last executing test programs: 3.489203238s ago: executing program 0 (id=2563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf25050000002800058007000100a5a57763d80da1b087ddd6b6aac6696200000c000280080002000000006907000100696200000a0001006574680004000380300007800800010008000000080001003b0200000c00040006000000000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0590000000e9ed9c079816e2aa3ec841d24a45a70038085b195bd6e811ec6af8ee46d257d67f3760489c5ce850088fe469df289f8aedc884c22bb4bb7d02460e96c2a214c3b4fdb135785807000000000000004265e0939fc66f21ea8d19b79fff93364206e7281c6087ec389ff26ebc91e1c4cf0043dc1e36ca4b1fe9fa2b7fdd3344ec7305c698f24267e501f75e875ce607fdcfd28bb2e24d67ee6fc24c5c5077927f6631516f6b2f78825668cf3e83ec2496dc980567a7de73b2a00260a9920c8354c9312dca4300d29f74bcaffc09da80e0d40898e219d2af354c638bff81026b9ae815b0834df57e9794ec33", @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250500000005000200fc000000180001801400020073797a5f74756e0000000000000000000800090008000000"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000500)="0402b810008ee02e3edcc7ba610066edb83a0b8ed036f000aa08000f20e06635200000000f22e00fc7b0080066b9ab03000066b82200000066ba000000000f302e0f01df"}], 0xaaaabe2, 0x1c, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.462917538s ago: executing program 0 (id=2564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x458d}, {r1, 0xa2a1}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 64) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r2, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) 3.422144538s ago: executing program 0 (id=2565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='%\'\x00', 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_tables_names\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 3.33449405s ago: executing program 0 (id=2568): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @broadcast}, &(0x7f0000000000)=0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_IOCTL(r3, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x5, 0x0, 0x5, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x0, 0x10007, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x8000, 0x0, 0xe8, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0x7b, 0x1, 0x5, [{@local, 0x3}, {@multicast2, 0x8000}, {@multicast2, 0x80c1}, {@broadcast, 0x3}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x7fffffff}, {@multicast2, 0x228356e2}, {@multicast1, 0x2}]}, @noop, @ssrr={0x89, 0xf, 0x76, [@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @initdev}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', r4, 0x7, 0x1, 0x8, 0x4, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x62, 0x0, 0xf6, 0x29, 0x0, @multicast1, @loopback}}}}) r5 = socket$packet(0x11, 0x2, 0x300) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000740)={0x7, 0x9}) 2.113261668s ago: executing program 2 (id=2586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000340)={[{@readahead={'readahead', 0x3d, 0x6}}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 2.111483279s ago: executing program 2 (id=2587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000103, 0x0, 0x80000000002}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0xa, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.111051188s ago: executing program 2 (id=2588): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x27b12d3888bcbafb}, "5628b7b7fe9aee2f", "4309323ec330f1b793a79ddc60f08e81", "22132bb0", "28fa874218c59ffb"}, 0x28) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0xa, 0x40, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x77}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x6, 0x5, 0xf1, 0x4}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x3, "d4db2022"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x6, 0x4, [0x2, 0x1, 0x5, 0x3], 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xff, "a5dc"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x9, 0x5d, "5a81"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3a, 'n'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x9, 0xfc, {0x7, 0x25, 0x1, 0x80, 0x8a, 0x3dd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x50, 0x2, 0x1, 0x14, "dfea3e", "4baaf5"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x9, 0x7, "", "cf1e"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x6c, 0xc, "", "bccf38"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x6, 0x6, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x1, 0x7, 0x40, 0xf7}, 0x1a, &(0x7f0000000140)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0xe5, 0xfff9}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x0, 0x439}, @ptm_cap={0x3}]}, 0x2, [{0x59, &(0x7f0000000180)=@string={0x59, 0x3, "b5244de4c29b13b1843140816994bdbf2054d1bd76b33714e6fdae9300ba61193d5aca65473bb158481d07a15b27f4e09f9cfdd524752681dd4e5294b81ea027862e196a09341c82739f2f802ebad416c2896a4a25b553"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}]}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x8001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 1.913396261s ago: executing program 1 (id=2591): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5c46744da29f38787cf1ae73cd1d732ed81c818", 0x2a}, {&(0x7f0000000000)="4b745f11758aaffc1fe988d614f11c5f4fd23a806b715485f166f8e64385d6aaf9b1b8e1b4cc629e6851550500000000000000cd77f74a9a0a05334e55848cdf311c8cb48dd454f46d3eb408f032284fd846f120f0039dbda74fee8136adde190c646af64b6be9cb1a5114d62aa76d726c4bd91f09d446a6ddab73a3a2124fe22ad9d966522f494e1e2253b9b8444e23d3ef53e580541a05953f76fd73c708ce68ee9c8fdb8e3f1f3c0d29136b2ba5284392fd50c34e2a9a000b1cb6b26bacab8ba1ea7423e29fa2ea258b873b6702d944f5dc14d17413263035e466a6ae3508f06af9d2fd775b31dea56100000000000000", 0xf2}], 0x3) close_range(r0, r0, 0x0) 1.912939531s ago: executing program 1 (id=2592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc1) socket$inet6(0xa, 0x2, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0xfff9, 0x4e24, 0x1, 0x0, 0x0, 0x20, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd27, 0x0, 0xa, 0x0, 0x1, 0x69}}, 0xf0}, 0x1, 0x0, 0x0, 0x44}, 0x4810) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1.625032876s ago: executing program 2 (id=2594): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x8030, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}]}}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futex(&(0x7f00000002c0)=0x2, 0x7, 0x1, &(0x7f00000005c0)={r7, r8+60000000}, &(0x7f0000000600)=0x2, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) 1.071111154s ago: executing program 1 (id=2597): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x4, &(0x7f0000002840)=""/117, 0x75}, 0x2}], 0x4, 0x2, 0x0) 1.045470685s ago: executing program 2 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x24}}, 0x800) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.033978295s ago: executing program 2 (id=2599): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x10000, 0xfffffff7}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x2], 0x80a0000, 0x42240}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000000)={0x800, 0x5}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0xccd2, 0x7, 0x8000, 0x9, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000002, 0xff], 0x0, 0x41847}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"]) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) 425.372014ms ago: executing program 0 (id=2600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008ef"], 0x178}}, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[]) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4180, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 425.133904ms ago: executing program 0 (id=2601): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) 247.371846ms ago: executing program 3 (id=2604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1402, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 243.353607ms ago: executing program 3 (id=2605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$int_in(r4, 0x5452, &(0x7f0000002480)=0x3) read$usbmon(r4, &(0x7f0000000080)=""/24, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) close_range(r1, 0xffffffffffffffff, 0x0) 243.005347ms ago: executing program 3 (id=2606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x1}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 242.428057ms ago: executing program 1 (id=2607): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f000000010001307feffffff00000000fe8000000000000000000000000000bb0000000000000000000000000000000100000000000200000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/87, &(0x7f0000000100)=0x57) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000826000000ef855aa3e75e037815791cbff1287aa7677bec593195470a680ec24a1c393491c7a3394df67ee78015c5e6be94bd5970be165dcafcd192103f34e52dc6cd78d75c6142f9122d823343da1bffac06ada7bc3d15b95a3a8ca11502448258166accb4464cf3fbb05a59f4e1001603a2822f"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fbdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00ff7f000006001100f30000000800150002000000f2f7e6978a7f4302a1dc5c835652105226db02c441edac0d9f310831a9d93e369828ad67cac021cdd300000000000010000000000000000000000000003cac06b4af303223728fd111acc0bc56f1aea28df0d23c61ca"], 0x50}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x0, 0x8000, 0x7, 0x4, {{0x12, 0x4, 0x3, 0x9, 0x48, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0xc, "fda3d91d0c3d73bfbf16"}, @ssrr={0x89, 0x27, 0xe8, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010100, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) (async) sendto$packet(r6, &(0x7f0000000340)="050300061400091c6202a0ffffffff006003000000007f14143488a87f4386dd62cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) (async) r9 = socket(0x10, 0x2, 0x0) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r11, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x78a1, 0x7800, 0x7ff, 0x3, {{0xc, 0x4, 0x3, 0x15, 0x30, 0x67, 0x0, 0xf, 0x2f, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x5f, 0x0, 0x2, [0x7fff]}, @noop, @rr={0x7, 0x13, 0x7b, [@remote, @local, @remote, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x22c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x37cdd3c90b48bed}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048040) (async) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) r16 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b00)={@fd={0x66642a85, 0x0, r9}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}, @fda={0x66646185, 0x8, 0x0, 0x14}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @clear_death], 0x0, 0x0, 0x0}) 200.880837ms ago: executing program 3 (id=2608): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x3, &(0x7f0000002840)=""/117, 0x75}, 0x2}], 0x4, 0x2, 0x0) 199.079727ms ago: executing program 3 (id=2609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x2e}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @free_buffer={0x40086303, r1}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 198.859547ms ago: executing program 1 (id=2610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 127.167078ms ago: executing program 3 (id=2611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x662400, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0xf, r5}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast1, @remote}, &(0x7f00000003c0)=0xfffffffffffffd99) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x7fffffff, 0x1000, {{0x18, 0x4, 0x1, 0x2c, 0x60, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x13, 0xce, [@multicast1, @multicast2, @private=0xa010102, @empty]}, @generic={0x7, 0x5, "b941ec"}, @ssrr={0x89, 0x1b, 0x82, [@remote, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @private=0xa010102]}, @noop, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x0, [{@multicast1, 0x3f4}]}, @lsrr={0x83, 0xb, 0xd2, [@loopback, @remote]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x5, 0x7fffffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x40, 0x710, 0xacf0, 0x9}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x80000001, {{0x17, 0x4, 0x1, 0x3c, 0x5c, 0x65, 0x0, 0x8f, 0x4, 0x0, @broadcast, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x7, [{@remote}, {@rand_addr=0x64010101, 0x9}, {@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@local}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xe45a}, {@rand_addr=0x64010100, 0xf}, {@private=0xa010102, 0x8}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x324, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1593, 0x8, 0x8, 0x129b}, {0x400, 0x7, 0x2, 0xffffffff}, {0xc35, 0x9, 0x3a, 0x6}]}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x34a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0xc4080}, 0x85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r16, 0x0, 0xf3a, 0x0) write(r15, &(0x7f0000000100)="ba90f57837497c1480b546b84995f494f797699da3bbdd7c27fdfca271fead6ba5920ce453f5b568d449df0ea7252ece8752490ca6e91a89b22af10b5679d179ddc1a5d50aa51e85f25c0b86daf28caaba32dfd265adaf13178e96464cb5e0a81d6efeb3611452a895afbf62886942e88cc6", 0x72) write$binfmt_misc(r16, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 1 (id=2612): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000005c0)=""/76, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x0, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x606c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000002c0)={'vlan0\x00', {0x2, 0x4e23, @private=0xa010100}}) mount$fuseblk(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ca68867725f75703d00007f00737fc4283f977e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r8, 