last executing test programs: 21.945816414s ago: executing program 3 (id=1536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @local, @empty}}}}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) (async) r4 = fsmount(r1, 0x0, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080), 0x8) (async) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080), 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d"], 0x1c}], 0x1}, 0x0) fchdir(r4) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unshare(0xa020400) (async) unshare(0xa020400) lseek(r7, 0x0, 0x0) (async) lseek(r7, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xc4000920) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 21.926359384s ago: executing program 3 (id=1537): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)={0x25, 0x3, 0x0, {0x2, 0x4, 0x0, '$/\\!'}}, 0x25) 21.904388464s ago: executing program 3 (id=1538): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xca40, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000200)=0x28) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x10001, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x4c05c000) write(r2, &(0x7f00000000c0)="fa074061f2de7bac03d24f5da20488330f3cc370cc56ace97b98c6", 0x1b) ppoll(0x0, 0x0, 0x0, &(0x7f0000001a40)={[0x1a1e]}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004d3"], 0x40}}, 0x90) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$inet6(0x10, 0xa, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042cbd7000fedbdf24070000000500300000000000050035000900000008003c000800000008003a000200000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x41) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000280)='./file0\x00', r8, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 21.051542239s ago: executing program 3 (id=1563): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@access_any}], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r3, 0xffffa000) 20.99039531s ago: executing program 3 (id=1564): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth0_macvtap\x00') (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) 20.989963339s ago: executing program 3 (id=1565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002180)={0x14, 0x0, 0x304, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x2000c080) syz_usb_connect(0x5, 0x42b, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xcb, 0x8, 0x2, 0x20, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x5836}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xe4c1}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r3) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r5, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r4, 0xb03, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8000) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0xfffff801, 0x10000, 0x0, 0x1, 0x843, 0x8}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000200)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fda={0x66646185, 0x6, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/175, 0xaf, 0x0, 0x35}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002180)={0x14, 0x0, 0x304, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x2000c080) (async) syz_usb_connect(0x5, 0x42b, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xcb, 0x8, 0x2, 0x20, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x5836}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xe4c1}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r3) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r3) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) shutdown(r5, 0x1) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r4, 0xb03, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8000) (async) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0xfffff801, 0x10000, 0x0, 0x1, 0x843, 0x8}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000200)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fda={0x66646185, 0x6, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/175, 0xaf, 0x0, 0x35}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) 10.629327839s ago: executing program 2 (id=1597): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) pwritev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="3d89bf6df89780a65eb4334ce002c0ae4df641fc370a793b16ad29c31226e5d4695f2157e3b8", 0x26}], 0x1, 0x4, 0x4) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) pwritev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="3d89bf6df89780a65eb4334ce002c0ae4df641fc370a793b16ad29c31226e5d4695f2157e3b8", 0x26}], 0x1, 0x4, 0x4) (async) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) (async) 9.135844377s ago: executing program 0 (id=1598): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000000000000070000004404913000e01e00"], 0x18}}], 0x1, 0x46000) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @private}, &(0x7f00000001c0)=0xc) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x100082) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c, 0x800) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) setns(r6, 0x2000000) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 9.135454757s ago: executing program 1 (id=1599): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) r1 = socket(0x28, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x80001, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 9.135234948s ago: executing program 2 (id=1600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40210c0000000c003d7da329cc80c2f407f43c146802cad3e1fc9ac243ad8e2cdd2004b8727a5de782fb3cf438c8b35926387d2b67bbfe51dac63834d7a2306dfa9dc25ca614c02087bf9a45cbef0a44eeb1509ee5aa973544f84ae6f329e7de8c5cc4e7de9c9f27ffe366836f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 7.514031516s ago: executing program 0 (id=1601): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1f7776b74479b4df, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1f7776b74479b4df, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000100)="c94d1f091da7188555e97bc213e0da1ed0fdb6a6843fc02a50680a3a349a5bb73510a5d6387802b283915f3b1cff498c37f63a8f7a24fb3befdf75b549fc9f1494cf1d999468d157b3ea7bb5140890d7950530ee48d29e00509a0e7ab4bdc33782d0c73f36b24935046ca864bf8d", 0x6e, 0x6, 0x0, 0x2, r0}, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x6, 0x4) rt_sigprocmask(0x1, &(0x7f0000000240)={[0x5]}, &(0x7f0000000280), 0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) flistxattr(r2, &(0x7f0000000300)=""/24, 0x18) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x400101, 0x0) close_range(r2, r3, 0x0) r4 = accept4$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x2711, @local}, 0x10, 0x37106b470bdf9d77) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) fremovexattr(r5, &(0x7f0000000400)=@known='system.advise\x00') (async) fremovexattr(r5, &(0x7f0000000400)=@known='system.advise\x00') ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000440)) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000004c0)={0x0, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6e25, 0x3d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x387}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x8088) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000680)={0x3, 0x0, [{0xd, 0x4, 0x0, 0x5, 0x0, 0xd3f9, 0x3}, {0xd, 0x4, 0x0, 0x6, 0xffff4aa4, 0xffff, 0x80}, {0x6, 0x8, 0x2, 0x5, 0x101, 0xa, 0x1}]}) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000680)={0x3, 0x0, [{0xd, 0x4, 0x0, 0x5, 0x0, 0xd3f9, 0x3}, {0xd, 0x4, 0x0, 0x6, 0xffff4aa4, 0xffff, 0x80}, {0x6, 0x8, 0x2, 0x5, 0x101, 0xa, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'dvmrp0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'erspan0\x00', r7, 0x700, 0x40, 0x7, 0x7fffffff, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x8, 0x14, 0x0, 0x4, [0xc]}, @end, @end, @timestamp_prespec={0x44, 0x3c, 0xa2, 0x3, 0x5, [{@multicast1, 0x5}, {@private=0xa010101, 0x5}, {@broadcast, 0x80000000}, {@broadcast, 0x84}, {@broadcast, 0x224c8131}, {@broadcast, 0xb7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000840)={'erspan0\x00', r7, 0x874f, 0x7888, 0xce, 0xee2, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, {[@lsrr={0x83, 0x7, 0x6d, [@rand_addr=0x64010100]}, @noop]}}}}}) sendmsg$nl_route_sched_retired(r8, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@deltclass={0x98, 0x29, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0x5}, {0x8, 0x3}, {0x9, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf8}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x8}, 0x3ff, 0x3}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0xffe0}, 0x7, 0x8001}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x10}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x8, 0xb}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x0, 0x9, 0x54, 0x28, 0x2}, 0x24, &(0x7f0000000a80)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "ad2b72eebab8dbcf432465ed964faf00"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0xf, 0x9, 0x8, 0x2}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x427}}]}) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x10}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x8, 0xb}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x0, 0x9, 0x54, 0x28, 0x2}, 0x24, &(0x7f0000000a80)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "ad2b72eebab8dbcf432465ed964faf00"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0xf, 0x9, 0x8, 0x2}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x427}}]}) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0xfffffffffffffffd, 0x0) (async) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0xfffffffffffffffd, 0x0) 7.470406257s ago: executing program 1 (id=1602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000200)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 5.783699487s ago: executing program 0 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x9) close(0x3) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0xfffffffe, 0x2, 0xc, 0x9, 0xf94, 0x80000f1, 0x37, 0xc698, 0x80000001, 0x6, 0x6, 0x1, 0x6b, 0xff, 0x2, 0x80000000, 0x2, 0x20000002, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x6, 0x1675, 0x1, 0xc5, 0x20000004, 0x200, 0x4, 0x7fff, 0x7fff, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0xc, 0x8, 0x3, 0x43, 0x7, 0x8, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x3, 0x7, 0x9, 0x8, 0x40000008, 0x4, 0x95, 0x7, 0x72, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x2, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1ff, 0x6, 0xb, 0x8, 0x326, 0x4, 0xffff, 0x4, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x4, 0x7, 0x87, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x7]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={0x0}) read$eventfd(r2, &(0x7f0000000080), 0x8) 5.781386486s ago: executing program 1 (id=1604): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6tnl0\x00', {0x8012}, 0x4}) socket(0xf, 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r4, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}}], 0x1, 0x10003, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000880)=0x7, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ftruncate(r6, 0xb5ac) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.780432986s ago: executing program 2 (id=1605): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x34}], 0x1}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0xa, 0x6c, {0x6c, 0xf, "00d300000005c18995b3640e5235614384c55f717e51da620ca996733e205831b10448d37fe94a0f7853220eb8b3fdaab61e8e0015a16d4f600377f0d494244734a917f7bcf64411b57ca609f62347a6afe3d1843b5d8331d8cf4681e2f15490ca34df751c19c77488a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"}) 3.967707017s ago: executing program 0 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {0x2, 0xfffb}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fstat(r5, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.966684327s ago: executing program 1 (id=1607): mkdir(&(0x7f0000000080)='./file1\x00', 0x30) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) (async) syz_open_dev$mouse(0x0, 0x0, 0x80041) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') (async) read(r1, &(0x7f0000000000)=""/74, 0x4a) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000007000/0x3000)=nil, 0x3000}) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 3.966490107s ago: executing program 2 (id=1608): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200281, 0x0) (rerun: 64) syz_open_pts(r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x8, 0x80000000, 0x4, 0x0, 0x8, 0x2, 0x7, [0x7, 0x7]}}) 1.990240448s ago: executing program 0 (id=1609): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0xe0, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0xffffffff, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x0, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xe, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x4000400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3438, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0x0, 0x60a2, 0x80, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xff, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0x103, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x40048c67) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:adjtime_t:s0\x00', 0x1f, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r9, 0x1}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r9}) 1.989947019s ago: executing program 1 (id=1610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) io_setup(0xf0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd2835090000330000010902240001000020080904140002030002000921fdff00012245000905810308"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@#E'], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r0, r3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.989265559s ago: executing program 2 (id=1611): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0xffffffffffffffa2) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000a80)=0x4) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r4, @ANYRESOCT=r4, @ANYRESDEC=r4]) 9.70821ms ago: executing program 0 (id=1612): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'dvmrp1\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x6, 0xf5, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0xfffffffe, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0x40000ff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0x0, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x83, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x9, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0xffffffff, 0x4, 0x8003, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x40002, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x34, &(0x7f0000001040)=ANY=[@ANYBLOB="ae0200000000000000000000e3c5a9e8c4cefcbc937565022fec0cab699689a1bf702c7a6d727a38e61d333b5c6b1075faf5f6a4263b6dc64cc604d8477e87951f93c5d46d6369bfdafdeeb5ed0f3271baf4943ae76adaeef81057b69187cc31c53b08998d37b9ca74f5b61a9b5f6ca18f2cd1003dedaee685e5ba44bb26b9c02b075d718ad30bd139aaee5dafa19460401bb53e2ee00edf53bf3fffa018"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdef) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x175f42, 0x0) r5 = memfd_secret(0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES32, @ANYRES32, @ANYRES16=r2], 0x254}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) ftruncate(r5, 0x3) write(r4, &(0x7f0000000400)="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", 0xc01) 162.78µs ago: executing program 1 (id=1613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x4e21, 0x0, 0xa}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x3, 0x3}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x40, 0x6, 0x303, 0xfffd, 0xffffffffffffff54, 0x0, 0x0}) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r2, &(0x7f00000000c0), 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x6, 0x6, 0x5, 0xe76d}, {0x9, 0x7f, 0x3}, {0x7, 0x2, 0x76, 0xb}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1614): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="9a582215a09d", 0x589a}], 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 380][ T826] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 54.688411][ T826] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 54.688444][ T826] ? inode_to_bdi+0x6d/0x100 [ 54.688476][ T826] shmem_write_begin+0xf4/0x270 [ 54.688504][ T826] generic_perform_write+0x330/0x960 [ 54.688540][ T826] ? __cfi_generic_perform_write+0x10/0x10 [ 54.688573][ T826] ? down_write+0xe9/0x2a0 [ 54.688596][ T826] ? mnt_get_write_access_file+0x1af/0x3b0 [ 54.688632][ T826] ? mnt_put_write_access_file+0xc2/0x100 [ 54.688662][ T826] ? file_update_time+0x1ef/0x220 [ 54.688692][ T826] shmem_file_write_iter+0x105/0x130 [ 54.688723][ T826] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.688760][ T826] __kernel_write_iter+0x41a/0x8e0 [ 54.688781][ T826] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.688812][ T826] ? __cfi___kernel_write_iter+0x10/0x10 [ 54.688833][ T826] ? get_dump_page+0x160/0x220 [ 54.688863][ T826] ? __asan_memset+0x39/0x50 [ 54.688882][ T826] ? iov_iter_bvec+0xc0/0x180 [ 54.688911][ T826] dump_user_range+0xb06/0xdf0 [ 54.688934][ T826] ? __cfi_dump_emit+0x10/0x10 [ 54.688954][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 54.688975][ T826] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 54.689009][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 54.689042][ T826] ? elf_core_dump+0x2368/0x3800 [ 54.689070][ T826] elf_core_dump+0x2ccc/0x3800 [ 54.689100][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 54.689134][ T826] ? dump_interrupted+0xf0/0xf0 [ 54.689168][ T826] ? 