last executing test programs: 2.646406807s ago: executing program 2 (id=200): syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x3) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.84494261s ago: executing program 2 (id=208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x2, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x8, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x9, 0xfffffffffffffffb, 0x2, 0x40, 0x6}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0xffffffffffffffff, 0x2}, {{@in6=@empty, 0x4d4, 0x33}, 0x39573c4e467c4e, @in6=@empty, 0x3502, 0x3, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) (async) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$UFFDIO_CONTINUE(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) gettid() (async) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r9, 0x0, 0x4100af4, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 1.686120533s ago: executing program 2 (id=209): socket$key(0xf, 0x3, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket(0x29, 0x6, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa4, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48004}, 0x4000004) (async) r5 = eventfd(0xe) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000002c0)={0x1, r5}) (async) syz_usb_connect$cdc_ecm(0x6, 0x56, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.22151446s ago: executing program 0 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001040)="b1e3", 0x2}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) (async, rerun: 32) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) (async) pread64(r4, &(0x7f0000000200)=""/233, 0xe9, 0x5) 1.22108664s ago: executing program 0 (id=216): sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x121f408, 0x0) mount$bind(0x0, 0x0, 0x0, 0xa06006, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 1.20427196s ago: executing program 0 (id=217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000840)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 1.173118061s ago: executing program 0 (id=218): ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe42, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}], 0xfffffdc2, 0x0, &(0x7f0000000880)="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"}) 1.090151893s ago: executing program 2 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000400)="660ffcbbdfc7baf80c66b8881e7b8166efbafc0c66ed6766c7442400f44d00006766c7442402ea0000000faeae0000670f011c2466b9800000c00f326635010000000f306766c7442400009800006766c7442402000000806766c744240600000000670f011c24660ff6af008026cea049002e0f7832ba430066b8f1ffffff66ef", 0x4a}], 0x38, 0x50, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000180)={{0x32, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x2, 'lc\x00', 0x10, 0x1, 0x78}, {@remote, 0x4e24, 0x3, 0x963, 0x8f, 0x2}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x69, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f8563614d21ec008a11a9275d11"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.089586782s ago: executing program 0 (id=220): r0 = getpid() setns(0xffffffffffffffff, 0x24020000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x2000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x3000, 0x4000, 0x1}) r6 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbc) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup3(r7, r8, 0x80000) getsockname$packet(r9, 0x0, 0x0) r10 = getpgrp(r0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x4a, 0x8, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) prlimit64(r10, 0xe, &(0x7f00000000c0)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r12, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) r13 = socket$netlink(0x10, 0x3, 0x0) writev(r13, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) 854.413496ms ago: executing program 0 (id=224): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x8000, 0xde5d) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) syz_clone(0x212cf47950de1cd2, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 853.116986ms ago: executing program 1 (id=225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@userxattr}, {@metacopy_on}]}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xe8, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x0, 0x3d}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/12, 0xc, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/138, 0x8a, 0x0, 0x6}, @flat=@weak_handle={0x77682a85, 0x101, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 820.126387ms ago: executing program 1 (id=226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$cont(0x9, r8, 0xffffffffffffff7f, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@x86={0x7c, 0x3, 0xd, 0x0, 0x1, 0x7e, 0xca, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xfc, 0x0, 0x8, 0xc, '\x00', 0x1, 0x2}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x80, 0x0) (async) pipe(0x0) 738.345688ms ago: executing program 1 (id=227): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) setrlimit(0x7, &(0x7f0000000000)={0x9, 0x40000000006}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) sendto(r1, &(0x7f00000000c0)="5eea0b1b2362162526b2418aaae935b5005f1c28888e88915f35e23a5d9c18c9e5cb988fa27b5916c02a61391c42cafa9a5985a7c8b6f10afb25f17005fb7f16a23aba4dd3f66106a1213a742fac9ad5d87fae86344d6242feff3246576cc9ba4e487e17da7d", 0x66, 0x0, &(0x7f0000000180)=@ax25={{0x3, @default, 0x3}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 666.318799ms ago: executing program 1 (id=228): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x133200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) accept(r3, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r5, 0x40187013, &(0x7f0000000100)) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) fcntl$setpipe(r7, 0x407, 0x0) fcntl$setpipe(r7, 0x407, 0x10ae) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 639.16071ms ago: executing program 1 (id=230): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002080)='./file1\x00', 0xaa) (async) mkdirat(0xffffffffffffffff, &(0x7f0000002080)='./file1\x00', 0xaa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x1}, 0x0) getpid() (async) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) r3 = syz_open_procfs(r2, &(0x7f0000002100)='attr/keycreate\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 558.445171ms ago: