last executing test programs: 2.248858915s ago: executing program 0 (id=2182): rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"dc770d07cfa04986d34890143d2c47d9", 0x0, 0x0, {0x3, 0x8}, {0x0, 0x3}, 0x80000000, [0xfffffffeffffffff, 0x1ecf, 0x1, 0x5, 0xe, 0x4, 0x2, 0x10, 0xbf64, 0x40, 0x4, 0x9, 0xbdfc, 0x4, 0x6bafac03, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"a6656f64f3a5d21935403a6e5f527e27", 0x0, 0x0, {0xfffffffffffffff9, 0x9}, {0x0, 0x1}, 0xffff, [0xd6, 0xfffffffffffff000, 0x9, 0x2bd4, 0x0, 0x3, 0xb7, 0x9, 0x1, 0x81, 0xfff, 0x4d, 0x5, 0x80000001, 0x2, 0xa]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000540)={"8ec43c583b628250fc14ff28207f45e3", r4, r5, {0x9, 0xe}, {0x7, 0xfff}, 0x3, [0xc28, 0x8, 0x218, 0x25f, 0xfc9, 0x9, 0x6, 0xbdfb, 0xfffffffffffffff7, 0x5, 0xfffffffffffffffa, 0x9c5d, 0xe8, 0x6, 0xc8, 0x7]}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x47, 0x40, 0x4, 0x1, 0xfd, 0x3, 0x44, 0x8, 0x0, 0x3}, {0xf, 0xa6f2, 0x6, 0x3, 0x9, 0xdf, 0x4, 0x87, 0xa, 0xbf, 0x7, 0x6, 0x1}, {0x200, 0x3, 0xd, 0x10, 0x25, 0x9, 0x0, 0x2, 0x4, 0x15, 0x0, 0x42, 0x564}], 0x9}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) 2.155495166s ago: executing program 1 (id=2190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_INPUT(r1, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) 2.153753516s ago: executing program 1 (id=2191): write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) r2 = getpid() read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_pidfd_open(r2, 0x0) getresgid(&(0x7f0000002e00), 0x0, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c8020103010203"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 2.095137196s ago: executing program 0 (id=2192): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 2.072346487s ago: executing program 0 (id=2193): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket(0x2, 0xa, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000005c0)="79c3209e7155f1486d8a9694c721f02f88b28a4c5eb15e511cb7b3ddc5bd912c295e03214373846f1cedd6ef16fbe5137c3efc9d1f488273f6378cf51910db6b5c8d0dba124f9542d0a8490d2afc292aef58aa470f58de56d0c96984d603f30c4ae5bf13dd710054e98a00aced24af568fa7884dd291f5eba0e96060cd27ea016f507e1f62a10c9df257091495e9fdbcf3065a3054e22856c4547d0f20b8ca82f3cf2d9f6047e81d1a204cf84c36679da2fe83ef72a63edcfcfb86bf2ca930a314cb499f43bd7cb82f71b4cd3fd5e6ded3118f84d9cdd3768b54f8508d86d4", 0xdf}, {&(0x7f00000003c0)="f466e43b7f96f35a94fda4b8e7ae87a9b11c9232e7f3560bc482bd6fef76558a07852f8523e13c443fdf4d5a83fb119fe8e608742a40fd85a6f2034fea79f933b5b2ef9e7c2e3cbe6820e65cf37f41a38539b8fd285aef043c038ea24cb1d19d891971bdcc6c8739199df263c597f48c6d601ed7a84c29ef162e8223d616f8da0a2afeb20b17d38cbff9bb41dd2fd7", 0x8f}, {&(0x7f0000000240)="15de007dea0515d409dab58063bb88813b4fe2c7789ac8a85b07010000a33eb0d1010dc384fe6abe8c2ecc1d5d3bbe1d70f7300d3b076672128ce5c424a9605d4ea686706814f6b674513e6eec0d05b84124d7042c9e1df79a314d0958af644e02f29f", 0x63}, {&(0x7f00000004c0)="bcbfd7d70670777d2de1524d267b0f75bad482e2cf0473371871413c33bd9c264e7b8bb03d7fa418f570ae24f19fa3eca6dbdc7ac66a48a804a223d802c269891c01ce6f330293c6cf62ba4b7d3b45e0187be1a1513bee4e4473134a9d77e024b2bdcfc4c5af3bbe2aba", 0x6a}, {&(0x7f0000000000)="44ef4fa718d8f9d93afa143068d80c967e027ad9158be25ceb283602e0171ccf18d26c3ed447b78e1976fba5da53e5c719f7e393e962", 0x36}, {&(0x7f00000006c0)="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", 0xd8f}], 0x6) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) r3 = socket(0x2, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace_dev_match', 0x0, 0x43) finit_module(r4, 0x0, 0x1) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) readahead(r0, 0x4, 0x4058) 1.993181597s ago: executing program 0 (id=2194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x181}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) (async) recvmmsg(r1, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10040, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffcf1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x75) write$cgroup_devices(r4, &(0x7f0000000040)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x3469, 0x10, 0x5, 0x4, "d7afad2d2bd5f6d6b5e9e79568d06be368869a", 0x6, 0x8}) 1.986929637s ago: executing program 0 (id=2195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x1a3, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x2ab}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) (async) read$FUSE(r4, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_BMAP(r4, &(0x7f0000000180)={0x18, 0xffffffffffffffda, r5}, 0x18) (async) chdir(0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45b, 0x700000000000000) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) (async) sendmmsg$sock(r3, &(0x7f0000003cc0)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @local}, 0x3, 0x4, 0x1, 0x3}}, 0x80, 0x0}}], 0x1, 0x8840) (async) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000000002058041a5000000000000109022d000010006006090400103ed469797429f37c9f7505030003000921030033012205000905810300009dfd28090502031000000303"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_team\x00', {}, 0x5}) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000040)={0x0, 0x0}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1f4) 1.861161658s ago: executing program 3 (id=2199): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xd9b, 0xffffffffffffffff, 'id0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x96, 0x20, 0x0, 0x5b, "80040f03000000294a349aa6ffc9d5af00"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x2, 0xb, 0x1000, 0xa, 0x80, "1de731330e45292d9609a3b550fb7605ee222b", 0x2, 0x3}) r4 = syz_open_pts(r1, 0x80) r5 = dup3(r4, r1, 0x80000) read(r1, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000001c0)={0x3, 0x7b5b, 0xa, 0xfbffffcf, 0x3, "65bd2100", 0x5, 0xe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) fsopen(&(0x7f0000000080)='bpf\x00', 0x1) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x51) write$binfmt_script(r2, &(0x7f00000015c0)={'#! ', './file0', [], 0xa, "64177c2f9ca4ace3fd936ded463c9e7c2b042ced1dff9d7fb2bd85e4183c6c5dce48191a0214cbd0e2746401d8d3c09e32b4a94cd6aa53d822de83d22852e40d8879063e7b2fd1ba2ec700b882a829f7b47b9aedd557dcf3a882c5422d3d406c341a4aa908d413abc0735819c48d0e498096ca24999d1600c506628dbb52ba5e9841a38a9a3c07394481c7daca493dd02f00755b3439705f75"}, 0xa4) read(r4, &(0x7f0000002dc0)=""/74, 0x4a) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) 1.622036959s ago: executing program 1 (id=2200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x38a, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x38a, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) 1.610140779s ago: executing program 1 (id=2201): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "11a1cc7f"}, {0x5, 0x24, 0x0, 0xd13b}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x0, 0x9, 0x32}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x60}, @ncm={0x6, 0x24, 0x1a, 0x70, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0xff, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x32, 0xab}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x9, 0xc0, 0x28, 0xd7ad791ebce307c5, 0x90}, 0x20, &(0x7f00000004c0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "620fe33a437a292f11470476859500a8"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xd, 0x5}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x408}}]}) (async) write$UHID_DESTROY(r0, &(0x7f0000000640), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close_range(r0, r0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r1, 0x547, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) execveat$binfmt(r2, 0x0, &(0x7f00000001c0)={[&(0x7f0000000080)='./binderfs/binder1\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='./binderfs/binder1\x00']}, &(0x7f00000003c0)={[&(0x7f0000000200)='#\x00', &(0x7f0000000240)='#*{/!-.\xb6\'$]\x00', &(0x7f0000000280)='4\x00', &(0x7f00000002c0)='-U\x00', &(0x7f0000000300)=':}\':-\x00', &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f0000000380)='&]^/&&\x00']}, 0x1000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000580)=0x6) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="0f20d835200000000f22d826650f004662673e0fae0e546f2e0fc79d00a00000660f384100c4e2959ce80f009a2d000000c4c1f852710066bad104ecf30f09", 0x3f}], 0x1, 0x59, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) 1.066736923s ago: executing program 1 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = memfd_secret(0x80000) r1 = socket(0x10, 0x3, 0x0) unshare(0x24060400) (async) fstatfs(r1, &(0x7f0000001640)=""/4096) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) close_range(r0, r2, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x0, 0x3}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 1.040509603s ago: executing program 1 (id=2207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 976.558744ms ago: executing program 3 (id=2209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004"], 0x44}}, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r2, &(0x7f0000000400)="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", 0x1f000) close_range(r1, r0, 0x2) 511.868637ms ago: executing program 3 (id=2210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x0, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x8, 0x9, 0x3, 0x2000007, 0x40000, 0x1a, 0x26, 0x4, 0x6, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0xd, 0xd, 0x7, 0x9, 0x80000000, 0x9, 0x5, 0x0, 0x800, 0x3, 0x8, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x2005, 0x7, 0x8e, 0x7, 0x80000001, 0x9, 0x3, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x200, 0x7ff, 0x7ff, 0x5, 0x9, 0x4000c00, 0x89, 0x7ff, 0x0, 0x40001, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0xa, 0x0, 0x4, 0x4c, 0xc, 0x8, 0x5, 0xe62, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xd, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0xffffffff, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x6, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x10000003, 0x6, 0x5, 0x3, 0xc7, 0x2, 0x3, 0x20000, 0x2, 0x8001, 0xc, 0x5, 0xb10, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0x80, 0xa0c787d, 0xffffff4e, 0x9, 0x6, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0x8, 0x8, 0x80000000, 0x0, 0xe, 0x2, 0x7, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x403, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x6, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x4, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0xff, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b000000"]) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f0000000140)=0x3800000, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x1, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x100001, 0xffffffffffffffff, 0x2000000000000000, 0x3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) cachestat(r2, &(0x7f0000000000)={0x401}, &(0x7f0000000080), 0x0) 220.113219ms ago: executing program 0 (id=2211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket(0x1e, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f00000000c0)={'tunl0\x00'}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000013c0)={0x79, 0x0, 0x800000080003}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r11, 0xffffffffffffffff, 0x200000000000000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @loopback}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @fda={0x66646185, 0x3, 0x2, 0x27}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) close_range(r0, 0xffffffffffffffff, 0x0) 218.115699ms ago: executing program 32 (id=2211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket(0x1e, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f00000000c0)={'tunl0\x00'}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000013c0)={0x79, 0x0, 0x800000080003}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r11, 0xffffffffffffffff, 0x200000000000000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @loopback}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @fda={0x66646185, 0x3, 0x2, 0x27}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) close_range(r0, 0xffffffffffffffff, 0x0) 164.741979ms ago: executing program 3 (id=2213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket(0x11, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x3}, 0x4ce0}], 0x1, 0x20, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x90}}], 0x1, 0x4000005) r2 = socket(0x10, 0x803, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x39a2, 0x4) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x8fa5a961245cf44b}], 0x0, 0x0, 0x0}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000a80)={0x9, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e24, @local}}}, 0x108) 164.474469ms ago: executing program 3 (id=2214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 'id0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 164.173249ms ago: executing program 2 (id=2215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0xa, 0x3, 0xff) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000840)=0x2) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000180)=0x6, 0x4) sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="de69dec00fadfee7955e56a8d0ad36b637bb74bddbee4bbd994380ac92c927b0c4b9007fd817092d5901", 0x2a}], 0x1}}], 0x1, 0x840) r6 = socket(0x11, 0x800000003, 0x0) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f0000000640)=""/100, 0x64}], 0x4, &(0x7f00000006c0)=""/172, 0xac}, 0x5}], 0x1, 0x40002001, &(0x7f0000000800)={r8, r9+10000000}) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0x8, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x38], [0x74a]}}) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 163.879819ms ago: executing program 3 (id=2216): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xbb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x2, 0x40, 0x20, 0x4}, 0xe5, &(0x7f0000000100)={0x5, 0xf, 0xe5, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "b83bb423145e388432bae4aa9eb7a317"}, @generic={0xb, 0x10, 0xa, "30a046e5aa421ce1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x33, 0x5, 0x0, 0x1e}, @generic={0xb3, 0x10, 0xa, "0ad0f64bb69f9bdaf982496f429565b5802a9f40bcce885d26b1e493d0b2814c9d3515f0cce274aee36c1674d09c1543dd7d0ca9e2665a5b78fef394551f977a0c01c20650dba67a0fa1cf522c1090659abd2bfb8a25090e261a13c04b7b1d7b143a93658a7c39a5fea00733ba0375c603dcf86d3c8dd127b538f335b3eb3eed1597470aef78a17a5bf633cd4a0a7ad9224711e227b2200afdc9f0bbf4bff418c24717471070295a45fdfbc7c1bd78ae"}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x420}}, {0x90, &(0x7f00000004c0)=ANY=[@ANYBLOB="90036f463e1e0881e72d59275dc2c5282c51577c80656ffa00294d62ede2ce2617a48025e7f2106e86a059928075ef0df88e415e424272ef644d373312ff2dcf7e9c0102533d72ae80b7fdda57ee5eaefb0c28394348857f57ad64c6a22f0261c592f749bf7445903abea0954c3244be248a0adc55daa81b9433da3b117a378ace29cfc388550c85cf4d951e5bab332a8dd73b5387cd9a11238bf82af1db1ee91f9c038bca92a4e5e55bbe9a47970a20739704f9c863ad48a1cdd1e4a844bafb3dc8d2ac69d26494e48c0038cd2d5256d5f7a71bc98e8cbf38a84875440c6c17027984cdcb6e9fceef7cbf036dc26d7a37484200e2f8e03384f59d527975ebcec9bc7a2432331db5e17bcdd22dc90a46686dc18aac90247d9258f491ff9f8772ad953d2b9a09da3bb9df5d6c24ca53313e113597af8f3dfbf2b652b4731291a6d9a4d4b0e43549f87a"]}]}) 125.353709ms ago: executing program 2 (id=2217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002022, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x22020600) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x84) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xf000, 0xeeef0000, 0x9, 0x0, 0x7962}) r6 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) write$cgroup_pid(r5, &(0x7f0000000000)=r6, 0x12) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x80000) ioctl$EVIOCRMFF(r7, 0x40044581, 0x0) 95.62976ms ago: executing program 2 (id=2219): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x204804, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRES16=r0]) 25.28947ms ago: executing program 2 (id=2220): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="380000002c000100000000000000000008000200", @ANYRES32, @ANYBLOB="0b000280976b6408686030"], 0x38}], 0x1}, 0xcc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x2, 0x0, 0xffff, 0x40, 0xf1, "1d01bf2be923fd62c2dbce1495b4fc93773672", 0x8, 0x9}) 22.04932ms ago: executing program 2 (id=2221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 0s ago: executing program 2 (id=2222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000500)) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$packet_int(r3, 0x107, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x6}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 21.951790][ T36] audit: type=1400 audit(1761805362.200:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.953203][ T282] cgroup: Unknown subsys name 'net' [ 21.974492][ T36] audit: type=1400 audit(1761805362.200:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.001838][ T36] audit: type=1400 audit(1761805362.230:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.002043][ T282] cgroup: Unknown subsys name 'devices' [ 22.149617][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.155252][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.309818][ T36] audit: type=1400 audit(1761805362.560:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.333029][ T36] audit: type=1400 audit(1761805362.560:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.353828][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.357931][ T36] audit: type=1400 audit(1761805362.560:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.389583][ T36] audit: type=1400 audit(1761805362.610:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.415039][ T36] audit: type=1400 audit(1761805362.610:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.422408][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.440704][ T36] audit: type=1400 audit(1761805362.670:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.474934][ T36] audit: type=1400 audit(1761805362.670:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.305534][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.312654][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.319804][ T290] bridge_slave_0: entered allmulticast mode [ 23.326096][ T290] bridge_slave_0: entered promiscuous mode [ 23.339557][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.346610][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.353837][ T290] bridge_slave_1: entered allmulticast mode [ 23.360161][ T290] bridge_slave_1: entered promiscuous mode [ 23.389458][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.396527][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.403672][ T289] bridge_slave_0: entered allmulticast mode [ 23.410089][ T289] bridge_slave_0: entered promiscuous mode [ 23.417279][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.424345][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.431479][ T289] bridge_slave_1: entered allmulticast mode [ 23.437894][ T289] bridge_slave_1: entered promiscuous mode [ 23.447450][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.454500][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.461659][ T292] bridge_slave_0: entered allmulticast mode [ 23.467946][ T292] bridge_slave_0: entered promiscuous mode [ 23.475586][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.482833][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.489951][ T292] bridge_slave_1: entered allmulticast mode [ 23.496255][ T292] bridge_slave_1: entered promiscuous mode [ 23.566656][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.573755][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.580857][ T291] bridge_slave_0: entered allmulticast mode [ 23.587169][ T291] bridge_slave_0: entered promiscuous mode [ 23.605496][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.612587][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.619708][ T291] bridge_slave_1: entered allmulticast mode [ 23.625980][ T291] bridge_slave_1: entered promiscuous mode [ 