last executing test programs: 1m33.552374634s ago: executing program 1 (id=2134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ftruncate(r0, 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r1 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x182) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xe50) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) (async) unlinkat(r1, &(0x7f0000000100)='./file1\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 1m33.551964874s ago: executing program 1 (id=2135): munlockall() (async) munlockall() (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000006) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) munlockall() (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x1e, 0x4, 0x6}) munlockall() (async) munlockall() (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [{0x269, 0x0, 0x8}, {0x9e3, 0x0, 0x92}, {0x240, 0x0, 0x8}, {0x9e6}, {0x824, 0x0, 0xa1b}, {0xa5f, 0x0, 0xc}]}) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0x4, 0x0, [{0xb16, 0x0, 0x9}, {0xa4d, 0x0, 0x1}, {0x40000103, 0x0, 0x3}, {0x89a, 0x0, 0x8}]}) (async) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000240)=0x11, 0x4) (async, rerun: 32) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x901d60, 0x0) (async, rerun: 32) openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) (async) r4 = memfd_secret(0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/82, 0x52, 0x0, &(0x7f0000000380)=""/121, 0x79}, &(0x7f0000000440)=0x40) (async) mount(&(0x7f0000000480)=@sg0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='logfs\x00', 0x7004, &(0x7f0000000540)='/dev/ashmem\x00') (async, rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/182, 0xb6, 0x0, &(0x7f0000000640)=""/234, 0xea}, &(0x7f0000000780)=0x40) (async, rerun: 64) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000800)={0xa3, 0x0, &(0x7f00000007c0)}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000001e00)={&(0x7f00000009c0), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/83, 0x53}, {&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000b40)=""/123, 0x7b}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/214, 0xd6}], 0x5, &(0x7f0000001d40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000000) (rerun: 64) 1m33.526563215s ago: executing program 1 (id=2136): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) getrusage(0x0, &(0x7f0000000400)) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) setreuid(0xee01, 0xee01) lgetxattr(&(0x7f00000041c0)='./cgroup\x00', &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) sendfile(r0, r0, 0x0, 0x7ffff000) 1m33.481429555s ago: executing program 1 (id=2137): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x2, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000002d00), 0x4) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0x16, {0x16, 0x31, "e4b5ebcf10e602fda1ea9b138af94092f64a5f21"}}, &(0x7f0000000180)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "c7605d0e5add49f3cf2af2c038c63f6c6c8d21c4582ad851bee22218293cc8276b5997067a0fe253b23aea8dbe870a2fccfd9b9f0af3ba22dd28f499559feaae76eb819dbfb8d6424bb1b8efc7e20f3a97035a4cce7ea04edb15e041e427ac5bb0c28d70294e27a7d8c6a560b51399bc7b1fe33b1a27d0ab7e8470d98ee26e482bf157f9b8fa9c8b7bd1ee8af2dbce023385bea07bcfa77b3e39e847b6095cef6912750c939c7ffc"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0xbb, 0xf2, "a2c5a3f8", "07c8bd0f"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x96, 0x8, 0x8f, 0x8001}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0xe, 0x7c, "e94b133a234804187e074fba521463d0c3025fc511ce4f0538d0a84730e50d22f7a66593d10696278e829d1df4ac486ca493365275115b81840ca8d57f5938308b3dd1ae309272bb5e1d562be7bac6b8612eaaeaed65ae2adda6b342615ed07abac0604c6d26bbba92b66a56432a85b588d33e1a68efea9c7edd5ca5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xaa}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x140, 0x10, [0xeef0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "c5de"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "c47b"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) 1m32.955584087s ago: executing program 1 (id=2140): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m32.900322488s ago: executing program 1 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ad0615f70644171}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xf0, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x14}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3a0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x560}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x610}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}}, 0x40c1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x140, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, 0x1e, 0x9, 0xfffffffe, 0x25dfdbff, {0x9}, [@typed={0x11, 0x1, 0x0, 0x0, @str='/dev/rnullb0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="1fdea5f3fc0132a7a47be237a09811d3", 0x10) close(r5) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000400)={0x6, 0x6}) fcntl$setlease(r6, 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x1000080, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'j\x19\xc3\x83#\xec\xce\xc5\f\xa1'}}]}}) 1m17.793671724s ago: executing program 32 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ad0615f70644171}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xf0, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x14}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3a0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x560}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x610}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}}, 0x40c1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x140, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, 0x1e, 0x9, 0xfffffffe, 0x25dfdbff, {0x9}, [@typed={0x11, 0x1, 0x0, 0x0, @str='/dev/rnullb0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="1fdea5f3fc0132a7a47be237a09811d3", 0x10) close(r5) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000400)={0x6, 0x6}) fcntl$setlease(r6, 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x1000080, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'j\x19\xc3\x83#\xec\xce\xc5\f\xa1'}}]}}) 2.289729992s ago: executing program 0 (id=3603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x1d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.240315683s ago: executing program 2 (id=3604): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000040)="cfd821a566b94f1f3b82f763b0", 0xd) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$inet(r3, &(0x7f00000065c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006a40)=ANY=[], 0xc0}}], 0x1, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) sendfile(r2, r0, 0x0, 0x7ffff000) 2.164424245s ago: executing program 2 (id=3605): madvise(&(0x7f000059d000/0x1000)=nil, 0x1000, 0x3d) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x416840, 0x0) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x100010, 0x4) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x5, 0x1, 0x3}, 0x10) (async) recvfrom$packet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000091000/0x4000)=nil, 0x4000, 0x3, 0x932, r0, 0x911d8000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r4, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x1, 0x1, 0x2000000000000007}, 0x3}}, 0x18) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syncfs(r4) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (rerun: 32) 1.680830075s ago: executing program 4 (id=3616): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pread64(r0, &(0x7f0000000100)=""/32, 0x20, 0x6) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000100)="8684b94757eabab5369768b6c57c8b04f3ef434b", 0x14) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 1.680349545s ago: executing program 3 (id=3617): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = dup(r1) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000c40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0xa) connect$bt_rfcomm(r3, &(0x7f0000000c80)={0x1f, @none, 0x2}, 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24b"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000040)=[@increfs, @dead_binder_done], 0x0, 0x0, 0x0}) 1.634393806s ago: executing program 4 (id=3618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e543bc200fa8d657078aa2d00", 0xf}], 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r2, 0x8d61ddcfedb48df, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1.633990916s ago: executing program 3 (id=3619): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = userfaultfd(0x1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x12, r3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) 1.633700816s ago: executing program 3 (id=3620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x2004, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r1, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4000005) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"}) close_range(r4, 0xffffffffffffffff, 0x0) 1.632653326s ago: executing program 3 (id=3621): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000040)=r1, 0x12) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x1000, 0x2000}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES64=r2]) 1.260495534s ago: executing program 2 (id=3622): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x1, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x40) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 1.188759525s ago: executing program 2 (id=3623): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x80, 0xfe}}], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0xfe, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 759.596114ms ago: executing program 4 (id=3624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r1, r4, 0x0, 0x1000000201004) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0xc, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) fsmount(r1, 0x1, 0x0) (async) fchdir(r3) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) ftruncate(r4, 0x2007ffb) (async) sendfile(r1, r4, 0x0, 0x1000000201004) (async) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0xc, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 616.430797ms ago: executing program 3 (id=3625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) close_range(r0, 0xffffffffffffffff, 0x0) 606.023638ms ago: executing program 2 (id=3626): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') move_mount(r0, &(0x7f0000000280)='./cgroup\x00', r0, &(0x7f00000002c0)='./cgroup\x00', 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x8000, 0x0, 0x0, 0x300}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 567.400258ms ago: executing program 2 (id=3627): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r0, 0x182}], 0x2, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 520.320679ms ago: executing program 4 (id=3628): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x201, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1f, 0x0, 0x7}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}, {r0, 0x2004}], 0x2, 0x7f) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000240)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x42, 0x1, 0x1ff, 0x5, 0x85, 0x70a, 0x4, 0x1, 0x80000001, 0x20010000000000, 0x5, 0x7, 0xffffffffffffffea, 0xe6, 0x100000000000001], 0x3000, 0x2815c2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000100)={0x0, {0x18, 0x7, 0x9, 0x7, 0x7}}) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 260.955044ms ago: executing program 0 (id=3629): r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="b6", 0x1}], 0x1, 0x4) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) r1 = signalfd(r0, &(0x7f0000001b40)={[0x7]}, 0x63) poll(&(0x7f0000001d80)=[{r1, 0x8}], 0x1, 0x3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/111, 0x16000, 0x1000, 0x40000}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0xff) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000440)={{r2}, "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"}) pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 232.952125ms ago: executing program 4 (id=3630): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x19, "d7624400000000152a776ad8d85fbe76e63747000000000000"}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) alarm(0x100000001) alarm(0x80000001) keyctl$read(0xb, r1, 0x0, 0x0) pipe(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0xfffffff7, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xa) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r6, 0x7800, 0x10, 0x1, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xfffd}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1a, 0x5, 0xfffffff7, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3b72af2573feea7caeeb00483d3724539ea8a59bdaea94171a7ef2867ce7ec8742e052a9adf91981c7d25832b520adf5474ddbecb0b3c813a5d0a35e95c0950c9cab933f9778508b27db9f8e9218f99516b7f71b2c664b5df5e3ede047d5ed25c6d1cd34f8b0d3bd5adc239264bf67028a7c7139697c59f3c930e0659bb5", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25010000000000000001410000001800170000001a000100017564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 172.412016ms ago: executing program 0 (id=3631): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x2c000, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockname$unix(r0, &(0x7f0000000340), &(0x7f0000000080)=0x6e) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x135) close(r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f0000000200)="c7c3bb0dd37fb073bac068a37aa4c1f83599292b71b053666874a70fc8ae86d74405cc75f742f442b49cec83171bfbaad01b675276244f8df50d99988d6a7ec06f2fd1fad423e01f31007881006f86d393d976ddeeb8d516890153794060041d97465acbdacd1cb6748b36981ba3d3f90e104ba2037efe2d7e85a368b91d76d8e796516b8ae8138f6419075dba5b45b93706bd8c00a1be32f6", 0x99, 0x4000, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x2, 0x18, "52fd46e36a14eaf2de07faa36d63ca9b61d45ff420f43dfffb61cbafae32cbb13aa44a0b9d2125a8b8efbefef2f44bfd4034358fd346f4bd50bc2cd4c96c03", 0x33}, 0x80) open(&(0x7f00000002c0)='./file0\x00', 0x2c000, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) getsockname$unix(r0, &(0x7f0000000340), &(0x7f0000000080)=0x6e) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x135) (async) close(r2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendto(r3, &(0x7f0000000200)="c7c3bb0dd37fb073bac068a37aa4c1f83599292b71b053666874a70fc8ae86d74405cc75f742f442b49cec83171bfbaad01b675276244f8df50d99988d6a7ec06f2fd1fad423e01f31007881006f86d393d976ddeeb8d516890153794060041d97465acbdacd1cb6748b36981ba3d3f90e104ba2037efe2d7e85a368b91d76d8e796516b8ae8138f6419075dba5b45b93706bd8c00a1be32f6", 0x99, 0x4000, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x2, 0x18, "52fd46e36a14eaf2de07faa36d63ca9b61d45ff420f43dfffb61cbafae32cbb13aa44a0b9d2125a8b8efbefef2f44bfd4034358fd346f4bd50bc2cd4c96c03", 0x33}, 0x80) (async) 143.308277ms ago: executing program 4 (id=3632): r0 = gettid() r1 = gettid() kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpgid(0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r3) syz_clone3(&(0x7f0000001080)={0x214372f317a48875, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80), {0x18}, &(0x7f0000000ec0)=""/120, 0x78, &(0x7f0000000f40)=""/251, &(0x7f0000001040)=[r1, 0x0, r2], 0x3, {r3}}, 0x58) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB='max=00000000I0000000000,\x00\x00\x00\x00\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000280)={[{@redirect_dir_nofollow}, {@metacopy_on}, {@uuid_on}], [{@smackfshat}, {@measure}, {@dont_hash}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x27}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'max'}}]}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) pipe2$9p(&(0x7f00000003c0), 0x84000) socket$inet6_udplite(0xa, 0x2, 0x88) getuid() r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x5b, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0xf150, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x406800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022070000a6751c0000000000"], 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x40, 0x10, 0x6c, {0x6c, 0x1, "f4ce34538562fe3dd142f773672be9545c85910a1f4cb2b78cb62b164b5a92dfacab6bafac0c96e6417daf2b67b4c291308ffc4430cad31e9272c868b4ff010c972867208c4975ac65bc22f73365c4194e67844865802a5f080fad2e496a18af5738909f72b3c8641de1"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf3, 