last executing test programs: 1m25.874984484s ago: executing program 1 (id=917): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x80, 0xff}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) chdir(&(0x7f00000001c0)='./bus\x00') (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) copy_file_range(r5, 0x0, r5, 0x0, 0xfffffffffffffffe, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) (rerun: 64) 1m25.860326584s ago: executing program 1 (id=921): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230041) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230041) (async) close(0x3) (async) 1m25.754755076s ago: executing program 1 (id=927): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x62654ec4c08951e5}) 1m25.701982307s ago: executing program 1 (id=930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000005c0)=0xb, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x85c) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f00000000c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x7a) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x7, 0x1fc, 0x5}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004d40)={0x2020}, 0x2020) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000881) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/45, 0x2d}, {0x0}], 0x2) ioctl$RTC_UIE_ON(r3, 0x7003) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000100)=0x4) ioctl$RTC_AIE_ON(r3, 0x7001) mmap(&(0x7f0000210000/0x2000)=nil, 0x2000, 0x4, 0x10010, 0xffffffffffffffff, 0xb5874000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001200)=""/181, 0xb5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001340)={@ptr={0x70742a85, 0x0, &(0x7f00000012c0)=""/113, 0x71, 0x1, 0x21}, @fda={0x66646185, 0x2, 0x1, 0x15}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 1m25.509376939s ago: executing program 1 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x20000094) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x1000000000000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120141011b763607000000997539010203010902120001000018bb373a3106fdb8943e71"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x8000000}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008020}, 0x40814) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) setuid(0xee00) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m24.984788807s ago: executing program 1 (id=945): r0 = socket(0x10, 0x803, 0x0) writev(r0, &(0x7f0000000400), 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0xfffffffffffffde9}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x1e, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x5}, 0x20) keyctl$setperm(0x5, 0x0, 0x7613808) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x7, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r7, 0x1}) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r7, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x3000, 0x8, r7, 0x1}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x3000, 0x8, r7, 0x1}) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000a40)={0x2020}, 0x2020) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r10, &(0x7f0000000080)=""/87, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xea25e365f5a3e29, 0x10, r9, 0xfffff000) 1m9.716932034s ago: executing program 32 (id=945): r0 = socket(0x10, 0x803, 0x0) writev(r0, &(0x7f0000000400), 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0xfffffffffffffde9}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x1e, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x5}, 0x20) keyctl$setperm(0x5, 0x0, 0x7613808) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x7, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r7, 0x1}) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r7, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x3000, 0x8, r7, 0x1}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x3000, 0x8, r7, 0x1}) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000a40)={0x2020}, 0x2020) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r10, &(0x7f0000000080)=""/87, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xea25e365f5a3e29, 0x10, r9, 0xfffff000) 1.789470793s ago: executing program 2 (id=2574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) read(r1, &(0x7f0000000440)=""/137, 0x89) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004740)=@migrate={0xa0, 0x21, 0x1, 0x2000000, 0x0, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x6e6bc0}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.774869273s ago: executing program 2 (id=2575): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x9}, 0xa}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1c0000}, {{0x0, 0x0, 0x0}, 0x10}], 0x7, 0x40000000, 0x0) 1.758300263s ago: executing program 2 (id=2576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x16}}, 0x1000}], 0x0, 0x0, 0x0}) 1.657888755s ago: executing program 3 (id=2577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x5, 0x0, [{0x10, 0x2, 0x1, 0x0, @irqchip={0x1000, 0x8}}, {0x1, 0x2, 0x1, 0x0, @sint={0x4, 0x8}}, {0x101, 0x5, 0x1, 0x0, @adapter={0x1, 0x8001, 0x5, 0x4, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x4, 0x2a}}, {0x8, 0x5, 0x0, 0x0, @sint={0xff, 0x9}}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.595780496s ago: executing program 0 (id=2580): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) read(r2, &(0x7f0000000440)=""/137, 0x89) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r3, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000200)='net_cls.classid\x00', 0x2, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 1.481179387s ago: executing program 2 (id=2581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x0, 0xd4, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x8a, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x964, 0xd}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0x960, 0x9, "1004c57811"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x2, 0x2, 0x3, 0xe, 0x5}, @mixer_unit={0x0, 0x24, 0x4, 0x4, 0x9, "dca2"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x5, 0x7f, "1c533513"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0xe1, "100cd451217a"}, @extension_unit={0xd, 0x24, 0x8, 0xf7, 0x4, 0xd3, "a0eb6eecb6b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x772d, 0x7, 0x30, "c1d2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0xf0, 0xa8, "8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x2, 0xfa, {0x7, 0x25, 0x1, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4a, 0xf6, 0x1, {0x7, 0x25, 0x1, 0x1, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf7, 0x7, 0x0, 0x10, 0x2}, 0x66, &(0x7f0000000380)={0x5, 0xf, 0x66, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a57c90a1ff99715c8cd36a3316b6eb1f"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "007691cc71e19dd340d0a296a0904529"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x14, 0xf5, 0x10, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "028d0a5eaaf4746f58d432313cccb686"}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0xe01, 0xf00, 0x10, [0x3ff0, 0x3f30, 0xff000f]}]}, 0xa, [{0xa7, &(0x7f0000000200)=@string={0xa7, 0x3, "f24fdd43b212dd2c9ad86f2cb7a3746c5824bca6eb6e80956163bd43b59d9e628030afd9d9b774eef0a6fe649552203ce94f94b9ace55269c9f624bdb2098247e985bddedcd4f14ebe8b33eb498af965c371e97b5ff71be69c58491157c25ee62e27e97319ecf7b7ab4d84ba8e2dda20b52e00f0a8202a98bcf32fd14fe960146b73f541d785ca0b5c1b77ee8f07807236018ea89964cb1e52106574ee1e9f85b500344cfd"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x443}}, {0x93, &(0x7f0000000500)=@string={0x93, 0x3, "996601e174eeaff9e97f035742b7728025f0cb0b734ecdd5263e28ed4aacc5d4eb1016b4709d7518ac4e80d33a87c68f3df11782a688a6c34ebc9826dcc60e160728153ce9809a0b65f17d95e72783fccde784e161555eae73205f18f16142a4ece5a9fbf4a017579c6ba8d412f5f817708e801e0d460f56b27a9b951a7ecc7f34048ff03f70c022268b6f000580d9e35b"}}, {0xd6, &(0x7f0000000680)=@string={0xd6, 0x3, "60b37f13135b665ab21da594e55e1b78157db784915597d76763bb2c64c182cf04da361ff0ebac6bd36453752efdf13f3175ecc92b4b187392aaae34f766e8a441a7bd9346a83fabc8ae0a00aea56e2288e2a77297248c76d0cf1b24b5d8b34eaeed23f990d8e872182dedb972593e0d4f9eb854f96451c88752b16929c37755e15f6426b372d163e04a80449324d18f6830cb237c1eeeb9e626521135f1e3a9040b268bf5cb195ed3cb725e2d54ca4b0700ee0a8ea233b24e0b0c2ddda745d4facdd1907f0231870fb2ed4d2cb50fcc70e40a6c"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3409}}, {0x99, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "5ffce5bc84aadc43fd274a384683611ced87fcb1ef8b2f07069588f10dc7af3445307163f19e186d90493f6c548ad21c89ea0fa94dfc8246e8f91d8f2204376da23db74f9fc586224752441c2c62879252b2d518bf04c5"}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) 1.142971722s ago: executing program 3 (id=2582): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mount$9p_unix(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000540)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 1.142257783s ago: executing program 3 (id=2583): r0 = open(0x0, 0x1, 0x10c) sendmsg$802154_dgram(r0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000203050000000000000000000200000a08000100020c778a"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@caif, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000001c0)=""/250, 0xfa}, 0x93f6}], 0x1, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r2, 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, &(0x7f0000000000)="28f79a0600000000", 0x8, 0x20048090, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 749.753108ms ago: executing program 0 (id=2584): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x9}, 0xa}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1c0000}, {{0x0, 0x0, 0x0}, 0x10}], 0x7, 0x40000000, 0x0) 735.743889ms ago: executing program 0 (id=2585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x101, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 638.87774ms ago: executing program 0 (id=2586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00031400000000000400ac1414aa0000ecffffffffff020006000020000002000000000000000000000000000000080012000100020000000000000000000600320003000000000000000000000010003c00000000000000000000000000fc0200000000000000000000000000000400030005000000280000000000000000010000000000000600"/160], 0xa0}}, 0x0) gettid() close_range(r0, 0xffffffffffffffff, 0x0) 638.64311ms ago: executing program 0 (id=2587): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x3, 0x0, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 638.04967ms ago: executing program 0 (id=2588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f00000005c0)="bf000000000000000000000000000000756cc91ec5f12f5cebcdc029614e340490c7ee56aa0e4a3fa100008d077e3c46fb239f761db8068bdfbe947fe5830cf4d8695e9bd26cbac9702708ae762b9968cb405246f7216dc0da60e25fbd5581aa9b289319323e7bf992030841708dd9bf33e8c325fc09f3cefd8509837d109740f8265c45a0fb7193f2b3d6fb2b1d47630d136d91ba537e4ef5c72dc56fb874a2dbb4d869", 0xa4}, {&(0x7f0000000340)='T', 0xfffffdb4}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000480)="0500000073", 0x5}], 0x5}}, {{0x0, 0x0, &(0x7f00000003c0), 0x54}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="bb3281c55a0c032cbadb0fb4482b8e90929d3f193c26bc4742e66e079c7bcd877e8d24c304ba24a67ff8bafbe5ba48966643d0613ff501153584", 0x3a}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000380)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0xfffffffe}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5f}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0xa, 0x5, {0x5, 0x35, "00f410"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80900, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x9, {[@global=@item_012={0x2, 0x1, 0x7, ' u'}, @main=@item_4={0x3, 0x0, 0xc}, @global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, &(0x7f0000000040)={0x3, 0x314d6a91125d5e3b, 0xfffffffc}) 282.863865ms ago: executing program 4 (id=2591): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000140)) (async) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 282.541765ms ago: executing program 4 (id=2592): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0xa) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) setresuid(0x0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) cachestat(r0, &(0x7f0000000000)={0x3, 0x3ff}, &(0x7f0000000080), 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) madvise(&(0x7f0000cc4000/0x4000)=nil, 0x4000, 0xa) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) (async) setresuid(0x0, 0x0, 0x0) (async) write$rfkill(0xffffffffffffffff, 0x0, 0x0) (async) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) (async) cachestat(r0, &(0x7f0000000000)={0x3, 0x3ff}, &(0x7f0000000080), 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) (async) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 282.184895ms ago: executing program 3 (id=2593): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffff800, 0x10001, 0x5) fcntl$setlease(r1, 0x400, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000843000/0x2000)=nil) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) listen(r3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x925}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x917}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x204}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 222.392266ms ago: executing program 3 (id=2594): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x9}, 0xa}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1c0000}, {{0x0, 0x0, 0x0}, 0x10}], 0x7, 0x40000000, 0x0) 218.409866ms ago: executing program 3 (id=2595): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040026960154030109021b000100031003090458080119662194090586d7f583a267dc7a6ca1b642f1dafe7f2823b3271baa5bcb49924a1c80b41f41dd81f3356f48f19fb4"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x4008800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000002000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @multicast}, 0x38, {0x2, 0x4e23, @multicast2}, 'wg0\x00'}) read(r4, &(0x7f0000000440)=""/137, 0x89) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x1000) fallocate(r7, 0x0, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3ec, 0x8, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x10) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r9, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004740)=ANY=[@ANYBLOB="a0000000210001000000000000000000fe800000000000fb40a8c7d4ad26320c0d7a40fe0000000000000000aa6401010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c06b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fc0200000000000000000000000000013c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 166.886357ms ago: executing program 2 (id=2596): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000029f80000fcffffff0e000000ffff200002"], 0x78) (async) write$binfmt_elf32(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000029f80000fcffffff0e000000ffff200002"], 0x78) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 154.728827ms ago: executing program 2 (id=2597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xf8}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002"], 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 108.759428ms ago: executing program 4 (id=2598): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000001080)=""/21, 0x15}], 0x3, 0xfffffff9, 0x6) 77.388818ms ago: executing program 4 (id=2599): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) read(r1, &(0x7f0000000440)=""/137, 0x89) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004740)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x1a8, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x6e6bc0}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 437.58µs ago: executing program 4 (id=2600): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) (async) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) (async) 0s ago: executing program 4 (id=2601): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x210a80, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) syz_usb_connect$cdc_ecm(0x4, 0x64, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x18, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "3082b4ad"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x165c, 0xc, 0x3, 0x4}, [@country_functional={0xc, 0x24, 0x7, 0xc8, 0x9, [0xff, 0x0, 0xfff8]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x73, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x5, 0x4c}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x1, 0x4, 0x0, 0x5}, 0x43, &(0x7f0000000100)={0x5, 0xf, 0x43, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x6, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x1ff, 0xf00, 0x6, [0xc0, 0x30, 0x3f00, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xa, 0x80, 0xff, 0x6, 0x4, 0xfa}, @ptm_cap={0x3}]}, 0x3, [{0x4d, &(0x7f00000002c0)=@string={0x4d, 0x3, "0cf8cab97d26663a9cdb35944b1d4504ec2e9db1cb6ec3fd60bfe814a039d3556315f7b0bd35ed0014b84eeb374f35360e50d2f9721b06a38f894a0926ac8a39d9bb549e8a9d66ac4e5fae"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x446}}, {0x25, &(0x7f0000000340)=@string={0x25, 0x3, "1da6fb1b776740a6585274a1b5237047c7ba3d315d257cad24fcc5433fcce0d7efde66"}}]}) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0xfffffffd}) kernel console output (not intermixed with test programs): 5] usb 2-1: SerialNumber: syz [ 59.343182][ T305] usb 2-1: config 0 descriptor?? [ 59.348946][ T305] smsc95xx v2.0.0 [ 59.455263][ T1726] SELinux: policydb magic number 0x2a3a1f2c does not match expected magic number 0xf97cff8c [ 59.455999][ T1727] rust_binder: 1727: no such ref 2 [ 59.465582][ T36] audit: type=1400 audit(1751983216.720:331): avc: denied { load_policy } for pid=1725 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.472074][ T1727] rust_binder: 1727: no such ref 0 [ 59.491674][ T1726] SELinux: failed to load policy [ 60.062910][ T305] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.073740][ T305] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.305754][ T1760] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 60.314511][ T1760] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 60.314538][ T1760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.323479][ T1760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:185 [ 60.427232][ T36] audit: type=1400 audit(1751983217.700:332): avc: denied { create } for pid=1766 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 60.433219][ T1767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 60.436566][ T36] audit: type=1400 audit(1751983217.700:333): avc: denied { sys_admin } for pid=1766 comm="syz.3.529" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 60.494087][ T1772] ./file0: Can't lookup blockdev [ 60.512481][ T1774] /dev/rnullb0: Can't lookup blockdev [ 61.209479][ T1789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 61.370903][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.646792][ T1808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.544'. [ 61.764313][ T1824] /dev/rnullb0: Can't lookup blockdev [ 61.814842][ T1832] overlayfs: failed to clone upperpath [ 61.821323][ T1832] netlink: 'syz.3.551': attribute type 28 has an invalid length. [ 61.886446][ T305] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 61.903483][ T305] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 61.927448][ T305] usb 2-1: USB disconnect, device number 10 [ 61.983432][ T1851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=1851 comm=syz.1.558 [ 62.012457][ T1851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1851 comm=syz.1.558 [ 62.125957][ T1885] overlayfs: failed to clone upperpath [ 62.548890][ T1919] fuse: Unknown parameter 'grou00000000000000000000' [ 62.895350][ T1930] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 62.927489][ T1933] fuseblk: Unknown parameter 'gropd' [ 63.356933][ T1965] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.386144][ T353] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.392300][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 63.401649][ T1969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=1969 comm=syz.0.601 [ 63.429691][ T1971] /dev/rnullb0: Can't lookup blockdev [ 63.544273][ T2001] fuse: Bad value for 'fd' [ 63.865510][ T2010] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.910314][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 63.910332][ T36] audit: type=1400 audit(63.886:344): avc: denied { read } for pid=2013 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.175497][ T36] audit: type=1400 audit(64.146:345): avc: denied { lock } for pid=2041 comm="syz.0.629" path="socket:[12132]" dev="sockfs" ino=12132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.226782][ T2048] overlayfs: failed to clone lowerpath [ 64.280341][ T36] audit: type=1400 audit(64.256:346): avc: denied { append } for pid=2052 comm="syz.2.634" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.326164][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 64.415661][ T2076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 64.454501][ T2082] bpf: Bad value for 'mode' [ 64.487233][ T9] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.500545][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 64.514061][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.40 [ 64.514251][ T2091] mmap: syz.2.649 (2091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.532513][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.543254][ T36] audit: type=1400 audit(64.516:347): avc: denied { write } for pid=2090 comm="syz.2.649" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 64.544990][ T9] usb 2-1: Product: syz [ 64.570665][ T9] usb 2-1: Manufacturer: syz [ 64.575506][ T9] usb 2-1: SerialNumber: syz [ 64.588458][ T2098] tc_dump_action: action bad kind [ 64.983329][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.992016][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.001828][ T36] audit: type=1400 audit(64.976:348): avc: denied { ioctl } for pid=2013 comm="syz.1.618" path="socket:[13457]" dev="sockfs" ino=13457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.030132][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 65.036446][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 65.048153][ T9] usb 2-1: USB disconnect, device number 11 [ 65.056742][ T2137] /dev/rnullb0: Can't lookup blockdev [ 65.147827][ T2144] fuse: Unknown parameter 'group_i00000000000000000000' [ 65.589881][ T2169] netlink: 'syz.2.675': attribute type 3 has an invalid length. [ 65.600457][ T2169] rust_binder: Error while translating object. [ 65.600493][ T2169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 65.607082][ T2169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239 [ 65.617148][ T2170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.754240][ T2177] netlink: 176 bytes leftover after parsing attributes in process `syz.2.677'. [ 65.786175][ T305] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 65.936145][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 65.942540][ T305] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.951076][ T305] usb 2-1: config 0 has no interface number 0 [ 65.958968][ T305] usb 2-1: New USB device found, idVendor=0924, idProduct=9901, bcdDevice=c2.57 [ 65.966372][ T2181] /dev/rnullb0: Can't lookup blockdev [ 65.968509][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.981792][ T305] usb 2-1: Product: syz [ 65.986593][ T305] usb 2-1: Manufacturer: syz [ 65.991638][ T305] usb 2-1: SerialNumber: syz [ 65.998516][ T305] usb 2-1: config 0 descriptor?? [ 66.112249][ T36] audit: type=1326 audit(66.086:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.3.688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74dd8e929 code=0x0 [ 66.148647][ T2208] fuse: Unknown parameter 'group_i00000000000000000000' [ 66.192805][ T36] audit: type=1400 audit(66.166:350): avc: denied { mount } for pid=2209 comm="syz.3.690" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.196796][ T2210] overlayfs: failed to clone upperpath [ 66.224517][ T36] audit: type=1400 audit(66.196:351): avc: denied { sys_nice } for pid=2209 comm="syz.3.690" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.271266][ T2214] /dev/rnullb0: Can't lookup blockdev [ 66.288455][ T2218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 66.546748][ T2226] netlink: 'syz.2.696': attribute type 21 has an invalid length. [ 66.554517][ T2226] netlink: 388 bytes leftover after parsing attributes in process `syz.2.696'. [ 66.566377][ T2226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2226 comm=syz.2.696 [ 66.816174][ T305] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 66.960606][ T2256] : renamed from lo [ 66.966136][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 66.976145][ T305] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 66.980265][ T2253] overlayfs: failed to clone upperpath [ 66.984355][ T305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.000040][ T305] usb 3-1: config 0 has no interface number 0 [ 67.006554][ T305] usb 3-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.021199][ T305] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 67.030562][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.040683][ T305] usb 3-1: Product: syz [ 67.044917][ T305] usb 3-1: Manufacturer: syz [ 67.053586][ T305] usb 3-1: SerialNumber: syz [ 67.061394][ T305] usb 3-1: config 0 descriptor?? [ 67.070357][ T305] usb-storage 3-1:0.231: USB Mass Storage device detected [ 67.175753][ T2292] fuse: Unknown parameter 'group_id00000000000000000000' [ 67.270065][ T305] usb 3-1: USB disconnect, device number 14 [ 67.872586][ T36] audit: type=1400 audit(73.848:352): avc: denied { ioctl } for pid=2310 comm="syz.0.720" path="socket:[13796]" dev="sockfs" ino=13796 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.897857][ T36] audit: type=1400 audit(73.878:353): avc: denied { write } for pid=2310 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.945228][ T305] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.971154][ T305] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 68.554935][ T305] usb 2-1: USB disconnect, device number 12 [ 68.648062][ T2341] FAT-fs (rnullb0): bogus number of reserved sectors [ 68.654864][ T2341] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 68.662003][ T2342] FAT-fs (rnullb0): bogus number of reserved sectors [ 68.668865][ T2342] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 68.740333][ T2345] fuse: Unknown parameter 'group_id00000000000000000000' [ 68.871079][ T2353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.734'. [ 68.880307][ T2353] netlink: 108 bytes leftover after parsing attributes in process `syz.3.734'. [ 69.056157][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 69.196150][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.254166][ T2381] netlink: 1 bytes leftover after parsing attributes in process `syz.0.745'. [ 69.425084][ T2389] overlayfs: failed to clone lowerpath [ 69.440015][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.580408][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 69.580423][ T36] audit: type=1400 audit(75.558:355): avc: denied { ioctl } for pid=2402 comm="syz.1.752" path="socket:[12738]" dev="sockfs" ino=12738 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.581646][ T2403] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 69.686143][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 69.816141][ T9] usb 3-1: device descriptor read/64, error -71 [ 69.886141][ T433] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 70.036131][ T433] usb 2-1: Using ep0 maxpacket: 32 [ 70.042459][ T433] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 70.050637][ T433] usb 2-1: config 0 has no interface number 0 [ 70.056816][ T9] usb 3-1: device descriptor read/64, error -71 [ 70.064480][ T433] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 70.073589][ T433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.081645][ T433] usb 2-1: Product: syz [ 70.085825][ T433] usb 2-1: Manufacturer: syz [ 70.096146][ T433] usb 2-1: SerialNumber: syz [ 70.106360][ T433] usb 2-1: config 0 descriptor?? [ 70.112503][ T433] smsc95xx v2.0.0 [ 70.134506][ T2411] 9pnet_fd: Insufficient options for proto=fd [ 70.166213][ T9] usb usb3-port1: attempt power cycle [ 70.506126][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 70.527218][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.657219][ T9] usb 3-1: device descriptor read/8, error -71 [ 70.714607][ T433] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 70.726455][ T433] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.735784][ T433] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 70.746805][ T433] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 70.756219][ T433] usb 2-1: USB disconnect, device number 13 [ 70.896148][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 70.917193][ T9] usb 3-1: device descriptor read/8, error -71 [ 71.047128][ T9] usb 3-1: device descriptor read/8, error -71 [ 71.140284][ T2429] cgroup: fork rejected by pids controller in /syz3 [ 71.176260][ T9] usb usb3-port1: unable to enumerate USB device [ 71.693795][ T2478] fuse: Bad value for 'user_id' [ 71.698748][ T2478] fuse: Bad value for 'user_id' [ 72.206166][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 72.336184][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 72.357223][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.367454][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.377319][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.386715][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.394965][ T31] usb 3-1: SerialNumber: syz [ 72.423891][ T2496] /dev/rnullb0: Can't lookup blockdev [ 72.423906][ T2495] /dev/rnullb0: Can't lookup blockdev [ 72.486986][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 72.487708][ T2503] overlayfs: failed to clone lowerpath [ 72.493398][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.505973][ T9] usb 2-1: config 0 has no interface number 0 [ 72.513628][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.514075][ T2503] overlayfs: failed to clone lowerpath [ 72.522783][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.536334][ T9] usb 2-1: Product: syz [ 72.540542][ T9] usb 2-1: Manufacturer: syz [ 72.545197][ T9] usb 2-1: SerialNumber: syz [ 72.551537][ T9] usb 2-1: config 0 descriptor?? [ 72.557815][ T9] smsc95xx v2.0.0 [ 72.580541][ T2510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.778'. [ 72.603264][ T2486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.612638][ T2486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.668809][ T2486] rust_binder: Write failure EINVAL in pid:271 [ 72.671490][ T31] usb 3-1: 0:2 : does not exist [ 72.684532][ T31] usb 3-1: USB disconnect, device number 19 [ 72.694988][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.790867][ T2526] can: request_module (can-proto-6) failed. [ 72.859978][ T2532] fuse: Bad value for 'user_id' [ 72.864927][ T2532] fuse: Bad value for 'user_id' [ 73.014388][ T2544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 73.159587][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 73.180103][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.206194][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 73.214560][ T36] audit: type=1400 audit(79.188:356): avc: denied { write } for pid=2561 comm="syz.2.796" path="socket:[12869]" dev="sockfs" ino=12869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.217553][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 73.263042][ T9] usb 2-1: USB disconnect, device number 14 [ 73.715789][ T2591] rust_binder: Write failure EFAULT in pid:391 [ 73.828881][ T36] audit: type=1400 audit(79.808:357): avc: denied { watch_reads } for pid=2602 comm="syz.0.812" path="/218" dev="tmpfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.857747][ T36] audit: type=1400 audit(79.808:358): avc: denied { watch watch_reads } for pid=2602 comm="syz.0.812" path="/218/file0" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.866689][ T2605] fuse: Bad value for 'user_id' [ 73.896159][ T2605] fuse: Bad value for 'user_id' [ 74.211125][ T2618] /dev/rnullb0: Can't lookup blockdev [ 74.268529][ T2628] xt_NFQUEUE: number of total queues is 0 [ 74.693996][ T2651] FAT-fs (rnullb0): bogus number of reserved sectors [ 74.700775][ T2651] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 74.787046][ T2665] fuse: Bad value for 'fd' [ 74.916165][ T9] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 75.066151][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 75.196171][ T9] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 75.346175][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 75.351700][ T9] usb usb3-port1: attempt power cycle [ 75.574005][ T36] audit: type=1400 audit(81.548:359): avc: denied { sqpoll } for pid=2677 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.652724][ T36] audit: type=1400 audit(81.628:360): avc: denied { block_suspend } for pid=2694 comm="syz.1.844" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.696165][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 75.714760][ T2704] overlayfs: failed to clone upperpath [ 75.720719][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 75.724450][ T36] audit: type=1400 audit(81.698:361): avc: denied { listen } for pid=2703 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.765690][ T2717] fuse: Bad value for 'fd' [ 75.856221][ T9] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 75.876630][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 75.882147][ T9] usb usb3-port1: unable to enumerate USB device [ 76.131963][ T2733] 9pnet: Could not find request transport: [ 76.428737][ T36] audit: type=1400 audit(82.408:362): avc: denied { getopt } for pid=2746 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.684674][ T2780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.754836][ T2786] fuse: Bad value for 'fd' [ 77.717085][ T2814] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 4240, size: 4294967285) [ 77.717119][ T2814] rust_binder: Error while translating object. [ 77.728490][ T2814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.734686][ T2814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 77.758968][ T36] audit: type=1400 audit(83.738:363): avc: denied { validate_trans } for pid=2815 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.936131][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 78.066146][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.306147][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.546166][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 78.676137][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.916213][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.945679][ T2823] fuse: Bad value for 'group_id' [ 78.950694][ T2823] fuse: Bad value for 'group_id' [ 79.026282][ T9] usb usb2-port1: attempt power cycle [ 79.062826][ T36] audit: type=1400 audit(85.038:364): avc: denied { module_load } for pid=2833 comm="syz.3.895" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 79.366193][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 79.387308][ T9] usb 2-1: device descriptor read/8, error -71 [ 79.527267][ T9] usb 2-1: device descriptor read/8, error -71 [ 79.710418][ T2855] fuse: Bad value for 'fd' [ 79.730165][ T36] audit: type=1400 audit(85.708:365): avc: denied { map } for pid=2856 comm="syz.3.902" path="socket:[15466]" dev="sockfs" ino=15466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.738848][ T2859] tipc: Started in network mode [ 79.756354][ T36] audit: type=1400 audit(85.708:366): avc: denied { accept } for pid=2856 comm="syz.3.902" path="socket:[15466]" dev="sockfs" ino=15466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.758625][ T2859] tipc: Node identity aaaaaaaaaa1, cluster identity 4711 [ 79.788983][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 79.789175][ T2859] tipc: Enabled bearer , priority 10 [ 79.817287][ T9] usb 2-1: device descriptor read/8, error -71 [ 79.833701][ T2864] bpf: Bad value for 'mode' [ 79.833892][ T2865] fuseblk: Bad value for 'fd' [ 79.844038][ T2865] incfs: Error accessing: ./file0. [ 79.849285][ T2865] incfs: mount failed -20 [ 79.902484][ T2876] ./cgroup: Can't lookup blockdev [ 79.908430][ T2876] 9pnet_fd: Insufficient options for proto=fd [ 79.947280][ T9] usb 2-1: device descriptor read/8, error -71 [ 80.056260][ T9] usb usb2-port1: unable to enumerate USB device [ 80.728618][ T2890] fuse: Bad value for 'fd' [ 80.797205][ T2892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.797521][ T2892] rust_binder: Error in use_page_slow: ESRCH [ 80.803974][ T2892] rust_binder: use_range failure ESRCH [ 80.810017][ T2892] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 80.815485][ T2892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.823521][ T2892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:444 [ 80.899983][ T2906] __vm_enough_memory: pid: 2906, comm: syz.2.920, bytes: 70373039144960 not enough memory for the allocation [ 80.920985][ T31] tipc: Node number set to 12233386 [ 80.928380][ T2910] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 80.942762][ T2910] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.922'. [ 80.987419][ T2925] fuse: Invalid rootmode [ 81.040991][ T2940] input: syz1 as /devices/virtual/input/input7 [ 81.084384][ T36] audit: type=1326 audit(87.058:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2948 comm="syz.3.934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff74dd8e929 code=0x0 [ 81.137679][ T2960] fuse: Invalid rootmode [ 81.372072][ T36] audit: type=1400 audit(87.348:368): avc: denied { create } for pid=2982 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.391179][ T36] audit: type=1326 audit(87.348:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087458e929 code=0x0 [ 81.770769][ T36] audit: type=1400 audit(87.748:370): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.980683][ T2999] netlink: 'syz.3.950': attribute type 27 has an invalid length. [ 82.740528][ T36] audit: type=1400 audit(88.718:371): avc: denied { ioctl } for pid=3019 comm="syz.2.957" path="socket:[14876]" dev="sockfs" ino=14876 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.899959][ T3025] 9pnet_fd: Insufficient options for proto=fd [ 82.938317][ T36] audit: type=1400 audit(88.918:372): avc: denied { getattr } for pid=3026 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.055725][ T3039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 84.065164][ T3039] rust_binder: validate_parent_fixup: fixup_min_offset=70, parent_offset=63 [ 84.065192][ T3039] rust_binder: Error while translating object. [ 84.074319][ T3039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.080851][ T3039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 84.394705][ T3046] overlayfs: failed to clone upperpath [ 84.906122][ T433] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 85.057363][ T433] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.067702][ T433] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.078616][ T433] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.088087][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.096349][ T433] usb 3-1: Product: syz [ 85.108351][ T433] usb 3-1: Manufacturer: syz [ 85.117116][ T433] usb 3-1: SerialNumber: syz [ 85.157509][ T3059] sock: sock_timestamping_bind_phc: sock not bind to device [ 85.213434][ T3067] /dev/rnullb0: Can't lookup blockdev [ 85.287544][ T3082] overlayfs: failed to clone upperpath [ 85.287542][ T3081] overlayfs: failed to clone upperpath [ 85.326180][ T433] usb 3-1: 0:2 : does not exist [ 85.338383][ T433] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 85.362574][ T433] usb 3-1: USB disconnect, device number 24 [ 85.379514][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.869472][ T3098] rust_binder: 3098: no such ref 0 [ 86.106290][ T305] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 86.245848][ T3101] fuse: Bad value for 'rootmode' [ 86.257378][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.269604][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.279723][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.293657][ T305] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.303050][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.312097][ T305] usb 3-1: config 0 descriptor?? [ 86.322918][ T305] hub 3-1:0.0: USB hub found [ 86.528360][ T305] hub 3-1:0.0: 14 ports detected [ 86.533841][ T305] hub 3-1:0.0: insufficient power available to use all downstream ports [ 86.686431][ T3105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 86.961630][ T3122] /dev/rnullb0: Can't lookup blockdev [ 87.037331][ T3098] rust_binder: 3098: no such ref 3 [ 87.061795][ T3098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:355 [ 87.070680][ T3128] fuse: Unknown parameter 'user_id00000000000000000000' [ 87.120041][ T305] usb 3-1: USB disconnect, device number 25 [ 87.700696][ T3149] fuse: Bad value for 'rootmode' [ 87.742458][ T3153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'. [ 87.753047][ T3153] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 87.777908][ T3155] fuse: Unknown parameter 'user_id00000000000000000000' [ 88.467531][ T3181] fuse: Unknown parameter 'user_id00000000000000000000' [ 88.513541][ T3189] usb usb7: usbfs: process 3189 (syz.2.1016) did not claim interface 0 before use [ 88.568265][ T3196] rust_binder: Fixups oob 199 202 280 207 [ 88.568296][ T3196] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 88.574188][ T3196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.582622][ T3196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 88.673374][ T3208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.683233][ T3208] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 88.697933][ T3208] rust_binder: Error while translating object. [ 88.707276][ T3208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.713540][ T3208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 88.752761][ T3210] input: syz1 as /devices/virtual/input/input8 [ 88.876979][ T3216] fuse: Bad value for 'rootmode' [ 89.177763][ T36] audit: type=1400 audit(95.158:373): avc: denied { write } for pid=3230 comm="syz.3.1030" path="socket:[15149]" dev="sockfs" ino=15149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.320283][ T36] audit: type=1326 audit(95.298:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.349448][ T36] audit: type=1326 audit(95.298:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.372273][ T36] audit: type=1326 audit(95.298:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.411063][ T36] audit: type=1326 audit(95.298:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.434055][ T36] audit: type=1326 audit(95.298:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.456950][ T36] audit: type=1326 audit(95.298:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.479901][ T36] audit: type=1326 audit(95.298:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.502771][ T36] audit: type=1326 audit(95.298:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.525570][ T36] audit: type=1326 audit(95.298:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3184 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087458e929 code=0x7fc00000 [ 89.967075][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 90.016358][ T3271] /dev/rnullb0: Can't lookup blockdev [ 90.146112][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 90.151691][ T3289] fuse: Bad value for 'fd' [ 90.157604][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.166564][ T31] usb 3-1: config 0 has no interface number 0 [ 90.177165][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.186388][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.198073][ T31] usb 3-1: Product: syz [ 90.202601][ T31] usb 3-1: Manufacturer: syz [ 90.209596][ T31] usb 3-1: SerialNumber: syz [ 90.221328][ T31] usb 3-1: config 0 descriptor?? [ 90.227657][ T31] smsc95xx v2.0.0 [ 90.836428][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 90.848698][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.858503][ T3306] overlayfs: failed to clone upperpath [ 90.864552][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 90.886178][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 90.899863][ T31] usb 3-1: USB disconnect, device number 26 [ 91.388745][ T3312] fuse: Bad value for 'fd' [ 91.415661][ T3314] binder: Unknown parameter 'fscontext?}' [ 91.422335][ T3316] binder: Unknown parameter 'fscontext?