last executing test programs: 1m30.308867696s ago: executing program 0 (id=811): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendfile(r0, r0, 0x0, 0x7ffff000) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '/dev/rnullb0\x00'}}, {@uname={'uname', 0x3d, '#'}}, {@access_any}, {@uname={'uname', 0x3d, '/dev/rnullb0\x00'}}, {@directio}], [{@smackfsdef={'smackfsdef', 0x3d, '#$\',!\xf3#'}}, {@flag='ro'}]}}) 1m29.442484911s ago: executing program 0 (id=817): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000380)="f6ace1fe", 0x4, 0xe045, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) read$FUSE(r4, &(0x7f0000002b80)={0x2020}, 0x2020) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) unshare(0x20000400) (async) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) close(r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000380)="f6ace1fe", 0x4, 0xe045, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') (async) pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) (async) read$FUSE(r4, &(0x7f0000002b80)={0x2020}, 0x2020) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) 1m29.341438971s ago: executing program 0 (id=820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x2000000, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0x3000, 0x19800}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 1m29.279931056s ago: executing program 0 (id=821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) (async) sendfile(r3, r3, 0x0, 0x7ffff000) cachestat(r3, &(0x7f0000000200)={0x5, 0x100000000}, &(0x7f0000000140), 0x0) 1m28.261392966s ago: executing program 0 (id=826): mkdir(&(0x7f0000000000)='./bus\x00', 0x82) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2ffffffffff400101c0"]) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000018) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0xf, {{0xa, 0x4e26, 0x100, @mcast1, 0x10000003}}}, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) getpeername(r5, &(0x7f0000000480)=@can, &(0x7f0000000500)=0x80) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$inet6(0xa, 0x8, 0x3) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f00000003c0)=0x43df, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @loopback, 0x9}, 0x5e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2008010, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@redirect_dir_off}, {@index_off}]}) socket(0x10, 0x3, 0x0) 1m27.893344663s ago: executing program 0 (id=834): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r0], 0x20}}, 0x40816) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m27.857728736s ago: executing program 32 (id=834): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r0], 0x20}}, 0x40816) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 10.687361052s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="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", 0x1f000) 8.737054564s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 6.956702838s ago: executing program 1 (id=1657): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x147342, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() wait4(r1, 0x0, 0x4, 0x0) (async) wait4(r1, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x31, 0x1, @thr={&(0x7f0000000180)="ad06ef6aa9a0af9c9c8d1fd58b20cd7c33ca479041f20aa6ca0f9a9b4d61b5e670304852e5dece9cc698eaeafa393541d4430143fe6b3ae6ed3acc26973b8a9208ccc2654496c221ca018e0487985e5eeb4960e71de4f3063c456e5060c2c6d9ff7fe65d254bbe1518", &(0x7f0000001180)="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"}}, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0) (async) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0) r3 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x41) sched_setscheduler(r3, 0x3, &(0x7f0000000000)=0x8) sendfile(r0, r2, 0x0, 0x7ffff000) 6.856174318s ago: executing program 1 (id=1659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1, 0x8a2, 0x8bd7) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x47, 0x8, 0x3, 0x8, {{0x5, 0x4, 0x2, 0x1b, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast}}}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80) 6.747125219s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="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", 0x1f000) 4.780216922s ago: executing program 1 (id=1662): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4.715511008s ago: executing program 4 (id=1665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0xfe11) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xcb, 0x2, 0x0}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = epoll_create(0x5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x0, 0x4000, 0x10, 0x8004}, {@in6=@private0, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x327, 0x9, 0x0, 0x4, 0xffd, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x80000000000000}, {0x8f, 0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x100000}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = openat$incfs(r7, &(0x7f0000000000)='.log\x00', 0x80040, 0x42) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}}) r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r12 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r12, 0x10000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000080)=0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) fcntl$addseals(r12, 0x409, 0x7) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000100)={r14, 0x0, 0x0, 0x8000}) setsockopt$netlink_NETLINK_CAP_ACK(r13, 0x10e, 0xa, &(0x7f0000000200)=0x101, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.614436378s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="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", 0x1f000) 2.65960002s ago: executing program 4 (id=1666): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="15066f992bffff0010000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, 0xee00}}], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4, 0x0, 0x3ff000000}]}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000002500)) 2.65638068s ago: executing program 1 (id=1667): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r0 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 2.65580111s ago: executing program 3 (id=1668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/45, 0x2d, 0x2, 0x24}, @fda={0x66646185, 0x4, 0x2, 0x17}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x1}, @exit_looper, @request_death={0x400c630e, 0x3}, @exit_looper, @exit_looper, @acquire={0x40046305, 0x2}], 0x97, 0x0, &(0x7f0000000400)="13ee15971812c6285f965eec9242bb7560b9c54b05fca492188a32496bdb5a54df0915c350577857fb150bc1ebb268675799eda8dc8f6304a5ffa8dcdb01d0686c7fafd26344c669fa04c86a15174766033cc27c9702fd361af444c26c3f6568db6dbfa23a4fda1b3e0d9ddc24fcbbc3a31d91718fb69c9519bee20eeb76ca889156609e2a1b9cf0270ed4c43264c47acf3d3e9f96cb5d"}) r2 = getpid() getpgid(r2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2046) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) arch_prctl$ARCH_GET_FS(0x1003, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x100) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/45, 0x2d, 0x2, 0x24}, @fda={0x66646185, 0x4, 0x2, 0x17}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x1}, @exit_looper, @request_death={0x400c630e, 0x3}, @exit_looper, @exit_looper, @acquire={0x40046305, 0x2}], 0x97, 0x0, &(0x7f0000000400)="13ee15971812c6285f965eec9242bb7560b9c54b05fca492188a32496bdb5a54df0915c350577857fb150bc1ebb268675799eda8dc8f6304a5ffa8dcdb01d0686c7fafd26344c669fa04c86a15174766033cc27c9702fd361af444c26c3f6568db6dbfa23a4fda1b3e0d9ddc24fcbbc3a31d91718fb69c9519bee20eeb76ca889156609e2a1b9cf0270ed4c43264c47acf3d3e9f96cb5d"}) (async) getpid() (async) getpgid(r2) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000"]) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2046) (async) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) (async) 2.607409195s ago: executing program 1 (id=1669): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f00000003c0)={r5, r6+60000000}, &(0x7f0000000400)) timer_settime(r2, 0x0, &(0x7f0000000300)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000340)) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b637075202d706572665f6576656e74202d6e657420becc90e1af48d1dc6a8703fea3b2720400000000000000bdcfeafad78d414eee66c9525ac330cf9646c76ec24530abaa55f6990b3722bb8d02aa846d907bdafd3138ffd14e23b573c0ae9f97189ddafae4a7"], 0x16) mmap(&(0x7f0000020000/0x2000)=nil, 0x2000, 0x1000001, 0x98110, r0, 0xffffe000) io_getevents(0x0, 0x4, 0x1, &(0x7f0000000080)=[{}], 0x0) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r8 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10) fallocate(r7, 0x44, 0x8, 0xfffffffffffffff8) 2.516139324s ago: executing program 3 (id=1671): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0xd) openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',up_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="2b000000060000000000000000000000010020000000000005000000000fe10000000018"], 0x2b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='dummy0\x00', 0x80000000, 0x0, 0x7}) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000280)={0x40000002}) r7 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000000)='fd', 0x3) kcmp$KCMP_EPOLL_TFD(r3, r7, 0x7, r8, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.441307281s ago: executing program 4 (id=1672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edff9c000040"]) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x12b8b000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.360251879s ago: executing program 3 (id=1673): ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc}) r0 = socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, &(0x7f0000000040), 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) readahead(0xffffffffffffffff, 0x4, 0x4058) 2.303336394s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="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", 0x1f000) 226.523988ms ago: executing program 4 (id=1674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x5, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) dup3(r0, r0, 0x0) 221.676699ms ago: executing program 1 (id=1675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 180.254643ms ago: executing program 3 (id=1676): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x31f, 0x0, 0x0, "", [@generic="7ec709148ba31668197712fa40d4cf815a"]}, 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffff) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0, 0xffff, 0x4000) 114.667519ms ago: executing program 4 (id=1677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e26, @rand_addr=0x64010101}, 0x0, 0x0, 0x4}}, 0x26) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1281}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x2000c80c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000380)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x442, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0xa7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0x1, 0xf3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xf8, 0x48, 0x20, 0x5}, 0xe6, &(0x7f0000000180)={0x5, 0xf, 0xe6, 0x2, [@generic={0xcd, 0x10, 0xa, "261cb3eb36bee7a7e59a0b8bed84319617e7db38aad9349a1770eede1091de474a6b650d048c8782e497d25d860f60000039922c4c7e3ea94260b1198c85aa08e070ed41dbaf927a5983deb6a64bd2da52e47dc2020abf822e55ed151b20c24e24d49dd2e1e09a0b9cbd506973de1462a6b76d4abc7ae0fb95a470c7cccc801127fc8d6d4f389df2504db9751d0c280304f9aed46d3307b3f1aa09dc1b15e494f9bd6153e52e8fc6c934583e66f6e704f290b7968ef3def5593223fb7c2a41734a820916dd0ab8a37236"}, @ss_container_id={0x14, 0x10, 0x4, 0xe2, "bce4760cd34f3a3ad5a27bf3086708b7"}]}, 0x1, [{0x51, &(0x7f0000000280)=@string={0x51, 0x3, "7f92f88ed6d545fd9ea4ac7defd0f5cbe21ba8334a6d79a5646f1572a7c48e34816acdd743e8e897d01adead6df28c0a0b2d367e85bc711be97c0f5a64cf9b2c514a5ba156d2ed48452f93ea273644"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 114.406639ms ago: executing program 3 (id=1678): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) socket(0x1e, 0x81977a01b92103ca, 0x9) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41"], 0x30}, 0x1, 0x0, 0x0, 0xc72468a41d761bf9}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x66020000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$tipc(0x1e, 0x8571ab68e4a3a089, 0x0, &(0x7f0000000040)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xca) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000080)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) 14.526339ms ago: executing program 3 (id=1679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x40045436, 0x3) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(r2, 0x6) mprotect(&(0x7f000027d000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, 0x0) 0s ago: executing program 2 (id=1585): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000800)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0xb}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000021c0)="1200000012050000007b0000e3cc5042f8000000004e67172e4d910a19a5459036f0902003cec1b55ab4afb64bd7fe79264c923689c5fd9844aab010bbb99e14c36ca706271e53c01f883727ed88c4c52fdfe15a4fc7806c4304afd9183a7e9f5a3968cd6718789eb98f2102fb5eae97328620ec2ba80ccd5e8b412b2cc4e6aceacccbf9f5ffffd868f1767631f9dfdc3586ec58e175aca0d0b959e79f6ab558f6e02bd527441f9e9bf551c605ddf5f3c9c104d76240a3e1b3ec6e658d02889961f6a938c0c63f187e000000000000", 0xffffffffffffff0d, 0x20048010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0xffffffe1, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/249, 0x100}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000180)=""/151, 0x97}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x101ff}], 0x7, 0x2100, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) personality(0x8001a0ffffffff) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/178, 0xb2}], 0x1, &(0x7f0000000240)=""/62, 0x3e}, 0x2}, {{&(0x7f0000001c40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/51, 0x33}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/129, 0x81}], 0x5}, 0x5}], 0x2, 0x10100, &(0x7f0000002080)) write(r2, &(0x7f0000000400)="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", 0x1f000) kernel console output (not intermixed with test programs): 5.010238][ T36] audit: type=1400 audit(1760210837.188:573): avc: denied { connect } for pid=2158 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.039180][ T2159] overlayfs: statfs failed on './file0' [ 75.045415][ T2159] /dev/rnullb0: Can't open blockdev [ 75.088600][ T2164] rust_binder: Error in use_page_slow: ESRCH [ 75.088627][ T2164] rust_binder: use_range failure ESRCH [ 75.094971][ T2164] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 75.100555][ T2164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.109269][ T2164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 75.457375][ T2186] 9pnet_fd: Insufficient options for proto=fd [ 75.496722][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.506347][ T9] usb 2-1: no configurations [ 75.512509][ T9] usb 2-1: can't read configurations, error -22 [ 75.612429][ T2195] input: syz1 as /devices/virtual/input/input21 [ 75.677077][ T2197] netlink: 'syz.1.570': attribute type 27 has an invalid length. [ 75.724745][ T2203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.724870][ T2203] rust_binder: Error in use_page_slow: ESRCH [ 75.732528][ T2203] rust_binder: use_range failure ESRCH [ 75.738823][ T2197] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.738952][ T2203] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 75.744642][ T2197] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.766936][ T2203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.766972][ T2203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:394 [ 75.826316][ T2209] netlink: 'syz.2.574': attribute type 3 has an invalid length. [ 75.848304][ T2208] netlink: 'syz.2.574': attribute type 3 has an invalid length. [ 75.863942][ T2208] overlayfs: missing 'lowerdir' [ 75.873126][ T2213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.879203][ T2213] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 75.879798][ T2213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 75.898454][ T2213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:459 [ 75.910120][ T36] audit: type=1400 audit(1760210838.088:574): avc: denied { ioctl } for pid=2217 comm="syz.2.577" path="socket:[17443]" dev="sockfs" ino=17443 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.945906][ T36] audit: type=1400 audit(1760210838.088:575): avc: denied { ioctl } for pid=2215 comm="syz.1.576" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.975348][ T36] audit: type=1400 audit(1760210838.158:576): avc: denied { mounton } for pid=2220 comm="syz.1.578" path="/87/file0" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 76.025748][ T36] audit: type=1400 audit(1760210838.208:577): avc: denied { create } for pid=2229 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 76.057299][ T36] audit: type=1400 audit(1760210838.238:578): avc: denied { read } for pid=2234 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.140771][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 76.180208][ T2264] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 76.224806][ T2270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.243161][ T2270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.273539][ T2268] SELinux: failed to load policy [ 76.290755][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 76.314680][ T31] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 76.325271][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.340647][ T31] usb 3-1: config 0 has no interface number 0 [ 76.349633][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.359099][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.367623][ T31] usb 3-1: Product: syz [ 76.372470][ T31] usb 3-1: Manufacturer: syz [ 76.377258][ T31] usb 3-1: SerialNumber: syz [ 76.383067][ T31] usb 3-1: config 0 descriptor?? [ 76.389608][ T31] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 76.396465][ T31] usb 3-1: No valid video chain found. [ 76.590498][ T2218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.577'. [ 76.599770][ T2218] netlink: 'syz.2.577': attribute type 32 has an invalid length. [ 76.798999][ T9] usb 3-1: USB disconnect, device number 21 [ 76.804095][ T2276] rust_binder: Write failure EFAULT in pid:473 [ 77.498692][ T2312] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 77.568533][ T2322] rust_binder: Write failure EFAULT in pid:414 [ 77.580768][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 77.585798][ T2329] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.621511][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 77.621529][ T36] audit: type=1400 audit(1760210839.808:584): avc: denied { sqpoll } for pid=2331 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.678392][ T2347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.679371][ T2347] fuse: Bad value for 'user_id' [ 77.692778][ T2347] fuse: Bad value for 'user_id' [ 77.699530][ T2347] rust_binder: Error in use_page_slow: ESRCH [ 77.699555][ T2347] rust_binder: use_range failure ESRCH [ 77.708575][ T2347] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 77.714521][ T2347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.722512][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.723062][ T2347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:416 [ 77.732790][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 77.758046][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.764172][ T2374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.767277][ T2374] rust_binder: Error in use_page_slow: ESRCH [ 77.767342][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.774194][ T2374] rust_binder: use_range failure ESRCH [ 77.787937][ T2374] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 77.788133][ T31] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 77.793531][ T2374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.793562][ T2374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:418 [ 77.802439][ T31] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 77.841604][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.845461][ T2376] rust_binder: Write failure EFAULT in pid:420 [ 77.852354][ T31] usb 2-1: config 1 has no interface number 1 [ 77.865868][ T31] usb 2-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 77.879154][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.890522][ T31] usb 2-1: config 1 interface 4 has no altsetting 0 [ 77.898920][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.908866][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.917412][ T31] usb 2-1: Product: syz [ 77.922060][ T31] usb 2-1: Manufacturer: syz [ 77.927230][ T31] usb 2-1: SerialNumber: syz [ 78.125617][ T2392] netlink: 188 bytes leftover after parsing attributes in process `syz.2.624'. [ 78.136595][ T2393] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 78.144038][ T2393] rust_binder: 436: no such ref 2 [ 78.149260][ T2393] rust_binder: 436: no such ref 0 [ 78.156668][ T2393] rust_binder: 436: no such ref 3 [ 78.162414][ T31] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 78.186755][ T31] usb 2-1: USB disconnect, device number 14 [ 78.196884][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.199826][ T2401] rust_binder: Write failure EFAULT in pid:441 [ 78.282975][ T2408] syzkaller0: entered promiscuous mode [ 78.294743][ T2408] syzkaller0: entered allmulticast mode [ 78.304534][ T2408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.319429][ T2411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.335317][ T2410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.344415][ T2411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.348905][ T2410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.680670][ T2422] rust_binder: Got transaction with invalid offset. [ 78.680812][ T2422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.687832][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 78.880138][ T2441] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 78.898296][ T2441] rust_binder: Write failure EINVAL in pid:513 [ 78.898744][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.905289][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:513 [ 78.953058][ T2443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.971178][ T2443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.068900][ T36] audit: type=1400 audit(1760210841.248:585): avc: denied { map } for pid=2442 comm="syz.0.642" path="socket:[18798]" dev="sockfs" ino=18798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.306560][ T2450] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.491279][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 79.508485][ T2457] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 79.516693][ T2457] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 79.524491][ T2457] netlink: 'syz.3.647': attribute type 5 has an invalid length. [ 79.532255][ T2457] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.647'. [ 79.540835][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 79.592373][ T2467] /dev/rnullb0: Can't lookup blockdev [ 79.623564][ T2471] netlink: 76 bytes leftover after parsing attributes in process `syz.3.652'. [ 79.636636][ T36] audit: type=1400 audit(1760210841.818:586): avc: denied { bind } for pid=2472 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.661598][ T2473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.670262][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.670907][ T2473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.681656][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.699050][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.702875][ T9] usb 3-1: unable to get BOS descriptor set [ 79.712308][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.719122][ T9] usb 3-1: config 64 has an invalid interface number: 174 but max is 2 [ 79.727328][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.735523][ T9] usb 3-1: config 64 has an invalid interface number: 252 but max is 2 [ 79.748012][ T31] usb 2-1: config 0 descriptor?? [ 79.751790][ T9] usb 3-1: config 64 has an invalid interface descriptor of length 2, skipping [ 79.765694][ T9] usb 3-1: config 64 has an invalid interface number: 140 but max is 2 [ 79.774161][ T9] usb 3-1: config 64 has no interface number 0 [ 79.780468][ T9] usb 3-1: config 64 has no interface number 1 [ 79.786690][ T9] usb 3-1: config 64 has no interface number 2 [ 79.792935][ T9] usb 3-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 79.804210][ T9] usb 3-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 79.815314][ T9] usb 3-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 79.825678][ T9] usb 3-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 79.836903][ T9] usb 3-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 79.847744][ T9] usb 3-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 79.858746][ T9] usb 3-1: config 64 interface 174 has no altsetting 0 [ 79.865669][ T9] usb 3-1: config 64 interface 252 has no altsetting 0 [ 79.872689][ T9] usb 3-1: config 64 interface 140 has no altsetting 0 [ 79.881811][ T9] usb 3-1: string descriptor 0 read error: -22 [ 79.888103][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 79.897257][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.907214][ T9] usb-storage 3-1:64.174: USB Mass Storage device detected [ 79.952753][ T9] usb-storage 3-1:64.252: USB Mass Storage device detected [ 79.983245][ T9] usb-storage 3-1:64.140: USB Mass Storage device detected [ 80.111522][ T60] usb 3-1: USB disconnect, device number 22 [ 80.160783][ T31] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 80.170022][ T31] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.219931][ T2487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.228529][ T2487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.631112][ T2491] binder: Bad value for 'stats' [ 80.653058][ T36] audit: type=1400 audit(1760210842.838:587): avc: denied { map } for pid=2492 comm="syz.2.658" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.029741][ T2518] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 81.073101][ T2520] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.665'. [ 81.167201][ T2531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 81.334287][ T2521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 81.371548][ T36] audit: type=1400 audit(1760210843.558:588): avc: denied { mount } for pid=2539 comm="syz.3.670" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.411200][ T36] audit: type=1400 audit(1760210843.588:589): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.431490][ T2542] netlink: 'syz.3.671': attribute type 2 has an invalid length. [ 81.456827][ T2544] netlink: 17 bytes leftover after parsing attributes in process `syz.3.672'. [ 81.466867][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 82.139899][ T2578] fuse: Bad value for 'rootmode' [ 82.264109][ T2588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 82.273491][ T31] usb 2-1: USB disconnect, device number 15 [ 82.276790][ T2588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=2588 comm=syz.1.687 [ 82.301389][ T2588] 9pnet_fd: Insufficient options for proto=fd [ 82.361008][ T36] audit: type=1400 audit(1760210845.556:590): avc: denied { view } for pid=2582 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.400886][ T2593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.401049][ T2593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 82.407791][ T2593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:484 [ 82.422323][ T2593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 82.462016][ T2601] can0: slcan on ptm0. [ 82.532526][ T2601] can0 (unregistered): slcan off ptm0. [ 82.541247][ T2614] binder: Unknown parameter 'def' [ 82.640994][ T2628] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 82.652283][ T2628] SELinux: failed to load policy [ 82.681821][ T2636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.691674][ T2636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.700991][ T2636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.701026][ T2636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 82.870858][ T9] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 83.031913][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 83.041068][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.049793][ T9] usb 3-1: config 0 descriptor?? [ 83.227624][ T2654] netlink: 92 bytes leftover after parsing attributes in process `syz.0.698'. [ 83.251387][ T2656] tmpfs: Unknown parameter 'noinode32' [ 83.257738][ T2610] netlink: 'syz.2.692': attribute type 6 has an invalid length. [ 