0x60, 0x8, 0x7, "8c331c03", "28d3b642"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x4, 0x47, 0x9, 0xa, 0xfff}}}, &(0x7f0000000d40)={0x84, &(0x7f0000001100)={0x20, 0xf, 0xd1, "89b9d21afa75d7831dd91684339ec03d924f574c1e0278e962d9ceeb57993966cd4e2f0be531e2ab91f943056f9446647895277fc87994073b87984bc3d8bb0f9dc28db9e03a2b1289915a08679bcbe47f5c06bb0a0f3f93bedcb822a8063d18989e480eaad28247517d684e78e5868eae0f5f90797752acc385ddc8db21e282b8ffe9474a70a3cd384af880a6c39358fba19c1a263405253ebf93e937c4542b99bfc088e1c251ebca576f090d4acb5592875345df0fbaf07ff7d3e06bbd0b75b767f6bfd57bb37cbe918cadaa7404dffa"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xd2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x73985d7ccd881356, 0x2}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0xb, 0x2, '\b\x00'}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b80)={0x40, 0x13, 0x6}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "29e4"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x4}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f0000000380)=ANY=[], 0x22) ioctl$KVM_SET_NR_MMU_PAGES(r10, 0xae44, 0x4) 126.199347ms ago: executing program 0 (id=3633): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}]}}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000001c40)=0x1) (async) read$FUSE(r2, &(0x7f0000003cc0)={0x2020}, 0x2020) (async) ioctl$PPPIOCSMRU1(r7, 0x40047452, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x7fffffff) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0x9, 0x6, 0x5, 0x81}, 0x37, [0x2067c000, 0x2, 0x1, 0xd5d, 0xe, 0x7, 0x9, 0x3, 0x7, 0x0, 0x4, 0x8, 0x8, 0x2, 0x8, 0x9e, 0x2, 0x7, 0x2, 0x8, 0xffffffff, 0x7, 0x0, 0x2, 0x1, 0x8b5, 0x3, 0x2, 0x4, 0x7, 0x4, 0x4, 0x4, 0x4, 0x8, 0x9, 0x1c, 0xffc, 0x2, 0x540, 0x1, 0x3, 0x7, 0x7c, 0xa77, 0xfffffffb, 0x7, 0x7, 0xefcd, 0x64d, 0x200, 0x7ff, 0x2, 0x95, 0x6, 0x3, 0x8, 0x1, 0x5, 0x8, 0x7ff, 0xc, 0xf, 0x401], [0x2, 0x5, 0x8, 0xa, 0x80, 0x7fff, 0x400000, 0x1000, 0x0, 0xa458, 0xfffffff9, 0x2, 0x7, 0x8, 0x2, 0xfffffffd, 0x400, 0x8, 0x6, 0x18, 0x3, 0x4, 0x3, 0x4c9d, 0x3, 0x8, 0x101, 0x0, 0xd, 0x8, 0x5, 0x4, 0x5, 0xfff, 0x8813, 0x0, 0x0, 0x2, 0x6, 0x5, 0x6f, 0x4, 0xd426, 0x6, 0x0, 0x400, 0x4, 0x5, 0x9, 0x3, 0x0, 0xa0, 0x1, 0x6, 0x5, 0x9, 0x1, 0x9, 0x7, 0x1, 0x1, 0x2, 0x0, 0x5], [0x43, 0x81, 0x3, 0x1, 0x8, 0x60, 0x2, 0x200, 0x3, 0x1, 0x9, 0x7, 0x6, 0x4, 0xc5d2, 0x7, 0xd, 0x10000, 0xfffffff9, 0x8000, 0x7f, 0x7fffffff, 0x4, 0x675, 0x1, 0x6, 0x8b7, 0xfffffffe, 0xfd, 0x0, 0x9, 0x4, 0xffffffff, 0x81, 0xd8b7, 0x1447, 0x5, 0x6, 0xd1c, 0x9, 0x400, 0x7, 0x29243924, 0x8, 0x3, 0x9, 0x6, 0xe, 0x0, 0xfffffff7, 0x9, 0x78029545, 0x5, 0x1000, 0x8801, 0x8, 0x0, 0x100, 0x80000000, 0xb, 0x80000001, 0x7, 0xd, 0x3], [0x4, 0x8, 0x7f, 0x7ff, 0x3, 0x3, 0x3, 0x10000, 0x4, 0x2, 0x10, 0x9, 0x9, 0x4, 0x4, 0x200, 0xbb7, 0x6, 0x10, 0x3, 0x6, 0x0, 0x3, 0x9, 0xfffffff0, 0x200, 0xd10c, 0x5, 0xbe6f, 0xf62e, 0x9, 0x3, 0x1, 0x401, 0x5, 0x8000, 0xe2ee, 0x3f, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0xfd4, 0x0, 0x1, 0xffffffff, 0x31a, 0x4e, 0x5, 0x2549, 0x8, 0x1, 0x6, 0xc, 0x7fff, 0x5, 0x4a, 0x5, 0x8001, 0x3ff00000, 0xfff, 0x0, 0x81]}, 0x45c) (async) sendfile(r3, r2, 0x0, 0x80000000) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xffff1000) 3.97574ms ago: executing program 0 (id=3634): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x8000, 0xff, 0x5, 0x0, 0xa, "35975345b6f5f1c38a56e12f773499fcea6eca"}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x40, &(0x7f0000000000)=0x3d, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) 552.11µs ago: executing program 0 (id=3635): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030"], 0x88}, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, 0x100) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = eventfd2(0x8001, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r8, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r3, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030"], 0x88}, 0x0) (async) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$unix(r6, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) (async) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) (async) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, 0x100) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd2(0x8001, 0x800) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r8, 0x2}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 0s ago: executing program 3 (id=3636): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x20040840) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000100)={[{@verity_require, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000100)={[{@verity_require, 0x3a}], [], 0x2f}) syz_clone(0x20109080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x20109080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[], 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) ptrace(0x10, r2) (async) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x6, 0x17) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000071190100000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000400000000000000090000000000000000007f423cc73c00000000000000000000000000000000000000aaf1d6b929"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x8040) (async) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x8040) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(r6, 0xffffffffffffffff, 0x4) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x6, 0xa, 0x20, 0x0, 0x32}, {0x0, 0x200000004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x1, 0x0, 0x0, 0xfffffffd}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x6, 0xa, 0x20, 0x0, 0x32}, {0x0, 0x200000004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x1, 0x0, 0x0, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0xf8) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0xf8) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): d): Error reading RX_CTL register:ffffff92 [ 161.431600][ T558] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffe0 [ 161.443226][ T558] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 161.661156][ T36] audit: type=1400 audit(1756783550.217:1937): avc: denied { read } for pid=6988 comm="syz.2.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.331109][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.331164][ T368] Bluetooth: hci0: command 0x1003 tx timeout [ 163.372215][ T36] audit: type=1400 audit(1756783551.927:1938): avc: denied { read } for pid=7013 comm="syz.0.2208" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.393605][ T36] audit: type=1400 audit(1756783551.927:1939): avc: denied { open } for pid=7013 comm="syz.0.2208" path="/363/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.661100][ T669] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 163.812478][ T669] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.822877][ T669] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.833033][ T669] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.842433][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.850537][ T669] usb 1-1: SerialNumber: syz [ 164.057264][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.066135][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.074385][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.083426][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.092065][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.100736][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.109477][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.118713][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.126902][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.135687][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.150306][ T669] usb 1-1: USB disconnect, device number 57 [ 164.161642][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.204317][ T36] audit: type=1400 audit(1756783552.757:1940): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.227845][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.236770][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.659263][ T7027] rust_binder: 1122: no such ref 0 [ 164.665084][ T7027] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 164.672329][ T7027] rust_binder: 1122: no such ref 2 [ 164.677692][ T7027] rust_binder: 1122: no such ref 2 [ 164.721725][ T7036] ªªªªª$f: renamed from bridge_slave_0 (while UP) [ 164.745825][ T36] audit: type=1400 audit(1756783553.297:1941): avc: denied { write } for pid=7038 comm="syz.0.2217" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.786306][ T7043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.787274][ T7043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.798528][ T7043] rust_binder: 194: no such ref 1 [ 164.810252][ T7043] rust_binder: Write failure EINVAL in pid:194 [ 164.885350][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.900448][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.009721][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 165.222257][ T7054] 9pnet: Could not find request transport: xen [ 166.103592][ T7063] overlayfs: failed to resolve './file0': -2 [ 166.424373][ T36] audit: type=1326 audit(1756783554.977:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960078ebe9 code=0x7fc00000 [ 167.600238][ T7123] 9pnet_fd: Insufficient options for proto=fd [ 167.902933][ T7128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.903267][ T7128] SELinux: failed to load policy [ 167.930169][ T7130] serio: Serial port ttyS3 [ 169.280859][ T36] audit: type=1400 audit(1756783557.827:1943): avc: denied { bind } for pid=7146 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.309384][ T36] audit: type=1400 audit(1756783557.857:1944): avc: denied { audit_write } for pid=7150 comm="syz.0.2260" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.331857][ T36] audit: type=1107 audit(1756783557.857:1945): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.385363][ T7154] overlayfs: missing 'lowerdir' [ 169.601084][ T338] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 169.741079][ T338] usb 1-1: device descriptor read/64, error -71 [ 169.808116][ T7163] /dev/rnullb0: Can't open blockdev [ 169.917708][ T7179] netlink: 'syz.3.2270': attribute type 4 has an invalid length. [ 169.925717][ T7179] netlink: 'syz.3.2270': attribute type 6 has an invalid length. [ 169.933568][ T7179] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2270'. [ 169.944156][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'. [ 169.975095][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.983689][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.994093][ T338] usb 1-1: device descriptor read/64, error -71 [ 170.008533][ T7193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7193 comm=syz.2.2275 [ 170.021672][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 170.231073][ T338] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 170.361093][ T338] usb 1-1: device descriptor read/64, error -71 [ 170.601087][ T338] usb 1-1: device descriptor read/64, error -71 [ 170.609899][ T7215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.677401][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.689565][ T7229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.691656][ T7229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 170.696309][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.717845][ T7216] bridge_slave_0: entered allmulticast mode [ 170.724262][ T338] usb usb1-port1: attempt power cycle [ 170.730240][ T7216] bridge_slave_0: entered promiscuous mode [ 170.737065][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.744396][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.751877][ T7216] bridge_slave_1: entered allmulticast mode [ 170.758100][ T36] audit: type=1400 audit(1756783559.307:1946): avc: denied { create } for pid=7232 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 170.778130][ T7216] bridge_slave_1: entered promiscuous mode [ 170.838818][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.845928][ T7216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.853299][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.860609][ T7216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.883035][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.890493][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.900863][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.907987][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.917206][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.924407][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.953732][ T7216] veth0_vlan: entered promiscuous mode [ 170.965667][ T7216] veth1_macvtap: entered promiscuous mode [ 171.071199][ T338] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 171.102332][ T338] usb 1-1: device descriptor read/8, error -71 [ 171.146601][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2295'. [ 171.203243][ T7263] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 171.230537][ T7265] 9pnet_fd: Insufficient options for proto=fd [ 171.242149][ T338] usb 1-1: device descriptor read/8, error -71 [ 171.341571][ T7274] /dev/loop0: Can't lookup blockdev [ 171.481163][ T338] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 171.502228][ T338] usb 1-1: device descriptor read/8, error -71 [ 171.547533][ T7295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.548151][ T7295] rust_binder: Error while translating object. [ 171.554948][ T7295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 171.561272][ T7295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237 [ 171.632173][ T338] usb 1-1: device descriptor read/8, error -71 [ 171.704965][ T7316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.752240][ T338] usb usb1-port1: unable to enumerate USB device [ 171.759708][ T7322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 171.766049][ T7322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 171.775920][ T7323] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2319'. [ 171.953008][ T7341] overlayfs: failed to clone upperpath [ 172.092581][ T7345] tipc: Started in network mode [ 172.097566][ T7345] tipc: Node identity 72cbaf152d1b, cluster identity 4711 [ 172.105117][ T7345] tipc: Enabled bearer , priority 0 [ 172.117135][ T7345] tipc: Disabling bearer [ 172.148613][ T7350] netlink: 'syz.4.2328': attribute type 19 has an invalid length. [ 172.156732][ T7350] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2328'. [ 172.167715][ T7350] __vm_enough_memory: pid: 7350, comm: syz.4.2328, bytes: 18014402804453376 not enough memory for the allocation [ 172.321311][ T31] rust_binder: 7353: removing orphan mapping 8:8 [ 172.389601][ T7364] /dev/rnullb0: Can't open blockdev [ 172.624965][ T7384] netlink: 'syz.2.2337': attribute type 4 has an invalid length. [ 172.798959][ T7408] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 172.811471][ T7408] /dev/rnullb0: Can't open blockdev [ 172.929925][ T7417] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 172.929958][ T7417] rust_binder: Error while translating object. [ 172.943427][ T7417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.951072][ T7417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 173.012214][ T7423] rust_binder: Error while translating object. [ 173.023060][ T7423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 173.029750][ T7423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 173.044607][ T7423] /dev/rnullb0: Can't open blockdev [ 173.066324][ T7425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.073708][ T7425] rust_binder: Error while translating object. [ 173.073752][ T7425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.080005][ T7425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 173.245754][ T7436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 173.255862][ T7436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1180 [ 173.315228][ T7444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.376662][ T36] audit: type=1400 audit(1756783561.927:1947): avc: denied { execute } for pid=7443 comm="syz.0.2358" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.377384][ T7448] rust_binder: 7445 RLIMIT_NICE not set [ 173.431143][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.592373][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.603580][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.613689][ T31] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 173.622791][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.631882][ T31] usb 5-1: config 0 descriptor?? [ 173.753634][ T7454] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 173.761529][ T7454] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2361'. [ 173.783499][ T36] audit: type=1400 audit(1756783562.337:1948): avc: denied { accept } for pid=7455 comm="syz.2.