executing program 1 (id=232): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=0x9, 0x12) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000340)={0x1, 0x0, @pic={0x2a, 0xc0, 0x3, 0x6, 0xfb, 0x0, 0x90, 0x4, 0x3, 0x0, 0xfd, 0x58, 0x90, 0x6, 0x9, 0x2}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r7 = syz_open_pts(r6, 0x8182) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 194.554517ms ago: executing program 3 (id=237): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) (async, rerun: 64) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) 192.091747ms ago: executing program 2 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C)', 0x2}], 0x1}}], 0x1, 0x200400c1) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) writev(r3, &(0x7f00000000c0), 0x1000000000000019) 166.826678ms ago: executing program 2 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x4}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(r1, &(0x7f00000010c0), 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 102.269508ms ago: executing program 3 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) 38.16339ms ago: executing program 3 (id=241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = memfd_create(&(0x7f0000000040)='./binderfs/binder0\x00', 0x5) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x100000000, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x4f, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d7"}) 37.20102ms ago: executing program 3 (id=242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 34.57734ms ago: executing program 3 (id=243): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x64000600) (async) syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf251100000034000480240007800800010013000000080002006c0600000d098a240a0000000800dad6fdccbc77d9d0060000797a30005a170020000702000002003b99093f289fd80a00000000000000000008000200f7ffffac2a5eb252ddc947c0e6400b5078bed714627b99678c13258fe8cefe1c953634dd388e1cda690df2f2688d546489c63f1b4630fee371e87fb58f11fbf080f81a5a9a3ad1661a617413a61151d867b53e288db42e3a0277b091676770c1b00545999b33f4142362a266a99cb3a331e064007bb4dd514be9496dfabf6d9205da0b6faa85d6d56c4e2cd6"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x4000) (async, rerun: 32) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 0s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000002c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000380)={'ip_vti0\x00', r5, 0x0, 0x0, 0x0, 0x2000, {{0xa, 0x4, 0x0, 0x0, 0x28, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty, {[@rr={0x7, 0x13, 0xa2, [@remote, @rand_addr=0x64010101, @remote, @loopback]}]}}}}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r4], 0xa0}}, 0x40) sendto$inet6(r2, 0x0, 0x0, 0x2000c000, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 26.968871][ T36] audit: type=1400 audit(1753752379.430:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.970494][ T281] cgroup: Unknown subsys name 'net' [ 26.999985][ T36] audit: type=1400 audit(1753752379.430:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.033707][ T36] audit: type=1400 audit(1753752379.470:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.034054][ T281] cgroup: Unknown subsys name 'devices' [ 27.225189][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.231320][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.385915][ T36] audit: type=1400 audit(1753752379.850:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.418774][ T36] audit: type=1400 audit(1753752379.850:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.433454][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.448436][ T36] audit: type=1400 audit(1753752379.850:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.489069][ T36] audit: type=1400 audit(1753752379.930:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.514839][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.524775][ T36] audit: type=1400 audit(1753752379.930:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.568167][ T36] audit: type=1400 audit(1753752379.980:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.598650][ T36] audit: type=1400 audit(1753752379.980:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.848497][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.856140][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.864475][ T289] bridge_slave_0: entered allmulticast mode [ 28.871426][ T289] bridge_slave_0: entered promiscuous mode [ 28.891800][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.899661][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.907819][ T289] bridge_slave_1: entered allmulticast mode [ 28.914663][ T289] bridge_slave_1: entered promiscuous mode [ 28.951810][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.960635][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.969084][ T290] bridge_slave_0: entered allmulticast mode [ 28.976823][ T290] bridge_slave_0: entered promiscuous mode [ 28.988502][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.996307][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.004082][ T290] bridge_slave_1: entered allmulticast mode [ 29.010939][ T290] bridge_slave_1: entered promiscuous mode [ 29.065659][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.073315][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.080541][ T288] bridge_slave_0: entered allmulticast mode [ 29.088059][ T288] bridge_slave_0: entered promiscuous mode [ 29.103566][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.111081][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.119543][ T288] bridge_slave_1: entered allmulticast mode [ 29.127096][ T288] bridge_slave_1: entered promiscuous mode [ 29.163039][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.170223][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.177419][ T291] bridge_slave_0: entered allmulticast mode [ 29.184416][ T291] bridge_slave_0: entered promiscuous mode [ 29.199418][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.206904][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.214541][ T291] bridge_slave_1: entered allmulticast mode [ 29.221449][ T291] bridge_slave_1: entered promiscuous mode [ 