23.738403][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.745477][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.752825][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.759910][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.776304][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783472][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.790784][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.797874][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.832470][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.839560][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.846830][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.853898][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.881515][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.888602][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.895874][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.902941][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.917576][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.924881][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.932191][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.939938][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.947255][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.954468][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.961928][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.969158][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.986523][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.993608][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.018794][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.025849][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.033600][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.040695][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.048429][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055481][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082850][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.089943][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.097737][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.104793][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.112570][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.119652][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.149959][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.157177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.167323][ T290] veth0_vlan: entered promiscuous mode [ 24.193051][ T289] veth0_vlan: entered promiscuous mode [ 24.206089][ T290] veth1_macvtap: entered promiscuous mode [ 24.214133][ T292] veth0_vlan: entered promiscuous mode [ 24.231561][ T289] veth1_macvtap: entered promiscuous mode [ 24.244720][ T291] veth0_vlan: entered promiscuous mode [ 24.262566][ T292] veth1_macvtap: entered promiscuous mode [ 24.282502][ T291] veth1_macvtap: entered promiscuous mode [ 24.298352][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.342470][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.397831][ T341] rust_binder: 2: no such ref 3 [ 24.404866][ T341] rust_binder: 2: no such ref 1 [ 24.414548][ T341] rust_binder: Write failure EFAULT in pid:2 [ 24.448523][ T352] tmpfs: Unknown parameter 'noinode32' [ 24.455517][ T349] rust_binder: Error while translating object. [ 24.464487][ T349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.474046][ T349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 24.483083][ T352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.564499][ T365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 24.611124][ T370] usb usb7: usbfs: process 370 (syz.0.11) did not claim interface 0 before use [ 24.622030][ T370] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 24.630866][ T370] rust_binder: Write failure EINVAL in pid:9 [ 24.719644][ T379] capability: warning: `syz.2.15' uses 32-bit capabilities (legacy support in use) [ 24.837321][ T364] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.872792][ T397] ======================================================= [ 24.872792][ T397] WARNING: The mand mount option has been deprecated and [ 24.872792][ T397] and is ignored by this kernel. Remove the mand [ 24.872792][ T397] option from the mount to silence this warning. [ 24.872792][ T397] ======================================================= [ 24.909433][ T397] binder: Unknown parameter 'context[7' [ 24.932369][ T400] rust_binder: 28: no such ref 0 [ 24.937500][ T400] rust_binder: Write failure EINVAL in pid:28 [ 24.988503][ T364] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 24.995912][ T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 25.005386][ T364] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 25.005420][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 25.005449][ T364] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.017879][ T402] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.029215][ T364] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 25.037221][ T402] rust_binder: Read failure Err(EFAULT) in pid:28 [ 25.050346][ T373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.082222][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.090282][ T364] usb 2-1: Product: syz [ 25.094499][ T364] usb 2-1: Manufacturer: syz [ 25.099179][ T364] usb 2-1: SerialNumber: syz [ 25.108342][ T364] usb 2-1: config 0 descriptor?? [ 25.113639][ T369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 25.122427][ T364] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 25.257502][ T373] usb 1-1: too many configurations: 153, using maximum allowed: 8 [ 25.266259][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.276327][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.286317][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.293852][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.303923][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.313895][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.326246][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.326287][ T369] rust_binder: Write failure EFAULT in pid:14 [ 25.336361][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.336396][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.337229][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.363087][ T9] usb 2-1: USB disconnect, device number 2 [ 25.372206][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.375857][ T382] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.385332][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.400595][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.410866][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.420879][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.428365][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.441453][ T407] rust_binder: 10: no such ref 1 [ 25.446521][ T407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 25.451558][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.470848][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.478281][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.488470][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.503921][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.511668][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.521721][ T373] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.531770][ T373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.539885][ T373] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 25.548279][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.549143][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.564270][ T382] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 25.567917][ T373] usb 1-1: Product: syz [ 25.578384][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.581094][ T373] usb 1-1: Manufacturer: syz [ 25.593625][ T382] usb 3-1: config 0 descriptor?? [ 25.593660][ T373] usb 1-1: SerialNumber: syz [ 25.604284][ T391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.611504][ T391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.737031][ T383] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.877541][ T413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16 [ 25.887063][ T383] usb 4-1: Using ep0 maxpacket: 16 [ 25.904410][ T383] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 25.912748][ T383] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 25.922238][ T383] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.935028][ T383] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 25.944069][ T383] usb 4-1: config 0 has no interface number 0 [ 25.950466][ T383] usb 4-1: config 0 interface 104 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.963869][ T383] usb 4-1: config 0 interface 104 has no altsetting 1 [ 25.972286][ T383] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 25.981615][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.985646][ T422] rust_binder: 421 RLIMIT_NICE not set [ 25.989697][ T383] usb 4-1: Product: syz [ 25.999505][ T383] usb 4-1: Manufacturer: syz [ 26.004184][ T383] usb 4-1: SerialNumber: syz [ 26.010567][ T382] isku 0003:1E7D:3264.0001: item 0 1 0 9 parsing failed [ 26.017877][ T383] usb 4-1: config 0 descriptor?? [ 26.023167][ T382] isku 0003:1E7D:3264.0001: parse failed [ 26.029521][ T382] isku 0003:1E7D:3264.0001: probe with driver isku failed with error -22 [ 26.058300][ T373] rtl8150 1-1:1.0: couldn't reset the device [ 26.064522][ T373] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 26.075895][ T373] usb 1-1: USB disconnect, device number 2 [ 26.246222][ T373] usb 3-1: USB disconnect, device number 2 [ 26.298157][ T383] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.308751][ T383] asix 4-1:0.104: probe with driver asix failed with error -71 [ 26.318009][ T383] usb 4-1: USB disconnect, device number 2 [ 26.585903][ T425] binder: Unknown parameter 'defco' [ 26.697730][ T433] __vm_enough_memory: pid: 433, comm: syz.0.32, bytes: 18014402804453376 not enough memory for the allocation [ 26.710287][ T435] __vm_enough_memory: pid: 435, comm: syz.0.32, bytes: 18014402804453376 not enough memory for the allocation [ 26.733694][ T437] /dev/md0: Can't lookup blockdev [ 26.752396][ T439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.752430][ T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 26.763450][ T440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.845162][ T455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 26.866650][ T458] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 26.893086][ T458] netlink: 17 bytes leftover after parsing attributes in process `syz.0.41'. [ 26.905738][ T461] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 26.917009][ T461] netlink: 17 bytes leftover after parsing attributes in process `syz.0.41'. [ 26.929204][ T458] rust_binder: Write failure EFAULT in pid:39 [ 26.995871][ T451] Zero length message leads to an empty skb [ 27.045798][ T36] kauditd_printk_skb: 121 callbacks suppressed [ 27.045832][ T36] audit: type=1400 audit(1761805367.290:195): avc: denied { bind } for pid=469 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.071972][ T36] audit: type=1400 audit(1761805367.290:196): avc: denied { listen } for pid=469 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.086384][ T472] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 27.091815][ T472] rust_binder: Error while translating object. [ 27.104112][ T472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.104160][ T383] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.110392][ T472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 27.119842][ T36] audit: type=1400 audit(1761805367.330:197): avc: denied { create } for pid=471 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.156262][ T36] audit: type=1400 audit(1761805367.330:198): avc: denied { setopt } for pid=471 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.176377][ T36] audit: type=1400 audit(1761805367.330:199): avc: denied { ioctl } for pid=471 comm="syz.1.45" path="mnt:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.195002][ T474] rust_binder: Write failure EFAULT in pid:35 [ 27.200977][ T36] audit: type=1400 audit(1761805367.430:200): avc: denied { bind } for pid=473 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.217004][ T364] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.239728][ T479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.239950][ T479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 27.317296][ T383] usb 3-1: Using ep0 maxpacket: 32 [ 27.334282][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.345544][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.355583][ T383] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 27.369189][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.378269][ T383] usb 3-1: config 0 descriptor?? [ 27.406999][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 27.413833][ T364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.422676][ T364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.433195][ T364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.443848][ T364] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.453467][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.461877][ T364] usb 1-1: Product: syz [ 27.466197][ T364] usb 1-1: Manufacturer: syz [ 27.471071][ T364] usb 1-1: SerialNumber: syz [ 27.507020][ T373] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.656999][ T373] usb 2-1: Using ep0 maxpacket: 16 [ 27.663559][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.675083][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.685681][ T36] audit: type=1400 audit(1761805367.930:201): avc: denied { write } for pid=466 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.689411][ T373] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 27.717349][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.726490][ T373] usb 2-1: config 0 descriptor?? [ 27.789022][ T383] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 27.796423][ T383] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 27.803938][ T383] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 27.811324][ T383] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 27.818789][ T383] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 27.836267][ T383] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 27.891682][ T364] usb 1-1: cannot find UAC_HEADER [ 27.903641][ T364] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.920238][ T364] usb 1-1: USB disconnect, device number 3 [ 27.932193][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.152363][ T373] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 28.162702][ T373] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 28.170715][ T373] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 28.183514][ T373] hid-multitouch 0003:1FD2:6007.0003: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 28.275597][ T36] audit: type=1400 audit(1761805368.520:202): avc: denied { read write } for pid=493 comm="syz.3.51" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.286888][ T494] rust_binder: Write failure EFAULT in pid:33 [ 28.299023][ T36] audit: type=1400 audit(1761805368.520:203): avc: denied { open } for pid=493 comm="syz.3.51" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.300496][ T495] rust_binder: 45: no such ref 6 [ 28.305162][ T36] audit: type=1400 audit(1761805368.530:204): avc: denied { ioctl } for pid=493 comm="syz.3.51" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.328364][ T495] rust_binder: 45: no such ref 3 [ 28.362634][ T495] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 28.370736][ T364] usb 2-1: USB disconnect, device number 3 [ 28.432927][ T497] raw_sendmsg: syz.3.52 forgot to set AF_INET. Fix it! [ 28.677364][ T373] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.827025][ T373] usb 4-1: Using ep0 maxpacket: 8 [ 28.833362][ T373] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 28.841760][ T373] usb 4-1: config 179 has no interface number 0 [ 28.848087][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 28.859228][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 28.870623][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 28.881816][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 28.898503][ T373] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 28.911896][ T373] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 28.921321][ T373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.934406][ T499] input: syz1 as /devices/virtual/input/input6 [ 28.937297][ T497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.007848][ T501] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 29.015026][ T501] rust_binder: 44: no such ref 2 [ 29.020154][ T501] rust_binder: 44: no such ref 0 [ 29.025226][ T501] rust_binder: 44: no such ref 0 [ 29.030405][ T501] rust_binder: Read failure Err(EAGAIN) in pid:44 [ 29.030835][ T501] rust_binder: 44: no such ref 1 [ 29.121541][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 29.140884][ T519] rust_binder: 55: no such ref 0 [ 29.166390][ T518] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 29.173882][ T518] rust_binder: Write failure EINVAL in pid:55 [ 29.216155][ T522] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 29.229564][ T522] rust_binder: Write failure EINVAL in pid:59 [ 29.313767][ T526] netlink: 'syz.0.62': attribute type 27 has an invalid length. [ 29.349282][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.356594][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.417847][ T65] usb 4-1: USB disconnect, device number 3 [ 29.417960][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 29.432207][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 29.586223][ T532] binder: Unknown parameter 'c' [ 29.607610][ T534] __vm_enough_memory: pid: 534, comm: syz.0.65, bytes: 18014402804453376 not enough memory for the allocation [ 29.804806][ T383] usb 3-1: USB disconnect, device number 3 [ 29.877205][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.029155][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 30.041469][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 30.053170][ T65] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 30.062412][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.071623][ T65] usb 1-1: Product: syz [ 30.077039][ T65] usb 1-1: Manufacturer: syz [ 30.081669][ T65] usb 1-1: SerialNumber: syz [ 30.096625][ T65] usb 1-1: config 0 descriptor?? [ 30.104131][ T65] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 30.141759][ T552] rust_binder: Error while translating object. [ 30.141803][ T552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.148244][ T552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:41 [ 30.157916][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.176997][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.196209][ T554] /dev/rnullb0: Can't open blockdev [ 30.230532][ T556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.230558][ T556] rust_binder: Read failure Err(EFAULT) in pid:45 [ 30.337054][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 30.350520][ T536] __vm_enough_memory: pid: 536, comm: syz.0.66, bytes: 18014402804453376 not enough memory for the allocation [ 30.383077][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.392673][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.400966][ T9] usb 2-1: Product: syz [ 30.405310][ T9] usb 2-1: Manufacturer: syz [ 30.413881][ T9] usb 2-1: SerialNumber: syz [ 30.428152][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 30.437319][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 30.457146][ T568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=568 comm=syz.3.79 [ 30.472920][ T45] usb 1-1: USB disconnect, device number 4 [ 30.634532][ T573] rust_binder: Failed copying remainder into alloc: EFAULT [ 30.634557][ T573] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 30.642445][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.651592][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:61 [ 30.688098][ T575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=575 comm=syz.3.82 [ 30.716723][ T575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 30.828804][ T577] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 30.837553][ T577] rust_binder: Write failure EINVAL in pid:65 [ 31.010645][ T593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.068834][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.139628][ T608] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 