last executing test programs: 2.820302082s ago: executing program 1 (id=356): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x32, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9003}, 0x4) 2.793719164s ago: executing program 1 (id=357): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x9, 0xf4, 0xf7, 0x8000}, {0x5ee7, 0x7, 0xa, 0x8025}, {0x3, 0x4, 0x8, 0x9}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_open_dev$hiddev(&(0x7f0000000080), 0x5, 0x201) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 2.584161651s ago: executing program 1 (id=363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000640)={0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x54, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e444416"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000400)}) 1.727917921s ago: executing program 1 (id=377): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000540), 0x407403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x8000) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) (async) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000029c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000007540)=""/204, 0xcc}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/147, 0x93}], 0x3}, 0x3}], 0x3, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdn_o=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r5) recvmmsg(r5, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002f00)=""/4085, 0xff5}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x40085) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="bdb3c757d1ad2113b9bf85f3a49fb16708e260fbbec3574a24be8950110b8c0a9b9699ea3b1eb225e1aa71c2bddd54c8369405851608bc1f33fd0ab84595b0465ae0054a45acba1e82186eae4ebff6709875ddc23b2ede4d6796100fc487b0c78ead9112a0b741ac8e559bb0b7279fcea76efc72a9cfa29ebb874cae", 0x7c}, {&(0x7f0000000080)="e81873a74478e6bbf7aeb605f14a4051f5d6a66530272ce12b78132e0ec663d0e1c2001b203917ba7da071eb336a24f3cc91adc0c3894fbc5ea93e841e8378ebb2542219619bc8b3545a8609fbed44ce9d5ed154a53efe09f89bd322881fb11b85a69265fd399017baef8e8872edd298c29e96e8a36f28b02a489f49", 0x7c}, {&(0x7f0000000100)="a4dd557d4284da8d6ab4b202f2271b1d10cfd47bc01b1840017ed84f6c547255b60164920d785b471048f5772ed33bd116c9ee2f382eff592c7cbd4b314f4844dd19edd9a7aa1b119b218fab3a49cb467d207fb6363046f946bbd631a9e16696b822d41568d057756600a7ed190bb1b6f67caaf8b353fe93e7366549cb4e6867ad236c60eb7d5ed389f35d8306ae2ad7", 0x90}], 0x3) 1.72740647s ago: executing program 1 (id=378): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@volatile}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 1.624591959s ago: executing program 1 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) 1.344697441s ago: executing program 0 (id=387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x5) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r5, 0x7, 0x2, r4}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x5, 0x9) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) r7 = eventfd2(0x10, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r7, 0x4, 0x2, r4}) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0x18, 0x0, &(0x7f0000000080)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r7, 0x7, 0x2, r4}) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000080)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9003}, 0x4) clock_nanosleep(0x4, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) 1.012625819s ago: executing program 0 (id=390): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x2010, r0, 0xa0310000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00000b8000/0x3000)=nil, 0x3000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x3) utimes(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c) getsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000040)=0x8000091, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0x1}]) io_destroy(r7) fsopen(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone(0x30140a00, &(0x7f0000000040)="d6c0bd536ebf3ddc16bb34", 0xb, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="171ee2ad9b57939977f95648e454f1aa2cbd832543c72e004ee6c3e220b8fd61644866594141b7e50025055a1f3e8cdd23ff0ec11cdeeaac") 879.355739ms ago: executing program 0 (id=391): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0xffffffff}, @acquire, @clear_death], 0x0, 0x0, 0x0}) 853.831231ms ago: executing program 0 (id=392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0xe71}) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/254, 0xfe, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x5, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) 792.687236ms ago: executing program 0 (id=393): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) chmod(&(0x7f0000000040)='./file0\x00', 0xa0) 790.916146ms ago: executing program 0 (id=396): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="5ce9e8e93ea22b2f3268f38f4d8b785e4d27370620c256fcb56e912bdb13d6ed96b964c8d3a42e512ab7f274825f3c6118a23acccdd0e77d5f61e64c398c572ed97f9f7ab65fe3a5e71b012fc815785fbb759eb0121a1ff03f9b769e7798c2ec9ac973432c8369518aedc99bbf953153a093a494bbd25419a49608be25b9d3462eb8ad17f6ed56aab294734eecc6be9d6b13387b8e332763c681f1f23a6e46425ef3846294526814184f82fa79eacc9b5cacee8894b7d5ef1ddf7aa3758c06c1ba", 0xc1}, {&(0x7f0000000380)="648474a8924a9e05512c4dd92dd50bbad0e94c02c0f6e4f6632fc7f6126fff806bde700214157dad6ef38b0536625f13c0a654aedc470d3e16cb55a34ae5e42e1183622edae5a3715b5436e70667c1e984dfa46ee4a4ac70a98a4d3b3bd66355e2b89865f7b3374b276c95c99345ff97dbfd489b6398430e999dafbd3b40cfaddcfcd7f878bfcfc309b7a20aa541149fcd7d66f4cb6a6be22bfc6570b4b549ed9b30e681e5595fc444c79a9a7e70254804af877955002d0094bdbbd671de5f8b21bd357c632642", 0xc7}, {&(0x7f0000000180)="2602cebd72d4051a72429b17a9e9a9165f316952d819895893e654b313b4991f907418f72224d574f8b5ffc6ebfd6304d1d7a3670cf49474d6604dcd6b9eaf3448a578f4f5ce16c3e11be0b2ed1d39a5a2642c127fd1f2798d", 0x59}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="ac03790089b5445a12db933294a6612b6a3ccbfa6b412ca7beffbeff01704f4790d45358a253b9b11262dcf488e31650d1a8abdda3e61dadba7e", 0x3a}, {&(0x7f0000000500)="f3748326c7d4c3a156d3300c90c780904d8a1de05b1c4c5a29217cd400d97cb60934fb66610c514739b53dd8d67a5d8a89f44813c81b08dbfbd18cd57039102f6f2423f32862b81f00f4eb0891169496afdd08197b63235f32dca7ef0f1ba77106414a204355322d88cfc82c2e01bc4e1ca3466a962e091b920870d52ff5d0d24e93390f", 0x84}, {&(0x7f0000000600)="5cc827f822896c66965d1e4a03e2fc1272b730ba873c9527f2ec4ce0b5a77564f4e00461871c35ea34f366682945", 0x2e}, {&(0x7f0000000640)="77db212001cb60d829a34fcc4e5cd71ae95e5bb082c4118309d12ab6068e847f2ddb4137cd9aafb4449236af835a7d9f4aa0000737cb7e91", 0x38}, {&(0x7f00000006c0)="2aae2439766801f8536f5feab08b6391e97f1e7b2312843f8c77251f85c054aaf9dc89eed68785be0ce540726fb8925ff86f996a51d1c42b40e5f920a7a447226643d8705d9706d60d9ef62a0035", 0x4e}, {&(0x7f0000000740)="914954208dc6de053426eaaa1fef4bb0c651e52fd127fffbb9bfad988880426390f6fe2b730aeba5e09e00bc2f68e5ffa929903553a775161e0976a207435680b71baa665b487a530b894af5621e7b020d7a62a24eb8a37c82bc152876c5469fa1246450f3de22c4e21e65c852b70f40508afa33eb38c5b51d31d3e55024c680ea5f3bf55d09930d492ea2b909af3ced87664b011381e6e17e3019196f7e77e0ddead26964581ae5dd7901ca49d648e49b239a116171caeba56fe1f7f9f278734da42e201cf3304c", 0xc8}, {&(0x7f0000000840)="ac56fd8ccff40fcacb251caeae49a7c0e5b7fa00ae73dd12a41be2979a9f17d419d0e4fd9bc46904ab7d78832bffe5fa90f6ebd8f6b99c7bc316491839e9937e0d17868d0d736eec3b3d3b805c61f0aadd1ea31512848af33b0201338fc33950fb23a5619d7fdc50274cf0dfeb7f5c5509f12ace470bfb71caeb907f4b917b9300975057", 0x84}], 0x7, &(0x7f0000000980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x8, 0x3, 0x8, [{@local, 0x3}, {@local, 0xf2}, {@local, 0x80000000}, {@loopback, 0x9}, {@loopback, 0x2}, {@private=0xa010102, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0x9, [{@multicast1, 0x9}, {@multicast1, 0x7}, {@local, 0x5}]}, @timestamp={0x44, 0x8, 0x3c, 0x0, 0x7, [0x4438]}, @timestamp_addr={0x44, 0x14, 0x36, 0x1, 0x7, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @cipso={0x86, 0x1a, 0x0, [{0x5, 0x2}, {0x1, 0x12, "4fcb19ab079381f541094e4b7e7fbaf7"}]}, @timestamp={0x44, 0x1c, 0x4b, 0x0, 0x9, [0x4, 0x8, 0x7, 0x6, 0x200, 0xa]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x2b, 0x1, [{0x5, 0x12, "12207b5808d0c19e1e42bb7cc9bcfb18"}, {0x1, 0x2}, {0x6, 0x11, "6b8a96357af441afdb4448e26fb801"}]}, @timestamp_prespec={0x44, 0x44, 0xab, 0x3, 0xd, [{@loopback, 0xe494}, {@remote, 0xb2}, {@rand_addr=0x64010101, 0x3ff}, {@private=0xa010100, 0x400}, {@remote, 0x3}, {@multicast1, 0xffffffff}, {@broadcast, 0x424}, {@remote, 0x8}]}, @generic={0x86, 0x7, "e2061da362"}, @noop, @noop]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@generic={0x82, 0x10, "514277ce3d3510624b628c739a49"}, @lsrr={0x83, 0xb, 0x52, [@multicast2, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xa5, 0x1, 0x5, [{@multicast2, 0x2}, {@multicast2, 0x3ff}, {@broadcast, 0x795}, {@remote, 0x3}]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb7, [@loopback, @multicast1]}, @cipso={0x86, 0x20, 0x0, [{0x5, 0x6, "8b1d633a"}, {0x2, 0x9, "aadf2ffae42a0a"}, {0x1, 0xb, "fa88b2c0c8934f4a09"}]}, @timestamp_prespec={0x44, 0x4c, 0x83, 0x3, 0x6, [{@broadcast, 0xfffffffe}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@local}, {@empty, 0xa000}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010100, 0x800}, {@remote, 0xc}, {@broadcast, 0x9}]}]}}}], 0x240}}], 0x4, 0xc044) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_clone(0x1810000, 0x0, 0xfffffffffffffeb3, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='smaps\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) syz_fuse_handle_req(r3, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x1}) unshare(0x62040200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1b010000000000407e050e2000000000000109022400010000100309040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001080)={0x24, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0x8, "a5ec"}, @global=@item_012={0x2, 0x1, 0x3, "f061"}, @local]}}, 0x0}, 0x0) mprotect(&(0x7f0000a35000/0x4000)=nil, 0x4000, 0xd) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x407, 0x401, 0x2d, 0x18, "96a00c83b08bcc4e"}) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000005c0)=0x5, 0x4) 789.108266ms ago: executing program 3 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}]}, 0x1c}}, 0x4000000) 758.892609ms ago: executing program 3 (id=398): setrlimit(0x2, &(0x7f00000000c0)={0x44, 0x2400004}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e1e, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)={0x7, 0x5, 0x6, 0xfff, 0x1, 0x0, [{0x9, 0xe, 0x5, '\x00', 0x100}]}) 735.026951ms ago: executing program 3 (id=399): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x4b82f92c, 0x6, 0x100, 0x1, 0xff}, {0x4, 0x8, 0x1, 0x9, 0xff, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) fcntl$setstatus(r0, 0x4, 0x1f9495cd373fba4a) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000001c0)='a', 0x1, 0x5}]) 628.558969ms ago: executing program 3 (id=400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="580100001000330600020000fcd3df2520010000000000000000000000000001ac1e000100000000000006000000000000000000000200000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1e0001000000000000000000000000fdffffffffffffff00000000000000000000000000000000cd2d00000000000008000000000000000000000000000000000040000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000002000000900000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100000025bd700029bd70002dbd700026bd700010000000ff070000"], 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r8, &(0x7f00000026c0)={0x2020}, 0x2020) 324.335494ms ago: executing program 2 (id=402): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket(0x29, 0x3, 0x2) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}, 0x1, 0x0, 0x0, 0x815}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xaf, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x8080000, 0xe, 0xfd, 0x40, 0x9, 0x7f, 0x1, 0x1, 0x0, 0x3}, {0x3000, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0x9, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0x2, 0x1, 0xfb, 0x8, 0x7, 0xe, 0xf0}, {0x8080000, 0x2000, 0xd, 0xf7, 0x0, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0x1000, 0x8080000, 0x3, 0x80, 0xb1, 0x8, 0x4, 0x6, 0x80, 0xf, 0x9, 0x80}, {0xdddd0000, 0x11d004, 0xc, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x80, 0x3, 0x4}, {0xd000, 0x1, 0x10, 0x5, 0x5, 0xf7, 0x1, 0x37, 0x2, 0x8, 0xf0, 0x1}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0xe0010027, 0x0, 0xffff1000, 0x2004, 0x12, 0x8000, 0x3000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x3]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) 168.412437ms ago: executing program 2 (id=403): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) getgid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x1}, {0x8000000000000000}, 