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 174.040057][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.047770][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.055269][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.062930][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.070352][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.077912][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.085447][ T31] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 174.093705][ T31] steelseries 0003:1038:12B6.0014: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 174.146607][ T338] rust_binder: 7443: removing orphan mapping 0:24 [ 174.208417][ T7466] rust_binder: Error while translating object. [ 174.208455][ T7466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 174.214978][ T7466] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 174.224568][ T7466] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1194 [ 174.243470][ T338] rust_binder: 7465: removing orphan mapping 0:24 [ 174.292711][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.303388][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.329958][ T7477] fuse: Unknown parameter 'group0s¥00000000000000000000' [ 174.379541][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 174.444487][ T338] usb 5-1: USB disconnect, device number 2 [ 174.899910][ T7519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.900531][ T7519] rust_binder: Got transaction with invalid offset. [ 174.907392][ T7519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.914135][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 174.924248][ T7519] rust_binder: Error while translating object. [ 174.933509][ T7519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 174.939718][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 174.949726][ T7520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.019194][ T7530] sit0: entered promiscuous mode [ 175.031095][ T338] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 175.034194][ T7530] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 175.046943][ T7530] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2378'. [ 175.130109][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 175.130237][ T36] audit: type=1400 audit(1756783563.677:1949): avc: denied { setattr } for pid=7533 comm="syz.4.2380" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.163239][ T7535] rust_binder: Error while translating object. [ 175.163299][ T7535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 175.169588][ T7535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 175.191402][ T338] usb 1-1: Using ep0 maxpacket: 32 [ 175.197039][ T7538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.206535][ T7538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 175.210202][ T338] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 175.244598][ T338] usb 1-1: config 4 has no interface number 0 [ 175.250768][ T338] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.262810][ T338] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.274782][ T338] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 175.285939][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.298394][ T338] hub 1-1:4.128: USB hub found [ 175.502981][ T338] hub 1-1:4.128: 6 ports detected [ 175.508150][ T338] hub 1-1:4.128: Using single TT (err -22) [ 175.511090][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.515264][ T338] hub 1-1:4.128: insufficient power available to use all downstream ports [ 175.540436][ T7549] sit0: entered promiscuous mode [ 175.551955][ T7549] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 175.561140][ T7549] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2385'. [ 175.618045][ T7556] netlink: 'syz.2.2388': attribute type 4 has an invalid length. [ 175.621753][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.636956][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.672461][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 175.680439][ T31] usb 5-1: can't read configurations, error -61 [ 175.694651][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 175.706206][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 175.716917][ T7582] futex_wake_op: syz.2.2394 tries to shift op by -1; fix this program [ 175.770001][ T7590] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2398'. [ 175.779600][ T7590] binder: Unknown parameter 'fscontext?}' [ 175.798442][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.807241][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.817562][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.826163][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.828736][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.982797][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 175.990591][ T31] usb 5-1: can't read configurations, error -61 [ 175.997433][ T31] usb usb5-port1: attempt power cycle [ 176.005161][ T338] usb 1-1: USB disconnect, device number 62 [ 176.341129][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.359743][ T7613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.367287][ T7613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.367292][ T7615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 176.382409][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 176.399476][ T31] usb 5-1: can't read configurations, error -61 [ 176.453844][ T7629] tipc: Started in network mode [ 176.458820][ T7629] tipc: Node identity 9ec01b09b337, cluster identity 4711 [ 176.466357][ T7629] tipc: Enabled bearer , priority 0 [ 176.473776][ T7630] tipc: Disabling bearer [ 176.519794][ T36] audit: type=1400 audit(1756783565.067:1950): avc: denied { lock } for pid=7633 comm="syz.3.2415" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.540069][ T7635] kvm: kvm [7632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 176.544603][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.560561][ T36] audit: type=1400 audit(1756783565.067:1951): avc: denied { map } for pid=7633 comm="syz.3.2415" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.560661][ T7635] kvm: kvm [7632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 176.597384][ T7641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.602969][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 176.619541][ T31] usb 5-1: can't read configurations, error -61 [ 176.626358][ T31] usb usb5-port1: unable to enumerate USB device [ 176.653691][ T7635] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 176.824729][ T7651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.962071][ T7668] rust_binder: Write failure EFAULT in pid:1218 [ 177.168642][ T7683] netlink: 'syz.2.2431': attribute type 14 has an invalid length. [ 177.211098][ T669] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 177.362151][ T669] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 177.371424][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.380622][ T669] usb 1-1: config 0 descriptor?? [ 177.598470][ T7668] tipc: Enabling of bearer rejected, failed to enable media [ 177.606844][ T36] audit: type=1400 audit(1756783566.147:1952): avc: denied { create } for pid=7667 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.628357][ T669] usb 1-1: string descriptor 0 read error: -71 [ 177.633943][ T36] audit: type=1400 audit(1756783566.147:1953): avc: denied { write } for pid=7667 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.636387][ T669] usbhid 1-1:0.0: can't add hid device: -71 [ 177.657192][ T36] audit: type=1400 audit(1756783566.147:1954): avc: denied { read } for pid=7667 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.662425][ T669] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.682701][ T36] audit: type=1400 audit(1756783566.177:1955): avc: denied { ioctl } for pid=7667 comm="syz.0.2424" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.701289][ T669] usb 1-1: USB disconnect, device number 63 [ 177.788211][ T7696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64320 sclass=netlink_route_socket pid=7696 comm=syz.2.2435 [ 177.811996][ T36] audit: type=1400 audit(1756783566.367:1956): avc: denied { execute } for pid=7695 comm="syz.2.2435" path="/132/cpu.stat" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.864870][ T36] audit: type=1400 audit(1756783566.417:1957): avc: denied { ioctl } for pid=7699 comm="syz.2.2437" path="socket:[33600]" dev="sockfs" ino=33600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.892372][ T36] audit: type=1400 audit(1756783566.447:1958): avc: denied { mounton } for pid=7699 comm="syz.2.2437" path="/134/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.892418][ T7700] overlay: Unknown parameter 'appraise_type' [ 177.957058][ T7702] tmpfs: Unknown parameter '18446744073709551615' [ 177.994804][ T7706] tipc: Started in network mode [ 178.000337][ T7706] tipc: Node identity 100, cluster identity 4711 [ 178.011103][ T7706] tipc: Node number set to 256 [ 178.135787][ T7718] 9pnet_fd: Insufficient options for proto=fd [ 178.329389][ T7739] Invalid logical block size (-23228) [ 178.337812][ T7739] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 178.337839][ T7739] rust_binder: Error while translating object. [ 178.350307][ T7739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.357846][ T7739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 178.645970][ T7750] rust_binder: Error while translating object. [ 178.655166][ T7750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 178.661439][ T7750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 178.698104][ T7755] SELinux: policydb magic number 0x66667830 does not match expected magic number 0xf97cff8c [ 178.717956][ T7755] SELinux: failed to load policy [ 178.825932][ T7755] SELinux: policydb version -483179959 does not match my version range 15-33 [ 178.835085][ T7755] SELinux: failed to load policy [ 178.956338][ T7763] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.988827][ T7763] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 179.054074][ T7769] rust_binder: 382: no such ref 1 [ 179.067643][ T7769] rust_binder: 382: no such ref 1 [ 179.072805][ T7769] rust_binder: 382: no such ref 16777217 [ 179.078578][ T7769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 179.123496][ T7782] cgroup2: Unknown parameter 'net_cls' [ 179.236928][ T7796] rust_binder: Error while translating object. [ 179.236968][ T7796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.245890][ T7796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 179.315985][ T7802] rust_binder: 7801 RLIMIT_NICE not set [ 179.330702][ T10] rust_binder: 7800: removing orphan mapping 0:4248 [ 179.498835][ T669] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 179.671377][ T669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.679916][ T669] usb 1-1: config index 0 descriptor too short (expected 4310, got 145) [ 179.688550][ T669] usb 1-1: config 193 has too many interfaces: 103, using maximum allowed: 32 [ 179.697964][ T669] usb 1-1: config 193 has an invalid descriptor of length 0, skipping remainder of the config [ 179.708994][ T669] usb 1-1: config 193 has 3 interfaces, different from the descriptor's value: 103 [ 179.723393][ T669] usb 1-1: config 193 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.737310][ T669] usb 1-1: config 193 interface 1 has no altsetting 0 [ 179.746432][ T669] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.755711][ T669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.763993][ T669] usb 1-1: Product: syz [ 179.768491][ T669] usb 1-1: Manufacturer: syz [ 179.773215][ T669] usb 1-1: SerialNumber: syz [ 179.830328][ T559] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.991197][ T559] usb 5-1: no configurations [ 179.995939][ T559] usb 5-1: can't read configurations, error -22 [ 180.036122][ T7798] netlink: 'syz.0.2472': attribute type 4 has an invalid length. [ 180.043981][ T7798] netlink: 3461 bytes leftover after parsing attributes in process `syz.0.2472'. [ 180.060366][ T669] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 180.072540][ T669] snd-usb-audio 1-1:193.0: probe with driver snd-usb-audio failed with error -22 [ 180.086883][ T669] usb 1-1: USB disconnect, device number 64 [ 180.098656][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:193.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.140492][ T559] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.301242][ T559] usb 5-1: no configurations [ 180.303769][ T7835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.305945][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 180.305945][ T7835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 180.305964][ T36] audit: type=1400 audit(1756783568.707:2037): avc: denied { mount } for pid=7834 comm="syz.3.2485" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 180.353034][ T559] usb 5-1: can't read configurations, error -22 [ 180.359645][ T559] usb usb5-port1: attempt power cycle [ 180.414865][ T36] audit: type=1400 audit(1756783568.801:2038): avc: denied { mount } for pid=7840 comm="syz.2.2487" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.489112][ T7846] netlink: 'syz.3.2489': attribute type 2 has an invalid length. [ 180.555398][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2493'. [ 180.575889][ T36] audit: type=1400 audit(1756783568.950:2039): avc: denied { write } for pid=7860 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.600280][ T36] audit: type=1400 audit(1756783568.950:2040): avc: denied { nlmsg_write } for pid=7860 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.625897][ T36] audit: type=1400 audit(1756783568.960:2041): avc: denied { bind } for pid=7860 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.639831][ T7865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 180.649044][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.667472][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.680248][ T36] audit: type=1400 audit(1756783569.053:2042): avc: denied { mount } for pid=7866 comm="syz.2.2497" name="/" dev="incremental-fs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 180.706622][ T7869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2498'. [ 180.718314][ T7869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.732255][ T36] audit: type=1400 audit(1756783569.081:2043): avc: denied { setopt } for pid=7868 comm="syz.0.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.761228][ T36] audit: type=1400 audit(1756783569.090:2044): avc: denied { getopt } for pid=7868 comm="syz.0.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.793471][ T559] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.814943][ T559] usb 5-1: no configurations [ 180.819627][ T559] usb 5-1: can't read configurations, error -22 [ 180.974837][ T559] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.033239][ T559] usb 5-1: no configurations [ 181.057455][ T559] usb 5-1: can't read configurations, error -22 [ 181.088521][ T559] usb usb5-port1: unable to enumerate USB device [ 181.111726][ T36] audit: type=1400 audit(1756783569.455:2045): avc: denied { create } for pid=7875 comm="syz.0.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.131289][ T36] audit: type=1400 audit(1756783569.455:2046): avc: denied { write } for pid=7875 comm="syz.0.