83.267517][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 84.004800][ T2702] syzkaller1: entered promiscuous mode [ 84.010566][ T2702] syzkaller1: entered allmulticast mode [ 84.477906][ T2610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.488105][ T2610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.563564][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.577334][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 84.588412][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 84.597002][ T9] usb 3-1: USB disconnect, device number 23 [ 84.650812][ T392] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 84.801982][ T392] usb 2-1: No LPM exit latency info found, disabling LPM. [ 84.810654][ T392] usb 2-1: config 64 has an invalid interface number: 174 but max is 2 [ 84.819002][ T392] usb 2-1: config 64 has an invalid interface number: 252 but max is 2 [ 84.827359][ T392] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 84.836453][ T392] usb 2-1: config 64 has an invalid interface number: 140 but max is 2 [ 84.844769][ T392] usb 2-1: config 64 has no interface number 0 [ 84.850974][ T392] usb 2-1: config 64 has no interface number 1 [ 84.857178][ T392] usb 2-1: config 64 has no interface number 2 [ 84.863460][ T392] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 84.874638][ T392] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 84.885748][ T392] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 84.896042][ T392] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 84.907239][ T392] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 84.918141][ T392] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 84.929159][ T392] usb 2-1: config 64 interface 174 has no altsetting 0 [ 84.936071][ T392] usb 2-1: config 64 interface 252 has no altsetting 0 [ 84.943075][ T392] usb 2-1: config 64 interface 140 has no altsetting 0 [ 84.952111][ T392] usb 2-1: string descriptor 0 read error: -22 [ 84.958338][ T392] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 84.967427][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.979395][ T392] usb-storage 2-1:64.174: USB Mass Storage device detected [ 85.022583][ T392] usb-storage 2-1:64.252: USB Mass Storage device detected [ 85.102315][ T392] usb-storage 2-1:64.140: USB Mass Storage device detected [ 85.117730][ T2717] __vm_enough_memory: pid: 2717, comm: syz.2.715, bytes: 18014402804453376 not enough memory for the allocation [ 85.179775][ T392] usb 2-1: USB disconnect, device number 16 [ 85.243137][ T2722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.243375][ T2722] rust_binder: Error in use_page_slow: ESRCH [ 85.249864][ T2722] rust_binder: use_range failure ESRCH [ 85.256065][ T2722] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 85.261945][ T2722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.269971][ T2722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:492 [ 85.291788][ T36] audit: type=1400 audit(1760210848.486:591): avc: denied { write } for pid=2724 comm="syz.2.717" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 85.471219][ T36] audit: type=1400 audit(1760210848.666:592): avc: denied { write } for pid=2738 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 85.525029][ T2740] input: syz1 as /devices/virtual/input/input22 [ 85.647759][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.657037][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.734958][ T2749] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=2749 comm=syz.1.723 [ 85.748322][ T36] audit: type=1400 audit(1760210848.936:593): avc: denied { execute } for pid=2748 comm="syz.1.723" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.185397][ T2756] futex_wake_op: syz.0.726 tries to shift op by -1; fix this program [ 86.222718][ T2763] binder: Unknown parameter 'appraise_type' [ 86.230806][ T392] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 86.248339][ T2765] binder: Unknown parameter 'ۺ' [ 86.312988][ T2774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.328569][ T2774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.382144][ T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.392376][ T392] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 86.403261][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 86.417179][ T392] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 86.426555][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.435632][ T392] usb 2-1: config 0 descriptor?? [ 86.581656][ T1073] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 86.732123][ T1073] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.742406][ T1073] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.752473][ T1073] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.762112][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.770241][ T1073] usb 3-1: SerialNumber: syz [ 86.864337][ T2781] rust_binder: Error while translating object. [ 86.864377][ T2781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 86.871071][ T2781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:655 [ 86.979224][ T2776] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 86.997240][ T2776] rust_binder: Write failure EINVAL in pid:512 [ 87.004044][ T392] usb 2-1: USB disconnect, device number 17 [ 87.007250][ T2776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.018438][ T2776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 87.025294][ T2776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:512 [ 87.041804][ T1073] usb 3-1: 0:2 : does not exist [ 87.059181][ T1073] usb 3-1: USB disconnect, device number 24 [ 87.077511][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.410219][ T36] audit: type=1326 audit(1760210850.596:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.1.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f677c18eec9 code=0x0 [ 87.448658][ T36] audit: type=1400 audit(1760210850.636:595): avc: denied { mounton } for pid=2797 comm="syz.0.739" path="/212/file0" dev="tmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.456623][ T2799] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 87.554055][ T36] audit: type=1400 audit(1760210850.746:596): avc: denied { write } for pid=2801 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.563139][ T2800] netlink: 'syz.0.739': attribute type 3 has an invalid length. [ 87.596488][ T2805] can0: slcan on ptm1. [ 87.625570][ T2805] can0 (unregistered): slcan off ptm1. [ 87.655454][ T2807] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.777176][ T2812] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.791613][ T2816] 9pnet_fd: Insufficient options for proto=fd [ 87.834190][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.843341][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.892610][ T2820] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 88.190765][ T9] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 88.341939][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 88.350161][ T9] usb 3-1: config 64 has an invalid interface number: 174 but max is 2 [ 88.365827][ T9] usb 3-1: config 64 has an invalid interface number: 248 but max is 2 [ 88.388931][ T9] usb 3-1: config 64 has an invalid interface descriptor of length 2, skipping [ 88.403957][ T9] usb 3-1: config 64 has an invalid interface number: 140 but max is 2 [ 88.412434][ T9] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 88.434341][ T2841] tipc: Started in network mode [ 88.439399][ T9] usb 3-1: config 64 has no interface number 0 [ 88.439432][ T2841] tipc: Node identity , cluster identity 4711 [ 88.445715][ T9] usb 3-1: config 64 has no interface number 1 [ 88.452155][ T2841] tipc: Failed to obtain node identity [ 88.458322][ T9] usb 3-1: config 64 has no interface number 2 [ 88.463799][ T2841] tipc: Enabling of bearer rejected, failed to enable media [ 88.470195][ T9] usb 3-1: config 64 interface 248 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 88.482753][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.498428][ T9] usb 3-1: config 64 interface 248 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 88.500281][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.509898][ T9] usb 3-1: config 64 interface 248 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 88.522385][ T2841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.528373][ T9] usb 3-1: config 64 interface 248 altsetting 252 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.548494][ T9] usb 3-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 88.559638][ T9] usb 3-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 88.570740][ T9] usb 3-1: config 64 interface 174 has no altsetting 0 [ 88.577608][ T9] usb 3-1: config 64 interface 248 has no altsetting 0 [ 88.584695][ T9] usb 3-1: config 64 interface 140 has no altsetting 0 [ 88.593819][ T9] usb 3-1: string descriptor 0 read error: -22 [ 88.600143][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 88.609344][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.619567][ T9] usb-storage 3-1:64.174: USB Mass Storage device detected [ 88.643280][ T9] usb-storage 3-1:64.248: USB Mass Storage device detected [ 88.661529][ T1073] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 88.672972][ T9] usb-storage 3-1:64.140: USB Mass Storage device detected [ 88.811983][ T1073] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 88.820266][ T1073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.830553][ T1073] usb 2-1: config 0 has no interface number 0 [ 88.831048][ T9] usb 3-1: USB disconnect, device number 25 [ 88.840580][ T1073] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 88.851969][ T1073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.860072][ T1073] usb 2-1: Product: syz [ 88.864317][ T1073] usb 2-1: Manufacturer: syz [ 88.868940][ T1073] usb 2-1: SerialNumber: syz [ 88.874367][ T1073] usb 2-1: config 0 descriptor?? [ 89.082345][ T1073] usb 2-1: USB disconnect, device number 18 [ 89.093163][ T2849] rust_binder: Error while translating object. [ 89.093217][ T2849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 89.099769][ T2849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:684 [ 89.218403][ T36] audit: type=1400 audit(1760210852.406:597): avc: denied { setattr } for pid=2852 comm="syz.0.756" name="L2CAP" dev="sockfs" ino=21089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.367596][ T2857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.368307][ T2857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.374973][ T2857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 89.452104][ T2863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.461964][ T2863] rust_binder: Error in use_page_slow: ESRCH [ 89.468593][ T2863] rust_binder: use_range failure ESRCH [ 89.474812][ T2863] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 89.480434][ T2863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.488988][ T2863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:540 [ 89.560731][ T2867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.570139][ T2867] rust_binder: Error in use_page_slow: ESRCH [ 89.576838][ T2867] rust_binder: use_range failure ESRCH [ 89.582932][ T2867] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 89.588438][ T2867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.596325][ T2867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:544 [ 89.620821][ T2869] 9pnet: Could not find request transport: usix [ 89.840916][ T2882] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 89.848298][ T2882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 89.848626][ T2882] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 89.870758][ T1073] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 89.874126][ T2884] netlink: 68 bytes leftover after parsing attributes in process `syz.1.767'. [ 89.910134][ T36] audit: type=1400 audit(1760210853.096:598): avc: denied { read } for pid=2885 comm="syz.1.768" name="/" dev="configfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.918389][ T2887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 89.932116][ T2886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 89.932146][ T36] audit: type=1400 audit(1760210853.096:599): avc: denied { open } for pid=2885 comm="syz.1.768" path="/" dev="configfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.942216][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:370 [ 89.956111][ T2887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:370 [ 89.998895][ T2889] rust_binder: Write failure EINVAL in pid:373 [ 90.004207][ T2890] rust_binder: Write failure EINVAL in pid:373 [ 90.040887][ T1073] usb 3-1: Using ep0 maxpacket: 16 [ 90.055032][ T1073] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 90.068738][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.077061][ T1073] usb 3-1: Product: syz [ 90.081681][ T1073] usb 3-1: Manufacturer: syz [ 90.086418][ T1073] usb 3-1: SerialNumber: syz [ 90.088601][ T2893] rust_binder: Error while translating object. [ 90.091761][ T2893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.099470][ T2893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 90.109127][ T1073] usb 3-1: config 0 descriptor?? [ 90.129770][ T1073] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 90.148669][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.219070][ T36] audit: type=1400 audit(1760210853.406:600): avc: denied { name_bind } for pid=2911 comm="syz.0.775" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 90.240003][ T2912] binder: Bad value for 'stats' [ 90.298423][ T2919] netlink: 7 bytes leftover after parsing attributes in process `syz.0.778'. [ 90.328226][ T2869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 90.451095][ T36] audit: type=1400 audit(1760210853.636:601): avc: denied { ioctl } for pid=2937 comm="syz.1.784" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.586359][ T2945] SELinux: policydb string does not match my string SE Linux [ 90.594091][ T2945] SELinux: failed to load policy [ 91.116579][ T36] audit: type=1400 audit(1760210854.306:602): avc: denied { listen } for pid=2952 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.644019][ T36] audit: type=1400 audit(1760210854.836:603): avc: denied { mounton } for pid=2975 comm="syz.1.798" path="/127/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.668777][ T2978] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 91.679250][ T2978] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 91.741590][ T2986] /dev/rnullb0: Can't lookup blockdev [ 91.889891][ T329] syzkaller0: tun_net_xmit 76 [ 91.894914][ T329] syzkaller0: tun_net_xmit 48 [ 91.900576][ T2997] syzkaller0: create flow: hash 3132772743 index 0 [ 91.940834][ T392] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 91.961787][ T2997] syzkaller0 (unregistered): delete flow: hash 3132772743 index 0 [ 92.014487][ T3006] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 92.024111][ T3006] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 92.090772][ T392] usb 2-1: Using ep0 maxpacket: 8 [ 92.097030][ T392] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.105756][ T392] usb 2-1: config 179 has no interface number 0 [ 92.112275][ T392] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 92.123713][ T392] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 92.135964][ T392] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.146314][ T392] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.159828][ T392] usb 2-1: config 179 interface 65 has no altsetting 0 [ 92.166844][ T392] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 92.176129][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.390130][ T60] usb 2-1: USB disconnect, device number 19 [ 92.629757][ T60] usb 3-1: USB disconnect, device number 26 [ 92.858292][ T36] audit: type=1400 audit(1760210856.046:604): avc: granted { setsecparam } for pid=3019 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 92.891160][ T36] audit: type=1400 audit(1760210856.066:605): avc: granted { setsecparam } for pid=3019 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 92.941432][ T36] audit: type=1400 audit(1760210856.136:606): avc: denied { connect } for pid=3025 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.947362][ T3028] cgroup: Name too long [ 92.980571][ T36] audit: type=1400 audit(1760210856.166:607): avc: denied { execute } for pid=3026 comm="syz.1.818" path="/129/cpuacct.usage_percpu" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.017244][ T3032] syz.0.817 (3032): attempted to duplicate a private mapping with mremap. This is not supported. [ 93.045891][ T3039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.058598][ T3041] netlink: 312 bytes leftover after parsing attributes in process `syz.0.821'. [ 93.540048][ T3045] fuse: Bad value for 'fd' [ 93.641840][ T3047] 9pnet_fd: Insufficient options for proto=fd [ 93.720298][ T36] audit: type=1400 audit(1760210856.906:608): avc: denied { lock } for pid=3046 comm="syz.2.824" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.911883][ T3054] rust_binder: 3052 RLIMIT_NICE not set [ 94.233140][ T2370] bridge_slave_1: left allmulticast mode [ 94.254801][ T2370] bridge_slave_1: left promiscuous mode [ 94.260500][ T2370] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.274269][ T2370] bridge_slave_0: left allmulticast mode [ 94.290258][ T2370] bridge_slave_0: left promiscuous mode [ 94.296345][ T2370] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.319786][ T3064] syz.3.830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.335183][ T3064] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 94.433613][ T2370] veth1_macvtap: left promiscuous mode [ 94.439316][ T2370] veth0_vlan: left promiscuous mode [ 94.558525][ T3077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.558672][ T3077] rust_binder: Error in use_page_slow: ESRCH [ 94.569288][ T3077] rust_binder: use_range failure ESRCH [ 94.583688][ T3077] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 94.591682][ T3077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.599897][ T3077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:556 [ 94.618948][ T3081] __vm_enough_memory: pid: 3081, comm: syz.1.838, bytes: 18014402804453376 not enough memory for the allocation [ 94.663131][ T3083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 94.664101][ T3073] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.709535][ T3073] rust_binder: Read failure Err(EFAULT) in pid:621 [ 94.721258][ T3087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.728733][ T3087] rust_binder: Error in use_page_slow: ESRCH [ 94.730844][ T3085] Unsupported ieee802154 address type: 0 [ 94.740762][ T3087] rust_binder: use_range failure ESRCH [ 94.747424][ T3087] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 94.758952][ T36] audit: type=1400 audit(1760210857.946:609): avc: denied { execute_no_trans } for pid=3084 comm="syz.1.840" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.759780][ T3085] input: syz1 as /devices/virtual/input/input23 [ 94.770789][ T3087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.828706][ T3087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:560 [ 94.852624][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.879972][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.905803][ T3088] bridge_slave_0: entered allmulticast mode [ 94.928785][ T3088] bridge_slave_0: entered promiscuous mode [ 94.950035][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.952076][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.965906][ T3094] rust_binder: Error in use_page_slow: ESRCH [ 94.965937][ T3094] rust_binder: use_range failure ESRCH [ 94.975568][ T3094] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 94.981459][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.997198][ T3094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.997254][ T3094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:562 [ 95.006898][ T3088] bridge_slave_1: entered allmulticast mode [ 95.027985][ T3088] bridge_slave_1: entered promiscuous mode [ 95.133585][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.140755][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.148354][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.155462][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.182959][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.191280][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.215004][ T2370] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.222542][ T2370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.247775][ T2370] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.254906][ T2370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.278584][ T3114] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 95.280729][ T3088] veth0_vlan: entered promiscuous mode [ 95.287215][ T3114] rust_binder: Write failure EINVAL in pid:434 [ 95.292921][ T1073] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 95.304990][ T3088] veth1_macvtap: entered promiscuous mode [ 95.323523][ T3116] fuse: Bad value for 'fd' [ 95.328798][ T3116] /dev/rnullb0: Can't lookup blockdev [ 95.337238][ T3116] fuse: Bad value for 'fd' [ 95.338471][ T36] audit: type=1400 audit(1760210858.526:610): avc: denied { map } for pid=3117 comm="syz.1.848" path="socket:[23583]" dev="sockfs" ino=23583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.370605][ T3118] netlink: 'syz.1.848': attribute type 27 has an invalid length. [ 95.482091][ T1073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 95.492487][ T1073] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 95.504073][ T1073] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 95.514309][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.522891][ T1073] usb 3-1: Product: syz [ 95.527340][ T1073] usb 3-1: Manufacturer: syz [ 95.534086][ T3140] /dev/rnullb0: Can't lookup blockdev [ 95.540857][ T1073] usb 3-1: SerialNumber: syz [ 95.540975][ T36] audit: type=1400 audit(1760210858.726:611): avc: denied { mounton } for pid=3139 comm="syz.3.854" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.572889][ T36] audit: type=1400 audit(1760210858.766:612): avc: denied { ioctl } for pid=3125 comm="syz.4.835" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.573512][ T1073] usb 3-1: config 0 descriptor?? [ 95.612555][ T3101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.619864][ T3101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.627780][ T36] audit: type=1400 audit(1760210858.806:613): avc: denied { read } for pid=3144 comm="syz.3.855" name="binder1" dev="binder" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.651084][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.660325][ T36] audit: type=1400 audit(1760210858.806:614): avc: denied { open } for pid=3144 comm="syz.3.855" path="/dev/binderfs/binder1" dev="binder" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.684990][ T36] audit: type=1400 audit(1760210858.806:615): avc: denied { mounton } for pid=3144 comm="syz.3.855" path="/219/bus" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.708066][ T36] audit: type=1400 audit(1760210858.806:616): avc: denied { unlink } for pid=3144 comm="syz.3.855" name="#f" dev="tmpfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.732513][ T36] audit: type=1400 audit(1760210858.806:617): avc: denied { mount } for pid=3144 comm="syz.3.855" name="/" dev="overlay" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.755965][ T36] audit: type=1400 audit(1760210858.816:618): avc: denied { read } for pid=3144 comm="syz.3.855" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.777990][ T36] audit: type=1400 audit(1760210858.816:619): avc: denied { open } for pid=3144 comm="syz.3.855" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.802033][ T36] audit: type=1400 audit(1760210858.816:620): avc: denied { create } for pid=3144 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.824842][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.834388][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.842883][ T9] usb 5-1: Product: syz [ 95.847199][ T9] usb 5-1: Manufacturer: syz [ 95.852152][ T9] usb 5-1: SerialNumber: syz [ 96.468661][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:be:e9:dd:47:ef [ 96.482007][ T3126] rust_binder: Write failure EFAULT in pid:2 [ 96.497603][ T9] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 96.536848][ T9] usb 5-1: USB disconnect, device number 2 [ 96.613013][ T3101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.623817][ T3157] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 96.623848][ T3157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 96.640043][ T3101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.665372][ T3157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:639 [ 96.730119][ T3165] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 96.750811][ T3165] rust_binder: Error while translating object. [ 96.761966][ T3165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.768324][ T3165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 96.794390][ T3176] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 96.891802][ T1073] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 97.020800][ T392] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 97.172307][ T392] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.184349][ T392] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.195369][ T392] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.206780][ T392] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 97.215898][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.225265][ T3171] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.231309][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.377935][ T3201] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 97.377962][ T3201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 97.386488][ T3201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:653 [ 97.397333][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 97.416410][ T9] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 97.424835][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 97.433968][ T9] usb 5-1: config 1 has no interface number 0 [ 97.440223][ T9] usb 5-1: config 1 has no interface number 1 [ 97.446937][ T9] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.460208][ T9] usb 5-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.470163][ T9] usb 5-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 97.483447][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 97.490605][ T9] usb 5-1: config 1 interface 4 has no altsetting 0 [ 97.496600][ T3209] rust_binder: Error while translating object. [ 97.497256][ T3209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.499110][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 97.503600][ T3209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 97.513406][ T9] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 97.540100][ T9] usb 5-1: Product: syz [ 97.544832][ T9] usb 5-1: Manufacturer: syz [ 97.550184][ T9] usb 5-1: SerialNumber: syz [ 97.741382][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.741415][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.747952][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.747948][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.754900][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.767216][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.773840][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.773908][ T9] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 97.780354][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.797812][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.805223][ T3152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.810543][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.814888][ T3152] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 97.819612][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.825610][ T3152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 97.833309][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.839485][ T3152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:564 [ 97.859173][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.868667][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.876596][ T392] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 97.890297][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.890345][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.897769][ T392] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input24 [ 97.913569][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.913600][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.919821][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.926347][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.935694][ T392] usb 2-1: USB disconnect, device number 20 [ 97.942271][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 97.956982][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.957010][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.963746][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.970833][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.979175][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.988710][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 97.995526][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.001939][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.008427][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.015119][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.021475][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.028011][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.028013][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.028038][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.047365][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.054128][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.054467][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.066918][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.073645][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.073644][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.073673][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.081384][ T3223] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 98.086572][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.107297][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.113548][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.120035][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.126741][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.127263][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.139649][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.146146][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.146141][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.146168][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.165538][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.172104][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.178332][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.184686][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.191002][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.197191][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.203450][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.209649][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.215929][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.222194][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.228402][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.234615][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.240837][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.247021][ T3220] rust_binder: Write failure EINVAL in pid:671 [ 98.265064][ T3226] rust_binder: got new transaction with bad transaction stack [ 98.271334][ T3226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 98.305245][ T3232] vcan0: entered allmulticast mode [ 98.337880][ T1073] usb 5-1: USB disconnect, device number 3 [ 98.386118][ T3246] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12315 sclass=netlink_xfrm_socket pid=3246 comm=syz.4.879 [ 98.401599][ T3246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.401740][ T3246] rust_binder: Error while translating object. [ 98.408241][ T3246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.415446][ T3246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 98.478669][ T3257] rust_binder: 16: no such ref 0 [ 98.493581][ T3257] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 98.501339][ T3257] rust_binder: Write failure EINVAL in pid:16 [ 98.517711][ T3259] netlink: 120 bytes leftover after parsing attributes in process `syz.4.884'. [ 98.533103][ T3259] netlink: 96 bytes leftover after parsing attributes in process `syz.4.884'. [ 98.807057][ T3269] rust_binder: 28: no such ref 1 [ 98.812249][ T3269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 98.835708][ T3271] rust_binder: Error while translating object. [ 98.845296][ T3271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 98.851602][ T3271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 98.890775][ T31] usb 3-1: USB disconnect, device number 27 [ 98.906181][ T3273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.906208][ T3274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.918244][ T3273] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 98.942171][ T3276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.972083][ T3276] rust_binder: Error in use_page_slow: ESRCH [ 98.978579][ T3276] rust_binder: use_range failure ESRCH [ 98.990581][ T3276] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 98.996332][ T3276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 99.006233][ T3276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:568 [ 99.043456][ T3289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.053008][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 99.134422][ T3299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.134466][ T3299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:705 [ 99.153393][ T3302] can0: slcan on ptm0. [ 99.189659][ T3305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:577 [ 99.222131][ T3302] can0 (unregistered): slcan off ptm0. [ 99.316404][ T3331] rust_binder: 714: no such ref 0 [ 99.322075][ T3335] binder: Bad value for 'stats' [ 99.338460][ T3331] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 99.358427][ T3331] rust_binder: 714: no such ref 2 [ 99.384892][ T3331] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 99.611934][ T1073] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 99.792060][ T1073] usb 5-1: No LPM exit latency info found, disabling LPM. [ 99.800316][ T1073] usb 5-1: config 64 has an invalid interface number: 174 but max is 2 [ 99.809099][ T1073] usb 5-1: config 64 has an invalid interface number: 252 but max is 2 [ 99.817599][ T1073] usb 5-1: config 64 has an invalid interface descriptor of length 2, skipping [ 99.827019][ T1073] usb 5-1: config 64 has an invalid interface number: 140 but max is 2 [ 99.837134][ T1073] usb 5-1: config 64 has no interface number 0 [ 99.843849][ T1073] usb 5-1: config 64 has no interface number 1 [ 99.850145][ T1073] usb 5-1: config 64 has no interface number 2 [ 99.856483][ T1073] usb 5-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 99.867702][ T1073] usb 5-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 99.879175][ T1073] usb 5-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 99.889484][ T1073] usb 5-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 99.900851][ T1073] usb 5-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 99.911836][ T1073] usb 5-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 99.922905][ T1073] usb 5-1: config 64 interface 174 has no altsetting 0 [ 99.930307][ T1073] usb 5-1: config 64 interface 252 has no altsetting 0 [ 99.937656][ T1073] usb 5-1: config 64 interface 140 has no altsetting 0 [ 99.947056][ T1073] usb 5-1: string descriptor 0 read error: -22 [ 99.953347][ T1073] usb 5-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 99.962455][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.972791][ T1073] usb-storage 5-1:64.174: USB Mass Storage device detected [ 100.022480][ T1073] usb-storage 5-1:64.252: USB Mass Storage device detected [ 100.063117][ T1073] usb-storage 5-1:64.140: USB Mass Storage device detected [ 100.139751][ T2370] syzkaller0: tun_net_xmit 76 [ 100.146238][ T3390] syzkaller0: create flow: hash 3132772743 index 0 [ 100.146338][ T2370] syzkaller0: tun_net_xmit 48 [ 100.174272][ T1073] usb 5-1: USB disconnect, device number 4 [ 100.212204][ T3390] syzkaller0 (unregistered): delete flow: hash 3132772743 index 0 [ 100.234801][ T3393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.234955][ T3393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:593 [ 100.309260][ T3397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.319078][ T3397] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 100.325645][ T3397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.333830][ T3397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:595 [ 100.446322][ T3402] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 100.463033][ T3402] rust_binder: Write failure EINVAL in pid:601 [ 100.722925][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 100.722950][ T36] audit: type=1400 audit(1760210863.906:737): avc: denied { mount } for pid=3411 comm="syz.3.927" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.782366][ T36] audit: type=1400 audit(1760210863.976:738): avc: denied { setopt } for pid=3419 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.815153][ T36] audit: type=1400 audit(1760210863.976:739): avc: denied { name_bind } for pid=3419 comm="syz.4.929" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 100.943003][ T36] audit: type=1400 audit(1760210864.136:740): avc: denied { create } for pid=3426 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 100.996874][ T3432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 101.013805][ T36] audit: type=1400 audit(1760210864.206:741): avc: denied { unmount } for pid=1196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 101.046393][ T3434] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 101.058341][ T36] audit: type=1400 audit(1760210864.206:742): avc: denied { ioctl } for pid=3433 comm="syz.1.933" path="socket:[24975]" dev="sockfs" ino=24975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.084809][ T3438] No source specified [ 101.095596][ T36] audit: type=1400 audit(1760210864.246:743): avc: denied { read } for pid=3431 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.144868][ T36] audit: type=1400 audit(1760210864.336:744): avc: denied { setopt } for pid=3440 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.184040][ T3444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.184372][ T3444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:618 [ 101.274257][ T36] audit: type=1400 audit(1760210864.466:745): avc: denied { getopt } for pid=3450 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.325996][ T3453] netlink: 68 bytes leftover after parsing attributes in process `syz.2.940'. [ 101.335951][ T36] audit: type=1400 audit(1760210864.526:746): avc: denied { create } for pid=3450 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.569294][ T3457] netlink: 168 bytes leftover after parsing attributes in process `syz.1.942'. [ 101.590745][ T1073] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 101.741548][ T2370] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.750825][ T1073] usb 3-1: Using ep0 maxpacket: 8 [ 101.758332][ T1073] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.767815][ T1073] usb 3-1: config 179 has no interface number 0 [ 101.782133][ T1073] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 101.793836][ T1073] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 101.818952][ T1073] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.829706][ T1073] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.849398][ T1073] usb 3-1: config 179 interface 65 has no altsetting 0 [ 101.860942][ T1073] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 101.870339][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.961029][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.050776][ T392] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.210743][ T392] usb 5-1: Using ep0 maxpacket: 32 [ 102.217361][ T392] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.225868][ T392] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.234565][ T392] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.243625][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.253550][ T392] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.263546][ T392] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.276601][ T392] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.285735][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.294847][ T392] usb 5-1: config 0 descriptor?? [ 102.754579][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.763233][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.772031][ T3483] ip6tnl0: mtu less than device minimum [ 103.780770][ T3475] Bluetooth: hci0: command 0x1003 tx timeout [ 103.780992][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.807103][ T3485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.927032][ T3494] fuse: Bad value for 'fd' [ 104.282990][ T516] usb 3-1: USB disconnect, device number 28 [ 104.563694][ T3531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.571007][ T3531] IPv6: NLM_F_CREATE should be set when creating new route [ 104.578388][ T3531] IPv6: NLM_F_CREATE should be set when creating new route [ 104.586598][ T3532] fuse: Unknown parameter 'dont_measure' [ 104.592441][ T3531] fuse: Unknown parameter 'dont_measure' [ 104.599097][ T3531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.701237][ T3542] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 104.701268][ T3542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 104.709290][ T3542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:536 [ 104.809543][ T392] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.831317][ T392] usb 5-1: USB disconnect, device number 5 [ 104.838278][ T392] usblp0: removed [ 121.813971][ T3547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.815288][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 121.815308][ T36] audit: type=1400 audit(1760210885.006:768): avc: denied { ioctl } for pid=3543 comm="syz.4.969" path="socket:[25449]" dev="sockfs" ino=25449 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.816738][ T3548] fuse: Bad value for 'fd' [ 121.831879][ T36] audit: type=1400 audit(1760210885.016:769): avc: denied { connect } for pid=3543 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.856369][ T3550] netlink: 'syz.1.970': attribute type 27 has an invalid length. [ 121.892288][ T36] audit: type=1400 audit(1760210885.016:770): avc: denied { bind } for pid=3543 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.933239][ T3564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.933430][ T3564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.940081][ T36] audit: type=1400 audit(1760210885.016:771): avc: denied { write } for pid=3543 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.966616][ T36] audit: type=1400 audit(1760210885.046:772): avc: denied { ioctl } for pid=3544 comm="syz.1.970" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.991437][ T36] audit: type=1400 audit(1760210885.116:773): avc: denied { wake_alarm } for pid=3560 comm="syz.2.975" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.014866][ T3567] rust_binder: Error in use_page_slow: ESRCH [ 122.014895][ T3567] rust_binder: use_range failure ESRCH [ 122.020989][ T3567] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 122.026520][ T3567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.036588][ T3567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:761 [ 122.141077][ T36] audit: type=1400 audit(1760210885.336:774): avc: denied { setopt } for pid=3570 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.156403][ T3584] 9pnet_fd: p9_fd_create_unix (3584): problem connecting socket: ./file0: -111 [ 122.180769][ T392] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 122.200760][ T36] audit: type=1400 audit(1760210885.366:775): avc: denied { ioctl } for pid=3570 comm="syz.2.979" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25483 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.227677][ T36] audit: type=1400 audit(1760210885.376:776): avc: denied { append } for pid=3583 comm="syz.1.984" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.351913][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.354239][ T36] audit: type=1400 audit(1760210885.546:777): avc: denied { getopt } for pid=3591 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.363518][ T392] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 122.397345][ T392] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 122.406663][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.415789][ T392] usb 5-1: config 0 descriptor?? [ 122.426401][ T3557] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.435144][ T392] usbhid 5-1:0.0: can't add hid device: -22 [ 122.441351][ T392] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 122.466344][ T3605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3605 comm=syz.1.990 [ 122.478880][ T3605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3605 comm=syz.1.990 [ 122.490807][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 122.543458][ T3606] rust_binder: 3605 RLIMIT_NICE not set [ 122.640839][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 122.645742][ T3557] fuseblk: Unknown parameter 'u00000000000000000000006' [ 122.647786][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.652306][ T3557] /dev/loop0: Can't lookup blockdev [ 122.659315][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.678059][ T1073] usb 5-1: USB disconnect, device number 6 [ 122.685340][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.713154][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.723589][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.733300][ T10] usb 3-1: config 0 descriptor?? [ 122.740735][ T10] usb 3-1: can't set config #0, error -71 [ 122.747671][ T10] usb 3-1: USB disconnect, device number 29 [ 123.299521][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 123.491154][ T3687] netlink: 'syz.2.1015': attribute type 16 has an invalid length. [ 123.502802][ T3687] netlink: 18298 bytes leftover after parsing attributes in process `syz.2.1015'. [ 123.665562][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 123.681588][ T3704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3704 comm=syz.3.1019 [ 124.390975][ T3759] netlink: 'syz.2.1042': attribute type 11 has an invalid length. [ 124.399373][ T3759] netlink: 'syz.2.1042': attribute type 2 has an invalid length. [ 124.783245][ T3781] cgroup: fork rejected by pids controller in /syz4 [ 125.017180][ T3834] netlink: 'syz.3.1054': attribute type 12 has an invalid length. [ 125.314518][ T3875] can0: slcan on ptm0. [ 125.386619][ T3874] can0 (unregistered): slcan off ptm0. [ 126.079905][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 126.319671][ T3935] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 126.327864][ T3935] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1091'. [ 126.820722][ T36] kauditd_printk_skb: 10071 callbacks suppressed [ 126.820741][ T36] audit: type=1400 audit(1760210890.006:10385): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 126.828997][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.855594][ T4007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.858524][ T36] audit: type=1400 audit(1760210890.006:10386): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 126.864897][ T4007] audit: audit_lost=156 audit_rate_limit=0 audit_backlog_limit=64 [ 126.892458][ T149] audit: audit_lost=157 audit_rate_limit=0 audit_backlog_limit=64 [ 126.900400][ T149] audit: backlog limit exceeded [ 126.905547][ T4014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.905644][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.919372][ T149] audit: audit_lost=158 audit_rate_limit=0 audit_backlog_limit=64 [ 127.100099][ T4036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4036 comm=syz.4.1129 [ 128.963605][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4137 comm=syz.4.1171 [ 129.047886][ T4143] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 129.063866][ T4143] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1174'. [ 129.199527][ T2365] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.383752][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 130.964277][ T4274] netlink: 'syz.1.1214': attribute type 27 has an invalid length. [ 131.067949][ T4274] veth0_vlan: left promiscuous mode [ 131.081190][ T4274] veth0_vlan: entered promiscuous mode [ 131.088003][ T4274] veth1_macvtap: left promiscuous mode [ 131.108704][ T4274] veth1_macvtap: entered promiscuous mode [ 131.131516][ T2365] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.138769][ T2365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.167029][ T2365] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.174285][ T2365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.220727][ T3474] Bluetooth: hci0: command 0x1003 tx timeout [ 131.226848][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.380901][ T3475] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 131.651372][ T4322] netlink: 'syz.1.1233': attribute type 16 has an invalid length. [ 131.661652][ T4322] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.1233'. [ 131.830681][ T36] kauditd_printk_skb: 31559 callbacks suppressed [ 131.830702][ T36] audit: type=1400 audit(1760210895.016:40019): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.839832][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.858762][ T36] audit: type=1400 audit(1760210895.026:40020): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.866489][ T149] audit: audit_lost=801 audit_rate_limit=0 audit_backlog_limit=64 [ 131.888973][ T36] audit: type=1400 audit(1760210895.026:40021): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.910652][ T149] audit: backlog limit exceeded [ 131.917838][ T36] audit: type=1400 audit(1760210895.026:40022): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.921296][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.942239][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.949215][ T149] audit: audit_lost=802 audit_rate_limit=0 audit_backlog_limit=64 [ 132.275421][ T4363] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1247'. [ 133.731889][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 133.763918][ T4422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4422 comm=syz.2.1267 [ 135.586804][ T4500] netlink: 'syz.3.1293': attribute type 4 has an invalid length. [ 135.595031][ T4500] netlink: 3649 bytes leftover after parsing attributes in process `syz.3.1293'. [ 136.108433][ T4521] netlink: 'syz.4.1302': attribute type 11 has an invalid length. [ 136.116556][ T4521] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 136.841050][ T36] kauditd_printk_skb: 12804 callbacks suppressed [ 136.841071][ T36] audit: type=1400 audit(1760210900.036:52560): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.875566][ T4574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.876282][ T4571] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.882363][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.900920][ T4570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.905791][ T4571] audit: audit_lost=892 audit_rate_limit=0 audit_backlog_limit=64 [ 136.907695][ T149] audit: audit_lost=893 audit_rate_limit=0 audit_backlog_limit=64 [ 136.917074][ T4576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.926470][ T4570] audit: audit_lost=894 audit_rate_limit=0 audit_backlog_limit=64 [ 136.931032][ T4575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.107700][ T4732] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 140.138578][ T4732] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 141.850925][ T36] kauditd_printk_skb: 6533 callbacks suppressed [ 141.850947][ T36] audit: type=1400 audit(1760210905.046:58969): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.892850][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.899528][ T149] audit: audit_lost=937 audit_rate_limit=0 audit_backlog_limit=64 [ 141.908963][ T149] audit: backlog limit exceeded [ 141.915274][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.926585][ T36] audit: type=1400 audit(1760210905.046:58970): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.932589][ T4781] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.950768][ T149] audit: audit_lost=938 audit_rate_limit=0 audit_backlog_limit=64 [ 141.956807][ T4781] audit: audit_lost=939 audit_rate_limit=0 audit_backlog_limit=64 [ 141.962335][ T149] audit: backlog limit exceeded [ 142.366196][ T4797] netlink: 'syz.2.1395': attribute type 4 has an invalid length. [ 142.380887][ T4797] netlink: 'syz.2.1395': attribute type 5 has an invalid length. [ 142.388685][ T4797] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1395'. [ 142.487918][ T4808] can0: slcan on ptm2. [ 142.555825][ T4811] can0 (unregistered): slcan off ptm2. [ 142.627030][ T4817] can0: slcan on ptm2. [ 143.503926][ T4814] can0 (unregistered): slcan off ptm2. [ 144.940479][ T4952] gre0: entered promiscuous mode [ 144.962214][ T4951] netlink: 'syz.3.1445': attribute type 13 has an invalid length. [ 145.726423][ T4998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1459'. [ 146.531645][ T5035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.533646][ T5035] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 146.550295][ T5035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 146.570511][ T5035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1142 [ 146.838637][ T5061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.854286][ T5061] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 146.861128][ T5061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 146.877685][ T5061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1148 [ 146.901228][ T36] kauditd_printk_skb: 6324 callbacks suppressed [ 146.901248][ T36] audit: type=1400 audit(1760210910.096:65290): avc: denied { ioctl } for pid=5045 comm="syz.1.1478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.960722][ T1073] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 146.977810][ T36] audit: type=1400 audit(1760210910.156:65291): avc: denied { read } for pid=5063 comm="syz.4.1483" dev="nsfs" ino=4026532340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.000199][ T36] audit: type=1400 audit(1760210910.156:65292): avc: denied { read open } for pid=5063 comm="syz.4.1483" path="net:[4026532340]" dev="nsfs" ino=4026532340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.024827][ T36] audit: type=1400 audit(1760210910.156:65293): avc: denied { create } for pid=5063 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.058742][ T36] audit: type=1400 audit(1760210910.156:65294): avc: denied { connect } for pid=5063 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.087178][ T36] audit: type=1400 audit(1760210910.166:65295): avc: denied { mounton } for pid=5063 comm="syz.4.1483" path="/150/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 147.110535][ T36] audit: type=1400 audit(1760210910.176:65296): avc: denied { ioctl } for pid=5045 comm="syz.1.1478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.130771][ T1073] usb 2-1: Using ep0 maxpacket: 8 [ 147.135710][ T36] audit: type=1400 audit(1760210910.176:65297): avc: denied { ioctl } for pid=5045 comm="syz.1.1478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.154134][ T1073] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.185223][ T36] audit: type=1400 audit(1760210910.176:65298): avc: denied { ioctl } for pid=5045 comm="syz.1.1478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.197719][ T1073] usb 2-1: config 1 interface 0 has no altsetting 0 [ 147.237569][ T1073] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40 [ 147.240739][ T36] audit: type=1400 audit(1760210910.246:65299): avc: denied { ioctl } for pid=5045 comm="syz.1.1478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.247765][ T1073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.305938][ T1073] usb 2-1: Product: syz [ 147.314732][ T1073] usb 2-1: Manufacturer: ࡃ [ 147.323761][ T1073] usb 2-1: SerialNumber: syz [ 147.549005][ T1073] usbhid 2-1:1.0: can't add hid device: -71 [ 147.565438][ T1073] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 147.596241][ T1073] usb 2-1: USB disconnect, device number 21 [ 147.792500][ T5097] /dev/nbd4: Can't lookup blockdev [ 147.976685][ T5102] netlink: 'syz.4.1494': attribute type 16 has an invalid length. [ 147.990782][ T5101] netlink: 'syz.4.1494': attribute type 16 has an invalid length. [ 148.008948][ T5101] netlink: 'syz.4.1494': attribute type 4 has an invalid length. [ 148.018060][ T5102] netlink: 'syz.4.1494': attribute type 4 has an invalid length. [ 148.030329][ T5101] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.1494'. [ 148.049969][ T5102] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.1494'. [ 148.326014][ T5121] netlink: 'syz.3.1500': attribute type 27 has an invalid length. [ 148.339268][ T5121] vcan0: left