29.379778][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.388890][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.396924][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.404644][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.415488][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.424099][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.434428][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.445237][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.473102][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.481351][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.490238][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.498403][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.516716][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.524399][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.532154][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.539485][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.583405][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.591545][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.600271][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610055][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.619250][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.628601][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.637256][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.646156][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.668921][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.678405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.686923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.695633][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.704926][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.713951][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.728582][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.735995][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.754039][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.761639][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.784038][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.792250][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.839223][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.847652][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.856951][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.865781][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.897485][ T291] veth0_vlan: entered promiscuous mode [ 29.905821][ T288] veth0_vlan: entered promiscuous mode [ 29.924504][ T291] veth1_macvtap: entered promiscuous mode [ 29.940539][ T288] veth1_macvtap: entered promiscuous mode [ 29.963058][ T290] veth0_vlan: entered promiscuous mode [ 29.981479][ T289] veth0_vlan: entered promiscuous mode [ 30.000629][ T290] veth1_macvtap: entered promiscuous mode [ 30.028989][ T289] veth1_macvtap: entered promiscuous mode [ 30.038902][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.114490][ T335] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true [ 30.168519][ T347] fuse: Unknown parameter '' [ 30.215353][ T352] process 'syz.3.7' launched './file1' with NULL argv: empty string added [ 30.297376][ T358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 30.364687][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.397974][ T366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=366 comm=syz.3.11 [ 30.433066][ T366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=366 comm=syz.3.11 [ 30.453517][ T366] ======================================================= [ 30.453517][ T366] WARNING: The mand mount option has been deprecated and [ 30.453517][ T366] and is ignored by this kernel. Remove the mand [ 30.453517][ T366] option from the mount to silence this warning. [ 30.453517][ T366] ======================================================= [ 30.503557][ T366] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 30.533095][ T9] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 30.559471][ T368] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.572486][ T9] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.604954][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.622247][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 30.641508][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.658774][ T368] binder: Unknown parameter '' [ 30.672349][ T9] usb 3-1: config 0 descriptor?? [ 30.837436][ T379] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.16'. [ 31.086469][ T9] hid (null): report_id 16680 is invalid [ 31.099333][ T9] uclogic 0003:5543:0064.0001: collection stack underflow [ 31.113051][ T9] uclogic 0003:5543:0064.0001: item 0 1 0 12 parsing failed [ 31.132224][ T9] uclogic 0003:5543:0064.0001: parse failed [ 31.138790][ T9] uclogic 0003:5543:0064.0001: probe with driver uclogic failed with error -22 [ 31.975963][ T418] rust_binder: Write failure EFAULT in pid:35 [ 32.302133][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.401724][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 32.401742][ T36] audit: type=1400 audit(1753752384.860:163): avc: denied { create } for pid=427 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.463255][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.473747][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.484400][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.493807][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.502887][ T45] usb 4-1: SerialNumber: syz [ 32.559804][ T36] audit: type=1400 audit(1753752385.020:164): avc: denied { name_bind } for pid=429 comm="syz.0.31" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.581591][ T36] audit: type=1400 audit(1753752385.020:165): avc: denied { node_bind } for pid=429 comm="syz.0.31" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.662063][ T64] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 32.710998][ T425] mmap: syz.3.29 (425) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.724116][ T36] audit: type=1400 audit(1753752385.190:166): avc: denied { mounton } for pid=424 comm="syz.3.29" path="/proc/40/task" dev="proc" ino=4604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 32.730274][ T45] usb 4-1: 0:2 : does not exist [ 32.753371][ T36] audit: type=1400 audit(1753752385.220:167): avc: denied { unmount } for pid=424 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.759441][ T45] usb 4-1: USB disconnect, device number 2 [ 32.833532][ T64] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 