0xffffffffff600000 [ 54.689187][ T826] do_coredump+0x1bfa/0x2bd0 [ 54.689224][ T826] ? __cfi_do_coredump+0x10/0x10 [ 54.689256][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 54.689337][ T826] ? __kasan_slab_free+0x6a/0x80 [ 54.689363][ T826] ? kmem_cache_free+0x1c1/0x510 [ 54.689386][ T826] ? get_signal+0xa75/0x14f0 [ 54.689414][ T826] get_signal+0x11fd/0x14f0 [ 54.689448][ T826] arch_do_signal_or_restart+0x96/0x720 [ 54.689483][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.689527][ T826] irqentry_exit_to_user_mode+0x4e/0xb0 [ 54.689553][ T826] irqentry_exit+0x16/0x60 [ 54.689577][ T826] exc_page_fault+0x66/0xc0 [ 54.689599][ T826] asm_exc_page_fault+0x2b/0x30 [ 54.689622][ T826] RIP: 0033:0x7f54de38f6d1 [ 54.689641][ T826] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 54.689662][ T826] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 54.689682][ T826] RAX: 0000000000000000 RBX: 00007f54de5e6090 RCX: 00007f54de38f6c9 [ 54.689699][ T826] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000400 [ 54.689713][ T826] RBP: 00007f54de411f91 R08: 0000000000000000 R09: 0000000000000000 [ 54.689727][ T826] R10: 0000200000000040 R11: 0000000000000206 R12: 0000000000000000 [ 54.689742][ T826] R13: 00007f54de5e6128 R14: 00007f54de5e6090 R15: 00007ffff43e2c68 [ 54.689762][ T826] [ 54.689827][ T826] memory: usage 299840kB, limit 307200kB, failcnt 43330 [ 55.189177][ T826] memory+swap: usage 412728kB, limit 9007199254740988kB, failcnt 0 [ 55.215263][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 55.229925][ T826] Memory cgroup stats for /syz1: [ 55.230106][ T826] cache 303374336 [ 55.250282][ T826] rss 53248 [ 55.256782][ T826] rss_huge 0 [ 55.264561][ T826] shmem 301998080 [ 55.282795][ T826] mapped_file 1245184 [ 55.293562][ T826] dirty 0 [ 55.301092][ T826] writeback 0 [ 55.304737][ T826] workingset_refault_anon 16 [ 55.309813][ T826] workingset_refault_file 3150 [ 55.314745][ T826] swap 127119360 [ 55.317431][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 55.319016][ T826] swapcached 16384 [ 55.344412][ T826] pgpgin 193136 [ 55.348558][ T826] pgpgout 119564 [ 55.352280][ T826] pgfault 20151 [ 55.355971][ T826] pgmajfault 78 [ 55.360453][ T826] inactive_anon 128249856 [ 55.365113][ T826] active_anon 173604864 [ 55.369872][ T826] inactive_file 0 [ 55.373735][ T826] active_file 1376256 [ 55.378235][ T826] unevictable 0 [ 55.381931][ T826] hierarchical_memory_limit 314572800 [ 55.388005][ T826] hierarchical_memsw_limit 9223372036854771712 [ 55.394373][ T826] total_cache 303374336 [ 55.398987][ T826] total_rss 53248 [ 55.402728][ T826] total_rss_huge 0 [ 55.406554][ T826] total_shmem 301998080 [ 55.411142][ T826] total_mapped_file 1245184 [ 55.419908][ T826] total_dirty 0 [ 55.423607][ T826] total_writeback 0 [ 55.427960][ T826] total_workingset_refault_anon 16 [ 55.433395][ T826] total_workingset_refault_file 3150 [ 55.439627][ T826] total_swap 127119360 [ 55.443762][ T826] total_swapcached 16384 [ 55.448378][ T826] total_pgpgin 193136 [ 55.452511][ T826] total_pgpgout 119564 [ 55.456723][ T826] total_pgfault 20151 [ 55.461135][ T826] total_pgmajfault 78 [ 55.465252][ T826] total_inactive_anon 128249856 [ 55.470373][ T826] total_active_anon 173604864 [ 55.475151][ T826] total_inactive_file 0 [ 55.478574][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.479974][ T826] total_active_file 1376256 [ 55.489349][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 55.497328][ T826] total_unevictable 0 [ 55.503039][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.507681][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=829,uid=0 [ 55.520138][ T10] usb 3-1: config 0 descriptor?? [ 55.534736][ T826] Memory cgroup out of memory: Killed process 829 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 55.808012][ T833] syz.1.150 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.832095][ T833] CPU: 1 UID: 0 PID: 833 Comm: syz.1.150 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 55.832135][ T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.832150][ T833] Call Trace: [ 55.832157][ T833] [ 55.832167][ T833] __dump_stack+0x21/0x30 [ 55.832206][ T833] dump_stack_lvl+0x10c/0x190 [ 55.832236][ T833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.832266][ T833] ? ___ratelimit+0x3f7/0x5a0 [ 55.832301][ T833] dump_stack+0x19/0x20 [ 55.832328][ T833] dump_header+0xd7/0x490 [ 55.832350][ T833] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 55.832381][ T833] oom_kill_process+0x35d/0x640 [ 55.832417][ T833] ? sched_clock_cpu+0x75/0x400 [ 55.832449][ T833] out_of_memory+0x659/0xa80 [ 55.832476][ T833] ? __cfi_out_of_memory+0x10/0x10 [ 55.832503][ T833] ? mutex_lock_killable+0x92/0x1c0 [ 55.832526][ T833] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.832551][ T833] mem_cgroup_out_of_memory+0x279/0x350 [ 55.832573][ T833] ? drain_obj_stock+0xed0/0xed0 [ 55.832595][ T833] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 55.832617][ T833] try_charge_memcg+0x8f7/0xde0 [ 55.832648][ T833] ? __cfi_try_charge_memcg+0x10/0x10 [ 55.832678][ T833] ? __alloc_pages_noprof+0x31f/0x7b0 [ 55.832710][ T833] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.832742][ T833] __mem_cgroup_charge+0xf6/0x410 [ 55.832775][ T833] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 55.832809][ T833] ? do_pte_missing+0x2bdb/0x4240 [ 55.832839][ T833] shmem_alloc_and_add_folio+0x86d/0x1050 [ 55.832870][ T833] ? put_swap_device+0x130/0x130 [ 55.832897][ T833] ? shmem_huge_global_enabled+0x2da/0x360 [ 55.832923][ T833] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 55.832947][ T833] ? __kasan_check_write+0x18/0x20 [ 55.832980][ T833] ? _raw_spin_lock+0x8c/0x120 [ 55.833008][ T833] shmem_get_folio_gfp+0x5f0/0x1380 [ 55.833035][ T833] ? shmem_get_folio+0xc0/0xc0 [ 55.833059][ T833] ? follow_page_pte+0xa5c/0xb90 [ 55.833088][ T833] ? inode_to_bdi+0x6d/0x100 [ 55.833120][ T833] shmem_write_begin+0xf4/0x270 [ 55.833147][ T833] generic_perform_write+0x330/0x960 [ 55.833183][ T833] ? __cfi_generic_perform_write+0x10/0x10 [ 55.833215][ T833] ? down_write+0xe9/0x2a0 [ 55.833239][ T833] ? file_update_time+0xa3/0x220 [ 55.833269][ T833] shmem_file_write_iter+0x105/0x130 [ 55.833299][ T833] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 55.833331][ T833] __kernel_write_iter+0x41a/0x8e0 [ 55.833351][ T833] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 55.833382][ T833] ? __cfi___kernel_write_iter+0x10/0x10 [ 55.833408][ T833] ? get_dump_page+0x160/0x220 [ 55.833436][ T833] ? __asan_memset+0x39/0x50 [ 55.833455][ T833] ? iov_iter_bvec+0xc0/0x180 [ 55.833484][ T833] dump_user_range+0xb06/0xdf0 [ 55.833507][ T833] ? __cfi_dump_emit+0x10/0x10 [ 55.833527][ T833] ? __cfi_dump_user_range+0x10/0x10 [ 55.833548][ T833] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 55.833580][ T833] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 55.833613][ T833] ? elf_core_dump+0x2368/0x3800 [ 55.833641][ T833] elf_core_dump+0x2ccc/0x3800 [ 55.833670][ T833] ? __cfi_elf_core_dump+0x10/0x10 [ 55.833704][ T833] ? dump_interrupted+0xf0/0xf0 [ 55.833737][ T833] ? 0xffffffffff600000 [ 55.833756][ T833] do_coredump+0x1bfa/0x2bd0 [ 55.833792][ T833] ? __cfi_do_coredump+0x10/0x10 [ 55.833823][ T833] ? asm_exc_page_fault+0x2b/0x30 [ 55.833855][ T833] ? __kasan_slab_free+0x6a/0x80 [ 55.833880][ T833] ? kmem_cache_free+0x1c1/0x510 [ 55.833901][ T833] ? get_signal+0xa75/0x14f0 [ 55.833930][ T833] get_signal+0x11fd/0x14f0 [ 55.833961][ T833] arch_do_signal_or_restart+0x96/0x720 [ 55.833995][ T833] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.834032][ T833] irqentry_exit_to_user_mode+0x4e/0xb0 [ 55.834058][ T833] irqentry_exit+0x16/0x60 [ 55.834079][ T833] exc_page_fault+0x66/0xc0 [ 55.834101][ T833] asm_exc_page_fault+0x2b/0x30 [ 55.834123][ T833] RIP: 0033:0x7f54de38f6d1 [ 55.834142][ T833] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 55.834162][ T833] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 55.834182][ T833] RAX: 0000000000000000 RBX: 00007f54de5e6090 RCX: 00007f54de38f6c9 [ 55.834198][ T833] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000400 [ 55.834212][ T833] RBP: 00007f54de411f91 R08: 0000000000000000 R09: 0000000000000000 [ 55.834227][ T833] R10: 0000200000000040 R11: 0000000000000206 R12: 0000000000000000 [ 55.834241][ T833] R13: 00007f54de5e6128 R14: 00007f54de5e6090 R15: 00007ffff43e2c68 [ 55.834262][ T833] [ 55.897502][ T833] memory: usage 290088kB, limit 307200kB, failcnt 45635 [ 56.079479][ T1175] 9pnet_fd: Insufficient options for proto=fd [ 56.083785][ T10] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 56.089975][ T1175] tipc: New replicast peer: 0.0.0.0 [ 56.093306][ T833] memory+swap: usage 419460kB, limit 9007199254740988kB, failcnt 0 [ 56.120967][ T1175] tipc: Enabled bearer , priority 10 [ 56.122141][ T10] lenovo 0003:17EF:6047.0008: Failed to switch F7/9/11 mode: -71 [ 56.210195][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 56.210218][ T36] audit: type=1400 audit(1762539065.220:340): avc: denied { bind } for pid=1174 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.217570][ T1179] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 56.338775][ T833] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 56.362313][ T10] lenovo 0003:17EF:6047.0008: Failed to switch middle button: -71 [ 56.420818][ T10] lenovo 0003:17EF:6047.0008: Fn-lock setting failed: -71 [ 56.441014][ T10] lenovo 0003:17EF:6047.0008: Sensitivity setting failed: -71 [ 56.465280][ T10] usb 3-1: USB disconnect, device number 17 [ 56.484840][ T36] audit: type=1400 audit(1762539065.490:341): avc: denied { read } for pid=1188 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.599930][ T833] Memory cgroup stats for /syz1: [ 56.600115][ T833] cache 296263680 [ 56.650670][ T833] rss 98304 [ 56.655458][ T1194] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 56.670860][ T833] rss_huge 0 [ 56.674138][ T833] shmem 294543360 [ 56.712222][ T1194] rust_binder: Write failure EINVAL in pid:119 [ 56.747375][ T833] mapped_file 1523712 [ 56.831693][ T833] dirty 0 [ 56.834827][ T833] writeback 4096 [ 56.867392][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.872032][ T833] workingset_refault_anon 22 [ 56.900361][ T833] workingset_refault_file 4435 [ 56.905207][ T833] swap 127975424 [ 56.909107][ T833] swapcached 20480 [ 56.913004][ T833] pgpgin 200889 [ 56.916551][ T833] pgpgout 128989 [ 56.920390][ T833] pgfault 26342 [ 56.924214][ T833] pgmajfault 91 [ 56.927873][ T833] inactive_anon 9990144 [ 56.932494][ T833] active_anon 282578944 [ 56.936731][ T833] inactive_file 1421312 [ 56.941264][ T833] active_file 0 [ 56.944767][ T833] unevictable 0 [ 56.948559][ T833] hierarchical_memory_limit 314572800 [ 56.954000][ T833] hierarchical_memsw_limit 9223372036854771712 [ 56.960462][ T833] total_cache 296263680 [ 56.964682][ T833] total_rss 98304 [ 56.968604][ T833] total_rss_huge 0 [ 56.972430][ T833] total_shmem 294543360 [ 56.976628][ T833] total_mapped_file 1523712 [ 56.981540][ T833] total_dirty 0 [ 56.995180][ T833] total_writeback 4096 [ 56.999626][ T833] total_workingset_refault_anon 22 [ 57.004786][ T833] total_workingset_refault_file 4435 [ 57.017385][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.020577][ T833] total_swap 127975424 [ 57.024411][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.026670][ T833] total_swapcached 20480 [ 57.026685][ T833] total_pgpgin 200889 [ 57.026694][ T833] total_pgpgout 128989 [ 57.034567][ T10] usb 3-1: can't read configurations, error -61 [ 57.058946][ T833] total_pgfault 26342 [ 57.062995][ T833] total_pgmajfault 91 [ 57.067067][ T833] total_inactive_anon 9990144 [ 57.087374][ T833] total_active_anon 282578944 [ 57.097555][ T833] total_inactive_file 1421312 [ 57.107551][ T833] total_active_file 0 [ 57.111585][ T833] total_unevictable 0 [ 57.125785][ T833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=827,uid=0 [ 57.157385][ T833] Memory cgroup out of memory: Killed process 827 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53692kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 57.210486][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 57.268863][ T1198] binder: Unknown parameter '0x0000000000000000' [ 57.351963][ T1204] overlayfs: failed to resolve './file0': -2 [ 57.369507][ T1196] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.388986][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.399091][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.407143][ T10] usb 3-1: can't read configurations, error -61 [ 57.418370][ T10] usb usb3-port1: attempt power cycle [ 57.429047][ T1210] 9pnet: p9_errstr2errno: server reported unknown error [ 57.446059][ T1196] CPU: 1 UID: 0 PID: 1196 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 57.446097][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.446111][ T1196] Call Trace: [ 57.446119][ T1196] [ 57.446127][ T1196] __dump_stack+0x21/0x30 [ 57.446163][ T1196] dump_stack_lvl+0x10c/0x190 [ 57.446192][ T1196] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.446221][ T1196] ? ___ratelimit+0x3f7/0x5a0 [ 57.446254][ T1196] dump_stack+0x19/0x20 [ 57.446288][ T1196] dump_header+0xd7/0x490 [ 57.446309][ T1196] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 57.446337][ T1196] oom_kill_process+0x35d/0x640 [ 57.446364][ T1196] ? sched_clock_cpu+0x75/0x400 [ 57.446395][ T1196] out_of_memory+0x659/0xa80 [ 57.446421][ T1196] ? __cfi_out_of_memory+0x10/0x10 [ 57.446446][ T1196] ? mutex_lock_killable+0x92/0x1c0 [ 57.446467][ T1196] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.446491][ T1196] mem_cgroup_out_of_memory+0x279/0x350 [ 57.446512][ T1196] ? drain_obj_stock+0xed0/0xed0 [ 57.446534][ T1196] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 57.446554][ T1196] try_charge_memcg+0x8f7/0xde0 [ 57.446584][ T1196] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.446613][ T1196] ? __alloc_pages_noprof+0x31f/0x7b0 [ 57.446643][ T1196] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.446674][ T1196] __mem_cgroup_charge+0xf6/0x410 [ 57.446706][ T1196] ? is_bpf_text_address+0x17b/0x1a0 [ 57.446730][ T1196] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.446761][ T1196] ? kernel_text_address+0xa9/0xe0 [ 57.446789][ T1196] folio_prealloc+0x67/0x240 [ 57.446815][ T1196] do_wp_page+0x1885/0x2ed0 [ 57.446841][ T1196] ? folio_put+0x90/0x90 [ 57.446864][ T1196] ? __cfi__raw_spin_lock+0x10/0x10 [ 57.446890][ T1196] ? __pte_offset_map+0x1b0/0x230 [ 57.446922][ T1196] ? pte_offset_map_rw_nolock+0xba/0x110 [ 57.446954][ T1196] handle_mm_fault+0xff7/0x1b90 [ 57.446981][ T1196] ? __cfi_handle_mm_fault+0x10/0x10 [ 57.447004][ T1196] ? lock_vma_under_rcu+0x49d/0x540 [ 57.447101][ T1196] do_user_addr_fault+0x96c/0x1200 [ 57.447133][ T1196] ? _raw_spin_unlock+0x45/0x60 [ 57.447164][ T1196] exc_page_fault+0x59/0xc0 [ 57.447186][ T1196] asm_exc_page_fault+0x2b/0x30 [ 57.447209][ T1196] RIP: 0033:0x7f54de2648f2 [ 57.447227][ T1196] Code: 13 00 00 4c 8b 05 f6 0d eb 00 48 8b 0d af 0d eb 00 31 c0 48 8d ac 24 50 01 00 00 48 8d 15 84 ed 1a 00 be 40 00 00 00 48 89 ef 05 97 0d eb 00 01 e8 a2 31 0d 00 31 c0 48 89 ee bf 0f 00 00 00 [ 57.447246][ T1196] RSP: 002b:00007ffff43e2dd0 EFLAGS: 00010246 [ 57.447267][ T1196] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 57.447281][ T1196] RDX: 00007f54de41366e RSI: 0000000000000040 RDI: 00007ffff43e2f20 [ 57.447296][ T1196] RBP: 00007ffff43e2f20 R08: 000000000000010a R09: 0000000000000000 [ 57.447311][ T1196] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 57.447325][ T1196] R13: 00000000000927c0 R14: 000000000000dd78 R15: 00007ffff43e3080 [ 57.447343][ T1196] [ 57.760198][ T36] audit: type=1400 audit(1762539066.750:342): avc: denied { mount } for pid=1212 comm="syz.3.272" name="/" dev="ramfs" ino=8136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.797423][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.827784][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.834428][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.842747][ T10] usb 3-1: can't read configurations, error -61 [ 57.948755][ T1196] memory: usage 307168kB, limit 307200kB, failcnt 47520 [ 57.955910][ T1196] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 57.964507][ T1196] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.971454][ T1196] Memory cgroup stats for /syz1: [ 57.971614][ T1196] cache 313999360 [ 57.980355][ T1196] rss 102400 [ 57.983651][ T1196] rss_huge 0 [ 57.986902][ T1196] shmem 311230464 [ 57.988356][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.990779][ T1196] mapped_file 2711552 [ 58.002248][ T1196] dirty 0 [ 58.005209][ T1196] writeback 0 [ 58.008550][ T1196] workingset_refault_anon 29 [ 58.013355][ T1196] workingset_refault_file 6909 [ 58.018219][ T1196] swap 127983616 [ 58.021850][ T1196] swapcached 12288 [ 58.025602][ T1196] pgpgin 217235 [ 58.029137][ T1196] pgpgout 141036 [ 58.032715][ T1196] pgfault 29614 [ 58.036207][ T1196] pgmajfault 127 [ 58.037813][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 58.039827][ T1196] inactive_anon 41857024 [ 58.049243][ T1196] active_anon 269443072 [ 58.052007][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 58.053502][ T1196] inactive_file 577536 [ 58.053514][ T1196] active_file 2158592 [ 58.053523][ T1196] unevictable 0 [ 58.053531][ T1196] hierarchical_memory_limit 314572800 [ 58.061720][ T10] usb 3-1: can't read configurations, error -61 [ 58.065340][ T1196] hierarchical_memsw_limit 9223372036854771712 [ 58.065358][ T1196] total_cache 313999360 [ 58.065367][ T1196] total_rss 102400 [ 58.065375][ T1196] total_rss_huge 0 [ 58.080302][ T10] usb usb3-port1: unable to enumerate USB device [ 58.097419][ T1196] total_shmem 311230464 [ 58.189027][ T1196] total_mapped_file 2711552 [ 58.204571][ T1196] total_dirty 0 [ 58.213524][ T1196] total_writeback 0 [ 58.221041][ T1196] total_workingset_refault_anon 29 [ 58.226214][ T1196] total_workingset_refault_file 6909 [ 58.231870][ T1196] total_swap 127983616 [ 58.235986][ T1196] total_swapcached 12288 [ 58.240913][ T1196] total_pgpgin 217235 [ 58.245209][ T1196] total_pgpgout 141036 [ 58.249634][ T1196] total_pgfault 29614 [ 58.254170][ T1196] total_pgmajfault 127 [ 58.258627][ T1196] total_inactive_anon 41857024 [ 58.263506][ T1196] total_active_anon 269443072 [ 58.268586][ T1196] total_inactive_file 577536 [ 58.273314][ T1196] total_active_file 2158592 [ 58.278131][ T1196] total_unevictable 0 [ 58.282215][ T1196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=831,uid=0 [ 58.297287][ T1196] Memory cgroup out of memory: Killed process 831 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 58.671126][ T1228] 8021q: VLANs not supported on lo [ 58.676545][ T36] audit: type=1400 audit(1762539067.680:343): avc: denied { mount } for pid=1227 comm="syz.3.278" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.709443][ T1228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.278'. [ 58.819116][ T804] syz.1.150 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.987384][ T804] CPU: 0 UID: 0 PID: 804 Comm: syz.1.150 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 58.987422][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.987437][ T804] Call Trace: [ 58.987444][ T804] [ 58.987454][ T804] __dump_stack+0x21/0x30 [ 58.987490][ T804] dump_stack_lvl+0x10c/0x190 [ 58.987520][ T804] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.987550][ T804] ? ___ratelimit+0x3f7/0x5a0 [ 58.987582][ T804] dump_stack+0x19/0x20 [ 58.987612][ T804] dump_header+0xd7/0x490 [ 58.987634][ T804] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 58.987664][ T804] oom_kill_process+0x35d/0x640 [ 58.987692][ T804] ? sched_clock_cpu+0x75/0x400 [ 58.987723][ T804] out_of_memory+0x659/0xa80 [ 58.987750][ T804] ? __cfi_out_of_memory+0x10/0x10 [ 58.987777][ T804] ? mutex_lock_killable+0x92/0x1c0 [ 58.987799][ T804] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.987824][ T804] mem_cgroup_out_of_memory+0x279/0x350 [ 58.987847][ T804] ? drain_obj_stock+0xed0/0xed0 [ 58.987870][ T804] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 58.987892][ T804] try_charge_memcg+0x8f7/0xde0 [ 58.987929][ T804] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.987959][ T804] ? __alloc_pages_noprof+0x31f/0x7b0 [ 58.987991][ T804] ? folio_add_new_anon_rmap+0x475/0x910 [ 58.988016][ T804] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.988053][ T804] __mem_cgroup_charge+0xf6/0x410 [ 58.988087][ T804] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.988121][ T804] shmem_alloc_and_add_folio+0x86d/0x1050 [ 58.988152][ T804] ? put_swap_device+0x130/0x130 [ 58.988178][ T804] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.988205][ T804] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.988230][ T804] ? __kasan_check_write+0x18/0x20 [ 58.988263][ T804] ? _raw_spin_lock+0x8c/0x120 [ 58.988292][ T804] shmem_get_folio_gfp+0x5f0/0x1380 [ 58.988319][ T804] ? shmem_get_folio+0xc0/0xc0 [ 58.988342][ T804] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 58.988373][ T804] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 58.988405][ T804] ? inode_to_bdi+0x6d/0x100 [ 58.988436][ T804] shmem_write_begin+0xf4/0x270 [ 58.988464][ T804] generic_perform_write+0x330/0x960 [ 58.988499][ T804] ? __cfi_generic_perform_write+0x10/0x10 [ 58.988531][ T804] ? down_write+0xe9/0x2a0 [ 58.988553][ T804] ? mnt_get_write_access_file+0x1af/0x3b0 [ 58.988582][ T804] ? mnt_put_write_access_file+0xc2/0x100 [ 58.988612][ T804] ? file_update_time+0x1ef/0x220 [ 58.988642][ T804] shmem_file_write_iter+0x105/0x130 [ 58.988671][ T804] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.988702][ T804] __kernel_write_iter+0x41a/0x8e0 [ 58.988723][ T804] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.988754][ T804] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.988777][ T804] ? __asan_memset+0x39/0x50 [ 58.988796][ T804] ? iov_iter_bvec+0xc0/0x180 [ 58.988825][ T804] dump_user_range+0xb06/0xdf0 [ 58.988847][ T804] ? __cfi_dump_emit+0x10/0x10 [ 58.988867][ T804] ? __cfi_dump_user_range+0x10/0x10 [ 58.988889][ T804] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 58.988922][ T804] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.988954][ T804] ? elf_core_dump+0x2368/0x3800 [ 58.988982][ T804] elf_core_dump+0x2ccc/0x3800 [ 58.989012][ T804] ? __cfi_elf_core_dump+0x10/0x10 [ 58.989045][ T804] ? dump_interrupted+0xf0/0xf0 [ 58.989101][ T804] ? 