0x20, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)="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", 0x1b7, 0x0, &(0x7f00000003c0)={0x2, 0x12d, {0x0, 0xc, 0x77, "120c9ff6098966e6240032f4bd78ee5264d75f8ba2b0940ce73db6f5f426beec9e83595b1f016b39650008d298a08f5e23b21a67eaafc02f6d90fc5eccda94e277289307902362b547663000ac19fd705cad1bcfd28c7a39db02e518d9bb981142bd09cb9c4f3608f0b841b5dcd5d794450ea5c9df6a35", 0xa9, "431d1b11f5850676066d2767a56db3f900e68a383c37df53c04d09d122a3bd82e8c35e79ce6cfe1d757d0055997566952fa3e8b0a53dcd1a430e5abe0947b4315c992d7f1765f3387065f0d7f1c7246e7a8f777e8350c8edf309857d0510cc5ce4ad4123a8cfe9bcd528c29fa761243c8799ce4b63c6ef66112a83d723727a9fe5d0412f87b65ab9ff9a72705ee64aaca3694625c95a4bce016e6a1b1da8dd0a8863c23060fb4fc2a3"}, 0xa0, "809fc755bcf2302c8ed5d77115b8873af308775c04ce80fed1f2c83cdeadf35b3fdf8d1855f68b0dbc70bddf1bdf4b3aae8f8b60e8e86ec4b7d902806c2cecf407afe464d8ddec8e13e8c5f9a455a3e8c80d614fc0f08adb586b53391d62b9062663c68193cae532f960648c6973637d1035eee9b6fe65d6e1c811c444acfd099f1da14ca9be8621a454c7c68982d7bca60143ab6555c1d0b6fedd999f066708"}, 0x1d9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 141.594589ms ago: executing program 2 (id=404): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async, rerun: 32) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @any, 0x4}, 0xe) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) gettid() fadvise64(0xffffffffffffffff, 0x3, 0x0, 0x4) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) (rerun: 32) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xb) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 136.946689ms ago: executing program 3 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) (async) r2 = add_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="fc960738f229c0ea3d3e86a9d27a179e4d6cac589620234b27c5e32446c3bc33ce9915ffa77a21bb3bc9c8c96534a64525cc29642575c497787f78598c06c8abfd175163cdba55cb4f9b153ff9c5a9aeea6b615c0dca6e7601d53a37", 0x5c, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000240)=[{&(0x7f0000000300)="2d50e5db67135fe284af3957c9c7d4d79a79df7dcbf1d27104def4ad7d011a7bdaaa73e93efb4c493e1764653147a6a43a1012e4a8b7486a530aa7f58788079777801b3cb5f3047c10afa387a4b28cf64430fe4a8ca49f717f4d01ed8ee1ef301bff90b4a7d52a6816383395991cb1bbf549f7d0543d704805718ec38b60e9b3e5f0380e485cedc07a8770e4098836c3426d35597d0465db49dfff868cfa2f6133de435b620f8bbd06d72be95e652e521f08cf9cd603d13d99d18dd8326290319f293d9ebbe94e56f499363108930d3599a08e3d67f5a9a82e0a74a406e2e1792a20c0cb87168e8b4014f685", 0xec}, {&(0x7f00000001c0)="d3b40a5e7a612920a7528d94842c9f8675b6d1224db2fc08e654761fe0defc9aa09b16833fce25069829bba36ff3799890f9cfbdff968cb2bf7bb9f605dc360cdf41eeaaf33fcfa7a3522ccf51336a9699d154256e62be7b534b411465b3c1c41afd3ad8eb9af8840c68a85866d2fa715f98cc", 0x73}], 0x2, r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 76.749414ms ago: executing program 2 (id=406): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}]}, 0x1c}}, 0x4000000) 76.358744ms ago: executing program 3 (id=407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x90) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x42) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x200840, 0x110) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x24008800) timer_getoverrun(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000180)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) timer_gettime(r2, &(0x7f0000000080)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 75.414844ms ago: executing program 2 (id=408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) pipe2(&(0x7f0000000000), 0x4000) gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x654e9316b2da8cd8, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000180)=0xffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x3, 0x1, 0x5, 0x7, 0x5}) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/../file0/file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_fuse_handle_req(r2, &(0x7f0000002ac0)="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", 0x2000, &(0x7f0000000e00)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x40100080, 0x1, 0x1ff, 0x100, 0x73460fe, 0x0, 0x0, 0x20, 0x6}}, &(0x7f0000000380)={0x18, 0x0, 0x8f35, {0x6}}, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x77aef790}}, &(0x7f00000004c0)={0x18, 0x0, 0x6, {0x6}}, &(0x7f0000000580)={0x18, 0x0, 0x2, {0x3}}, &(0x7f00000005c0)={0x28, 0xffffffffffffffda, 0xfffffffffffff2cd, {{0xfffffffffffffffb, 0x7ff, 0x1, r6}}}, &(0x7f0000000600)={0x60, 0x0, 0x9, {{0x5, 0x1, 0xbe1d, 0xc2d3, 0x4858, 0x7, 0x0, 0x6}}}, &(0x7f0000000680)={0x18, 0x0, 0x7, {0x8814}}, &(0x7f00000006c0)={0x13, 0x0, 0x2, {'{}\x00'}}, &(0x7f0000000700)={0x20, 0x0, 0x25ac, {0x0, 0x18}}, &(0x7f0000000740)={0x78, 0x0, 0xfffffffffffffff8, {0x1, 0xffffff3a, 0x0, {0x2, 0x5, 0x101, 0x6, 0x0, 0x6, 0x7, 0x7, 0x1, 0x2000, 0x0, r4, r5, 0x101, 0x9}}}, &(0x7f00000007c0)={0x90, 0x0, 0x40, {0x6, 0x3, 0x6dc, 0x8, 0x8, 0xffff0001, {0x5, 0x29d990a4, 0x7, 0x66, 0x4, 0x1, 0x512, 0xff, 0x800, 0x1000, 0x2, r4, r5, 0x400, 0x30000000}}}, &(0x7f0000000880)={0x90, 0x0, 0xffffffff, [{0x6, 0x9, 0x0, 0x8}, {0x5, 0x2, 0x1, 0x3, '-'}, {0x4, 0x8, 0xa, 0xb, '/dev/fuse\x00'}, {0x6, 0x5, 0x5, 0x6, '?-7\x83)'}]}, &(0x7f0000000980)={0x150, 0x0, 0x3, [{{0x3, 0x0, 0x7ff, 0x7, 0x6, 0x4, {0x1, 0x5, 0x6, 0x2, 0xb2c, 0x7eb2, 0x4, 0xe, 0x40317224, 0xa000, 0x1f31, r4, r5, 0x7fffffff, 0x3f}}, {0x1, 0x5, 0x5, 0xfffffffd, '!/-)!'}}, {{0x2, 0x2, 0x1, 0x8, 0xc0000000, 0xffff, {0x3, 0x1, 0x0, 0x3d, 0x6, 0x8, 0x2, 0x0, 0x5, 0xc000, 0x7, r4, r5, 0x0, 0x8}}, {0x1, 0x1, 0x4, 0x5, '](}-'}}]}, &(0x7f0000000b00)={0xa0, 0x0, 0x4, {{0x2, 0x2, 0x9472505, 0x8, 0x3, 0x0, {0x6, 0x4, 0xa, 0x3, 0x0, 0x9, 0x7, 0x3, 0x7fffffff, 0x2000, 0x2, r4, r5, 0xb}}, {0x0, 0xd}}}, &(0x7f0000000bc0)={0x20, 0xffffffffffffffda, 0x7, {0x8, 0x4, 0x2, 0x2}}, &(0x7f0000000cc0)={0x130, 0x0, 0x9, {0xffffffff, 0xaa58, 0x0, '\x00', {0x400, 0x2, 0x6, 0x5, r7, r5, 0xa000, '\x00', 0x9, 0xfffffffffffffffd, 0x800, 0x1, {0x7, 0x97}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0xd}, 0xb6, 0x80000000, 0x48, 0x6}}}}) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, r3, {0x7}}, 0x18) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 20.677210][ T36] audit: type=1400 audit(1754677689.710:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.680078][ T36] audit: type=1400 audit(1754677689.710:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 28.886445][ T36] audit: type=1400 audit(1754677697.930:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.887895][ T282] cgroup: Unknown subsys name 'net' [ 28.909123][ T36] audit: type=1400 audit(1754677697.930:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.936510][ T36] audit: type=1400 audit(1754677697.970:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.936736][ T282] cgroup: Unknown subsys name 'devices' [ 29.045499][ T282] cgroup: Unknown subsys name 'hugetlb' [ 29.051143][ T282] cgroup: Unknown subsys name 'rlimit' [ 29.246533][ T36] audit: type=1400 audit(1754677698.290:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.269778][ T36] audit: type=1400 audit(1754677698.290:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.284108][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.294724][ T36] audit: type=1400 audit(1754677698.290:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.326238][ T36] audit: type=1400 audit(1754677698.350:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.351733][ T36] audit: type=1400 audit(1754677698.350:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.369223][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.377320][ T36] audit: type=1400 audit(1754677698.410:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.411626][ T36] audit: type=1400 audit(1754677698.410:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.250194][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.257413][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.264658][ T289] bridge_slave_0: entered allmulticast mode [ 30.270988][ T289] bridge_slave_0: entered promiscuous mode [ 30.277639][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.284785][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.291900][ T289] bridge_slave_1: entered allmulticast mode [ 30.298257][ T289] bridge_slave_1: entered promiscuous mode [ 30.367041][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.374156][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.381319][ T292] bridge_slave_0: entered allmulticast mode [ 30.387634][ T292] bridge_slave_0: entered promiscuous mode [ 30.404647][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.411736][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.418881][ T290] bridge_slave_0: entered allmulticast mode [ 30.425343][ T290] bridge_slave_0: entered promiscuous mode [ 30.431510][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.438643][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.445810][ T292] bridge_slave_1: entered allmulticast mode [ 30.452075][ T292] bridge_slave_1: entered promiscuous mode [ 30.461962][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.469076][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.476269][ T290] bridge_slave_1: entered allmulticast mode [ 30.482563][ T290] bridge_slave_1: entered promiscuous mode [ 30.546731][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.553980][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.561072][ T291] bridge_slave_0: entered allmulticast mode [ 30.567537][ T291] bridge_slave_0: entered promiscuous mode [ 30.583219][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.590293][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.597427][ T291] bridge_slave_1: entered allmulticast mode [ 30.603727][ T291] bridge_slave_1: entered promiscuous mode [ 30.679763][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.686851][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.694165][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.701205][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.762289][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.769376][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.776671][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.783751][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.793960][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.801025][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.808414][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.815478][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.829257][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.836342][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.843665][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.850708][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.904627][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.911930][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.920196][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.928048][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.935716][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.950723][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.957825][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.984627][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.991710][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.999668][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006753][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.015465][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.022516][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.033516][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.040594][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.085063][ T290] veth0_vlan: entered promiscuous mode [ 31.098545][ T292] veth0_vlan: entered promiscuous mode [ 31.117911][ T290] veth1_macvtap: entered promiscuous mode [ 31.128970][ T291] veth0_vlan: entered promiscuous mode [ 31.148275][ T292] veth1_macvtap: entered promiscuous mode [ 31.164259][ T291] veth1_macvtap: entered promiscuous mode [ 31.170687][ T289] veth0_vlan: entered promiscuous mode [ 31.209998][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.210681][ T289] veth1_macvtap: entered promiscuous mode [ 31.343642][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.364515][ T348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.468547][ T354] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 31.495380][ T354] tipc: Started in network mode [ 31.500326][ T354] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 31.509502][ T354] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0038 [ 31.516891][ T360] ./cgroup: Can't lookup blockdev [ 31.518304][ T354] tipc: Enabled bearer , priority 10 [ 31.546713][ T357] rust_binder: 340 RLIMIT_NICE not set [ 31.799307][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.812704][ T373] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 