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.423182][ T7893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.084888][ T7916] raw_sendmsg: syz.0.2513 forgot to set AF_INET. Fix it! [ 182.256655][ T7930] netlink: 'syz.0.2518': attribute type 16 has an invalid length. [ 182.264854][ T7930] netlink: 'syz.0.2518': attribute type 3 has an invalid length. [ 182.272666][ T7930] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 182.280841][ T7930] netlink: 64030 bytes leftover after parsing attributes in process `syz.0.2518'. [ 182.392937][ T7964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.396050][ T7964] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2525'. [ 182.414226][ T7964] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 182.461559][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 182.822548][ T7981] fuse: Bad value for 'fd' [ 182.847687][ T7984] syz.4.2531: attempt to access beyond end of device [ 182.847687][ T7984] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 182.861340][ T559] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 182.869587][ T7984] FAT-fs (loop4): unable to read boot sector [ 182.878685][ T7984] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 182.878711][ T7984] rust_binder: Error while translating object. [ 182.887825][ T7984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.894358][ T7984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 182.978402][ T7986] /dev/rnullb0: Can't open blockdev [ 183.039751][ T559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 183.051172][ T559] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 183.060400][ T559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.070662][ T559] usb 1-1: config 0 descriptor?? [ 183.080136][ T7976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 183.092050][ T7989] rust_binder: Error in use_page_slow: ESRCH [ 183.092078][ T7989] rust_binder: use_range failure ESRCH [ 183.098176][ T7989] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 183.104619][ T7989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 183.112785][ T7989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:130 [ 183.229564][ T7977] overlayfs: statfs failed on './file0' [ 183.284051][ T7992] netlink: 'syz.3.2534': attribute type 27 has an invalid length. [ 183.305783][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.309485][ T559] hid-generic 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 183.313516][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.336451][ T669] usb 1-1: USB disconnect, device number 65 [ 183.363728][ T7999] fido_id[7999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.464840][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.473731][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.826039][ T8022] cgroup: fork rejected by pids controller in /syz0 [ 184.046058][ T8160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8160 comm=syz.0.2549 [ 184.075926][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2550'. [ 184.149034][ T8176] rust_binder: Write failure EFAULT in pid:1438 [ 184.247549][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.314247][ T8200] rust_binder: Error in use_page_slow: ESRCH [ 184.322204][ T8200] rust_binder: use_range failure ESRCH [ 184.323699][ T8194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1447 [ 184.328637][ T8200] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 184.343694][ T8200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 184.397939][ T8208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.408839][ T8200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:439 [ 184.418024][ T8208] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 184.450046][ T7464] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 184.559937][ T8231] netlink: 'syz.0.2570': attribute type 27 has an invalid length. [ 184.585766][ T8233] netlink: 'syz.3.2571': attribute type 2 has an invalid length. [ 184.673558][ T8239] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 184.971623][ T8242] tipc: Enabling of bearer rejected, failed to enable media [ 185.399563][ T8285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 185.406344][ T669] rust_binder: 8284: removing orphan mapping 0:24 [ 185.423180][ T559] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 185.444554][ T669] rust_binder: 0: removing orphan mapping 24:1112 [ 185.562175][ T559] usb 1-1: device descriptor read/64, error -71 [ 185.640415][ T8293] PM: Enabling pm_trace changes system date and time during resume. [ 185.640415][ T8293] PM: Correct system time has to be restored manually after resume. [ 185.657564][ T8294] PM: Enabling pm_trace changes system date and time during resume. [ 185.657564][ T8294] PM: Correct system time has to be restored manually after resume. [ 185.681268][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 185.681287][ T36] audit: type=1400 audit(1756783580.736:2101): avc: denied { getopt } for pid=8296 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.746651][ T8299] incfs: Error accessing: ./file0. [ 185.752008][ T8299] incfs: mount failed -20 [ 185.757331][ T8301] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2594'. [ 185.757329][ T8299] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2594'. [ 185.848054][ T8309] __vm_enough_memory: pid: 8309, comm: syz.4.2596, bytes: 4611686022722355200 not enough memory for the allocation [ 185.860567][ T559] usb 1-1: device descriptor read/64, error -71 [ 185.868489][ T36] audit: type=1400 audit(1756783580.904:2102): avc: denied { read } for pid=8308 comm="syz.4.2596" path="socket:[36587]" dev="sockfs" ino=36587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.904808][ T8311] random: crng reseeded on system resumption [ 185.917572][ T36] audit: type=1400 audit(1756783580.932:2103): avc: denied { ioctl } for pid=8308 comm="syz.4.2596" path="socket:[36587]" dev="sockfs" ino=36587 ioctlcmd=0x5400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.944845][ T36] audit: type=1400 audit(1756783580.942:2104): avc: denied { write } for pid=8310 comm="syz.3.2597" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.968906][ T36] audit: type=1400 audit(1756783580.942:2105): avc: denied { open } for pid=8310 comm="syz.3.2597" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.995107][ T36] audit: type=1400 audit(1756783580.988:2106): avc: denied { unmount } for pid=8310 comm="syz.3.2597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.021497][ T8317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.082568][ T8318] rust_binder: Error in use_page_slow: ESRCH [ 186.082596][ T8318] rust_binder: use_range failure ESRCH [ 186.088724][ T8318] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 186.094335][ T8318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 186.102255][ T8318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:176 [ 186.129114][ T559] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 186.278999][ T559] usb 1-1: device descriptor read/64, error -71 [ 186.535474][ T559] usb 1-1: device descriptor read/64, error -71 [ 186.653718][ T559] usb usb1-port1: attempt power cycle [ 186.910545][ T36] audit: type=1400 audit(1756783581.886:2107): avc: denied { append } for pid=8330 comm="syz.4.2604" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.975219][ T36] audit: type=1400 audit(1756783581.942:2108): avc: denied { create } for pid=8339 comm="syz.3.2607" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.011705][ T36] audit: type=1400 audit(1756783581.970:2109): avc: denied { write } for pid=8339 comm="syz.3.2607" name="file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.024802][ T8343] 9pnet_fd: Insufficient options for proto=fd [ 187.048819][ T559] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 187.061157][ T36] audit: type=1400 audit(1756783581.970:2110): avc: denied { open } for pid=8339 comm="syz.3.2607" path="/164/file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.082928][ T559] usb 1-1: device descriptor read/8, error -71 [ 187.200111][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 187.242384][ T559] usb 1-1: device descriptor read/8, error -71 [ 187.508768][ T559] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 187.531215][ T559] usb 1-1: device descriptor read/8, error -71 [ 187.670374][ T559] usb 1-1: device descriptor read/8, error -71 [ 187.786958][ T559] usb usb1-port1: unable to enumerate USB device [ 188.007294][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2614'. [ 188.118342][ T8372] netlink: 'syz.4.2617': attribute type 27 has an invalid length. [ 188.128614][ T8372] sit0: left promiscuous mode [ 188.165444][ T8371] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 188.173967][ T8371] rust_binder: 201: no such ref 1 [ 188.262058][ T8384] rust_binder: Error while translating object. [ 188.262086][ T8384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 188.268509][ T8384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:205 [ 188.361314][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2622'. [ 188.429599][ T8396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.845831][ T669] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 189.038176][ T669] usb 1-1: Using ep0 maxpacket: 16 [ 189.044696][ T669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.051926][ T669] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 189.061132][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.069762][ T669] usb 1-1: config 0 descriptor?? [ 189.080947][ T7464] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 189.241324][ T7464] usb 5-1: Invalid ep0 maxpacket: 32 [ 189.380377][ T7464] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 189.505088][ T669] hid (null): global environment stack underflow [ 189.511724][ T669] hid (null): unknown global tag 0xd [ 189.517599][ T669] hid (null): unknown global tag 0xc [ 189.524623][ T669] hid (null): report_id 51467 is invalid [ 189.534847][ T669] hid (null): unknown global tag 0xe [ 189.540391][ T669] hid (null): unknown global tag 0xe [ 189.540808][ T7464] usb 5-1: Invalid ep0 maxpacket: 32 [ 189.546170][ T669] hid (null): unknown global tag 0xc [ 189.556922][ T7464] usb usb5-port1: attempt power cycle [ 189.557022][ T669] hid (null): report_id 0 is invalid [ 189.721356][ T8396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1464 [ 189.925814][ T7464] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 189.958415][ T7464] usb 5-1: Invalid ep0 maxpacket: 32 [ 190.097013][ T7464] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 190.118882][ T7464] usb 5-1: Invalid ep0 maxpacket: 32 [ 190.124456][ T7464] usb usb5-port1: unable to enumerate USB device [ 191.396958][ T8514] incfs: Options parsing error. -22 [ 191.402286][ T8514] incfs: mount failed -22 [ 191.484515][ T8516] overlayfs: failed to clone upperpath [ 191.561321][ T8518] 9pnet_fd: Insufficient options for proto=fd [ 191.593238][ T338] usb 1-1: USB disconnect, device number 70 [ 191.594257][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 191.594278][ T36] audit: type=1400 audit(190.674:2124): avc: denied { getopt } for pid=8521 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.636862][ T8523] overlayfs: failed to clone lowerpath [ 191.768760][ T8529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.769271][ T36] audit: type=1400 audit(190.843:2125): avc: denied { map } for pid=8527 comm="syz.0.2670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 191.799659][ T36] audit: type=1400 audit(190.843:2126): avc: denied { read write } for pid=8527 comm="syz.0.2670" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 191.828171][ T8529] rust_binder: Error in use_page_slow: ESRCH [ 191.828191][ T8529] rust_binder: use_range failure ESRCH [ 191.834316][ T8529] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 191.839915][ T8529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 191.848089][ T8529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1469 [ 192.033157][ T36] audit: type=1400 audit(191.095:2127): avc: denied { ioctl } for pid=8531 comm="syz.4.2672" path="socket:[38117]" dev="sockfs" ino=38117 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.146797][ T36] audit: type=1400 audit(191.189:2128): avc: denied { listen } for pid=8542 comm="syz.3.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.184262][ T36] audit: type=1400 audit(191.235:2129): avc: denied { getopt } for pid=8547 comm="syz.3.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.237633][ T36] audit: type=1400 audit(191.282:2130): avc: denied { create } for pid=8549 comm="syz.2.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.449896][ T338] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.610315][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 192.616498][ T338] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.625452][ T338] usb 5-1: config 179 has no interface number 0 [ 192.632613][ T338] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 192.643984][ T338] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 192.655438][ T338] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.666797][ T338] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 192.676974][ T338] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.690390][ T338] usb 5-1: config 179 interface 65 has no altsetting 0 [ 192.697563][ T338] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 192.706864][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.719477][ T338] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input50 [ 192.732034][ T36] audit: type=1400 audit(191.740:2131): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=657 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.754277][ T36] audit: type=1400 audit(191.740:2132): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=657 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.888060][ T8578] overlayfs: failed to clone upperpath [ 192.935605][ T7464] usb 5-1: USB disconnect, device number 16 [ 192.935696][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 192.956316][ T36] audit: type=1400 audit(191.955:2133): avc: denied { ioctl } for pid=8581 comm="syz.2.2690" path="socket:[37316]" dev="sockfs" ino=37316 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.962403][ T7464] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 193.087770][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 193.106728][ T8611] binder: Unknown parameter 'stays' [ 193.339100][ T8623] rust_binder: Write failure EFAULT in pid:1495 [ 193.511217][ T8629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 193.517669][ T8629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:237 [ 193.573941][ T8636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 193.605107][ T7464] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 193.765441][ T7464] usb 1-1: Using ep0 maxpacket: 32 [ 193.778644][ T7464] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.788863][ T8647] tmpfs: Unknown parameter 'inP‰eŠ /€¼šÀsE¶Úå…þm½S' [ 193.790083][ T7464] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.809894][ T7464] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 193.819720][ T7464] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 193.828541][ T7464] usb 1-1: Product: syz [ 193.833392][ T7464] usb 1-1: Manufacturer: syz [ 193.852174][ T7464] hub 1-1:4.0: USB hub found [ 194.115828][ T7464] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 194.150975][ T7464] usb 1-1: USB disconnect, device number 71 [ 194.183376][ T559] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.298922][ T8672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1513 [ 194.365524][ T559] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 194.385859][ T559] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 194.402478][ T559] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.417487][ T559] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 194.439459][ T559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.447701][ T559] usb 5-1: Product: syz [ 194.462754][ T559] usb 5-1: Manufacturer: syz [ 194.467561][ T559] usb 5-1: SerialNumber: syz [ 194.473977][ T559] usb 5-1: config 0 descriptor?? [ 194.479501][ T8678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1519 [ 194.497509][ T8680] input: syz0 as /devices/virtual/input/input51 [ 194.583094][ T8682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.584351][ T8682] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 194.694223][ T8649] /dev/rnullb0: Can't open blockdev [ 194.709110][ T8688] fuseblk: Unknown parameter 'f›' [ 194.714360][ T8686] fuseblk: Unknown parameter 'f›' [ 194.720344][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.737359][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.748082][ T559] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 194.761895][ T328] ip6gretap0: left allmulticast mode [ 194.767970][ T328] ip6gretap0: left promiscuous mode [ 194.768163][ T559] usb 5-1: No valid video chain found. [ 194.782875][ T328] bridge0: port 3(ip6gretap0) entered disabled state [ 194.808703][ T328] bridge_slave_1: left allmulticast mode [ 194.816080][ T328] bridge_slave_1: left promiscuous mode [ 194.822225][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.831078][ T328] ªªªªª$: left allmulticast mode [ 194.836606][ T328] ªªªªª$: left promiscuous mode [ 194.841882][ T328] bridge0: port 1(ªªªªª$) entered disabled state [ 194.865720][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.902534][ T8699] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 194.935579][ T8703] rust_binder: Failed to allocate buffer. len:66416, is_oneway:true [ 194.935615][ T8703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 194.943922][ T8703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1540 [ 194.960867][ T328] veth1_macvtap: left promiscuous mode [ 194.969170][ T8649] rust_binder: Write failure EINVAL in pid:251 [ 194.977410][ T328] veth0_vlan: left promiscuous mode [ 195.018159][ T8711] KVM: debugfs: duplicate directory 8711-6 [ 195.430872][ T8723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.431086][ T8723] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 196.580265][ T8748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2743'. [ 196.597599][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 196.994106][ T669] usb 5-1: USB disconnect, device number 17 [ 197.010766][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 197.010784][ T36] audit: type=1400 audit(195.742:2154): avc: denied { ioctl } for pid=8773 comm="syz.3.2751" path="socket:[38574]" dev="sockfs" ino=38574 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.048805][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.048814][ T368] Bluetooth: hci0: command 0x1003 tx timeout [ 197.221336][ T8779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25706 sclass=netlink_route_socket pid=8779 comm=syz.4.2753 [ 197.234958][ T8779] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 197.235110][ T8779] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 197.592161][ T8783] netlink: 'syz.0.2754': attribute type 4 has an invalid length. [ 197.857808][ T8789] x_tables: duplicate entry at hook 2 [ 197.876551][ T36] audit: type=1400 audit(196.556:2155): avc: denied { shutdown } for pid=8790 comm="syz.3.