0xffffffffff600000 [ 58.989120][ T804] do_coredump+0x1bfa/0x2bd0 [ 58.989158][ T804] ? __cfi_do_coredump+0x10/0x10 [ 58.989190][ T804] ? asm_exc_page_fault+0x2b/0x30 [ 58.989223][ T804] ? __kasan_slab_free+0x6a/0x80 [ 58.989248][ T804] ? kmem_cache_free+0x1c1/0x510 [ 58.989270][ T804] ? get_signal+0xa75/0x14f0 [ 58.989299][ T804] get_signal+0x11fd/0x14f0 [ 58.989331][ T804] arch_do_signal_or_restart+0x96/0x720 [ 58.989366][ T804] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.989404][ T804] irqentry_exit_to_user_mode+0x4e/0xb0 [ 58.989429][ T804] irqentry_exit+0x16/0x60 [ 58.989453][ T804] exc_page_fault+0x66/0xc0 [ 58.989476][ T804] asm_exc_page_fault+0x2b/0x30 [ 58.989498][ T804] RIP: 0033:0x7f54de38f6d1 [ 58.989517][ T804] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.989536][ T804] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 58.989557][ T804] RAX: 0000000000000000 RBX: 00007f54de5e6090 RCX: 00007f54de38f6c9 [ 58.989574][ T804] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000400 [ 58.989588][ T804] RBP: 00007f54de411f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.989603][ T804] R10: 0000200000000040 R11: 0000000000000206 R12: 0000000000000000 [ 58.989618][ T804] R13: 00007f54de5e6128 R14: 00007f54de5e6090 R15: 00007ffff43e2c68 [ 58.989639][ T804] [ 58.989648][ T804] memory: usage 307120kB, limit 307200kB, failcnt 50487 [ 59.471290][ T804] memory+swap: usage 431676kB, limit 9007199254740988kB, failcnt 0 [ 59.499103][ T804] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.506680][ T804] Memory cgroup stats for /syz1: [ 59.506841][ T804] cache 313901056 [ 59.515550][ T804] rss 98304 [ 59.518888][ T804] rss_huge 0 [ 59.522352][ T804] shmem 313417728 [ 59.526139][ T804] mapped_file 237568 [ 59.535609][ T804] dirty 0 [ 59.548968][ T804] writeback 0 [ 59.587372][ T804] workingset_refault_anon 38 [ 59.629973][ T804] workingset_refault_file 10923 [ 59.637975][ T804] swap 127971328 [ 59.643545][ T804] swapcached 24576 [ 59.651757][ T804] pgpgin 232408 [ 59.656379][ T36] audit: type=1400 audit(1762539068.660:344): avc: denied { read } for pid=1251 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.678700][ T804] pgpgout 156258 [ 59.684188][ T804] pgfault 35087 [ 59.688720][ T804] pgmajfault 223 [ 59.713836][ T804] inactive_anon 100548608 [ 59.718560][ T804] active_anon 212447232 [ 59.752464][ T804] inactive_file 151552 [ 59.759907][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.777407][ T804] active_file 258048 [ 59.781352][ T804] unevictable 0 [ 59.784850][ T804] hierarchical_memory_limit 314572800 [ 59.797110][ T804] hierarchical_memsw_limit 9223372036854771712 [ 59.809284][ T804] total_cache 313901056 [ 59.813581][ T804] total_rss 98304 [ 59.875659][ T804] total_rss_huge 0 [ 59.911394][ T804] total_shmem 313417728 [ 59.924988][ T804] total_mapped_file 237568 [ 59.929555][ T804] total_dirty 0 [ 59.933210][ T804] total_writeback 0 [ 59.937488][ T804] total_workingset_refault_anon 38 [ 59.943113][ T804] total_workingset_refault_file 10923 [ 59.947439][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 59.948677][ T804] total_swap 127971328 [ 59.960370][ T804] total_swapcached 24576 [ 59.964776][ T804] total_pgpgin 232408 [ 59.968898][ T804] total_pgpgout 156258 [ 59.973054][ T804] total_pgfault 35087 [ 59.977079][ T804] total_pgmajfault 223 [ 59.981205][ T804] total_inactive_anon 100548608 [ 59.986087][ T804] total_active_anon 212447232 [ 59.990813][ T804] total_inactive_file 151552 [ 59.995412][ T804] total_active_file 258048 [ 59.999856][ T804] total_unevictable 0 [ 60.003856][ T804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=790,uid=0 [ 60.018720][ T804] Memory cgroup out of memory: Killed process 790 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53804kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 60.099130][ T45] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 60.117378][ T45] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 60.127776][ T45] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.147418][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 60.158485][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.167662][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.175680][ T45] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 60.207396][ T45] usb 3-1: SerialNumber: syz [ 60.449327][ T36] audit: type=1400 audit(1762539069.460:345): avc: denied { setopt } for pid=1267 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.479129][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 60.665272][ T826] syz.1.150 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 60.687192][ T826] CPU: 0 UID: 0 PID: 826 Comm: syz.1.150 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 60.687238][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.687258][ T826] Call Trace: [ 60.687266][ T826] [ 60.687275][ T826] __dump_stack+0x21/0x30 [ 60.687310][ T826] dump_stack_lvl+0x10c/0x190 [ 60.687344][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.687373][ T826] ? ___ratelimit+0x3f7/0x5a0 [ 60.687407][ T826] dump_stack+0x19/0x20 [ 60.687435][ T826] dump_header+0xd7/0x490 [ 60.687458][ T826] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 60.687488][ T826] oom_kill_process+0x35d/0x640 [ 60.687516][ T826] ? sched_clock_cpu+0x75/0x400 [ 60.687548][ T826] out_of_memory+0x659/0xa80 [ 60.687575][ T826] ? __cfi_out_of_memory+0x10/0x10 [ 60.687601][ T826] ? mutex_lock_killable+0x92/0x1c0 [ 60.687624][ T826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.687648][ T826] mem_cgroup_out_of_memory+0x279/0x350 [ 60.687672][ T826] ? drain_obj_stock+0xed0/0xed0 [ 60.687696][ T826] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 60.687717][ T826] try_charge_memcg+0x8f7/0xde0 [ 60.687747][ T826] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 60.687785][ T826] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.687817][ T826] ? __alloc_pages_noprof+0x31f/0x7b0 [ 60.687849][ T826] __mem_cgroup_charge+0xf6/0x410 [ 60.687889][ T826] ? filemap_get_entry+0x3fb/0x460 [ 60.687923][ T826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.687959][ T826] filemap_add_folio+0x57/0x2d0 [ 60.687987][ T826] __filemap_get_folio+0x5cb/0xaa0 [ 60.688018][ T826] ? __cfi___filemap_get_folio+0x10/0x10 [ 60.688047][ T826] ? mm_trace_rss_stat+0x20/0x130 [ 60.688081][ T826] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 60.688115][ T826] filemap_fault+0xb41/0x16b0 [ 60.688146][ T826] ? __cfi_filemap_fault+0x10/0x10 [ 60.688175][ T826] ? __cfi_filemap_map_pages+0x10/0x10 [ 60.688207][ T826] ? __cfi_lru_add+0x10/0x10 [ 60.688234][ T826] ? folio_rotate_reclaimable+0x130/0x130 [ 60.688263][ T826] do_pte_missing+0x298f/0x4240 [ 60.688292][ T826] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 60.688321][ T826] ? pte_marker_clear+0x1b0/0x1b0 [ 60.688348][ T826] ? put_swap_device+0x130/0x130 [ 60.688375][ T826] ? __pte_offset_map+0x1b0/0x230 [ 60.688407][ T826] ? pte_offset_map_rw_nolock+0xba/0x110 [ 60.688441][ T826] handle_mm_fault+0x1166/0x1b90 [ 60.688465][ T826] ? __kasan_check_write+0x18/0x20 [ 60.688504][ T826] ? __cfi_handle_mm_fault+0x10/0x10 [ 60.688529][ T826] ? follow_page_pte+0x2bd/0xb90 [ 60.688567][ T826] ? gup_must_unshare+0x1e0/0x1e0 [ 60.688598][ T826] ? vma_is_secretmem+0x11/0x50 [ 60.688631][ T826] __get_user_pages+0x1169/0x22d0 [ 60.688660][ T826] ? __kasan_check_write+0x18/0x20 [ 60.688698][ T826] ? populate_vma_page_range+0x230/0x230 [ 60.688726][ T826] ? __kernel_write_iter+0x6fd/0x8e0 [ 60.688749][ T826] get_dump_page+0x107/0x220 [ 60.688778][ T826] ? __cfi_get_dump_page+0x10/0x10 [ 60.688806][ T826] ? __asan_memset+0x39/0x50 [ 60.688827][ T826] dump_user_range+0x181/0xdf0 [ 60.688850][ T826] ? __cfi_dump_emit+0x10/0x10 [ 60.688877][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 60.688899][ T826] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 60.688933][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.688966][ T826] ? elf_core_dump+0x2368/0x3800 [ 60.688993][ T826] elf_core_dump+0x2ccc/0x3800 [ 60.689022][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 60.689056][ T826] ? dump_interrupted+0xf0/0xf0 [ 60.689089][ T826] ? 0xffffffffff600000 [ 60.689108][ T826] do_coredump+0x1bfa/0x2bd0 [ 60.689146][ T826] ? __cfi_do_coredump+0x10/0x10 [ 60.689178][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 60.689210][ T826] ? __kasan_slab_free+0x6a/0x80 [ 60.689235][ T826] ? kmem_cache_free+0x1c1/0x510 [ 60.689257][ T826] ? get_signal+0xa75/0x14f0 [ 60.689287][ T826] get_signal+0x11fd/0x14f0 [ 60.689318][ T826] arch_do_signal_or_restart+0x96/0x720 [ 60.689352][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.689390][ T826] irqentry_exit_to_user_mode+0x4e/0xb0 [ 60.689416][ T826] irqentry_exit+0x16/0x60 [ 60.689439][ T826] exc_page_fault+0x66/0xc0 [ 60.689461][ T826] asm_exc_page_fault+0x2b/0x30 [ 60.689483][ T826] RIP: 0033:0x7f54de38f6d1 [ 60.689501][ T826] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.689521][ T826] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 60.689543][ T826] RAX: 0000000000000000 RBX: 00007f54de5e6090 RCX: 00007f54de38f6c9 [ 60.689560][ T826] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000400 [ 60.689574][ T826] RBP: 00007f54de411f91 R08: 0000000000000000 R09: 0000000000000000 [ 60.689589][ T826] R10: 0000200000000040 R11: 0000000000000206 R12: 0000000000000000 [ 60.689604][ T826] R13: 00007f54de5e6128 R14: 00007f54de5e6090 R15: 00007ffff43e2c68 [ 60.689624][ T826] [ 61.186038][ T826] memory: usage 307052kB, limit 307200kB, failcnt 54954 [ 61.240287][ T36] audit: type=1326 audit(1762539070.250:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981b78f6c9 code=0x0 [ 61.284411][ T36] audit: type=1326 audit(1762539070.270:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz.3.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981b78f6c9 code=0x0 [ 61.336879][ T826] memory+swap: usage 431988kB, limit 9007199254740988kB, failcnt 0 [ 61.345057][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.352252][ T826] Memory cgroup stats for /syz1: [ 61.352401][ T826] cache 314109952 [ 61.361122][ T826] rss 286720 [ 61.364347][ T826] rss_huge 0 [ 61.367610][ T826] shmem 314101760 [ 61.371467][ T826] mapped_file 0 [ 61.375238][ T826] dirty 0 [ 61.378429][ T826] writeback 12288 [ 61.439561][ T826] workingset_refault_anon 57 [ 61.444389][ T1316] loop7: detected capacity change from 0 to 7 [ 61.445972][ T826] workingset_refault_file 12388 [ 61.455962][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.462395][ T1259] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 61.465144][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.466845][ T1259] rust_binder: Error while translating object. [ 61.482033][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.482893][ T826] swap 127799296 [ 61.488319][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.497414][ T826] swapcached 192512 [ 61.497425][ T826] pgpgin 246134 [ 61.497434][ T826] pgpgout 169848 [ 61.497443][ T826] pgfault 45917 [ 61.497450][ T826] pgmajfault 277 [ 61.502330][ T1316] loop7: unable to read partition table [ 61.548070][ T826] inactive_anon 38776832 [ 61.552536][ T1259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.552577][ T1259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 61.563174][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.563510][ T1316] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 61.596633][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.597536][ T826] active_anon 275267584 [ 61.605854][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.610090][ T826] inactive_file 0 [ 61.619076][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.621524][ T826] active_file 8192 [ 61.621535][ T826] unevictable 0 [ 61.630703][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.634492][ T826] hierarchical_memory_limit 314572800 [ 61.638878][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.645774][ T826] hierarchical_memsw_limit 9223372036854771712 [ 61.651202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.660673][ T826] total_cache 314109952 [ 61.660687][ T826] total_rss 286720 [ 61.667362][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.674673][ T826] total_rss_huge 0 [ 61.678814][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.682552][ T826] total_shmem 314101760 [ 61.682562][ T826] total_mapped_file 0 [ 61.692354][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.695461][ T826] total_dirty 0 [ 61.695473][ T826] total_writeback 12288 [ 61.695481][ T826] total_workingset_refault_anon 57 [ 61.703324][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.707489][ T826] total_workingset_refault_file 12388 [ 61.748955][ T826] total_swap 127799296 [ 61.753064][ T826] total_swapcached 192512 [ 61.758107][ T826] total_pgpgin 246134 [ 61.762119][ T826] total_pgpgout 169848 [ 61.767393][ T826] total_pgfault 45917 [ 61.771821][ T826] total_pgmajfault 277 [ 61.775928][ T826] total_inactive_anon 38776832 [ 61.780901][ T826] total_active_anon 275267584 [ 61.781490][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.785606][ T826] total_inactive_file 0 [ 61.785618][ T826] total_active_file 8192 [ 61.785626][ T826] total_unevictable 0 [ 61.785635][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 61.794808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.795987][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.799249][ T826] syz1 [ 61.803480][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.807500][ T826] ,mems_allowed=0,oom_memcg=/syz1,task_memcg= [ 61.815298][ T110] loop7: unable to read partition table [ 61.823241][ T1272] Bluetooth: hci0: command 0x1003 tx timeout [ 61.832740][ T532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.834919][ T826] /syz1 [ 61.873330][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.883218][ T826] ,task=syz.1.150,pid=816,uid=0 [ 61.885020][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.889530][ T826] Memory cgroup out of memory: Killed process 816 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53512kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 62.081141][ T1258] syz.1.290 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 62.137416][ T1258] CPU: 0 UID: 0 PID: 1258 Comm: syz.1.290 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 62.137455][ T1258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.137470][ T1258] Call Trace: [ 62.137477][ T1258] [ 62.137487][ T1258] __dump_stack+0x21/0x30 [ 62.137524][ T1258] dump_stack_lvl+0x10c/0x190 [ 62.137554][ T1258] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.137583][ T1258] ? ___ratelimit+0x3f7/0x5a0 [ 62.137617][ T1258] dump_stack+0x19/0x20 [ 62.137644][ T1258] dump_header+0xd7/0x490 [ 62.137669][ T1258] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 62.137698][ T1258] oom_kill_process+0x35d/0x640 [ 62.137726][ T1258] ? sched_clock_cpu+0x75/0x400 [ 62.137756][ T1258] out_of_memory+0x659/0xa80 [ 62.137790][ T1258] ? __cfi_out_of_memory+0x10/0x10 [ 62.137817][ T1258] ? mutex_lock_killable+0x92/0x1c0 [ 62.137840][ T1258] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.137864][ T1258] mem_cgroup_out_of_memory+0x279/0x350 [ 62.137886][ T1258] ? drain_obj_stock+0xed0/0xed0 [ 62.137909][ T1258] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 62.137936][ T1258] try_charge_memcg+0x8f7/0xde0 [ 62.137966][ T1258] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 62.137989][ T1258] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.138019][ T1258] ? __alloc_pages_noprof+0x31f/0x7b0 [ 62.138051][ T1258] __mem_cgroup_charge+0xf6/0x410 [ 62.138084][ T1258] ? filemap_get_entry+0x3fb/0x460 [ 62.138113][ T1258] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.138146][ T1258] filemap_add_folio+0x57/0x2d0 [ 62.138172][ T1258] __filemap_get_folio+0x5cb/0xaa0 [ 62.138202][ T1258] ? __cfi___filemap_get_folio+0x10/0x10 [ 62.138231][ T1258] ? block_dirty_folio+0x147/0x1b0 [ 62.138253][ T1258] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 62.138286][ T1258] filemap_fault+0xb41/0x16b0 [ 62.138318][ T1258] ? __cfi_filemap_fault+0x10/0x10 [ 62.138348][ T1258] ? __kasan_check_write+0x18/0x20 [ 62.138381][ T1258] ? folio_unlock+0x12f/0x1a0 [ 62.138407][ T1258] ? block_dirty_folio+0x147/0x1b0 [ 62.138429][ T1258] ? inode_to_bdi+0x6d/0x100 [ 62.138461][ T1258] ? fput+0x1a5/0x240 [ 62.138489][ T1258] do_pte_missing+0xfd8/0x4240 [ 62.138519][ T1258] ? cgroup_rstat_updated+0x132/0x7f0 [ 62.138550][ T1258] ? pte_marker_clear+0x1b0/0x1b0 [ 62.138577][ T1258] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 62.138609][ T1258] ? folio_put+0x90/0x90 [ 62.138631][ T1258] ? __kasan_check_write+0x18/0x20 [ 62.138662][ T1258] ? _raw_spin_lock+0x8c/0x120 [ 62.138690][ T1258] ? __pte_offset_map+0x1b0/0x230 [ 62.138721][ T1258] ? pte_offset_map_rw_nolock+0xba/0x110 [ 62.138755][ T1258] handle_mm_fault+0x1166/0x1b90 [ 62.138790][ T1258] ? __cfi_handle_mm_fault+0x10/0x10 [ 62.138813][ T1258] ? lock_vma_under_rcu+0x49d/0x540 [ 62.138838][ T1258] ? sched_clock_noinstr+0xd/0x30 [ 62.138864][ T1258] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 62.138895][ T1258] do_user_addr_fault+0x96c/0x1200 [ 62.138930][ T1258] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 62.138960][ T1258] exc_page_fault+0x59/0xc0 [ 62.138982][ T1258] asm_exc_page_fault+0x2b/0x30 [ 62.139005][ T1258] RIP: 0033:0x7f54de26137c [ 62.139024][ T1258] Code: 43 eb 00 01 48 8d 50 ff 48 89 15 f7 43 eb 00 88 48 ff 8b 2d de 43 eb 00 e8 81 7a ff ff 48 8b 05 ea 43 eb 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 da 43 eb 00 01 66 83 3d d6 [ 62.139045][ T1258] RSP: 002b:00007ffff43e2d10 EFLAGS: 00010206 [ 62.139066][ T1258] RAX: 0000001b2ea2421c RBX: 00007f54df115720 RCX: 0000000000000007 [ 62.139083][ T1258] RDX: 0000001b2ea2421c RSI: 0000000000000008 RDI: 00007f54df115720 [ 62.139099][ T1258] RBP: 0000000000000081 R08: 00007f54de5e6038 R09: 00007f54de5d2000 [ 62.139115][ T1258] R10: 00007f54dddff008 R11: 0000000000000007 R12: 0000000000000004 [ 62.139129][ T1258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.139147][ T1258] [ 62.139155][ T1258] memory: usage 292680kB, limit 307200kB, failcnt 55936 [ 62.533654][ T1258] memory+swap: usage 397104kB, limit 9007199254740988kB, failcnt 0 [ 62.540672][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 62.547950][ T532] Bluetooth: hci1: command 0x1003 tx timeout [ 62.559094][ T45] cdc_ether 3-1:1.0: skipping garbage [ 62.564758][ T45] cdc_ether 3-1:1.0: skipping garbage [ 62.574899][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 62.589221][ T1344] netlink: 1220 bytes leftover after parsing attributes in process `syz.3.318'. [ 62.609474][ T45] usb 3-1: USB disconnect, device number 22 [ 62.621085][ T1258] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.630997][ T1258] Memory cgroup stats for /syz1: [ 62.631156][ T1258] cache 278368256 [ 62.637986][ T1337] SELinux: security_context_str_to_sid () failed with errno=-22 [ 62.640067][ T1258] rss 299008 [ 62.653768][ T1258] rss_huge 0 [ 62.657019][ T1258] shmem 278360064 [ 62.662189][ T1258] mapped_file 0 [ 62.665764][ T1258] dirty 0 [ 62.668852][ T1258] writeback 0 [ 62.673942][ T1258] workingset_refault_anon 60 [ 62.678804][ T1258] workingset_refault_file 12390 [ 62.683717][ T1258] swap 127950848 [ 62.687274][ T1258] swapcached 45056 [ 62.696149][ T1258] pgpgin 246175 [ 62.699776][ T1258] pgpgout 178648 [ 62.703343][ T1258] pgfault 45931 [ 62.707329][ T1258] pgmajfault 281 [ 62.712267][ T1258] inactive_anon 139612160 [ 62.716634][ T1258] active_anon 137699328 [ 62.720882][ T1258] inactive_file 0 [ 62.724530][ T1258] active_file 8192 [ 62.728311][ T1258] unevictable 0 [ 62.731842][ T1258] hierarchical_memory_limit 314572800 [ 62.737227][ T1258] hierarchical_memsw_limit 9223372036854771712 [ 62.744551][ T1258] total_cache 278368256 [ 62.775431][ T1258] total_rss 299008 [ 62.795151][ T1258] total_rss_huge 0 [ 62.815334][ T1258] total_shmem 278360064 [ 62.827418][ T1258] total_mapped_file 0 [ 62.835532][ T1258] total_dirty 0 [ 62.860934][ T1258] total_writeback 0 [ 62.866781][ T1258] total_workingset_refault_anon 60 [ 62.924831][ T1258] total_workingset_refault_file 12390 [ 62.977447][ T1258] total_swap 127950848 [ 63.001939][ T1258] total_swapcached 45056 [ 63.022169][ T1258] total_pgpgin 246175 [ 63.032878][ T1368] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 63.033040][ T1368] rust_binder: Write failure EINVAL in pid:269 [ 63.041362][ T1258] total_pgpgout 178648 [ 63.082264][ T1258] total_pgfault 45931 [ 63.096471][ T1258] total_pgmajfault 281 [ 63.141812][ T1258] total_inactive_anon 139612160 [ 63.146719][ T1258] total_active_anon 137699328 [ 63.187371][ T1258] total_inactive_file 0 [ 63.191674][ T1258] total_active_file 8192 [ 63.207396][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 63.229993][ T1258] total_unevictable 0 [ 63.242835][ T1258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=793,uid=0 [ 63.260214][ T1258] Memory cgroup out of memory: Killed process 793 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53820kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 63.336851][ T812] syz.1.150 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 63.367386][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 63.371736][ T812] CPU: 1 UID: 0 PID: 812 Comm: syz.1.150 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 63.371777][ T812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.371795][ T812] Call Trace: [ 63.371804][ T812] [ 63.371815][ T812] __dump_stack+0x21/0x30 [ 63.371854][ T812] dump_stack_lvl+0x10c/0x190 [ 63.371889][ T812] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.371923][ T812] ? ___ratelimit+0x3f7/0x5a0 [ 63.371961][ T812] dump_stack+0x19/0x20 [ 63.371994][ T812] dump_header+0xd7/0x490 [ 63.372018][ T812] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 63.372052][ T812] oom_kill_process+0x35d/0x640 [ 63.372083][ T812] ? sched_clock_cpu+0x75/0x400 [ 63.372116][ T812] out_of_memory+0x659/0xa80 [ 63.372147][ T812] ? __cfi_out_of_memory+0x10/0x10 [ 63.372176][ T812] ? mutex_lock_killable+0x92/0x1c0 [ 63.372200][ T812] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.372227][ T812] mem_cgroup_out_of_memory+0x279/0x350 [ 63.372252][ T812] ? drain_obj_stock+0xed0/0xed0 [ 63.372279][ T812] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 63.372302][ T812] try_charge_memcg+0x8f7/0xde0 [ 63.372337][ T812] ? __cfi_try_charge_memcg+0x10/0x10 [ 63.372369][ T812] ? __alloc_pages_noprof+0x31f/0x7b0 [ 63.372405][ T812] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.372439][ T812] ? __folio_batch_add_and_move+0x2ab/0x370 [ 63.372472][ T812] __mem_cgroup_charge+0xf6/0x410 [ 63.372508][ T812] ? _raw_spin_lock+0x8c/0x120 [ 63.372538][ T812] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 63.372585][ T812] shmem_alloc_and_add_folio+0x86d/0x1050 [ 63.372616][ T812] ? put_swap_device+0x130/0x130 [ 63.372647][ T812] ? shmem_huge_global_enabled+0x2da/0x360 [ 63.372678][ T812] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 63.372706][ T812] ? __kasan_check_write+0x18/0x20 [ 63.372744][ T812] ? _raw_spin_lock+0x8c/0x120 [ 63.372780][ T812] shmem_get_folio_gfp+0x5f0/0x1380 [ 63.372812][ T812] ? shmem_get_folio+0xc0/0xc0 [ 63.372836][ T812] ? follow_page_pte+0xa5c/0xb90 [ 63.372870][ T812] ? inode_to_bdi+0x6d/0x100 [ 63.372906][ T812] shmem_write_begin+0xf4/0x270 [ 63.372935][ T812] generic_perform_write+0x330/0x960 [ 63.372974][ T812] ? __cfi_generic_perform_write+0x10/0x10 [ 63.373010][ T812] ? down_write+0xe9/0x2a0 [ 63.373037][ T812] ? file_update_time+0xa3/0x220 [ 63.373071][ T812] shmem_file_write_iter+0x105/0x130 [ 63.373103][ T812] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 63.373137][ T812] __kernel_write_iter+0x41a/0x8e0 [ 63.373161][ T812] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 63.373195][ T812] ? __cfi___kernel_write_iter+0x10/0x10 [ 63.373218][ T812] ? get_dump_page+0x160/0x220 [ 63.373249][ T812] ? __asan_memset+0x39/0x50 [ 63.373271][ T812] ? iov_iter_bvec+0xc0/0x180 [ 63.373302][ T812] dump_user_range+0xb06/0xdf0 [ 63.373327][ T812] ? __cfi_dump_emit+0x10/0x10 [ 63.373350][ T812] ? __cfi_dump_user_range+0x10/0x10 [ 63.373373][ T812] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 63.373411][ T812] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 63.373448][ T812] ? elf_core_dump+0x2368/0x3800 [ 63.373479][ T812] elf_core_dump+0x2ccc/0x3800 [ 63.373511][ T812] ? __cfi_elf_core_dump+0x10/0x10 [ 63.373556][ T812] ? dump_interrupted+0xf0/0xf0 [ 63.373594][ T812] ? 