31.150491][ T608] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 31.172571][ T608] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 31.180944][ T608] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 31.364256][ T616] 9pnet_fd: Insufficient options for proto=fd [ 31.565446][ T619] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 31.573744][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 32.011902][ T622] syz.2.98 (622) used obsolete PPPIOCDETACH ioctl [ 32.259791][ T625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 32.267065][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.370679][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 32.370697][ T36] audit: type=1400 audit(1761805372.622:226): avc: denied { shutdown } for pid=631 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.429098][ T36] audit: type=1400 audit(1761805372.682:227): avc: denied { mounton } for pid=636 comm="syz.3.103" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 32.429252][ T637] incfs: mount failed -22 [ 32.453336][ T45] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 32.465588][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.468968][ T36] audit: type=1400 audit(1761805372.712:228): avc: denied { write } for pid=636 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.473824][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.501416][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.509468][ T45] usb 3-1: Product: ꃚ䧷᧙ꂋ䁌你⃎ﮁ勤瀬䖝᷂⯜甔롷㒔⒕镥蚣煴ᰴ놺咢䢍瑔좱䶒떠檿᷽阁镒䩜酒儰㭻ꥈ렧孫彬 [ 32.524753][ T45] usb 3-1: Manufacturer: Ы [ 32.529323][ T45] usb 3-1: SerialNumber:   [ 32.535051][ T622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.581187][ T641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 32.807535][ T36] audit: type=1400 audit(1761805373.062:229): avc: denied { name_bind } for pid=651 comm="syz.3.107" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.831291][ T652] rust_binder: Got transaction with invalid offset. [ 32.831366][ T652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.837233][ T36] audit: type=1400 audit(1761805373.062:230): avc: denied { write } for pid=651 comm="syz.3.107" path="socket:[5237]" dev="sockfs" ino=5237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.838790][ T652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 32.945005][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 32.962660][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 32.977364][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 32.982840][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 33.006037][ T45] usb 3-1: USB disconnect, device number 4 [ 33.012876][ T9] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 33.023435][ T36] audit: type=1400 audit(1761805373.272:231): avc: denied { ioctl } for pid=659 comm="syz.3.109" path="socket:[5253]" dev="sockfs" ino=5253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.051479][ T36] audit: type=1400 audit(1761805373.302:232): avc: denied { connect } for pid=659 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.072421][ T662] netlink: 5 bytes leftover after parsing attributes in process `syz.1.110'. [ 33.077074][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.086570][ T605] Bluetooth: hci0: command 0x1003 tx timeout [ 33.148878][ T666] rust_binder: Write failure EINVAL in pid:130 [ 33.150280][ T666] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 33.156588][ T666] rust_binder: Error in use_page_slow: EFAULT [ 33.176164][ T666] rust_binder: use_range failure EFAULT [ 33.187079][ T666] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 33.192719][ T666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.211545][ T666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130 [ 33.288089][ T671] hub 1-0:1.0: USB hub found [ 33.312180][ T671] hub 1-0:1.0: 1 port detected [ 33.455913][ T675] overlayfs: failed to resolve './file1': -2 [ 33.482112][ T36] audit: type=1400 audit(1761805373.732:233): avc: denied { wake_alarm } for pid=674 comm="syz.3.115" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.629232][ T678] SELinux: security_context_str_to_sid () failed with errno=-22 [ 33.676210][ T683] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 33.714363][ T689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.815216][ T696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=696 comm=syz.0.121 [ 33.857168][ T36] audit: type=1400 audit(1761805374.112:234): avc: denied { execute } for pid=695 comm="syz.0.121" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.857262][ T696] __vm_enough_memory: pid: 696, comm: syz.0.121, bytes: 18014402804453376 not enough memory for the allocation [ 33.924128][ T36] audit: type=1400 audit(1761805374.152:235): avc: denied { read write } for pid=697 comm="syz.2.124" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.989046][ T701] /dev/rnullb0: Can't open blockdev [ 33.997613][ T703] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.239660][ T719] netlink: 188 bytes leftover after parsing attributes in process `syz.0.133'. [ 34.277017][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.330517][ T726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.436983][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 34.453731][ T45] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 34.479647][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.490799][ T45] usb 3-1: config 0 descriptor?? [ 34.805721][ T745] binder: Binderfs stats mode cannot be changed during a remount [ 34.830916][ T749] netlink: 'syz.3.143': attribute type 12 has an invalid length. [ 34.839841][ T749] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 34.847716][ T749] netlink: 5 bytes leftover after parsing attributes in process `syz.3.143'. [ 34.856768][ T749] bridge_slave_1: left promiscuous mode [ 34.862543][ T749] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.870734][ T749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=749 comm=syz.3.143 [ 34.884504][ T749] exFAT-fs (rnullb0): invalid boot record signature [ 34.891160][ T749] exFAT-fs (rnullb0): failed to read boot sector [ 34.897593][ T749] exFAT-fs (rnullb0): failed to recognize exfat type [ 34.904507][ T45] usb 3-1: Found UVC 0.00 device (2833:0201) [ 34.911501][ T45] usb 3-1: No valid video chain found. [ 35.105672][ T9] usb 3-1: USB disconnect, device number 5 [ 35.307048][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.459706][ T65] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 35.468866][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.476897][ T65] usb 2-1: Product: syz [ 35.481244][ T65] usb 2-1: Manufacturer: syz [ 35.485861][ T65] usb 2-1: SerialNumber: syz [ 35.492832][ T65] r8152-cfgselector 2-1: Unknown version 0x0000 [ 35.499256][ T65] r8152-cfgselector 2-1: config 0 descriptor?? [ 35.559996][ T764] binder: Unknown parameter '0x0000000000000000' [ 35.599431][ T770] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.630664][ T776] rust_binder: Write failure EFAULT in pid:130 [ 35.653485][ T782] rust_binder: Write failure EFAULT in pid:132 [ 35.720713][ T792] rust_binder: Error while translating object. [ 35.730640][ T792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 35.737724][ T792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:137 [ 35.792168][ T803] rust_binder: Error while translating object. [ 35.801446][ T803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.809771][ T803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 35.910684][ T382] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 44.541638][ T819] binder: Binderfs stats mode cannot be changed during a remount [ 44.545102][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 44.545120][ T36] audit: type=1400 audit(1761805384.792:260): avc: denied { connect } for pid=812 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.585235][ T817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 44.627488][ T826] binder: Bad value for 'defcontext' [ 44.646807][ T834] binder: Bad value for 'defcontext' [ 44.663162][ T36] audit: type=1400 audit(1761805384.912:261): avc: denied { setopt } for pid=835 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.696041][ T840] exFAT-fs (rnullb0): invalid boot record signature [ 44.697020][ T36] audit: type=1400 audit(1761805384.942:262): avc: denied { sqpoll } for pid=813 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.707051][ T840] exFAT-fs (rnullb0): failed to read boot sector [ 44.736568][ T843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 44.745761][ T840] exFAT-fs (rnullb0): failed to recognize exfat type [ 44.920294][ T867] kvm: pic: single mode not supported [ 44.920892][ T867] kvm: pic: single mode not supported [ 44.927614][ T867] kvm: pic: single mode not supported [ 44.934109][ T867] kvm: pic: level sensitive irq not supported [ 44.940038][ T867] kvm: pic: level sensitive irq not supported [ 44.946482][ T867] kvm: pic: non byte read [ 44.958171][ T867] kvm: pic: single mode not supported [ 44.958181][ T867] kvm: pic: level sensitive irq not supported [ 44.963726][ T867] kvm: pic: single mode not supported [ 44.970469][ T867] kvm: pic: single mode not supported [ 44.975919][ T867] kvm: pic: level sensitive irq not supported [ 44.976565][ T13] Bluetooth: hci0: Frame reassembly failed (-90) [ 44.982003][ T867] kvm: pic: single mode not supported [ 44.994266][ T867] kvm: pic: single mode not supported [ 44.999746][ T867] kvm: pic: single mode not supported [ 45.005141][ T867] kvm: pic: level sensitive irq not supported [ 45.011122][ T867] kvm: pic: single mode not supported [ 45.017408][ T867] kvm: pic: non byte read [ 45.027304][ T382] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.087035][ T373] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.186985][ T382] usb 3-1: Using ep0 maxpacket: 32 [ 45.193406][ T382] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.201686][ T382] usb 3-1: config 0 has no interface number 0 [ 45.209509][ T382] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.218743][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.226852][ T382] usb 3-1: Product: syz [ 45.231179][ T382] usb 3-1: Manufacturer: syz [ 45.235886][ T382] usb 3-1: SerialNumber: syz [ 45.242950][ T382] usb 3-1: config 0 descriptor?? [ 45.250625][ T382] smsc95xx v2.0.0 [ 45.257003][ T373] usb 4-1: Using ep0 maxpacket: 16 [ 45.268180][ T373] usb 4-1: config 0 has no interfaces? [ 45.274612][ T373] usb 4-1: config 0 has no interfaces? [ 45.280993][ T373] usb 4-1: config 0 has no interfaces? [ 45.287496][ T863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165 [ 45.287630][ T863] rust_binder: Read failure Err(EFAULT) in pid:165 [ 45.298464][ T373] usb 4-1: string descriptor 0 read error: -71 [ 45.313936][ T373] usb 4-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 45.323314][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.332469][ T373] usb 4-1: rejected 3 configurations due to insufficient available bus power [ 45.346448][ T373] usb 4-1: no configuration chosen from 3 choices [ 45.353737][ T373] usb 4-1: USB disconnect, device number 4 [ 45.522709][ T36] audit: type=1400 audit(1761805385.772:263): avc: denied { setopt } for pid=877 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.526016][ T878] rust_binder: 168: no such ref 1 [ 45.651096][ T382] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 45.661900][ T382] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.836896][ T891] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.857239][ T893] process 'syz.3.186' launched '/dev/fd/5' with NULL argv: empty string added [ 45.866447][ T36] audit: type=1400 audit(1761805386.112:264): avc: denied { execute_no_trans } for pid=892 comm="syz.3.186" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.897956][ T382] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 45.908943][ T382] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 45.957024][ T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 45.973756][ T895] rust_binder: Error while translating object. [ 45.973790][ T895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.980206][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 46.002431][ T36] audit: type=1400 audit(1761805386.252:265): avc: denied { mount } for pid=896 comm="syz.3.188" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 46.002903][ T897] random: crng reseeded on system resumption [ 46.011737][ T36] audit: type=1400 audit(1761805386.252:266): avc: denied { write } for pid=896 comm="syz.3.188" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.062065][ T36] audit: type=1400 audit(1761805386.252:267): avc: denied { open } for pid=896 comm="syz.3.188" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.087703][ T36] audit: type=1400 audit(1761805386.342:268): avc: denied { getattr } for pid=900 comm="syz.3.189" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.128289][ T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 46.137481][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.146052][ T45] usb 1-1: config 0 descriptor?? [ 46.447024][ T382] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.598144][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.609101][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.618908][ T382] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 46.627998][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.636722][ T382] usb 4-1: config 0 descriptor?? [ 46.997022][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 46.997057][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.043218][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.052178][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.297884][ T382] usbhid 4-1:0.0: can't add hid device: -71 [ 47.304196][ T382] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 47.313284][ T382] usb 4-1: USB disconnect, device number 5 [ 47.807012][ T9] usb 3-1: USB disconnect, device number 6 [ 47.853450][ T926] fuse: Bad value for 'user_id' [ 47.863486][ T926] fuse: Bad value for 'user_id' [ 47.943335][ T931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 48.012946][ T36] audit: type=1400 audit(1761805388.262:269): avc: denied { read } for pid=939 comm="syz.1.201" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.064276][ T947] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.072292][ T947] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 48.080876][ T947] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.088851][ T947] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 48.117432][ T951] rust_binder: 948 RLIMIT_NICE not set [ 48.937699][ T967] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 48.957198][ T970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.968965][ T970] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 49.125590][ T987] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 49.142936][ T987] overlay: Bad value for 'uuid' [ 49.375329][ T999] random: crng reseeded on system resumption [ 49.416476][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 49.657003][ T382] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 49.816986][ T382] usb 2-1: Using ep0 maxpacket: 32 [ 49.823470][ T382] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.832120][ T382] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.841003][ T382] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.850266][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.860072][ T382] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.869878][ T382] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.882922][ T382] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.892020][ T382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.904445][ T382] usb 2-1: config 0 descriptor?? [ 49.908517][ T1007] rust_binder: Error while translating object. [ 49.909672][ T1007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.915972][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 50.121288][ T382] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 50.150945][ T382] usb 2-1: USB disconnect, device number 6 [ 50.158902][ T382] usblp0: removed [ 50.335769][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 50.346474][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 50.355248][ T1015] rust_binder: Write failure EINVAL in pid:180 [ 50.358034][ T45] asix 1-1:0.0: probe with driver asix failed with error -71 [ 50.363561][ T1015] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.365455][ T45] usb 1-1: USB disconnect, device number 5 [ 50.386423][ T1015] rust_binder: Read failure Err(EFAULT) in pid:180 [ 50.456007][ T1021] random: crng reseeded on system resumption [ 50.496706][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 50.496724][ T36] audit: type=1400 audit(1761805390.742:287): avc: denied { remount } for pid=1020 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.533977][ T1025] syz.2.230: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 50.537064][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 50.548853][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: syz.2.230 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 50.548897][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.548924][ T1025] Call Trace: [ 50.548934][ T1025] [ 50.548945][ T1025] __dump_stack+0x21/0x30 [ 50.548995][ T1025] dump_stack_lvl+0x10c/0x190 [ 50.549029][ T1025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.549064][ T1025] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 50.549105][ T1025] dump_stack+0x19/0x20 [ 50.549136][ T1025] warn_alloc+0x1bc/0x2a0 [ 50.549178][ T1025] ? __cfi_warn_alloc+0x10/0x10 [ 50.549209][ T1025] ? kasan_save_track+0x4f/0x80 [ 50.549234][ T1025] ? __kasan_kmalloc+0x96/0xb0 [ 50.549260][ T1025] ? __kmalloc_cache_noprof+0x24c/0x490 [ 50.549285][ T1025] ? do_sock_setsockopt+0x26d/0x400 [ 50.549322][ T1025] ? __x64_sys_setsockopt+0x1b8/0x250 [ 50.549357][ T1025] ? x64_sys_call+0x2adc/0x2ee0 [ 50.549393][ T1025] ? do_syscall_64+0x58/0xf0 [ 50.549424][ T1025] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.549452][ T1025] __vmalloc_node_range_noprof+0x135/0x1420 [ 50.549494][ T1025] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 50.549530][ T1025] ? kasan_save_alloc_info+0x40/0x50 [ 50.549566][ T1025] ? __kasan_kmalloc+0x96/0xb0 [ 50.549593][ T1025] ? __kmalloc_cache_noprof+0x24c/0x490 [ 50.549617][ T1025] ? futex_setup_timer+0xb4/0xd0 [ 50.549642][ T1025] vmalloc_user_noprof+0x77/0x90 [ 50.549677][ T1025] ? xskq_create+0xdb/0x2a0 [ 50.549712][ T1025] xskq_create+0xdb/0x2a0 [ 50.549748][ T1025] xsk_init_queue+0xb6/0x120 [ 50.549784][ T1025] xsk_setsockopt+0x43f/0x6f0 [ 50.549819][ T1025] ? __cfi_xsk_setsockopt+0x10/0x10 [ 50.549854][ T1025] ? do_futex+0x309/0x500 [ 50.549879][ T1025] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 50.549911][ T1025] ? security_socket_setsockopt+0x33/0xd0 [ 50.549936][ T1025] ? __cfi_xsk_setsockopt+0x10/0x10 [ 50.549971][ T1025] do_sock_setsockopt+0x26d/0x400 [ 50.550007][ T1025] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 50.550046][ T1025] __x64_sys_setsockopt+0x1b8/0x250 [ 50.550082][ T1025] x64_sys_call+0x2adc/0x2ee0 [ 50.550119][ T1025] do_syscall_64+0x58/0xf0 [ 50.550155][ T1025] ? clear_bhb_loop+0x50/0xa0 [ 50.550183][ T1025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.550210][ T1025] RIP: 0033:0x7f560a98efc9 [ 50.550236][ T1025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.550256][ T1025] RSP: 002b:00007f560b902038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.550283][ T1025] RAX: ffffffffffffffda RBX: 00007f560abe5fa0 RCX: 00007f560a98efc9 [ 50.550301][ T1025] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 50.550328][ T1025] RBP: 00007f560aa11f91 R08: 0000000000000004 R09: 0000000000000000 [ 50.550345][ T1025] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.550361][ T1025] R13: 00007f560abe6038 R14: 00007f560abe5fa0 R15: 00007ffdff9f21c8 [ 50.550383][ T1025] [ 50.550396][ T1025] Mem-Info: [ 50.590609][ T1027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.596214][ T1025] active_anon:8653 inactive_anon:626 isolated_anon:0 [ 50.596214][ T1025] active_file:17960 inactive_file:2232 isolated_file:0 [ 50.596214][ T1025] unevictable:0 dirty:53 writeback:0 [ 50.596214][ T1025] slab_reclaimable:6418 slab_unreclaimable:69221 [ 50.596214][ T1025] mapped:24106 shmem:163 pagetables:849 [ 50.596214][ T1025] sec_pagetables:0 bounce:0 [ 50.596214][ T1025] kernel_misc_reclaimable:0 [ 50.596214][ T1025] free:1527493 free_pcp:2663 free_cma:0 [ 50.600357][ T1026] rust_binder: Write failure EINVAL in pid:135 [ 50.604483][ T1025] Node 0 active_anon:34612kB inactive_anon:2504kB active_file:71840kB inactive_file:8928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96424kB dirty:212kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5336kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 50.609055][ T1026] rust_binder: Write failure EINVAL in pid:135 [ 50.613045][ T1025] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 50.619158][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.622864][ T1025] lowmem_reserve[]: [ 50.627687][ T382] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.633324][ T1025] 0 [ 50.639732][ T1026] rust_binder: Error while translating object. [ 50.643994][ T1027] rust_binder: Error while translating object. [ 50.648801][ T1026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 50.653384][ T1025] 3921 3921 [ 50.653411][ T1025] Normal free:3151392kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34612kB inactive_anon:2504kB active_file:71840kB inactive_file:8928kB unevictable:0kB writepending:212kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3740kB local_pcp:3336kB free_cma:0kB [ 50.660010][ T1026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 50.665384][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 50.671978][ T1025] lowmem_reserve[]: [ 50.677276][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 50.682083][ T1025] 0 [ 50.867019][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 50.908609][ T1025] 0 [ 51.098497][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.099893][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 51.102988][ T1025] 0 [ 51.112620][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.114934][ T1025] [ 51.117440][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.117463][ T65] usb 4-1: Product: syz [ 51.117480][ T65] usb 4-1: Manufacturer: syz [ 51.126716][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 51.128919][ T382] usb 2-1: Using ep0 maxpacket: 32 [ 51.137340][ T1025] DMA32: [ 51.141197][ T65] usb 4-1: SerialNumber: syz [ 51.145977][ T1025] 5*4kB [ 51.154697][ T382] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 51.159463][ T1025] (M) [ 51.161719][ T382] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 51.166666][ T45] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 51.172096][ T382] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 51.177945][ T1025] 4*8kB [ 51.181668][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.189121][ T45] usb 1-1: config 1 has no interface number 0 [ 51.197230][ T382] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.206268][ T1025] (M) [ 51.209118][ T382] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.218671][ T45] usb 1-1: config 1 interface 121 has no altsetting 0 [ 51.224882][ T382] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.234757][ T1025] 4*16kB [ 51.237269][ T382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.250320][ T1025] (M) [ 51.258413][ T382] usb 2-1: config 0 descriptor?? [ 51.270233][ T1025] 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 51.289454][ T45] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 51.297373][ T1025] Normal: 1719*4kB (UME) 910*8kB (UME) [ 51.306263][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.306273][ T1025] 478*16kB [ 51.306292][ T45] usb 1-1: Product: syz [ 51.312023][ T1025] (UME) [ 51.320393][ T45] usb 1-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 51.324343][ T1025] 659*32kB [ 51.327470][ T45] usb 1-1: SerialNumber: syz [ 51.330149][ T1025] (UME) 647*64kB (UME) 94*128kB (UME) 28*256kB (UME) 16*512kB (UME) 10*1024kB (UME) 7*2048kB (ME) 736*4096kB (UME) = 3150924kB [ 51.369077][ T1025] 20994 total pagecache pages [ 51.374004][ T1025] 626 pages in swap cache [ 51.378446][ T1025] Free swap = 121876kB [ 51.382632][ T1025] Total swap = 124996kB [ 51.386799][ T1025] 2097051 pages RAM [ 51.390888][ T1025] 0 pages HighMem/MovableOnly [ 51.391787][ T65] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 51.395712][ T1025] 351537 pages reserved [ 51.410972][ T1025] 0 pages cma reserved [ 51.419262][ T1025] Memory allocations: [ 51.423433][ T1025] 0 B 0 init/main.c:1370 func:do_initcalls [ 51.430717][ T1025] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 51.438941][ T1025] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 51.446643][ T1025] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 51.454689][ T1025] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 51.462641][ T1025] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 51.471288][ T1025] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 51.480490][ T1025] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 51.488634][ T382] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.488659][ T1025] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 51.488683][ T1025] 0 B 0 init/initramfs.c:101 func:find_link [ 51.567280][ T45] usb_ehset_test 1-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 51.579134][ T45] usb 1-1: USB disconnect, device number 6 [ 51.594013][ T36] audit: type=1400 audit(1761805391.842:288): avc: denied { read write } for pid=1012 comm="syz.3.224" name="lp0" dev="devtmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 51.595148][ T487] usb 4-1: USB disconnect, device number 6 [ 51.617574][ T36] audit: type=1400 audit(1761805391.842:289): avc: denied { open } for pid=1012 comm="syz.3.224" path="/dev/usb/lp0" dev="devtmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 51.629560][ T487] usblp0: removed [ 52.246488][ T1041] pim6reg1: entered promiscuous mode [ 52.251908][ T1041] pim6reg1: entered allmulticast mode [ 52.533847][ T487] usb 2-1: USB disconnect, device number 7 [ 52.541377][ T487] usblp1: removed [ 52.597005][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 52.597042][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.662500][ T1061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 52.672678][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 52.695863][ T1063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 52.767162][ T65] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 52.801938][ T1067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.801972][ T1067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 52.812234][ T1067] rust_binder: Error while translating object. [ 52.821541][ T1067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.828031][ T1067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 52.867058][ T487] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 52.916988][ T65] usb 4-1: Invalid ep0 maxpacket: 64 [ 53.028033][ T487] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.038332][ T487] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.047938][ T487] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.057013][ T65] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 53.058287][ T36] audit: type=1400 audit(1761805393.312:290): avc: denied { map } for pid=1068 comm="syz.2.244" path="socket:[8815]" dev="sockfs" ino=8815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.064414][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.064441][ T487] usb 2-1: SerialNumber: syz [ 53.207011][ T65] usb 4-1: Invalid ep0 maxpacket: 64 [ 53.212661][ T65] usb usb4-port1: attempt power cycle [ 53.301658][ T36] audit: type=1400 audit(1761805393.552:291): avc: denied { ioctl } for pid=1053 comm="syz.1.238" path="socket:[8736]" dev="sockfs" ino=8736 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.303406][ T1054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.335401][ T1054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.350590][ T487] usb 2-1: 0:2 : does not exist [ 53.355631][ T487] usb 2-1: unit 5: unexpected type 0x03 [ 53.363983][ T487] usb 2-1: USB disconnect, device number 8 [ 53.373173][ T820] udevd[820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.556996][ T65] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 53.577338][ T65] usb 4-1: Invalid ep0 maxpacket: 64 [ 53.717003][ T65] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 53.747364][ T65] usb 4-1: Invalid ep0 maxpacket: 64 [ 53.752907][ T65] usb usb4-port1: unable to enumerate USB device [ 53.785140][ T1071] netlink: 57 bytes leftover after parsing attributes in process `syz.2.245'. [ 53.800753][ T1071] netlink: 680 bytes leftover after parsing attributes in process `syz.2.245'. [ 53.810210][ T1071] rust_binder: Error while translating object. [ 53.810241][ T1071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.816409][ T1071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 53.955752][ T1077] FAT-fs (rnullb0): bogus number of reserved sectors [ 53.971997][ T1077] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 54.015064][ T1082] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.015087][ T1082] rust_binder: Read failure Err(EFAULT) in pid:162 [ 54.083580][ T1084] rust_binder: Write failure EINVAL in pid:164 [ 54.091263][ T1084] rust_binder: Error while translating object. [ 54.097772][ T1084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.103995][ T1084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 54.126103][ T36] audit: type=1400 audit(1761805394.372:292): avc: denied { watch } for pid=1085 comm="syz.2.251" path="/56/control" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.160365][ T1091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1091 comm=syz.2.252 [ 54.174206][ T1091] input: syz0 as /devices/virtual/input/input10 [ 54.330074][ T1098] fuse: Bad value for 'user_id' [ 54.335019][ T1098] fuse: Bad value for 'user_id' [ 55.314789][ T1110] binder: Binderfs stats mode cannot be changed during a remount [ 55.357046][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 55.404127][ T36] audit: type=1400 audit(1761805395.652:293): avc: denied { module_load } for pid=1113 comm="syz.0.260" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 55.444440][ T36] audit: type=1400 audit(1761805395.692:294): avc: denied { bind } for pid=1115 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.482316][ T1120] netlink: 'syz.3.263': attribute type 13 has an invalid length. [ 55.491607][ T1119] binder: Bad value for 'max' [ 55.516998][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 55.524013][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.548073][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 55.559853][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.567943][ T9] usb 3-1: Product: syz [ 55.572925][ T9] usb 3-1: Manufacturer: syz [ 55.586290][ T9] usb 3-1: SerialNumber: syz [ 55.598228][ T1128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 55.598330][ T9] usb 3-1: config 0 descriptor?? [ 55.608656][ T9] usb 3-1: bad CDC descriptors [ 55.620378][ T9] usb 3-1: unsupported MDLM descriptors [ 55.676427][ T36] audit: type=1400 audit(1761805395.922:295): avc: denied { append } for pid=1130 comm="syz.3.267" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.806065][ T36] audit: type=1400 audit(1761805396.052:296): avc: denied { listen } for pid=1135 comm="syz.3.268" path=2F39302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 55.833350][ T1103] /dev/nullb0: Can't lookup blockdev [ 55.839558][ T364] usb 3-1: USB disconnect, device number 7 [ 55.871181][ T1142] rust_binder: Write failure EINVAL in pid:255 [ 55.873324][ T36] audit: type=1326 audit(1761805396.122:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 55.884011][ T1143] netlink: 'syz.0.271': attribute type 16 has an invalid length. [ 55.903073][ T36] audit: type=1326 audit(1761805396.122:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 55.911386][ T1143] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 55.934970][ T36] audit: type=1326 audit(1761805396.122:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 55.944179][ T1143] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.271'. [ 55.976969][ T36] audit: type=1326 audit(1761805396.122:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 56.000660][ T36] audit: type=1326 audit(1761805396.122:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 56.024364][ T36] audit: type=1326 audit(1761805396.122:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 56.048135][ T36] audit: type=1326 audit(1761805396.122:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 56.071585][ T36] audit: type=1326 audit(1761805396.122:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 56.197655][ T846] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.204144][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.265624][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 56.266062][ T1156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.275322][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:228 [ 56.357008][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.421581][ T1162] fuse: Unknown parameter 'K8Z_ig' [ 56.440213][ T1167] overlay: Unknown parameter 'volatile\redirect_dir' [ 56.517128][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 56.524224][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.532652][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 56.540252][ T9] usb 4-1: can't read configurations, error -71 [ 56.687002][ T364] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 56.837039][ T364] usb 3-1: Using ep0 maxpacket: 16 [ 56.843300][ T364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.853473][ T364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.863900][ T364] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.873012][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.881055][ T364] usb 3-1: Product: syz [ 56.885231][ T364] usb 3-1: Manufacturer: syz [ 56.889850][ T364] usb 3-1: SerialNumber: syz [ 57.371502][ T1186] netlink: 'syz.3.281': attribute type 15 has an invalid length. [ 57.379599][ T1186] rust_binder: 273: no such ref 3 [ 57.384664][ T1186] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 57.391974][ T1186] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 57.399412][ T1186] rust_binder: Write failure EFAULT in pid:273 [ 58.056802][ T1198] overlayfs: failed to clone lowerpath [ 58.276982][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.277011][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 58.329832][ T1205] overlayfs: failed to clone lowerpath [ 58.376978][ T373] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 58.387791][ T1207] netlink: 'syz.0.288': attribute type 5 has an invalid length. [ 58.395860][ T1207] rust_binder: 1205 RLIMIT_NICE not set [ 58.529598][ T373] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 58.545791][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.553951][ T373] usb 2-1: Product: syz [ 58.558288][ T373] usb 2-1: Manufacturer: syz [ 58.563007][ T373] usb 2-1: SerialNumber: syz [ 58.790514][ T373] usb 2-1: USB disconnect, device number 9 [ 58.867011][ T382] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 58.997012][ T382] usb 1-1: device descriptor read/64, error -71 [ 59.237019][ T382] usb 1-1: device descriptor read/64, error -71 [ 59.454068][ T364] usb 3-1: 0:2 : does not exist [ 59.465476][ T364] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 59.476989][ T382] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.478533][ T364] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 59.497662][ T364] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 59.509056][ T364] usb 3-1: USB disconnect, device number 8 [ 59.520616][ T820] udevd[820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.616984][ T382] usb 1-1: device descriptor read/64, error -71 [ 59.857035][ T382] usb 1-1: device descriptor read/64, error -71 [ 59.943799][ T1282] fuse: Bad value for 'fd' [ 59.967081][ T382] usb usb1-port1: attempt power cycle [ 60.307000][ T382] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 60.328086][ T382] usb 1-1: device descriptor read/8, error -71 [ 60.458047][ T382] usb 1-1: device descriptor read/8, error -71 [ 60.481796][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.489568][ T1302] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 60.497485][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.506638][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.514551][ T1302] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 60.522327][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.531505][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.539269][ T1302] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 60.547078][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.556162][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.563826][ T1302] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 60.571669][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.580953][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.588633][ T1302] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 60.596365][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.605831][ T1302] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 60.613596][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.622744][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.631904][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.641055][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.650304][ T1302] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.318'. [ 60.707012][ T382] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.728062][ T382] usb 1-1: device descriptor read/8, error -71 [ 60.858160][ T382] usb 1-1: device descriptor read/8, error -71 [ 60.967122][ T382] usb usb1-port1: unable to enumerate USB device [ 61.089084][ T1312] rust_binder: inc_ref_done called when no active inc_refs [ 61.090266][ T1312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.097850][ T1313] rust_binder: inc_ref_done called when no active inc_refs [ 61.124858][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 61.124878][ T36] audit: type=1400 audit(1761805401.372:389): avc: denied { append } for pid=1319 comm="syz.2.323" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.221923][ T1326] rust_binder: Write failure EINVAL in pid:152 [ 61.254218][ T1333] fuse: Bad value for 'group_id' [ 61.265475][ T1333] fuse: Bad value for 'group_id' [ 61.271764][ T1333] rust_binder: Write failure EFAULT in pid:158 [ 61.274441][ T1324] rust_binder: Write failure EFAULT in pid:232 [ 61.343339][ T1341] loop7: detected capacity change from 0 to 16384 [ 61.357839][ T1341] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 61.418888][ T1343] tmpfs: Bad value for 'nr_blocks' [ 61.424382][ T1343] rust_binder: Error in use_page_slow: ESRCH [ 61.424399][ T1343] rust_binder: use_range failure ESRCH [ 61.430460][ T1343] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 61.435978][ T1343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.443943][ T1343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:164 [ 61.465921][ T36] audit: type=1400 audit(1761805401.712:390): avc: denied { relabelfrom } for pid=1344 comm="syz.1.332" name="" dev="pipefs" ino=10558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 61.767018][ T383] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 61.800280][ T36] audit: type=1400 audit(1761805402.052:391): avc: denied { nlmsg_write } for pid=1361 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 61.926988][ T383] usb 2-1: Using ep0 maxpacket: 32 [ 61.934126][ T383] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 61.942525][ T383] usb 2-1: config 0 has no interface number 0 [ 61.950331][ T383] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 61.959622][ T383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.968146][ T383] usb 2-1: Product: syz [ 61.973160][ T383] usb 2-1: Manufacturer: syz [ 61.978074][ T383] usb 2-1: SerialNumber: syz [ 61.985286][ T383] usb 2-1: config 0 descriptor?? [ 62.103304][ T1377] rust_binder: Error while translating object. [ 62.103362][ T1377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.112205][ T1377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 62.148640][ T36] audit: type=1400 audit(1761805402.402:392): avc: denied { append } for pid=1379 comm="syz.2.343" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.200398][ T1352] tipc: Started in network mode [ 62.215785][ T1352] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 62.231238][ T1352] tipc: Enabling of bearer rejected, failed to enable media [ 62.243414][ T383] usb 2-1: USB disconnect, device number 10 [ 62.477007][ T364] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.607031][ T364] usb 3-1: device descriptor read/64, error -71 [ 62.662907][ T1392] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 62.666323][ T36] audit: type=1400 audit(1761805402.912:393): avc: denied { bind } for pid=1391 comm="syz.3.347" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.694549][ T36] audit: type=1400 audit(1761805402.912:394): avc: denied { node_bind } for pid=1391 comm="syz.3.347" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.716207][ T36] audit: type=1400 audit(1761805402.912:395): avc: denied { name_bind } for pid=1391 comm="syz.3.347" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 62.867020][ T364] usb 3-1: device descriptor read/64, error -71 [ 62.927027][ T383] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 63.077015][ T383] usb 1-1: Using ep0 maxpacket: 16 [ 63.083231][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.094200][ T383] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 63.103462][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.112392][ T383] usb 1-1: config 0 descriptor?? [ 63.116998][ T364] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.257833][ T364] usb 3-1: device descriptor read/64, error -71 [ 63.278844][ T1419] syz.3.358 (1419): attempted to duplicate a private mapping with mremap. This is not supported. [ 63.497033][ T364] usb 3-1: device descriptor read/64, error -71 [ 63.520291][ T383] dragonrise 0003:0079:0011.0004: unknown global tag 0xc [ 63.527463][ T383] dragonrise 0003:0079:0011.0004: item 0 2 1 12 parsing failed [ 63.535203][ T383] dragonrise 0003:0079:0011.0004: parse failed [ 63.541484][ T383] dragonrise 0003:0079:0011.0004: probe with driver dragonrise failed with error -22 [ 63.607101][ T364] usb usb3-port1: attempt power cycle [ 63.721616][ T383] usb 1-1: USB disconnect, device number 11 [ 63.945370][ T1465] x_tables: duplicate entry at hook 1 [ 63.966434][ T1468] overlayfs: failed to clone upperpath [ 63.967037][ T364] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.998994][ T364] usb 3-1: device descriptor read/8, error -71 [ 64.128086][ T364] usb 3-1: device descriptor read/8, error -71 [ 64.253536][ T1482] random: crng reseeded on system resumption [ 64.377191][ T364] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 64.397968][ T364] usb 3-1: device descriptor read/8, error -71 [ 64.517010][ T373] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 64.528198][ T364] usb 3-1: device descriptor read/8, error -71 [ 64.637101][ T364] usb usb3-port1: unable to enumerate USB device [ 64.668025][ T373] usb 1-1: config 151 has an invalid interface number: 131 but max is 0 [ 64.676444][ T373] usb 1-1: config 151 has no interface number 0 [ 64.682825][ T373] usb 1-1: config 151 interface 131 has no altsetting 0 [ 64.691476][ T373] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 64.700565][ T373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.708600][ T373] usb 1-1: Product: syz [ 64.712767][ T373] usb 1-1: Manufacturer: syz [ 64.717395][ T373] usb 1-1: SerialNumber: syz [ 64.924011][ T36] audit: type=1400 audit(1761805405.172:396): avc: denied { getattr } for pid=1481 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.979247][ T1489] syz.0.381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.990199][ T373] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 64.997225][ T373] usb 1-1: cannot find UAC_HEADER [ 65.003938][ T373] snd-usb-audio 1-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 65.014192][ T373] usb 1-1: USB disconnect, device number 12 [ 65.063501][ T820] udevd[820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:151.131/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.122892][ T1507] x_tables: duplicate underflow at hook 1 [ 65.129009][ T36] audit: type=1326 audit(1761805405.382:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb2f8efc9 code=0x7fc00000 [ 65.294900][ T1535] exFAT-fs (rnullb0): invalid boot record signature [ 65.295399][ T1536] capability: warning: `syz.1.397' uses deprecated v2 capabilities in a way that may be insecure [ 65.301640][ T1535] exFAT-fs (rnullb0): failed to read boot sector [ 65.318973][ T1535] exFAT-fs (rnullb0): failed to recognize exfat type [ 65.325950][ T36] audit: type=1400 audit(1761805405.562:398): avc: denied { setopt } for pid=1527 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.571031][ T1554] 9pnet_fd: Insufficient options for proto=fd [ 66.329585][ T36] audit: type=1326 audit(1761805406.500:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.355046][ T36] audit: type=1326 audit(1761805406.500:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.378446][ T36] audit: type=1326 audit(1761805406.500:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f560a98d810 code=0x7ffc0000 [ 66.401805][ T36] audit: type=1326 audit(1761805406.500:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f560a98d810 code=0x7ffc0000 [ 66.425158][ T36] audit: type=1326 audit(1761805406.500:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.448971][ T36] audit: type=1326 audit(1761805406.500:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.472548][ T36] audit: type=1326 audit(1761805406.500:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.506969][ T36] audit: type=1326 audit(1761805406.500:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.538691][ T36] audit: type=1326 audit(1761805406.500:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1583 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 66.561344][ T1603] __nla_validate_parse: 26 callbacks suppressed [ 66.561372][ T1603] netlink: 108 bytes leftover after parsing attributes in process `syz.1.425'. [ 66.569483][ T1604] FAULT_INJECTION: forcing a failure. [ 66.569483][ T1604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.590318][ T1604] CPU: 1 UID: 0 PID: 1604 Comm: syz.0.424 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 66.590351][ T1604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.590362][ T1604] Call Trace: [ 66.590368][ T1604] [ 66.590375][ T1604] __dump_stack+0x21/0x30 [ 66.590405][ T1604] dump_stack_lvl+0x10c/0x190 [ 66.590429][ T1604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.590455][ T1604] dump_stack+0x19/0x20 [ 66.590479][ T1604] should_fail_ex+0x3d9/0x530 [ 66.590499][ T1604] should_fail+0xf/0x20 [ 66.590515][ T1604] should_fail_usercopy+0x1e/0x30 [ 66.590543][ T1604] _copy_from_iter+0x1a3/0x14d0 [ 66.590567][ T1604] ? __cfi__copy_from_iter+0x10/0x10 [ 66.590588][ T1604] ? __check_object_size+0x50a/0x810 [ 66.590606][ T1604] ? __cfi___check_object_size+0x10/0x10 [ 66.590623][ T1604] ? skb_page_frag_refill+0x1b6/0x500 [ 66.590652][ T1604] ? sk_page_frag_refill+0x5d/0x120 [ 66.590681][ T1604] tcp_sendmsg_locked+0x1fc6/0x4b40 [ 66.590714][ T1604] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 66.590740][ T1604] ? __kasan_check_write+0x18/0x20 [ 66.590767][ T1604] ? proc_fail_nth_write+0x17e/0x210 [ 66.590800][ T1604] ? __cfi_tcp_sendmsg+0x10/0x10 [ 66.590824][ T1604] tcp_sendmsg+0x3e/0xe0 [ 66.590847][ T1604] ? __cfi_tcp_sendmsg+0x10/0x10 [ 66.590871][ T1604] inet_sendmsg+0xb7/0x120 [ 66.590889][ T1604] __sys_sendto+0x588/0x6f0 [ 66.590918][ T1604] ? __cfi___sys_sendto+0x10/0x10 [ 66.590945][ T1604] ? __kasan_check_write+0x18/0x20 [ 66.590973][ T1604] ? __cfi_ksys_write+0x10/0x10 [ 66.590991][ T1604] __x64_sys_sendto+0xe9/0x100 [ 66.591017][ T1604] x64_sys_call+0x2c2c/0x2ee0 [ 66.591044][ T1604] do_syscall_64+0x58/0xf0 [ 66.591067][ T1604] ? clear_bhb_loop+0x50/0xa0 [ 66.591087][ T1604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.591106][ T1604] RIP: 0033:0x7f218ff8efc9 [ 66.591122][ T1604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.591137][ T1604] RSP: 002b:00007f2190db3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.591157][ T1604] RAX: ffffffffffffffda RBX: 00007f21901e5fa0 RCX: 00007f218ff8efc9 [ 66.591171][ T1604] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 66.591183][ T1604] RBP: 00007f2190db3090 R08: 0000000000000000 R09: 0000000000000000 [ 66.591195][ T1604] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 66.591207][ T1604] R13: 00007f21901e6038 R14: 00007f21901e5fa0 R15: 00007ffc0e337e28 [ 66.591223][ T1604] [ 66.860099][ T1607] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 66.867298][ T846] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.970714][ T1615] devpts: called with bogus options [ 67.764363][ T36] audit: type=1400 audit(1761805407.851:408): avc: denied { ioctl } for pid=1649 comm="syz.2.443" path="socket:[11295]" dev="sockfs" ino=11295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.785382][ T1653] overlayfs: conflicting options: metacopy=off,verity=require [ 68.817385][ T1678] netlink: 80 bytes leftover after parsing attributes in process `syz.2.454'. [ 68.994199][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.393858][ T1695] tipc: Enabling of bearer rejected, failed to enable media [ 69.686019][ T1711] mmap: syz.2.466 (1711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.818857][ T1743] overlayfs: failed to resolve './file2': -2 [ 70.123933][ T382] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 70.294382][ T382] usb 1-1: Using ep0 maxpacket: 16 [ 70.305078][ T382] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.318729][ T382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.334651][ T382] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 70.346301][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.358335][ T382] usb 1-1: Product: syz [ 70.364853][ T382] usb 1-1: Manufacturer: syz [ 70.371845][ T382] usb 1-1: SerialNumber: syz [ 70.379245][ T382] usb 1-1: config 0 descriptor?? [ 70.833666][ T382] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.849793][ T382] asix 1-1:0.0: probe with driver asix failed with error -71 [ 70.864667][ T382] usb 1-1: USB disconnect, device number 13 [ 70.896721][ T1834] fuse: Bad value for 'fd' [ 70.901761][ T1834] fuse: Bad value for 'fd' [ 70.937617][ T1841] validate_nla: 55 callbacks suppressed [ 70.937634][ T1841] netlink: 'syz.3.506': attribute type 13 has an invalid length. [ 71.510372][ T1867] devtmpfs: Unknown parameter 'fuse' [ 71.516472][ T1867] 9pnet_fd: Insufficient options for proto=fd [ 71.552727][ T1872] fuse: Unknown parameter '0xffffffffffffffff00000000000000000003' [ 71.647213][ T1892] rust_binder: Write failure EFAULT in pid:293 [ 71.788852][ T1920] tipc: Enabling of bearer rejected, media not registered [ 71.803965][ T1920] __vm_enough_memory: pid: 1920, comm: syz.0.528, bytes: 18014402804453376 not enough memory for the allocation [ 71.853414][ T1933] rust_binder: Error while translating object. [ 71.853465][ T1933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.859710][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 71.881280][ T1936] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 71.898198][ T1936] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.540'. [ 71.933125][ T1936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 72.148979][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 72.148999][ T36] audit: type=1400 audit(1761805411.970:431): avc: denied { create } for pid=1948 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.234097][ T1951] input: syz0 as /devices/virtual/input/input13 [ 72.427901][ T36] audit: type=1400 audit(1761805412.233:432): avc: denied { mount } for pid=1960 comm="syz.1.548" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.514683][ T1965] __vm_enough_memory: pid: 1965, comm: syz.0.549, bytes: 18014402804453376 not enough memory for the allocation [ 72.547163][ T1967] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 72.557906][ T36] audit: type=1400 audit(1761805412.355:433): avc: denied { relabelto } for pid=1966 comm="syz.0.550" name="104" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 72.586422][ T36] audit: type=1400 audit(1761805412.355:434): avc: denied { associate } for pid=1966 comm="syz.0.550" name="104" dev="tmpfs" ino=574 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 72.615057][ T36] audit: type=1400 audit(1761805412.383:435): avc: denied { mounton } for pid=1966 comm="syz.0.550" path="/104" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 72.643545][ T36] audit: type=1400 audit(1761805412.430:436): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.686828][ T36] audit: type=1400 audit(1761805412.449:437): avc: denied { write } for pid=289 comm="syz-executor" name="104" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 72.736708][ T36] audit: type=1400 audit(1761805412.449:438): avc: denied { remove_name } for pid=289 comm="syz-executor" name="blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 72.773272][ T36] audit: type=1400 audit(1761805412.449:439): avc: denied { rmdir } for pid=289 comm="syz-executor" name="104" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 72.799984][ T36] audit: type=1400 audit(1761805412.552:440): avc: denied { bind } for pid=1991 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.913510][ T1990] netlink: 'syz.1.556': attribute type 63 has an invalid length. [ 72.921405][ T1990] netlink: 5 bytes leftover after parsing attributes in process `syz.1.556'. [ 73.009560][ T2014] rust_binder: Write failure EFAULT in pid:336 [ 73.015771][ T2016] fuse: Unknown parameter '@' [ 73.777910][ T2054] overlayfs: failed to clone upperpath [ 73.777921][ T2055] overlayfs: failed to clone upperpath [ 73.796717][ T2057] netlink: 196 bytes leftover after parsing attributes in process `syz.1.578'. [ 73.857717][ T2072] x_tables: duplicate underflow at hook 1 [ 73.901129][ T2083] netlink: 'syz.3.588': attribute type 11 has an invalid length. [ 73.961565][ T2086] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 74.020249][ T2095] 9pnet_fd: Insufficient options for proto=fd [ 74.034489][ T2097] overlayfs: conflicting lowerdir path [ 74.086455][ T2104] rust_binder: Write failure EFAULT in pid:355 [ 74.315532][ T846] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.322254][ T2130] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 74.584705][ T2141] overlayfs: failed to clone upperpath [ 74.651989][ T2155] netlink: 'syz.3.614': attribute type 13 has an invalid length. [ 74.806227][ T2183] netlink: 124 bytes leftover after parsing attributes in process `syz.1.625'. [ 76.496997][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.497075][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 76.553161][ T2233] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 76.553181][ T2233] rust_binder: Error while translating object. [ 76.562048][ T2233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.568224][ T2233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 76.595013][ T2236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.704512][ T2248] rust_binder: Write failure EINVAL in pid:387 [ 76.711922][ T2248] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 76.718234][ T2248] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.726334][ T2248] rust_binder: Read failure Err(EFAULT) in pid:387 [ 76.753390][ T2253] EXT4-fs: dax option not supported [ 76.754297][ T2256] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.774307][ T2253] netlink: 7 bytes leftover after parsing attributes in process `syz.1.652'. [ 76.804560][ T2261] netlink: 'syz.1.654': attribute type 13 has an invalid length. [ 76.812518][ T2260] netlink: 'syz.1.654': attribute type 13 has an invalid length. [ 76.821710][ T2261] fuse: Bad value for 'fd' [ 76.866929][ T2268] 9pnet_fd: Insufficient options for proto=fd [ 77.388556][ T2275] 9pnet_fd: Insufficient options for proto=fd [ 77.395413][ T2275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 77.405242][ T2275] cgroup: Need name or subsystem set [ 77.491238][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.498991][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.506695][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.514363][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.521824][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 77.653021][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 77.653039][ T36] audit: type=1400 audit(1761805417.131:514): avc: denied { getopt } for pid=2291 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.661933][ T2292] FAT-fs (rnullb0): bogus number of reserved sectors [ 77.685505][ T2292] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 77.761499][ T2298] FAT-fs (rnullb0): bogus number of reserved sectors [ 77.768360][ T2298] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 77.800042][ T2300] SELinux: Context ϧ is not valid (left unmapped). [ 77.807242][ T2300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.807269][ T2300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:395 [ 77.837685][ T36] audit: type=1400 audit(1761805417.300:515): avc: denied { bind } for pid=2302 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.840027][ T2303] binder: Unknown parameter 'seclabe ٤&xf)' [ 77.923357][ T846] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.935829][ T2310] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 78.023532][ T36] audit: type=1400 audit(1761805417.478:516): avc: denied { getopt } for pid=2331 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.068541][ T2341] 9pnet_fd: Insufficient options for proto=fd [ 78.605374][ T2358] netlink: 104 bytes leftover after parsing attributes in process `syz.3.692'. [ 78.636002][ T2362] netlink: 92 bytes leftover after parsing attributes in process `syz.3.694'. [ 78.982011][ T2402] netlink: 'syz.3.709': attribute type 46 has an invalid length. [ 79.011189][ T2409] 9pnet_fd: Insufficient options for proto=fd [ 79.017847][ T36] audit: type=1400 audit(1761805418.417:517): avc: denied { append } for pid=2408 comm="syz.3.711" name="file0" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.041411][ T36] audit: type=1400 audit(1761805418.417:518): avc: denied { open } for pid=2408 comm="syz.3.711" path="/270/file0" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.671823][ T2437] netlink: 'syz.3.723': attribute type 6 has an invalid length. [ 80.068235][ T36] audit: type=1400 audit(1761805419.402:519): avc: denied { getopt } for pid=2447 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.088557][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.672231][ T2466] netlink: 112 bytes leftover after parsing attributes in process `syz.2.734'. [ 80.699014][ T2466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'. [ 80.728021][ T36] audit: type=1326 audit(1761805420.012:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 80.752506][ T2468] can: request_module (can-proto-0) failed. [ 80.764448][ T36] audit: type=1326 audit(1761805420.012:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 80.788133][ T36] audit: type=1326 audit(1761805420.012:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 80.811882][ T36] audit: type=1326 audit(1761805420.012:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f218ff8efc9 code=0x7ffc0000 [ 81.058802][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 81.086866][ T2504] rust_binder: 411: no such ref 1 [ 81.092025][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 81.122920][ T2507] 9pnet_fd: Insufficient options for proto=fd [ 81.143558][ T2507] overlay: ./file0 is not a directory [ 81.201042][ T2512] __vm_enough_memory: pid: 2512, comm: syz.0.752, bytes: 18014402804453376 not enough memory for the allocation [ 81.269001][ T2522] FAT-fs (rnullb0): bogus number of reserved sectors [ 81.276272][ T2522] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 81.359643][ T2527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.359888][ T2527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.366354][ T2527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 81.496497][ T2542] SELinux: failed to load policy [ 81.784367][ T2587] netlink: 72 bytes leftover after parsing attributes in process `syz.1.774'. [ 81.886162][ T2595] veth1_to_bridge: entered promiscuous mode [ 81.900804][ T2594] veth1_to_bridge: left promiscuous mode [ 82.119712][ T2615] incfs: mount failed -22 [ 82.119946][ T2616] incfs: mount failed -22 [ 82.326742][ T2630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.327010][ T2630] rust_binder: Error while translating object. [ 82.333657][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 82.349512][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:434 [ 82.446261][ T2645] erofs: dax options not supported [ 82.491913][ T2649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.492039][ T2649] rust_binder: Error while translating object. [ 82.508829][ T2649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.515152][ T2649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 82.542596][ T2654] /dev/sg0: Can't lookup blockdev [ 82.616487][ T2661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.625118][ T2661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.641508][ T2661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.670112][ T2664] netlink: 'syz.0.800': attribute type 46 has an invalid length. [ 82.976645][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 83.115156][ T31] usb 1-1: device descriptor read/64, error -71 [ 83.154678][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 83.154696][ T36] audit: type=1400 audit(1761805422.292:565): avc: denied { remount } for pid=2684 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 83.188175][ T36] audit: type=1400 audit(1761805422.320:566): avc: denied { connect } for pid=2684 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.191718][ T46] tipc: Subscription rejected, illegal request [ 83.214617][ T2685] overlay: ./file0 is not a directory [ 83.241628][ T36] audit: type=1400 audit(1761805422.376:567): avc: denied { watch_reads } for pid=2687 comm="syz.1.809" path="/206/file1" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.242034][ T2688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.809'. [ 83.267203][ T2690] netlink: 'syz.3.810': attribute type 16 has an invalid length. [ 83.273460][ T2688] tipc: Invalid UDP bearer configuration [ 83.273481][ T2688] tipc: Enabling of bearer rejected, failed to enable media [ 83.296374][ T36] audit: type=1400 audit(1761805422.423:568): avc: denied { read } for pid=2689 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.370994][ T31] usb 1-1: device descriptor read/64, error -71 [ 83.416450][ T36] audit: type=1400 audit(1761805422.545:569): avc: denied { accept } for pid=2706 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 83.447976][ T2709] 9pnet_fd: Insufficient options for proto=fd [ 83.467538][ T2715] 9pnet_fd: Insufficient options for proto=fd [ 83.542395][ T2727] tipc: Trying to set illegal importance in message [ 83.626735][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 83.672302][ T2732] overlayfs: failed to resolve './file0': -2 [ 83.765264][ T31] usb 1-1: device descriptor read/64, error -71 [ 83.908520][ T2739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=2739 comm=syz.3.825 [ 83.932629][ T2741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 84.021065][ T31] usb 1-1: device descriptor read/64, error -71 [ 84.138429][ T31] usb usb1-port1: attempt power cycle [ 84.394751][ T36] audit: type=1400 audit(1761805423.465:570): avc: denied { create } for pid=2786 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 84.500661][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 84.522970][ T31] usb 1-1: device descriptor read/8, error -71 [ 84.546210][ T2798] overlayfs: failed to clone upperpath [ 84.581711][ T36] audit: type=1400 audit(1761805423.634:571): avc: denied { create } for pid=2803 comm="syz.3.849" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.602436][ T36] audit: type=1400 audit(1761805423.634:572): avc: denied { write } for pid=2803 comm="syz.3.849" name="file2" dev="tmpfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.625798][ T36] audit: type=1400 audit(1761805423.634:573): avc: denied { open } for pid=2803 comm="syz.3.849" path="/300/file2" dev="tmpfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.649210][ T36] audit: type=1400 audit(1761805423.634:574): avc: denied { ioctl } for pid=2803 comm="syz.3.849" path="/300/file2" dev="tmpfs" ino=1665 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.683560][ T31] usb 1-1: device descriptor read/8, error -71 [ 84.759180][ T2826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.782643][ T2828] 9pnet_fd: Insufficient options for proto=fd [ 84.937596][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 84.959977][ T31] usb 1-1: device descriptor read/8, error -71 [ 84.984957][ T2840] tmpfs: Unknown parameter '5V#' [ 85.000306][ T2841] tmpfs: Unknown parameter '5V#' [ 85.098450][ T31] usb 1-1: device descriptor read/8, error -71 [ 85.214726][ T31] usb usb1-port1: unable to enumerate USB device [ 85.648471][ T2885] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 85.656311][ T2885] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 85.664792][ T2885] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 85.672568][ T2885] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 85.941561][ T2925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.001838][ T2941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 86.633751][ T2967] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 86.641563][ T2967] netlink: 5 bytes leftover after parsing attributes in process `syz.1.904'. [ 86.650754][ T2967] bridge_slave_1: left promiscuous mode [ 86.656408][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.771665][ T2974] netlink: 32 bytes leftover after parsing attributes in process `syz.2.907'. [ 86.794911][ T2976] fuse: Unknown parameter '' [ 86.808013][ T2980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 87.346146][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 87.505976][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 87.514904][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.522468][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 87.531571][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.544864][ T31] usb 1-1: config 0 descriptor?? [ 87.615579][ T3019] overlayfs: failed to clone upperpath [ 87.831674][ T3053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.939'. [ 88.008483][ T31] uclogic 0003:28BD:0042.0005: interface is invalid, ignoring [ 88.201189][ T2994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.220183][ T2994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.537121][ T9] usb 1-1: USB disconnect, device number 18 [ 88.778666][ T3103] fuse: Unknown parameter '' [ 88.785476][ T3105] 9pnet_fd: Insufficient options for proto=fd [ 88.813566][ T3118] virtiofs: Unknown parameter 'always' [ 88.848635][ T3150] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 88.857616][ T3150] netlink: 'syz.1.959': attribute type 46 has an invalid length. [ 88.865494][ T3150] netlink: 'syz.1.959': attribute type 28 has an invalid length. [ 89.022313][ T3171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3171 comm=syz.2.966 [ 89.069620][ T3182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3182 comm=syz.1.970 [ 89.080528][ T3184] tmpfs: Unknown parameter 'hu rejected, failed to enable media [ 113.529616][ T3986] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.529971][ T3986] rust_binder: Error in use_page_slow: ESRCH [ 113.536461][ T3986] rust_binder: use_range failure ESRCH [ 113.542498][ T3986] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 113.547975][ T3986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.556037][ T3986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:639 [ 113.578594][ T3988] binder: Binderfs stats mode cannot be changed during a remount [ 113.629731][ T3992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3992 comm=syz.3.1258 [ 113.714738][ T36] audit: type=1400 audit(1761805450.976:637): avc: denied { map } for pid=4000 comm="syz.3.1260" path="socket:[19539]" dev="sockfs" ino=19539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.737831][ T36] audit: type=1400 audit(1761805450.976:638): avc: denied { accept } for pid=4000 comm="syz.3.1260" path="socket:[19539]" dev="sockfs" ino=19539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.816314][ T36] audit: type=1400 audit(1761805451.061:639): avc: denied { connect } for pid=4012 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.855979][ T36] audit: type=1400 audit(1761805451.061:640): avc: denied { setattr } for pid=4012 comm="syz.3.1264" name="NETLINK" dev="sockfs" ino=19411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.926966][ T4032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.934555][ T4032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.196927][ T36] audit: type=1400 audit(1761805452.426:641): avc: denied { execute } for pid=4047 comm="syz.0.1276" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.227729][ T4050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.227910][ T4050] rust_binder: Write failure EINVAL in pid:656 [ 114.379126][ T4099] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 114.385579][ T4099] rust_binder: Error while translating object. [ 114.394450][ T4099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.400684][ T4099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 114.660918][ T382] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 114.824922][ T4103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 114.834721][ T382] usb 1-1: not running at top speed; connect to a high speed hub [ 114.843429][ T382] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 114.851568][ T382] usb 1-1: config 95 has no interface number 0 [ 114.857839][ T382] usb 1-1: config 95 interface 1 has no altsetting 0 [ 114.867043][ T382] usb 1-1: string descriptor 0 read error: -22 [ 114.873952][ T382] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 114.884749][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.972584][ T4126] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1301'. [ 114.985198][ T36] audit: type=1400 audit(1761805453.167:642): avc: denied { lock } for pid=4125 comm="syz.1.1301" path="socket:[20602]" dev="sockfs" ino=20602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 115.190475][ T4150] 9pnet_fd: Insufficient options for proto=fd [ 115.250783][ T4152] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 115.292638][ T4148] /dev/md0: Can't lookup blockdev [ 115.328430][ T382] usb 1-1: USB disconnect, device number 22 [ 115.922745][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.922825][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.936232][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.936265][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.947829][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.949459][ T4154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.976934][ T3136] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.304950][ T36] audit: type=1400 audit(1761805454.405:643): avc: denied { getopt } for pid=4190 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.345862][ T4195] devpts: called with bogus options [ 116.452698][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 116.462488][ T4218] netlink: 'syz.3.1331': attribute type 15 has an invalid length. [ 116.472361][ T4218] vlan1: entered promiscuous mode [ 116.477594][ T4218] vlan1: entered allmulticast mode [ 116.482750][ T4218] veth0_vlan: entered allmulticast mode [ 116.600042][ T36] audit: type=1400 audit(1761805454.668:644): avc: denied { bind } for pid=4238 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.630324][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 116.719493][ T4254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4254 comm=syz.3.1345 [ 116.747814][ T36] audit: type=1400 audit(1761805454.809:645): avc: denied { map } for pid=4255 comm="syz.3.1346" path="socket:[20771]" dev="sockfs" ino=20771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 116.785620][ T36] audit: type=1400 audit(1761805454.856:646): avc: denied { create } for pid=4258 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 116.878835][ T4265] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 116.886721][ T4265] netlink: 'syz.3.1349': attribute type 5 has an invalid length. [ 116.894547][ T4265] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 117.485326][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 117.494923][ T4273] netlink: 'syz.2.1352': attribute type 20 has an invalid length. [ 118.188989][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 118.188998][ T604] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.233625][ T4340] __vm_enough_memory: pid: 4340, comm: syz.0.1376, bytes: 18014402804453376 not enough memory for the allocation [ 118.327258][ T4345] rust_binder: 681: no such ref 3 [ 118.332462][ T4345] rust_binder: 681: no such ref 1 [ 118.337517][ T4345] rust_binder: Write failure EFAULT in pid:681 [ 118.388414][ T4349] binder: Bad value for 'stats' [ 118.714216][ T4388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.871388][ T36] audit: type=1326 audit(1761805456.816:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x0 [ 118.905076][ T4410] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 118.914036][ T4410] rust_binder: Write failure EINVAL in pid:709 [ 119.270545][ T4420] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 119.352103][ T4433] overlayfs: failed to clone upperpath [ 119.373236][ T4435] 9pnet_fd: Insufficient options for proto=fd [ 119.857575][ T4465] 9pnet_fd: Insufficient options for proto=fd [ 119.913395][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.913424][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.920905][ T4474] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 119.927898][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.936266][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.942987][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.949733][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.956230][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.963124][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.969764][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.976263][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.983017][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.989684][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.996532][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.003504][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.010017][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.016731][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.023347][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.029848][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.036329][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.042785][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.049262][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.055744][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.062181][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.069078][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.075609][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.082071][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.088565][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.096423][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.103578][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.110230][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.115077][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 120.116683][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.116704][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.124325][ T36] audit: type=1400 audit(1761805457.989:648): avc: denied { read } for pid=4494 comm="syz.3.1432" name="/" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.167597][ T36] audit: type=1400 audit(1761805457.999:649): avc: denied { open } for pid=4494 comm="syz.3.1432" path="/" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.289390][ T4529] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 120.289421][ T4529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 120.297470][ T4529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:730 [ 120.321806][ T4534] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1444'. [ 120.348069][ T4534] syz.0.1444 uses obsolete (PF_INET,SOCK_PACKET) [ 120.460062][ T4539] __vm_enough_memory: pid: 4539, comm: syz.0.1446, bytes: 18014402804453376 not enough memory for the allocation [ 121.226284][ T4574] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 121.254086][ T36] audit: type=1400 audit(1761805459.040:650): avc: denied { relabelto } for pid=4573 comm="syz.0.1456" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 121.282640][ T36] audit: type=1400 audit(1761805459.068:651): avc: denied { associate } for pid=4573 comm="syz.0.1456" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 121.422654][ T4574] rust_binder: Fixups oob 178 180 369 186 [ 121.422684][ T4574] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 121.428652][ T4574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.444901][ T4574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:757 [ 121.677767][ T4590] 9pnet_fd: Insufficient options for proto=fd [ 121.693981][ T4590] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 121.735318][ T4592] rust_binder: Write failure EFAULT in pid:767 [ 122.004819][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 122.176497][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.184833][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 122.193931][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.204316][ T9] usb 1-1: config 220 has no interface number 2 [ 122.210679][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.223851][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 122.230659][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 122.237530][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 122.245803][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.254960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.263032][ T9] usb 1-1: Product: syz [ 122.267278][ T9] usb 1-1: Manufacturer: syz [ 122.271912][ T9] usb 1-1: SerialNumber: syz [ 122.491832][ T4595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.491871][ T4595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 122.508414][ T9] usb 1-1: selecting invalid altsetting 0 [ 122.523535][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 122.529954][ T9] usb 1-1: No valid video chain found. [ 122.539613][ T9] usb 1-1: USB disconnect, device number 23 [ 122.660970][ T4624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4624 comm=syz.3.1474 [ 123.871614][ T4661] veth1: entered allmulticast mode [ 123.877280][ T4660] veth1: left allmulticast mode [ 124.050117][ T36] audit: type=1400 audit(1761805461.657:652): avc: denied { mounton } for pid=4675 comm="syz.0.1491" path="/262/file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.081525][ T4680] 9pnet_fd: Insufficient options for proto=fd [ 124.111668][ T4684] fuse: Unknown parameter ' D' [ 124.112384][ T36] audit: type=1400 audit(1761805461.723:653): avc: denied { mounton } for pid=4683 comm="syz.1.1494" path="/396/file0" dev="tmpfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.161054][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 124.188176][ T36] audit: type=1400 audit(1761805461.789:654): avc: denied { create } for pid=4694 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.210513][ T36] audit: type=1400 audit(1761805461.808:655): avc: denied { write } for pid=4694 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.263596][ T36] audit: type=1400 audit(1761805461.808:656): avc: denied { nlmsg_write } for pid=4694 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.284760][ T36] audit: type=1400 audit(1761805461.855:657): avc: denied { create } for pid=4702 comm="syz.0.