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.070097][ T36] audit: type=1400 audit(196.733:2156): avc: denied { sqpoll } for pid=8803 comm="syz.4.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.112196][ T8831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.113000][ T36] audit: type=1400 audit(196.771:2157): avc: denied { getopt } for pid=8830 comm="syz.4.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.250204][ T8833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=8833 comm=syz.4.2763 [ 198.268398][ T8833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.323409][ T8835] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 199.212908][ T36] audit: type=1400 audit(197.799:2158): avc: denied { ioctl } for pid=8865 comm="syz.4.2774" path="socket:[39092]" dev="sockfs" ino=39092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.245629][ T36] audit: type=1400 audit(197.809:2159): avc: denied { write } for pid=8865 comm="syz.4.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.328969][ T8874] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 199.464007][ T8876] 9pnet_fd: Insufficient options for proto=fd [ 199.548551][ T36] audit: type=1400 audit(198.108:2160): avc: denied { create } for pid=8899 comm="syz.2.2787" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 199.670568][ T8919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2793'. [ 199.681033][ T8919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2793'. [ 199.701204][ T7464] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.734364][ T8927] netlink: 'syz.2.2796': attribute type 6 has an invalid length. [ 199.742302][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 199.861622][ T7464] usb 5-1: Using ep0 maxpacket: 8 [ 199.868520][ T7464] usb 5-1: config 8 has an invalid interface number: 112 but max is 0 [ 199.876908][ T7464] usb 5-1: config 8 has an invalid interface number: 112 but max is 0 [ 199.885786][ T7464] usb 5-1: config 8 has no interface number 0 [ 199.891995][ T7464] usb 5-1: config 8 interface 112 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 199.903081][ T7464] usb 5-1: config 8 interface 112 altsetting 15 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 199.914188][ T7464] usb 5-1: config 8 interface 112 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 199.927398][ T7464] usb 5-1: config 8 interface 112 altsetting 22 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 199.938851][ T7464] usb 5-1: config 8 interface 112 altsetting 22 has 3 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.952277][ T7464] usb 5-1: config 8 interface 112 has no altsetting 0 [ 199.959301][ T7464] usb 5-1: config 8 interface 112 has no altsetting 1 [ 199.969120][ T7464] usb 5-1: string descriptor 0 read error: -22 [ 199.975342][ T7464] usb 5-1: Dual-Role OTG device on HNP port [ 199.981566][ T7464] usb 5-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=72.c7 [ 199.990670][ T7464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.104893][ T8937] netlink: 'syz.3.2800': attribute type 4 has an invalid length. [ 200.114328][ T8937] netlink: 'syz.3.2800': attribute type 4 has an invalid length. [ 200.143116][ T36] audit: type=1400 audit(198.669:2161): avc: denied { ioctl } for pid=8938 comm="syz.3.2801" path="socket:[39192]" dev="sockfs" ino=39192 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.216966][ T8886] rust_binder: Got transaction with invalid offset. [ 200.217026][ T8886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.224344][ T8886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 200.234644][ T7464] asix 5-1:8.112 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 200.257349][ T7464] asix 5-1:8.112: probe with driver asix failed with error -71 [ 200.267365][ T7464] usb 5-1: USB disconnect, device number 18 [ 200.704526][ T8945] netlink: 444 bytes leftover after parsing attributes in process `syz.0.2803'. [ 200.714587][ T36] audit: type=1400 audit(199.202:2162): avc: denied { create } for pid=8944 comm="syz.0.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.820647][ T8980] fuseblk: Bad value for 'group_id' [ 200.826080][ T8980] fuseblk: Bad value for 'group_id' [ 200.845852][ T36] audit: type=1400 audit(199.333:2164): avc: denied { read } for pid=8982 comm="syz.0.2816" path="socket:[39240]" dev="sockfs" ino=39240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.042355][ T9003] cgroup: fork rejected by pids controller in /syz3 [ 201.076995][ T9120] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 201.085953][ T9120] rust_binder: 297: no such ref 2 [ 201.091037][ T9120] rust_binder: 297: no such ref 2 [ 201.096432][ T9120] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 201.097488][ T9120] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 201.117903][ T9141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.126749][ T9141] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 201.169150][ T9143] rust_binder: Error while translating object. [ 201.177119][ T9143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.183627][ T9143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 201.478922][ T9163] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 201.540071][ T9169] can: request_module (can-proto-7) failed. [ 201.678547][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 202.129339][ T9195] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.184307][ T9205] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 202.258254][ T9215] overlayfs: failed to clone upperpath [ 202.308321][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 202.388093][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2862'. [ 202.397880][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 202.397897][ T36] audit: type=1326 audit(200.782:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.2.2862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f949178ebe9 code=0x0 [ 202.570983][ T9246] overlayfs: failed to clone upperpath [ 202.578028][ T36] audit: type=1400 audit(200.941:2177): avc: denied { mounton } for pid=9245 comm="syz.3.2865" path="/file0" dev="rootfs" ino=16763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 202.599759][ T36] audit: type=1400 audit(200.950:2178): avc: denied { create } for pid=9245 comm="syz.3.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 202.620344][ T36] audit: type=1400 audit(200.950:2179): avc: denied { sys_admin } for pid=9245 comm="syz.3.2865" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 202.642506][ T36] audit: type=1400 audit(200.950:2180): avc: denied { associate } for pid=9247 comm="syz.3.2865" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 202.728159][ T36] audit: type=1400 audit(201.090:2181): avc: denied { create } for pid=9256 comm="syz.3.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 203.294806][ T558] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.327233][ T9299] tipc: Enabling of bearer rejected, failed to enable media [ 203.455211][ T558] usb 5-1: device descriptor read/64, error -71 [ 203.718949][ T9308] bridge0: entered allmulticast mode [ 203.722651][ T558] usb 5-1: device descriptor read/64, error -71 [ 203.724598][ T9309] bridge0: left allmulticast mode [ 203.784628][ T9323] 9pnet_fd: Insufficient options for proto=fd [ 203.784632][ T9322] 9pnet_fd: Insufficient options for proto=fd [ 203.832413][ T36] audit: type=1400 audit(202.119:2182): avc: denied { bind } for pid=9331 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.922616][ T9344] overlayfs: failed to clone upperpath [ 203.925279][ T36] audit: type=1400 audit(202.203:2183): avc: denied { create } for pid=9341 comm="syz.0.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 203.938258][ T9345] overlayfs: failed to clone upperpath [ 203.956400][ T36] audit: type=1400 audit(202.231:2184): avc: denied { map } for pid=9347 comm="syz.2.2897" path="socket:[40274]" dev="sockfs" ino=40274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.004181][ T36] audit: type=1326 audit(202.278:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.0.2898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f960078ebe9 code=0x0 [ 204.026761][ T558] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 204.171809][ T558] usb 5-1: device descriptor read/64, error -71 [ 204.297772][ T9363] overlayfs: failed to clone upperpath [ 204.428487][ T558] usb 5-1: device descriptor read/64, error -71 [ 204.546229][ T558] usb usb5-port1: attempt power cycle [ 204.823909][ T9370] tipc: Enabling of bearer rejected, failed to enable media [ 204.909751][ T558] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 204.929608][ T9389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2911'. [ 204.942570][ T9389] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2911'. [ 204.943464][ T558] usb 5-1: device descriptor read/8, error -71 [ 204.951842][ T9389] netlink: 'syz.0.2911': attribute type 5 has an invalid length. [ 204.951865][ T9389] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2911'. [ 204.975567][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 205.097405][ T558] usb 5-1: device descriptor read/8, error -71 [ 205.369675][ T558] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.392109][ T558] usb 5-1: device descriptor read/8, error -71 [ 205.531210][ T558] usb 5-1: device descriptor read/8, error -71 [ 205.647823][ T558] usb usb5-port1: unable to enumerate USB device [ 206.063682][ T9414] netlink: 'syz.3.2920': attribute type 12 has an invalid length. [ 206.685168][ T669] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 206.736707][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 206.846770][ T669] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.853610][ T9455] fuse: Unknown parameter 'fÿ0x0000000000000003' [ 206.858455][ T669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.876375][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9455 comm=syz.3.2934 [ 206.876707][ T669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.899224][ T669] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.912513][ T669] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.921908][ T669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.931435][ T669] usb 5-1: config 0 descriptor?? [ 206.986500][ T9467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9467 comm=syz.3.2939 [ 206.999953][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2939'. [ 207.032085][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 207.103088][ T9485] devtmpfs: Unknown parameter 'fuse' [ 207.255278][ T9510] overlayfs: failed to resolve './file1': -2 [ 207.374934][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.383607][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.393335][ T669] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 207.403551][ T669] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 207.413058][ T669] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 207.898544][ T9521] overlayfs: failed to clone upperpath [ 207.939215][ T559] usb 5-1: USB disconnect, device number 23 [ 208.409423][ T9680] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 208.502673][ T9688] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2974'. [ 208.520045][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 208.520059][ T36] audit: type=1400 audit(206.504:2193): avc: denied { listen } for pid=9689 comm="syz.0.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 208.520984][ T9690] 9pnet_fd: p9_fd_create_tcp (9690): problem connecting socket to 127.0.0.1 [ 208.592977][ T9695] netlink: 'syz.4.2976': attribute type 4 has an invalid length. [ 208.614959][ T9700] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 208.624857][ T36] audit: type=1400 audit(206.598:2194): avc: denied { relabelto } for pid=9699 comm="syz.4.2977" name="file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 208.651017][ T36] audit: type=1400 audit(206.598:2195): avc: denied { associate } for pid=9699 comm="syz.4.2977" name="file0" dev="tmpfs" ino=570 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 208.678757][ T36] audit: type=1400 audit(206.626:2196): avc: denied { unlink } for pid=7216 comm="syz-executor" name="file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 208.704825][ T36] audit: type=1400 audit(206.654:2197): avc: denied { unmount } for pid=7216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 208.737433][ T36] audit: type=1400 audit(206.700:2198): avc: denied { create } for pid=9712 comm="syz.4.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 208.774946][ T9720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.774991][ T9720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.775413][ T9721] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 208.781947][ T9720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.831978][ T9727] netlink: 'syz.3.2984': attribute type 4 has an invalid length. [ 209.004944][ T36] audit: type=1400 audit(206.953:2199): avc: denied { relabelfrom } for pid=9742 comm="syz.4.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 209.025239][ T36] audit: type=1400 audit(206.953:2200): avc: denied { relabelto } for pid=9742 comm="syz.4.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 209.306919][ T9756] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 209.315426][ T9756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 209.462832][ T9766] devtmpfs: Unknown parameter 'fuse' [ 209.535095][ T9784] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 210.046503][ T36] audit: type=1400 audit(207.935:2201): avc: denied { setopt } for pid=9810 comm="syz.0.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.333230][ T36] audit: type=1400 audit(208.206:2202): avc: denied { create } for pid=9816 comm="syz.3.