}' [ 91.776129][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 91.946148][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 91.960211][ T31] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 91.976108][ T31] usb 3-1: config 0 has no interface number 0 [ 91.986494][ T31] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 92.017947][ T31] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.036114][ T31] usb 3-1: config 0 interface 41 has no altsetting 0 [ 92.054474][ T31] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 92.064060][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.084141][ T31] usb 3-1: Product: syz [ 92.088584][ T31] usb 3-1: Manufacturer: syz [ 92.093301][ T31] usb 3-1: SerialNumber: syz [ 92.117044][ T31] usb 3-1: config 0 descriptor?? [ 92.132520][ T3329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.142325][ T3329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.359762][ T3329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.367051][ T3329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.803570][ T31] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 92.819714][ T31] usb 3-1: USB disconnect, device number 27 [ 93.766125][ T433] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 93.927302][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.937637][ T433] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 93.948585][ T433] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.958037][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.966312][ T433] usb 3-1: Product: syz [ 93.970674][ T433] usb 3-1: Manufacturer: syz [ 93.975374][ T433] usb 3-1: SerialNumber: syz [ 93.981365][ T433] usb 3-1: config 0 descriptor?? [ 94.216297][ T3443] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=3443 comm=syz.0.1120 [ 94.229904][ T3443] netlink: 2232 bytes leftover after parsing attributes in process `syz.0.1120'. [ 94.279142][ T433] usb 3-1: USB disconnect, device number 28 [ 94.329297][ T3445] tipc: Enabling of bearer rejected, failed to enable media [ 94.339015][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 94.339034][ T36] audit: type=1326 audit(100.318:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.0.1121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087458e929 code=0x0 [ 95.022357][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.044435][ T31] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 95.152113][ T3475] ./cgroup: Can't lookup blockdev [ 96.152236][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.152262][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.167440][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.167473][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.174030][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.180918][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.187843][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.194354][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.201217][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.207899][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.214415][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.221165][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.227922][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.234442][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.241190][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.247860][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.254366][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.261182][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.268048][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.274585][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.281349][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.288067][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.294572][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.301361][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.308121][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.316812][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.323953][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.330823][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.337564][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.344131][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.359997][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.366981][ T3515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.414563][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 96.432662][ T3525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3525 comm=syz.2.1150 [ 96.456806][ T3525] netlink: 'syz.2.1150': attribute type 4 has an invalid length. [ 96.467801][ T3525] rust_binder: Write failure EFAULT in pid:467 [ 96.509408][ T3538] overlayfs: failed to clone upperpath [ 97.191323][ T36] audit: type=1400 audit(103.168:398): avc: denied { mounton } for pid=3575 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.271336][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.278476][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.286604][ T3585] fuse: Unknown parameter 'user_i00000000000000000000' [ 97.293609][ T3575] bridge_slave_0: entered allmulticast mode [ 97.300681][ T3575] bridge_slave_0: entered promiscuous mode [ 97.310926][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.318055][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.325207][ T3575] bridge_slave_1: entered allmulticast mode [ 97.331723][ T3575] bridge_slave_1: entered promiscuous mode [ 97.337934][ T292] bridge_slave_1: left allmulticast mode [ 97.343648][ T292] bridge_slave_1: left promiscuous mode [ 97.349367][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.357012][ T292] bridge_slave_0: left allmulticast mode [ 97.362697][ T292] bridge_slave_0: left promiscuous mode [ 97.368475][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.459545][ T292] veth1_macvtap: left promiscuous mode [ 97.465122][ T292] veth0_vlan: left promiscuous mode [ 97.506447][ T3587] fuse: Unknown parameter '0x0000000000000004' [ 97.527485][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.534578][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.541928][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.549005][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.575844][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.584259][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.594335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.601476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.622928][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.630048][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.673688][ T3575] veth0_vlan: entered promiscuous mode [ 97.687615][ T3575] veth1_macvtap: entered promiscuous mode [ 97.720186][ T36] audit: type=1400 audit(103.698:399): avc: denied { mounton } for pid=3575 comm="syz-executor" path="/root/syzkaller.fH9Y6Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 97.834277][ T3609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=3609 comm=syz.4.1164 [ 97.853583][ T3611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1180'. [ 97.876609][ T3609] binder: Unknown parameter '(' [ 97.952540][ T3617] fuse: Unknown parameter '0x0000000000000004' [ 97.983518][ T3619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 98.006445][ T36] audit: type=1400 audit(103.988:400): avc: denied { nlmsg_write } for pid=3618 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 98.461607][ T3649] fuse: Unknown parameter 'fd0x0000000000000004' [ 98.693833][ T3670] fuse: Unknown parameter 'fd0x0000000000000004' [ 98.764394][ T3672] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1203'. [ 99.053777][ T3679] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4103) [ 99.053799][ T3679] rust_binder: Error while translating object. [ 99.064480][ T3679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.070865][ T3679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 99.253917][ T36] audit: type=1400 audit(105.228:401): avc: denied { write } for pid=3681 comm="syz.4.1206" path="socket:[17210]" dev="sockfs" ino=17210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.315438][ T3689] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 99.498078][ T3704] /dev/nullb0: Can't lookup blockdev [ 99.518373][ T36] audit: type=1400 audit(105.498:402): avc: denied { shutdown } for pid=3709 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.547234][ T305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.696122][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 99.702494][ T305] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 99.711792][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.720682][ T305] usb 5-1: config 0 descriptor?? [ 99.927625][ T3691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.936720][ T3691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.944757][ T305] usb 5-1: USB disconnect, device number 2 [ 100.708927][ T3768] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1240'. [ 100.824820][ T3784] tipc: Enabled bearer , priority 10 [ 100.831329][ T3785] tipc: Enabling of bearer rejected, already enabled [ 101.454439][ T3797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1252'. [ 102.096090][ T36] audit: type=1400 audit(108.068:403): avc: denied { map } for pid=3820 comm="syz.0.1259" path="socket:[18590]" dev="sockfs" ino=18590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.164164][ T3824] fuse: Unknown parameter 'user_id00000000000000000000' [ 102.269282][ T3828] netlink: 'syz.4.1262': attribute type 21 has an invalid length. [ 102.277185][ T3828] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1262'. [ 102.287216][ T3828] binder: Unknown parameter ' ' [ 102.365275][ T3833] tipc: Started in network mode [ 102.370244][ T3833] tipc: Node identity 7, cluster identity 1 [ 102.376366][ T3833] tipc: Node number set to 7 [ 102.520205][ T3842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1268'. [ 102.589541][ T3848] /dev/rnullb0: Can't lookup blockdev [ 102.646110][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.685720][ T3864] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62 sclass=netlink_xfrm_socket pid=3864 comm=syz.2.1274 [ 102.806108][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 102.814181][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.828653][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.840917][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 102.861811][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.868608][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 102.877762][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.887879][ T9] usb 5-1: config 0 descriptor?? [ 103.296206][ T9] hid (null): invalid report_size 50650 [ 103.301912][ T9] hid (null): nested delimiters [ 103.307308][ T9] hid (null): unknown global tag 0xc [ 103.312631][ T9] hid (null): unknown global tag 0x40 [ 103.377135][ T3905] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1290'. [ 103.400290][ T3910] bpf: Bad value for 'uid' [ 103.432783][ T3918] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 103.472034][ T3921] fuse: Bad value for 'fd' [ 103.496593][ T31] usb 5-1: USB disconnect, device number 3 [ 103.585813][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 103.610750][ T3940] fuse: Bad value for 'fd' [ 103.615713][ T3940] overlayfs: failed to clone upperpath [ 104.296116][ T458] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.456109][ T458] usb 5-1: Using ep0 maxpacket: 16 [ 104.476907][ T458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.487163][ T458] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 104.496454][ T458] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 104.507458][ T458] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.517434][ T458] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.528343][ T458] usb 5-1: config 1 interface 1 has no altsetting 0 [ 104.536329][ T458] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.545408][ T458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.553440][ T458] usb 5-1: Product: syz [ 104.557672][ T458] usb 5-1: Manufacturer: syz [ 104.562301][ T458] usb 5-1: SerialNumber: syz [ 104.777038][ T3997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.786543][ T3997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.824826][ T458] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 104.833236][ T458] usb 5-1: 2:1 : format type 9 is not supported yet [ 104.844159][ T4007] fuse: Bad value for 'fd' [ 104.849525][ T458] usb 5-1: USB disconnect, device number 4 [ 105.033717][ T4025] fuse: Bad value for 'fd' [ 105.170076][ T4029] binder: Bad value for 'max' [ 105.216505][ T4037] fuse: Bad value for 'rootmode' [ 105.239270][ T4039] syz.4.1339(4039): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 105.322814][ T4048] rust_binder: Write failure EFAULT in pid:118 [ 105.956685][ T36] audit: type=1400 audit(111.938:404): avc: denied { nlmsg_read } for pid=4088 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 106.183677][ T4095] netlink: 'syz.3.1360': attribute type 2 has an invalid length. [ 106.203990][ T4099] /dev/rnullb0: Can't lookup blockdev [ 106.237863][ T4104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=4104 comm=syz.3.1363 [ 106.308968][ T36] audit: type=1326 audit(112.292:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.3.