0xffffffffff600000 [ 63.373615][ T812] do_coredump+0x1bfa/0x2bd0 [ 63.373655][ T812] ? __cfi_do_coredump+0x10/0x10 [ 63.373692][ T812] ? asm_exc_page_fault+0x2b/0x30 [ 63.373727][ T812] ? __kasan_slab_free+0x6a/0x80 [ 63.373755][ T812] ? kmem_cache_free+0x1c1/0x510 [ 63.373780][ T812] ? get_signal+0xa75/0x14f0 [ 63.373812][ T812] get_signal+0x11fd/0x14f0 [ 63.373847][ T812] arch_do_signal_or_restart+0x96/0x720 [ 63.373886][ T812] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.373927][ T812] irqentry_exit_to_user_mode+0x4e/0xb0 [ 63.373955][ T812] irqentry_exit+0x16/0x60 [ 63.373980][ T812] exc_page_fault+0x66/0xc0 [ 63.374006][ T812] asm_exc_page_fault+0x2b/0x30 [ 63.374031][ T812] RIP: 0033:0x7f54de38f6d1 [ 63.374051][ T812] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 63.374074][ T812] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 63.374098][ T812] RAX: 0000000000000000 RBX: 00007f54de5e6090 RCX: 00007f54de38f6c9 [ 63.374116][ T812] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000400 [ 63.374133][ T812] RBP: 00007f54de411f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.374150][ T812] R10: 0000200000000040 R11: 0000000000000206 R12: 0000000000000000 [ 63.374169][ T812] R13: 00007f54de5e6128 R14: 00007f54de5e6090 R15: 00007ffff43e2c68 [ 63.374191][ T812] [ 63.383087][ T812] memory: usage 307100kB, limit 307200kB, failcnt 56947 [ 63.398892][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 63.463911][ T812] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0 [ 63.467402][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.488134][ T812] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.507388][ T9] usb 3-1: Product: syz [ 63.549246][ T812] Memory cgroup stats for [ 63.577542][ T9] usb 3-1: Manufacturer: syz [ 63.582354][ T812] /syz1 [ 63.587327][ T9] usb 3-1: SerialNumber: syz [ 63.593988][ T812] : [ 63.671163][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 63.674583][ T812] cache 311009280 [ 63.679255][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 63.698607][ T812] rss 290816 [ 63.914951][ T1379] incfs: Error accessing: ./file0. [ 63.934440][ T1367] incfs: Error accessing: ./file0. [ 63.947447][ T1367] incfs: mount failed -20 [ 63.947507][ T1379] incfs: mount failed -20 [ 63.970186][ T1382] __vm_enough_memory: pid: 1382, comm: syz.0.328, bytes: 18014402804453376 not enough memory for the allocation [ 63.982545][ T812] rss_huge 0 [ 64.009402][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 64.016050][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 64.027563][ T1385] syz.3.330(1385): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 64.029010][ T812] shmem 310018048 [ 64.048336][ T9] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 64.061995][ T1386] netlink: 393 bytes leftover after parsing attributes in process `syz.0.329'. [ 64.096169][ T1386] netlink: 393 bytes leftover after parsing attributes in process `syz.0.329'. [ 64.149330][ T812] mapped_file 782336 [ 64.153286][ T812] dirty 0 [ 64.156254][ T812] writeback 57344 [ 64.206062][ T36] audit: type=1400 audit(1762539073.210:348): avc: denied { mount } for pid=1397 comm="syz.2.335" name="/" dev="configfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.267415][ T36] audit: type=1400 audit(1762539073.210:349): avc: denied { search } for pid=1397 comm="syz.2.335" name="/" dev="configfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.277392][ T812] workingset_refault_anon 69 [ 64.297782][ T36] audit: type=1400 audit(1762539073.210:350): avc: denied { read } for pid=1397 comm="syz.2.335" name="/" dev="configfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.336860][ T36] audit: type=1400 audit(1762539073.210:351): avc: denied { open } for pid=1397 comm="syz.2.335" path="/" dev="configfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.344203][ T812] workingset_refault_file 14056 [ 64.436681][ T812] swap 127832064 [ 64.467993][ T1421] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 64.474926][ T812] swapcached 163840 [ 64.487190][ T812] pgpgin 258125 [ 64.493352][ T36] audit: type=1400 audit(1762539073.500:352): avc: denied { relabelto } for pid=1420 comm="syz.3.343" name="rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 64.496455][ T812] pgpgout 182600 [ 64.540124][ T36] audit: type=1400 audit(1762539073.530:353): avc: denied { associate } for pid=1420 comm="syz.3.343" name="rnullb0" dev="tmpfs" ino=336 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 64.644536][ T812] pgfault 49116 [ 64.667424][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 64.682832][ T812] pgmajfault 302 [ 64.696694][ T812] inactive_anon 199344128 [ 64.712535][ T812] active_anon 109752320 [ 64.721505][ T36] audit: type=1400 audit(1762539073.730:354): avc: denied { mounton } for pid=1431 comm="syz.1.345" path="/file0" dev="ramfs" ino=9927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 64.726530][ T812] inactive_file 0 [ 64.781396][ T812] active_file 950272 [ 64.800864][ T812] unevictable 0 [ 64.804768][ T812] hierarchical_memory_limit 314572800 [ 64.827368][ T812] hierarchical_memsw_limit 9223372036854771712 [ 64.837380][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 64.844039][ T9] usb 1-1: config 0 has no interfaces? [ 64.850483][ T9] usb 1-1: config 0 has no interfaces? [ 64.856904][ T9] usb 1-1: config 0 has no interfaces? [ 64.864585][ T9] usb 1-1: string descriptor 0 read error: -71 [ 64.872674][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 64.882955][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.891271][ T812] total_cache 311009280 [ 64.894326][ T1440] rust_binder: Write failure EINVAL in pid:128 [ 64.896387][ T9] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 64.914980][ T9] usb 1-1: no configuration chosen from 3 choices [ 64.920941][ T812] total_rss 290816 [ 64.925415][ T9] usb 1-1: USB disconnect, device number 10 [ 64.955189][ T812] total_rss_huge 0 [ 64.959854][ T812] total_shmem 310018048 [ 64.971270][ T812] total_mapped_file 782336 [ 64.975851][ T812] total_dirty 0 [ 64.979632][ T812] total_writeback 57344 [ 64.983875][ T812] total_workingset_refault_anon 69 [ 64.989635][ T812] total_workingset_refault_file 14056 [ 64.995087][ T812] total_swap 127832064 [ 65.003273][ T1443] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 65.003304][ T1443] rust_binder: Error while translating object. [ 65.015665][ T812] total_swapcached 163840 [ 65.026934][ T812] total_pgpgin 258125 [ 65.031979][ T1443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.032020][ T1443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 65.050767][ T812] total_pgpgout 182600 [ 65.075257][ T812] total_pgfault 49116 [ 65.084406][ T812] total_pgmajfault 302 [ 65.093158][ T812] total_inactive_anon 199344128 [ 65.105272][ T812] total_active_anon 109752320 [ 65.114638][ T812] total_inactive_file 0 [ 65.127672][ T812] total_active_file 950272 [ 65.141135][ T812] total_unevictable 0 [ 65.155172][ T812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.150,pid=828,uid=0 [ 65.202982][ T812] Memory cgroup out of memory: Killed process 828 (syz.1.150) total-vm:90296kB, anon-rss:1160kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 65.349780][ T36] audit: type=1400 audit(1762539074.360:355): avc: denied { append } for pid=1450 comm="syz.2.354" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.377545][ T1451] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.397680][ T1453] /dev/rnullb0: Can't open blockdev [ 65.408084][ T1453] /dev/rnullb0: Can't open blockdev [ 65.512548][ T1463] loop2: detected capacity change from 0 to 8388607 [ 65.553080][ T1466] tipc: Enabling of bearer rejected, already enabled [ 65.647297][ T1468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.647387][ T1468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 65.826218][ T1471] netlink: 84 bytes leftover after parsing attributes in process `syz.2.361'. [ 66.067492][ T1475] rust_binder: Got transaction with invalid offset. [ 66.067542][ T1475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.114339][ T1475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 66.400741][ T1477] rust_binder: Write failure EFAULT in pid:137 [ 67.067407][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 67.107888][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 67.107907][ T36] audit: type=1400 audit(1762539076.120:359): avc: denied { write } for pid=1501 comm="syz.1.373" name="vlan0" dev="proc" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.190197][ T36] audit: type=1400 audit(1762539076.200:360): avc: denied { read write } for pid=1499 comm="syz.3.372" name="rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 67.226592][ T36] audit: type=1400 audit(1762539076.200:361): avc: denied { open } for pid=1499 comm="syz.3.372" path="/dev/rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 67.259212][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 67.280371][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.290700][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.308582][ T65] usb 3-1: Product: syz [ 67.322996][ T65] usb 3-1: Manufacturer: syz [ 67.337513][ T65] usb 3-1: SerialNumber: syz [ 67.342511][ T36] audit: type=1400 audit(1762539076.350:362): avc: denied { setattr } for pid=1510 comm="syz.3.375" name="" dev="pipefs" ino=10316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 67.343523][ T1490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.596599][ T65] usb 3-1: USB disconnect, device number 24 [ 67.649017][ T1519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=1519 comm=syz.1.379 [ 67.927426][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 68.077442][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 68.083773][ T9] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 68.092034][ T9] usb 2-1: config 0 has no interface number 0 [ 68.098201][ T9] usb 2-1: config 0 interface 148 has no altsetting 0 [ 68.106643][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 68.115766][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.123910][ T9] usb 2-1: Product: syz [ 68.128306][ T9] usb 2-1: Manufacturer: syz [ 68.132922][ T9] usb 2-1: SerialNumber: syz [ 68.138270][ T9] usb 2-1: config 0 descriptor?? [ 68.144207][ T9] pl2303 2-1:0.148: required interrupt-in endpoint missing [ 68.206448][ T36] audit: type=1326 audit(1762539077.210:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1530 comm="syz.2.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40478f6c9 code=0x0 [ 68.345413][ T393] usb 2-1: USB disconnect, device number 13 [ 68.547463][ T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 68.677434][ T31] usb 3-1: device descriptor read/64, error -71 [ 68.738081][ T1538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=1538 comm=syz.0.386 [ 68.754625][ T36] audit: type=1400 audit(1762539077.760:364): avc: denied { setattr } for pid=1537 comm="syz.0.386" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 68.778507][ T1538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 68.892512][ T1549] rust_binder: Error while translating object. [ 68.892567][ T1549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 68.899205][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:306 [ 68.917402][ T31] usb 3-1: device descriptor read/64, error -71 [ 68.951199][ T1545] mmap: syz.1.389 (1545) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.982053][ T1556] /dev/rnullb0: Can't open blockdev [ 69.167487][ T31] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 69.197482][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 69.297454][ T31] usb 3-1: device descriptor read/64, error -71 [ 69.348696][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.358570][ T65] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.368479][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.383066][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 69.392325][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.400466][ T65] usb 1-1: Product: syz [ 69.404714][ T65] usb 1-1: Manufacturer: syz [ 69.409371][ T65] usb 1-1: SerialNumber: syz [ 69.416024][ T65] hub 1-1:1.0: bad descriptor, ignoring hub [ 69.422074][ T65] hub 1-1:1.0: probe with driver hub failed with error -5 [ 69.557415][ T31] usb 3-1: device descriptor read/64, error -71 [ 69.624756][ T65] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.667529][ T31] usb usb3-port1: attempt power cycle [ 69.819544][ T36] audit: type=1400 audit(1762539078.830:365): avc: denied { read write } for pid=1553 comm="syz.0.392" name="lp0" dev="devtmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 69.843073][ T36] audit: type=1400 audit(1762539078.830:366): avc: denied { open } for pid=1553 comm="syz.0.392" path="/dev/usb/lp0" dev="devtmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 70.007449][ T31] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 70.028473][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.081498][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 70.137523][ T1582] rust_binder: Write failure EFAULT in pid:163 [ 70.158534][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.182992][ T36] audit: type=1400 audit(1762539079.190:367): avc: denied { read } for pid=1585 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.209818][ T1589] tmpfs: Unknown parameter 'quota' [ 70.215882][ T1589] overlayfs: failed to clone upperpath [ 70.227438][ T1554] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 70.248212][ T36] audit: type=1400 audit(1762539079.260:368): avc: denied { map } for pid=1590 comm="syz.3.405" path="/dev/rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 70.278389][ T1598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 70.278914][ T1598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.288454][ T1598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 70.334097][ T1604] rust_binder: Write failure EFAULT in pid:171 [ 70.360199][ T1606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 70.366578][ T1606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:173 [ 70.399460][ T1554] usb 1-1: device firmware changed [ 70.403174][ T1611] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 70.411924][ T393] usb 1-1: USB disconnect, device number 11 [ 70.430674][ T31] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 70.440244][ T393] usblp0: removed [ 70.452542][ T1613] rust_binder: Error while translating object. [ 70.452580][ T1613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.458910][ T1613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 70.468155][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.497756][ T1615] overlayfs: missing 'lowerdir' [ 70.516898][ T1620] rust_binder: 187: no such ref 0 [ 70.522155][ T1620] rust_binder: 187: no such ref 0 [ 70.527579][ T1620] rust_binder: Read failure Err(EAGAIN) in pid:187 [ 70.577518][ T393] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 70.608585][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.717618][ T31] usb usb3-port1: unable to enumerate USB device [ 70.738679][ T393] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 70.746949][ T393] usb 1-1: config 0 has no interface number 0 [ 70.754570][ T393] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 70.763714][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.771756][ T393] usb 1-1: Product: syz [ 70.775943][ T393] usb 1-1: Manufacturer: syz [ 70.780622][ T393] usb 1-1: SerialNumber: syz [ 70.785789][ T393] usb 1-1: config 0 descriptor?? [ 70.787482][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 70.827925][ T1624] fuse: Bad value for 'fd' [ 70.834568][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 70.843501][ T1625] bridge_slave_1: left allmulticast mode [ 70.849301][ T1625] bridge_slave_1: left promiscuous mode [ 70.854967][ T1625] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.863179][ T1625] bridge_slave_0: left allmulticast mode [ 70.868971][ T1625] bridge_slave_0: left promiscuous mode [ 70.874693][ T1625] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.927547][ T9] usb 2-1: device descriptor read/64, error -71 [ 70.996291][ T393] asix 1-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.006652][ T393] asix 1-1:0.225: probe with driver asix failed with error -71 [ 71.017021][ T393] usb 1-1: USB disconnect, device number 12 [ 71.167511][ T9] usb 2-1: device descriptor read/64, error -71 [ 71.218752][ T1639] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 71.407511][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 71.537401][ T9] usb 2-1: device descriptor read/64, error -71 [ 71.767405][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 71.777577][ T9] usb 2-1: device descriptor read/64, error -71 [ 71.825101][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.832453][ T1664] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.839681][ T1664] bridge_slave_0: entered allmulticast mode [ 71.845982][ T1664] bridge_slave_0: entered promiscuous mode [ 71.852728][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.859859][ T1664] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.867029][ T1664] bridge_slave_1: entered allmulticast mode [ 71.873572][ T1664] bridge_slave_1: entered promiscuous mode [ 71.887808][ T9] usb usb2-port1: attempt power cycle [ 71.918590][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 71.926840][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.938903][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.949883][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.961273][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.974453][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.984547][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.994012][ T10] usb 1-1: config 0 descriptor?? [ 71.999346][ T1658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.033572][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.040827][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.051116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.058540][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.089606][ T1664] veth0_vlan: entered promiscuous mode [ 72.103268][ T1664] veth1_macvtap: entered promiscuous mode [ 72.126271][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 72.126291][ T36] audit: type=1400 audit(1762539081.130:374): avc: denied { mounton } for pid=1664 comm="syz-executor" path="/root/syzkaller.6N0WKQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.189989][ T1675] rust_binder: Got transaction with invalid offset. [ 72.190053][ T1675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.196880][ T1675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 72.207731][ T1677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.247440][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 72.268502][ T9] usb 2-1: device descriptor read/8, error -71 [ 72.398634][ T9] usb 2-1: device descriptor read/8, error -71 [ 72.408661][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 72.417411][ T10] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 72.426531][ T10] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.597519][ T561] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 72.637504][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 72.658559][ T9] usb 2-1: device descriptor read/8, error -71 [ 72.668465][ T1658] rust_binder: Write failure EFAULT in pid:313 [ 72.672398][ T36] audit: type=1400 audit(1762539081.680:375): avc: denied { map } for pid=1657 comm="syz.0.429" path="socket:[11602]" dev="sockfs" ino=11602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.673388][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.679605][ T36] audit: type=1400 audit(1762539081.680:376): avc: denied { read } for pid=1657 comm="syz.0.429" path="socket:[11602]" dev="sockfs" ino=11602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.703212][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.743523][ T393] usb 1-1: USB disconnect, device number 13 [ 72.747524][ T561] usb 3-1: Using ep0 maxpacket: 32 [ 72.756387][ T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.767566][ T561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.777954][ T561] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 72.787024][ T561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.796249][ T9] usb 2-1: device descriptor read/8, error -71 [ 72.802653][ T561] usb 3-1: config 0 descriptor?? [ 72.917530][ T9] usb usb2-port1: unable to enumerate USB device [ 73.215923][ T561] savu 0003:1E7D:2D5A.