31.818142][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.834508][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.842281][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.850967][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.859000][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.869327][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.877462][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.885682][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.893510][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.901326][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.909557][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.917535][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.925449][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.933505][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.941208][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.951610][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.959687][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.967662][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.975709][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.983621][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.991476][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 31.999644][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.007573][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.015565][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.025988][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.034002][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.041792][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.049839][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.057826][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.065833][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.073944][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.081977][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.090140][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.098131][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.109203][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.117156][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.125215][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.134519][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.142311][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.150580][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.158534][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.176385][ T31] rust_binder: 0: removing orphan mapping 0:4248 [ 32.236039][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.243984][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.251816][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.259868][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.272342][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.280480][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.288774][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.296836][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.305012][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.313310][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.321002][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.329130][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.337205][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.354856][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.362720][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.370838][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.378634][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.386741][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.395864][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.403672][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.411240][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.412995][ T64] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 32.419516][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.434379][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.441941][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.449685][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.457848][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.465497][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.473349][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.481490][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.488083][ T381] binder: Bad value for 'max' [ 32.489724][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.495320][ T381] binder: Bad value for 'max' [ 32.501554][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.514048][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.521935][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.529644][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.537336][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.545230][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.552876][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.560771][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.568707][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.576825][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.586797][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.587337][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 32.597082][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.610097][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.613528][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 32.617881][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.628374][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 32.633921][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.642591][ T64] usb 2-1: can't read configurations, error -22 [ 32.649687][ T330] tipc: Node number set to 1 [ 32.660767][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.668712][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.676781][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.684472][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.692103][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.699791][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.707503][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.715284][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.722856][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.730477][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.738184][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.746091][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.754390][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.762373][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.770034][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.777766][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.785682][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.792979][ T64] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.793470][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.808447][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.816417][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.824458][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.832060][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.839714][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.847588][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.855342][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.863028][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.870568][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.878293][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.885958][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.893699][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.901318][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.911943][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.920227][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.928205][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.936027][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.943628][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.951186][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.953387][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 32.958788][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.968155][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 32.974479][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.983569][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 32.990433][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 32.999627][ T395] input: syz1 as /devices/virtual/input/input4 [ 33.006189][ T45] hid-generic 0000:10000:0007.0001: unknown main item tag 0x0 [ 33.018979][ T64] usb 2-1: can't read configurations, error -22 [ 33.026259][ T45] hid-generic 0000:10000:0007.0001: hidraw0: HID v9.40 Device [syz1] on syz1 [ 33.043838][ T64] usb usb2-port1: attempt power cycle [ 33.082123][ T396] fido_id[396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.185712][ T400] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=400 comm=syz.3.21 [ 33.388318][ T406] rust_binder: Error while translating object. [ 33.388363][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.393101][ T64] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.394797][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:16 [ 33.423940][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 33.450518][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 33.459258][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 33.468133][ T379] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.476222][ T64] usb 2-1: can't read configurations, error -22 [ 33.613076][ T64] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 33.633863][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 33.642855][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 33.651569][ T379] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 33.662192][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 33.671162][ T379] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 33.680442][ T64] usb 2-1: can't read configurations, error -22 [ 33.687213][ T64] usb usb2-port1: unable to enumerate USB device [ 33.696035][ T379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.705678][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.714133][ T379] usb 4-1: Product: э [ 33.718379][ T379] usb 4-1: Manufacturer: ࠁ [ 33.723313][ T379] usb 4-1: SerialNumber: Ꭵ﮽ﳬ琖黲达ﺼ窺鼏몭Ἇ⋥覀罜뎅趶첚 [ 33.824281][ T418] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 33.833028][ T64] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 33.842061][ T418] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 33.874829][ T420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.945036][ T400] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 33.954604][ T379] usb 4-1: USB disconnect, device number 2 [ 33.983335][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 33.991911][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 34.000058][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 34.008970][ T64] usb 2-1: can't read configurations, error -22 [ 34.142964][ T64] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 34.293518][ T64] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 34.302147][ T64] usb 2-1: config index 0 descriptor too short (expected 38, got 36) [ 34.310304][ T64] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 160 [ 34.318969][ T64] usb 2-1: can't read configurations, error -22 [ 34.325380][ T64] usb usb2-port1: attempt power cycle [ 34.500289][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 34.500308][ T36] audit: type=1400 audit(1754677703.540:170): avc: denied { create } for pid=424 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.527074][ T36] audit: type=1400 audit(1754677703.540:171): avc: denied { setopt } for pid=424 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.549555][ T427] binder: Bad value for 'max' [ 34.557764][ T429] rust_binder: 25: no such ref 2 [ 34.558140][ T36] audit: type=1400 audit(1754677703.540:172): avc: denied { write } for pid=424 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.579942][ T431] __vm_enough_memory: pid: 431, comm: syz.1.32, bytes: 18014402804453376 not enough memory for the allocation [ 34.594825][ T36] audit: type=1400 audit(1754677703.540:173): avc: denied { read } for pid=424 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.614135][ T36] audit: type=1400 audit(1754677703.620:174): avc: denied { map } for pid=430 comm="syz.1.32" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.632798][ T432] rust_binder: inc_ref_done called when no active inc_refs [ 34.637172][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25 [ 34.640212][ T434] rust_binder: Read failure Err(EAGAIN) in pid:12 [ 34.655534][ T36] audit: type=1400 