32.843382][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.847009][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.853812][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 32.883362][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.899185][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.913979][ T64] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 32.923266][ T64] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 32.931576][ T64] usb 2-1: Product: syz [ 32.936019][ T64] usb 2-1: Manufacturer: syz [ 32.948051][ T64] cdc_wdm 2-1:1.0: skipping garbage [ 32.954969][ T64] cdc_wdm 2-1:1.0: skipping garbage [ 32.964872][ T64] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 32.971000][ T64] cdc_wdm 2-1:1.0: Unknown control protocol [ 33.080778][ T64] usb 3-1: USB disconnect, device number 2 [ 33.156564][ T36] audit: type=1400 audit(1753752385.620:168): avc: denied { create } for pid=427 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.176964][ T36] audit: type=1400 audit(1753752385.620:169): avc: denied { connect } for pid=427 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.197962][ T445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.198046][ T36] audit: type=1400 audit(1753752385.620:170): avc: denied { write } for pid=427 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.225637][ T36] audit: type=1400 audit(1753752385.660:171): avc: denied { transfer } for pid=442 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.245631][ T445] netlink: 37 bytes leftover after parsing attributes in process `syz.2.35'. [ 33.331374][ T36] audit: type=1400 audit(1753752385.790:172): avc: denied { create } for pid=448 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.493325][ T398] usb 2-1: USB disconnect, device number 2 [ 33.912071][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.047506][ T486] rust_binder: Write failure EFAULT in pid:21 [ 34.062013][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 34.077219][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.092571][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.104590][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.115398][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.125327][ T64] usb 1-1: config 0 descriptor?? [ 34.149344][ T64] hub 1-1:0.0: USB hub found [ 34.349239][ T64] hub 1-1:0.0: 1 port detected [ 34.553213][ T64] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 34.560558][ T64] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 34.573784][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 34.579918][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.602435][ T64] usb 1-1: USB disconnect, device number 2 [ 34.692597][ T508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.705925][ T510] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 35.122139][ T519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.214623][ T532] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 35.347681][ T550] loop7: detected capacity change from 0 to 16384 [ 35.356714][ T547] pim6reg1: entered promiscuous mode [ 35.366702][ T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 35.372354][ T547] pim6reg1: entered allmulticast mode [ 35.404148][ T551] loop7: detected capacity change from 16384 to 0 [ 35.742152][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.792041][ T398] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.895163][ T330] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.906430][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.914963][ T330] usb 3-1: Product: syz [ 35.919205][ T330] usb 3-1: Manufacturer: syz [ 35.923961][ T330] usb 3-1: SerialNumber: syz [ 35.932083][ T398] usb 2-1: device descriptor read/64, error -71 [ 36.123476][ T577] capability: warning: `syz.3.79' uses 32-bit capabilities (legacy support in use) [ 36.172072][ T398] usb 2-1: device descriptor read/64, error -71 [ 36.199276][ T589] rust_binder: Got transaction with invalid offset. [ 36.199332][ T589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.207081][ T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 36.363168][ T602] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 36.373632][ T602] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 36.382334][ T602] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 36.397844][ T330] rust_binder: 601: removing orphan mapping 0:1024 [ 36.421159][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 36.422250][ T398] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.430861][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 36.448361][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 36.562070][ T398] usb 2-1: device descriptor read/64, error -71 [ 36.802083][ T398] usb 2-1: device descriptor read/64, error -71 [ 36.912220][ T398] usb usb2-port1: attempt power cycle [ 37.242904][ T611] fuse: Bad value for 'fd' [ 37.252170][ T398] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.283300][ T398] usb 2-1: device descriptor read/8, error -71 [ 37.292383][ T615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.413311][ T398] usb 2-1: device descriptor read/8, error -71 [ 37.542074][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.652087][ T398] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.673507][ T398] usb 2-1: device descriptor read/8, error -71 [ 37.704281][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.716908][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.730727][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.740131][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.750246][ T31] usb 1-1: Product: syz [ 37.757402][ T31] usb 1-1: Manufacturer: 堣䇉痚吚긶㣫⍅攥ﶏꑞ璫챴ᙐ䟜黁샴ဤ஢贠ᇻޜ㎋ა䵀ǀ恆৑7욁鋈窧鬷뭧ꂵ鮙ⷵ庫뽱ᖗᚯ쮼؍젮ዮ㨮ꁩ䤽蟿⬽º秬⧃﫼펄嚊㼃慺ᤛ﫢嘩柙ᮭﲺ姦㪂䍓픱橮褚xਊ眝ଆ݄廿檼⛯ꢒ環⏴ꩌሒ逌⢷鵐ϐ塨덎龊䡾뒾薇⸹遈⎆Υ礒⾷㳙ᰝ焏 [ 37.797548][ T31] usb 1-1: SerialNumber: syz [ 37.813867][ T398] usb 2-1: device descriptor read/8, error -71 [ 37.922188][ T398] usb usb2-port1: unable to enumerate USB device [ 38.004089][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 38.004109][ T36] audit: type=1400 audit(1753752390.470:211): avc: denied { listen } for pid=614 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.033837][ T36] audit: type=1400 audit(1753752390.500:212): avc: denied { read } for pid=614 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.054881][ T36] audit: type=1400 audit(1753752390.500:213): avc: denied { ioctl } for pid=614 