allmulticast mode [ 148.480764][ T392] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 148.630713][ T392] usb 2-1: Using ep0 maxpacket: 16 [ 148.652070][ T392] usb 2-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.662037][ T392] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.672575][ T392] usb 2-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.683839][ T392] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 0 [ 148.694577][ T392] usb 2-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.708647][ T392] usb 2-1: config 1 interface 0 has no altsetting 0 [ 148.718597][ T392] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.729631][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.738639][ T392] usb 2-1: SerialNumber: syz [ 148.860738][ T335] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 148.952231][ T5143] 9pnet: Could not find request transport: xen [ 148.957364][ T5116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1498'. [ 148.983258][ T392] cdc_acm 2-1:1.0: skipping garbage [ 149.001077][ T392] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 149.009264][ T392] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 149.020954][ T392] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 149.031292][ T335] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 149.041872][ T335] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 149.053426][ T392] usb 2-1: USB disconnect, device number 22 [ 149.072253][ T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.085379][ T335] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 149.111050][ T335] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 149.142808][ T335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.152897][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.162147][ T335] usb 3-1: Product: Ⱃ [ 149.166365][ T335] usb 3-1: Manufacturer: 襋嗸즨↾ㆷ彚燩ྡ丿뀜젹䌓嵹챿㭭ൽ [ 149.177306][ T335] usb 3-1: SerialNumber: 筈붻⬶爴຃ꎱ⃼㠮꾛≟풾㸤慗磞깇╿ꗴꗧ饸廙簈강ᛠ峿✉󒂴搙娢䳕꤬㈜Ỳ❨ᵦ㒈퀵ꦢ⼧ঋؾଁ쥈ⴇ貆৙㈊橉䆞次卾ꦶ㶃솅敓顡ᄐ툛趇远砢놇ⓒ쮁쮫⫻毶 [ 149.244947][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'. [ 149.334424][ T5154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 149.334462][ T5154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:518 [ 149.469653][ T5189] /dev/rnullb0: Can't open blockdev [ 149.820748][ T10] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 149.973756][ T10] usb 2-1: No LPM exit latency info found, disabling LPM. [ 149.983424][ T10] usb 2-1: config 64 has an invalid interface number: 174 but max is 2 [ 149.995555][ T10] usb 2-1: config 64 has an invalid interface number: 252 but max is 2 [ 150.004716][ T10] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 150.015782][ T10] usb 2-1: config 64 has an invalid interface number: 140 but max is 2 [ 150.025897][ T10] usb 2-1: config 64 has no interface number 0 [ 150.033306][ T10] usb 2-1: config 64 has no interface number 1 [ 150.042347][ T10] usb 2-1: config 64 has no interface number 2 [ 150.049089][ T10] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 150.061743][ T10] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 150.074052][ T10] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 150.085745][ T10] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 150.099706][ T10] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 150.111908][ T10] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 150.124083][ T10] usb 2-1: config 64 interface 174 has no altsetting 0 [ 150.131981][ T10] usb 2-1: config 64 interface 252 has no altsetting 0 [ 150.139168][ T10] usb 2-1: config 64 interface 140 has no altsetting 0 [ 150.156922][ T10] usb 2-1: string descriptor 0 read error: -22 [ 150.164872][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 150.175027][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.194103][ T10] usb-storage 2-1:64.174: USB Mass Storage device detected [ 150.199433][ T5202] SELinux: failed to load policy [ 150.216919][ T5202] rust_binder: 563: no such ref 3 [ 150.262587][ T10] usb-storage 2-1:64.252: USB Mass Storage device detected [ 150.325305][ T10] usb-storage 2-1:64.140: USB Mass Storage device detected [ 150.393892][ T31] usb 2-1: USB disconnect, device number 23 [ 151.396891][ T5226] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.404886][ T5226] rust_binder: Error in use_page_slow: ESRCH [ 151.411420][ T5226] rust_binder: use_range failure ESRCH [ 151.417616][ T5226] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 151.423925][ T5226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.432242][ T5226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1163 [ 151.542099][ T5228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.553371][ T5228] rust_binder: Error in use_page_slow: ESRCH [ 151.559866][ T5228] rust_binder: use_range failure ESRCH [ 151.566021][ T5228] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 151.571569][ T5228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.579614][ T5228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1165 [ 151.608564][ T335] usb 3-1: 0:2 : does not exist [ 151.645147][ T335] usb 3-1: USB disconnect, device number 30 [ 151.702527][ T5234] fuseblk: Unknown parameter '#SGHJ [ 151.702527][ T5234] W*k017EzsJ!r“% [ 151.702527][ T5234] ~R:CF-PQ?q#߹<5oZ [ 151.702527][ T5234] ۟Vn' [ 151.764986][ T5050] udevd[5050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.792950][ T5236] SELinux: failed to load policy [ 151.800434][ T5236] rust_binder: Error in use_page_slow: ESRCH [ 151.800462][ T5236] rust_binder: use_range failure ESRCH [ 151.812360][ T5236] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 151.824022][ T5236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.832344][ T5236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:927 [ 151.902301][ T5243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.911847][ T36] kauditd_printk_skb: 1279 callbacks suppressed [ 151.911865][ T36] audit: type=1400 audit(1760210915.106:66579): avc: denied { ioctl } for pid=5242 comm="syz.2.1528" path="/dev/binderfs/binder1" dev="binder" ino=213 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.950565][ T36] audit: type=1400 audit(1760210915.106:66580): avc: denied { call } for pid=5242 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.970608][ T36] audit: type=1400 audit(1760210915.146:66581): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.985561][ T5246] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 151.995951][ T36] audit: type=1400 audit(1760210915.146:66582): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.035481][ T36] audit: type=1400 audit(1760210915.146:66583): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.061384][ T5248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:932 [ 152.061733][ T36] audit: type=1400 audit(1760210915.156:66584): avc: denied { read } for pid=5245 comm="syz.3.1529" name="binder1" dev="binder" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.062145][ T5248] rust_binder: Write failure EINVAL in pid:932 [ 152.072528][ T36] audit: type=1400 audit(1760210915.156:66585): avc: denied { read open } for pid=5245 comm="syz.3.1529" path="/dev/binderfs/binder1" dev="binder" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.134179][ T36] audit: type=1400 audit(1760210915.156:66586): avc: denied { create } for pid=5245 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.181019][ T36] audit: type=1400 audit(1760210915.156:66587): avc: denied { write } for pid=5245 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.218045][ T36] audit: type=1400 audit(1760210915.156:66588): avc: denied { ioctl } for pid=5245 comm="syz.3.1529" path="/dev/binderfs/binder1" dev="binder" ino=219 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.382647][ T5274] /dev/rnullb0: Can't lookup blockdev [ 152.451767][ T5280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5280 comm=syz.2.1541 [ 152.468953][ T5280] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.468971][ T5280] rust_binder: Read failure Err(EFAULT) in pid:951 [ 152.506104][ T5282] rust_binder: Read failure Err(EAGAIN) in pid:953 [ 152.513948][ T5282] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 152.561243][ T5284] input: syz1 as /devices/virtual/input/input26 [ 152.971829][ T5288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.975607][ T5288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:957 [ 153.000754][ T335] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 153.050688][ T5295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1195 [ 153.104860][ T5303] fuse: Bad value for 'fd' [ 153.120627][ T5303] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 153.127638][ T5307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.164562][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 153.184226][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.197094][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.209277][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.219505][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.249689][ T335] usb 2-1: config 0 descriptor?? [ 153.259722][ T335] hub 2-1:0.0: USB hub found [ 153.471437][ T335] hub 2-1:0.0: 1 port detected [ 154.074777][ T5328] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 154.092332][ T335] hub 2-1:0.0: activate --> -90 [ 154.166043][ T5333] rust_binder: got new transaction with bad transaction stack [ 154.166121][ T5333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 154.449667][ T5348] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 154.519791][ T5350] /dev/rnullb0: Can't lookup blockdev [ 154.551965][ T1073] usb 2-1: USB disconnect, device number 24 [ 154.966251][ T5339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 154.966290][ T5339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1200 [ 155.434919][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.467551][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.487711][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.496678][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.505761][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.524883][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.590375][ T5382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:988 [ 155.675251][ T5388] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 155.734059][ T5391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.834779][ T5395] rust_binder: Write failure EFAULT in pid:619 [ 155.843394][ T5397] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 155.858628][ T5397] rust_binder: Write failure EINVAL in pid:993 [ 156.073305][ T5416] rust_binder: Error while translating object. [ 156.079689][ T5416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.089157][ T5416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:626 [ 156.225782][ T329] bridge_slave_1: left allmulticast mode [ 156.240727][ T329] bridge_slave_1: left promiscuous mode [ 156.246806][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.256234][ T329] bridge_slave_0: left allmulticast mode [ 156.262162][ T329] bridge_slave_0: left promiscuous mode [ 156.267875][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.444968][ T329] veth1_macvtap: left promiscuous mode [ 156.450706][ T329] veth0_vlan: left promiscuous mode [ 156.726990][ T5434] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 156.736527][ T5435] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 156.744956][ T5434] rust_binder: Write failure EINVAL in pid:1227 [ 156.745011][ T5435] rust_binder: Write failure EINVAL in pid:1227 [ 157.248160][ T36] kauditd_printk_skb: 747 callbacks suppressed [ 157.248184][ T36] audit: type=1400 audit(1760210920.436:67336): avc: denied { execmem } for pid=5439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.291380][ T36] audit: type=1400 audit(1760210920.486:67337): avc: denied { read write } for pid=5441 comm="syz.3.1591" name="binder0" dev="binder" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.315160][ T5443] syz.4.1590(5443): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 157.323005][ T5444] rust_binder: Error while translating object. [ 157.331805][ T5444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.338116][ T5444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630 [ 157.347673][ T36] audit: type=1400 audit(1760210920.496:67338): avc: denied { read } for pid=5440 comm="syz.4.1590" name="binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.362353][ T5445] rust_binder: Error while translating object. [ 157.380107][ T36] audit: type=1400 audit(1760210920.496:67339): avc: denied { read open } for pid=5440 comm="syz.4.1590" path="/dev/binderfs/binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.412044][ T36] audit: type=1400 audit(1760210920.506:67340): avc: denied { ioctl } for pid=5440 comm="syz.4.1590" path="/dev/binderfs/binder0" dev="binder" ino=215 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.412135][ T5445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.437872][ T36] audit: type=1400 audit(1760210920.506:67341): avc: denied { set_context_mgr } for pid=5440 comm="syz.4.