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74dd8e929 code=0x0 [ 106.331281][ T36] audit: type=1400 audit(112.292:406): avc: denied { read } for pid=4109 comm="syz.4.1366" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.357345][ T36] audit: type=1400 audit(112.292:407): avc: denied { open } for pid=4109 comm="syz.4.1366" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.380932][ T36] audit: type=1400 audit(112.292:408): avc: denied { ioctl } for pid=4109 comm="syz.4.1366" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.556277][ T4124] syz.0.1370 (4124): attempted to duplicate a private mapping with mremap. This is not supported. [ 106.771022][ T4142] batadv_slave_0: entered promiscuous mode [ 106.786029][ T4141] batadv_slave_0: left promiscuous mode [ 106.866767][ T4147] fuse: Unknown parameter '0x0000000000000004' [ 107.164466][ T4159] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 107.172503][ T4159] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1383'. [ 107.250531][ T4168] tipc: Enabling of bearer rejected, failed to enable media [ 107.260036][ T4171] tipc: Enabling of bearer rejected, failed to enable media [ 107.269741][ T4166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4166 comm=syz.3.1387 [ 107.303546][ T4166] overlay: ./file1 is not a directory [ 107.347793][ T4183] rust_binder: validate_parent_fixup: fixup_min_offset=74, parent_offset=63 [ 107.347819][ T4183] rust_binder: Error while translating object. [ 107.357706][ T4188] /dev/loop3: Can't lookup blockdev [ 107.369807][ T4183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.369840][ T4183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 107.478996][ T4214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 107.525150][ T4221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:156 [ 107.540092][ T4223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 107.617132][ T4223] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 107.722387][ T4250] fuse: Bad value for 'fd' [ 107.763945][ T4255] rust_binder: 4246 RLIMIT_NICE not set [ 107.800715][ T4262] fuse: Unknown parameter '0x0000000000000004' [ 107.929330][ T4276] fuse: Bad value for 'fd' [ 107.981353][ T4283] overlayfs: missing 'workdir' [ 108.037608][ T4291] kernel profiling enabled (shift: 11) [ 108.159640][ T36] audit: type=1400 audit(114.132:409): avc: denied { search } for pid=4294 comm="syz.0.1435" name="/" dev="configfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.181326][ T36] audit: type=1400 audit(114.152:410): avc: denied { read } for pid=4294 comm="syz.0.1435" name="/" dev="configfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.210132][ T36] audit: type=1400 audit(114.152:411): avc: denied { open } for pid=4294 comm="syz.0.1435" path="/" dev="configfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.218561][ T4297] fuse: Bad value for 'fd' [ 108.241335][ T4300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.242340][ T36] audit: type=1400 audit(114.212:412): avc: denied { getopt } for pid=4298 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.371861][ T36] audit: type=1400 audit(114.342:413): avc: denied { create } for pid=4324 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.609088][ T4335] /dev/rnullb0: Can't lookup blockdev [ 108.656824][ T4345] fuse: Unknown parameter '0x0000000000000005' [ 108.741497][ T4359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 108.771791][ T4363] incfs: Options parsing error. -22 [ 108.777115][ T4363] incfs: mount failed -22 [ 109.453274][ T4446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 109.456934][ T4446] rust_binder: Error while translating object. [ 109.466212][ T4446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.472504][ T4446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 109.510394][ T4448] overlayfs: conflicting lowerdir path [ 109.728659][ T4476] fuse: Unknown parameter '0x0000000000000004' [ 110.523466][ T4502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.532339][ T4502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.731768][ T4521] fuse: Unknown parameter '0x0000000000000005' [ 111.219394][ T4545] can: request_module (can-proto-6) failed. [ 111.574910][ T4589] cgroup: name respecified [ 111.723736][ T4606] fuse: Unknown parameter '0x0000000000000004' [ 111.806934][ T305] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.967537][ T305] usb 5-1: not running at top speed; connect to a high speed hub [ 111.979026][ T305] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 111.992154][ T305] usb 5-1: config 1 interface 0 has no altsetting 0 [ 112.008267][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.017591][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.025615][ T305] usb 5-1: Product: syz [ 112.038092][ T305] usb 5-1: Manufacturer: syz [ 112.042765][ T305] usb 5-1: SerialNumber: syz [ 112.063089][ T4587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.222597][ T4611] /dev/rnullb0: Can't lookup blockdev [ 112.254743][ T4615] overlayfs: disabling nfs_export due to verity=require [ 112.261778][ T4615] overlayfs: missing 'lowerdir' [ 112.268423][ T4616] overlayfs: disabling nfs_export due to verity=require [ 112.275429][ T4616] overlayfs: missing 'lowerdir' [ 112.282931][ T305] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 7 proto 3 vid 0x0525 pid 0xA4A8 [ 112.298510][ T305] usb 5-1: USB disconnect, device number 5 [ 112.310650][ T305] usblp0: removed [ 112.353303][ T4630] tipc: Enabling of bearer rejected, failed to enable media [ 112.424326][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 112.424344][ T36] audit: type=1400 audit(118.392:420): avc: denied { execute_no_trans } for pid=4640 comm="syz.2.1563" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9256F1A65E0202864656C6574656429 dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.461402][ T4645] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 112.504663][ T4654] fuse: Bad value for 'group_id' [ 112.509781][ T4654] fuse: Bad value for 'group_id' [ 112.704079][ T4677] fuse: Unknown parameter 'fd0x0000000000000004' [ 112.824250][ T4685] rust_binder: Error while translating object. [ 112.824298][ T4685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.830689][ T4685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 112.856569][ T4687] rust_binder: Failed copying remainder into alloc: EFAULT [ 112.865788][ T4687] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 112.873319][ T4687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 112.881823][ T4687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:283 [ 113.102826][ T4697] cgroup: release_agent respecified [ 113.119352][ T4697] support for the xor transformation has been removed. [ 113.456162][ T458] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.607240][ T458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.618317][ T458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.628594][ T458] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.637771][ T458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.646926][ T458] usb 5-1: config 0 descriptor?? [ 114.255630][ T458] usb 5-1: string descriptor 0 read error: -22 [ 114.370843][ T4735] fuse: Unknown parameter 'fd0x0000000000000004' [ 114.467794][ T458] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 114.669268][ T458] usb 5-1: USB disconnect, device number 6 [ 115.508822][ T4776] fuse: Unknown parameter 'fd0x0000000000000004' [ 115.639534][ T4783] tipc: Enabling of bearer rejected, failed to enable media [ 115.961006][ T4821] overlayfs: conflicting options: userxattr,verity=require [ 116.308185][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.476115][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 116.482491][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 116.493763][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 17930, setting to 1024 [ 116.505147][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 116.518572][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.525389][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.534830][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.544987][ T9] usb 5-1: config 0 descriptor?? [ 116.554106][ T4843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.166533][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 117.173314][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.184591][ T9] usb 5-1: USB disconnect, device number 7 [ 117.204356][ T4903] x_tables: duplicate underflow at hook 1 [ 117.211103][ T36] audit: type=1400 audit(123.192:421): avc: denied { map } for pid=4902 comm="syz.0.1660" path="pipe:[22597]" dev="pipefs" ino=22597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 117.283879][ T4915] fuse: Unknown parameter 'grou00000000000000000000' [ 117.310176][ T4921] netlink: 'syz.0.1667': attribute type 16 has an invalid length. [ 117.339140][ T36] audit: type=1326 audit(123.312:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087458e929 code=0x0 [ 117.390330][ T36] audit: type=1400 audit(123.362:423): avc: denied { create } for pid=4926 comm="syz.0.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 117.405853][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 117.456165][ T4943] fuse: Unknown parameter 'grou00000000000000000000' [ 117.523856][ T36] audit: type=1400 audit(123.492:424): avc: denied { create } for pid=4949 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.781919][ T4971] fuse: Unknown parameter 'grou00000000000000000000' [ 118.806123][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.957231][ T9] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 118.965531][ T9] usb 5-1: config 0 has no interface number 0 [ 118.971708][ T9] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.982843][ T9] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.992813][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.001944][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.010572][ T9] usb 5-1: config 0 descriptor?? [ 119.028581][ T4996] fuse: Unknown parameter 'group_i00000000000000000000' [ 119.054387][ T4998] __vm_enough_memory: pid: 4998, comm: syz.2.1696, bytes: 21199682539520 not enough memory for the allocation [ 119.057669][ T5000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5000 comm=syz.0.1697 [ 119.426540][ T9] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 119.475885][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.483143][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.490877][ T5005] bridge_slave_0: entered allmulticast mode [ 119.497719][ T5005] bridge_slave_0: entered promiscuous mode [ 119.504172][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.511277][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.518515][ T5005] bridge_slave_1: entered allmulticast mode [ 119.524828][ T5005] bridge_slave_1: entered promiscuous mode [ 119.535228][ T292] bridge_slave_1: left allmulticast mode [ 119.541015][ T292] bridge_slave_1: left promiscuous mode [ 119.547006][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.554555][ T292] bridge_slave_0: left allmulticast mode [ 119.560307][ T292] bridge_slave_0: left promiscuous mode [ 119.565994][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.623056][ T4994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.631601][ T4994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.640366][ T4994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.649057][ T4994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.657730][ T4994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.666343][ T4994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.685670][ T45] usb 5-1: USB disconnect, device number 8 [ 119.750246][ T5024] fuse: Unknown parameter 'group_i00000000000000000000' [ 119.812769][ T5034] netlink: 'syz.2.1710': attribute type 30 has an invalid length. [ 119.817884][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.827712][ T5005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.835027][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.842128][ T5005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.873210][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.881265][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.895929][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.903059][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.911563][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.918659][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.950921][ T5005] veth0_vlan: entered promiscuous mode [ 119.964409][ T5005] veth1_macvtap: entered promiscuous mode [ 120.039135][ T5047] FAT-fs (rnullb0): bogus number of reserved sectors [ 120.046024][ T5047] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 120.058959][ T36] audit: type=1326 audit(126.032:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.1700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68f598e929 code=0x0 [ 120.089959][ T5049] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1714'. [ 120.100304][ T5045] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1714'. [ 120.234744][ T5054] fuse: Unknown parameter 'group_i00000000000000000000' [ 120.275314][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 120.376127][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.537381][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 120.547479][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 120.563959][ T31] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 120.573691][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.581951][ T31] usb 4-1: Product: syz [ 120.586885][ T5081] fuse: Unknown parameter 'group_id00000000000000000000' [ 120.588259][ T31] usb 4-1: Manufacturer: syz [ 120.598998][ T31] usb 4-1: SerialNumber: syz [ 120.604550][ T31] usb 4-1: config 0 descriptor?? [ 120.610300][ T5050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.614851][ T36] audit: type=1400 audit(126.592:426): avc: denied { create } for pid=5082 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 120.617590][ T5050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.846299][ T5050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.853619][ T5050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.261986][ T31] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 121.287986][ T5109] fuse: Unknown parameter 'group_id00000000000000000000' [ 121.639043][ T36] audit: type=1400 audit(127.612:427): avc: denied { write } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23017 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.822984][ T5138] fuse: Unknown parameter 'group_id00000000000000000000' [ 121.907529][ T5150] cannot load conntrack support for proto=3 [ 121.920829][ T305] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 122.077483][ T305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.085995][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 122.096028][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 122.105960][ T305] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.121059][ T305] usb 5-1: string descriptor 0 read error: -22 [ 122.127392][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.136528][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.145824][ T5127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 122.153154][ T5127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 122.161608][ T305] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 122.208168][ T5162] fuse: Bad value for 'user_id' [ 122.213152][ T5162] fuse: Bad value for 'user_id' [ 122.362872][ T5127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:353 [ 122.363339][ T9] usb 5-1: USB disconnect, device number 9 [ 123.036765][ T31] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 123.047501][ T31] usb 4-1: USB disconnect, device number 7 [ 123.064166][ T36] audit: type=1400 audit(129.032:428): avc: denied { watch watch_reads } for pid=5164 comm="syz.0.1763" path="/522/file0" dev="tmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.101876][ T36] audit: type=1400 audit(129.072:429): avc: denied { ioctl } for pid=5171 comm="syz.2.1758" path="socket:[23061]" dev="sockfs" ino=23061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.187571][ T5183] syz.2.1761 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.316147][ T305] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.337807][ T5199] overlayfs: failed to clone upperpath [ 123.395634][ T36] audit: type=1326 audit(129.362:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.418532][ T36] audit: type=1326 audit(129.372:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.441434][ T36] audit: type=1326 audit(129.372:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.464274][ T36] audit: type=1326 audit(129.372:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.487323][ T36] audit: type=1326 audit(129.372:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.510333][ T36] audit: type=1326 audit(129.372:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.533320][ T36] audit: type=1326 audit(129.372:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.556253][ T36] audit: type=1326 audit(129.372:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.2.