comm="syz.0.92" path="socket:[5044]" dev="sockfs" ino=5044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.080862][ T36] audit: type=1400 audit(1753752390.500:214): avc: denied { setopt } for pid=614 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.318577][ T36] audit: type=1400 audit(1753752390.780:215): avc: denied { name_bind } for pid=627 comm="syz.3.96" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.487152][ T36] audit: type=1400 audit(1753752390.950:216): avc: denied { write } for pid=664 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.487833][ T665] netlink: 165 bytes leftover after parsing attributes in process `syz.3.101'. [ 38.512869][ T36] audit: type=1400 audit(1753752390.950:217): avc: denied { nlmsg_write } for pid=664 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.525588][ T665] mmap: syz.3.101 (665): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 38.562231][ T398] usb 3-1: USB disconnect, device number 3 [ 38.593057][ T31] usb 1-1: 0:2 : does not exist [ 38.612099][ T669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.612229][ T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 38.616630][ T31] usb 1-1: USB disconnect, device number 3 [ 38.654207][ T671] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 38.683369][ T671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 38.697902][ T672] udevd[672]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.753849][ T36] audit: type=1400 audit(1753752391.220:218): avc: denied { create } for pid=677 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.778513][ T678] IPv4: Oversized IP packet from 172.20.20.170 [ 38.785593][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.792575][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.820018][ T678] IPv4: Oversized IP packet from 172.20.20.170 [ 38.826763][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.833286][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.840188][ T36] audit: type=1400 audit(1753752391.240:219): avc: denied { connect } for pid=677 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.861158][ T36] audit: type=1400 audit(1753752391.240:220): avc: denied { ioctl } for pid=677 comm="syz.2.106" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.863216][ T678] IPv4: Oversized IP packet from 172.20.20.170 [ 38.894669][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 38.901404][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 38.913969][ T678] IPv4: Oversized IP packet from 172.20.20.170 [ 38.945005][ T689] rust_binder: Error while translating object. [ 38.945083][ T689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.955217][ T689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 39.123848][ T719] __vm_enough_memory: pid: 719, comm: syz.1.116, bytes: 18014402804453376 not enough memory for the allocation [ 39.355704][ T736] binder: Unknown parameter '0x0000000000000000' [ 39.958524][ T753] rust_binder: Error while translating object. [ 39.958560][ T753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.965500][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 39.992669][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.002788][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.009344][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.009369][ T758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 40.016129][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.023076][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:96 [ 40.032349][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.032377][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.055073][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.061668][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.088511][ T761] netlink: 104 bytes leftover after parsing attributes in process `syz.3.128'. [ 40.094027][ T764] rust_binder: 101: no such ref 0 [ 40.135759][ T764] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 40.152278][ T764] rust_binder: Write failure EINVAL in pid:101 [ 40.341778][ T778] rust_binder: 777 RLIMIT_NICE not set [ 40.484614][ T805] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 76) [ 40.491013][ T805] rust_binder: Error while translating object. [ 40.503975][ T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.510686][ T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 40.542038][ T808] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 40.629016][ T812] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 40.791124][ T825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 40.853020][ T827] netlink: 'syz.2.146': attribute type 29 has an invalid length. [ 40.861007][ T827] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.146'. [ 40.872462][ T827] rust_binder: 825 RLIMIT_NICE not set [ 40.879065][ T616] rust_binder: 824: removing orphan mapping 0:4248 [ 41.142036][ T398] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.292067][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 41.299673][ T398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.311562][ T398] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 41.325984][ T831] rust_binder: 116: no such ref 0 [ 41.327321][ T398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.332265][ T831] rust_binder: Write failure EINVAL in pid:116 [ 41.341871][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.358020][ T398] usb 3-1: SerialNumber: syz [ 41.366877][ T398] usb 3-1: bad CDC descriptors [ 41.612947][ T838] rust_binder: Read failure Err(EFAULT) in pid:123 [ 41.728252][ T616] usb 3-1: USB disconnect, device number 4 [ 41.847980][ T857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 41.871446][ T860] rust_binder: Error while translating object. [ 41.881699][ T860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.889522][ T859] /dev/rnullb0: Can't open blockdev [ 41.901328][ T860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 41.909293][ T859] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 42.193758][ T884] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 42.236172][ T888] /dev/rnullb0: Can't open blockdev [ 42.382081][ T398] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 42.514705][ T893] rust_binder: Read failure Err(EFAULT) in pid:129 [ 42.533844][ T13] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 42.534884][ T398] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.559754][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.568777][ T398] usb 1-1: not running at top speed; connect to a high speed hub [ 42.582947][ T398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.593878][ T398] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 42.605864][ T398] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 42.617479][ T398] usb 1-1: config 1 interface 1 has no altsetting 0 [ 42.626240][ T398] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.635470][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.644254][ T398] usb 1-1: Product: syz [ 42.648823][ T398] usb 1-1: Manufacturer: syz [ 42.653749][ T398] usb 1-1: SerialNumber: syz [ 42.938789][ T398] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.946006][ T398] usb 1-1: selecting invalid altsetting 0 [ 42.951797][ T398] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 42.980543][ T398] usb 1-1: USB disconnect, device number 4 [ 42.981910][ T909] : renamed from bridge0 (while UP) [ 43.583238][ T925] rust_binder: Write failure EFAULT in pid:152 [ 43.646469][ T927] rust_binder: Write failure EFAULT in pid:155 [ 43.716521][ T931] Zero length message leads to an empty skb [ 43.936211][ T944] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.043608][ T398] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.182050][ T398] usb 2-1: device descriptor read/64, error -71 [ 44.422066][ T398] usb 2-1: device descriptor read/64, error -71 [ 44.602002][ T899] Bluetooth: hci0: command 0x1003 tx timeout [ 44.602065][ T898] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.662142][ T398] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.806156][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 44.806179][ T36] audit: type=1400 audit(1753752397.270:274): avc: denied { connect } for pid=969 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.834340][ T398] usb 2-1: device descriptor read/64, error -71 [ 44.845776][ T970] 9pnet_fd: Insufficient options for proto=fd [ 44.863231][ T963] rust_binder: 138: no such ref 3 [ 44.868526][ T963] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 44.900657][ T36] audit: type=1400 audit(1753752397.360:275): avc: denied { ioctl } for pid=973 comm="syz.0.194" path="socket:[7570]" dev="sockfs" ino=7570 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.003782][ T984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.011873][ T36] audit: type=1400 audit(1753752397.470:276): avc: denied { mounton } for pid=982 comm="syz.0.197" path="/54/file0/bus" dev="ramfs" ino=6982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 45.037266][ T984] overlayfs: failed to set xattr on upper [ 45.047427][ T984] overlayfs: ...falling back to redirect_dir=nofollow. [ 45.061986][ T984] overlayfs: ...falling back to uuid=null. [ 45.072155][ T984] overlayfs: ...falling back to xino=off. [ 45.073088][ T988] rust_binder: 180: no such ref 0 [ 45.092044][ T398] usb 2-1: device descriptor read/64, error -71 [ 45.212138][ T398] usb usb2-port1: attempt power cycle [ 45.552026][ T398] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.573534][ T398] usb 2-1: device descriptor read/8, error -71 [ 45.713276][ T398] usb 2-1: device descriptor read/8, error -71 [ 45.825302][ T36] audit: type=1400 audit(1753752398.290:277): avc: denied { write } for pid=998 comm="syz.0.201" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.952072][ T398] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.973228][ T398] usb 2-1: device descriptor read/8, error -71 [ 46.103411][ T398] usb 2-1: device descriptor read/8, error -71 [ 46.212185][ T398] usb usb2-port1: unable to enumerate USB device [ 46.295074][ T36] audit: type=1400 audit(1753752398.760:278): avc: denied { create } for pid=1026 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 46.528897][ T1044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.539086][ T1043] rust_binder: Error in use_page_slow: ESRCH [ 46.539111][ T1043] rust_binder: use_range failure ESRCH [ 46.549816][ T1043] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 46.563503][ T1043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.572377][ T1043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192 [ 46.776272][ T1051] rust_binder: Write failure EFAULT in pid:200 [ 46.801252][ T1053] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 46.816930][ T1053] rust_binder: Write failure EINVAL in pid:202 [ 46.884239][ T1061] tipc: Started in network mode [ 46.898642][ T1061] tipc: Node identity , cluster identity 4711 [ 46.905902][ T1061] tipc: Failed to set node id, please configure manually [ 46.908302][ T1056] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 46.916213][ T1061] tipc: Enabling of bearer rejected, failed to enable media [ 46.935960][ T1059] netlink: 'syz.0.220': attribute type 63 has an invalid length. [ 46.946826][ T1059] netlink: 5 bytes leftover after parsing attributes in process `syz.0.220'. [ 47.119203][ T1074] overlayfs: conflicting options: userxattr,metacopy=on [ 47.128682][ T36] audit: type=1400 audit(1753752399.590:279): avc: denied { getopt } for pid=1073 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.245659][ T1082] /dev/rnullb0: Can't open blockdev [ 47.312799][ T398] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.349852][ T1088] overlayfs: missing 'lowerdir' [ 47.355559][ T1088] netlink: 'syz.1.230': attribute type 27 has an invalid length. [ 47.472022][ T398] usb 1-1: Using ep0 maxpacket: 16 [ 47.479804][ T9] rust_binder: get_current_thread was called from the wrong process. [ 47.492753][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.513065][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.524211][ T398] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.539799][ T398] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 47.550111][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.560391][ T398] usb 1-1: config 0 descriptor?? [ 47.982369][ T398] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 47.993460][ T398] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 47.997679][ T1133] overlayfs: failed to clone upperpath [ 48.008907][ T398] ================================================================== [ 48.018978][ T398] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 48.027099][ T398] Read of size 1152 at addr ffff88810a6ec1c1 by task kworker/0:3/398 [ 48.036056][ T398] [ 48.039041][ T398] CPU: 0 UID: 0 PID: 398 Comm: kworker/0:3 