0x2000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) kernel console output (not intermixed with test programs): TEXT_MGR already set [ 45.067108][ T305] usb 2-1: USB disconnect, device number 8 [ 45.243943][ T1152] sit0: entered promiscuous mode [ 45.249900][ T1152] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 45.257828][ T1152] netlink: 1 bytes leftover after parsing attributes in process `syz.1.237'. [ 45.398094][ T1155] fuse: Bad value for 'fd' [ 45.423317][ T1158] rust_binder: Write failure EFAULT in pid:157 [ 45.548435][ T1177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.791754][ T432] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 45.952821][ T432] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.963890][ T432] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 45.975212][ T432] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 45.986086][ T432] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 45.998121][ T432] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.007232][ T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.015246][ T432] usb 3-1: Product: syz [ 46.019405][ T432] usb 3-1: Manufacturer: syz [ 46.024007][ T432] usb 3-1: SerialNumber: syz [ 46.029463][ T1177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.131744][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 46.131744][ T1099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.240144][ T1177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.247414][ T1177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.364698][ T1195] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 46.365033][ T1196] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 46.857388][ T1177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.864682][ T1177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.901733][ T418] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.057024][ T418] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 47.066387][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.072893][ T432] cdc_ncm 3-1:1.0: failed to get mac address [ 47.075460][ T418] usb 1-1: config 0 descriptor?? [ 47.083605][ T432] cdc_ncm 3-1:1.0: bind() failure [ 47.093649][ T432] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 47.102722][ T1221] overlay: Unknown parameter 'mounts' [ 47.105392][ T1223] binder: Unknown parameter 'eeclab{E' [ 47.112655][ T432] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 47.135040][ T432] usb 3-1: USB disconnect, device number 14 [ 47.343168][ T418] usb 1-1: Cannot read MAC address [ 47.349124][ T418] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 47.362359][ T418] usb 1-1: USB disconnect, device number 9 [ 47.608544][ T1255] can: request_module (can-proto-0) failed. [ 48.284021][ T1269] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 48.292003][ T1270] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 48.541949][ T432] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.691825][ T432] usb 1-1: Using ep0 maxpacket: 16 [ 48.698104][ T432] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 48.706233][ T432] usb 1-1: config 4 has no interface number 0 [ 48.712351][ T432] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 48.722205][ T432] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.731738][ T418] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 48.732121][ T432] usb 1-1: config 4 interface 15 has no altsetting 0 [ 48.747845][ T432] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 48.756963][ T432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.764975][ T432] usb 1-1: Product: syz [ 48.769134][ T432] usb 1-1: Manufacturer: syz [ 48.773826][ T432] usb 1-1: SerialNumber: syz [ 48.779283][ T1272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.786613][ T1272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.883013][ T418] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 48.892131][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.900770][ T418] usb 3-1: config 0 descriptor?? [ 48.994348][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.003400][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.011715][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.021815][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.030591][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.040308][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.051918][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 49.051935][ T36] audit: type=1400 audit(1750709026.289:8859): avc: denied { associate } for pid=1282 comm="syz.1.283" name="memory.numa_stat" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 49.052173][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.091315][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.102448][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.118286][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.133794][ T1273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.152220][ T432] ax88179_178a 1-1:4.15: probe with driver ax88179_178a failed with error -71 [ 49.174564][ T432] usb 1-1: USB disconnect, device number 10 [ 49.220521][ T36] audit: type=1400 audit(1750709026.469:8860): avc: denied { ioctl } for pid=1324 comm="syz.0.298" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.222523][ T1327] overlayfs: missing 'workdir' [ 49.263208][ T36] audit: type=1400 audit(1750709026.499:8861): avc: denied { write } for pid=1324 comm="syz.0.298" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.311631][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.325965][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.399701][ T1342] fuse: Unknown parameter '00000000000000000000000' [ 49.470303][ T36] audit: type=1400 audit(1750709026.719:8862): avc: denied { name_bind } for pid=1349 comm="syz.3.306" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.571828][ T1362] netlink: 100 bytes leftover after parsing attributes in process `syz.3.310'. [ 49.658252][ T36] audit: type=1400 audit(1750709026.909:8863): avc: denied { getopt } for pid=1376 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.677811][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 49.688198][ T1377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1377 comm=syz.3.316 [ 50.346055][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.354626][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.764670][ T418] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 50.775091][ T418] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 50.786432][ T418] asix 3-1:0.0: probe with driver asix failed with error -71 [ 50.794936][ T418] usb 3-1: USB disconnect, device number 15 [ 71.537074][ T36] audit: type=1400 audit(1750709048.789:8864): avc: denied { setattr } for pid=1378 comm="syz.0.317" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.567160][ T1387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.567881][ T36] audit: type=1400 audit(1750709048.819:8865): avc: denied { setopt } for pid=1382 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.577468][ T1390] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 71.596146][ T36] audit: type=1400 audit(1750709048.849:8866): avc: denied { create } for pid=1382 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 71.618772][ T1390] overlayfs: conflicting options: userxattr,redirect_dir=on [ 71.630980][ T36] audit: type=1400 audit(1750709048.879:8867): avc: denied { read } for pid=1382 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.681614][ T36] audit: type=1400 audit(1750709048.929:8868): avc: denied { getopt } for pid=1397 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.722491][ T36] audit: type=1400 audit(1750709048.979:8869): avc: denied { read } for pid=1401 comm="syz.2.327" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.746163][ T36] audit: type=1400 audit(1750709048.979:8870): avc: denied { open } for pid=1401 comm="syz.2.327" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.770231][ T36] audit: type=1400 audit(1750709048.979:8871): avc: denied { write } for pid=1401 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.801737][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 71.931741][ T45] usb 1-1: device descriptor read/64, error -71 [ 72.001769][ T305] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 72.151713][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 72.157946][ T305] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.166350][ T305] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.175112][ T45] usb 1-1: device descriptor read/64, error -71 [ 72.181389][ T305] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.193225][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.204489][ T305] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.215003][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.228352][ T305] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.237678][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.251024][ T305] usb 3-1: config 0 descriptor?? [ 72.375918][ T36] audit: type=1326 audit(1750709049.629:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz.3.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff516b8e929 code=0x0 [ 72.411713][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 72.463636][ T305] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.541756][ T45] usb 1-1: device descriptor read/64, error -71 [ 72.664646][ T418] usb 3-1: USB disconnect, device number 16 [ 72.673204][ T418] usblp0: removed [ 72.781727][ T45] usb 1-1: device descriptor read/64, error -71 [ 72.891825][ T45] usb usb1-port1: attempt power cycle [ 73.127563][ T36] audit: type=1400 audit(1750709050.379:8873): avc: denied { getattr } for pid=1429 comm="syz.3.336" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.204347][ T1447] mmap: syz.3.342 (1447) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.217905][ T1449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.218753][ T1450] rust_binder: Error in use_page_slow: ESRCH [ 73.225762][ T1450] rust_binder: use_range failure ESRCH [ 73.231925][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 73.245154][ T1450] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 73.245178][ T1450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.253782][ T1450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 73.272741][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.412741][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.578471][ T1466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.593422][ T1466] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 73.601234][ T1466] netlink: 1 bytes leftover after parsing attributes in process `syz.1.349'. [ 73.651765][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 73.692387][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.822829][ T45] usb 1-1: device descriptor read/8, error -71 [ 73.931791][ T45] usb usb1-port1: unable to enumerate USB device [ 74.461773][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 74.552667][ T1501] rust_binder: Error while translating object. [ 74.552689][ T1501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 74.558952][ T1501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180 [ 74.577937][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.596051][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.604854][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.613675][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.622609][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.623302][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.631586][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.642216][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 74.642244][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.645877][ T45] usb 3-1: config 0 descriptor?? [ 74.651489][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.681989][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.690898][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.704010][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.714805][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.723700][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.733526][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.743047][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.752822][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.761791][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.770895][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.780178][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.789243][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.798086][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.806924][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.815729][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.824554][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.833460][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.842294][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.851070][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.859885][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.865870][ T45] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 74.868845][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.893886][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.905110][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.914174][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.922973][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.931813][ T1504] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.941967][ T45] playstation 0003:054C:0BA0.0005: Failed to retrieve feature with reportID 18: -71 [ 74.953241][ T45] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -71 [ 74.964012][ T45] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 74.972834][ T45] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 74.980995][ T45] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -71 [ 74.995060][ T45] usb 3-1: USB disconnect, device number 17 [ 75.971139][ T1549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.971172][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:226 [ 76.024035][ T1551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.271711][ T418] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 76.431721][ T418] usb 3-1: Using ep0 maxpacket: 16 [ 76.440200][ T418] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 76.452741][ T418] usb 3-1: config 4 has no interface number 0 [ 76.462801][ T418] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 76.481725][ T418] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.491864][ T418] usb 3-1: config 4 interface 15 has no altsetting 0 [ 76.502287][ T418] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 76.511449][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.519680][ T418] usb 3-1: Product: syz [ 76.524024][ T418] usb 3-1: Manufacturer: syz [ 76.528691][ T418] usb 3-1: SerialNumber: syz [ 76.535043][ T1551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.543517][ T1551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.726347][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 76.726364][ T36] audit: type=1326 audit(1750709053.979:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.766574][ T1551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.779973][ T36] audit: type=1326 audit(1750709053.979:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.781845][ T1551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.814253][ T1576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.389'. [ 76.825784][ T1576] netlink: 43 bytes leftover after parsing attributes in process `syz.1.389'. [ 76.834918][ T36] audit: type=1326 audit(1750709054.019:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.871748][ T1576] netlink: 'syz.1.389': attribute type 6 has an invalid length. [ 76.871820][ T36] audit: type=1326 audit(1750709054.019:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.889729][ T1576] netlink: 'syz.1.389': attribute type 5 has an invalid length. [ 76.911714][ T36] audit: type=1326 audit(1750709054.019:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.921239][ T1576] netlink: 43 bytes leftover after parsing attributes in process `syz.1.389'. [ 76.944032][ T36] audit: type=1326 audit(1750709054.019:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 76.983363][ T36] audit: type=1326 audit(1750709054.019:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 77.011857][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 77.018626][ T1099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.021370][ T36] audit: type=1326 audit(1750709054.019:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 77.070105][ T1588] tipc: Can't bind to reserved service type 2 [ 77.076351][ T36] audit: type=1326 audit(1750709054.019:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 77.129257][ T36] audit: type=1326 audit(1750709054.019:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494b18e929 code=0x7ffc0000 [ 77.587521][ T1606] binder: Bad value for 'stats' [ 77.654072][ T1609] rust_binder: 1608 RLIMIT_NICE not set [ 77.720400][ T1624] veth1_macvtap: left promiscuous mode [ 77.962180][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 77.974938][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 78.186095][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.194642][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.203412][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 78.217192][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 78.228488][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.239530][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.251147][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.263566][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.275224][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 78.287129][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.298668][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 78.310029][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 78.323455][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 78.334729][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 78.345808][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 78.356991][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 78.368317][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 78.379356][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 78.390397][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 78.401447][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 78.412496][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 78.423420][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 78.434431][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 78.445445][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 78.456430][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 78.467804][ T418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 78.480268][ T418] ax88179_178a 3-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, 4a:38:3b:cd:b5:15 [ 78.496303][ T418] usb 3-1: USB disconnect, device number 18 [ 78.502813][ T418] ax88179_178a 3-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 78.906811][ T1704] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 78.913727][ T1705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1705 comm=syz.1.427 [ 79.109274][ T1733] mmap: syz.1.437 (1733): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 79.221742][ T418] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 79.372705][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.383688][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.393436][ T418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.406957][ T418] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.416227][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.429966][ T418] usb 1-1: config 0 descriptor?? [ 79.527130][ T1758] rust_binder: Write failure EINVAL in pid:249 [ 79.530928][ T1758] rust_binder: Write failure EINVAL in pid:249 [ 79.801727][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 79.838994][ T418] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 79.848251][ T418] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 79.857248][ T418] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 79.965867][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 79.974061][ T45] usb 3-1: config 8 has an invalid interface number: 48 but max is 1 [ 79.982271][ T45] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 79.992650][ T45] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 80.001635][ T45] usb 3-1: config 8 has no interface number 0 [ 80.007827][ T45] usb 3-1: config 8 interface 48 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 80.021037][ T45] usb 3-1: config 8 interface 48 has no altsetting 0 [ 80.030176][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=da.8c [ 80.040041][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.048467][ T45] usb 3-1: Product: syz [ 80.052980][ T45] usb 3-1: Manufacturer: ࠝ [ 80.057737][ T45] usb 3-1: SerialNumber: syz [ 80.220549][ T418] usb 1-1: USB disconnect, device number 15 [ 80.811608][ T1793] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 80.825633][ T1793] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.459'. [ 81.051759][ T1798] rust_binder: Read failure Err(EFAULT) in pid:242 [ 81.170431][ T1839] rust_binder: Write failure EFAULT in pid:249 [ 81.201854][ T418] usb 3-1: USB disconnect, device number 19 [ 81.383571][ T1857] overlayfs: failed to clone upperpath [ 81.394519][ T1857] overlayfs: failed to clone upperpath [ 81.541765][ T418] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 81.660991][ T1886] can: request_module (can-proto-0) failed. [ 81.738219][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 81.738236][ T36] audit: type=1400 audit(1750709058.989:8996): avc: denied { read } for pid=1893 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.912530][ T36] audit: type=1400 audit(1750709059.169:8997): avc: denied { ioctl } for pid=1901 comm="syz.1.494" path="socket:[15072]" dev="sockfs" ino=15072 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.166241][ T36] audit: type=1400 audit(1750709059.419:8998): avc: denied { lock } for pid=1913 comm="syz.2.498" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.321214][ T1927] rust_binder: Write failure EFAULT in pid:273 [ 82.381718][ T64] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 82.542790][ T64] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.553791][ T64] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.563535][ T64] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.576481][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.583129][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 82.592214][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.600734][ T64] usb 1-1: config 0 descriptor?? [ 82.649861][ T1929] netlink: 228 bytes leftover after parsing attributes in process `syz.1.504'. [ 82.676262][ T1937] can: request_module (can-proto-0) failed. [ 82.959563][ T1956] rust_binder: Write failure EFAULT in pid:280 [ 83.007364][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.020991][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.028505][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.035703][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.042864][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.050027][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.057196][ T64] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 83.064875][ T64] logitech 0003:046D:C294.0007: hidraw0: USB HID v0.03 Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0 [ 83.085107][ T64] logitech 0003:046D:C294.0007: no inputs found [ 83.358877][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 83.706690][ T36] audit: type=1400 audit(1750709060.959:8999): avc: denied { create } for pid=1985 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.115564][ T36] audit: type=1400 audit(1750709061.369:9000): avc: denied { read } for pid=1996 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.235299][ T2016] overlayfs: conflicting options: nfs_export=on,index=off [ 84.431807][ T36] audit: type=1400 audit(1750709061.689:9001): avc: denied { read } for pid=2032 comm="syz.2.539" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.455085][ T36] audit: type=1400 audit(1750709061.689:9002): avc: denied { open } for pid=2032 comm="syz.2.539" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.510130][ T2037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296 [ 84.553043][ T2043] kvm: emulating exchange as write [ 84.718920][ T2049] rust_binder: Write failure EFAULT in pid:308 [ 84.845525][ T2055] can: request_module (can-proto-0) failed. [ 85.138798][ T418] usb 1-1: USB disconnect, device number 16 [ 85.207312][ T2079] binder: Bad value for 'stats' [ 85.212507][ T2093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.727266][ T36] audit: type=1326 audit(1750709062.979:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.1.