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0a98e929 code=0x7ffc0000 [ 123.579456][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.589619][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 123.600254][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.609383][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.617517][ T305] usb 5-1: Product: syz [ 123.621767][ T305] usb 5-1: Manufacturer: syz [ 123.626674][ T305] usb 5-1: SerialNumber: syz [ 123.632861][ T305] usb 5-1: config 0 descriptor?? [ 123.675501][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 123.907532][ T305] usb 5-1: USB disconnect, device number 10 [ 123.962102][ T5222] can0: slcan on ptm0. [ 124.312081][ T5245] fuse: Bad value for 'fd' [ 124.688623][ T5270] fuse: Bad value for 'fd' [ 124.740257][ T5285] fuse: Unknown parameter 'f' [ 124.886728][ T5221] can0 (unregistered): slcan off ptm0. [ 124.987436][ T5311] fuse: Bad value for 'fd' [ 124.998179][ T5314] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 125.285161][ T5358] fuse: Bad value for 'fd' [ 126.202936][ T5384] fuse: Bad value for 'fd' [ 126.270999][ T5399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:402 [ 126.356109][ T305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.358360][ T5415] fuse: Bad value for 'fd' [ 126.517644][ T305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.526520][ T305] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.536528][ T305] usb 4-1: config 1 interface 0 has no altsetting 0 [ 126.544799][ T305] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 126.554328][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.562632][ T305] usb 4-1: Product: syz [ 126.570193][ T305] usb 4-1: Manufacturer: syz [ 126.579595][ T305] usb 4-1: SerialNumber: syz [ 126.800194][ T305] usbhid 4-1:1.0: can't add hid device: -71 [ 126.806372][ T305] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 126.815748][ T305] usb 4-1: USB disconnect, device number 8 [ 127.259917][ T5449] fuse: Invalid rootmode [ 127.399206][ T5471] fuse: Invalid rootmode [ 127.666125][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.817113][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.827407][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 127.838637][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.847791][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.855809][ T9] usb 5-1: Product: syz [ 127.860038][ T9] usb 5-1: Manufacturer: syz [ 127.864667][ T9] usb 5-1: SerialNumber: syz [ 127.871504][ T9] usb 5-1: config 0 descriptor?? [ 128.036880][ T5490] fuse: Invalid rootmode [ 128.148501][ T31] usb 5-1: USB disconnect, device number 11 [ 128.430664][ T5513] fuse: Bad value for 'rootmode' [ 128.466164][ T5517] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1871'. [ 128.590350][ T5524] tipc: Failed to remove unknown binding: 66,1,1/12233386:3796946669/3796946671 [ 128.663124][ T5534] fuse: Bad value for 'rootmode' [ 128.761702][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 128.761720][ T36] audit: type=1400 audit(134.732:466): avc: denied { create } for pid=5539 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.762979][ T5540] netlink: 'syz.4.1882': attribute type 4 has an invalid length. [ 128.794537][ T5540] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1882'. [ 128.817650][ T5542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:438 [ 128.870372][ T5556] fuse: Bad value for 'rootmode' [ 129.073837][ T5578] fuse: Unknown parameter 'use00000000000000000000' [ 129.106864][ T36] audit: type=1400 audit(135.082:467): avc: denied { read } for pid=5581 comm="syz.2.1902" path="socket:[24183]" dev="sockfs" ino=24183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.107574][ T5564] fuseblk: Bad value for 'rootmode' [ 129.202292][ T5598] tipc: Bearer : already 2 bearers with priority 10 [ 129.209868][ T5598] tipc: Bearer : trying with adjusted priority [ 129.217193][ T5598] tipc: Enabling of bearer rejected, failed to enable media [ 129.233786][ T5602] fuseblk: Bad value for 'user_id' [ 129.239000][ T5602] fuseblk: Bad value for 'user_id' [ 129.256817][ T5610] fuse: Unknown parameter 'use00000000000000000000' [ 129.699029][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.707151][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.715126][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.723187][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.731181][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.739208][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.747185][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.755187][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.763201][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.771192][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.779204][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.787220][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.795146][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.803123][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.811190][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.819184][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.827159][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.835083][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.843095][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.851080][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.859048][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.867136][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.875062][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.883034][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.891020][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.899012][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.906999][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.926543][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.934623][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.946298][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.954276][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.966114][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.974093][ T5644] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 130.039798][ T5663] rust_binder: Write failure EINVAL in pid:459 [ 130.041064][ T36] audit: type=1400 audit(136.012:468): avc: denied { getopt } for pid=5662 comm="syz.4.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.069168][ T36] audit: type=1400 audit(136.012:469): avc: denied { ioctl } for pid=5662 comm="syz.4.1929" path="socket:[25300]" dev="sockfs" ino=25300 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.452154][ T5715] xfrm0: mtu less than device minimum [ 130.478947][ T5717] overlayfs: failed to clone upperpath [ 130.856151][ T305] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.007165][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.017460][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 131.027767][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.036862][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.044910][ T305] usb 5-1: Product: syz [ 131.049165][ T305] usb 5-1: Manufacturer: syz [ 131.054110][ T305] usb 5-1: SerialNumber: syz [ 131.063561][ T305] usb 5-1: config 0 descriptor?? [ 131.071858][ T5774] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1970'. [ 131.299138][ T9] usb 5-1: USB disconnect, device number 12 [ 131.478543][ T5787] 9pnet_fd: Insufficient options for proto=fd [ 131.819512][ T36] audit: type=1400 audit(137.792:470): avc: denied { map } for pid=5825 comm="syz.4.1989" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.028130][ T36] audit: type=1326 audit(138.002:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ff98e929 code=0x7ffc0000 [ 132.051080][ T36] audit: type=1326 audit(138.002:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ff98e929 code=0x7ffc0000 [ 132.080263][ T36] audit: type=1326 audit(138.002:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53ff98d290 code=0x7ffc0000 [ 132.103498][ T36] audit: type=1326 audit(138.002:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53ff98d290 code=0x7ffc0000 [ 132.126675][ T36] audit: type=1326 audit(138.002:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ff98e929 code=0x7ffc0000 [ 132.333928][ T5881] rust_binder: Error while translating object. [ 132.333967][ T5881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 132.348181][ T5878] overlayfs: failed to clone upperpath [ 132.361263][ T5881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:508 [ 132.382825][ T5885] fuse: Unknown parameter 'grNO;WEoupid' [ 132.483091][ T5907] tmpfs: Unknown parameter 'grpquota' [ 132.578041][ T5917] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2019'. [ 132.606714][ T5900] FAT-fs (rnullb0): bogus number of reserved sectors [ 132.623591][ T5900] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 133.116422][ T433] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 133.246195][ T433] usb 5-1: device descriptor read/64, error -71 [ 133.486414][ T433] usb 5-1: device descriptor read/64, error -71 [ 133.506835][ T5949] overlayfs: failed to clone upperpath [ 133.647326][ T5958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=5958 comm=syz.3.2034 [ 133.708470][ T5966] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 133.743204][ T433] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 133.773061][ T5973] tipc: Enabling of bearer rejected, failed to enable media [ 133.886119][ T433] usb 5-1: device descriptor read/64, error -71 [ 134.136106][ T433] usb 5-1: device descriptor read/64, error -71 [ 134.148180][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.156939][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.164065][ T6000] bridge_slave_0: entered allmulticast mode [ 134.171247][ T6000] bridge_slave_0: entered promiscuous mode [ 134.178177][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.185350][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.194615][ T6000] bridge_slave_1: entered allmulticast mode [ 134.201171][ T6000] bridge_slave_1: entered promiscuous mode [ 134.246289][ T433] usb usb5-port1: attempt power cycle [ 134.319411][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.326545][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.333877][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.340999][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.368342][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.386006][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.398579][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.405688][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.425074][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.432223][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.481892][ T6000] veth0_vlan: entered promiscuous mode [ 134.509717][ T6000] veth1_macvtap: entered promiscuous mode [ 134.586130][ T433] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 134.617133][ T433] usb 5-1: device descriptor read/8, error -71 [ 134.747585][ T433] usb 5-1: device descriptor read/8, error -71 [ 134.755087][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 134.755104][ T36] audit: type=1400 audit(140.722:488): avc: denied { create } for pid=6028 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 134.941920][ T6065] overlayfs: failed to clone upperpath [ 134.976120][ T31] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 134.982101][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2080'. [ 134.992815][ T433] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 135.017282][ T433] usb 5-1: device descriptor read/8, error -71 [ 135.050899][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2084'. [ 135.137521][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.145648][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 135.155973][ T433] usb 5-1: device descriptor read/8, error -71 [ 135.156307][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 135.170804][ T31] usb 1-1: config 0 has no interface number 0 [ 135.177272][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 135.188777][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 135.198870][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 135.205991][ T31] usb 1-1: language id specifier not provided by device, defaulting to English [ 135.218628][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 135.228387][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 135.236987][ T31] usb 1-1: Product: syz [ 135.241433][ T31] usb 1-1: SerialNumber: syz [ 135.247659][ T31] usb 1-1: config 0 descriptor?? [ 135.276184][ T433] usb usb5-port1: unable to enumerate USB device [ 135.459000][ T31] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9 [ 135.470951][ T31] usb 1-1: USB disconnect, device number 8 [ 135.904713][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 135.915238][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 136.003785][ T6132] rust_binder: Error in use_page_slow: ESRCH [ 136.003814][ T6132] rust_binder: use_range failure ESRCH [ 136.009985][ T6133] rust_binder: Error in use_page_slow: ESRCH [ 136.010239][ T6132] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 136.015632][ T6133] rust_binder: use_range failure ESRCH [ 136.021733][ T6132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 136.030177][ T6133] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 136.035931][ T6132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:524 [ 136.044683][ T6133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 136.061622][ T6133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:524 [ 136.203191][ T36] audit: type=1400 audit(142.172:489): avc: denied { associate } for pid=6141 comm="syz.4.2109" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.250146][ T36] audit: type=1400 audit(142.222:490): avc: denied { connect } for pid=6149 comm="syz.4.