audit(1754677703.700:175): avc: denied { ioctl } for pid=433 comm="syz.1.33" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.686389][ T36] audit: type=1400 audit(1754677703.700:176): avc: denied { lock } for pid=433 comm="syz.1.33" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.239872][ T36] audit: type=1326 audit(1754677704.280:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522c18ebe9 code=0x7ffc0000 [ 35.244173][ T442] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 35.263138][ T442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.263471][ T36] audit: type=1326 audit(1754677704.280:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522c18ebe9 code=0x7ffc0000 [ 35.271173][ T442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:35 [ 35.304494][ T36] audit: type=1326 audit(1754677704.280:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f522c18d550 code=0x7ffc0000 [ 35.590031][ T330] rust_binder: 436: removing orphan mapping 0:24 [ 35.792997][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.926952][ T473] rust_binder: Write failure EFAULT in pid:29 [ 35.943485][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 35.947706][ T479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.956362][ T45] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 35.976714][ T45] usb 4-1: config 0 has no interface number 0 [ 35.988913][ T45] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.999096][ T45] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.009730][ T45] usb 4-1: config 0 interface 41 has no altsetting 0 [ 36.018336][ T45] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 36.028227][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.036488][ T45] usb 4-1: Product: syz [ 36.040752][ T45] usb 4-1: Manufacturer: syz [ 36.045717][ T45] usb 4-1: SerialNumber: syz [ 36.051722][ T483] syzkaller0: delete flow: hash 3154338593 index 3 [ 36.054960][ T45] usb 4-1: config 0 descriptor?? [ 36.063877][ T457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.066639][ T483] syzkaller0: create flow: hash 3154338593 index 0 [ 36.071088][ T457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.124090][ T483] syzkaller0 (unregistered): delete flow: hash 3154338593 index 0 [ 36.222990][ T379] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.286139][ T457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.293480][ T457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.352972][ T379] usb 2-1: device descriptor read/64, error -71 [ 36.402998][ T455] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.554077][ T455] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.566557][ T455] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.575781][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.584455][ T455] usb 1-1: Product: syz [ 36.588705][ T455] usb 1-1: Manufacturer: syz [ 36.593384][ T379] usb 2-1: device descriptor read/64, error -71 [ 36.599692][ T455] usb 1-1: SerialNumber: syz [ 36.701920][ T45] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 36.833551][ T379] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.962985][ T379] usb 2-1: device descriptor read/64, error -71 [ 37.202936][ T379] usb 2-1: device descriptor read/64, error -71 [ 37.313033][ T379] usb usb2-port1: attempt power cycle [ 37.382952][ T447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.611247][ T455] cdc_ncm 1-1:1.0: bind() failure [ 37.617790][ T455] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 37.624973][ T455] cdc_ncm 1-1:1.1: bind() failure [ 37.632496][ T455] usb 1-1: USB disconnect, device number 3 [ 37.653103][ T379] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 37.674731][ T379] usb 2-1: device descriptor read/8, error -71 [ 37.689865][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 37.689897][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:50 [ 37.802794][ T494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 37.814142][ T379] usb 2-1: device descriptor read/8, error -71 [ 37.822179][ T494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.856795][ T499] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 37.865926][ T499] rust_binder: Write failure EINVAL in pid:59 [ 37.879802][ T501] tipc: Started in network mode [ 37.890831][ T501] tipc: Node identity 4, cluster identity 4711 [ 37.897348][ T501] tipc: Node number set to 4 [ 37.911677][ T503] netlink: 'syz.2.55': attribute type 13 has an invalid length. [ 38.063032][ T379] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 38.084079][ T379] usb 2-1: device descriptor read/8, error -71 [ 38.223962][ T379] usb 2-1: device descriptor read/8, error -71 [ 38.272978][ T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.333022][ T379] usb usb2-port1: unable to enumerate USB device [ 38.424071][ T330] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.435017][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.445946][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.455731][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.469453][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.478553][ T330] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.486667][ T330] usb 1-1: Manufacturer: syz [ 38.491874][ T330] usb 1-1: config 0 descriptor?? [ 38.556392][ T379] usb 4-1: USB disconnect, device number 3 [ 38.706666][ T330] usbhid 1-1:0.0: can't add hid device: -71 [ 38.713202][ T330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.733443][ T330] usb 1-1: USB disconnect, device number 4 [ 38.814715][ T532] rust_binder: Write failure EFAULT in pid:37 [ 38.900371][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 39.225538][ T553] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 39.245895][ T553] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 39.362963][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 39.370517][ T330] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 39.502973][ T454] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 39.522948][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 39.529461][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.540513][ T330] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.549341][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 39.560262][ T330] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 39.570496][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 39.581239][ T330] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.590399][ T330] usb 2-1: config 1 has no interface number 1 [ 39.598081][ T330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.607224][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.616340][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.625468][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.633522][ T45] usb 1-1: Product: syz [ 39.637729][ T45] usb 1-1: Manufacturer: syz [ 39.642323][ T45] usb 1-1: SerialNumber: syz [ 39.646965][ T330] usb 2-1: Product: syz [ 39.651157][ T330] usb 2-1: Manufacturer: syz [ 39.655900][ T330] usb 2-1: SerialNumber: syz [ 39.661938][ T546] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.673997][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.685137][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.694937][ T454] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 39.704093][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.712986][ T454] usb 4-1: config 0 descriptor?? [ 39.870195][ T546] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.882485][ T330] usb 2-1: USB disconnect, device number 13 [ 39.895555][ T559] udevd[559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.093197][ T45] cdc_ncm 1-1:1.0: bind() failure [ 40.099445][ T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 40.105339][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 40.105361][ T36] audit: type=1400 audit(1754677709.140:216): avc: denied { append } for pid=563 comm="syz.0.73" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.106372][ T45] cdc_ncm 1-1:1.1: bind() failure [ 40.113758][ T564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=564 comm=syz.0.73 [ 40.146589][ T454] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 40.165413][ T45] usb 1-1: USB disconnect, device number 5 [ 40.172233][ T341] udevd[341]: setting mode of /dev/bus/usb/001/005 to 020664 failed: No such file or directory [ 40.180725][ T36] audit: type=1400 audit(1754677709.220:217): avc: denied { transfer } for pid=563 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.203798][ T564] rust_binder: Error while translating object. [ 40.203901][ T564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.211048][ T564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 40.220715][ T341] udevd[341]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 40.230190][ T567] rust_binder: 50: no such ref 2 [ 40.319059][ T36] audit: type=1400 audit(1754677709.360:218): avc: denied { getopt } for pid=568 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.323981][ T569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=569 comm=syz.0.75 [ 40.384468][ T36] audit: type=1400 audit(1754677709.430:219): avc: denied { write } for pid=570 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.405397][ T36] audit: type=1400 audit(1754677709.430:220): avc: denied { read write } for pid=572 comm="syz.0.77" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.422705][ T557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.437592][ T36] audit: type=1400 audit(1754677709.430:221): avc: denied { open } for pid=572 comm="syz.0.77" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.442196][ T557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.465809][ T36] audit: type=1400 audit(1754677709.490:222): avc: denied { read write } for pid=577 comm="syz.0.78" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.486112][ T379] usb 4-1: USB disconnect, device number 4 [ 40.499991][ T455] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 40.500969][ T36] audit: type=1400 audit(1754677709.490:223): avc: denied { open } for pid=577 comm="syz.0.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.621029][ T36] audit: type=1400 audit(1754677709.660:224): avc: denied { mount } for pid=586 comm="syz.1.81" name="/" dev="ramfs" ino=5226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.649880][ T36] audit: type=1400 audit(1754677709.660:225): avc: denied { ioctl } for pid=586 comm="syz.1.81" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.664749][ T455] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.686222][ T455] usb 3-1: not running at top speed; connect to a high speed hub [ 40.690654][ T595] binder: Bad value for 'stats' [ 40.697491][ T593] binder: Unknown parameter 'fscontext?}' [ 40.705637][ T455] usb 3-1: config 114 has an invalid interface number: 122 but max is 0 [ 40.716580][ T455] usb 3-1: config 114 has no interface number 0 [ 40.730352][ T455] usb 3-1: config 114 interface 122 has no altsetting 0 [ 40.744238][ T455] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=7b.d8 [ 40.753476][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.756791][ T603] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 40.761982][ T455] usb 3-1: Product: syz [ 40.778905][ T455] usb 3-1: Manufacturer: syz [ 40.783847][ T455] usb 3-1: SerialNumber: syz [ 41.093346][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.142947][ T379] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 41.239647][ T631] /dev/rnullb0: Can't open blockdev [ 41.253006][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 41.262837][ T633] process 'syz.3.95' launched './file0' with NULL argv: empty string added [ 41.262979][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.282026][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 41.292971][ T45] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 41.302103][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.311995][ T45] usb 1-1: Product: syz [ 41.316415][ T45] usb 1-1: Manufacturer: syz [ 41.321047][ T45] usb 1-1: SerialNumber: syz [ 41.322945][ T379] usb 2-1: Using ep0 maxpacket: 32 [ 41.326984][ T45] usb 1-1: config 0 descriptor?? [ 41.344890][ T379] usb 2-1: config 0 has no interfaces? [ 41.352352][ T379] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 41.361574][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.369639][ T379] usb 2-1: Product: syz [ 41.374116][ T379] usb 2-1: Manufacturer: syz [ 41.378788][ T379] usb 2-1: SerialNumber: syz [ 41.384816][ T379] usb 2-1: config 0 descriptor?? [ 42.003780][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 42.014001][ T45] asix 1-1:0.0: probe with driver asix failed with error -71 [ 42.022720][ T45] usb 1-1: USB disconnect, device number 6 [ 42.166769][ T639] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 42.176449][ T639] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 42.201398][ T641] rust_binder: Error while