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f494b18e929 code=0x0 [ 85.821710][ T305] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 85.974214][ T305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.985186][ T305] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.999625][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.009280][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.017761][ T305] usb 3-1: Product: syz [ 86.021985][ T305] usb 3-1: Manufacturer: syz [ 86.026758][ T305] usb 3-1: SerialNumber: syz [ 86.033903][ T305] usb 3-1: selecting invalid altsetting 1 [ 86.094093][ T2113] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 86.099885][ T2113] pim6reg0: linktype set to 769 [ 86.237085][ T2101] overlayfs: failed to resolve './file0': -2 [ 86.616153][ T305] cdc_ncm 3-1:1.0: bind() failure [ 86.628593][ T305] cdc_ncm 3-1:1.1: skipping garbage [ 86.645948][ T305] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 86.656440][ T305] cdc_ncm 3-1:1.1: bind() failure [ 86.664576][ T305] usb 3-1: USB disconnect, device number 21 [ 87.210017][ T13] tipc: Subscription rejected, illegal request [ 87.483570][ T36] audit: type=1400 audit(1750709064.739:9004): avc: denied { sqpoll } for pid=2162 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.511706][ T10] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 87.671784][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.801702][ T10] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 87.952701][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.958224][ T10] usb usb3-port1: attempt power cycle [ 88.301743][ T10] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 88.322112][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 88.451840][ T10] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 88.472074][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 88.477502][ T10] usb usb3-port1: unable to enumerate USB device [ 88.741710][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 88.892894][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 88.901722][ T45] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 88.911881][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.922196][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.931354][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.939616][ T45] usb 1-1: Product: syz [ 88.943830][ T45] usb 1-1: Manufacturer: syz [ 88.948425][ T45] usb 1-1: SerialNumber: syz [ 89.311971][ T45] usb 1-1: 0:2 : does not exist [ 89.318692][ T45] usb 1-1: USB disconnect, device number 17 [ 89.327363][ T1652] udevd[1652]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.931039][ T2238] overlayfs: failed to clone upperpath [ 89.947359][ T36] audit: type=1326 audit(1750709067.199:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f494b18e929 code=0x0 [ 89.998757][ T36] audit: type=1400 audit(1750709067.249:9006): avc: denied { accept } for pid=2239 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.613081][ T2251] fuse: Bad value for 'group_id' [ 90.618137][ T2251] fuse: Bad value for 'group_id' [ 90.748348][ T2258] cgroup: Unknown subsys name '#' [ 91.163720][ T36] audit: type=1400 audit(1750709068.419:9007): avc: denied { setopt } for pid=2272 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.626587][ T36] audit: type=1400 audit(1750709068.879:9008): avc: denied { create } for pid=2422 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.219214][ T36] audit: type=1400 audit(1750709069.469:9009): avc: denied { map } for pid=2432 comm="syz.2.634" path="socket:[16751]" dev="sockfs" ino=16751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.243078][ T36] audit: type=1400 audit(1750709069.499:9010): avc: denied { mount } for pid=2434 comm="syz.0.635" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.276213][ T2437] tmpfs: Unknown parameter 'quota' [ 92.300952][ T2440] tmpfs: Unknown parameter 'noswap' [ 92.308329][ T36] audit: type=1400 audit(1750709069.559:9011): avc: denied { bind } for pid=2439 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.338313][ T36] audit: type=1400 audit(1750709069.559:9012): avc: denied { name_bind } for pid=2439 comm="syz.0.637" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 92.361011][ T36] audit: type=1400 audit(1750709069.559:9013): avc: denied { node_bind } for pid=2439 comm="syz.0.637" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 92.578408][ T2489] overlayfs: failed to clone upperpath [ 92.601943][ T2493] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 92.972592][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 92.972608][ T36] audit: type=1400 audit(1750709070.229:9016): avc: denied { create } for pid=2500 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.274408][ T2517] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 93.285385][ T36] audit: type=1400 audit(1750709071.537:9017): avc: denied { setattr } for pid=2518 comm="syz.2.666" name="" dev="pipefs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 93.469547][ T36] audit: type=1400 audit(1750709071.717:9018): avc: denied { accept } for pid=2534 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.621834][ T36] audit: type=1400 audit(1750709071.877:9019): avc: denied { mount } for pid=2545 comm="syz.1.677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.661705][ T418] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 93.710185][ T2555] overlayfs: failed to clone upperpath [ 93.832741][ T418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.842938][ T418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.852009][ T418] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.867146][ T418] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 93.877425][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.885938][ T418] usb 3-1: Product: syz [ 93.890560][ T418] usb 3-1: Manufacturer: syz [ 93.893005][ T36] audit: type=1400 audit(1750709072.137:9020): avc: denied { accept } for pid=2567 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.895384][ T418] usb 3-1: SerialNumber: syz [ 93.920672][ T418] usb 3-1: config 0 descriptor?? [ 93.926819][ T418] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 93.933298][ T418] usb 3-1: No valid video chain found. [ 94.132231][ T418] usb 3-1: USB disconnect, device number 26 [ 94.410978][ T36] audit: type=1400 audit(1750709072.657:9021): avc: denied { create } for pid=2586 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 95.369361][ T2647] netlink: 324 bytes leftover after parsing attributes in process `syz.3.709'. [ 95.473231][ T2654] overlay: ./file0 is not a directory [ 95.493026][ T36] audit: type=1400 audit(2000000000.729:9022): avc: denied { bind } for pid=2653 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.815993][ T2679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2679 comm=syz.1.722 [ 96.385434][ T2692] overlayfs: missing 'lowerdir' [ 96.687121][ T36] audit: type=1400 audit(2000000001.919:9023): avc: denied { unmount } for pid=2727 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.823765][ T2739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.743'. [ 96.833324][ T36] audit: type=1400 audit(2000000002.069:9024): avc: denied { name_bind } for pid=2738 comm="syz.0.743" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 96.919114][ T2746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2746 comm=syz.0.745 [ 97.242410][ T2762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 97.253402][ T2762] sit0: entered promiscuous mode [ 97.259210][ T2762] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 97.267071][ T2762] netlink: 1 bytes leftover after parsing attributes in process `syz.2.751'. [ 97.277331][ T36] audit: type=1400 audit(2000000002.509:9025): avc: denied { map } for pid=2761 comm="syz.2.751" path="socket:[17285]" dev="sockfs" ino=17285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.358292][ T2768] cgroup: fork rejected by pids controller in /syz2 [ 97.813952][ T2851] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 97.821768][ T2851] netlink: 'syz.3.760': attribute type 27 has an invalid length. [ 97.829651][ T2851] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.760'. [ 97.840173][ T2851] gretap0: entered promiscuous mode [ 97.845741][ T2850] gretap0: left promiscuous mode [ 97.893473][ T2858] netlink: 272 bytes leftover after parsing attributes in process `syz.3.763'. [ 97.904312][ T2858] netlink: 'syz.3.763': attribute type 12 has an invalid length. [ 97.949006][ T2869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2869 comm=syz.3.767 [ 98.797383][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 98.797401][ T36] audit: type=1400 audit(2000000004.029:9029): avc: denied { write } for pid=2907 comm="syz.3.782" path="socket:[18451]" dev="sockfs" ino=18451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.827179][ T36] audit: type=1400 audit(2000000004.059:9030): avc: denied { getopt } for pid=2907 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.898437][ T2921] fuse: Bad value for 'group_id' [ 98.903602][ T2921] fuse: Bad value for 'group_id' [ 99.110015][ T36] audit: type=1400 audit(2000000004.339:9031): avc: denied { create } for pid=2919 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.387480][ T2938] new mount options do not match the existing superblock, will be ignored [ 99.580719][ T36] audit: type=1400 audit(2000000004.809:9032): avc: denied { mounton } for pid=2973 comm="syz.1.803" path="/211/file3" dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 99.580720][ T2974] tmpfs: Unknown parameter 'nrߏx%~' [ 99.852064][ T3011] overlayfs: failed to resolve './file0': -2 [ 99.858151][ T36] audit: type=1400 audit(2000000005.089:9033): avc: denied { mounton } for pid=3010 comm="syz.2.818" path="/file1" dev="ramfs" ino=18618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 100.068390][ T36] audit: type=1400 audit(2000000005.299:9034): avc: denied { accept } for pid=3026 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 100.187086][ T3042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 100.303688][ T3049] netlink: 'syz.0.833': attribute type 11 has an invalid length. [ 100.311748][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 100.446029][ T36] audit: type=1400 audit(2000000005.679:9035): avc: denied { map } for pid=3071 comm="syz.1.840" path="socket:[18667]" dev="sockfs" ino=18667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.480808][ T3078] tmpfs: Unknown parameter 'nswap' [ 100.499571][ T36] audit: type=1400 audit(2000000005.729:9036): avc: denied { accept } for pid=3082 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.783412][ T36] audit: type=1400 audit(2000000006.019:9037): avc: denied { setopt } for pid=3085 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.865436][ T36] audit: type=1400 audit(2000000006.099:9038): avc: denied { ioctl } for pid=3105 comm="syz.2.850" path="socket:[18255]" dev="sockfs" ino=18255 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.068834][ T3121] x_tables: duplicate underflow at hook 1 [ 101.612196][ T3146] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 101.634939][ T3150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.864'. [ 101.644771][ T3150] netlink: 43 bytes leftover after parsing attributes in process `syz.2.864'. [ 101.654024][ T3150] netlink: 'syz.2.864': attribute type 6 has an invalid length. [ 101.661944][ T3150] netlink: 'syz.2.864': attribute type 5 has an invalid length. [ 101.669634][ T3150] netlink: 43 bytes leftover after parsing attributes in process `syz.2.864'. [ 102.069189][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 102.115197][ T3189] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 102.141876][ T3189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 102.239660][ T3201] fuse: Bad value for 'fd' [ 102.685559][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.692654][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.704249][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.714077][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.719581][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.725569][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.731291][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.737930][ T3249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=3249 comm=syz.2.902 [ 102.750895][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.756726][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.762960][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.768465][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.791791][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.809985][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.824333][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.840073][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.852214][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.864418][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.876785][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.887978][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.903834][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.924441][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.935458][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.951175][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.964542][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.971238][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.977119][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.982858][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.988490][ T3245] /dev/rnullb0: Can't lookup blockdev [ 102.994391][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.000113][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.005896][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.011494][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.017320][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.023211][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.028785][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.034606][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.040171][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.061506][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.067841][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.073597][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.079174][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.084962][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.090541][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.096408][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.102139][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.107711][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.113540][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.119129][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.131542][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.137305][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.143110][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.148692][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.154471][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.160031][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.165849][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.171430][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.177362][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.183111][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.188682][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.194498][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.200052][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.206050][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.211930][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.217597][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.223386][ T3245] /dev/rnullb0: Can't lookup blockdev [ 103.243756][ T3265] can: request_module (can-proto-0) failed. [ 103.249930][ T3266] can: request_module (can-proto-0) failed. [ 103.338379][ T3274] tmpfs: Unknown parameter 'usrquota' [ 103.545813][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 103.565728][ T3317] incfs: Error accessing: ./file0. [ 103.570905][ T3317] incfs: mount failed -20 [ 104.007629][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 104.171811][ T3358] overlayfs: failed to clone upperpath [ 104.178421][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 104.178437][ T36] audit: type=1400 audit(2000000009.409:9045): avc: denied { create } for pid=3357 comm="syz.0.943" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.206023][ T36] audit: type=1400 audit(2000000009.409:9046): avc: denied { link } for pid=3357 comm="syz.0.943" name="file1" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.327450][ T3376] raw_sendmsg: syz.3.949 forgot to set AF_INET. Fix it! [ 104.684982][ T36] audit: type=1400 audit(2000000009.919:9047): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.721483][ T3390] can: request_module (can-proto-0) failed. [ 104.737495][ T3392] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 104.826289][ T3398] cgroup: fork rejected by pids controller in /syz0 [ 104.939695][ T3449] overlayfs: failed to clone upperpath [ 104.988596][ T3458] lo: entered promiscuous mode [ 105.003811][ T3456] lo: left promiscuous mode [ 105.271774][ T3503] fuse: Bad value for 'fd' [ 105.714595][ T3528] overlayfs: failed to clone lowerpath [ 105.721126][ T3528] xfrm0: mtu less than device minimum [ 105.744665][ T3535] overlay: Unknown parameter 'mounts' [ 105.758520][ T3540] veth1_to_bond: entered allmulticast mode [ 105.764624][ T3540] veth1_to_bond: entered promiscuous mode [ 105.770969][ T3540] veth1_to_bond: left promiscuous mode [ 105.776629][ T3540] veth1_to_bond: left allmulticast mode [ 105.911685][ T36] audit: type=1400 audit(2000000011.139:9048): avc: denied { mounton } for pid=3568 comm="syz.1.996" path="/263/file0" dev="tmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.111714][ T36] audit: type=1400 audit(2000000011.339:9049): avc: denied { listen } for pid=3596 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.131523][ T36] audit: type=1400 audit(2000000011.339:9050): avc: denied { accept } for pid=3596 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.823200][ T3620] process 'syz.3.1015' launched '/dev/fd/5' with NULL argv: empty string added [ 106.827415][ T36] audit: type=1400 audit(2000000012.059:9051): avc: denied { execute } for pid=3619 comm="syz.3.1015" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.853699][ T36] audit: type=1400 audit(2000000012.069:9052): avc: denied { execute_no_trans } for pid=3619 comm="syz.3.1015" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.782417][ T36] audit: type=1326 audit(2000000013.019:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44058e929 code=0x7fc00000 [ 107.819896][ T508] tipc: Subscription rejected, illegal request [ 107.845658][ T3660] tipc: Started in network mode [ 107.850560][ T3660] tipc: Node identity 8, cluster identity 3 [ 107.856518][ T3660] tipc: Node number set to 8 [ 107.872194][ T3662] overlayfs: failed to clone upperpath [ 108.150984][ T3680] tmpfs: Unknown parameter 'nCOp' [ 108.433692][ T36] audit: type=1400 audit(2000000013.669:9054): avc: denied { create } for pid=3708 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.242730][ T3775] /dev/rnullb0: Can't lookup blockdev [ 109.299736][ T3784] incfs: Error accessing: ./file0. [ 109.305403][ T3784] incfs: mount failed -20 [ 109.530870][ T3792] overlayfs: failed to clone upperpath [ 109.553127][ T3794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.706093][ T36] audit: type=1400 audit(2000000014.939:9055): avc: denied { search } for pid=3819 comm="syz.2.1086" name="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.728730][ T36] audit: type=1400 audit(2000000014.959:9056): avc: denied { read } for pid=3819 comm="syz.2.1086" name="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.751298][ T36] audit: type=1400 audit(2000000014.959:9057): avc: denied { open } for pid=3819 comm="syz.2.1086" path="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.837299][ T36] audit: type=1400 audit(2000000015.069:9058): avc: denied { bind } for pid=3823 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.696145][ T3841] overlayfs: failed to clone upperpath [ 111.345661][ T3857] fuse: Bad value for 'fd' [ 111.600013][ T36] audit: type=1400 audit(2000000016.829:9059): avc: denied { map } for pid=3898 comm="syz.0.1113" path="socket:[21583]" dev="sockfs" ino=21583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.884562][ T3932] can: request_module (can-proto-0) failed. [ 112.180868][ T3968] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1137'. [ 112.618755][ T3976] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1140'. [ 113.285419][ T36] audit: type=1400 audit(2000000018.519:9060): avc: denied { shutdown } for pid=4008 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.319615][ T4012] x_tables: duplicate underflow at hook 1 [ 113.711875][ T4034] overlayfs: failed to clone upperpath [ 113.871659][ T36] audit: type=1400 audit(2000000019.089:9061): avc: denied { lock } for pid=4051 comm="syz.1.1168" path="socket:[21889]" dev="sockfs" ino=21889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.890052][ T4050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1167'. [ 113.921712][ T36] audit: type=1400 audit(2000000019.149:9062): avc: denied { accept } for pid=4056 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.981979][ T4061] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1172'. [ 114.436267][ T4126] 9p: Unknown Cache mode or invalid value mmapk [ 114.644950][ T36] audit: type=1400 audit(2000000019.879:9063): avc: denied { create } for pid=4138 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.990632][ T36] audit: type=1326 audit(2000000020.219:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff516b2ab19 code=0x7fc00000 [ 115.382956][ T4197] overlayfs: failed to clone upperpath [ 115.568135][ T4231] overlayfs: failed to clone lowerpath [ 115.869153][ T4277] /dev/rnullb0: Can't lookup blockdev [ 115.962157][ T36] audit: type=1400 audit(2000000021.184:9065): avc: denied { audit_write } for pid=4291 comm="syz.1.1249" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.016001][ T36] audit: type=1400 audit(2000000021.242:9066): avc: denied { write } for pid=4303 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.130971][ T4322] fuse: Bad value for 'group_id' [ 116.136023][ T4322] fuse: Bad value for 'group_id' [ 116.164965][ T4329] fuse: Bad value for 'fd' [ 116.195123][ T36] audit: type=1400 audit(2000000021.416:9067): avc: denied { ioctl } for pid=4337 comm="syz.3.1265" path="socket:[21019]" dev="sockfs" ino=21019 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.196286][ T4338] IPv6: syztnl1: Disabled Multicast RS [ 116.558182][ T4373] overlayfs: failed to clone upperpath [ 116.791878][ T4398] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1287'. [ 118.136437][ T4525] netlink: 'syz.2.1335': attribute type 12 has an invalid length. [ 118.178940][ T4538] fuse: Unknown parameter '' [ 118.188648][ T4540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'. [ 118.336712][ T36] audit: type=1400 audit(2000000023.484:9068): avc: denied { bind } for pid=4565 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.662753][ T4581] overlayfs: failed to clone upperpath [ 118.696660][ T4593] netlink: 'syz.1.1358': attribute type 4 has an invalid length. [ 118.704561][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'. [ 118.714203][ T4593] xt_NFQUEUE: number of total queues is 0 [ 119.336375][ T4629] binder: Unknown parameter 'stais' [ 119.748714][ T36] audit: type=1400 audit(2000000024.866:9069): avc: denied { create } for pid=4641 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.788148][ T4650] overlay: ./file0 is not a directory [ 119.883322][ T36] audit: type=1326 audit(2000000025.003:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 119.906780][ T36] audit: type=1326 audit(2000000025.003:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 119.930608][ T36] audit: type=1326 audit(2000000025.003:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 119.954451][ T36] audit: type=1326 audit(2000000025.003:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cb2190847 code=0x7ffc0000 [ 120.381160][ T4676] overlayfs: failed to resolve './file1': -2 [ 120.392965][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 120.392983][ T36] audit: type=1400 audit(2000000025.500:9084): avc: denied { create } for pid=4677 comm="syz.0.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.714616][ T4703] overlay: ./file0 is not a directory [ 120.873053][ T4709] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1398'. [ 120.990248][ T4721] fuse: Bad value for 'group_id' [ 120.995364][ T4721] fuse: Bad value for 'group_id' [ 121.248501][ T4727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4727 comm=syz.0.1405 [ 121.281610][ T4734] overlayfs: failed to clone upperpath [ 121.323185][ T4745] /dev/rnullb0: Can't lookup blockdev [ 121.446301][ T4768] tipc: Enabling of bearer rejected, failed to enable media [ 121.462389][ T4774] fuse: Bad value for 'fd' [ 121.677615][ T4829] fuse: Bad value for 'group_id' [ 121.682678][ T4829] fuse: Bad value for 'group_id' [ 121.689409][ T4829] /dev/loop0: Can't lookup blockdev [ 121.757504][ T4843] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1449'. [ 122.071896][ T4868] overlayfs: failed to clone upperpath [ 122.108550][ T4875] overlay: Unknown parameter ''4yC/#`ȍM~ [ 122.108550][ T4875] k~Li:W rejected, failed to enable media [ 147.896531][ T36] audit: type=1400 audit(2000000052.686:9171): avc: denied { map } for pid=6007 comm="syz.2.1880" path="socket:[26361]" dev="sockfs" ino=26361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.191838][ T6038] overlayfs: failed to clone upperpath [ 148.198076][ T6038] overlayfs: failed to clone upperpath [ 148.222101][ T6045] No source specified [ 148.227268][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 148.716214][ T6056] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 148.725611][ T6056] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 148.748227][ T6059] overlayfs: failed to clone upperpath [ 148.762241][ T6061] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 148.814507][ T6079] overlay: ./file0 is not a directory [ 148.814522][ T6081] overlay: ./file0 is not a directory [ 149.080296][ T6118] batadv_slave_0: entered promiscuous mode [ 149.102664][ T6117] batadv_slave_0: left promiscuous mode [ 149.175911][ T6130] 9pnet_fd: Insufficient options for proto=fd [ 149.431431][ T6159] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 150.018963][ T6197] overlayfs: failed to clone upperpath [ 150.269750][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 150.269767][ T36] audit: type=1400 audit(2000000055.047:9175): avc: denied { unlink } for pid=291 comm="syz-executor" name="cgroup" dev="tmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 150.392432][ T6224] 9pnet: Could not find request transport: lm=0x0000000000000003 [ 150.453350][ T6240] /dev/rnullb0: Can't lookup blockdev [ 150.576426][ T6258] tipc: Enabling of bearer rejected, failed to enable media [ 150.656279][ T6260] overlayfs: failed to clone upperpath [ 150.848691][ T36] audit: type=1326 audit(2000000055.625:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7fc00000 [ 150.882555][ T6269] overlayfs: failed to clone upperpath [ 150.882609][ T6268] overlayfs: failed to clone upperpath [ 151.005939][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1975'. [ 151.025023][ T6279] tmpfs: Bad value for 'size' [ 151.046066][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 151.165404][ T36] audit: type=1400 audit(2000000055.934:9177): avc: denied { create } for pid=6289 comm="syz.3.