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 73.285895][ T36] audit: type=1400 audit(1762539082.290:377): avc: denied { setopt } for pid=1689 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.470711][ T561] usb 3-1: USB disconnect, device number 29 [ 73.515298][ T36] audit: type=1400 audit(1762539082.520:378): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.620880][ T1706] /dev/rnullb0: Can't open blockdev [ 73.686901][ T1716] __vm_enough_memory: pid: 1716, comm: syz.1.445, bytes: 18014402804453376 not enough memory for the allocation [ 73.784268][ T1725] rust_binder: 342: no such ref 3 [ 73.789399][ T1725] rust_binder: inc_ref_done called when no active inc_refs [ 73.789416][ T1725] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 73.803833][ T1725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:342 [ 73.951727][ T1740] binder: Unknown parameter '@' [ 73.980556][ T1745] rust_binder: 209: no such ref 3 [ 73.985636][ T1745] rust_binder: 209: no such ref 1 [ 73.990940][ T1745] rust_binder: Write failure EFAULT in pid:209 [ 74.004404][ T36] audit: type=1400 audit(1762539083.010:379): avc: denied { setcheckreqprot } for pid=1746 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.040716][ T36] audit: type=1400 audit(1762539083.050:380): avc: denied { getopt } for pid=1748 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.041603][ T1749] input: syz1 as /devices/virtual/input/input12 [ 74.111471][ T1754] TCP: TCP_TX_DELAY enabled [ 74.157479][ T333] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 74.309332][ T333] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.319564][ T333] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.329363][ T333] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.338801][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.347016][ T333] usb 1-1: SerialNumber: syz [ 74.547445][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 74.557889][ T333] usb 1-1: 0:2 : does not exist [ 74.562860][ T333] usb 1-1: unit 5: unexpected type 0x0d [ 74.570259][ T333] usb 1-1: USB disconnect, device number 14 [ 74.578847][ T823] udevd[823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.697575][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 74.704728][ T31] usb 3-1: config 128 has an invalid interface number: 206 but max is 2 [ 74.713326][ T31] usb 3-1: config 128 has an invalid interface number: 105 but max is 2 [ 74.721879][ T31] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 74.730808][ T31] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 74.739936][ T31] usb 3-1: config 128 has an invalid interface number: 134 but max is 2 [ 74.748487][ T31] usb 3-1: config 128 has no interface number 0 [ 74.754771][ T31] usb 3-1: config 128 has no interface number 1 [ 74.761429][ T31] usb 3-1: config 128 has no interface number 2 [ 74.767777][ T31] usb 3-1: config 128 interface 206 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 74.779339][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an endpoint descriptor with address 0x3A, changing to 0xA [ 74.791216][ T31] usb 3-1: config 128 interface 105 altsetting 13 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 74.802388][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.813801][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.824979][ T31] usb 3-1: config 128 interface 105 altsetting 13 has a duplicate endpoint with address 0x8A, skipping [ 74.836192][ T31] usb 3-1: config 128 interface 105 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 74.847210][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.858431][ T31] usb 3-1: config 128 interface 105 altsetting 13 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 74.869622][ T31] usb 3-1: config 128 interface 105 altsetting 13 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 74.881083][ T31] usb 3-1: config 128 interface 105 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 74.894390][ T1765] binder: Bad value for 'max' [ 74.895224][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.911000][ T31] usb 3-1: config 128 interface 105 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 74.923020][ T36] audit: type=1400 audit(1762539083.930:381): avc: denied { read write } for pid=1766 comm="syz.1.463" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.928430][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.957903][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 74.963135][ T36] audit: type=1400 audit(1762539083.930:382): avc: denied { open } for pid=1766 comm="syz.1.463" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.982301][ T31] usb 3-1: config 128 interface 105 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 75.005288][ T36] audit: type=1400 audit(1762539083.980:383): avc: denied { write } for pid=1768 comm="syz.1.464" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.011425][ T31] usb 3-1: config 128 interface 105 altsetting 13 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 75.045062][ T31] usb 3-1: config 128 interface 134 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 75.056219][ T31] usb 3-1: config 128 interface 134 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 75.067593][ T31] usb 3-1: config 128 interface 206 has no altsetting 0 [ 75.074584][ T31] usb 3-1: config 128 interface 105 has no altsetting 0 [ 75.083641][ T31] usb 3-1: Dual-Role OTG device on HNP port [ 75.089993][ T31] usb 3-1: New USB device found, idVendor=0df6, idProduct=0028, bcdDevice=fc.ba [ 75.099489][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.107675][ T31] usb 3-1: Product: syz [ 75.112002][ T31] usb 3-1: Manufacturer: syz [ 75.116930][ T31] usb 3-1: SerialNumber: syz [ 75.332170][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.341495][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.359348][ T31] usb 3-1: USB disconnect, device number 30 [ 75.407425][ T393] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 75.487192][ T1791] tmpfs: Bad value for 'huge' [ 75.558700][ T393] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 75.567091][ T393] usb 1-1: config 0 has no interface number 0 [ 75.573362][ T393] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 75.584434][ T393] usb 1-1: config 0 interface 214 has no altsetting 0 [ 75.592896][ T393] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 75.602127][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.610291][ T393] usb 1-1: Product: syz [ 75.614508][ T393] usb 1-1: Manufacturer: syz [ 75.619187][ T393] usb 1-1: SerialNumber: syz [ 75.624669][ T393] usb 1-1: config 0 descriptor?? [ 75.630058][ T1776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.838906][ T1776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.935330][ T1802] /dev/rnullb0: Can't open blockdev [ 76.010238][ T1809] netlink: 'syz.1.475': attribute type 32 has an invalid length. [ 76.068885][ T1817] rust_binder: Write failure EFAULT in pid:26 [ 76.151693][ T1826] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 76.228797][ T1836] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 76.843184][ T1861] binder: Unknown parameter 'ea0000000004000' [ 76.967845][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 76.979598][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 76.990902][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 77.529989][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.604097][ T1776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.613481][ T1776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.622391][ T1776] rust_binder: Write failure EFAULT in pid:357 [ 77.623434][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 77.647737][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 77.659478][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 77.679075][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 77.691291][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 77.704591][ T1889] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 77.704618][ T1889] rust_binder: Error while translating object. [ 77.713469][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 77.731836][ T1889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.731872][ T1889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 77.742283][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 77.762895][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 77.774203][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 77.785509][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 77.796932][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 77.809952][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 77.822396][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 77.833658][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 77.857638][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 77.868976][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 77.880210][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 77.891587][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 77.903445][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 77.914809][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 77.927872][ T393] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.941637][ T393] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, c6:93:1c:4f:65:16 [ 77.959567][ T393] usb 1-1: USB disconnect, device number 15 [ 77.966209][ T393] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 77.980388][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 77.980406][ T36] audit: type=1400 audit(1762539086.980:393): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 78.077426][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 78.149596][ T36] audit: type=1400 audit(1762539087.160:394): avc: denied { read } for pid=1929 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.169178][ T36] audit: type=1400 audit(1762539087.160:395): avc: denied { ioctl } for pid=1929 comm="syz.0.513" path="socket:[12415]" dev="sockfs" ino=12415 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.195952][ T1935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 78.228723][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 78.252083][ T9] usb 3-1: config 0 has no interface number 0 [ 78.258507][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 78.266838][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 78.278401][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.294881][ T9] usb 3-1: Product: syz [ 78.307404][ T9] usb 3-1: Manufacturer: syz [ 78.312063][ T9] usb 3-1: SerialNumber: syz [ 78.318246][ T9] usb 3-1: config 0 descriptor?? [ 78.607413][ T65] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 78.758426][ T65] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.766565][ T65] usb 1-1: config 0 has no interface number 0 [ 78.772769][ T65] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.783804][ T65] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.793621][ T65] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 78.802746][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.811440][ T65] usb 1-1: config 0 descriptor?? [ 79.075725][ T1954] overlay: Bad value for 'redirect_dir' [ 79.081796][ T1953] overlayfs: failed to clone lowerpath [ 79.087631][ T1954] overlayfs: failed to clone lowerpath [ 79.246359][ T65] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000B/input/input13 [ 79.289999][ T36] audit: type=1400 audit(1762539088.300:396): avc: denied { setattr } for pid=1967 comm="syz.3.522" name="CAN_RAW" dev="sockfs" ino=12042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.312963][ T36] audit: type=1400 audit(1762539088.300:397): avc: denied { create } for pid=1967 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 79.342577][ T65] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 79.422426][ T65] usb 1-1: USB disconnect, device number 16 [ 79.577609][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.577653][ T532] Bluetooth: hci0: command 0x1003 tx timeout [ 79.897719][ T1977] overlayfs: failed to clone upperpath [ 79.904729][ T1977] 9pnet_virtio: no channels available for device [ 79.914999][ T1977] netlink: 'syz.3.526': attribute type 16 has an invalid length. [ 79.922880][ T1977] netlink: 'syz.3.526': attribute type 3 has an invalid length. [ 79.930596][ T1977] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.526'. [ 80.132199][ T1998] rust_binder: Write failure EFAULT in pid:254 [ 80.347692][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 80.364636][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 80.367428][ T31] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 80.374460][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 80.390690][ T65] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 80.399975][ T9] usb 3-1: USB disconnect, device number 31 [ 80.513896][ T2003] rust_binder: 2002 RLIMIT_NICE not set [ 80.513943][ T2003] rust_binder: 56: no such ref 0 [ 80.539712][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 80.548472][ T31] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.558344][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 80.566616][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 80.567418][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 80.576097][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.586769][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.591169][ T31] usb 1-1: Product: syz [ 80.591193][ T31] usb 1-1: Manufacturer: syz [ 80.611230][ T31] usb 1-1: SerialNumber: syz [ 80.623438][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.633370][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 80.642821][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.652979][ T65] usb 2-1: config 0 descriptor?? [ 80.825896][ T36] audit: type=1400 audit(1762539089.830:398): avc: denied { execute } for pid=1988 comm="syz.0.530" name="file0" dev="ramfs" ino=12696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 80.847928][ T36] audit: type=1400 audit(1762539089.830:399): avc: denied { execute_no_trans } for pid=1988 comm="syz.0.530" path="/file0" dev="ramfs" ino=12696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 80.917402][ T393] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 81.068545][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 81.079832][ T393] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 81.083317][ T65] savu 0003:1E7D:2D5A.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 81.089278][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.113712][ T393] usb 3-1: config 0 descriptor?? [ 81.119599][ T2007] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.380064][ T333] usb 2-1: USB disconnect, device number 18 [ 81.531627][ T393] hid-generic 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 81.780717][ T561] usb 3-1: USB disconnect, device number 32 [ 81.904461][ T2031] cgroup: none used incorrectly [ 81.909542][ T2032] cgroup: none used incorrectly [ 82.147432][ T65] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 82.199866][ T2040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=2040 comm=syz.3.547 [ 82.214712][ T2040] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 82.238817][ T2042] fuse: Unknown parameter 'gM' [ 82.307429][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 82.314877][ T65] usb 2-1: config 4 has an invalid interface number: 230 but max is 1 [ 82.323194][ T65] usb 2-1: config 4 has an invalid interface number: 200 but max is 1 [ 82.331440][ T65] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 82.340611][ T65] usb 2-1: config 4 has no interface number 0 [ 82.347015][ T65] usb 2-1: config 4 has no interface number 1 [ 82.353393][ T65] usb 2-1: config 4 interface 200 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 82.363597][ T65] usb 2-1: config 4 interface 200 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 82.374935][ T65] usb 2-1: config 4 interface 200 altsetting 5 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 82.388019][ T65] usb 2-1: config 4 interface 200 altsetting 5 has a duplicate endpoint with address 0x89, skipping [ 82.398891][ T65] usb 2-1: config 4 interface 200 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.412086][ T65] usb 2-1: config 4 interface 230 has no altsetting 0 [ 82.418932][ T65] usb 2-1: config 4 interface 200 has no altsetting 0 [ 82.427408][ T65] usb 2-1: New USB device found, idVendor=04ca, idProduct=300f, bcdDevice=36.be [ 82.436584][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.444670][ T65] usb 2-1: Product: syz [ 82.448920][ T65] usb 2-1: Manufacturer: syz [ 82.453981][ T65] usb 2-1: SerialNumber: syz [ 82.537624][ T333] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 82.687423][ T333] usb 3-1: Using ep0 maxpacket: 8 [ 82.693976][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.704964][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.717928][ T333] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 82.727278][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.736172][ T333] usb 3-1: config 0 descriptor?? [ 82.822532][ T2052] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 82.831242][ T2052] 9pnet_fd: Insufficient options for proto=fd [ 83.045349][ T31] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 83.065648][ T31] usb 1-1: USB disconnect, device number 17 [ 83.088557][ T2056] netlink: 328 bytes leftover after parsing attributes in process `syz.0.554'. [ 83.147120][ T333] hid-rmi 0003:06CB:81A7.000E: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 83.194317][ T65] usb 2-1: USB disconnect, device number 19 [ 83.478088][ T65] usb 3-1: USB disconnect, device number 33 [ 83.492025][ T36] audit: type=1400 audit(1762539092.500:400): avc: denied { watch_reads } for pid=2067 comm="syz.3.559" path="/219" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.503546][ T2068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 