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 157.468033][ T36] audit: type=1400 audit(1760210920.506:67342): avc: denied { map } for pid=5440 comm="syz.4.1590" path="/dev/binderfs/binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.470742][ T5445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630 [ 157.492264][ T36] audit: type=1400 audit(1760210920.506:67343): avc: denied { read } for pid=5440 comm="syz.4.1590" path="/dev/binderfs/binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.525979][ T36] audit: type=1400 audit(1760210920.506:67344): avc: denied { read } for pid=5440 comm="syz.4.1590" name="binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.569428][ T36] audit: type=1400 audit(1760210920.506:67345): avc: denied { read open } for pid=5440 comm="syz.4.1590" path="/dev/binderfs/binder0" dev="binder" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.658744][ T5450] fuse: Bad value for 'fd' [ 158.174083][ T5455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1593'. [ 158.187375][ T5455] rust_binder: Error while translating object. [ 158.187432][ T5455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.194756][ T5455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1236 [ 159.952221][ T5481] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.969589][ T5481] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 159.979599][ T5481] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.988419][ T5481] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 160.104264][ T5484] SELinux: policydb version 1609840920 does not match my version range 15-33 [ 160.113296][ T5484] SELinux: failed to load policy [ 160.951020][ T5496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5496 comm=syz.4.1603 [ 160.981073][ T5491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5491 comm=syz.4.1603 [ 161.008417][ T5498] rust_binder: 1014: no such ref 0 [ 161.115172][ T5503] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 161.115198][ T5503] rust_binder: Error while translating object. [ 161.126046][ T5503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.133149][ T5503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 162.257795][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 162.257817][ T36] audit: type=1400 audit(1760210925.446:67694): avc: denied { sys_module } for pid=5521 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.302466][ T36] audit: type=1400 audit(1760210925.446:67695): avc: denied { sys_module } for pid=5521 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.361299][ T36] audit: type=1400 audit(1760210925.556:67696): avc: denied { ioctl } for pid=5519 comm="syz.1.1614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.407851][ T36] audit: type=1400 audit(1760210925.556:67697): avc: denied { create } for pid=5522 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.414485][ T5523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:660 [ 162.437789][ T36] audit: type=1400 audit(1760210925.576:67698): avc: denied { bind } for pid=5522 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.477404][ T5524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.484032][ T36] audit: type=1400 audit(1760210925.576:67699): avc: denied { create } for pid=5522 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.506146][ T5524] audit: audit_lost=941 audit_rate_limit=0 audit_backlog_limit=64 [ 162.514914][ T36] audit: type=1400 audit(1760210925.576:67700): avc: denied { create } for pid=5522 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.534743][ T392] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 162.542662][ T36] audit: type=1400 audit(1760210925.576:67701): avc: denied { setopt } for pid=5522 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.713741][ T392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.722239][ T392] usb 2-1: not running at top speed; connect to a high speed hub [ 162.732936][ T392] usb 2-1: string descriptor 0 read error: -22 [ 162.739204][ T392] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.748661][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.982251][ T392] cdc_ncm 2-1:1.0: bind() failure [ 162.988260][ T392] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 162.995158][ T392] cdc_ncm 2-1:1.1: bind() failure [ 163.001632][ T392] usb 2-1: USB disconnect, device number 25 [ 163.412111][ T5530] rust_binder: Write failure EFAULT in pid:662 [ 163.790775][ T392] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 163.953228][ T392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.959890][ T392] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 163.969107][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.978828][ T392] usb 2-1: config 0 descriptor?? [ 164.393490][ T392] logitech-hidpp-device 0003:046D:C262.0007: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 164.595330][ T5538] devpts: called with bogus options [ 164.604107][ T31] usb 2-1: USB disconnect, device number 26 [ 164.834982][ T5547] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 164.982484][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 166.185297][ T5559] rust_binder: Write failure EFAULT in pid:1028 [ 166.194793][ T5559] rust_binder: Write failure EFAULT in pid:1028 [ 166.303214][ T5568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1628'. [ 166.331995][ T5568] rust_binder: Error while translating object. [ 166.332028][ T5568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 166.338262][ T5568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1033 [ 167.830697][ T36] kauditd_printk_skb: 347 callbacks suppressed [ 167.830719][ T36] audit: type=1400 audit(1760210931.016:68048): avc: denied { execmem } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.904039][ T36] audit: type=1400 audit(1760210931.026:68049): avc: denied { write } for pid=5581 comm="syz.1.1633" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 167.960715][ T36] audit: type=1400 audit(1760210931.026:68050): avc: denied { write } for pid=5581 comm="syz.1.1633" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 168.005695][ T36] audit: type=1400 audit(1760210931.026:68051): avc: denied { create } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.027429][ T36] audit: type=1400 audit(1760210931.026:68052): avc: denied { setopt } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.049811][ T36] audit: type=1400 audit(1760210931.026:68053): avc: denied { create } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.075430][ T36] audit: type=1400 audit(1760210931.026:68054): avc: denied { write } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.096962][ T36] audit: type=1400 audit(1760210931.026:68055): avc: denied { read } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.118601][ T36] audit: type=1400 audit(1760210931.026:68056): avc: denied { read } for pid=5581 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.140767][ T36] audit: type=1400 audit(1760210931.036:68057): avc: denied { ioctl } for pid=5581 comm="syz.1.1633" path="socket:[31500]" dev="sockfs" ino=31500 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.006004][ T5635] rust_binder: Write failure EFAULT in pid:1278 [ 170.017404][ T5615] rust_binder: Write failure EINVAL in pid:688 [ 170.190842][ T335] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 170.330809][ T335] usb 2-1: device descriptor read/64, error -71 [ 170.570864][ T335] usb 2-1: device descriptor read/64, error -71 [ 170.810807][ T335] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 170.950813][ T335] usb 2-1: device descriptor read/64, error -71 [ 171.190814][ T335] usb 2-1: device descriptor read/64, error -71 [ 171.300892][ T335] usb usb2-port1: attempt power cycle [ 171.546689][ T5643] rust_binder: Error while translating object. [ 171.546733][ T5643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 171.558796][ T5643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:691 [ 171.615584][ T5647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:693 [ 171.650758][ T335] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 171.736955][ T335] usb 2-1: device descriptor read/8, error -71 [ 171.873290][ T335] usb 2-1: device descriptor read/8, error -71 [ 172.110737][ T335] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 172.133082][ T335] usb 2-1: device descriptor read/8, error -71 [ 172.263005][ T335] usb 2-1: device descriptor read/8, error -71 [ 172.380751][ T335] usb usb2-port1: unable to enumerate USB device [ 172.911999][ T36] kauditd_printk_skb: 337 callbacks suppressed [ 172.912020][ T36] audit: type=1400 audit(1760210936.106:68359): avc: denied { read write } for pid=1196 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.942554][ T36] audit: type=1400 audit(1760210936.106:68360): avc: denied { read write open } for pid=1196 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.967663][ T36] audit: type=1400 audit(1760210936.106:68361): avc: denied { ioctl } for pid=1196 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.345668][ T36] audit: type=1400 audit(1760210936.526:68362): avc: denied { execmem } for pid=5653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 173.375048][ T5656] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 173.383411][ T36] audit: type=1400 audit(1760210936.556:68363): avc: denied { read } for pid=5654 comm="syz.1.1651" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.421911][ T5656] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 173.460708][ T36] audit: type=1400 audit(1760210936.556:68364): avc: denied { read open } for pid=5654 comm="syz.1.1651" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.526424][ T36] audit: type=1400 audit(1760210936.556:68365): avc: denied { ioctl } for pid=5654 comm="syz.1.1651" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.580052][ T36] audit: type=1400 audit(1760210936.556:68366): avc: denied { set_context_mgr } for pid=5654 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 173.592789][ T5668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.602385][ T36] audit: type=1400 audit(1760210936.566:68367): avc: denied { read } for pid=5655 comm="syz.4.1650" name="binder1" dev="binder" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.656183][ T5669] binder: Unknown parameter '01777777777777777777777' [ 173.800778][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 173.953420][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.961787][ T31] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 173.970704][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.981027][ T31] usb 2-1: config 220 has no interface number 2 [ 173.987655][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 174.000924][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 174.007723][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 174.014620][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 174.025185][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 174.034439][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.042650][ T31] usb 2-1: Product: syz [ 174.046834][ T31] usb 2-1: Manufacturer: syz [ 174.051477][ T31] usb 2-1: SerialNumber: syz [ 174.269205][ T31] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 174.279859][ T31] usb 2-1: No valid video chain found. [ 174.286423][ T31] usb 2-1: selecting invalid altsetting 0 [ 174.295769][ T31] usb 2-1: USB disconnect, device number 31 [ 177.567177][ T5698] binder: Unknown parameter 'fscontext?}' [ 177.592441][ T5698] fuse: Bad value for 'fd' [ 177.608713][ T5702] fuse: Bad value for 'fd' [ 177.697849][ T5706] rust_binder: Error while translating object. [ 177.697908][ T5706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.712502][ T5706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1297 [ 177.732798][ T5710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.820822][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 177.971454][ T36] kauditd_printk_skb: 385 callbacks suppressed [ 177.971474][ T36] audit: type=1400 audit(1760210941.166:68580): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.973872][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.977913][ T36] audit: type=1400 audit(1760210941.166:68581): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.003973][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.015833][ T36] audit: type=1400 audit(1760210941.166:68582): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.041839][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.048681][ T36] audit: type=1400 audit(1760210941.166:68583): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.073213][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.084231][ T36] audit: type=1400 audit(1760210941.166:68584): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.107457][ T31] usb 2-1: SerialNumber: syz [ 178.116751][ T36] audit: type=1400 audit(1760210941.196:68585): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.170316][ T36] audit: type=1400 audit(1760210941.226:68586): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.196665][ T36] audit: type=1400 audit(1760210941.226:68587): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.221974][ T36] audit: type=1400 audit(1760210941.226:68588): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.247119][ T36] audit: type=1400 audit(1760210941.226:68589): avc: denied { ioctl } for pid=5697 comm="syz.1.1662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.350224][ T5699] FAT-fs (rnullb0): bogus number of reserved sectors [ 178.357026][ T5699] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 178.365946][ T31] usb 2-1: 0:2 : does not exist [ 178.375055][ T31] usb 2-1: unit 5: unexpected type 0x03 [ 178.381914][ T31] usb 2-1: unit 4 not found! [ 178.400810][ T31] usb 2-1: USB disconnect, device number 32 [ 178.446541][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.745038][ T5719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1302 [ 179.751123][ T5719] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 179.780908][ T5719] SELinux: failed to load policy [ 179.842500][ T5727] loop7: detected capacity change from 0 to 16384 [ 180.141639][ T5727] loop7: detected capacity change from 16384 to 0 [ 182.169779][ T5747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.173746][ T5747] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 182.226065][ T5750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.253741][ T5750] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 182.278496][ T5751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1092 [ 182.278687][ T5750] rust_binder: Write failure EINVAL in pid:730 [ 182.304858][ T5753] fuse: Bad value for 'fd' SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=1585 state=3 status=67 (errno 9: Bad file descriptor) [ 182.658183][ T2365] bridge_slave_1: left allmulticast mode [ 182.664588][ T2365] bridge_slave_1: left promiscuous mode [ 182.670320][ T2365] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.679361][ T2365] bridge_slave_0: left allmulticast mode [ 182.685825][ T2365] bridge_slave_0: left promiscuous mode [ 182.692446][ T2365] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.837311][ T2365] veth1_macvtap: left promiscuous mode [ 182.842912][ T2365] veth0_vlan: left promiscuous mode [ 183.101740][ T2365] bridge_slave_1: left allmulticast mode [ 183.107423][ T2365] bridge_slave_1: left promiscuous mode [ 183.113112][ T2365] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.120610][ T2365] bridge_slave_0: left allmulticast mode [ 183.126399][ T2365] bridge_slave_0: left promiscuous mode [ 183.132131][ T2365] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.244069][ T2365] veth1_macvtap: left promiscuous mode [ 183.249633][ T2365] veth0_vlan: left promiscuous mode