Not tainted 6.12.38-syzkaller-gd64d8b7dab32 #0 b11b2e695edb96cef1ea16b3c17c686b1091986c [ 48.039076][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.039088][ T398] Workqueue: usb_hub_wq hub_event [ 48.039128][ T398] Call Trace: [ 48.039135][ T398] [ 48.039143][ T398] __dump_stack+0x21/0x30 [ 48.039166][ T398] dump_stack_lvl+0x10c/0x190 [ 48.039185][ T398] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.039205][ T398] ? __cfi__printk+0x10/0x10 [ 48.039229][ T398] print_address_description+0x71/0x220 [ 48.039245][ T398] print_report+0x4a/0x70 [ 48.039260][ T398] kasan_report+0x163/0x1a0 [ 48.039275][ T398] ? mon_bin_event+0x12c1/0x23e0 [ 48.039297][ T398] ? mon_bin_event+0x12c1/0x23e0 [ 48.039318][ T398] kasan_check_range+0x299/0x2a0 [ 48.039333][ T398] ? mon_bin_event+0x12c1/0x23e0 [ 48.039357][ T398] __asan_memcpy+0x31/0x80 [ 48.039377][ T398] mon_bin_event+0x12c1/0x23e0 [ 48.039400][ T398] ? mon_bin_complete+0x50/0x50 [ 48.039420][ T398] ? __kmalloc_noprof+0x1b1/0x450 [ 48.039441][ T398] ? __hid_request+0x1e5/0x410 [ 48.039463][ T398] ? hid_connect+0x49a/0x1a20 [ 48.039484][ T398] ? hid_hw_start+0xcb/0x160 [ 48.039507][ T398] ? ms_probe+0x194/0x460 [ 48.039527][ T398] ? __cfi_mon_bin_submit+0x10/0x10 [ 48.039548][ T398] mon_bin_submit+0x2b/0x40 [ 48.039568][ T398] mon_submit+0x1b9/0x230 [ 48.039586][ T398] usb_hcd_submit_urb+0x12d/0x1a20 [ 48.039602][ T398] ? bus_probe_device+0x18b/0x270 [ 48.039621][ T398] ? usb_probe_device+0x1d4/0x380 [ 48.039635][ T398] ? really_probe+0x2d6/0x890 [ 48.039649][ T398] ? __driver_probe_device+0x198/0x280 [ 48.039673][ T398] ? driver_probe_device+0x54/0x3f0 [ 48.039687][ T398] ? __device_attach_driver+0x2f1/0x4b0 [ 48.039703][ T398] usb_submit_urb+0x111b/0x1800 [ 48.039723][ T398] usb_start_wait_urb+0x11b/0x2f0 [ 48.039753][ T398] ? usb_api_blocking_completion+0xd0/0xd0 [ 48.039775][ T398] ? __kasan_kmalloc+0x96/0xb0 [ 48.039800][ T398] ? __kasan_check_write+0x18/0x20 [ 48.039820][ T398] ? usb_alloc_urb+0x9b/0x200 [ 48.039839][ T398] usb_control_msg+0x25a/0x490 [ 48.039861][ T398] usbhid_raw_request+0x457/0x590 [ 48.039883][ T398] __hid_request+0x1e5/0x410 [ 48.039906][ T398] hidinput_connect+0x241b/0x3340 [ 48.039927][ T398] hid_connect+0x49a/0x1a20 [ 48.039951][ T398] ? usbhid_start+0x1a67/0x2530 [ 48.039970][ T398] ? __cfi_hid_connect+0x10/0x10 [ 48.039994][ T398] hid_hw_start+0xcb/0x160 [ 48.040016][ T398] ms_probe+0x194/0x460 [ 48.040037][ T398] hid_device_probe+0x2c4/0x5d0 [ 48.040061][ T398] ? __cfi_hid_device_probe+0x10/0x10 [ 48.040586][ T398] really_probe+0x2d6/0x890 [ 48.040616][ T398] __driver_probe_device+0x198/0x280 [ 48.040653][ T398] driver_probe_device+0x54/0x3f0 [ 48.040674][ T398] ? __device_attach_driver+0x2db/0x4b0 [ 48.040754][ T398] __device_attach_driver+0x2f1/0x4b0 [ 48.040776][ T398] bus_for_each_drv+0x260/0x2f0 [ 48.040802][ T398] ? __cfi___device_attach_driver+0x10/0x10 [ 48.040823][ T398] ? __cfi_bus_for_each_drv+0x10/0x10 [ 48.040856][ T398] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.040891][ T398] __device_attach+0x2bd/0x3a0 [ 48.040928][ T398] ? device_attach+0x40/0x40 [ 48.040961][ T398] ? _raw_spin_lock+0x8c/0x120 [ 48.040987][ T398] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.041013][ T398] device_initial_probe+0x1e/0x30 [ 48.041044][ T398] bus_probe_device+0x18b/0x270 [ 48.041071][ T398] device_add+0x80c/0xc00 [ 48.041104][ T398] hid_add_device+0x39b/0x560 [ 48.041137][ T398] usbhid_probe+0xde3/0x12b0 [ 48.041168][ T398] usb_probe_interface+0x696/0xc00 [ 48.041192][ T398] ? __cfi_usb_probe_interface+0x10/0x10 [ 48.041214][ T398] really_probe+0x2d6/0x890 [ 48.041235][ T398] __driver_probe_device+0x198/0x280 [ 48.041283][ T398] driver_probe_device+0x54/0x3f0 [ 48.041306][ T398] ? __device_attach_driver+0x2db/0x4b0 [ 48.041328][ T398] __device_attach_driver+0x2f1/0x4b0 [ 48.041359][ T398] bus_for_each_drv+0x260/0x2f0 [ 48.041393][ T398] ? __cfi___device_attach_driver+0x10/0x10 [ 48.041416][ T398] ? __cfi_bus_for_each_drv+0x10/0x10 [ 48.041445][ T398] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.041475][ T398] __device_attach+0x2bd/0x3a0 [ 48.041510][ T398] ? device_attach+0x40/0x40 [ 48.041548][ T398] ? _raw_spin_lock+0x8c/0x120 [ 48.041574][ T398] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.041602][ T398] device_initial_probe+0x1e/0x30 [ 48.041636][ T398] bus_probe_device+0x18b/0x270 [ 48.041665][ T398] device_add+0x80c/0xc00 [ 48.041716][ T398] usb_set_configuration+0x1ad4/0x20b0 [ 48.041759][ T398] usb_generic_driver_probe+0x95/0x160 [ 48.041790][ T398] usb_probe_device+0x1d4/0x380 [ 48.041810][ T398] ? __cfi_usb_probe_device+0x10/0x10 [ 48.041832][ T398] really_probe+0x2d6/0x890 [ 48.041855][ T398] __driver_probe_device+0x198/0x280 [ 48.041890][ T398] driver_probe_device+0x54/0x3f0 [ 48.041911][ T398] ? __device_attach_driver+0x2db/0x4b0 [ 48.041933][ T398] __device_attach_driver+0x2f1/0x4b0 [ 48.041954][ T398] bus_for_each_drv+0x260/0x2f0 [ 48.041981][ T398] ? __cfi___device_attach_driver+0x10/0x10 [ 48.042003][ T398] ? __cfi_bus_for_each_drv+0x10/0x10 [ 48.042032][ T398] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.042060][ T398] __device_attach+0x2bd/0x3a0 [ 48.042094][ T398] ? device_attach+0x40/0x40 [ 48.042127][ T398] ? _raw_spin_lock+0x8c/0x120 [ 48.042152][ T398] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.042180][ T398] device_initial_probe+0x1e/0x30 [ 48.042215][ T398] bus_probe_device+0x18b/0x270 [ 48.042243][ T398] device_add+0x80c/0xc00 [ 48.042278][ T398] usb_new_device+0x9ed/0x1590 [ 48.042328][ T398] ? __cfi_usb_new_device+0x10/0x10 [ 48.042360][ T398] hub_event+0x2c81/0x4270 [ 48.042404][ T398] ? __cfi_hub_event+0x10/0x10 [ 48.042438][ T398] ? __kasan_check_write+0x18/0x20 [ 48.042464][ T398] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 48.042502][ T398] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 48.042531][ T398] ? kick_pool+0xb9/0x550 [ 48.042554][ T398] process_scheduled_works+0x7d2/0x1020 [ 48.042594][ T398] worker_thread+0xc58/0x1250 [ 48.042631][ T398] ? schedule+0xc6/0x240 [ 48.042661][ T398] kthread+0x2ca/0x370 [ 48.042689][ T398] ? __cfi_worker_thread+0x10/0x10 [ 48.042724][ T398] ? __cfi_kthread+0x10/0x10 [ 48.042745][ T398] ret_from_fork+0x67/0xa0 [ 48.042775][ T398] ? __cfi_kthread+0x10/0x10 [ 48.042796][ T398] ret_from_fork_asm+0x1a/0x30 [ 48.042832][ T398] [ 48.042842][ T398] [ 48.051650][ T1134] overlayfs: failed