83.523454][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 83.667514][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 83.688769][ T31] usb 1-1: config 127 has an invalid interface number: 54 but max is 0 [ 83.697139][ T31] usb 1-1: config 127 has no interface number 0 [ 83.703525][ T31] usb 1-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 83.713152][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.818902][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.827183][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 83.835731][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.845994][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.854921][ T9] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.867847][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 83.876587][ T9] usb 2-1: string descriptor 0 read error: -22 [ 83.882869][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.891963][ T9] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 83.924580][ T31] usb 1-1: string descriptor 0 read error: -71 [ 83.931470][ T31] usb 1-1: Found UVC 0.00 device (1b3f:2002) [ 83.938858][ T31] usb 1-1: No valid video chain found. [ 83.945506][ T31] usb 1-1: USB disconnect, device number 18 [ 83.999393][ T2080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.999425][ T2080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 84.102112][ T2066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.120000][ T2066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.128379][ T2066] rust_binder: Error while translating object. [ 84.128424][ T2066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.134642][ T2066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 84.155546][ T2093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.156139][ T2066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.171256][ T2066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.184629][ T45] usb 2-1: USB disconnect, device number 20 [ 84.372597][ T2102] fuse: Bad value for 'fd' [ 84.430178][ T36] audit: type=1400 audit(1762539093.440:401): avc: denied { lock } for pid=2101 comm="syz.1.569" path="socket:[13667]" dev="sockfs" ino=13667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 84.535323][ T36] audit: type=1400 audit(1762539093.540:402): avc: denied { mounton } for pid=2118 comm="syz.1.576" path="/93/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 84.595140][ T2123] netlink: 'syz.0.578': attribute type 2 has an invalid length. [ 84.595622][ T2124] fuse: Unknown parameter 'ff' [ 84.608088][ T2125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 84.612771][ T2123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 84.617836][ T2123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:379 [ 84.647269][ T2128] rust_binder: inc_ref_done called when no active inc_refs [ 84.887409][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 84.935407][ T36] audit: type=1400 audit(1762539093.940:403): avc: denied { setopt } for pid=2132 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.939183][ T2133] overlay: ./file0 is not a directory [ 84.963678][ T36] audit: type=1400 audit(1762539093.970:404): avc: denied { map } for pid=2132 comm="syz.2.580" path="socket:[13179]" dev="sockfs" ino=13179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.986789][ T36] audit: type=1400 audit(1762539093.970:405): avc: denied { accept } for pid=2132 comm="syz.2.580" path="socket:[13179]" dev="sockfs" ino=13179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 85.018767][ T36] audit: type=1400 audit(1762539094.030:406): avc: denied { read } for pid=2136 comm="syz.2.582" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.049984][ T36] audit: type=1400 audit(1762539094.060:407): avc: denied { setopt } for pid=2138 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.071383][ T45] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.079981][ T45] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 85.089114][ T45] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.100386][ T45] usb 2-1: config 220 has no interface number 2 [ 85.106948][ T45] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 85.120640][ T45] usb 2-1: config 220 interface 0 has no altsetting 0 [ 85.127509][ T45] usb 2-1: config 220 interface 76 has no altsetting 0 [ 85.134611][ T45] usb 2-1: config 220 interface 1 has no altsetting 0 [ 85.143085][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.152546][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.160618][ T45] usb 2-1: Product: syz [ 85.164871][ T45] usb 2-1: Manufacturer: syz [ 85.169539][ T45] usb 2-1: SerialNumber: syz [ 85.211391][ T2146] rust_binder: Write failure EFAULT in pid:87 [ 85.387474][ T45] usb 2-1: selecting invalid altsetting 0 [ 85.399840][ T45] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 85.404038][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 85.406318][ T45] usb 2-1: No valid video chain found. [ 85.410048][ T45] usb 2-1: USB disconnect, device number 21 [ 85.445038][ T2166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.445079][ T2166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 85.517257][ T2174] rust_binder: 392: no such ref 6 [ 85.532557][ T2174] rust_binder: 392: no such ref 3 [ 85.543185][ T2174] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 85.807425][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 85.857449][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 85.937409][ T9] usb 1-1: device descriptor read/64, error -71 [ 85.949480][ T36] audit: type=1400 audit(1762539094.960:408): avc: denied { unmount } for pid=1664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.008539][ T45] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.020756][ T45] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.031165][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.039535][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 86.049048][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.056886][ T2226] bridge0: entered allmulticast mode [ 86.064298][ T45] usb 2-1: config 0 descriptor?? [ 86.177805][ T9] usb 1-1: device descriptor read/64, error -71 [ 86.327467][ T65] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 86.417443][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 86.457401][ T65] usb 3-1: device descriptor read/64, error -71 [ 86.547472][ T9] usb 1-1: device descriptor read/64, error -71 [ 86.680177][ T2178] rust_binder: Write failure EFAULT in pid:306 [ 86.685016][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 86.697210][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.698357][ T65] usb 3-1: device descriptor read/64, error -71 [ 86.707643][ T45] usb 2-1: USB disconnect, device number 22 [ 86.787440][ T9] usb 1-1: device descriptor read/64, error -71 [ 86.897472][ T9] usb usb1-port1: attempt power cycle [ 86.947437][ T65] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 87.077476][ T65] usb 3-1: device descriptor read/64, error -71 [ 87.237487][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 87.243101][ T2249] binder: Unknown parameter 'context[7' [ 87.260939][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.317404][ T65] usb 3-1: device descriptor read/64, error -71 [ 87.398396][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.427522][ T65] usb usb3-port1: attempt power cycle [ 87.647385][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 87.678402][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.790709][ T65] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 87.808445][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.818432][ T65] usb 3-1: device descriptor read/8, error -71 [ 87.917546][ T9] usb usb1-port1: unable to enumerate USB device [ 87.958472][ T65] usb 3-1: device descriptor read/8, error -71 [ 88.035443][ T2317] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 88.208488][ T65] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 88.241821][ T65] usb 3-1: device descriptor read/8, error -71 [ 88.315210][ T2330] rust_binder: Error while translating object. [ 88.315267][ T2330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.323758][ T2327] 9pnet_fd: Insufficient options for proto=fd [ 88.357440][ T2330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 88.388465][ T65] usb 3-1: device descriptor read/8, error -71 [ 88.517516][ T65] usb usb3-port1: unable to enumerate USB device [ 88.558992][ T2343] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.598931][ T2346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.621372][ T36] audit: type=1400 audit(1762539097.630:409): avc: denied { ioctl } for pid=2348 comm="syz.1.637" path="socket:[14516]" dev="sockfs" ino=14516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.652837][ T2349] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.652864][ T2349] rust_binder: Read failure Err(EFAULT) in pid:343 [ 88.977408][ T65] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 89.000797][ T2368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.642'. [ 89.147439][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 89.154927][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.171026][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.180674][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.192246][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.216891][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.226979][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.240263][ T2381] rust_binder: 100: no such ref 0 [ 89.245329][ T2381] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 89.252497][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.267373][ T2381] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 89.274545][ T2381] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 89.281724][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.290657][ T65] usb 1-1: config 0 descriptor?? [ 89.295733][ T2381] rust_binder: 100: no such ref 0 [ 89.388623][ T36] audit: type=1400 audit(1762539098.400:410): avc: denied { write } for pid=2384 comm="syz.1.647" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.427387][ T36] audit: type=1400 audit(1762539098.420:411): avc: denied { remove_name } for pid=2384 comm="syz.1.647" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.457437][ T36] audit: type=1400 audit(1762539098.420:412): avc: denied { unlink } for pid=2384 comm="syz.1.647" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.502047][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.518695][ T65] usb 1-1: USB disconnect, device number 23 [ 89.527794][ T65] usblp0: removed [ 89.547445][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 89.698470][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.717387][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.743909][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.754069][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.767420][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.783819][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.797389][ T10] usb 3-1: config 0 descriptor?? [ 89.855582][ T2423] tipc: Started in network mode [ 89.860600][ T2423] tipc: Node identity ac14140f, cluster identity 4711 [ 89.868702][ T2423] tipc: New replicast peer: 255.255.255.255 [ 89.874976][ T2423] tipc: Enabled bearer , priority 10 [ 89.947407][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 90.107516][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 90.113918][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.122462][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.131364][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.140474][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.150302][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.160086][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.173248][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.182371][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.191318][ T31] usb 1-1: config 0 descriptor?? [ 90.206129][ T2381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.297409][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 90.352488][ T36] audit: type=1400 audit(1762539099.360:413): avc: denied { accept } for pid=2432 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.377443][ T36] audit: type=1400 audit(1762539099.370:414): avc: denied { ioctl } for pid=2432 comm="syz.3.662" path="socket:[14733]" dev="sockfs" ino=14733 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.385350][ T2435] netlink: 'syz.3.663': attribute type 11 has an invalid length. [ 90.415372][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 90.421527][ T2351] netlink: 72 bytes leftover after parsing attributes in process `syz.0.638'. [ 90.421662][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 90.430680][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.440829][ T10] usb 3-1: USB disconnect, device number 38 [ 90.462170][ T65] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.474787][ T65] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 90.481062][ T31] usb 1-1: USB disconnect, device number 24 [ 90.499039][ T65] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.500139][ T31] usblp0: removed [ 90.513488][ T65] usb 2-1: config 220 has no interface number 2 [ 90.521509][ T65] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.534971][ T65] usb 2-1: config 220 interface 0 has no altsetting 0 [ 90.542890][ T65] usb 2-1: config 220 interface 76 has no altsetting 0 [ 90.550037][ T65] usb 2-1: config 220 interface 1 has no altsetting 0 [ 90.558353][ T65] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.567607][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.575602][ T65] usb 2-1: Product: syz [ 90.579831][ T65] usb 2-1: Manufacturer: syz [ 90.584440][ T65] usb 2-1: SerialNumber: syz [ 90.764862][ T2448] 9pnet_fd: Insufficient options for proto=fd [ 90.817434][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 90.860768][ T65] usb 2-1: selecting invalid altsetting 0 [ 90.866704][ T65] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 90.873190][ T65] usb 2-1: No valid video chain found. [ 90.881311][ T65] usb 2-1: USB disconnect, device number 23 [ 90.947458][ T31] usb 1-1: device descriptor read/64, error -71 [ 90.987449][ T10] tipc: Node number set to 2886997007 [ 91.187432][ T31] usb 1-1: device descriptor read/64, error -71 [ 91.399577][ T2467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 91.427485][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 91.567490][ T31] usb 1-1: device descriptor read/64, error -71 [ 91.777407][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 91.807486][ T31] usb 1-1: device descriptor read/64, error -71 [ 91.917536][ T31] usb usb1-port1: attempt power cycle [ 91.937630][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 91.944818][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.953418][ T10] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 91.962034][ T10] usb 2-1: config 0 has no interface number 0 [ 91.968253][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 82, changing to 10 [ 91.979974][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 25188, setting to 1024 [ 91.991680][ T10] usb 2-1: config 0 interface 88 has no altsetting 0 [ 92.002909][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 92.012304][ T10] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 92.021157][ T10] usb 2-1: Product: syz [ 92.025446][ T10] usb 2-1: Manufacturer: ࠚ [ 92.031203][ T10] usb 2-1: config 0 descriptor?? [ 92.257530][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 92.263192][ T2469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.673'. [ 92.283102][ T31] usb 1-1: device descriptor read/8, error -71 [ 92.418459][ T31] usb 1-1: device descriptor read/8, error -71 [ 92.667413][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 92.688393][ T31] usb 1-1: device descriptor read/8, error -71 [ 92.818432][ T31] usb 1-1: device descriptor read/8, error -71 [ 92.945306][ T31] usb usb1-port1: unable to enumerate USB device [ 92.982915][ T2483] 9pnet: p9_errstr2errno: server reported unknown error [ 94.039615][ T2510] rust_binder: Write failure EFAULT in pid:115 [ 94.039745][ T2520] rust_binder: Write failure EFAULT in pid:115 [ 94.108142][ T2523] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 94.132186][ T2523] rust_binder: Write failure EINVAL in pid:119 [ 94.166662][ T2529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 94.219161][ T2535] loop7: detected capacity change from 0 to 7 [ 94.235967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.245232][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.257363][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.266575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.275413][ T2535] loop7: unable to read partition table [ 94.286966][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.296208][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.304816][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.314083][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.323072][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.332283][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.340320][ T2535] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 94.355003][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.364213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.372412][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.381653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 94.577386][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 94.724486][ T10] input: ࠚ syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input15 [ 94.737380][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 94.749656][ T10] usb 2-1: USB disconnect, device number 24 [ 94.752863][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.772290][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.777107][ T823] udevd[823]: Error opening device "/dev/input/event3": No such file or directory [ 94.791575][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.803724][ T823] udevd[823]: Unable to EVIOCGABS device "/dev/input/event3" [ 94.812842][ T31] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 94.827595][ T823] udevd[823]: Unable to EVIOCGABS device "/dev/input/event3" [ 94.833561][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.862546][ T31] usb 3-1: config 0 descriptor?? [ 94.960539][ T36] audit: type=1326 audit(1762539103.970:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2550 comm="syz.3.