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 210.382891][ T9828] /dev/loop0: Can't lookup blockdev [ 210.436926][ T9830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.601723][ T9847] rust_binder: Write failure EFAULT in pid:396 [ 210.621588][ T9849] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9849 comm=syz.4.3026 [ 210.901621][ T9865] netlink: 'syz.0.3031': attribute type 4 has an invalid length. [ 211.670285][ T9897] rust_binder: Error while translating object. [ 211.670341][ T9897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 211.676578][ T9897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:404 [ 211.955633][ T9911] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 212.202878][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 212.407076][ T559] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 212.450754][ T9941] incfs: Error accessing: ./file0. [ 212.460553][ T9941] incfs: mount failed -20 [ 212.569285][ T559] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.577609][ T559] usb 5-1: not running at top speed; connect to a high speed hub [ 212.586321][ T559] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 212.594941][ T559] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 212.603457][ T559] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 212.612667][ T559] usb 5-1: config 129 has no interface number 0 [ 212.618933][ T559] usb 5-1: config 129 has no interface number 1 [ 212.625246][ T559] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.638602][ T559] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 212.650113][ T559] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 212.663418][ T559] usb 5-1: config 129 interface 135 has no altsetting 0 [ 212.670433][ T559] usb 5-1: config 129 interface 5 has no altsetting 0 [ 212.679722][ T559] usb 5-1: string descriptor 0 read error: -22 [ 212.686085][ T559] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 212.695359][ T559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.706909][ T559] usb 5-1: MIDIStreaming interface descriptor not found [ 212.921042][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.930755][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.092288][ T669] usb 5-1: USB disconnect, device number 24 [ 213.107668][ T9944] /dev/loop0: Can't lookup blockdev [ 213.168152][ T9958] overlayfs: failed to clone upperpath [ 213.376565][ T9971] 9pnet_fd: Insufficient options for proto=fd [ 213.713327][ T9998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.714120][ T9998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.721524][ T9998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423 [ 213.883866][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 213.883891][ T36] audit: type=1400 audit(211.525:2207): avc: denied { audit_write } for pid=10009 comm="syz.2.3081" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 213.978016][T10016] rust_binder: Write failure EFAULT in pid:429 [ 214.002094][ T36] audit: type=1326 audit(211.628:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.3085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f949178ebe9 code=0x0 [ 214.268048][ T559] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 214.428458][ T559] usb 5-1: Using ep0 maxpacket: 8 [ 214.434925][ T559] usb 5-1: config index 0 descriptor too short (expected 129, got 36) [ 214.443595][ T559] usb 5-1: config 255 has too many interfaces: 252, using maximum allowed: 32 [ 214.452948][ T559] usb 5-1: config 255 has an invalid descriptor of length 51, skipping remainder of the config [ 214.463861][ T559] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 252 [ 214.474574][ T559] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 214.484128][ T559] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 214.493082][ T559] usb 5-1: Manufacturer: syz [ 214.586703][T10097] veth1: entered allmulticast mode [ 214.593816][ T36] audit: type=1400 audit(212.179:2209): avc: denied { listen } for pid=10096 comm="syz.0.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.613100][ T36] audit: type=1400 audit(212.179:2210): avc: denied { accept } for pid=10096 comm="syz.0.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.684774][T10096] veth1: left allmulticast mode [ 214.756072][T10106] overlayfs: lower data-only dirs require metacopy support. [ 214.802271][T10110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3095'. [ 214.895962][T10112] /dev/loop0: Can't lookup blockdev [ 214.912534][T10114] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 214.944109][ T36] audit: type=1400 audit(212.516:2211): avc: denied { watch watch_reads } for pid=10117 comm="syz.2.3099" path="/309/file0" dev="tmpfs" ino=1699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 215.465376][T10133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.465917][T10133] SELinux: failed to load policy [ 215.478681][ T36] audit: type=1400 audit(213.012:2212): avc: denied { write } for pid=10019 comm="syz.4.3086" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.479800][T10133] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 215.941720][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10156 comm=syz.2.3111 [ 216.084938][ T36] audit: type=1400 audit(213.573:2213): avc: denied { create } for pid=10159 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 216.141209][ T36] audit: type=1326 audit(213.629:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.3.3114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe00d38ebe9 code=0x0 [ 216.555130][ T36] audit: type=1400 audit(214.012:2215): avc: denied { mount } for pid=10185 comm="syz.2.3121" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.042641][T10193] overlayfs: failed to clone upperpath [ 217.223096][ T559] usb 5-1: USB disconnect, device number 25 [ 217.298026][ T36] audit: type=1400 audit(214.713:2216): avc: denied { listen } for pid=10201 comm="syz.4.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.733566][T10216] overlayfs: failed to clone upperpath [ 218.159124][T10262] devpts: called with bogus options [ 218.273798][T10271] 9pnet_fd: Insufficient options for proto=fd [ 218.281312][T10269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10269 comm=syz.4.3150 [ 218.379369][T10279] rust_binder: Write failure EFAULT in pid:443 [ 218.685158][ T559] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 218.856362][ T559] usb 5-1: Using ep0 maxpacket: 32 [ 218.862917][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.874225][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.884169][ T559] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.893282][ T559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.902365][ T559] usb 5-1: config 0 descriptor?? [ 218.908497][ T559] hub 5-1:0.0: USB hub found [ 218.929670][T10302] 9pnet_fd: Insufficient options for proto=fd [ 219.122083][ T559] hub 5-1:0.0: 1 port detected [ 219.522273][T10317] netlink: 'syz.2.3168': attribute type 4 has an invalid length. [ 219.530523][T10317] netlink: 'syz.2.3168': attribute type 4 has an invalid length. [ 219.551890][ T559] hub 5-1:0.0: activate --> -90 [ 219.576029][T10322] tipc: Enabling of bearer rejected, failed to enable media [ 219.699783][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 219.699802][ T36] audit: type=1400 audit(216.948:2226): avc: denied { mounton } for pid=10330 comm="syz.2.3174" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 219.957410][T10352] netlink: 'syz.0.3183': attribute type 63 has an invalid length. [ 219.965347][T10352] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3183'. [ 219.980523][T10311] rust_binder: Error while translating object. [ 219.980591][T10311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.987303][T10285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.998028][T10311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 220.003099][T10357] devpts: called with bogus options [ 220.010302][ T559] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 220.026707][ T558] usb 5-1: USB disconnect, device number 26 [ 220.033181][ T559] usb 5-1-port1: attempt power cycle [ 220.524580][T10377] overlayfs: failed to resolve './cgroup': -2 [ 220.530890][ T36] audit: type=1400 audit(217.724:2227): avc: denied { mounton } for pid=10376 comm="syz.2.3192" path="/342/file0" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 220.562233][T10379] rust_binder: Error while translating object. [ 220.562281][T10379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.568783][T10379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 220.578731][T10381] 9pnet_fd: Insufficient options for proto=fd [ 220.578731][T10382] 9pnet_fd: Insufficient options for proto=fd [ 220.632823][T10384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.646827][T10384] kvm: pic: level sensitive irq not supported [ 220.646929][T10384] kvm: pic: non byte read [ 220.658186][T10384] kvm: pic: level sensitive irq not supported [ 220.658293][T10384] kvm: pic: non byte read [ 220.669747][T10384] kvm: pic: level sensitive irq not supported [ 220.669853][T10384] kvm: pic: non byte read [ 220.681013][T10384] kvm: pic: level sensitive irq not supported [ 220.681079][T10384] kvm: pic: non byte read [ 220.692368][T10384] kvm: pic: level sensitive irq not supported [ 220.692471][T10384] kvm: pic: non byte read [ 220.704270][T10384] kvm: pic: level sensitive irq not supported [ 220.704339][T10384] kvm: pic: non byte read [ 220.729081][T10384] kvm: pic: level sensitive irq not supported [ 220.729152][T10384] kvm: pic: non byte read [ 220.869318][T10408] rust_binder: Error in use_page_slow: ESRCH [ 220.869340][T10408] rust_binder: use_range failure ESRCH [ 220.875455][T10408] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 220.881142][T10408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 220.889448][T10408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:459 [ 220.929314][T10410] /dev/rnullb0: Can't open blockdev [ 221.057387][T10422] binder: Unknown parameter 'fscontExt?}}—' [ 221.119197][T10432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=10432 comm=syz.4.3213 [ 221.155440][ T36] audit: type=1400 audit(218.313:2228): avc: denied { connect } for pid=10435 comm="syz.4.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.176458][T10437] veth1: entered allmulticast mode [ 221.202987][T10439] overlayfs: failed to clone upperpath [ 221.338094][T10455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.357519][T10455] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 221.413872][ T36] audit: type=1400 audit(218.566:2229): avc: denied { getopt } for pid=10457 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.576154][T10464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3226'. [ 221.587112][ T36] audit: type=1400 audit(218.724:2230): avc: denied { setopt } for pid=10463 comm="syz.0.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.625985][T10471] rust_binder: Write failure EFAULT in pid:491 [ 221.767342][T10476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.774858][T10476] rust_binder: Write failure EFAULT in pid:496 [ 221.889722][ T36] audit: type=1400 audit(219.005:2231): avc: denied { bind } for pid=10496 comm="syz.2.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.915091][ T36] audit: type=1400 audit(219.005:2232): avc: denied { name_bind } for pid=10496 comm="syz.2.3237" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 221.936470][ T36] audit: type=1400 audit(219.005:2233): avc: denied { node_bind } for pid=10496 comm="syz.2.3237" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 221.973195][T10499] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 221.982733][ T36] audit: type=1400 audit(219.080:2234): avc: denied { relabelfrom } for pid=10498 comm="syz.2.3238" name="PACKET" dev="sockfs" ino=44308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.006354][ T36] audit: type=1400 audit(219.108:2235): avc: denied { relabelto } for pid=10498 comm="syz.2.3238" name="PACKET" dev="sockfs" ino=44308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:sshd_exec_t:s0" [ 222.096969][ T558] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 222.160065][T10508] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 222.167280][T10509] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 222.269226][ T558] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.282350][ T558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.302506][ T558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 222.317845][ T558] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.331300][ T558] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.341110][ T558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.350398][ T558] usb 5-1: config 0 descriptor?? [ 222.583623][ T558] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 222.600827][ T558] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 222.617093][ T558] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.665575][T10546] netlink: 'syz.0.3253': attribute type 4 has an invalid length. [ 222.673877][T10546] netlink: 'syz.0.3253': attribute type 4 has an invalid length. [ 224.320537][T10429] veth1: left allmulticast mode [ 224.524280][T10576] input: syz0 as /devices/virtual/input/input53 [ 224.568295][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3267'. [ 224.639072][T10597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.678948][T10600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.686317][T10600] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 224.693142][T10600] rust_binder: Read failure Err(EFAULT) in pid:520 [ 224.702204][T10600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 224.803389][ T669] usb 5-1: USB disconnect, device number 31 [ 224.918353][T10610] rust_binder: Write failure EFAULT in pid:529 [ 224.918992][T10610] rust_binder: 10609 RLIMIT_NICE not set [ 224.934813][ T558] rust_binder: 10608: removing orphan mapping 0:4248 [ 225.084314][T10614] netlink: 'syz.4.3278': attribute type 4 has an invalid length. [ 225.106499][T10616] binder: Unknown parameter 'contextÀ' [ 225.112108][T10616] binder: Unknown parameter 'contextÀ' [ 225.117951][T10616] binder: Unknown parameter 'contextÀ' [ 225.123658][T10616] binder: Unknown parameter 'contextÀ' [ 225.129257][T10616] binder: Unknown parameter 'contextÀ' [ 225.134854][T10616] binder: Unknown parameter 'contextÀ' [ 225.140538][T10616] binder: Unknown parameter 'contextÀ' [ 225.146297][T10616] binder: Unknown parameter 'contextÀ' [ 225.151929][T10616] binder: Unknown parameter 'contextÀ' [ 225.157573][T10616] binder: Unknown parameter 'contextÀ' [ 225.163905][T10616] binder: Unknown parameter 'contextÀ' [ 225.169637][T10616] binder: Unknown parameter 'contextÀ' [ 225.175291][T10616] binder: Unknown parameter 'contextÀ' [ 225.180976][T10616] binder: Unknown parameter 'contextÀ' [ 225.186703][T10616] binder: Unknown parameter 'contextÀ' [ 225.192431][T10616] binder: Unknown parameter 'contextÀ' [ 225.199267][T10616] binder: Unknown parameter 'contextÀ' [ 225.242873][T10616] binder: Unknown parameter 'contextÀ' [ 225.294843][T10616] binder: Unknown parameter 'contextÀ' [ 225.312640][T10616] binder: Unknown parameter 'contextÀ' [ 225.326086][T10616] binder: Unknown parameter 'contextÀ' [ 225.343333][T10616] binder: Unknown parameter 'contextÀ' [ 225.351477][T10616] binder: Unknown parameter 'contextÀ' [ 225.357147][T10616] binder: Unknown parameter 'contextÀ' [ 225.364704][T10616] binder: Unknown parameter 'contextÀ' [ 225.370760][T10616] binder: Unknown parameter 'contextÀ' [ 225.376410][T10616] binder: Unknown parameter 'contextÀ' [ 225.382218][T10616] binder: Unknown parameter 'contextÀ' [ 225.387851][T10616] binder: Unknown parameter 'contextÀ' [ 225.394960][T10616] binder: Unknown parameter 'contextÀ' [ 225.400629][T10616] binder: Unknown parameter 'contextÀ' [ 225.408103][T10616] binder: Unknown parameter 'contextÀ' [ 225.414497][T10616] binder: Unknown parameter 'contextÀ' [ 225.420131][T10616] binder: Unknown parameter 'contextÀ' [ 225.425933][T10616] binder: Unknown parameter 'contextÀ' [ 225.431660][T10616] binder: Unknown parameter 'contextÀ' [ 225.442586][T10616] binder: Unknown parameter 'contextÀ' [ 225.448390][T10616] binder: Unknown parameter 'contextÀ' [ 225.454084][T10616] binder: Unknown parameter 'contextÀ' [ 225.460742][T10616] binder: Unknown parameter 'contextÀ' [ 225.467715][T10616] binder: Unknown parameter 'contextÀ' [ 225.473530][T10616] binder: Unknown parameter 'contextÀ' [ 225.479297][T10616] binder: Unknown parameter 'contextÀ' [ 225.484951][T10616] binder: Unknown parameter 'contextÀ' [ 225.490824][T10616] binder: Unknown parameter 'contextÀ' [ 225.497500][T10616] binder: Unknown parameter 'contextÀ' [ 225.503237][T10616] binder: Unknown parameter 'contextÀ' [ 225.509403][T10616] binder: Unknown parameter 'contextÀ' [ 225.515056][T10616] binder: Unknown parameter 'contextÀ' [ 225.520907][T10616] binder: Unknown parameter 'contextÀ' [ 225.526504][T10616] binder: Unknown parameter 'contextÀ' [ 225.533442][T10616] binder: Unknown parameter 'contextÀ' [ 225.539486][T10616] binder: Unknown parameter 'contextÀ' [ 225.545317][T10616] binder: Unknown parameter 'contextÀ' [ 225.550942][T10616] binder: Unknown parameter 'contextÀ' [ 225.557516][T10616] binder: Unknown parameter 'contextÀ' [ 225.557711][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.563397][T10616] binder: Unknown parameter 'contextÀ' [ 225.572635][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.576172][T10616] binder: Unknown parameter 'contextÀ' [ 225.585913][T10618] bridge_slave_0: entered allmulticast mode [ 225.594376][T10616] binder: Unknown parameter 'contextÀ' [ 225.596656][T10618] bridge_slave_0: entered promiscuous mode [ 225.603097][T10616] binder: Unknown parameter 'contextÀ' [ 225.611629][T10616] binder: Unknown parameter 'contextÀ' [ 225.613438][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.619181][T10616] binder: Unknown parameter 'contextÀ' [ 225.626111][T10633] overlayfs: failed to clone upperpath [ 225.629915][T10616] binder: Unknown parameter 'contextÀ' [ 225.637306][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.641129][T10616] binder: Unknown parameter 'contextÀ' [ 225.649093][T10618] bridge_slave_1: entered allmulticast mode [ 225.655472][T10616] binder: Unknown parameter 'contextÀ' [ 225.661738][T10618] bridge_slave_1: entered promiscuous mode [ 225.720444][T10646] x_tables: unsorted underflow at hook 3 [ 225.749612][T10649] 9pnet_fd: Insufficient options for proto=fd [ 225.775333][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.782690][T10618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.790171][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.797440][T10618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.807604][T10663] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3292'. [ 225.831615][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.839046][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.848623][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.855740][ T8828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.864764][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.871882][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.897636][T10618] veth0_vlan: entered promiscuous mode [ 225.909598][T10618] veth1_macvtap: entered promiscuous mode [ 225.927573][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 225.927590][ T36] audit: type=1400 audit(222.782:2243): avc: denied { mounton } for pid=10618 comm="syz-executor" path="/root/syzkaller.MMKH8b/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 225.958659][ T36] audit: type=1400 audit(222.792:2244): avc: denied { mounton } for pid=10618 comm="syz-executor" path="/root/syzkaller.MMKH8b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 225.985209][ T36] audit: type=1400 audit(222.792:2245): avc: denied { mounton } for pid=10618 comm="syz-executor" path="/root/syzkaller.MMKH8b/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 226.012568][ T36] audit: type=1400 audit(222.810:2246): avc: denied { mounton } for pid=10618 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 226.035492][ T36] audit: type=1400 audit(222.810:2247): avc: denied { mounton } for pid=10618 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 226.087396][T10670] rust_binder: Write failure EFAULT in pid:7 [ 226.313954][ T36] audit: type=1326 audit(223.138:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.0.3296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93bf8ebe9 code=0x0 [ 226.346769][ T36] audit: type=1400 audit(223.175:2249): avc: denied { mount } for pid=10678 comm="syz.4.3298" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 227.255386][T10695] netlink: 'syz.2.3302': attribute type 4 has an invalid length. [ 227.347685][ T36] audit: type=1400 audit(224.101:2250): avc: denied { create } for pid=10709 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.367377][ T36] audit: type=1400 audit(224.110:2251): avc: denied { ioctl } for pid=10709 comm="syz.0.3309" path="socket:[44784]" dev="sockfs" ino=44784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.615662][ T558] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 227.788109][ T558] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.799427][ T558] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 227.810306][ T558] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 227.821274][ T558] usb 1-1: config 1 interface 0 has no altsetting 0 [ 227.976342][T10725] fuse: Bad value for 'user_id' [ 227.981456][T10725] fuse: Bad value for 'user_id' [ 228.460552][ T559] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 228.620973][ T559] usb 5-1: Using ep0 maxpacket: 32 [ 228.627354][ T559] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.638312][ T559] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.649238][ T559] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.658499][ T559] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 228.667029][ T559] usb 5-1: Product: syz [ 228.671250][ T559] usb 5-1: Manufacturer: syz [ 228.678088][ T559] hub 5-1:4.0: USB hub found [ 228.891789][ T36] audit: type=1400 audit(225.550:2252): avc: denied { read } for pid=10735 comm="syz.4.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.978869][ T559] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 229.008272][T10756] pim6reg1: entered promiscuous mode [ 229.020914][ T559] usb 5-1: USB disconnect, device number 32 [ 229.027259][T10756] pim6reg1: entered allmulticast mode [ 229.808162][ T338] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 229.979270][ T338] usb 5-1: Using ep0 maxpacket: 16 [ 229.987957][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.999229][ T338] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 230.008712][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.018035][ T338] usb 5-1: config 0 descriptor?? [ 230.454594][ T338] greenasia 0003:0E8F:0012.0019: unknown main item tag 0xd [ 230.463583][ T338] greenasia 0003:0E8F:0012.0019: item fetching failed at offset 4/5 [ 230.471991][ T338] greenasia 0003:0E8F:0012.0019: parse failed [ 230.478354][ T338] greenasia 0003:0E8F:0012.0019: probe with driver greenasia failed with error -22 [ 230.559829][T10823] fuse: Unknown parameter '0x0000000000000004' [ 230.582807][ T558] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 230.604120][ T558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.619026][T10827] 9pnet_fd: Insufficient options for proto=fd [ 230.627845][ T558] usb 1-1: Manufacturer: à  [ 230.633409][T10825] binder: Unknown parameter 'defcontext01777777777777777777777' [ 230.642269][T10827] 9pnet_fd: Insufficient options for proto=fd [ 230.642834][ T558] usb 1-1: can't set config #1, error -71 [ 230.667273][ T558] usb 1-1: USB disconnect, device number 72 [ 230.679140][T10831] overlayfs: failed to clone upperpath [ 230.681268][T10832] overlayfs: failed to clone upperpath [ 230.756214][ T9] usb 5-1: USB disconnect, device number 33 [ 231.010167][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'. [ 231.071722][T10868] rust_binder: 36: no such ref 2 [ 231.077237][T10868] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 231.084929][T10868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 231.098866][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.108282][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.115794][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.122335][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.129141][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.135754][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.142573][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.149194][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.155722][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.162229][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.168838][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.175418][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.182084][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.188768][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.195525][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.202126][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.208573][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.215142][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.221638][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.228091][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.234604][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.241094][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.247669][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.254398][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.261014][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.268014][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.274961][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.281607][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.288815][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.295529][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.302183][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.308713][T10870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.431408][T10883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.437975][T10883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 231.462378][T10885] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 231.480029][T10885] rust_binder: Write failure EINVAL in pid:44 [ 231.506841][T10891] rust_binder: Write failure EFAULT in pid:49 [ 231.537086][T10898] rust_binder: 56: no such ref 3 [ 231.548518][T10898] rust_binder: 56: no such ref 0 [ 231.553526][T10898] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3741446675 [ 231.561545][T10898] rust_binder: 56: no such ref 0 [ 231.581594][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 231.581613][ T36] audit: type=1400 audit(228.065:2347): avc: denied { append } for pid=10899 comm="syz.0.3372" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.610952][ T558] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 231.777413][ T558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 231.788700][ T558] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 231.798204][ T558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.807029][ T36] audit: type=1400 audit(228.271:2348): avc: denied { nlmsg_tty_audit } for pid=10910 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 231.812162][ T558] usb 5-1: config 0 descriptor?? [ 231.833839][T10874] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 232.492354][ T36] audit: type=1326 audit(228.916:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.4.3363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1f8d8ebe9 code=0x0 [ 232.652136][ T558] usbhid 5-1:0.0: can't add hid device: -71 [ 232.674519][ T558] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.689715][ T558] usb 5-1: USB disconnect, device number 34 [ 232.860369][ T36] audit: type=1400 audit(229.262:2350): avc: denied { create } for pid=10943 comm="syz.3.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.329540][ T36] audit: type=1400 audit(229.701:2351): avc: denied { write } for pid=10949 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 233.447309][T10957] /dev/rnullb0: Can't open blockdev [ 233.533700][ T36] audit: type=1400 audit(229.888:2352): avc: denied { ioctl } for pid=10971 comm="syz.3.3395" path="socket:[45403]" dev="sockfs" ino=45403 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.976135][T10980] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3398'. [ 233.985430][T10980] tc_dump_action: action bad kind [ 234.142246][T10989] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3400'. [ 234.190668][T10996] overlayfs: missing 'lowerdir' [ 234.210236][ T36] audit: type=1400 audit(230.524:2353): avc: denied { setopt } for pid=10997 comm="syz.2.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.376060][ T36] audit: type=1400 audit(230.683:2354): avc: denied { append } for pid=11006 comm="syz.2.3407" name="file0" dev="tmpfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 234.400896][ T36] audit: type=1326 audit(230.702:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.3407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f949178ebe9 code=0x0 [ 234.456824][ T36] audit: type=1400 audit(230.749:2356): avc: denied { setattr } for pid=11006 comm="syz.2.3407" name="file0" dev="tmpfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 234.576927][T11018] binder: Unknown parameter 'tats5gl' [ 234.594321][T11020] rust_binder: 597: no such ref 1 [ 234.599565][T11020] rust_binder: Write failure EFAULT in pid:597 [ 234.714420][T11025] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3413'. [ 234.770274][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 234.781082][T11029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 234.781113][T11029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95 [ 235.070209][ T559] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 235.242693][ T559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.254196][ T559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 235.265536][ T559] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 235.274770][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 235.274781][ T559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.275766][ T559] usb 1-1: config 0 descriptor?? [ 235.298304][T11032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.456380][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.466579][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.475532][ T9] usb 5-1: config 1 has no interface number 0 [ 235.481738][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.492995][ T9] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 235.502366][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 208, using maximum allowed: 30 [ 235.513390][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 208 [ 235.528824][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.538863][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.547010][ T9] usb 5-1: Product: syz [ 235.551219][ T9] usb 5-1: Manufacturer: syz [ 235.555886][ T9] usb 5-1: SerialNumber: syz [ 235.737766][ T559] lenovo 0003:17EF:60B5.001A: hidraw0: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 236.210491][ T9] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 236.220176][ T9] cdc_ncm 5-1:1.1: bind() failure [ 236.229144][ T9] usb 5-1: USB disconnect, device number 35 [ 236.492433][ T559] usb 1-1: USB disconnect, device number 73 [ 236.740236][T11053] binder: Unknown parameter 'contextÀ' [ 236.841335][T11079] netlink: 'syz.2.3431': attribute type 4 has an invalid length. [ 236.891323][T11087] 9pnet_fd: Insufficient options for proto=fd [ 237.016481][T11099] netlink: 'syz.3.3436': attribute type 3 has an invalid length. [ 237.039836][T11103] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3441'. [ 237.094064][T11107] fuse: Unknown parameter 'Ûàä1pKc¡ ë}Ný\G'ˆ S½Ýåœßid_ø§s€/-T€TGÏž!ÚG¤:' [ 237.358985][ T7464] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 237.360076][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 237.360095][ T36] audit: type=1326 audit(233.469:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.4.3455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1f8d8ebe9 code=0x0 [ 237.520843][ T7464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 237.531041][ T7464] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 237.541097][ T7464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 237.551438][ T7464] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 237.563158][ T7464] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 237.572711][ T7464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.581361][ T7464] usb 1-1: Product: syz [ 237.586779][ T7464] usb 1-1: Manufacturer: syz [ 237.591470][ T7464] usb 1-1: SerialNumber: syz [ 237.597597][ T7464] usb 1-1: config 0 descriptor?? [ 237.606087][ T7464] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 237.811278][T11165] overlay: ./file0 is not a directory [ 237.988491][T11175] netlink: 'syz.2.3466': attribute type 4 has an invalid length. [ 238.265210][T11188] SELinux: security_context_str_to_sid () failed with errno=-22 [ 238.363978][ T7464] scsi host1: usb-storage 1-1:0.0 [ 238.377004][ T7464] usb 1-1: USB disconnect, device number 74 [ 238.717256][ T7464] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 238.877673][ T7464] usb 1-1: Using ep0 maxpacket: 8 [ 238.884509][ T7464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.899047][ T7464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.902324][ T36] audit: type=1400 audit(234.909:2383): avc: denied { accept } for pid=11219 comm="syz.4.