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.661711][ T6218] futex_wake_op: syz.3.2135 tries to shift op by -1; fix this program [ 136.909282][ T6231] support for the xor transformation has been removed. [ 136.931563][ T6233] rust_binder: Error while translating object. [ 136.931596][ T6233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.937848][ T6233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 136.949986][ T6233] pim6reg1: entered promiscuous mode [ 136.964505][ T6233] pim6reg1: entered allmulticast mode [ 137.127874][ T6247] fuse: Bad value for 'user_id' [ 137.132825][ T6247] fuse: Bad value for 'user_id' [ 137.148634][ T6249] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 192, size: 234) [ 137.148665][ T6249] rust_binder: Error while translating object. [ 137.160636][ T6249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.166877][ T6249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 137.436120][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.596099][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 137.602417][ T31] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 137.613291][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.623102][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.632914][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 137.642824][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 137.656645][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.665738][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.673797][ T31] usb 5-1: SerialNumber: syz [ 137.679436][ T6257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.687439][ T31] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 137.695509][ T31] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 137.717794][ T36] audit: type=1326 audit(143.692:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.746632][ T36] audit: type=1326 audit(143.692:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.769463][ T36] audit: type=1326 audit(143.692:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.792450][ T36] audit: type=1326 audit(143.692:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.815892][ T36] audit: type=1326 audit(143.692:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.838702][ T36] audit: type=1326 audit(143.692:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.861968][ T36] audit: type=1326 audit(143.692:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x7ffc0000 [ 137.889056][ T6257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 137.889100][ T6257] rust_binder: Read failure Err(EFAULT) in pid:546 [ 137.899164][ T9] usb 5-1: USB disconnect, device number 17 [ 137.921926][ T6272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=6272 comm=syz.3.2155 [ 137.935517][ T6272] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 137.945320][ T6272] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 138.005076][ T6285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.005529][ T6285] rust_binder: 6285: no such ref 3 [ 138.095271][ T6301] rust_binder: Write failure EFAULT in pid:43 [ 138.376136][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.425731][ T6323] support for the xor transformation has been removed. [ 138.536104][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 138.542517][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.553889][ T31] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.566848][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.573575][ T31] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 138.582693][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.591604][ T31] usb 1-1: config 0 descriptor?? [ 139.048884][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 139.055108][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.064124][ T31] usb 1-1: USB disconnect, device number 9 [ 139.332446][ T6343] rust_binder: Write failure EINVAL in pid:561 [ 139.407537][ T6349] rust_binder: 6349: no such ref 0 [ 139.419235][ T6349] rust_binder: Write failure EINVAL in pid:567 [ 139.579803][ T6366] rust_binder: 6366: no such ref 0 [ 139.591359][ T6365] netlink: 'syz.3.2189': attribute type 27 has an invalid length. [ 139.613234][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.620630][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.284257][ T6397] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2199'. [ 140.672327][ T6404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 141.013714][ T6433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2210'. [ 141.405461][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 141.421559][ T6453] binder: Unknown parameter 'coй' [ 141.632661][ T6471] netlink: 'syz.4.2226': attribute type 4 has an invalid length. [ 141.640501][ T6471] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.2226'. [ 141.661525][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 141.661545][ T36] audit: type=1400 audit(147.632:515): avc: denied { read append } for pid=6470 comm="syz.4.2226" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.691758][ T36] audit: type=1400 audit(147.632:516): avc: denied { open } for pid=6470 comm="syz.4.2226" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.825068][ T6478] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2229'. [ 142.126139][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 142.153810][ T36] audit: type=1400 audit(148.122:517): avc: denied { getopt } for pid=6501 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.226478][ T6514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 142.226709][ T6514] rust_binder: Error while translating object. [ 142.235863][ T6514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.242140][ T6514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 142.262661][ T36] audit: type=1400 audit(148.232:518): avc: denied { create } for pid=6515 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.291667][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.301810][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.312106][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.321234][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.329274][ T9] usb 5-1: Product: syz [ 142.333467][ T9] usb 5-1: Manufacturer: syz [ 142.338093][ T9] usb 5-1: SerialNumber: syz [ 142.545301][ T9] usb 5-1: 0:2 : does not exist [ 142.555526][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 142.566355][ T9] usb 5-1: USB disconnect, device number 18 [ 142.576450][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.125456][ T6535] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 143.197558][ T36] audit: type=1400 audit(149.172:519): avc: denied { nlmsg_read } for pid=6544 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.271687][ T6554] fuse: Unknown parameter 'g>0x000000000000001c' [ 143.296999][ T36] audit: type=1400 audit(149.272:520): avc: denied { map } for pid=6556 comm="syz.0.2258" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.008926][ T36] audit: type=1400 audit(149.982:521): avc: denied { bind } for pid=6563 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.146991][ T36] audit: type=1400 audit(150.122:522): avc: denied { remount } for pid=6574 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.174328][ T6577] rust_binder: Failed to allocate buffer. len:4294966456, is_oneway:false [ 144.229949][ T6589] netlink: 'syz.0.2272': attribute type 16 has an invalid length. [ 144.252803][ T36] audit: type=1400 audit(150.222:523): avc: denied { create } for pid=6588 comm="syz.0.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.273775][ T6589] tipc: Started in network mode [ 144.279783][ T6589] tipc: Node identity c653334a80a6, cluster identity 4711 [ 144.293378][ T6589] tipc: Enabled bearer , priority 0 [ 144.301405][ T6589] tipc: Disabling bearer [ 144.391061][ T36] audit: type=1400 audit(150.362:524): avc: denied { read write } for pid=6595 comm="syz.0.2275" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.434219][ T6606] overlayfs: failed to clone upperpath [ 144.474044][ T6622] overlay: ./bus is not a directory [ 144.480847][ T6624] overlay: ./bus is not a directory [ 144.773020][ T6672] 9pnet_fd: Insufficient options for proto=fd [ 145.032455][ T6704] 9pnet_fd: Insufficient options for proto=fd [ 145.462715][ T6721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:645 [ 145.624698][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 145.656241][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.767878][ T6754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 145.767962][ T6754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:657 [ 145.823075][ T6775] /dev/rnullb0: Can't lookup blockdev [ 145.854287][ T6778] netlink: 'syz.3.2335': attribute type 25 has an invalid length. [ 146.043827][ T6793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.576102][ T458] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.737205][ T458] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.747081][ T458] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 146.758467][ T458] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.767621][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.775669][ T458] usb 1-1: Product: syz [ 146.780071][ T458] usb 1-1: Manufacturer: syz [ 146.784941][ T458] usb 1-1: SerialNumber: syz [ 146.790912][ T458] usb 1-1: config 0 descriptor?? [ 146.796222][ T6796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.803676][ T6796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.833493][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2348'. [ 147.012457][ T6796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.019822][ T6796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.429688][ T458] Error reading MAC address [ 147.435224][ T458] usb 1-1: USB disconnect, device number 10 [ 147.962263][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 147.962283][ T36] audit: type=1400 audit(153.932:532): avc: denied { map } for pid=6835 comm="syz.0.2354" path="socket:[29740]" dev="sockfs" ino=29740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 147.962684][ T6836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.087630][ T6858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.106083][ T36] audit: type=1400 audit(154.072:533): avc: denied { write } for pid=6859 comm="syz.0.2362" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.136224][ T36] audit: type=1400 audit(154.072:534): avc: denied { ioctl } for pid=6859 comm="syz.0.2362" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.346113][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.496093][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 148.502337][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.513302][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.523097][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.529766][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 148.538826][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.547584][ T45] usb 1-1: config 0 descriptor?? [ 148.879161][ T6871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2366'. [ 148.918455][ T6880] 9pnet_fd: Insufficient options for proto=fd [ 148.957509][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 148.963607][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.974433][ T45] usb 1-1: USB disconnect, device number 11 [ 149.042904][ T36] audit: type=1400 audit(155.012:535): avc: denied { mount } for pid=6910 comm="syz.2.2379" name="/" dev="pstore" ino=2610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 149.066436][ T36] audit: type=1400 audit(155.012:536): avc: denied { map } for pid=6910 comm="syz.2.2379" path="socket:[29842]" dev="sockfs" ino=29842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.267307][ T6930] rust_binder: Got transaction with invalid offset. [ 149.267356][ T6930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.294328][ T6930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 149.507174][ T6944] veth1_macvtap: left promiscuous mode [ 149.527488][ T6944] macsec0: entered allmulticast mode [ 149.647489][ T6994] FAT-fs (rnullb0): bogus number of reserved sectors [ 149.654244][ T6994] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 149.726139][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 149.750305][ T7006] overlayfs: failed to clone upperpath [ 149.781145][ T7013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13958 sclass=netlink_route_socket pid=7013 comm=syz.2.2401 [ 149.881441][ T7017] cgroup: fork rejected by pids controller in /syz0 [ 150.287004][ T7102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 150.287137][ T7102] rust_binder: Write failure EINVAL in pid:236 [ 150.287511][ T7103] rust_binder: 7103: no such ref 2 [ 150.358729][ T7106] xt_NFQUEUE: number of total queues is 0 [ 150.660565][ T7122] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2416'. [ 151.300746][ T5906] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.010275][ T7221] tipc: Failed to remove unknown binding: 66,2,3/0:3999828742/3999828743 [ 152.379847][ T7225] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2452'. [ 152.426841][ T7236] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2455'. [ 152.436308][ T7236] batadv_slave_0: entered promiscuous mode [ 152.464506][ T7236] bpf: Bad value for 'mode' [ 152.499183][ T7235] batadv_slave_0: left promiscuous mode [ 152.904759][ T36] audit: type=1400 audit(158.872:537): avc: denied { create } for pid=7279 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.181738][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.188971][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.196114][ T7300] bridge_slave_0: entered allmulticast mode [ 153.202420][ T7300] bridge_slave_0: entered promiscuous mode [ 153.211366][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.218464][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.225545][ T7300] bridge_slave_1: entered allmulticast mode [ 153.231925][ T7300] bridge_slave_1: entered promiscuous mode [ 153.283301][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.290390][ T7300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.297735][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.304780][ T7300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.316137][ T353] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.322343][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 153.355354][ T7300] veth0_vlan: entered promiscuous mode [ 153.366949][ T7300] veth1_macvtap: entered promiscuous mode [ 153.457878][ T7308] fuse: Unknown parameter '00000000000000000000' [ 153.726188][ T31] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 153.877464][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.885595][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 153.893456][ T31] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 153.902483][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 153.910143][ T31] usb 1-1: can't read configurations, error -61 [ 153.939046][ T7338] netlink: 'syz.4.2490': attribute type 4 has an invalid length. [ 154.046152][ T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 154.197514][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.205634][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 154.213615][ T31] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 154.222794][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.230488][ T31] usb 1-1: can't read configurations, error -61 [ 154.236902][ T31] usb usb1-port1: attempt power cycle [ 154.576095][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 154.597739][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.605942][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 154.613890][ T31] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 154.622825][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.630476][ T31] usb 1-1: can't read configurations, error -61 [ 154.766108][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 154.787882][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.796017][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 154.803861][ T31] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 154.818072][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.825759][ T31] usb 1-1: can't read configurations, error -61 [ 154.832325][ T31] usb usb1-port1: unable to enumerate USB device [ 155.840459][ T7374] fuse: Bad value for 'user_id' [ 155.845360][ T7374] fuse: Bad value for 'user_id' [ 156.086104][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 156.237227][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.247444][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.261174][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.270326][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.278370][ T9] usb 3-1: SerialNumber: syz [ 156.285560][ T9] usb 3-1: bad CDC descriptors [ 156.485415][ T306] usb 3-1: USB disconnect, device number 29 [ 156.539276][ T36] audit: type=1400 audit(162.512:538): avc: denied { append } for pid=7377 comm="syz.0.2503" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.599580][ T7385] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 156.599578][ T36] audit: type=1400 audit(162.572:539): avc: denied { relabelfrom } for pid=7384 comm="syz.0.2505" name="NETLINK" dev="sockfs" ino=32866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 156.632684][ T36] audit: type=1400 audit(162.602:540): avc: denied { relabelto } for pid=7384 comm="syz.0.2505" name="NETLINK" dev="sockfs" ino=32866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_audit_socket permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 156.695272][ T36] audit: type=1326 audit(162.662:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.2508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68f598e929 code=0x0 [ 156.864985][ T7385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.867387][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 157.832332][ T7404] 9pnet_virtio: no channels available for device 127.0.0.1 [ 158.086138][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 158.237181][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.247391][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 158.257870][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.267330][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.275379][ T9] usb 3-1: Product: syz [ 158.279599][ T9] usb 3-1: Manufacturer: syz [ 158.284211][ T9] usb 3-1: SerialNumber: syz [ 158.289501][ T9] usb 3-1: config 0 descriptor?? [ 158.547597][ T45] usb 3-1: USB disconnect, device number 30 [ 158.729767][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 158.738748][ T7409] bridge_slave_1: left allmulticast mode [ 158.744420][ T7409] bridge_slave_1: left promiscuous mode [ 158.750470][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.758474][ T7409] bridge_slave_0: left allmulticast mode [ 158.764145][ T7409] bridge_slave_0: left promiscuous mode [ 158.769901][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.774030][ T7430] overlayfs: failed to clone upperpath [ 159.780603][ T7430] overlayfs: failed to resolve '/b [ 159.780603][ T7430] tbF?! 4eUzS0voI/@B@_b./file0': -2 [ 160.263257][ T7442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 160.263586][ T7442] rust_binder: Write failure EINVAL in pid:59 [ 160.274962][ T7442] rust_binder: 7442: no such ref 2 [ 160.646107][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.797116][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.807312][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 160.817738][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.826957][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.834964][ T31] usb 1-1: Product: syz [ 160.839159][ T31] usb 1-1: Manufacturer: syz [ 160.843783][ T31] usb 1-1: SerialNumber: syz [ 160.849158][ T31] usb 1-1: config 0 descriptor?? [ 161.107119][ T9] usb 1-1: USB disconnect, device number 16 [ 161.159561][ T36] audit: type=1400 audit(167.132:542): avc: denied { map } for pid=7450 comm="syz.2.2526" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.186066][ T36] audit: type=1400 audit(167.132:543): avc: denied { execute } for pid=7450 comm="syz.2.2526" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.396090][ T433] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 161.556130][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 161.562455][ T433] usb 3-1: config 0 has no interfaces? [ 161.569480][ T433] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 161.578593][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.586639][ T433] usb 3-1: Product: syz [ 161.590862][ T433] usb 3-1: Manufacturer: syz [ 161.595479][ T433] usb 3-1: SerialNumber: syz [ 161.600776][ T433] usb 3-1: config 0 descriptor?? [ 161.672799][ T36] audit: type=1326 audit(167.642:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.0.2534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbebb8e929 code=0x0 [ 161.814158][ T45] usb 3-1: USB disconnect, device number 31 [ 162.009275][ T7479] overlayfs: failed to clone upperpath [ 162.139618][ T7484] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2537'. [ 162.490956][ T7513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 162.491264][ T7513] rust_binder: Error while translating object. [ 162.500907][ T7513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.507234][ T7513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 162.613455][ T36] audit: type=1400 audit(168.582:545): avc: denied { mounton } for pid=7524 comm="syz.0.2552" path="/79/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 162.846085][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 162.996078][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 163.002448][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.013448][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.023239][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.036121][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.045176][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.053955][ T45] usb 1-1: config 0 descriptor?? [ 163.293898][ T7545] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 163.331794][ T7547] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 163.465991][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input10 [ 163.479053][ T45] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 163.663331][ T7525] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 163.673379][ T36] audit: type=1400 audit(169.642:546): avc: denied { relabelto } for pid=7524 comm="syz.0.2552" name="file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_var_run_t:s0" [ 163.683789][ T63] usb 1-1: USB disconnect, device number 17 [ 163.700314][ T36] audit: type=1400 audit(169.642:547): avc: denied { associate } for pid=7524 comm="syz.0.2552" name="file0" dev="tmpfs" ino=441 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_var_run_t:s0" [ 164.666266][ T353] Bluetooth: hci0: command 0x1003 tx timeout [ 164.672543][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.749607][ T7568] overlay: filesystem on ./bus not supported as upperdir [ 164.784200][ T7573] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 164.792579][ T7573] overlayfs: missing 'lowerdir' [ 164.807854][ T36] audit: type=1400 audit(170.782:548): avc: denied { read } for pid=7579 comm="syz.0.2571" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.831288][ T36] audit: type=1400 audit(170.792:549): avc: denied { open } for pid=7579 comm="syz.0.2571" path="/84/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.855252][ T36] audit: type=1400 audit(170.792:550): avc: denied { ioctl } for pid=7579 comm="syz.0.2571" path="/84/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.947465][ T7590] binder: Unknown parameter 'fscfined_u' [ 165.113784][ T7597] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2576'. [ 165.123533][ T7597] 0{X: renamed from gretap0 (while UP) [ 165.130993][ T7597] 0{X: entered allmulticast mode [ 165.136922][ T7597] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 165.225617][ T7597] rust_binder: Error in use_page_slow: ESRCH [ 165.225645][ T7597] rust_binder: use_range failure ESRCH [ 165.231916][ T7597] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 165.237615][ T7597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 165.245636][ T7597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:105 [ 165.271729][ T7610] rust_binder: 7610: no such ref 0 [ 165.526082][ T45] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 165.569639][ T7613] 9pnet_fd: p9_fd_create_unix (7613): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 165.686066][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 165.698885][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.715990][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.736763][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.748094][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.766085][ T45] usb 3-1: Product: у [ 165.771371][ T45] usb 3-1: Manufacturer: ѕ [ 165.780243][ T45] usb 3-1: SerialNumber: 暙羚翩圃띂聲ோ乳헍㸦걊퓅ძ됖鵰ᡵ京펀蜺迆舗袦쎦뱎⚘웜ᘎ⠇㰕胩ச镽⟧ﲃ啡깞⁳ᡟ懱ꑂﮩꃴ圗殜풨៸蹰Ẁ䘍嘏窲閛縚翌д瀿⋀謦o者 [ 166.014321][ T7610] rust_binder: Write failure EINVAL in pid:108 [ 166.016818][ T45] usb 3-1: 0:2 : does not exist [ 166.027359][ T7621] rust_binder: Error in use_page_slow: ESRCH [ 166.027934][ T7621] rust_binder: use_range failure ESRCH [ 166.030633][ T45] usb 3-1: USB disconnect, device number 32 [ 166.036411][ T7621] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 166.045381][ T7621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 166.053611][ T7621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:319 [ 166.356221][ T63] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 166.404913][ T7635] __vm_enough_memory: pid: 7635, comm: syz.4.2590, bytes: 70373039144960 not enough memory for the allocation [ 166.431433][ T7639] binder: Bad value for 'stats' [ 166.495722][ T36] audit: type=1400 audit(172.462:551): avc: denied { execute } for pid=7640 comm="syz.4.2592" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.540099][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 166.565633][ T63] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 166.584707][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.603968][ T63] usb 1-1: config 0 descriptor?? [ 166.616816][ T7631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.646575][ T36] audit: type=1400 audit(172.612:552): avc: denied { ioctl } for pid=7658 comm="syz.4.2598" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.704653][ T36] audit: type=1400 audit(172.672:553): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 166.725690][ T36] audit: type=1400 audit(172.672:554): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 166.750796][ T36] audit: type=1400 audit(172.672:555): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=601 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 166.856066][ T458] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 167.007289][ T458] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.017706][ T458] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 167.031351][ T63] itetech 0003:06CB:2968.000D: unknown main item tag 0x0 [ 167.038707][ T63] itetech 0003:06CB:2968.000D: item fetching failed at offset 3/5 [ 167.047532][ T63] itetech 0003:06CB:2968.000D: probe with driver itetech failed with error -22 [ 167.056952][ T458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.066347][ T458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.079460][ T458] usb 3-1: Product: syz [ 167.083727][ T458] usb 3-1: Manufacturer: syz [ 167.088713][ T458] usb 3-1: SerialNumber: syz [ 167.094347][ T458] usb 3-1: config 0 descriptor?? [ 167.230916][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.239616][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.248382][ T45] usb 1-1: USB disconnect, device number 18 [ 167.316662][ T7630] TCP: out of memory -- consider tuning tcp_mem [ 167.323310][ T7630] ------------[ cut here ]------------ [ 167.328844][ T7630] WARNING: CPU: 1 PID: 7630 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 167.338382][ T7630] Modules linked in: [ 167.342301][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.0.2588 Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 57fdd3e93686ba62eddbadecdc135f5c3b5b89e0 [ 167.355794][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.365908][ T7630] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 167.371933][ T7630] Code: a3 e8 a3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 97 e6 c8 fc 0f 0b e9 92 fe ff ff e8 8b e6 c8 fc 0f 0b e9 c4 fe ff ff e8 7f e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 167.392072][ T7630] RSP: 0018:ffffc9000e9f7be8 EFLAGS: 00010293 [ 167.398304][ T7630] RAX: ffffffff84bcc1d1 RBX: 0000000080002000 RCX: ffff888116f43900 [ 167.406345][ T7630] RDX: 0000000000000000 RSI: 0000000080002000 RDI: 0000000000000000 [ 167.414336][ T7630] RBP: ffffc9000e9f7c30 R08: ffff888118e4517f R09: 1ffff110231c8a2f [ 167.422363][ T7630] R10: dffffc0000000000 R11: ffffed10231c8a30 R12: ffff888118e45000 [ 167.430393][ T7630] R13: ffff888118e45000 R14: ffff888118e45164 R15: 1ffff110231c8a02 [ 167.438445][ T7630] FS: 000055556b0e5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 167.447460][ T7630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.454059][ T7630] CR2: 0000000000000000 CR3: 0000000130d76000 CR4: 00000000003526b0 [ 167.462084][ T7630] Call Trace: [ 167.465380][ T7630] [ 167.468354][ T7630] ? __cfi_inet_sock_destruct+0x10/0x10 [ 167.473942][ T7630] __sk_destruct+0x68/0x6a0 [ 167.478515][ T7630] ? __sk_free+0x304/0x410 [ 167.482954][ T7630] __sk_free+0x313/0x410 [ 167.487258][ T7630] sk_free+0x58/0xb0 [ 167.491175][ T7630] tcp_close+0xc4/0x120 [ 167.495341][ T7630] inet_release+0x1b1/0x2c0 [ 167.499886][ T7630] sock_close+0xda/0x280 [ 167.504186][ T7630] ? __cfi_sock_close+0x10/0x10 [ 167.509105][ T7630] __fput+0x1fe/0xa00 [ 167.513110][ T7630] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 167.518700][ T7630] ____fput+0x20/0x30 [ 167.522708][ T7630] task_work_run+0x1e3/0x250 [ 167.527344][ T7630] ? __cfi_task_work_run+0x10/0x10 [ 167.532480][ T7630] ? __kasan_check_write+0x18/0x20 [ 167.537643][ T7630] resume_user_mode_work+0x36/0x50 [ 167.542787][ T7630] syscall_exit_to_user_mode+0x64/0xb0 [ 167.548300][ T7630] do_syscall_64+0x64/0xf0 [ 167.552739][ T7630] ? clear_bhb_loop+0x50/0xa0 [ 167.557491][ T7630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.563412][ T7630] RIP: 0033:0x7fdbebb8e929 [ 167.567902][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.587598][ T7630] RSP: 002b:00007ffe84216598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 167.596082][ T7630] RAX: 0000000000000000 RBX: 00000000000288c4 RCX: 00007fdbebb8e929 [ 167.604078][ T7630] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 167.612107][ T7630] RBP: 00007fdbebdb7ba0 R08: 0000000000000001 R09: 0000001e8421688f [ 167.620169][ T7630] R10: 00007fdbeba00000 R11: 0000000000000246 R12: 00007fdbebdb5fac [ 167.628222][ T7630] R13: 00007fdbebdb5fa0 R14: ffffffffffffffff R15: 00007ffe842166b0 [ 167.636251][ T7630] [ 167.639298][ T7630] ---[ end trace 0000000000000000 ]--- [ 167.647428][ T458] usb 3-1: USB disconnect, device number 33 [ 168.036071][ C1] TCP: out of memory -- consider tuning tcp_mem