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981b78f6c9 code=0x0 [ 95.177417][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 95.275783][ T31] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 1/5 [ 95.284691][ T31] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 95.293005][ T31] hid-thrustmaster 0003:044F:B65D.000F: probe with driver hid-thrustmaster failed with error -22 [ 95.328699][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.339055][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.348798][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.358079][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.366125][ T10] usb 2-1: SerialNumber: syz [ 95.478662][ T31] usb 3-1: USB disconnect, device number 39 [ 95.514247][ T2556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.515239][ T2556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:431 [ 95.541667][ T2558] overlay: ./file0 is not a directory [ 95.579209][ T10] usb 2-1: 0:2 : does not exist [ 95.584264][ T10] usb 2-1: unit 5: unexpected type 0x0e [ 95.603298][ T10] usb 2-1: USB disconnect, device number 25 [ 95.617551][ T823] udevd[823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.890906][ T2566] netlink: 'syz.3.700': attribute type 29 has an invalid length. [ 95.900305][ T2572] rust_binder: 2571 RLIMIT_NICE not set [ 95.900379][ T2572] rust_binder: 443: no such ref 1 [ 95.930329][ T36] audit: type=1400 audit(1762539104.940:416): avc: denied { read } for pid=2573 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.057130][ T2581] /dev/rnullb0: Can't open blockdev [ 96.074159][ T36] audit: type=1400 audit(1762539105.080:417): avc: denied { shutdown } for pid=2584 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.197419][ T558] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 96.311683][ T36] audit: type=1400 audit(1762539105.320:418): avc: denied { execute } for pid=2592 comm="syz.1.708" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.347417][ T558] usb 1-1: Using ep0 maxpacket: 16 [ 96.354213][ T558] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.365448][ T558] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.372241][ T558] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 96.381434][ T558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.390192][ T558] usb 1-1: config 0 descriptor?? [ 96.457396][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 96.498344][ T36] audit: type=1400 audit(1762539105.510:419): avc: denied { append } for pid=2597 comm="syz.3.710" name="rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 96.601344][ T558] usbhid 1-1:0.0: can't add hid device: -71 [ 96.609478][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 96.615323][ T558] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 96.627959][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.639756][ T558] usb 1-1: USB disconnect, device number 29 [ 96.647494][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.658006][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 96.668254][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.677041][ T10] usb 3-1: config 0 descriptor?? [ 97.085540][ T10] wacom 0003:056A:00E3.0010: unknown main item tag 0x0 [ 97.093599][ T10] wacom 0003:056A:00E3.0010: unknown main item tag 0x0 [ 97.109064][ T10] wacom 0003:056A:00E3.0010: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0 [ 97.121409][ T36] audit: type=1400 audit(1762539106.130:420): avc: denied { read } for pid=2620 comm="syz.1.718" path="socket:[15640]" dev="sockfs" ino=15640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.240486][ T2630] rust_binder: 453: no such ref 3 [ 97.245611][ T2630] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 97.252950][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:453 [ 97.286551][ T2591] No source specified [ 97.295781][ T2636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.304048][ T2591] rust_binder: Error in use_page_slow: ESRCH [ 97.312827][ T2636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:459 [ 97.313000][ T2591] rust_binder: use_range failure ESRCH [ 97.329403][ T2591] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 97.334920][ T2591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.342682][ T2591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:143 [ 97.354203][ T333] usb 3-1: USB disconnect, device number 40 [ 97.413507][ T2645] binder: Bad value for 'max' [ 97.418807][ T2645] loop7: detected capacity change from 0 to 7 [ 97.425494][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.434735][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.443063][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.452438][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.460357][ T2645] loop7: unable to read partition table [ 97.466170][ T2645] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 97.467818][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.489269][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.536425][ T36] audit: type=1400 audit(1762539106.540:421): avc: denied { mounton } for pid=2651 comm="syz.3.727" path="/bus" dev="ramfs" ino=15730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 97.558664][ T2652] Invalid ELF header magic: != ELF [ 97.572724][ T36] audit: type=1400 audit(1762539106.570:422): avc: denied { module_load } for pid=2651 comm="syz.3.727" path="/bus" dev="ramfs" ino=15730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 97.599803][ T2658] rust_binder: Write failure EFAULT in pid:472 [ 97.601105][ T36] audit: type=1400 audit(1762539106.610:423): avc: denied { accept } for pid=2656 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.651247][ T2667] overlayfs: overlapping lowerdir path [ 97.819253][ T2681] netlink: 68 bytes leftover after parsing attributes in process `syz.0.735'. [ 97.958885][ T2686] rust_binder: Write failure EINVAL in pid:414 [ 97.973618][ T2691] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.021891][ T2697] loop5: detected capacity change from 0 to 7 [ 98.030121][ T2697] loop5: unable to read partition table [ 98.036083][ T2697] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 98.178770][ T2709] rust_binder: Error while translating object. [ 98.178814][ T2709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.185117][ T2709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 98.213267][ T36] audit: type=1400 audit(1762539107.220:424): avc: denied { checkpoint_restore } for pid=2710 comm="syz.1.744" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.434631][ T2723] netlink: 'syz.3.747': attribute type 5 has an invalid length. [ 98.442361][ T2723] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.747'. [ 98.536528][ T2735] devpts: called with bogus options [ 98.607396][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 98.759013][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.770874][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.781547][ T45] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 98.791630][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.811674][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.835831][ T45] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 98.861854][ T655] udevd[655]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.031145][ T2727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.042086][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.070480][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.070516][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.076998][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.093686][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.100616][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.107308][ T2794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.172609][ T2806] 9pnet_fd: Insufficient options for proto=fd [ 99.195892][ T2808] cgroup: noprefix used incorrectly [ 99.230131][ T9] usb 1-1: USB disconnect, device number 30 [ 99.597414][ T45] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 99.672760][ T2833] fuse: Unknown parameter 'fe' [ 99.677731][ T2834] fuse: Unknown parameter 'fe' [ 99.683680][ T2834] overlayfs: failed to clone upperpath [ 99.683730][ T2833] overlayfs: failed to clone upperpath [ 99.748461][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.771166][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.793563][ T45] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 99.804449][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.814320][ T45] usb 2-1: config 0 descriptor?? [ 99.844668][ T2846] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 99.844702][ T2846] rust_binder: Error while translating object. [ 99.857310][ T2846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.863927][ T2846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 99.981403][ T2858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.087908][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 100.087939][ T36] audit: type=1400 audit(1762539109.100:435): avc: denied { ioctl } for pid=2864 comm="syz.3.796" path="socket:[16462]" dev="sockfs" ino=16462 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.135902][ T2863] netlink: 5 bytes leftover after parsing attributes in process `syz.0.795'. [ 100.198876][ T2875] rust_binder: validate_parent_fixup: new_min_offset=144115188075855935, sg_entry.length=153 [ 100.198927][ T2875] rust_binder: Error while translating object. [ 100.216704][ T2875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.223196][ T2875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 100.234081][ T45] chicony 0003:04F2:1421.0011: item fetching failed at offset 3/5 [ 100.255604][ T45] chicony 0003:04F2:1421.0011: Chicony hid parse failed: -22 [ 100.259735][ T36] audit: type=1400 audit(1762539109.260:436): avc: denied { mounton } for pid=2876 comm="syz.3.799" path="/329/file0" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 100.263318][ T45] chicony 0003:04F2:1421.0011: probe with driver chicony failed with error -22 [ 100.438239][ T2824] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 100.446276][ T2824] netlink: 5 bytes leftover after parsing attributes in process `syz.1.778'. [ 100.455851][ T2824] bridge_slave_1: left promiscuous mode [ 100.462582][ T2824] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.471159][ T45] usb 2-1: USB disconnect, device number 26 [ 100.943854][ T2880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.943985][ T2880] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 100.986503][ T2884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.995626][ T36] audit: type=1404 audit(1762539110.000:437): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 101.001516][ T2884] netlink: 'syz.0.802': attribute type 13 has an invalid length. [ 101.002286][ T36] audit: type=1400 audit(1762539110.000:438): avc: denied { ioctl } for pid=2883 comm="syz.0.802" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 101.050577][ T36] audit: type=1400 audit(1762539110.000:439): avc: denied { map } for pid=2883 comm="syz.0.802" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 101.074645][ T36] audit: type=1400 audit(1762539110.000:440): avc: denied { read } for pid=2883 comm="syz.0.802" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 101.097676][ T36] audit: type=1400 audit(1762539110.030:441): avc: denied { ioctl } for pid=2883 comm="syz.0.802" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0xae89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 101.123222][ T36] audit: type=1400 audit(1762539110.030:442): avc: denied { ioctl } for pid=2883 comm="syz.0.802" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 101.132759][ T2900] netlink: 'syz.3.807': attribute type 27 has an invalid length. [ 101.148758][ T36] audit: type=1400 audit(1762539110.060:443): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.181409][ T36] audit: type=1400 audit(1762539110.080:444): avc: denied { read write } for pid=2890 comm="syz.1.804" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 101.208187][ T2905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.215435][ T2905] IPv6: NLM_F_CREATE should be set when creating new route [ 101.222846][ T2905] IPv6: NLM_F_CREATE should be set when creating new route [ 101.417695][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.528840][ T2978] netlink: 'syz.0.833': attribute type 19 has an invalid length. [ 104.112915][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.122849][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.132775][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.141247][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.150534][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.158502][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.167864][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.175696][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.185154][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.193243][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.202496][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.210498][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.219924][ T3069] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 104.227976][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 104.237849][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 105.097731][ T36] kauditd_printk_skb: 642 callbacks suppressed [ 105.097753][ T36] audit: type=1400 audit(1762539114.110:1087): avc: denied { mounton } for pid=3098 comm="syz.2.874" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 105.129846][ T36] audit: type=1400 audit(1762539114.140:1088): avc: denied { read write } for pid=1664 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.154176][ T36] audit: type=1400 audit(1762539114.140:1089): avc: denied { read } for pid=3100 comm="syz.2.875" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 105.177059][ T36] audit: type=1400 audit(1762539114.150:1090): avc: denied { read write } for pid=3100 comm="syz.2.875" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 105.356448][ T36] audit: type=1400 audit(1762539114.360:1091): avc: denied { read write } for pid=3107 comm="syz.3.878" name="rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 105.390548][ T36] audit: type=1400 audit(1762539114.400:1092): avc: denied { name_bind } for pid=3109 comm="syz.3.879" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 105.418287][ T36] audit: type=1400 audit(1762539114.430:1093): avc: denied { mount } for pid=3109 comm="syz.3.879" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=0 [ 105.480003][ T36] audit: type=1400 audit(1762539114.490:1094): avc: denied { read append } for pid=3121 comm="syz.3.883" name="rnullb0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 105.506497][ T36] audit: type=1400 audit(1762539114.490:1095): avc: denied { create } for pid=3121 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.527582][ T36] audit: type=1400 audit(1762539114.490:1096): avc: denied { create } for pid=3121 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.901093][ T3162] __nla_validate_parse: 25 callbacks suppressed [ 105.901116][ T3162] netlink: 37 bytes leftover after parsing attributes in process `syz.0.898'. [ 106.043972][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.319118][ T3200] can0: slcan on ttyS3. [ 106.387431][ T3199] can0 (unregistered): slcan off ttyS3. [ 107.114449][ T3246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3246 comm=syz.3.927 [ 107.127648][ T3246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.927'. [ 108.057461][ T532] Bluetooth: hci0: command 0x1003 tx timeout [ 108.063601][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.452597][ T3315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=3315 comm=syz.1.950 [ 109.609451][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.081941][ T3404] cgroup: fork rejected by pids controller in /syz3 [ 110.107481][ T36] kauditd_printk_skb: 31084 callbacks suppressed [ 110.107504][ T36] audit: type=1400 audit(1762539119.120:31824): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.141266][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.149566][ T149] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 110.149571][ T3437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.149590][ T149] audit: backlog limit exceeded [ 110.149712][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.167404][ T3437] audit: audit_lost=121 audit_rate_limit=0 audit_backlog_limit=64 [ 110.168925][ T36] audit: type=1400 audit(1762539119.140:31825): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.188625][ T3437] audit: backlog limit exceeded [ 110.204362][ T149] audit: audit_lost=122 audit_rate_limit=0 audit_backlog_limit=64 [ 110.910464][ T3476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.997'. [ 110.927132][ T3476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.997'. [ 110.937078][ T3476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.997'. [ 110.946663][ T3476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.997'. [ 110.956289][ T3476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.997'. [ 111.057630][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 111.658565][ T1272] Bluetooth: hci0: command 0x1003 tx timeout [ 111.664634][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.875062][ T3613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3613 comm=syz.2.1045 [ 113.097602][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 113.103945][ T532] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 113.210682][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 113.316433][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.117367][ T36] kauditd_printk_skb: 38718 callbacks suppressed [ 115.117441][ T36] audit: type=1400 audit(1762539124.120:69718): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.125653][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.145016][ T36] audit: type=1400 audit(1762539124.130:69719): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.152030][ T149] audit: audit_lost=398 audit_rate_limit=0 audit_backlog_limit=64 [ 115.172555][ T36] audit: type=1400 audit(1762539124.130:69720): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.172597][ T36] audit: type=1400 audit(1762539124.130:69721): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.180956][ T149] audit: backlog limit exceeded [ 115.201526][ T36] audit: type=1400 audit(1762539124.130:69722): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.223449][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.227855][ T36] audit: type=1400 audit(1762539124.130:69723): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.337400][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 115.337479][ T532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.233576][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 116.717930][ T3822] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.726467][ T3823] validate_nla: 26 callbacks suppressed [ 116.726488][ T3823] netlink: 'syz.1.1115': attribute type 40 has an invalid length. [ 117.548427][ T3888] x_tables: unsorted underflow at hook 3 [ 117.576534][ T3892] netlink: 'syz.3.1138': attribute type 27 has an invalid length. [ 117.597844][ T3892] lo: entered promiscuous mode [ 117.607190][ T3892] lo: entered allmulticast mode [ 117.617653][ T3892] tunl0: entered promiscuous mode [ 117.622928][ T3892] tunl0: entered allmulticast mode [ 117.633896][ T3892] gre0: entered promiscuous mode [ 117.644397][ T3892] gre0: entered allmulticast mode [ 117.656615][ T3892] gretap0: entered promiscuous mode [ 117.669084][ T3892] gretap0: entered allmulticast mode [ 117.683775][ T3892] erspan0: entered promiscuous mode [ 117.695033][ T3892] erspan0: entered allmulticast mode [ 117.708366][ T3892] ip_vti0: entered promiscuous mode [ 117.720165][ T3892] ip_vti0: entered allmulticast mode [ 117.732646][ T3892] ip6_vti0: entered promiscuous mode [ 117.743590][ T3892] ip6_vti0: entered allmulticast mode [ 117.755515][ T3892] sit0: entered promiscuous mode [ 117.766545][ T3892] sit0: entered allmulticast mode [ 117.778804][ T3892] ip6tnl0: entered promiscuous mode [ 117.789156][ T3892] ip6tnl0: entered allmulticast mode [ 117.802276][ T3892] ip6gre0: entered promiscuous mode [ 117.812766][ T3892] ip6gre0: entered allmulticast mode [ 117.825407][ T3892] ip6gretap0: entered promiscuous mode [ 117.836903][ T3892] ip6gretap0: entered allmulticast mode [ 117.849808][ T3892] dummy0: entered promiscuous mode [ 117.861232][ T3892] dummy0: entered allmulticast mode [ 117.873534][ T3892] veth0: entered promiscuous mode [ 117.883509][ T3892] veth0: entered allmulticast mode [ 117.895561][ T3892] veth1: entered promiscuous mode [ 117.908696][ T3892] veth1: entered allmulticast mode [ 117.920020][ T3892] wg0: entered promiscuous mode [ 117.930477][ T3892] wg0: entered allmulticast mode [ 117.942814][ T3892] wg1: entered promiscuous mode [ 117.952716][ T3892] wg1: entered allmulticast mode [ 117.963225][ T3892] wg2: entered promiscuous mode [ 117.972639][ T3892] wg2: entered allmulticast mode [ 117.986983][ T3892] veth0_to_bridge: entered promiscuous mode [ 118.000034][ T3892] veth0_to_bridge: entered allmulticast mode [ 118.012653][ T3892] bridge_slave_0: entered promiscuous mode [ 118.024359][ T3892] bridge_slave_0: entered allmulticast mode [ 118.037961][ T3892] veth1_to_bridge: entered promiscuous mode [ 118.049374][ T3892] veth1_to_bridge: entered allmulticast mode [ 118.062866][ T3892] bridge_slave_1: entered promiscuous mode [ 118.074983][ T3892] bridge_slave_1: entered allmulticast mode [ 118.088551][ T3892] veth0_to_bond: entered promiscuous mode [ 118.101844][ T3892] veth0_to_bond: entered allmulticast mode [ 118.114546][ T3892] bond_slave_0: entered promiscuous mode [ 118.126378][ T3892] bond_slave_0: entered allmulticast mode [ 118.142479][ T3892] veth1_to_bond: entered promiscuous mode [ 118.152746][ T3892] veth1_to_bond: entered allmulticast mode [ 118.166487][ T3892] bond_slave_1: entered promiscuous mode [ 118.178276][ T3892] bond_slave_1: entered allmulticast mode [ 118.191380][ T3892] veth0_to_team: entered promiscuous mode [ 118.202562][ T3892] veth0_to_team: entered allmulticast mode [ 118.216426][ T3892] team_slave_0: entered promiscuous mode [ 118.228911][ T3892] team_slave_0: entered allmulticast mode [ 118.244236][ T3892] veth1_to_team: entered promiscuous mode [ 118.257464][ T3892] veth1_to_team: entered allmulticast mode [ 118.270724][ T3892] team_slave_1: entered promiscuous mode [ 118.281963][ T3892] team_slave_1: entered allmulticast mode [ 