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.234710][ T36] audit: type=1400 audit(2000000056.013:9178): avc: denied { create } for pid=6295 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.255042][ T36] audit: type=1400 audit(2000000056.013:9179): avc: denied { bind } for pid=6295 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.275363][ T36] audit: type=1400 audit(2000000056.013:9180): avc: denied { write } for pid=6295 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.295912][ T36] audit: type=1400 audit(2000000056.013:9181): avc: denied { nlmsg_read } for pid=6295 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.816557][ T36] audit: type=1400 audit(2000000056.592:9182): avc: denied { execmem } for pid=6332 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.878841][ T36] audit: type=1400 audit(2000000056.651:9183): avc: denied { module_load } for pid=6332 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 151.878852][ T6333] Invalid ELF header type: 2 != 1 [ 151.903891][ T36] audit: type=1326 audit(2000000056.651:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.1994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44058e929 code=0x0 [ 163.000043][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 163.000061][ T36] audit: type=1326 audit(2000000067.745:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 163.043593][ T36] audit: type=1326 audit(2000000067.745:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 163.068919][ T36] audit: type=1326 audit(2000000067.755:9190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 163.097406][ T36] audit: type=1326 audit(2000000067.755:9191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 163.121087][ T36] audit: type=1326 audit(2000000067.755:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb218e929 code=0x7ffc0000 [ 163.194572][ T6388] overlayfs: failed to clone upperpath [ 163.226772][ T6400] 9pnet_fd: Insufficient options for proto=fd [ 163.987363][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.994502][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.001608][ T6442] bridge_slave_0: entered allmulticast mode [ 164.007804][ T6442] bridge_slave_0: entered promiscuous mode [ 164.015862][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.023002][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.030165][ T6442] bridge_slave_1: entered allmulticast mode [ 164.036355][ T6442] bridge_slave_1: entered promiscuous mode [ 164.078258][ T46] bridge_slave_1: left allmulticast mode [ 164.084029][ T46] bridge_slave_1: left promiscuous mode [ 164.089905][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.097962][ T46] bridge_slave_0: left allmulticast mode [ 164.103592][ T46] bridge_slave_0: left promiscuous mode [ 164.109304][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.236667][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.243754][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.251042][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.258096][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.270426][ T46] tipc: Disabling bearer [ 164.275867][ T46] tipc: Left network mode [ 164.281739][ T46] veth1_macvtap: left promiscuous mode [ 164.287336][ T46] veth0_vlan: left promiscuous mode [ 164.323018][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.330474][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.340057][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.347122][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.358085][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.365128][ T508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.390471][ T6442] veth0_vlan: entered promiscuous mode [ 164.400849][ T6442] veth1_macvtap: entered promiscuous mode [ 164.428621][ T6449] can: request_module (can-proto-0) failed. [ 164.818503][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.969845][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.979838][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 164.989057][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.997563][ T64] usb 4-1: config 0 descriptor?? [ 165.407114][ T64] logitech-djreceiver 0003:046D:C71F.0008: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 165.607334][ T305] usb 4-1: USB disconnect, device number 3 [ 165.976189][ T36] audit: type=1400 audit(2000000070.721:9193): avc: denied { listen } for pid=6511 comm="syz.2.2057" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.135569][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 166.146961][ T6527] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 166.146985][ T6527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 166.155832][ T6527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:7 [ 166.198834][ T6535] rust_binder: Error in use_page_slow: ESRCH [ 166.207912][ T6535] rust_binder: use_range failure ESRCH [ 166.214219][ T6535] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 166.228582][ T6535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 166.237922][ T6535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:12 [ 166.280991][ T6541] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 166.374389][ T6548] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 166.390937][ T6550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.630887][ T64] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 166.775593][ T6562] fuse: Unknown parameter 'f({2Lp Mb`Y' [ 166.787269][ T36] audit: type=1400 audit(2000000071.530:9194): avc: denied { read } for pid=6563 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.799421][ T6566] fuse: Unknown parameter '' [ 166.813169][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.823840][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.834397][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.843966][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.852606][ T64] usb 4-1: Product: syz [ 166.856785][ T64] usb 4-1: Manufacturer: syz [ 166.861579][ T64] usb 4-1: SerialNumber: syz [ 166.890994][ T6571] overlayfs: failed to clone upperpath [ 167.073334][ T6550] rust_binder: Error while translating object. [ 167.073356][ T6550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 167.079561][ T6550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:18 [ 167.090069][ T64] usb 4-1: 0:2 : does not exist [ 167.106469][ T64] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 167.121568][ T64] usb 4-1: USB disconnect, device number 4 [ 167.133221][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.474468][ T6591] /dev/rnullb0: Can't lookup blockdev [ 167.603121][ T6593] binder: Unknown parameter 'uid>00000000000000000000' [ 167.641331][ T6597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.088165][ T6638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6638 comm=syz.0.2106 [ 168.320470][ T36] audit: type=1400 audit(2000000073.058:9195): avc: denied { shutdown } for pid=6647 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.573372][ T6651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 168.925162][ T6683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.934752][ T6683] rust_binder: Error while translating object. [ 168.941193][ T6683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.947689][ T6683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 169.048486][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 169.134985][ T36] audit: type=1326 audit(2000000073.877:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.135182][ T6707] binder: Unknown parameter '' [ 169.158624][ T36] audit: type=1326 audit(2000000073.877:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.187317][ T36] audit: type=1326 audit(2000000073.907:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.212233][ T36] audit: type=1326 audit(2000000073.907:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.236022][ T36] audit: type=1326 audit(2000000073.907:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.260987][ T36] audit: type=1326 audit(2000000073.907:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.290270][ T36] audit: type=1326 audit(2000000073.907:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.314260][ T36] audit: type=1326 audit(2000000073.907:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.337959][ T36] audit: type=1326 audit(2000000073.927:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.3.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59ab8e929 code=0x7ffc0000 [ 169.466941][ T6733] SELinux: failed to load policy [ 169.482690][ T6735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.252988][ T6783] overlayfs: failed to clone upperpath [ 171.240559][ T6822] netlink: 'syz.0.2173': attribute type 2 has an invalid length. [ 171.803050][ T6863] overlayfs: failed to resolve './file1/file0': -2 [ 171.838762][ T6870] overlayfs: failed to clone upperpath [ 172.431143][ T6904] overlayfs: failed to clone upperpath [ 172.795723][ T6934] /dev/rnullb0: Can't open blockdev [ 172.862561][ T6948] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 172.969639][ T6963] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2230'. [ 173.097079][ T6993] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2243'. [ 173.114423][ T6995] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2244'. [ 173.132181][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 173.386949][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 173.526733][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 173.526750][ T36] audit: type=1400 audit(2000000078.263:9215): avc: denied { mounton } for pid=7035 comm="syz.3.2259" path="/proc/74/task" dev="proc" ino=29040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.613683][ T7049] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 173.625622][ T7049] overlayfs: missing 'lowerdir' [ 173.713145][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2269'. [ 173.726255][ T7060] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2269'. [ 173.783901][ T7068] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2273'. [ 173.849329][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.868485][ T7080] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2277'. [ 173.888077][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'. [ 173.899296][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.906725][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.913376][ T7080] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2277'. [ 173.927204][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.947680][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.968459][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 173.989866][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.008423][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.022267][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.038524][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.049194][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.061850][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.074660][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.087564][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.111445][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.134808][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.155016][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.172809][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.185806][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.198634][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.212825][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.224689][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.237612][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.250502][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.263258][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.276235][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.289114][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.307554][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.325812][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.343796][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.361458][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.379744][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.389423][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.403923][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.418837][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.430306][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.442806][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.461416][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.476991][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.494716][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.512330][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.519575][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.532007][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.548377][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.558501][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.565042][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.577855][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.591068][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.603312][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.616335][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.629276][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.642070][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.658545][ T7076] overlay: Unknown parameter 'smackfsfloor' [ 174.795512][ T7047] rust_binder: Write failure EINVAL in pid:79 [ 174.795698][ T7047] incfs: iterate_incfs_dir / -22 [ 174.809365][ T7047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.814704][ T7047] rust_binder: Error in use_page_slow: ESRCH [ 174.821469][ T7047] rust_binder: use_range failure ESRCH [ 174.827533][ T7047] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 174.833331][ T7047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 174.841372][ T7047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:79 [ 175.277785][ T7118] overlayfs: failed to resolve './file0/file0': -2 [ 176.019567][ T36] audit: type=1400 audit(2000000080.752:9216): avc: denied { module_load } for pid=7136 comm="syz.1.2297" path="/dev/full" dev="tmpfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 176.019578][ T7137] Invalid ELF header len 50 [ 176.566311][ T7182] overlayfs: failed to clone upperpath [ 176.647365][ T36] audit: type=1400 audit(2000000081.381:9217): avc: denied { relabelto } for pid=7202 comm="syz.0.2325" name="file0" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 