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.298840][ T4707] 9pnet_fd: Insufficient options for proto=fd [ 124.452023][ T4742] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1514'. [ 124.452240][ T4743] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1514'. [ 124.471404][ T4742] netlink: 'syz.2.1514': attribute type 16 has an invalid length. [ 124.479547][ T4742] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1514'. [ 124.586655][ T36] audit: type=1400 audit(1761805462.173:658): avc: denied { execmem } for pid=4753 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.626812][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 124.786711][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 124.793197][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.804174][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.813971][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 124.823048][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.831714][ T31] usb 1-1: config 0 descriptor?? [ 125.212284][ T36] audit: type=1326 audit(1761805462.755:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eb2f8efc9 code=0x0 [ 125.265858][ T31] magicmouse 0003:05AC:0324.0006: unbalanced collection at end of report description [ 125.275710][ T31] magicmouse 0003:05AC:0324.0006: magicmouse hid parse failed [ 125.283276][ T31] magicmouse 0003:05AC:0324.0006: probe with driver magicmouse failed with error -22 [ 125.375586][ T4801] 9pnet_fd: Insufficient options for proto=fd [ 125.480841][ T31] usb 1-1: USB disconnect, device number 24 [ 125.730691][ T4837] fuse: blksize only supported for fuseblk [ 126.454302][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 126.468947][ T4884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1561'. [ 126.832070][ T4892] overlayfs: failed to clone upperpath [ 126.875019][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 126.875039][ T36] audit: type=1400 audit(1761805464.313:663): avc: denied { watch watch_reads } for pid=4900 comm="syz.3.1566" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.961151][ T4913] random: crng reseeded on system resumption [ 127.323467][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 127.484433][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.495708][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.505507][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.518432][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.527528][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.536407][ T31] usb 1-1: config 0 descriptor?? [ 127.545291][ T4929] fuse: Unknown parameter '' [ 127.886469][ T4967] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1590'. [ 127.895652][ T4967] tc_dump_action: action bad kind [ 127.971824][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x1 [ 127.979370][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.986899][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.994307][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 128.001806][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x3 [ 128.009260][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x3 [ 128.016706][ T31] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 13/15 [ 128.025181][ T31] plantronics 0003:047F:FFFF.0007: parse failed [ 128.031502][ T31] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 128.187113][ T4919] fuse: Bad value for 'user_id' [ 128.196374][ T4919] fuse: Bad value for 'user_id' [ 128.203705][ T31] usb 1-1: USB disconnect, device number 25 [ 128.450941][ T4999] overlayfs: missing 'workdir' [ 129.050216][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 129.211344][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.222331][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.232139][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.244980][ T31] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 129.254076][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.262819][ T31] usb 1-1: config 0 descriptor?? [ 129.652895][ T5038] overlayfs: missing 'lowerdir' [ 129.703027][ T31] nintendo 0003:057E:2019.0008: unknown main item tag 0x2 [ 129.710230][ T31] nintendo 0003:057E:2019.0008: item fetching failed at offset 4/5 [ 129.718612][ T31] nintendo 0003:057E:2019.0008: HID parse failed [ 129.726366][ T31] nintendo 0003:057E:2019.0008: probe - fail = -22 [ 129.733030][ T31] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -22 [ 129.832782][ T5057] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 130.141905][ T382] usb 1-1: USB disconnect, device number 26 [ 130.148693][ T5080] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 130.157670][ T5080] overlayfs: missing 'lowerdir' [ 130.189370][ T36] audit: type=1400 audit(1761805467.418:664): avc: denied { audit_write } for pid=5085 comm="syz.2.1629" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 130.210589][ T36] audit: type=1107 audit(1761805467.418:665): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.232824][ T5092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1632'. [ 130.527070][ T5124] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 130.550778][ T36] audit: type=1400 audit(1761805467.765:666): avc: denied { map } for pid=5130 comm="syz.1.1645" path="socket:[23286]" dev="sockfs" ino=23286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.575118][ T36] audit: type=1400 audit(1761805467.775:667): avc: denied { accept } for pid=5133 comm="syz.2.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 130.684528][ T5146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5146 comm=syz.2.1649 [ 130.820766][ T36] audit: type=1400 audit(1761805468.018:668): avc: denied { read } for pid=5175 comm="syz.3.1658" name="file0" dev="tmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.171217][ T5195] fuse: blksize only supported for fuseblk [ 131.926779][ T5216] overlayfs: missing 'lowerdir' [ 132.096943][ T36] audit: type=1400 audit(1761805469.210:669): avc: denied { watch watch_reads } for pid=5218 comm="syz.1.1671" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 132.213202][ T5229] netlink: 'syz.2.1674': attribute type 2 has an invalid length. [ 132.262141][ T5234] netlink: 'syz.1.1676': attribute type 11 has an invalid length. [ 132.270867][ T5234] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 132.278622][ T5234] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.1676'. [ 132.323802][ T5240] cgroup2: Unknown parameter 'audit' [ 132.400182][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5250 comm=syz.2.1683 [ 132.415673][ T5256] 9pnet_fd: Insufficient options for proto=fd [ 132.564541][ T5283] rust_binder: 5284 RLIMIT_NICE not set [ 132.657668][ T5306] rust_binder: Fixups oob 178 180 369 186 [ 132.657691][ T5306] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 132.663743][ T5306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.672326][ T5306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:843 [ 132.804973][ T5313] __vm_enough_memory: pid: 5313, comm: syz.0.1702, bytes: 18014402804453376 not enough memory for the allocation [ 132.882213][ T5320] kvm: kvm [5319]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa000000 [ 132.892358][ T36] audit: type=1400 audit(1761805469.970:670): avc: denied { create } for pid=5319 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.064960][ T5324] tipc: Enabling of bearer rejected, failed to enable media [ 133.078208][ T5324] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 133.313807][ T5342] 9pnet_fd: Insufficient options for proto=fd [ 133.351177][ T36] audit: type=1400 audit(1761805470.392:671): avc: denied { execute_no_trans } for pid=5346 comm="syz.1.1715" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.775864][ T5353] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.1717'. [ 133.785519][ T5354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=5354 comm=syz.2.1717 [ 134.148836][ T5374] exFAT-fs (rnullb0): invalid boot record signature [ 134.155546][ T5374] exFAT-fs (rnullb0): failed to read boot sector [ 134.162028][ T5374] exFAT-fs (rnullb0): failed to recognize exfat type [ 134.186102][ T5376] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1722'. [ 134.309848][ T5380] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1724'. [ 134.326412][ T5380] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1724'. [ 134.379444][ T5387] overlayfs: failed to clone lowerpath [ 134.443463][ T31] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 134.604408][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.624650][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.635116][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.644324][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.652399][ T31] usb 1-1: Product: syz [ 134.656670][ T31] usb 1-1: Manufacturer: syz [ 134.661329][ T31] usb 1-1: SerialNumber: syz [ 135.133220][ T36] audit: type=1326 audit(1761805472.062:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.1735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb2f8efc9 code=0x0 [ 136.830229][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 136.916137][ T5429] fuse: Unknown parameter 'f' [ 136.959032][ T5434] netlink: 'syz.3.1742': attribute type 12 has an invalid length. [ 137.072779][ T5449] x_tables: duplicate entry at hook 2 [ 137.298303][ T5474] netlink: 'syz.2.1756': attribute type 27 has an invalid length. [ 137.351198][ T5478] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1757'. [ 137.362645][ T5478] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1757'. [ 137.397898][ T31] usb 1-1: 0:2 : does not exist [ 137.416850][ T31] usb 1-1: USB disconnect, device number 27 [ 137.721451][ T5509] 8021q: VLANs not supported on lo [ 137.730763][ T5514] tipc: Enabling of bearer rejected, failed to enable media [ 137.758362][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 137.774029][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 137.798427][ T36] audit: type=1400 audit(1761805474.558:673): avc: denied { lock } for pid=5523 comm="syz.3.1775" path="socket:[25159]" dev="sockfs" ino=25159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.905806][ T36] audit: type=1326 audit(1761805474.661:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 137.942850][ T36] audit: type=1326 audit(1761805474.661:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 137.966491][ T36] audit: type=1326 audit(1761805474.661:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 137.990395][ T36] audit: type=1326 audit(1761805474.661:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 137.992476][ T5540] fuse: Bad value for 'group_id' [ 138.014837][ T36] audit: type=1326 audit(1761805474.661:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 138.019373][ T5540] fuse: Bad value for 'group_id' [ 138.043069][ T36] audit: type=1326 audit(1761805474.661:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 138.071170][ T31] usb 1-1: config 1 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.082245][ T31] usb 1-1: config 1 interface 0 altsetting 91 bulk endpoint 0x82 has invalid maxpacket 1024 [ 138.092766][ T31] usb 1-1: config 1 interface 0 altsetting 91 bulk endpoint 0x3 has invalid maxpacket 64 [ 138.102731][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.116166][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.125321][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.133423][ T31] usb 1-1: Product: ࡡ [ 138.137655][ T31] usb 1-1: Manufacturer: ఁ [ 138.143177][ T31] usb 1-1: SerialNumber: Ѕ [ 138.148715][ T5484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.156089][ T5484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.385390][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 138.398033][ T31] usb 1-1: USB disconnect, device number 28 [ 138.485100][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 138.485119][ T36] audit: type=1400 audit(1761805475.214:684): avc: denied { read } for pid=5551 comm="syz.0.1784" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 138.518375][ T36] audit: type=1400 audit(1761805475.214:685): avc: denied { open } for pid=5551 comm="syz.0.1784" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 138.677577][ T5560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:886 [ 138.726732][ T36] audit: type=1326 audit(1761805475.430:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 138.759346][ T36] audit: type=1326 audit(1761805475.430:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x7ffc0000 [ 138.878646][ T36] audit: type=1326 audit(1761805475.580:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.2.1793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560a98efc9 code=0x0 [ 138.959461][ T5592] incfs_lookup_dentry err:-111 [ 138.964413][ T5592] incfs: Can't find or create .index dir in ./file0 [ 138.971230][ T5592] incfs: mount failed -111 [ 138.977135][ T5592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.978209][ T5592] rust_binder: Error while translating object. [ 138.987929][ T5592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 138.994228][ T5592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:896 [ 139.040178][ T5597] IPv6: A: Disabled Multicast RS [ 139.918249][ T5627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5627 comm=syz.3.1807 [ 139.930810][ T5627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5627 comm=syz.3.1807 [ 140.001425][ T36] audit: type=1400 audit(1761805476.631:689): avc: denied { remount } for pid=5639 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.386444][ T5646] netlink: 'syz.3.1813': attribute type 6 has an invalid length. [ 140.394282][ T5646] netlink: 'syz.3.1813': attribute type 4 has an invalid length. [ 140.402130][ T5646] netlink: 'syz.3.1813': attribute type 6 has an invalid length. [ 140.409951][ T5646] netlink: 'syz.3.1813': attribute type 13 has an invalid length. [ 140.418036][ T5646] netlink: 'syz.3.1813': attribute type 15 has an invalid length. [ 140.425902][ T5646] netlink: 'syz.3.1813': attribute type 19 has an invalid length. [ 140.433769][ T5646] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.1813'. [ 140.457951][ T5650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=5650 comm=syz.3.1814 [ 140.458174][ T5651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=5651 comm=syz.3.1814 [ 140.926085][ T36] audit: type=1400 audit(1761805477.504:690): avc: denied { shutdown } for pid=5663 comm="syz.2.1818" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.970114][ T5670] overlayfs: failed to clone upperpath [ 141.014569][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 141.024242][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 141.686997][ T5692] incfs: Error accessing: ./file0. [ 141.692294][ T5692] incfs: mount failed -20 [ 141.721508][ T36] audit: type=1400 audit(1761805478.245:691): avc: denied { append } for pid=5698 comm="syz.2.1832" name="file0" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.845112][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1852'. [ 143.162049][ T5794] incfs: Options parsing error. -22 [ 143.167428][ T5794] incfs: mount failed -22 [ 143.173199][ T36] audit: type=1400 audit(1761805479.615:692): avc: denied { create } for pid=5793 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.478322][ T5796] tipc: Enabling of bearer rejected, failed to enable media [ 143.487104][ T5796] overlayfs: failed to clone lowerpath [ 143.718190][ T5812] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1871'. [ 143.727363][ T36] audit: type=1400 audit(1761805480.121:693): avc: denied { nlmsg_read } for pid=5811 comm="syz.2.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.769440][ T5816] /dev/loop0: Can't lookup blockdev [ 144.029269][ T5842] netlink: 'syz.1.1883': attribute type 4 has an invalid length. [ 144.047035][ T5842] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1883'. [ 144.060430][ T5842] incfs: Options parsing error. -22 [ 144.065731][ T5842] incfs: mount failed -22 [ 144.072967][ T5842] 9pnet_fd: Insufficient options for proto=fd [ 144.341682][ T5860] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1891'. [ 144.382378][ T5867] overlayfs: disabling nfs_export due to verity=on [ 144.389013][ T5867] overlayfs: missing 'lowerdir' [ 144.464631][ T5869] fuse: Bad value for 'fd' [ 145.242034][ T5906] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=20505 sclass=netlink_xfrm_socket pid=5906 comm=syz.3.1906 [ 145.460501][ T5918] 9pnet_fd: Insufficient options for proto=fd [ 145.963749][ T36] audit: type=1400 audit(1761805482.223:694): avc: denied { create } for pid=5924 comm="syz.2.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.037735][ T5936] overlay: ./file0 is not a directory [ 146.059041][ T5939] netlink: 'syz.1.1919': attribute type 16 has an invalid length. [ 146.345297][ T5953] FAT-fs (rnullb0): bogus number of reserved sectors [ 146.402520][ T5953] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 146.485663][ T36] audit: type=1400 audit(1761805482.711:695): avc: denied { read write } for pid=5956 comm="syz.0.1926" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.553438][ T36] audit: type=1400 audit(1761805482.739:696): avc: denied { open } for pid=5956 comm="syz.0.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.561626][ T5968] overlayfs: failed to resolve './file1': -2 [ 146.578414][ T36] audit: type=1400 audit(1761805482.739:697): avc: denied { ioctl } for pid=5956 comm="syz.0.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.610847][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.626347][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.633471][ T5955] bridge_slave_0: entered allmulticast mode [ 146.648510][ T5975] input: syz1 as /devices/virtual/input/input14 [ 146.677068][ T5955] bridge_slave_0: entered promiscuous mode [ 146.690333][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.697422][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.718546][ T5955] bridge_slave_1: entered allmulticast mode [ 146.725017][ T5955] bridge_slave_1: entered promiscuous mode [ 146.777729][ T3141] bridge_slave_0: left allmulticast mode [ 146.783594][ T3141] bridge_slave_0: left promiscuous mode [ 146.784659][ T5982] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 146.789611][ T3141] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.799214][ T5982] fuse: Bad value for 'fd' [ 146.889338][ T36] audit: type=1400 audit(1761805483.095:698): avc: denied { append } for pid=5985 comm="syz.0.1933" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 146.975547][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.982687][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.990046][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.997102][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.017328][ T3141] veth1_macvtap: left promiscuous mode [ 147.074900][ T3136] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.082676][ T3136] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.092386][ T3140] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.099514][ T3140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.109554][ T3136] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.116685][ T3136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.146125][ T5955] veth0_vlan: entered promiscuous mode [ 147.160079][ T5955] veth1_macvtap: entered promiscuous mode [ 147.180160][ T36] audit: type=1400 audit(1761805483.358:699): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/root/syzkaller.60hUpe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 147.218363][ T5996] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1924'. [ 147.228058][ T5996] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1924'. [ 147.237372][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1924'. [ 147.246648][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'. [ 147.276970][ T5999] rust_binder: 5: no such ref 0 [ 147.289851][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 147.359042][ T6011] cgroup: Unknown subsys name 'measure' [ 147.365154][ T6009] rust_binder: Error while translating object. [ 147.365202][ T6009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 147.371567][ T6009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:11 [ 147.399303][ T6018] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 147.437968][ T6028] overlayfs: failed to clone lowerpath [ 147.443992][ T6027] overlayfs: failed to clone lowerpath [ 147.468440][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 147.477464][ T31] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 147.485993][ T31] usb 1-1: config 0 has no interface number 0 [ 147.492486][ T31] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 147.502617][ T31] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.514431][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 147.523769][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.531855][ T31] usb 1-1: Product: syz [ 147.536445][ T31] usb 1-1: Manufacturer: syz [ 147.541123][ T31] usb 1-1: SerialNumber: syz [ 147.548226][ T31] usb 1-1: config 0 descriptor?? [ 147.554772][ T5994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.562024][ T5994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.601979][ T6040] fuse: Bad value for 'fd' [ 147.678772][ T6056] fuse: Bad value for 'fd' [ 147.692272][ T65] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 147.784226][ T5994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.792001][ T5994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.863280][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 147.871019][ T65] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 147.885734][ T65] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 147.896746][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.905071][ T65] usb 4-1: Product: syz [ 147.911220][ T65] usb 4-1: Manufacturer: syz [ 147.915893][ T65] usb 4-1: SerialNumber: syz [ 147.923301][ T65] usb 4-1: config 0 descriptor?? [ 147.930140][ T6090] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1965'. [ 147.940672][ T65] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 147.949967][ T65] usb 4-1: Detected FT232R [ 148.163273][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 148.228918][ T31] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 148.239245][ T31] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 148.251380][ T31] asix 1-1:0.251: probe with driver asix failed with error -71 [ 148.267192][ T31] usb 1-1: USB disconnect, device number 29 [ 148.385815][ T65] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.601245][ T65] usb 4-1: USB disconnect, device number 13 [ 148.613196][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.623201][ T65] ftdi_sio 4-1:0.0: device disconnected [ 148.661075][ T36] audit: type=1400 audit(1761805484.756:700): avc: denied { create } for pid=6115 comm="syz.2.