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.908997][ T7464] usb 1-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 238.961746][ T7464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.971686][ T7464] usb 1-1: config 0 descriptor?? [ 239.018050][T11230] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 239.025841][ T36] audit: type=1400 audit(235.022:2384): avc: denied { shutdown } for pid=11224 comm="syz.2.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.408710][ T7464] apple 0003:05AC:8102.001B: hidraw0: USB HID v40.0d Device [HID 05ac:8102] on usb-dummy_hcd.0-1/input0 [ 239.412462][ T338] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 239.584794][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.595811][ T338] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 239.605223][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.613965][ T338] usb 5-1: config 0 descriptor?? [ 239.619377][T11237] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 239.832108][T11260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3496'. [ 240.059133][ T338] hid-generic 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 240.275350][ T338] usb 5-1: USB disconnect, device number 36 [ 240.642415][ T338] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 240.802801][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 240.809937][ T338] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 240.820273][ T338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.830751][ T338] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.839872][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.848154][ T338] usb 5-1: Product: syz [ 240.852382][ T338] usb 5-1: Manufacturer: syz [ 240.857067][ T338] usb 5-1: SerialNumber: syz [ 240.985866][ T36] audit: type=1400 audit(236.863:2385): avc: denied { wake_alarm } for pid=11291 comm="syz.2.3507" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.211157][ T36] audit: type=1326 audit(237.069:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.3.3509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fe00d38ebe9 code=0x0 [ 241.283644][ T36] audit: type=1400 audit(237.135:2387): avc: denied { audit_read } for pid=11305 comm="syz.3.3510" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.653891][ T338] usb 5-1: 0:2 : does not exist [ 241.665369][ T338] usb 5-1: USB disconnect, device number 37 [ 241.679574][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.709487][ T9] usb 1-1: USB disconnect, device number 75 [ 241.760886][T11320] rust_binder: Write failure EFAULT in pid:134 [ 241.774478][T11322] usb usb9: check_ctrlrecip: process 11322 (syz.4.3516) requesting ep 01 but needs 81 [ 241.796198][T11322] usb usb9: usbfs: process 11322 (syz.4.3516) did not claim interface 0 before use [ 241.808339][ T36] audit: type=1400 audit(237.630:2388): avc: denied { listen } for pid=11321 comm="syz.4.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.863949][T11324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 241.897930][T11336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11336 comm=syz.4.3522 [ 241.944207][T11342] 9pnet_fd: Insufficient options for proto=fd [ 241.948506][ T36] audit: type=1400 audit(237.752:2389): avc: denied { ioctl } for pid=11343 comm="syz.4.3523" path="cgroup:[4026532498]" dev="nsfs" ino=4026532498 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.019270][T11358] overlayfs: failed to clone upperpath [ 242.039628][T11362] binder: Unknown parameter 'dont_appraise' [ 242.083128][T11379] tipc: Enabling of bearer rejected, failed to enable media [ 242.097246][ T36] audit: type=1400 audit(237.901:2390): avc: denied { setattr } for pid=11383 comm="syz.3.3539" name="secretmem" dev="secretmem" ino=47060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.235962][ T7464] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 242.408208][ T7464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.419344][ T7464] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.432637][ T7464] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 242.441921][ T7464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.451563][ T7464] usb 5-1: config 0 descriptor?? [ 242.704543][T11443] rust_binder: Write failure EFAULT in pid:139 [ 242.796389][T11451] rust_binder: Write failure EFAULT in pid:147 [ 242.840103][T11458] overlayfs: failed to resolve './file0': -2 [ 242.883731][T11460] fuseblk: Bad value for 'fd' [ 242.889888][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.898180][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.905724][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.913749][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.921147][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.928341][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.935643][ T7464] lenovo 0003:17EF:60EE.001D: unknown main item tag 0x0 [ 242.950272][ T7464] lenovo 0003:17EF:60EE.001D: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 243.102749][T11350] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 243.112125][T11350] /dev/rnullb0: Can't open blockdev [ 243.118144][ T9] usb 5-1: USB disconnect, device number 38 [ 243.119135][ T36] audit: type=1326 audit(238.855:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11470 comm="syz.0.3568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x0 [ 243.157851][ T36] audit: type=1400 audit(238.892:2392): avc: denied { nlmsg_read } for pid=11474 comm="syz.3.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.239168][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3571'. [ 243.283891][T11486] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3573'. [ 243.293216][T11486] gretap0: entered promiscuous mode [ 243.713884][T11492] netlink: 'syz.4.3576': attribute type 10 has an invalid length. [ 243.964455][T11498] /dev/rnullb0: Can't open blockdev [ 244.054148][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 244.215900][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 244.229039][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 244.238363][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.247154][ T9] usb 5-1: config 0 descriptor?? [ 244.684290][ T9] uclogic 0003:5543:0003.001E: No inputs registered, leaving [ 244.692355][ T9] uclogic 0003:5543:0003.001E: hidraw0: USB HID v10.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 244.855942][ T36] audit: type=1326 audit(240.473:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 244.879477][ T36] audit: type=1326 audit(240.482:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 244.902378][ T36] audit: type=1326 audit(240.491:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 244.925339][ T36] audit: type=1326 audit(240.491:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 244.948737][ T36] audit: type=1326 audit(240.491:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 244.956372][ T9] usb 5-1: USB disconnect, device number 39 [ 244.972459][ T36] audit: type=1326 audit(240.491:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 245.002219][ T36] audit: type=1326 audit(240.491:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 245.025667][ T36] audit: type=1326 audit(240.491:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93bf8ebe9 code=0x7fc00000 [ 245.120073][T11514] rust_binder: 170: no such ref 3 [ 245.144742][T11517] 9pnet_fd: Insufficient options for proto=fd [ 245.195636][T11523] syz.0.3586: attempt to access beyond end of device [ 245.195636][T11523] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 245.209020][T11523] EXT4-fs (loop0): unable to read superblock [ 245.216514][T11523] syz.0.3586: attempt to access beyond end of device [ 245.216514][T11523] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 245.231195][T11523] EXT4-fs (loop0): unable to read superblock [ 245.331413][T11532] /dev/rnullb0: Can't open blockdev [ 245.408074][T11536] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3590'. [ 245.455646][T11539] syzkaller0: entered promiscuous mode [ 245.461373][T11539] syzkaller0: entered allmulticast mode [ 245.470711][T11539] rust_binder: 187: no such ref 1 [ 245.475981][T11539] rust_binder: 187: no such ref 0 [ 245.481190][T11539] rust_binder: 187: no such ref 3 [ 245.982046][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3602'. [ 246.206010][ T8828] tipc: Subscription rejected, illegal request [ 246.268044][ T7464] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 246.430138][T11607] netlink: 'syz.3.3610': attribute type 16 has an invalid length. [ 246.440379][ T7464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.451636][ T7464] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.461080][ T7464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.478140][ T7464] usb 1-1: config 0 descriptor?? [ 246.917529][ T7464] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 246.927488][ T7464] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001F/input/input54 [ 247.001248][ T7464] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 Stopping sshd: [ 247.458827][ T7464] usb 1-1: USB disconnect, device number 76 stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 247.738537][T11674] binder: Bad value for 'stats' OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: [ 248.086135][T11696] bridge0: port 3(veth0_to_bond) entered blocking state [ 248.093309][T11696] bridge0: port 3(veth0_to_bond) entered disabled state OK [ 248.100648][T11696] veth0_to_bond: entered allmulticast mode [ 248.107314][T11696] veth0_to_bond: entered promiscuous mode [ 248.113445][T11696] bridge0: port 3(veth0_to_bond) entered blocking state Stopping acpid: [ 248.120600][T11696] bridge0: port 3(veth0_to_bond) entered forwarding state [ 248.162704][T11708] binder: Bad value for 'max' [ 248.174774][T11710] 9pnet_fd: Insufficient options for proto=fd [ 248.287145][T11721] overlay: Bad value for 'verity' [ 248.291338][T11722] overlay: Bad value for 'verity' [ 248.300918][T11719] ------------[ cut here ]------------ [ 248.306445][T11719] WARNING: CPU: 1 PID: 11719 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 248.316439][T11719] Modules linked in: [ 248.320363][T11719] CPU: 1 UID: 0 PID: 11719 Comm: syz.0.3635 Not tainted syzkaller #0 0dd0103ec329b4c3ce546fdd10bdf8515cdb9785 [ 248.332241][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.342702][T11719] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 248.348681][T11719] Code: 00 48 8b 5d a0 74 08 48 89 df e8 02 42 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 248.368511][T11719] RSP: 0018:ffffc90005397c88 EFLAGS: 00010202 [ 248.374706][T11719] RAX: 1ffffd1ffff860e2 RBX: ffffc9000145d8e8 RCX: ffffffff816dc859 [ 248.382755][T11719] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc30710 [ 248.390867][T11719] RBP: ffffc90005397cf0 R08: ffffe8ffffc30717 R09: 1ffffd1ffff860e2 [ 248.398913][T11719] R10: dffffc0000000000 R11: fffff91ffff860e3 R12: dffffc0000000000 [ 248.406987][T11719] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc30710 [ 248.415243][T11719] FS: 00007fe93ce656c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 248.424320][T11719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.430962][T11719] CR2: 00007fe00e1ddf70 CR3: 000000013574c000 CR4: 00000000003526b0 [ 248.439059][T11719] Call Trace: [ 248.442412][T11719] [ 248.445383][T11719] kvm_put_kvm+0x1100/0x12b0 [ 248.450075][T11719] ? __cfi_kvm_vm_release+0x10/0x10 [ 248.455318][T11719] kvm_vm_release+0x47/0x70 [ 248.459940][T11719] __fput+0x1fe/0xa00 [ 248.463983][T11719] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 248.469707][T11719] ____fput+0x20/0x30 [ 248.473944][T11719] task_work_run+0x1e3/0x250 [ 248.478692][T11719] ? __cfi_task_work_run+0x10/0x10 [ 248.484071][T11719] ? __kasan_check_read+0x15/0x20 [ 248.489252][T11719] resume_user_mode_work+0x36/0x50 [ 248.494696][T11719] syscall_exit_to_user_mode+0x64/0xb0 [ 248.500309][T11719] do_syscall_64+0x64/0xf0 [ 248.504793][T11719] ? clear_bhb_loop+0x50/0xa0 [ 248.509511][T11719] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.515452][T11719] RIP: 0033:0x7fe93bf8ebe9 [ 248.519895][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.539568][T11719] RSP: 002b:00007fe93ce65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 248.548044][T11719] RAX: 0000000000000000 RBX: 00007fe93c1c5fa0 RCX: 00007fe93bf8ebe9 [ 248.556068][T11719] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 248.564684][T11719] RBP: 00007fe93c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 248.572910][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.580990][T11719] R13: 00007fe93c1c6038 R14: 00007fe93c1c5fa0 R15: 00007ffd0e10edf8 [ 248.589190][T11719] [ 248.592330][T11719] ---[ end trace 0000000000000000 ]--- [ 248.653072][ T7464] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 248.813835][ T7464] usb 5-1: Using ep0 maxpacket: 16 [ 248.820158][ T7464] usb 5-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 248.831669][ T7464] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.838451][ T7464] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 248.847570][ T7464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.856548][ T7464] usb 5-1: config 0 descriptor?? OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.146 closed by remote host. [ 249.476574][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 249.476598][ T36] audit: type=1400 audit(244.776:2484): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[750]" dev="pipefs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 249.669249][ T7464] usbhid 5-1:0.0: can't add hid device: -71 [ 249.675268][ T7464] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 249.691213][ T7464] usb 5-1: USB disconnect, device number 40 [ 249.757496][ T8824] bridge_slave_1: left allmulticast mode [ 249.763285][ T8824] bridge_slave_1: left promiscuous mode [ 249.768994][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.791808][ T8824] bridge_slave_0: left allmulticast mode [ 249.797635][ T8824] bridge_slave_0: left promiscuous mode [ 249.803283][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.804436][ T9] usb 4-1: USB disconnect, device number 17 [ 249.981303][ T8824] veth1_macvtap: left promiscuous mode [ 249.986841][ T8824] veth0_vlan: left promiscuous mode [ 250.344455][ T8824] bridge_slave_1: left allmulticast mode [ 250.350224][ T8824] bridge_slave_1: left promiscuous mode [ 250.356025][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.363523][ T8824] bridge_slave_0: left allmulticast mode [ 250.369259][ T8824] bridge_slave_0: left promiscuous mode [ 250.374985][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.383317][ T8824] veth0_to_bond: left allmulticast mode [ 250.389028][ T8824] veth0_to_bond: left promiscuous mode [ 250.394570][ T8824] bridge0: port 3(veth0_to_bond) entered disabled state [ 250.402322][ T8824] bridge_slave_1: left allmulticast mode [ 250.408054][ T8824] bridge_slave_1: left promiscuous mode [ 250.413688][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.421393][ T8824] bridge_slave_0: left allmulticast mode [ 250.427067][ T8824] bridge_slave_0: left promiscuous mode [ 250.432793][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 250.699035][ T8824] tipc: Left network mode [ 250.703525][ T8824] tipc: Left network mode [ 250.709705][ T8824] veth1_macvtap: left promiscuous mode [ 250.715242][ T8824] veth0_vlan: left promiscuous mode [ 250.721097][ T8824] veth1_macvtap: left promiscuous mode [ 250.726739][ T8824] veth0_vlan: left promiscuous mode [ 251.749595][T11732] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 251.756760][T11732] ACPI: PM: Preparing to enter system sleep state S5 [ 251.763767][T11732] kvm: exiting hardware virtualization [ 251.769378][T11732] reboot: Power down serialport: VM disconnected.