translating object. [ 42.201431][ T641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 42.207862][ T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76 [ 42.370862][ T648] input: syz1 as /devices/virtual/input/input5 [ 42.597796][ T653] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 42.607016][ T653] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.684038][ T330] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.694722][ T330] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.002965][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.152944][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 43.159289][ T45] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 43.167629][ T45] usb 1-1: config 0 has no interface number 0 [ 43.173913][ T45] usb 1-1: config 0 interface 230 has no altsetting 0 [ 43.182316][ T45] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 43.191518][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.199883][ T45] usb 1-1: Product: syz [ 43.204164][ T45] usb 1-1: Manufacturer: syz [ 43.208838][ T45] usb 1-1: SerialNumber: syz [ 43.221862][ T455] snd-usb-audio 3-1:114.122: probe with driver snd-usb-audio failed with error -71 [ 43.223781][ T45] usb 1-1: config 0 descriptor?? [ 43.240581][ T45] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 43.255235][ T455] usb 3-1: USB disconnect, device number 2 [ 43.265062][ T45] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 43.275871][ T669] Zero length message leads to an empty skb [ 43.562937][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.742948][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 43.749273][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.761752][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.777549][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.787953][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.801684][ T64] usb 4-1: Product: syz [ 43.807384][ T64] usb 4-1: Manufacturer: syz [ 43.812090][ T64] usb 4-1: SerialNumber: syz [ 43.876020][ T455] usb 2-1: USB disconnect, device number 14 [ 44.021349][ T675] binder: Unknown parameter 'dont_measure' [ 44.029162][ T64] usb 4-1: 0:2 : does not exist [ 44.041248][ T64] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 44.057061][ T64] usb 4-1: USB disconnect, device number 5 [ 44.074828][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.218578][ T685] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 44.512945][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 44.554171][ T695] tipc: Trying to set illegal importance in message [ 44.664036][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 44.675702][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 44.686627][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 44.697632][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.710647][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.719867][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.729796][ T31] usb 2-1: config 0 descriptor?? [ 45.142985][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.150604][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.159269][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.166984][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.174477][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.181962][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.189450][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.196942][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.204644][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.212234][ T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 45.216089][ T703] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 45.219925][ T31] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 45.237230][ T31] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 45.249899][ T703] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 45.284999][ T706] /dev/rnullb0: Can't open blockdev [ 45.360142][ T712] /dev/rnullb0: Can't open blockdev [ 45.366029][ T712] /dev/rnullb0: Can't open blockdev [ 45.482388][ T725] loop7: detected capacity change from 0 to 7 [ 45.524731][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 45.524750][ T36] audit: type=1400 audit(1754677714.570:257): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 45.585145][ T455] usb 2-1: USB disconnect, device number 15 [ 45.720172][ T36] audit: type=1326 audit(1754677714.760:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45e538ebe9 code=0x0 [ 45.723544][ T738] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 45.755017][ T738] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 45.755115][ T45] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 45.772949][ T45] usb 1-1: USB disconnect, device number 7 [ 45.788541][ T740] netlink: 108 bytes leftover after parsing attributes in process `syz.2.127'. [ 45.802141][ T740] rust_binder: Write failure EFAULT in pid:90 [ 45.815693][ T36] audit: type=1400 audit(1754677714.860:259): avc: denied { setopt } for pid=741 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.851007][ T36] audit: type=1400 audit(1754677714.890:260): avc: denied { create } for pid=744 comm="syz.2.129" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.852131][ T745] ======================================================= [ 45.852131][ T745] WARNING: The mand mount option has been deprecated and [ 45.852131][ T745] and is ignored by this kernel. Remove the mand [ 45.852131][ T745] option from the mount to silence this warning. [ 45.852131][ T745] ======================================================= [ 45.875515][ T36] audit: type=1400 audit(1754677714.890:261): avc: denied { mounton } for pid=744 comm="syz.2.129" path="/31/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.935822][ T36] audit: type=1400 audit(1754677714.960:262): avc: denied { setattr } for pid=744 comm="syz.2.129" name="file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.038324][ T36] audit: type=1400 audit(1754677715.080:263): avc: denied { load_policy } for pid=750 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.049245][ T751] SELinux: failed to load policy [ 46.156643][ T36] audit: type=1400 audit(1754677715.200:264): avc: denied { bind } for pid=757 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.251986][ T762] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 46.311245][ T765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 46.452936][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.532934][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.567985][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.612942][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 46.619273][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.627452][ T31] usb 1-1: config 0 has no interface number 0 [ 46.635013][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.644154][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.652179][ T31] usb 1-1: Product: syz [ 46.656411][ T31] usb 1-1: Manufacturer: syz [ 46.661022][ T31] usb 1-1: SerialNumber: syz [ 46.666520][ T31] usb 1-1: config 0 descriptor?? [ 46.672307][ T31] smsc95xx v2.0.0 [ 46.682929][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 47.072835][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 47.083702][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.252945][ T455] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.402952][ T455] usb 2-1: Using ep0 maxpacket: 16 [ 48.409310][ T455] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 48.417734][ T455] usb 2-1: config 0 has no interface number 0 [ 48.423895][ T455] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 48.433770][ T455] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.443725][ T455] usb 2-1: config 0 interface 41 has no altsetting 0 [ 48.451865][ T455] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 48.460997][ T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.469052][ T455] usb 2-1: Product: syz [ 48.473266][ T455] usb 2-1: Manufacturer: syz [ 48.477886][ T455] usb 2-1: SerialNumber: syz [ 48.483519][ T455] usb 2-1: config 0 descriptor?? [ 48.488823][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.496129][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.582954][ T448] Bluetooth: hci0: command 0x1003 tx timeout [ 48.582946][ T447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.625832][ T64] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 48.643077][ T64] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.704201][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.711476][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.972954][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.122953][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 49.129237][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 49.137550][ T9] usb 4-1: config 0 has no interface number 0 [ 49.143747][ T455] Error reading MAC address [ 49.148499][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 49.155401][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 49.162581][ T780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 49.171286][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 49.180430][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.188564][ T9] usb 4-1: Product: syz [ 49.192768][ T9] usb 4-1: Manufacturer: syz [ 49.197413][ T9] usb 4-1: SerialNumber: syz [ 49.203293][ T9] usb 4-1: config 0 descriptor?? [ 49.209311][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 49.217394][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 49.312365][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.320753][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 49.328480][ T45] usb 3-1: can't read configurations, error -71 [ 49.373933][ T36] audit: type=1400 audit(1754677718.420:265): avc: denied { mount } for pid=788 comm="syz.2.143" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.449469][ T36] audit: type=1400 audit(1754677718.490:266): avc: denied { mounton } for pid=788 comm="syz.2.143" path="/36/bus/file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 49.472295][ T791] overlay: filesystem on ./bus not supported as upperdir [ 49.806750][ T455] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 8a:5a:54:7b:c2:34 [ 49.821618][ T455] usb 2-1: USB disconnect, device number 16 [ 49.832639][ T455] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 49.849222][ T795] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 49.860236][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.867741][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.875410][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.882838][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x1 [ 49.890385][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.897870][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.905406][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.912834][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.920459][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.920496][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 49.922682][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 49.930009][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.968321][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.970870][ T379] hid-generic 0000:007F:0001.0006: unknown main item tag 0x0 [ 49.987748][ T379] hid-generic 0000:007F:0001.0006: item fetching failed at offset 12/43 [ 49.988965][ T31] usb 1-1: USB disconnect, device number 8 [ 49.996944][ T379] hid-generic 0000:007F:0001.0006: probe with driver hid-generic failed with error -22 [ 50.139172][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 50.162696][ T813] FAULT_INJECTION: forcing a failure. [ 50.162696][ T813] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.176249][ T813] CPU: 1 UID: 0 PID: 813 Comm: syz.2.150 Not tainted 6.12.38-syzkaller-ge76cff4952af #0 0c4cbfa3f69dd82e55a5deb21a3f6a6c9f878492 [ 50.176280][ T813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.176300][ T813] Call Trace: [ 50.176306][ T813] [ 50.176314][ T813] __dump_stack+0x21/0x30 [ 50.176345][ T813] dump_stack_lvl+0x10c/0x190 [ 50.176369][ T813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.176394][ T813] ? kstrtoull+0x13b/0x1e0 [ 50.176420][ T813] dump_stack+0x19/0x20 [ 50.176444][ T813] should_fail_ex+0x3d9/0x530 [ 50.176472][ T813] should_fail+0xf/0x20 [ 50.176496][ T813] should_fail_usercopy+0x1e/0x30 [ 50.176512][ T813] _copy_from_user+0x22/0xb0 [ 50.176533][ T813] copy_from_sockptr+0x6f/0xa0 [ 50.176555][ T813] packet_setsockopt+0xac4/0x12a0 [ 50.176577][ T813] ? __cfi_packet_setsockopt+0x10/0x10 [ 50.176598][ T813] ? selinux_socket_setsockopt+0x2ea/0x390 [ 50.176627][ T813] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 50.176657][ T813] ? __kasan_check_write+0x18/0x20 [ 50.176684][ T813] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 