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 148.704865][ T6120] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 148.713971][ T6120] overlayfs: missing 'lowerdir' [ 148.733366][ T36] audit: type=1400 audit(1761805484.822:701): avc: denied { bind } for pid=6121 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.811307][ T6135] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 148.820565][ T6135] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1984'. [ 149.008439][ T6153] overlayfs: failed to resolve './file2': -2 [ 149.155826][ T36] audit: type=1400 audit(1761805485.225:702): avc: denied { map } for pid=6154 comm="syz.3.1992" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.401752][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 149.708078][ T36] audit: type=1400 audit(1761805485.741:703): avc: denied { relabelfrom } for pid=6163 comm="syz.3.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.994185][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 150.294942][ T6182] tipc: Can't bind to reserved service type 1 [ 150.354002][ T6186] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2005'. [ 150.379044][ T6187] rust_binder: Write failure EFAULT in pid:941 [ 150.385004][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 150.453083][ T6191] fuse: Unknown parameter '000000010000000000120000x0000000000000005' [ 151.177817][ T6199] 9pnet_fd: Insufficient options for proto=fd [ 151.254262][ T6202] sock: sock_set_timeout: `syz.0.2011' (pid 6202) tries to set negative timeout [ 151.401502][ T6216] netlink: 'syz.2.2017': attribute type 32 has an invalid length. [ 151.681798][ T6246] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2027'. [ 151.902430][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 152.041022][ T45] usb 1-1: device descriptor read/64, error -71 [ 152.307504][ T45] usb 1-1: device descriptor read/64, error -71 [ 152.563273][ T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 152.701830][ T45] usb 1-1: device descriptor read/64, error -71 [ 152.782332][ T6278] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 152.790244][ T6278] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2039'. [ 152.799462][ T6278] bridge_slave_1: left promiscuous mode [ 152.805101][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.957637][ T45] usb 1-1: device descriptor read/64, error -71 [ 153.075526][ T45] usb usb1-port1: attempt power cycle [ 153.113758][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 153.113777][ T36] audit: type=1400 audit(1761805748.940:705): avc: denied { setopt } for pid=6292 comm="syz.1.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.413959][ T36] audit: type=1400 audit(1761805749.213:706): avc: denied { write } for pid=6301 comm="syz.3.2048" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 153.436080][ T45] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 153.469013][ T45] usb 1-1: device descriptor read/8, error -71 [ 153.508727][ T6305] fuse: Bad value for 'fd' [ 153.606948][ T45] usb 1-1: device descriptor read/8, error -71 [ 153.860428][ T45] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 153.882664][ T45] usb 1-1: device descriptor read/8, error -71 [ 154.020547][ T45] usb 1-1: device descriptor read/8, error -71 [ 154.136333][ T45] usb usb1-port1: unable to enumerate USB device [ 154.350716][ T6343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2063'. [ 154.362873][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 154.372098][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 154.385961][ T36] audit: type=1326 audit(1761805750.137:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560a98efc9 code=0x0 [ 154.469795][ T6358] sock: sock_set_timeout: `syz.3.2067' (pid 6358) tries to set negative timeout [ 154.841062][ T6362] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 154.857247][ T6364] rust_binder: Write failure EFAULT in pid:955 [ 154.884567][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 154.988684][ T36] audit: type=1400 audit(1761805750.703:708): avc: denied { setattr } for pid=6384 comm="syz.0.2079" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.010584][ T6387] netlink: 'syz.1.2080': attribute type 3 has an invalid length. [ 155.244373][ T36] audit: type=1326 audit(1761805750.938:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560a98efc9 code=0x0 [ 155.697134][ T6410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6410 comm=syz.0.2088 [ 155.711715][ T6410] rust_binder: Fixups oob 178 180 369 186 [ 155.711735][ T6410] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 155.717931][ T6410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.726291][ T6410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 155.942719][ T6426] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2092'. [ 155.978132][ T6429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6429 comm=syz.0.2093 [ 156.072022][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 156.080999][ T6442] erspan0: default FDB implementation only supports local addresses [ 156.097970][ T6442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 156.098003][ T6442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:999 [ 156.139423][ T6444] syz.2.2097(6444): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 156.449141][ T487] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 156.620430][ T487] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.628995][ T487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.649983][ T487] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 156.661072][ T487] usb 1-1: config 1 interface 2 has no altsetting 0 [ 156.670445][ T487] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.679807][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 156.688191][ T487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.704587][ T487] usb 1-1: Product: syz [ 156.708813][ T487] usb 1-1: Manufacturer: syz [ 156.713593][ T487] usb 1-1: SerialNumber: syz [ 156.778208][ T6488] tipc: Started in network mode [ 156.783131][ T6488] tipc: Node identity 4, cluster identity 4711 [ 156.789406][ T6488] tipc: Node number set to 4 [ 156.841777][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 156.847994][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.856271][ T31] usb 4-1: config 0 has no interface number 0 [ 156.863771][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 156.872127][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 156.881614][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.889740][ T31] usb 4-1: Product: syz [ 156.894033][ T31] usb 4-1: Manufacturer: syz [ 156.898759][ T31] usb 4-1: SerialNumber: syz [ 156.909666][ T31] usb 4-1: config 0 descriptor?? [ 156.916367][ T31] smsc75xx v1.0.0 [ 156.934501][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.944067][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.956402][ T487] usb 1-1: selecting invalid altsetting 0 [ 156.971931][ T487] usb 1-1: USB disconnect, device number 34 [ 156.985455][ T4104] udevd[4104]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.205478][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 157.207604][ T6513] overlayfs: failed to clone upperpath [ 157.301058][ T6521] 9pnet_fd: Insufficient options for proto=fd [ 157.325382][ T6528] netlink: 'syz.2.2124': attribute type 16 has an invalid length. [ 157.356940][ T6534] netlink: 'syz.2.2126': attribute type 6 has an invalid length. [ 157.753752][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.760950][ T382] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 157.761106][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.776259][ T6560] bridge_slave_0: entered allmulticast mode [ 157.782656][ T6560] bridge_slave_0: entered promiscuous mode [ 157.789449][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.796688][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.803830][ T6560] bridge_slave_1: entered allmulticast mode [ 157.810229][ T6560] bridge_slave_1: entered promiscuous mode [ 157.873534][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.880602][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.887962][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.895056][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.920705][ T3140] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.928091][ T3140] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.938745][ T3136] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.945875][ T3136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.953555][ T382] usb 1-1: Using ep0 maxpacket: 16 [ 157.957373][ T3136] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.960127][ T382] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 157.965782][ T3136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.974453][ T382] usb 1-1: config 0 has no interface number 0 [ 157.988830][ T382] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.999930][ T382] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.009900][ T382] usb 1-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.022907][ T382] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 158.032033][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.044411][ T382] usb 1-1: config 0 descriptor?? [ 158.057513][ T6560] veth0_vlan: entered promiscuous mode [ 158.072235][ T6560] veth1_macvtap: entered promiscuous mode [ 158.199562][ T6573] cgroup: fork rejected by pids controller in /syz2 [ 158.205134][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 158.218477][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 158.228261][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.239827][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.250407][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.261654][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.271307][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.292891][ T31] usb 4-1: USB disconnect, device number 14 [ 158.480317][ T382] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 158.494643][ T382] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 158.502322][ T382] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 158.509906][ T382] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 158.517364][ T382] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 158.529005][ T382] uclogic 0003:5543:0781.0009: No inputs registered, leaving [ 158.547393][ T382] uclogic 0003:5543:0781.0009: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input64 [ 158.698785][ T6554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2132'. [ 158.703086][ T6654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.002830][ T36] audit: type=1400 audit(1761805754.482:710): avc: denied { mounton } for pid=6662 comm="syz.2.2144" path="/2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 159.038048][ T36] audit: type=1400 audit(1761805754.510:711): avc: denied { sys_module } for pid=6662 comm="syz.2.2144" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.060104][ T36] audit: type=1400 audit(1761805754.539:712): avc: denied { unmount } for pid=6560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 159.115137][ T6671] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2146'. [ 159.122960][ T382] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.158706][ T36] audit: type=1400 audit(1761805754.633:713): avc: denied { read write } for pid=6676 comm="syz.2.2148" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.205802][ T36] audit: type=1400 audit(1761805754.633:714): avc: denied { open } for pid=6676 comm="syz.2.2148" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.236150][ T65] usb 1-1: USB disconnect, device number 35 [ 159.275574][ T36] audit: type=1400 audit(1761805754.746:715): avc: denied { write } for pid=6681 comm="syz.0.2149" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 159.283310][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.309237][ T36] audit: type=1400 audit(1761805754.746:716): avc: denied { ioctl } for pid=6681 comm="syz.0.2149" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 159.342357][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.375012][ T382] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.413061][ T382] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.422815][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.442133][ T382] usb 4-1: config 0 descriptor?? [ 159.508511][ T6696] rust_binder: 1014: no such ref 0 [ 159.515423][ T6696] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 159.524702][ T6696] rust_binder: 1014: no such ref 2 [ 159.530116][ T6696] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 159.548000][ T36] audit: type=1400 audit(1761805755.001:717): avc: denied { accept } for pid=6697 comm="syz.2.2154" path="socket:[28273]" dev="sockfs" ino=28273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.662616][ T382] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 159.686666][ T382] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.709558][ T382] usb 4-1: USB disconnect, device number 15 [ 159.743519][ T6709] fido_id[6709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 159.786121][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.802909][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.926988][ T36] audit: type=1400 audit(1761805755.349:718): avc: denied { setopt } for pid=6716 comm="syz.0.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.120652][ T382] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 160.259604][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 160.294258][ T382] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 160.303378][ T382] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 160.313946][ T382] usb 4-1: config 220 has no interface number 2 [ 160.320438][ T382] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 160.334397][ T382] usb 4-1: config 220 interface 0 has no altsetting 0 [ 160.341418][ T382] usb 4-1: config 220 interface 76 has no altsetting 0 [ 160.344463][ T6733] can: request_module (can-proto-0) failed. [ 160.348879][ T382] usb 4-1: config 220 interface 1 has no altsetting 0 [ 160.365566][ T382] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 160.382543][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.398111][ T382] usb 4-1: Product: syz [ 160.403168][ T382] usb 4-1: Manufacturer: syz [ 160.408112][ T382] usb 4-1: SerialNumber: syz [ 160.415360][ T6736] usb usb9: check_ctrlrecip: process 6736 (syz.2.2166) requesting ep 01 but needs 81 [ 160.425379][ T6736] usb usb9: usbfs: process 6736 (syz.2.2166) did not claim interface 0 before use [ 160.633239][ T382] usb 4-1: selecting invalid altsetting 0 [ 160.639194][ T382] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 160.648909][ T382] usb 4-1: No valid video chain found. [ 160.656776][ T6761] tmpfs: Bad value for 'nr_blocks' [ 160.657839][ T6764] usb usb7: selecting invalid altsetting 7 [ 160.668324][ T6764] usb usb7: selecting invalid altsetting 7 [ 160.676410][ T382] usb 4-1: USB disconnect, device number 16 [ 160.684368][ T6764] usb usb7: selecting invalid altsetting 7 [ 160.690260][ T6764] usb usb7: selecting invalid altsetting 7 [ 161.247401][ T6794] sock: sock_timestamping_bind_phc: sock not bind to device [ 161.270654][ T6798] x_tables: unsorted underflow at hook 4 [ 161.274380][ T6795] kvm: emulating exchange as write [ 161.366442][ T6813] fuse: Unknown parameter '"v^UsMX7$T*Q͈kKI\:jDsPwR``;bW4HSf' [ 161.397810][ T6816] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 161.422355][ T36] audit: type=1400 audit(1761805756.763:719): avc: denied { name_bind } for pid=6817 comm="syz.0.2193" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 161.733281][ T382] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 161.892429][ T382] usb 1-1: Using ep0 maxpacket: 32 [ 161.898745][ T382] usb 1-1: config 16 has an invalid interface number: 0 but max is -1 [ 161.907011][ T382] usb 1-1: config 16 has an invalid descriptor of length 41, skipping remainder of the config [ 161.917296][ T382] usb 1-1: config 16 has 1 interface, different from the descriptor's value: 0 [ 161.926276][ T382] usb 1-1: too many endpoints for config 16 interface 0 altsetting 16: 62, using maximum allowed: 30 [ 161.937173][ T382] usb 1-1: config 16 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 161.950351][ T382] usb 1-1: config 16 interface 0 has no altsetting 0 [ 161.957191][ T382] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 161.966242][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.142799][ T6851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 162.154158][ T6849] rust_binder: Error in use_page_slow: ESRCH [ 162.154180][ T6849] rust_binder: use_range failure ESRCH [ 162.162437][ T6849] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 162.168039][ T6849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 162.176159][ T6849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:120 [ 162.203224][ T6853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 162.425890][ T382] usb 1-1: string descriptor 0 read error: -71 [ 162.445242][ T382] usb 1-1: USB disconnect, device number 37 [ 163.331714][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2216'. [ 163.423511][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'. [ 163.782347][ T3140] bridge_slave_0: left allmulticast mode [ 163.788065][ T3140] bridge_slave_0: left promiscuous mode [ 163.802674][ T3140] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.966718][ T3140] veth1_macvtap: left promiscuous mode [ 163.972525][ T3140] veth0_vlan: left promiscuous mode [ 164.344829][ T3140] bridge_slave_1: left allmulticast mode [ 164.350511][ T3140] bridge_slave_1: left promiscuous mode [ 164.356262][ T3140] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.363737][ T3140] bridge_slave_0: left allmulticast mode [ 164.369504][ T3140] bridge_slave_0: left promiscuous mode [ 164.375117][ T3140] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.483920][ T3140] veth1_macvtap: left promiscuous mode [ 164.489450][ T3140] veth0_vlan: left promiscuous mode