] page_owner tracks the page as allocated [ 351.032208][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 288, tgid 288 (syz-executor), ts 126342754009, free_ts 126342729230 [ 351.051362][ T45] post_alloc_hook+0x3b9/0x3f0 [ 351.056100][ T45] prep_new_page+0x1c/0x120 [ 351.060572][ T45] get_page_from_freelist+0x46bb/0x4750 [ 351.066086][ T45] __alloc_pages_noprof+0x30d/0x6c0 [ 351.071253][ T45] alloc_slab_page+0x6b/0x1f0 [ 351.075904][ T45] allocate_slab+0x69/0x440 [ 351.080378][ T45] ___slab_alloc+0x59a/0x8b0 [ 351.084945][ T45] __kmalloc_node_noprof+0x23e/0x450 [ 351.090201][ T45] __vmalloc_node_range_noprof+0x544/0x1420 [ 351.096063][ T45] vzalloc_noprof+0xfd/0x1d0 [ 351.100623][ T45] do_ip6t_get_ctl+0x777/0x1180 [ 351.105448][ T45] nf_getsockopt+0x288/0x2b0 [ 351.110012][ T45] ipv6_getsockopt+0x1dd/0x280 [ 351.114754][ T45] tcp_getsockopt+0x106/0x130 [ 351.119402][ T45] sock_common_getsockopt+0xb2/0xd0 [ 351.124573][ T45] do_sock_getsockopt+0x3a3/0x6d0 [ 351.129592][ T45] page last free pid 288 tgid 288 stack trace: [ 351.135715][ T45] free_unref_page+0xae5/0xdd0 [ 351.140452][ T45] __free_pages+0x6b/0x3b0 [ 351.144854][ T45] vfree+0x3bf/0x580 [ 351.148742][ T45] do_ip6t_get_ctl+0xe86/0x1180 [ 351.153567][ T45] nf_getsockopt+0x288/0x2b0 [ 351.158132][ T45] ipv6_getsockopt+0x1dd/0x280 [ 351.162879][ T45] tcp_getsockopt+0x106/0x130 [ 351.167551][ T45] sock_common_getsockopt+0xb2/0xd0 [ 351.172747][ T45] do_sock_getsockopt+0x3a3/0x6d0 [ 351.177758][ T45] __x64_sys_getsockopt+0x1d5/0x280 [ 351.182932][ T45] x64_sys_call+0x10db/0x2ee0 [ 351.187587][ T45] do_syscall_64+0x58/0xf0 [ 351.191983][ T45] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.197857][ T45] [ 351.200157][ T45] Memory state around the buggy address: [ 351.205755][ T45] ffff888112ca7a80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 351.213788][ T45] ffff888112ca7b00: fa fc fc fc 05 fc fc fc fa fc fc fc 00 fc fc fc [ 351.221818][ T45] >ffff888112ca7b80: fa fc fc fc fa fc fc fc 06 fc fc fc 07 fc fc fc [ 351.229858][ T45] ^ [ 351.237037][ T45] ffff888112ca7c00: fa fc fc fc 02 fc fc fc fa fc fc fc fa fc fc fc [ 351.245075][ T45] ffff888112ca7c80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 351.253107][ T45] ================================================================== [ 351.261136][ T45] Disabling lock debugging due to kernel taint [ 351.281211][ T36] audit: type=1400 audit(330.694:1159): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 351.294474][ T45] microsoft 0003:045E:07DA.0025: No inputs registered, leaving [ 351.302487][ T36] audit: type=1400 audit(330.694:1160): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.315619][ T45] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 351.330751][ T36] audit: type=1400 audit(330.694:1161): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.362933][ T36] audit: type=1400 audit(330.694:1162): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.366311][ T45] microsoft 0003:045E:07DA.0025: no inputs found [ 351.382943][ T36] audit: type=1400 audit(330.694:1163): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.389888][ T45] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 351.409146][ T36] audit: type=1400 audit(330.694:1164): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.440103][ T36] audit: type=1400 audit(330.694:1165): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.462235][ T799] usb 1-1: USB disconnect, device number 21 [ 352.415814][ T373] usb 4-1: USB disconnect, device number 92