to clone upperpath [ 48.058083][ T398] Allocated by task 398: [ 48.058105][ T398] kasan_save_track+0x3e/0x80 [ 48.058153][ T398] kasan_save_alloc_info+0x40/0x50 [ 48.058181][ T398] __kasan_kmalloc+0x96/0xb0 [ 48.058216][ T398] __kmalloc_noprof+0x1b1/0x450 [ 48.058247][ T398] __hid_request+0xa9/0x410 [ 48.092054][ T426] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.094771][ T398] hidinput_connect+0x241b/0x3340 [ 48.094828][ T398] hid_connect+0x49a/0x1a20 [ 48.094857][ T398] hid_hw_start+0xcb/0x160 [ 48.094886][ T398] ms_probe+0x194/0x460 [ 48.094912][ T398] hid_device_probe+0x2c4/0x5d0 [ 48.850467][ T398] really_probe+0x2d6/0x890 [ 48.855893][ T398] __driver_probe_device+0x198/0x280 [ 48.865079][ T398] driver_probe_device+0x54/0x3f0 [ 48.874018][ T398] __device_attach_driver+0x2f1/0x4b0 [ 48.881018][ T398] bus_for_each_drv+0x260/0x2f0 [ 48.886344][ T398] __device_attach+0x2bd/0x3a0 [ 48.891603][ T398] device_initial_probe+0x1e/0x30 [ 48.897667][ T398] bus_probe_device+0x18b/0x270 [ 48.902978][ T398] device_add+0x80c/0xc00 [ 48.908409][ T398] hid_add_device+0x39b/0x560 [ 48.913565][ T398] usbhid_probe+0xde3/0x12b0 [ 48.918857][ T398] usb_probe_interface+0x696/0xc00 [ 48.924956][ T398] really_probe+0x2d6/0x890 [ 48.930393][ T398] __driver_probe_device+0x198/0x280 [ 48.936776][ T398] driver_probe_device+0x54/0x3f0 [ 48.942352][ T398] __device_attach_driver+0x2f1/0x4b0 [ 48.948646][ T398] bus_for_each_drv+0x260/0x2f0 [ 48.955143][ T398] __device_attach+0x2bd/0x3a0 [ 48.960584][ T398] device_initial_probe+0x1e/0x30 [ 48.967127][ T398] bus_probe_device+0x18b/0x270 [ 48.972869][ T398] device_add+0x80c/0xc00 [ 48.978508][ T398] usb_set_configuration+0x1ad4/0x20b0 [ 48.986432][ T398] usb_generic_driver_probe+0x95/0x160 [ 48.992343][ T398] usb_probe_device+0x1d4/0x380 [ 48.997830][ T398] really_probe+0x2d6/0x890 [ 49.002500][ T398] __driver_probe_device+0x198/0x280 [ 49.009338][ T398] driver_probe_device+0x54/0x3f0 [ 49.015030][ T398] __device_attach_driver+0x2f1/0x4b0 [ 49.020741][ T398] bus_for_each_drv+0x260/0x2f0 [ 49.027232][ T398] __device_attach+0x2bd/0x3a0 [ 49.032556][ T398] device_initial_probe+0x1e/0x30 [ 49.037802][ T398] bus_probe_device+0x18b/0x270 [ 49.043049][ T398] device_add+0x80c/0xc00 [ 49.047500][ T398] usb_new_device+0x9ed/0x1590 [ 49.053374][ T398] hub_event+0x2c81/0x4270 [ 49.058543][ T398] process_scheduled_works+0x7d2/0x1020 [ 49.064670][ T398] worker_thread+0xc58/0x1250 [ 49.070669][ T398] kthread+0x2ca/0x370 [ 49.075201][ T398] ret_from_fork+0x67/0xa0 [ 49.080441][ T398] ret_from_fork_asm+0x1a/0x30 [ 49.086111][ T398] [ 49.089125][ T398] The buggy address belongs to the object at ffff88810a6ec1c0 [ 49.089125][ T398] which belongs to the cache kmalloc-8 of size 8 [ 49.105590][ T398] The buggy address is located 1 bytes inside of [ 49.105590][ T398] allocated 7-byte region [ffff88810a6ec1c0, ffff88810a6ec1c7) [ 49.120584][ T398] [ 49.123089][ T398] The buggy address belongs to the physical page: [ 49.130620][ T398] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a6ec [ 49.140477][ T398] anon flags: 0x4000000000000000(zone=1) [ 49.147427][ T398] page_type: f5(slab) [ 49.151895][ T398] raw: 4000000000000000 ffff888100041500 0000000000000000 dead000000000001 [ 49.162161][ T398] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 49.171636][ T398] page dumped because: kasan: bad access detected [ 49.178619][ T398] page_owner tracks the page as allocated [ 49.184736][ T398] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 5533053486, free_ts 0 [ 49.204595][ T398] post_alloc_hook+0x3b9/0x3f0 [ 49.209646][ T398] prep_new_page+0x1c/0x120 [ 49.214546][ T398] get_page_from_freelist+0x46bb/0x4750 [ 49.220596][ T398] __alloc_pages_noprof+0x30d/0x6c0 [ 49.226137][ T398] alloc_slab_page+0x6b/0x1f0 [ 49.231960][ T398] allocate_slab+0x69/0x440 [ 49.236784][ T398] ___slab_alloc+0x59a/0x8b0 [ 49.241693][ T398] __kmalloc_cache_noprof+0x22e/0x3c0 [ 49.247367][ T398] usb_control_msg+0x83/0x490 [ 49.252147][ T398] usb_get_string+0xa8/0x3c0 [ 49.256880][ T398] usb_string_sub+0x7f/0x450 [ 49.261757][ T398] usb_string+0x1eb/0x760 [ 49.266418][ T398] usb_cache_string+0x99/0x2c0 [ 49.271325][ T398] usb_new_device+0x29b/0x1590 [ 49.276497][ T398] register_root_hub+0x269/0x4a0 [ 49.281479][ T398] usb_add_hcd+0xc9b/0x10b0 [ 49.286169][ T398] page_owner free stack trace missing [ 49.291652][ T398] [ 49.294618][ T398] Memory state around the buggy address: [ 49.300501][ T398] ffff88810a6ec080: fa fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc [ 49.308850][ T398] ffff88810a6ec100: 00 fc fc fc 06 fc fc fc fa fc fc fc 00 fc fc fc [ 49.316966][ T398] >ffff88810a6ec180: 06 fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc [ 49.325740][ T398] ^ [ 49.332194][ T398] ffff88810a6ec200: 06 fc fc fc 00 fc fc fc 06 fc fc fc 00 fc fc fc [ 49.340549][ T398] ffff88810a6ec280: fa fc fc fc 06 fc fc fc fa fc fc fc 06 fc fc fc [ 49.349030][ T398] ================================================================== [ 49.357713][ T398] Disabling lock debugging due to kernel taint [ 49.496208][ T36] audit: type=1400 audit(1753752401.960:280): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.547290][ T36] audit: type=1400 audit(1753752401.990:281): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.585140][ T36] audit: type=1400 audit(1753752401.990:282): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.629016][ T36] audit: type=1400 audit(1753752401.990:283): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.486000][ T398] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 50.497293][ T398] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 50.512889][ T398] microsoft 0003:045E:07DA.0002: no inputs found [ 50.519380][ T398] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 50.533856][ T398] usb 1-1: USB disconnect, device number 5 [ 50.565540][ T1136] fido_id[1136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 50.622058][ T426] usb 3-1: Using ep0 maxpacket: 16 [ 50.629718][ T426] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.642028][ T426] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 50.659866][ T426] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.669564][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.678337][ T426] usb 3-1: SerialNumber: syz [ 50.687421][ T426] usb 3-1: bad CDC descriptors [ 50.815481][ T9] usb 3-1: USB disconnect, device number 5