50.176706][ T813] ? security_socket_setsockopt+0x33/0xd0 [ 50.176735][ T813] ? __cfi_packet_setsockopt+0x10/0x10 [ 50.176757][ T813] do_sock_setsockopt+0x26d/0x400 [ 50.176781][ T813] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 50.176807][ T813] __x64_sys_setsockopt+0x1b8/0x250 [ 50.176832][ T813] x64_sys_call+0x2adc/0x2ee0 [ 50.176859][ T813] do_syscall_64+0x58/0xf0 [ 50.176880][ T813] ? clear_bhb_loop+0x50/0xa0 [ 50.176910][ T813] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.176936][ T813] RIP: 0033:0x7fa5acb8ebe9 [ 50.176961][ T813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.176977][ T813] RSP: 002b:00007fa5ada17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.177005][ T813] RAX: ffffffffffffffda RBX: 00007fa5acdb5fa0 RCX: 00007fa5acb8ebe9 [ 50.177019][ T813] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 50.177031][ T813] RBP: 00007fa5ada17090 R08: 0000000000000004 R09: 0000000000000000 [ 50.177043][ T813] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.177055][ T813] R13: 00007fa5acdb6038 R14: 00007fa5acdb5fa0 R15: 00007ffc22e3ad48 [ 50.177071][ T813] [ 50.636050][ T828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.636088][ T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 50.672939][ T455] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 50.834046][ T455] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.845070][ T455] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.859327][ T455] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.866032][ T455] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 50.875197][ T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.885385][ T455] usb 2-1: config 0 descriptor?? [ 50.999650][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 50.999668][ T36] audit: type=1400 audit(1754677720.040:282): avc: denied { read } for pid=832 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.000071][ T834] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 51.057986][ T45] rust_binder: 832: removing orphan mapping 0:112 [ 51.070192][ T45] rust_binder: 0: removing orphan mapping 112:1048 [ 51.070517][ T36] audit: type=1326 audit(1754677720.110:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=835 comm="syz.0.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522c18ebe9 code=0x0 [ 51.155983][ T36] audit: type=1400 audit(1754677720.200:284): avc: denied { ioctl } for pid=845 comm="syz.0.160" path="socket:[7700]" dev="sockfs" ino=7700 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.305949][ T455] itetech 0003:06CB:73F6.0007: hidraw1: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 51.360594][ T36] audit: type=1400 audit(1754677720.400:285): avc: denied { setopt } for pid=851 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.510763][ T859] binder: Unknown parameter 'fscontext?}' [ 51.533255][ T36] audit: type=1400 audit(1754677720.580:286): avc: denied { ioctl } for pid=860 comm="syz.2.163" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.564239][ T45] usb 2-1: USB disconnect, device number 17 [ 51.587905][ T36] audit: type=1326 audit(1754677720.630:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.2.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5acb8ebe9 code=0x0 [ 51.692954][ T9] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 51.704779][ T9] usb 4-1: USB disconnect, device number 6 [ 51.794462][ T870] IPv6: syztnl2: Disabled Multicast RS [ 51.843626][ T872] rust_binder: validate_parent_fixup: new_min_offset=549755813894, sg_entry.length=0 [ 51.843654][ T872] rust_binder: Error while translating object. [ 51.853668][ T872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.860017][ T872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 51.870478][ T873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.920127][ T36] audit: type=1400 audit(1754677720.960:288): avc: denied { read } for pid=876 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.996585][ T36] audit: type=1400 audit(1754677721.040:289): avc: denied { sqpoll } for pid=881 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.322928][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 52.474453][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.489020][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.499288][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 52.515181][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.526152][ T45] usb 1-1: config 0 descriptor?? [ 52.533983][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 52.552524][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.949147][ T45] savu 0003:1E7D:2D5A.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 52.973195][ T517] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 53.103050][ T517] usb 4-1: device descriptor read/64, error -71 [ 53.209528][ T888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.218260][ T888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.227040][ T31] usb 1-1: USB disconnect, device number 9 [ 53.292954][ T909] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 53.300238][ T909] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 53.307396][ T909] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 53.307417][ T909] rust_binder: Error while translating object. [ 53.317945][ T909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.324188][ T909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 53.342990][ T517] usb 4-1: device descriptor read/64, error -71 [ 53.593019][ T517] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.723009][ T517] usb 4-1: device descriptor read/64, error -71 [ 53.772840][ T919] fuseblk: Unknown parameter 'obj_type' [ 53.877564][ T36] audit: type=1326 audit(1754677722.920:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.0.181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522c18ebe9 code=0x0 [ 53.962972][ T517] usb 4-1: device descriptor read/64, error -71 [ 54.073040][ T517] usb usb4-port1: attempt power cycle [ 54.182965][ T448] Bluetooth: hci0: command 0x1003 tx timeout [ 54.189069][ T447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.412940][ T517] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 54.434108][ T517] usb 4-1: device descriptor read/8, error -71 [ 54.563945][ T517] usb 4-1: device descriptor read/8, error -71 [ 54.714454][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.802954][ T517] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.826748][ T517] usb 4-1: device descriptor read/8, error -71 [ 54.964041][ T517] usb 4-1: device descriptor read/8, error -71 [ 55.062953][ T455] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.083015][ T517] usb usb4-port1: unable to enumerate USB device [ 55.212991][ T455] usb 1-1: Using ep0 maxpacket: 8 [ 55.219942][ T455] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.230249][ T455] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.242221][ T455] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.251331][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.259365][ T455] usb 1-1: Product: syz [ 55.263553][ T455] usb 1-1: SerialNumber: syz [ 55.474274][ T455] usb 1-1: 0:2 : does not exist [ 55.480828][ T455] usb 1-1: USB disconnect, device number 10 [ 55.489177][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.764298][ T454] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 55.772674][ T454] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.232969][ T454] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 56.305972][ T455] rust_binder: 907: removing orphan mapping 0:1048 [ 56.335949][ T939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.336391][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.351003][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.360044][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.367984][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.377015][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.384453][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.385044][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.405016][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.413406][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.416057][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.422534][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.433081][ T454] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.442589][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.452318][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.467554][ T454] usb 1-1: config 0 descriptor?? [ 56.472524][ T36] audit: type=1400 audit(1754677725.520:291): avc: denied { mount } for pid=942 comm="syz.3.190" name="/" dev="configfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.472972][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.497951][ T36] audit: type=1400 audit(1754677725.550:292): avc: denied { search } for pid=942 comm="syz.3.190" name="/" dev="configfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.504761][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.533854][ T36] audit: type=1400 audit(1754677725.550:293): avc: denied { write } for pid=942 comm="syz.3.190" name="/" dev="configfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.543890][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.564460][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.573584][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.576397][ T36] audit: type=1326 audit(1754677725.620:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.3.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45e538ebe9 code=0x0 [ 56.583493][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.612830][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.620601][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.629486][ T938] netlink: 'syz.2.188': attribute type 19 has an invalid length. [ 56.637262][ T938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.188'. [ 56.664573][ T36] audit: type=1400 audit(1754677725.710:295): avc: denied { mount } for pid=947 comm="syz.2.192" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.742929][ T448] Bluetooth: hci0: command 0x1003 tx timeout [ 56.742928][ T447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.771753][ T950] binder: Bad value for 'max' [ 56.934982][ T454] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 57.197203][ T455] usb 1-1: USB disconnect, device number 11 [ 57.503276][ T36] audit: type=1400 audit(1754677726.550:296): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.601662][ T36] audit: type=1400 audit(1754677726.640:297): avc: denied { setopt } for pid=963 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.621265][ T36] audit: type=1400 audit(1754677726.640:298): avc: denied { write } for pid=963 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.662949][ T36] audit: type=1400 audit(1754677726.700:299): avc: denied { create } for pid=968 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.689876][ T455] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 57.691721][ T36] audit: type=1400 audit(1754677726.730:300): avc: denied { create } for pid=975 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.699710][ T976] rust_binder: Error while translating object. [ 57.717232][ T976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 57.723625][ T976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:183 [ 57.780410][ T979] rust_binder: Write failure EINVAL in pid:187 [ 57.795265][ T979] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 57.844733][ T455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.868982][ T455] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 57.879693][ T455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.890386][ T994] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 57.902130][ T455] usb 4-1: config 0 descriptor?? [ 57.907427][ T958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.122942][ T454] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 58.274147][ T454] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.284387][ T454] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.294073][ T454] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.303224][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.311239][ T454] usb 1-1: SerialNumber: syz [ 58.337916][ T455] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 58.519815][ T997] fuse: Bad value for 'group_id' [ 58.524865][ T997] fuse: Bad value for 'group_id' [ 58.534644][ T454] usb 1-1: 0:2 : does not exist [ 58.541725][ T454] usb 1-1: USB disconnect, device number 12 [ 58.558438][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.613325][ T31] usb 4-1: USB disconnect, device number 11 [ 58.932929][ T455] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 59.092935][ T455] usb 3-1: Using ep0 maxpacket: 16 [ 59.100061][ T455] usb 3-1: too many endpoints for