176.678782][ T36] audit: type=1400 audit(2000000081.411:9218): avc: denied { rmdir } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 176.744665][ T7220] tipc: New replicast peer: 255.255.255.255 [ 176.750921][ T7220] tipc: Enabled bearer , priority 10 [ 177.275585][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.282752][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.289797][ T7260] bridge_slave_0: entered allmulticast mode [ 177.296172][ T7260] bridge_slave_0: entered promiscuous mode [ 177.302791][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.309817][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.317289][ T7260] bridge_slave_1: entered allmulticast mode [ 177.323529][ T7260] bridge_slave_1: entered promiscuous mode [ 177.363657][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.370737][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.378067][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.385111][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.400521][ T304] bridge_slave_1: left allmulticast mode [ 177.406212][ T304] bridge_slave_1: left promiscuous mode [ 177.411884][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.419279][ T304] bridge_slave_0: left allmulticast mode [ 177.425378][ T304] bridge_slave_0: left promiscuous mode [ 177.431070][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.527733][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.535580][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.545512][ T304] veth1_macvtap: left promiscuous mode [ 177.551031][ T304] veth0_vlan: left promiscuous mode [ 177.584146][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.591214][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.599967][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.607127][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.642576][ T7260] veth0_vlan: entered promiscuous mode [ 177.657868][ T7260] veth1_macvtap: entered promiscuous mode [ 177.950429][ T306] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 178.077940][ T7299] netlink: 'syz.1.2355': attribute type 4 has an invalid length. [ 178.085756][ T7299] __nla_validate_parse: 3 callbacks suppressed [ 178.085776][ T7299] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2355'. [ 178.101129][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 178.103072][ T36] audit: type=1326 audit(2000000082.841:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.2355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x0 [ 178.115876][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.139566][ T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.149930][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.159145][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.167408][ T306] usb 3-1: Product: syz [ 178.172195][ T306] usb 3-1: Manufacturer: syz [ 178.172631][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 178.176802][ T306] usb 3-1: SerialNumber: syz [ 178.392659][ T306] usb 3-1: 0:2 : does not exist [ 178.399781][ T306] usb 3-1: USB disconnect, device number 27 [ 178.919919][ T7328] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 178.919944][ T7328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 178.928167][ T7328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:14 [ 179.002344][ T36] audit: type=1400 audit(2000000083.741:9220): avc: denied { mounton } for pid=7344 comm="syz.1.2372" path="/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 179.089071][ T7361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.089478][ T7361] rust_binder: Error in use_page_slow: ESRCH [ 179.096051][ T7361] rust_binder: use_range failure ESRCH [ 179.102331][ T7361] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 179.108126][ T7361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 179.116637][ T7361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:96 [ 179.131387][ T7362] overlayfs: failed to clone upperpath [ 179.154063][ T7366] binder: Bad value for 'stats' [ 179.155263][ T7364] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 150) [ 179.158990][ T36] audit: type=1400 audit(2000000083.891:9221): avc: denied { getattr } for pid=7363 comm="syz.2.2378" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.159066][ T7364] rust_binder: Error while translating object. [ 179.192266][ T7364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.198591][ T7364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 179.209330][ T7364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.417553][ T7381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 179.434901][ T7381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.435287][ T7381] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 179.442038][ T7381] rust_binder: Error while translating object. [ 179.451843][ T7381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.458272][ T7381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 179.497456][ T7390] netlink: 'syz.2.2386': attribute type 4 has an invalid length. [ 179.500116][ T36] audit: type=1400 audit(2000000084.231:9222): avc: denied { create } for pid=7391 comm="syz.3.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.506678][ T7390] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2386'. [ 179.570437][ T7400] fuse: Unknown parameter '0x0000000000000003' [ 179.646523][ T7420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 179.687179][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.699111][ T36] audit: type=1326 audit(2000000084.431:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x0 [ 179.740688][ T7432] SELinux: security_context_str_to_sid () failed with errno=-22 [ 179.802430][ T7448] rust_binder: Error while translating object. [ 179.802460][ T7448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.808677][ T7448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 179.885886][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2408'. [ 180.048010][ T36] audit: type=1400 audit(2000000084.781:9224): avc: denied { getopt } for pid=7450 comm="syz.2.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.509398][ T7489] overlayfs: failed to clone lowerpath [ 180.767695][ T7529] fuse: Bad value for 'fd' [ 180.792202][ T7530] rust_binder: 7525 RLIMIT_NICE not set [ 180.801162][ T7533] /dev/rnullb0: Can't open blockdev [ 180.838513][ T7543] rust_binder: Write failure EINVAL in pid:74 [ 180.969350][ T7559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.032636][ T7559] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 181.040050][ T7559] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 181.208338][ T7566] overlayfs: workdir and upperdir must be separate subtrees [ 181.210645][ T7567] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 181.238067][ T7567] overlayfs: workdir and upperdir must be separate subtrees [ 181.341118][ T36] audit: type=1400 audit(2000000086.081:9225): avc: denied { accept } for pid=7575 comm="syz.3.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.344049][ T7580] overlay: Unknown parameter 'mask' [ 181.451529][ T36] audit: type=1400 audit(2000000086.191:9226): avc: denied { ioctl } for pid=7585 comm="syz.3.2453" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.476588][ T36] audit: type=1400 audit(2000000086.191:9227): avc: denied { lock } for pid=7585 comm="syz.3.2453" path="socket:[32225]" dev="sockfs" ino=32225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.730399][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.880408][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 181.886643][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.897834][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.907684][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 181.920693][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.927320][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 181.936419][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.945186][ T10] usb 4-1: config 0 descriptor?? [ 182.142495][ T7607] overlayfs: failed to clone lowerpath [ 182.253181][ T7610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.354727][ T10] hid (null): invalid report_size 27418 [ 182.367381][ T10] hid (null): report_id 1505116794 is invalid [ 182.376612][ T10] hid (null): unknown global tag 0xe [ 182.387595][ T10] hid (null): unknown global tag 0xd [ 182.555901][ T7594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.556666][ T7594] rust_binder: Error in use_page_slow: ESRCH [ 182.563178][ T7594] rust_binder: use_range failure ESRCH [ 182.569181][ T7594] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 182.574676][ T7594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 182.582696][ T7594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 182.593157][ T10] usb 4-1: USB disconnect, device number 6 [ 182.612691][ T7617] /dev/rnullb0: Can't open blockdev [ 182.850401][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 182.980402][ T45] usb 3-1: device descriptor read/64, error -71 [ 183.220520][ T45] usb 3-1: device descriptor read/64, error -71 [ 183.460403][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 183.511267][ T36] audit: type=1326 audit(2000000088.251:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.1.2467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494b18e929 code=0x0 [ 183.600393][ T45] usb 3-1: device descriptor read/64, error -71 [ 183.840406][ T45] usb 3-1: device descriptor read/64, error -71 [ 183.950527][ T45] usb usb3-port1: attempt power cycle [ 184.020409][ T7633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 184.290460][ T45] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 184.321386][ T45] usb 3-1: device descriptor read/8, error -71 [ 184.359470][ T7637] vcan0: MTU too low for tipc bearer [ 184.364863][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 184.451389][ T45] usb 3-1: device descriptor read/8, error -71 [ 184.655212][ T7664] tipc: Started in network mode [ 184.660231][ T7664] tipc: Node identity 7f000001, cluster identity 4711 [ 184.667833][ T7664] tipc: Enabled bearer , priority 10 [ 184.701324][ T7671] overlayfs: failed to clone upperpath [ 184.701832][ T45] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 184.735527][ T45] usb 3-1: device descriptor read/8, error -71 [ 184.855893][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.863215][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.870613][ T7673] bridge_slave_0: entered allmulticast mode [ 184.876829][ T7673] bridge_slave_0: entered promiscuous mode [ 184.883639][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.891392][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.897849][ T45] usb 3-1: device descriptor read/8, error -71 [ 184.899716][ T7673] bridge_slave_1: entered allmulticast mode [ 184.911029][ T7673] bridge_slave_1: entered promiscuous mode [ 184.955371][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.962498][ T7673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.969785][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.976901][ T7673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.987251][ T6446] bridge_slave_1: left allmulticast mode [ 184.993091][ T6446] bridge_slave_1: left promiscuous mode [ 184.998721][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.007399][ T6446] bridge_slave_0: left allmulticast mode [ 185.013678][ T6446] bridge_slave_0: left promiscuous mode [ 185.019502][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.020536][ T45] usb usb3-port1: unable to enumerate USB device [ 185.102538][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.109884][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.119069][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.126230][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.136689][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.143803][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.155787][ T6446] tipc: Disabling bearer [ 185.161273][ T6446] tipc: Left network mode [ 185.173769][ T6446] veth1_macvtap: left promiscuous mode [ 185.179529][ T6446] veth0_vlan: left promiscuous mode [ 185.222628][ T7673] veth0_vlan: entered promiscuous mode [ 185.238334][ T7673] veth1_macvtap: entered promiscuous mode [ 185.657755][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2492'. [ 185.657970][ T7702] rust_binder: Error while translating object. [ 185.667111][ T7702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.673561][ T7702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 185.747297][ T7710] SELinux: failed to load policy [ 185.783471][ T7710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.784384][ T7710] rust_binder: Error while translating object. [ 185.791058][ T7710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.797279][ T7710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 185.976710][ T36] audit: type=1400 audit(2000000090.711:9229): avc: denied { accept } for pid=7733 comm="syz.3.