118.297200][ T3892] veth0_to_batadv: entered promiscuous mode [ 118.311093][ T3892] veth0_to_batadv: entered allmulticast mode [ 118.323928][ T3892] batadv_slave_0: entered promiscuous mode [ 118.336800][ T3892] batadv_slave_0: entered allmulticast mode [ 118.350669][ T3892] veth1_to_batadv: entered promiscuous mode [ 118.367162][ T3892] veth1_to_batadv: entered allmulticast mode [ 118.380174][ T3892] batadv_slave_1: entered promiscuous mode [ 118.393382][ T3892] batadv_slave_1: entered allmulticast mode [ 118.422564][ T3892] xfrm0: entered promiscuous mode [ 118.432348][ T3892] xfrm0: entered allmulticast mode [ 118.441687][ T3892] veth0_to_hsr: entered promiscuous mode [ 118.453931][ T3892] veth0_to_hsr: entered allmulticast mode [ 118.464113][ T3892] hsr_slave_0: entered promiscuous mode [ 118.472507][ T3892] hsr_slave_0: entered allmulticast mode [ 118.484826][ T3892] veth1_to_hsr: entered promiscuous mode [ 118.493323][ T3892] veth1_to_hsr: entered allmulticast mode [ 118.501899][ T3892] hsr_slave_1: entered promiscuous mode [ 118.512084][ T3892] hsr_slave_1: entered allmulticast mode [ 118.522579][ T3892] veth1_virt_wifi: entered promiscuous mode [ 118.533127][ T3892] veth1_virt_wifi: entered allmulticast mode [ 118.543737][ T3892] veth0_virt_wifi: entered promiscuous mode [ 118.553785][ T3892] veth0_virt_wifi: entered allmulticast mode [ 118.563010][ T3892] veth1_vlan: entered promiscuous mode [ 118.571701][ T3892] veth1_vlan: entered allmulticast mode [ 118.578215][ T3892] veth0_vlan: entered allmulticast mode [ 118.589800][ T3892] vlan0: entered promiscuous mode [ 118.599609][ T3892] vlan0: entered allmulticast mode [ 118.605703][ T3892] vlan1: entered promiscuous mode [ 118.614645][ T3892] vlan1: entered allmulticast mode [ 118.624445][ T3892] netpci0: entered promiscuous mode [ 118.632566][ T3892] netpci0: entered allmulticast mode [ 118.641892][ T3892] syztnl2: entered promiscuous mode [ 118.647707][ T3892] syztnl2: entered allmulticast mode [ 119.600912][ T3993] netlink: 'syz.1.1170': attribute type 27 has an invalid length. [ 119.640524][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.647654][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.682924][ T3993] bridge_slave_1: left allmulticast mode [ 119.763447][ T3992] netlink: 'syz.1.1170': attribute type 27 has an invalid length. [ 120.128551][ T36] kauditd_printk_skb: 31919 callbacks suppressed [ 120.128572][ T36] audit: type=1400 audit(1762539129.124:99913): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.180056][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.189449][ T36] audit: type=1400 audit(1762539129.134:99914): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.199742][ T149] audit: audit_lost=976 audit_rate_limit=0 audit_backlog_limit=64 [ 120.239470][ T4018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.249517][ T4018] audit: audit_lost=977 audit_rate_limit=0 audit_backlog_limit=64 [ 120.254371][ T36] audit: type=1400 audit(1762539129.134:99915): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.259748][ T149] audit: backlog limit exceeded [ 120.287904][ T4018] audit: backlog limit exceeded [ 120.298055][ T4018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.617652][ T3567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.631113][ T3567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.647498][ T65] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.659742][ T4043] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1187'. [ 120.827438][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 121.400722][ T4108] netlink: 'syz.0.1206': attribute type 27 has an invalid length. [ 121.419392][ T4108] lo: entered promiscuous mode [ 121.421871][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 121.427418][ T4108] lo: entered allmulticast mode [ 121.455369][ T4108] tunl0: entered promiscuous mode [ 121.470562][ T4108] tunl0: entered allmulticast mode [ 121.484813][ T4108] gre0: entered promiscuous mode [ 121.492802][ T4108] gre0: entered allmulticast mode [ 121.507668][ T4108] gretap0: entered promiscuous mode [ 121.519194][ T4108] gretap0: entered allmulticast mode [ 121.531346][ T4108] erspan0: entered promiscuous mode [ 121.540438][ T4108] erspan0: entered allmulticast mode [ 121.546568][ T4108] ip_vti0: entered promiscuous mode [ 121.555660][ T4108] ip_vti0: entered allmulticast mode [ 121.569596][ T4108] ip6_vti0: entered promiscuous mode [ 121.577103][ T4108] ip6_vti0: entered allmulticast mode [ 121.589048][ T4108] sit0: entered promiscuous mode [ 121.595484][ T4108] sit0: entered allmulticast mode [ 121.604275][ T4108] ip6tnl0: entered promiscuous mode [ 121.612070][ T4108] ip6tnl0: entered allmulticast mode [ 121.625382][ T4108] ip6gre0: entered promiscuous mode [ 121.631106][ T4108] ip6gre0: entered allmulticast mode [ 121.637617][ T4108] syz_tun: entered promiscuous mode [ 121.643390][ T4108] syz_tun: entered allmulticast mode [ 121.651685][ T4108] ip6gretap0: entered promiscuous mode [ 121.657436][ T4108] ip6gretap0: entered allmulticast mode [ 121.671130][ T4108] bridge0: entered promiscuous mode [ 121.676831][ T4108] bridge0: entered allmulticast mode [ 121.683020][ T4108] dummy0: entered promiscuous mode [ 121.691112][ T4108] dummy0: entered allmulticast mode [ 121.698114][ T4108] veth0: entered promiscuous mode [ 121.703223][ T4108] veth0: entered allmulticast mode [ 121.710213][ T4108] veth1: entered promiscuous mode [ 121.715289][ T4108] veth1: entered allmulticast mode [ 121.729270][ T4108] wg0: entered promiscuous mode [ 121.735164][ T4108] wg0: entered allmulticast mode [ 121.748258][ T4108] wg1: entered promiscuous mode [ 121.753646][ T4108] wg1: entered allmulticast mode [ 121.768121][ T4108] wg2: entered promiscuous mode [ 121.773468][ T4108] wg2: entered allmulticast mode [ 121.782716][ T4108] veth0_to_bridge: entered promiscuous mode [ 121.802625][ T4108] veth0_to_bridge: entered allmulticast mode [ 121.811997][ T4108] veth1_to_bridge: entered promiscuous mode [ 121.827359][ T4108] veth1_to_bridge: entered allmulticast mode [ 121.835454][ T4108] veth0_to_bond: entered promiscuous mode [ 121.844987][ T4108] veth0_to_bond: entered allmulticast mode [ 121.857297][ T4108] bond_slave_0: entered promiscuous mode [ 121.864270][ T4108] bond_slave_0: entered allmulticast mode [ 121.871495][ T4108] veth1_to_bond: entered promiscuous mode [ 121.877844][ T4108] veth1_to_bond: entered allmulticast mode [ 121.885376][ T4108] bond_slave_1: entered promiscuous mode [ 121.893868][ T4108] bond_slave_1: entered allmulticast mode [ 121.904214][ T4108] veth0_to_team: entered promiscuous mode [ 121.910447][ T4108] veth0_to_team: entered allmulticast mode [ 121.918038][ T4108] team_slave_0: entered promiscuous mode [ 121.924104][ T4108] team_slave_0: entered allmulticast mode [ 121.933588][ T4108] veth1_to_team: entered promiscuous mode [ 121.940004][ T4108] veth1_to_team: entered allmulticast mode [ 121.947840][ T4108] team_slave_1: entered promiscuous mode [ 121.954022][ T4108] team_slave_1: entered allmulticast mode [ 121.961219][ T4108] veth0_to_batadv: entered promiscuous mode [ 121.967586][ T4108] veth0_to_batadv: entered allmulticast mode [ 121.974705][ T4108] batadv_slave_0: entered promiscuous mode [ 121.982806][ T4108] batadv_slave_0: entered allmulticast mode [ 121.989710][ T4108] veth1_to_batadv: entered promiscuous mode [ 121.995837][ T4108] veth1_to_batadv: entered allmulticast mode [ 122.002801][ T4108] batadv_slave_1: entered promiscuous mode [ 122.009280][ T4108] batadv_slave_1: entered allmulticast mode [ 122.016084][ T4108] xfrm0: entered promiscuous mode [ 122.022046][ T4108] xfrm0: entered allmulticast mode [ 122.028476][ T4108] veth0_to_hsr: entered promiscuous mode [ 122.034630][ T4108] veth0_to_hsr: entered allmulticast mode [ 122.041253][ T4108] hsr_slave_0: entered promiscuous mode [ 122.047035][ T4108] hsr_slave_0: entered allmulticast mode [ 122.053549][ T4108] veth1_to_hsr: entered promiscuous mode [ 122.059591][ T4108] veth1_to_hsr: entered allmulticast mode [ 122.066157][ T4108] hsr_slave_1: entered promiscuous mode [ 122.072343][ T4108] hsr_slave_1: entered allmulticast mode [ 122.078901][ T4108] veth1_virt_wifi: entered promiscuous mode [ 122.085100][ T4108] veth1_virt_wifi: entered allmulticast mode [ 122.092224][ T4108] veth0_virt_wifi: entered promiscuous mode [ 122.098418][ T4108] veth0_virt_wifi: entered allmulticast mode [ 122.105206][ T4108] veth1_vlan: entered promiscuous mode [ 122.111506][ T4108] veth1_vlan: entered allmulticast mode [ 122.117924][ T4108] veth0_vlan: entered allmulticast mode [ 122.124676][ T4108] vlan0: entered promiscuous mode [ 122.130305][ T4108] vlan0: entered allmulticast mode [ 122.137187][ T4108] vlan1: entered promiscuous mode [ 122.142698][ T4108] vlan1: entered allmulticast mode [ 122.148899][ T4108] veth1_macvtap: entered allmulticast mode [ 122.155432][ T4108] veth0_macvtap: entered promiscuous mode [ 122.161704][ T4108] veth0_macvtap: entered allmulticast mode [ 122.169696][ T4108] macsec0: entered promiscuous mode [ 122.175232][ T4108] macsec0: entered allmulticast mode [ 122.183099][ T4131] netlink: 'syz.2.1213': attribute type 16 has an invalid length. [ 123.201682][ T4201] syz.0.1235 (4201): attempted to duplicate a private mapping with mremap. This is not supported. [ 124.764768][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 124.937652][ T532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.963981][ T4274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1261'. [ 125.097501][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.137396][ T36] kauditd_printk_skb: 31744 callbacks suppressed [ 125.137418][ T36] audit: type=1400 audit(1762539134.144:131592): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.146213][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.168708][ T36] audit: type=1400 audit(1762539134.144:131593): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.172239][ T149] audit: audit_lost=1001 audit_rate_limit=0 audit_backlog_limit=64 [ 125.194633][ T36] audit: type=1400 audit(1762539134.144:131594): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.201879][ T149] audit: backlog limit exceeded [ 125.222915][ T36] audit: type=1400 audit(1762539134.144:131595): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.227897][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.249050][ T36] audit: type=1400 audit(1762539134.144:131596): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.256426][ T149] audit: audit_lost=1002 audit_rate_limit=0 audit_backlog_limit=64 [ 125.337364][ T532] Bluetooth: hci1: command 0x1003 tx timeout [ 125.337370][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 126.674359][ T4389] team_slave_1: left promiscuous mode [ 126.694223][ T4389] team_slave_1: left allmulticast mode [ 126.716257][ T4389] netlink: 'syz.3.1305': attribute type 4 has an invalid length. [ 126.742489][ T4389] netlink: 'syz.3.1305': attribute type 4 has an invalid length. [ 130.147366][ T36] kauditd_printk_skb: 38082 callbacks suppressed [ 130.147388][ T36] audit: type=1400 audit(1762539146.151:169045): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.161614][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.176011][ T36] audit: type=1400 audit(1762539146.161:169046): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.199922][ T149] audit: audit_lost=1214 audit_rate_limit=0 audit_backlog_limit=64 [ 130.204158][ T1664] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.210637][ T149] audit: backlog limit exceeded [ 130.220810][ T1664] audit: audit_lost=1215 audit_rate_limit=0 audit_backlog_limit=64 [ 130.224864][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.231029][ T1664] audit: backlog limit exceeded [ 130.238765][ T4629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.498254][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.857640][ T4850] netlink: 'syz.1.1465': attribute type 27 has an invalid length. [ 134.057591][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.537337][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.537370][ T532] Bluetooth: hci0: command 0x1003 tx timeout [ 135.157358][ T36] kauditd_printk_skb: 36486 callbacks suppressed [ 135.157378][ T36] audit: type=1400 audit(1762539151.161:204260): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.166450][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.185235][ T36] audit: type=1400 audit(1762539151.171:204261): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.191698][ T149] audit: audit_lost=1641 audit_rate_limit=0 audit_backlog_limit=64 [ 135.213052][ T36] audit: type=1400 audit(1762539151.171:204262): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.220808][ T149] audit: backlog limit exceeded [ 135.242216][ T36] audit: type=1400 audit(1762539151.171:204263): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.247484][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.268486][ T36] audit: type=1400 audit(1762539151.171:204264): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.281831][ T149] audit: audit_lost=1642 audit_rate_limit=0 audit_backlog_limit=64 [ 135.674447][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.779439][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 137.427255][ T5111] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.1555'. [ 137.506665][ T5120] netlink: 'syz.2.1558': attribute type 27 has an invalid length. [ 137.737379][ T532] Bluetooth: hci0: command 0x1003 tx timeout [ 137.737653][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.169664][ T329] tipc: Disabling bearer [ 138.175205][ T329] tipc: Left network mode [ 139.411022][ T5166] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1572'. [ 140.167397][ T36] kauditd_printk_skb: 39739 callbacks suppressed [ 140.167418][ T36] audit: type=1400 audit(1762539156.181:243547): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.201789][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.208407][ T149] audit: audit_lost=1795 audit_rate_limit=0 audit_backlog_limit=64 [ 140.216333][ T149] audit: backlog limit exceeded [ 140.221719][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.228461][ T36] audit: type=1400 audit(1762539156.191:243548): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.237613][ T149] audit: audit_lost=1796 audit_rate_limit=0 audit_backlog_limit=64 [ 140.252944][ T36] audit: type=1400 audit(1762539156.201:243549): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.270649][ T149] audit: backlog limit exceeded [ 140.282459][ T36] audit: type=1400 audit(1762539156.201:243550): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.957953][ T5205] netlink: 'syz.2.1584': attribute type 12 has an invalid length. [ 145.177410][ T36] kauditd_printk_skb: 45826 callbacks suppressed [ 145.177432][ T36] audit: type=1400 audit(1762539161.181:289254): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.185566][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.205549][ T36] audit: type=1400 audit(1762539161.191:289255): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.211986][ T149] audit: audit_lost=1838 audit_rate_limit=0 audit_backlog_limit=64 [ 145.233171][ T36] audit: type=1400 audit(1762539161.191:289256): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.241020][ T149] audit: backlog limit exceeded [ 145.262316][ T36] audit: type=1400 audit(1762539161.191:289257): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.268581][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.296384][ T5219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.302959][ T5219] audit: audit_lost=1839 audit_rate_limit=0 audit_backlog_limit=64 [ 145.323605][ T5225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1589'. [ 150.187398][ T36] kauditd_printk_skb: 46246 callbacks suppressed [ 150.187427][ T36] audit: type=1400 audit(1762539166.201:335381): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.197086][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.223634][ T149] audit: audit_lost=1881 audit_rate_limit=0 audit_backlog_limit=64 [ 150.231795][ T36] audit: type=1400 audit(1762539166.201:335382): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.253139][ T149] audit: backlog limit exceeded [ 150.258581][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.265124][ T149] audit: audit_lost=1882 audit_rate_limit=0 audit_backlog_limit=64 [ 150.273390][ T149] audit: backlog limit exceeded [ 150.278555][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.283833][ T36] audit: type=1400 audit(1762539166.201:335383): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.257391][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.197732][ T36] kauditd_printk_skb: 44815 callbacks suppressed [ 155.197754][ T36] audit: type=1400 audit(1762539171.211:377848): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.206013][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.225625][ T36] audit: type=1400 audit(1762539171.211:377849): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.232049][ T149] audit: audit_lost=2667 audit_rate_limit=0 audit_backlog_limit=64 [ 155.254697][ T36] audit: type=1400 audit(1762539171.211:377850): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.261163][ T149] audit: backlog limit exceeded [ 155.282496][ T36] audit: type=1400 audit(1762539171.211:377851): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.287885][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.308550][ T36] audit: type=1400 audit(1762539171.211:377852): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.315235][ T149] audit: audit_lost=2668 audit_rate_limit=0 audit_backlog_limit=64 [ 158.751593][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.978346][ T13] bridge_slave_1: left allmulticast mode [ 158.984060][ T13] bridge_slave_1: left promiscuous mode [ 158.990455][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.999392][ T13] bridge_slave_0: left allmulticast mode [ 159.005706][ T13] bridge_slave_0: left promiscuous mode [ 159.011651][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.073936][ T13] bridge0 (unregistering): left allmulticast mode [ 159.160681][ T13] veth1_macvtap: left promiscuous mode [ 159.166260][ T13] veth0_vlan: left promiscuous mode [ 160.207376][ T36] kauditd_printk_skb: 45720 callbacks suppressed [ 160.207400][ T36] audit: type=1400 audit(1762539176.221:422930): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.215537][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.235758][ T36] audit: type=1400 audit(1762539176.221:422931): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.242118][ T149] audit: audit_lost=2883 audit_rate_limit=0 audit_backlog_limit=64 [ 160.263701][ T36] audit: type=1400 audit(1762539176.221:422932): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.271329][ T149] audit: backlog limit exceeded [ 160.292754][ T36] audit: type=1400 audit(1762539176.221:422933): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.298541][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.325509][ T149] audit: audit_lost=2884 audit_rate_limit=0 audit_backlog_limit=64 [ 160.333729][ T149] audit: backlog limit exceeded [ 160.777437][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.778689][ T532] Bluetooth: hci0: command 0x1003 tx timeout [ 161.059336][ T13] bridge_slave_0: left allmulticast mode [ 161.065032][ T13] bridge_slave_0: left promiscuous mode [ 161.087421][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.229101][ T13] tipc: Disabling bearer [ 161.234583][ T13] tipc: Left network mode [ 161.240216][ T13] veth1_macvtap: left promiscuous mode [ 161.245766][ T13] veth0_vlan: left promiscuous mode [ 165.217395][ T36] kauditd_printk_skb: 47822 callbacks suppressed [ 165.217416][ T36] audit: type=1400 audit(1762539181.231:469814): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.225860][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.245254][ T36] audit: type=1400 audit(1762539181.231:469815): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.251691][ T149] audit: audit_lost=3199 audit_rate_limit=0 audit_backlog_limit=64 [ 165.273045][ T36] audit: type=1400 audit(1762539181.231:469816): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.281069][ T149] audit: backlog limit exceeded [ 165.302298][ T36] audit: type=1400 audit(1762539181.231:469817): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.307633][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.328461][ T36] audit: type=1400 audit(1762539181.231:469818): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.335063][ T149] audit: audit_lost=3200 audit_rate_limit=0 audit_backlog_limit=64