config 1 interface 1 altsetting 3: 177, using maximum allowed: 30 [ 59.111596][ T455] usb 3-1: config 1 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 177 [ 59.125563][ T455] usb 3-1: config 1 interface 1 has no altsetting 0 [ 59.133757][ T455] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.152924][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.162961][ T455] usb 3-1: Product: 괾 [ 59.167191][ T455] usb 3-1: Manufacturer: Ⰶ [ 59.182026][ T455] usb 3-1: SerialNumber: 炚ȕ컹됖酻﬈嚦란窅ꚦ퍢䢊箫휖䋑玛핐袆ﺯ鹴㓪ﲧ晧␹翭믙ⵎ隰㤭䑙깎覰菑僙ሩ挛 [ 59.616065][ T455] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 59.632352][ T455] usb 3-1: found format II with max.bitrate = 7, frame size=5 [ 59.640009][ T455] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 59.659961][ T455] usb 3-1: USB disconnect, device number 5 [ 59.685952][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.730283][ T1031] rust_binder: Error while translating object. [ 59.730326][ T1031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.736635][ T1031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 61.034518][ T1074] 9pnet_fd: Insufficient options for proto=fd [ 61.059987][ T1074] rust_binder: Error in use_page_slow: ESRCH [ 61.060008][ T1074] rust_binder: use_range failure ESRCH [ 61.066109][ T1074] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 61.071765][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.079745][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:203 [ 61.284042][ T1091] loop7: detected capacity change from 0 to 7 [ 61.474462][ T1098] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 61.474493][ T1098] rust_binder: Error while translating object. [ 61.517556][ T1098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.537592][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 61.537615][ T36] audit: type=1400 audit(1754677730.580:313): avc: denied { create } for pid=1099 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 61.545447][ T1098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 61.584002][ T1102] validate_nla: 63 callbacks suppressed [ 61.584027][ T1102] netlink: 'syz.3.245': attribute type 4 has an invalid length. [ 61.637207][ T1102] netlink: 'syz.3.245': attribute type 4 has an invalid length. [ 61.889732][ T1115] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 61.916747][ T1121] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 61.932144][ T1128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 61.932176][ T1128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:134 [ 62.512951][ T455] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.673303][ T455] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 62.687978][ T455] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 62.697100][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 62.705309][ T455] usb 3-1: Product: syz [ 62.709601][ T455] usb 3-1: Manufacturer: syz [ 62.714243][ T455] usb 3-1: SerialNumber: syz [ 62.719903][ T455] usb 3-1: config 0 descriptor?? [ 62.725714][ T455] cdc_acm 3-1:0.0: Zero length descriptor references [ 62.732489][ T455] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 62.877772][ T36] audit: type=1400 audit(1754677731.920:314): avc: denied { write } for pid=1166 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.897017][ T36] audit: type=1400 audit(1754677731.920:315): avc: denied { search } for pid=1166 comm="syz.3.266" name="/" dev="configfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.919546][ T36] audit: type=1400 audit(1754677731.920:316): avc: denied { write } for pid=1166 comm="syz.3.266" name="/" dev="configfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.981143][ T36] audit: type=1400 audit(1754677732.020:317): avc: denied { connect } for pid=1178 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.006964][ T455] usb 3-1: USB disconnect, device number 6 [ 63.104157][ T36] audit: type=1400 audit(1754677732.150:318): avc: denied { setopt } for pid=1187 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.140098][ T1191] 9pnet_fd: Insufficient options for proto=fd [ 63.196429][ T1199] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 63.239289][ T1207] overlayfs: failed to clone upperpath [ 63.239289][ T1206] overlayfs: failed to clone upperpath [ 63.323844][ T1214] fuse: Bad value for 'max_read' [ 63.372593][ T1217] tipc: Enabling of bearer rejected, already enabled [ 63.395255][ T1217] 9pnet_fd: Insufficient options for proto=fd [ 63.543578][ T291] cgroup: fork rejected by pids controller in /syz2 [ 63.588734][ T36] audit: type=1400 audit(1754677732.630:319): avc: denied { read } for pid=1218 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.644504][ T1219] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 63.756855][ T36] audit: type=1400 audit(1754677732.800:320): avc: denied { getopt } for pid=1223 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.872762][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.881748][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.889031][ T1225] bridge_slave_0: entered allmulticast mode [ 63.895872][ T1225] bridge_slave_0: entered promiscuous mode [ 63.907345][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.914556][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.938412][ T1225] bridge_slave_1: entered allmulticast mode [ 63.944435][ T447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.956046][ T36] audit: type=1400 audit(1754677733.000:321): avc: denied { create } for pid=1233 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.983462][ T1225] bridge_slave_1: entered promiscuous mode [ 64.097278][ T1246] overlayfs: failed to clone upperpath [ 64.121421][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.128547][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.135899][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.142973][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.225808][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.233350][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.255486][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.262674][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.294799][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.301899][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.332847][ T1225] veth0_vlan: entered promiscuous mode [ 64.362413][ T1225] veth1_macvtap: entered promiscuous mode [ 64.389496][ T36] audit: type=1400 audit(1754677733.430:322): avc: denied { mounton } for pid=1225 comm="syz-executor" path="/root/syzkaller.fJPD5S/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.554036][ T1262] __nla_validate_parse: 58 callbacks suppressed [ 64.554058][ T1262] netlink: 164 bytes leftover after parsing attributes in process `syz.3.297'. [ 64.718246][ T1276] IPv6: syztnl1: Disabled Multicast RS [ 64.723106][ T1278] rust_binder: Write failure EINVAL in pid:243 [ 64.993430][ T517] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 65.153996][ T517] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 65.172920][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.196824][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.215529][ T517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 65.244694][ T517] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 65.254084][ T517] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 65.262300][ T517] usb 2-1: Manufacturer: syz [ 65.273021][ T517] usb 2-1: config 0 descriptor?? [ 65.464271][ T1295] fuse: Bad value for 'fd' [ 65.686390][ T517] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 65.693678][ T1320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.703206][ T517] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 65.713599][ T517] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 65.721541][ T1320] overlayfs: missing 'lowerdir' [ 65.749504][ T1320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.771247][ T1320] overlayfs: missing 'lowerdir' [ 65.780179][ T1320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.789299][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.807233][ T1320] overlayfs: missing 'lowerdir' [ 65.819629][ T1320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.832529][ T1320] overlayfs: missing 'lowerdir' [ 65.837905][ T1320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.847275][ T1320] overlayfs: missing 'lowerdir' [ 65.889574][ T64] usb 2-1: USB disconnect, device number 18 [ 65.923007][ T454] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 65.945394][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.959023][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.973089][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.984498][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.997997][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.007317][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.016913][ T31] usb 3-1: config 0 descriptor?? [ 66.084807][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 66.096152][ T454] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 66.105842][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.123312][ T454] usb 1-1: config 0 descriptor?? [ 66.129147][ T1307] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 66.428623][ T31] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 66.439020][ T31] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 66.446969][ T31] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 66.454468][ T31] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 66.462152][ T31] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 66.469840][ T31] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 66.478173][ T31] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 66.491155][ T31] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 66.541918][ T454] hid-generic 0003:04F3:0755.000F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 66.575641][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 66.575659][ T36] audit: type=1400 audit(1754677735.620:327): avc: denied { watch } for pid=1346 comm="syz.3.325" path="/108/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.602273][ T1349] SELinux: failed to load policy [ 66.604903][ T36] audit: type=1400 audit(1754677735.620:328): avc: denied { load_policy } for pid=1343 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.852919][ T64] usb 3-1: USB disconnect, device number 7 [ 66.890751][ T9] usb 1-1: USB disconnect, device number 13 [ 67.508304][ T1380] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 67.519715][ T1380] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 67.536851][ T1382] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 67.549950][ T1382] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 67.587656][ T1390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1390 comm=syz.2.336 [ 67.602754][ T1390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1390 comm=syz.2.336 [ 67.683468][ T1397] /dev/rnullb0: Can't open blockdev [ 67.701151][ T36] audit: type=1400 audit(1754677736.740:329): avc: denied { bind } for pid=1398 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.763488][ T36] audit: type=1400 audit(1754677736.800:330): avc: denied { create } for pid=1398 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 67.776357][ T1405] rust_binder: 30: no such ref 0 [ 67.791967][ T36] audit: type=1400 audit(1754677736.830:331): avc: denied { write } for pid=1398 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 67.795197][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 67.814779][ T1407] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 67.831687][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 67.842581][ T1407] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 67.984286][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.997279][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.008311][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.018136][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.031323][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.040578][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.053171][ T31] usb 1-1: config 0 descriptor?? [ 68.101598][ T36] audit: type=1400 audit(1754677737.140:332): avc: denied { setopt } for pid=1419 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.213473][ T36] audit: type=1400 audit(1754677737.260:333): avc: denied { remount } for pid=1421 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.213496][ T1422] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 68.346468][ T36] audit: type=1400 audit(1754677737.390:334): avc: denied { name_bind } for pid=1430 comm="syz.1.354" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.460485][ T31] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 68.471652][ T31] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 68.485483][ T31] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.487560][ T36] audit: type=1400 audit(1754677737.530:335): avc: denied { ioctl } for pid=1435 comm="syz.1.356" path="socket:[11600]" dev="sockfs" ino=11600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.641863][ T1446] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1446 comm=syz.3.360 [ 68.657023][ T1446] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1446 comm=syz.3.360 [ 68.873237][ T9] usb 1-1: USB disconnect, device number 14 [ 68.988848][ T1472] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6473 sclass=netlink_xfrm_socket pid=1472 comm=syz.3.368 [ 69.016320][ T36] audit: type=1400 audit(1754677738.060:336): avc: denied { wake_alarm } for pid=1476 comm="syz.3.369" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.170402][ T1481] FAULT_INJECTION: forcing a failure. [ 69.170402][ T1481] name failslab, interval 1, probability 0, space 0, times 1 [ 69.183211][ T1481] CPU: 0 UID: 0 PID: 1481 Comm: syz.2.371 Not tainted 6.12.38-syzkaller-ge76cff4952af #0 0c4cbfa3f69dd82e55a5deb21a3f6a6c9f878492 [ 69.183247][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.183260][ T1481] Call Trace: [ 69.183267][ T1481] [ 69.183276][ T1481] __dump_stack+0x21/0x30 [ 69.183323][ T1481] dump_stack_lvl+0x10c/0x190 [ 69.183348][ T1481] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.183374][ T1481] ? __asan_memcpy+0x5a/0x80 [ 69.183401][ T1481] dump_stack+0x19/0x20 [ 69.183424][ T1481] should_fail_ex+0x3d9/0x530 [ 69.183452][ T1481] should_failslab+0xac/0x100 [ 69.183471][ T1481] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 69.183499][ T1481] ? __alloc_skb+0x10c/0x370 [ 69.183519][ T1481] __alloc_skb+0x10c/0x370 [ 69.183539][ T1481] alloc_skb_with_frags+0xce/0x8b0 [ 69.183560][ T1481] ? __cfi_selinux_file_open+0x10/0x10 [ 69.183584][ T1481] sock_alloc_send_pskb+0x858/0x990 [ 69.183609][ T1481] ? __kasan_check_write+0x18/0x20 [ 69.183638][ T1481] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 69.183664][ T1481] ? unwind_get_return_address+0x51/0x90 [ 69.183689][ T1481] packet_sendmsg+0x39bf/0x56e0 [ 69.183718][ T1481] ? avc_has_perm_noaudit+0x268/0x360 [ 69.183745][ T1481] ? selinux_set_mnt_opts+0xc06/0x19d0 [ 69.183772][ T1481] ? kstrtouint_from_user+0xfb/0x150 [ 69.183800][ T1481] ? __x64_sys_openat+0x13a/0x170 [ 69.183824][ T1481] ? x64_sys_call+0xe69/0x2ee0 [ 69.183852][ T1481] ? selinux_socket_sendmsg+0x284/0x380 [ 69.183879][ T1481] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 69.183907][ T1481] ? __kasan_check_write+0x18/0x20 [ 69.183933][ T1481] ? proc_fail_nth_write+0x17e/0x210 [ 69.183958][ T1481] ? __cfi_packet_sendmsg+0x10/0x10 [ 69.183984][ T1481] ? wait_on_inode+0x20/0x210 [ 69.184005][ T1481] ? check_stack_object+0x107/0x140 [ 69.184034][ T1481] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 69.184057][ T1481] ? security_socket_sendmsg+0x33/0xd0 [ 69.184086][ T1481] __sys_sendto+0x66d/0x6f0 [ 69.184108][ T1481] ? __cfi___sys_sendto+0x10/0x10 [ 69.184132][ T1481] ? __kasan_check_write+0x18/0x20 [ 69.184159][ T1481] ? __cfi_ksys_write+0x10/0x10 [ 69.184177][ T1481] __x64_sys_sendto+0xe9/0x100 [ 69.184199][ T1481] x64_sys_call+0x2c2c/0x2ee0 [ 69.184226][ T1481] do_syscall_64+0x58/0xf0 [ 69.184247][ T1481] ? clear_bhb_loop+0x50/0xa0 [ 69.184274][ T1481] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.184301][ T1481] RIP: 0033:0x7f462a98ebe9 [ 69.184321][ T1481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.184337][ T1481] RSP: 002b:00007f462b8c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.184359][ T1481] RAX: ffffffffffffffda RBX: 00007f462abb5fa0 RCX: 00007f462a98ebe9 [ 69.184374][ T1481] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 0000000000000003 [ 69.184387][ T1481] RBP: 00007f462b8c1090 R08: 0000200000000080 R09: 0000000000000014 [ 69.184407][ T1481] R10: 0000000024000840 R11: 0000000000000246 R12: 0000000000000001 [ 69.184420][ T1481] R13: 00007f462abb6038 R14: 00007f462abb5fa0 R15: 00007ffe651e83b8 [ 69.184437][ T1481] [ 69.434071][ T517] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 69.468352][ T1485] netlink: 'syz.0.373': attribute type 4 has an invalid length. [ 69.518884][ T1485] netlink: 'syz.0.373': attribute type 4 has an invalid length. [ 69.594524][ T1502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 69.603528][ T1502] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 69.612781][ T1502] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 69.621884][ T1502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.631857][ T517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.648315][ T517] usb 3-1: config 1 interface 0 has no altsetting 0 [ 69.658297][ T517] usb 3-1: language id specifier not provided by device, defaulting to English [ 69.673763][ T517] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 69.684227][ T517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.692265][ T517] usb 3-1: Product: syz [ 69.707958][ T517] usb 3-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 69.721528][ T517] usb 3-1: SerialNumber: syz [ 69.773702][ T1512] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 69.796833][ T1512] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 69.993146][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 70.067773][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.076466][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.101581][ T517] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 70.113535][ T517] usb 3-1: USB disconnect, device number 8 [ 70.153996][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.165638][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.176737][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.186730][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.199818][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.209058][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.220299][ T31] usb 2-1: config 0 descriptor?? [ 70.507210][ T1550] 9pnet_fd: Insufficient options for proto=fd [ 70.569418][ T1557] mmap: syz.3.398 (1557): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 70.627637][ T31] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 70.637688][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 70.651258][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 70.792958][ T64] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 70.916379][ T9] usb 2-1: USB disconnect, device number 19 [ 70.944170][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.955407][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.965301][ T64] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 70.974479][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.983580][ T64] usb 1-1: config 0 descriptor?? [ 71.006620][ T1571] netlink: 68 bytes leftover after parsing attributes in process `syz.2.402'. [ 71.017243][ T1571] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 71.395381][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 71.401517][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 71.411908][ T64] usb 1-1: USB disconnect, device number 15 [ 71.438680][ T1594] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 71.451426][ T1594] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 71.459880][ T1594] CPU: 1 UID: 0 PID: 1594 Comm: syz.2.409 Not tainted 6.12.38-syzkaller-ge76cff4952af #0 0c4cbfa3f69dd82e55a5deb21a3f6a6c9f878492 [ 71.473385][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.483472][ T1594] RIP: 0010:step_into+0x121/0xf50 [ 71.488529][ T1594] Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 10 0c 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 0f 0c 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 71.508157][ T1594] RSP: 0018:ffffc9000dbef780 EFLAGS: 00010202 [ 71.514299][ T1594] RAX: 0000000000000001 RBX: ffffc9000dbef9c0 RCX: 0000000000080000 [ 71.522328][ T1594] RDX: ffffc900011a1000 RSI: 00000000000001f5 RDI: 00000000000001f6 [ 71.530322][ T1594] RBP: ffffc9000dbef898 R08: ffff88813c1b369f R09: 1ffff110278366d3 [ 71.538315][ T1594] R10: dffffc0000000000 R11: ffffed10278366d4 R12: 1ffff92001b7df3f [ 71.546305][ T1594] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000008 [ 71.554319][ T1594] FS: 00007f462b8c16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.563266][ T1594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.569862][ T1594] CR2: 00007f462b87ef98 CR3: 0000000116530000 CR4: 00000000003526b0 [ 71.578030][ T1594] Call Trace: [ 71.581324][ T1594] [ 71.584264][ T1594] ? __lookup_slow+0x389/0x400 [ 71.589045][ T1594] ? lookup_one_len+0x2f0/0x2f0 [ 71.593940][ T1594] ? down_read+0x79/0xe0 [ 71.598218][ T1594] ? set_root+0x420/0x420 [ 71.603015][ T1594] ? __kasan_check_write+0x18/0x20 [ 71.608142][ T1594] ? up_read+0x26/0x1d0 [ 71.612310][ T1594] walk_component+0x255/0x440 [ 71.617031][ T1594] path_lookupat+0x180/0x4a0 [ 71.621638][ T1594] filename_lookup+0x1f5/0x520 [ 71.626418][ T1594] ? __cfi_filename_lookup+0x10/0x10 [ 71.631715][ T1594] ? check_stack_object+0x82/0x140 [ 71.636859][ T1594] ? __virt_addr_valid+0x2a6/0x380 [ 71.641988][ T1594] vfs_statx+0x101/0x200 [ 71.646262][ T1594] ? vfs_fstatat+0x1d0/0x1d0 [ 71.650866][ T1594] ? __kasan_check_write+0x18/0x20 [ 71.656013][ T1594] vfs_fstatat+0xe5/0x1d0 [ 71.660364][ T1594] __se_sys_newfstatat+0xcd/0x340 [ 71.665412][ T1594] ? __x64_sys_newfstatat+0xc0/0xc0 [ 71.670634][ T1594] ? vfs_read+0x8b6/0xb60 [ 71.675000][ T1594] ? do_futex+0x309/0x500 [ 71.679350][ T1594] ? __cfi_do_futex+0x10/0x10 [ 71.684042][ T1594] ? __x64_sys_futex+0x110/0x110 [ 71.689008][ T1594] ? __cfi_ksys_read+0x10/0x10 [ 71.693790][ T1594] ? __kasan_check_write+0x18/0x20 [ 71.698916][ T1594] ? fpregs_restore_userregs+0x11d/0x260 [ 71.704560][ T1594] __x64_sys_newfstatat+0x9f/0xc0 [ 71.709595][ T1594] x64_sys_call+0x1821/0x2ee0 [ 71.714287][ T1594] do_syscall_64+0x58/0xf0 [ 71.718707][ T1594] ? clear_bhb_loop+0x50/0xa0 [ 71.723399][ T1594] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.729300][ T1594] RIP: 0033:0x7f462a98ebe9 [ 71.733715][ T1594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.753414][ T1594] RSP: 002b:00007f462b8c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 71.761835][ T1594] RAX: ffffffffffffffda RBX: 00007f462abb5fa0 RCX: 00007f462a98ebe9 [ 71.769839][ T1594] RDX: 0000200000000c40 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 71.777853][ T1594] RBP: 00007f462aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 71.785842][ T1594] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000000 [ 71.793833][ T1594] R13: 00007f462abb6038 R14: 00007f462abb5fa0 R15: 00007ffe651e83b8 [ 71.801832][ T1594] [ 71.804869][ T1594] Modules linked in: [ 71.809029][ T1594] ---[ end trace 0000000000000000 ]--- [ 71.814850][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 71.814867][ T36] audit: type=1400 audit(1754677740.850:341): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 71.816208][ T1596] rust_binder: Error while translating object. [ 71.820877][ T36] audit: type=1400 audit(1754677740.850:342): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.820914][ T36] audit: type=1400 audit(1754677740.850:343): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.848571][ T1596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 71.849425][ T1594] RIP: 0010:step_into+0x121/0xf50 [ 71.871455][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:72 [ 71.892721][ T36] audit: type=1400 audit(1754677740.850:344): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.901523][ T1594] Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 10 0c 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 0f 0c 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 71.907406][ T36] audit: type=1400 audit(1754677740.850:345): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.916235][ T1594] RSP: 0018:ffffc9000dbef780 EFLAGS: 00010202 [ 71.936990][ T36] audit: type=1400 audit(1754677740.850:346): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.956561][ T1594] [ 71.984762][ T36] audit: type=1400 audit(1754677740.850:347): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.010315][ T1594] RAX: 0000000000000001 RBX: ffffc9000dbef9c0 RCX: 0000000000080000 [ 72.039068][ T1594] RDX: ffffc900011a1000 RSI: 00000000000001f5 RDI: 00000000000001f6 [ 72.047170][ T1594] RBP: ffffc9000dbef898 R08: ffff88813c1b369f R09: 1ffff110278366d3 [ 72.055821][ T1594] R10: dffffc0000000000 R11: ffffed10278366d4 R12: 1ffff92001b7df3f [ 72.063887][ T1594] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000008 [ 72.072072][ T1594] FS: 00007f462b8c16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.081073][ T1594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.087731][ T1594] CR2: 0000000000000000 CR3: 0000000116530000 CR4: 00000000003526b0 [ 72.095783][ T1594] Kernel panic - not syncing: Fatal exception [ 72.102203][ T1594] Kernel Offset: disabled [ 72.106547][ T1594] Rebooting in 86400 seconds..