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.124997][ T7739] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 186.125017][ T7739] rust_binder: Error while translating object. [ 186.133963][ T7739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.140365][ T7739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 186.207159][ T36] audit: type=1400 audit(2000000090.941:9230): avc: denied { view } for pid=7742 comm="syz.1.2506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.282592][ T6446] tipc: Subscription rejected, illegal request [ 186.312762][ T7746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 186.313176][ T7747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.374126][ T7751] overlay: ./file0 is not a directory [ 186.525080][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'. [ 186.570413][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.720394][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 186.726608][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.737543][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.748350][ T64] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.757442][ T64] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=164 [ 186.765764][ T64] usb 2-1: Product: syz [ 186.770308][ T64] usb 2-1: SerialNumber: syz [ 186.775499][ T64] usb 2-1: config 0 descriptor?? [ 187.058672][ T7775] rust_binder: Write failure EFAULT in pid:29 [ 187.127802][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.141061][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.148729][ T7779] bridge_slave_0: entered allmulticast mode [ 187.155718][ T7779] bridge_slave_0: entered promiscuous mode [ 187.161944][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 187.162523][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.167892][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 187.175656][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.187142][ T64] usb 2-1: USB disconnect, device number 9 [ 187.195557][ T7779] bridge_slave_1: entered allmulticast mode [ 187.196044][ T7779] bridge_slave_1: entered promiscuous mode [ 187.216091][ T12] bridge_slave_1: left allmulticast mode [ 187.221938][ T12] bridge_slave_1: left promiscuous mode [ 187.227545][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.235177][ T12] bridge_slave_0: left allmulticast mode [ 187.240938][ T12] bridge_slave_0: left promiscuous mode [ 187.246698][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.383505][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.390586][ T7779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.397830][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.404872][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.423905][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.431404][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.439172][ T12] tipc: Disabling bearer [ 187.444942][ T12] tipc: Left network mode [ 187.447113][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.456355][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.465180][ T12] veth0_vlan: left promiscuous mode [ 187.499412][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.506497][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.521491][ T36] audit: type=1326 audit(2000000092.261:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.2519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x0 [ 187.545329][ T7779] veth0_vlan: entered promiscuous mode [ 187.555793][ T7779] veth1_macvtap: entered promiscuous mode [ 187.618329][ T7794] tipc: Started in network mode [ 187.627869][ T36] audit: type=1326 audit(2000000092.361:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.2519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59ab8e929 code=0x0 [ 187.651389][ T7794] tipc: Node identity ac1414aa, cluster identity 4711 [ 187.658449][ T7794] tipc: Enabling of bearer rejected, failed to enable media [ 187.666721][ T64] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 187.728473][ T7810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.728864][ T7810] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 187.736008][ T7810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 187.821635][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.842698][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 187.854962][ T64] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 187.866523][ T64] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.879080][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.888528][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.896813][ T64] usb 2-1: Product: syz [ 187.901299][ T64] usb 2-1: Manufacturer: syz [ 187.906017][ T64] usb 2-1: SerialNumber: syz [ 187.915427][ T7787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.126311][ T7785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.133746][ T7785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.541884][ T64] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 188.548470][ T64] cdc_ncm 2-1:1.0: bind() failure [ 188.556376][ T64] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 188.563389][ T64] cdc_ncm 2-1:1.1: bind() failure [ 188.691431][ T36] audit: type=1400 audit(2000000093.431:9233): avc: denied { execute } for pid=7829 comm="syz.0.2532" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.730195][ T7833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 189.190470][ T45] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 189.330493][ T45] usb 3-1: device descriptor read/64, error -71 [ 189.570433][ T45] usb 3-1: device descriptor read/64, error -71 [ 189.597143][ T36] audit: type=1400 audit(2000000094.331:9234): avc: denied { setattr } for pid=7878 comm="syz.0.2551" name="NFC_LLCP" dev="sockfs" ino=34083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.624781][ T7881] rust_binder: Error while translating object. [ 189.624807][ T7881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 189.631101][ T7881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 189.670258][ T7884] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 189.680130][ T7885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.700064][ T7887] rust_binder: Write failure EINVAL in pid:39 [ 189.700075][ T7888] rust_binder: Write failure EINVAL in pid:39 [ 189.714369][ T7887] netlink: 'syz.0.2554': attribute type 7 has an invalid length. [ 189.820453][ T45] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 189.950417][ T45] usb 3-1: device descriptor read/64, error -71 [ 190.126416][ T1405] usb 2-1: USB disconnect, device number 10 [ 190.142044][ T7899] rust_binder: Write failure EFAULT in pid:39 [ 190.190437][ T45] usb 3-1: device descriptor read/64, error -71 [ 190.310809][ T45] usb usb3-port1: attempt power cycle [ 190.381918][ T7905] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 190.660437][ T45] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 190.681419][ T45] usb 3-1: device descriptor read/8, error -71 [ 190.811423][ T45] usb 3-1: device descriptor read/8, error -71 [ 190.824067][ T36] audit: type=1400 audit(2000000095.561:9235): avc: denied { bpf } for pid=7906 comm="syz.3.2562" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.908096][ T7909] tipc: Enabling of bearer rejected, failed to enable media [ 190.976261][ T36] audit: type=1400 audit(2000000095.711:9236): avc: denied { ioctl } for pid=7911 comm="syz.0.2564" path="socket:[33293]" dev="sockfs" ino=33293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 191.021010][ T7918] rust_binder: Error while translating object. [ 191.021103][ T7918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 191.024971][ T36] audit: type=1400 audit(2000000095.761:9237): avc: denied { relabelfrom } for pid=7919 comm="syz.1.2567" name="" dev="pipefs" ino=33335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 191.027315][ T7918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:58 [ 191.060410][ T45] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 191.063646][ T7918] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 191.081435][ T45] usb 3-1: device descriptor read/8, error -71 [ 191.221468][ T45] usb 3-1: device descriptor read/8, error -71 [ 191.330529][ T45] usb usb3-port1: unable to enumerate USB device [ 191.340423][ T1405] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.360528][ T7926] fuse: Unknown parameter '' [ 191.490380][ T1405] usb 1-1: Using ep0 maxpacket: 32 [ 191.496573][ T1405] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.508159][ T1405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 191.520035][ T1405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.531341][ T1405] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.540433][ T1405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.549966][ T1405] usb 1-1: config 0 descriptor?? [ 191.557884][ T7922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.562997][ T7939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7939 comm=syz.1.2575 [ 191.587130][ T1405] hub 1-1:0.0: USB hub found [ 191.785411][ T1405] hub 1-1:0.0: 2 ports detected [ 192.487780][ T7991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.334915][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8003 comm=syz.1.2597 [ 193.444542][ T1405] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 193.456185][ T305] usb 1-1: USB disconnect, device number 18 [ 193.462474][ T1405] hub 1-1:0.0: set hub depth failed [ 194.197145][ T36] audit: type=1400 audit(2000000098.931:9238): avc: denied { getopt } for pid=8027 comm="syz.1.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.200561][ T8030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 194.448873][ T8042] ------------[ cut here ]------------ [ 194.463502][ T8042] WARNING: CPU: 1 PID: 8042 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 194.473076][ T8042] Modules linked in: [ 194.477061][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.1.2612 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 194.490557][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.501053][ T8042] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 194.506975][ T8042] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 74 3b ee 05 00 0f 85 c4 00 00 00 c6 05 67 3b ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 194.527526][ T8042] RSP: 0018:ffffc9000d4f75a0 EFLAGS: 00010246 [ 194.533678][ T8042] RAX: 0000000000000000 RBX: 1ffff92001a9eeb8 RCX: 0000000000000000 [ 194.541890][ T8042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4f7648 [ 194.549890][ T8042] RBP: ffffc9000d4f76c8 R08: ffffc9000d4f7647 R09: 0000000000000000 [ 194.557939][ T8042] R10: ffffc9000d4f7630 R11: fffff52001a9eec9 R12: ffffc9000d4f75e0 [ 194.565979][ T8042] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 194.574184][ T8042] FS: 00007f1f1a91f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 194.583197][ T8042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.589842][ T8042] CR2: 0000200000006000 CR3: 0000000111362000 CR4: 00000000003526b0 [ 194.597919][ T8042] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 194.605946][ T8042] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.614059][ T8042] Call Trace: [ 194.617344][ T8042] [ 194.620289][ T8042] ? do_syscall_64+0x58/0xf0 [ 194.625045][ T8042] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 194.630864][ T8042] ? hashtab_init+0xdb/0x1f0 [ 194.635483][ T8042] ___kmalloc_large_node+0x9c/0x1d0 [ 194.640735][ T8042] ? hashtab_init+0xdb/0x1f0 [ 194.645348][ T8042] __kmalloc_large_node_noprof+0x1e/0xe0 [ 194.651122][ T8042] ? hashtab_init+0xdb/0x1f0 [ 194.655741][ T8042] __kmalloc_noprof+0x26d/0x450 [ 194.660745][ T8042] hashtab_init+0xdb/0x1f0 [ 194.665194][ T8042] ? common_read+0x16d/0x480 [ 194.669813][ T8042] symtab_init+0x44/0x70 [ 194.674211][ T8042] common_read+0x1de/0x480 [ 194.678654][ T8042] ? __cfi_common_read+0x10/0x10 [ 194.683693][ T8042] ? hashtab_init+0x105/0x1f0 [ 194.688391][ T8042] policydb_read+0xaab/0x28c0 [ 194.693120][ T8042] ? kasan_save_alloc_info+0x40/0x50 [ 194.698417][ T8042] ? __cfi_policydb_read+0x10/0x10 [ 194.703578][ T8042] ? security_load_policy+0x128/0x12f0 [ 194.709060][ T8042] security_load_policy+0x162/0x12f0 [ 194.714411][ T8042] ? irqentry_exit+0x4a/0x60 [ 194.719102][ T8042] ? exc_page_fault+0x66/0xc0 [ 194.723839][ T8042] ? asm_exc_page_fault+0x2b/0x30 [ 194.728964][ T8042] ? __cfi_security_load_policy+0x10/0x10 [ 194.734766][ T8042] ? rep_movs_alternative+0x4a/0xa0 [ 194.739998][ T8042] sel_write_load+0x298/0x5e0 [ 194.744751][ T8042] ? __cfi_sel_write_load+0x10/0x10 [ 194.750074][ T8042] ? bpf_lsm_file_permission+0xd/0x20 [ 194.755527][ T8042] ? __cfi_sel_write_load+0x10/0x10 [ 194.760771][ T8042] vfs_write+0x3c0/0xe80 [ 194.765049][ T8042] ? __cfi_vfs_write+0x10/0x10 [ 194.769840][ T8042] ? __kasan_check_write+0x18/0x20 [ 194.775054][ T8042] ? mutex_lock+0x92/0x1c0 [ 194.779488][ T8042] ? __cfi_mutex_lock+0x10/0x10 [ 194.784394][ T8042] ? __fget_files+0x2c5/0x340 [ 194.789089][ T8042] ksys_write+0x141/0x250 [ 194.793482][ T8042] ? xfd_validate_state+0x68/0x150 [ 194.798609][ T8042] ? __cfi_ksys_write+0x10/0x10 [ 194.803525][ T8042] ? __kasan_check_write+0x18/0x20 [ 194.808649][ T8042] ? fpregs_restore_userregs+0x11d/0x260 [ 194.814334][ T8042] __x64_sys_write+0x7f/0x90 [ 194.818939][ T8042] x64_sys_call+0x271c/0x2ee0 [ 194.823678][ T8042] do_syscall_64+0x58/0xf0 [ 194.828112][ T8042] ? clear_bhb_loop+0x50/0xa0 [ 194.832836][ T8042] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.838737][ T8042] RIP: 0033:0x7f1f19b8e929 [ 194.843215][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.862909][ T8042] RSP: 002b:00007f1f1a91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.871570][ T8042] RAX: ffffffffffffffda RBX: 00007f1f19db5fa0 RCX: 00007f1f19b8e929 [ 194.879548][ T8042] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000006 [ 194.887659][ T8042] RBP: 00007f1f19c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 194.895663][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.903763][ T8042] R13: 0000000000000000 R14: 00007f1f19db5fa0 R15: 00007ffe77686298 [ 194.911779][ T8042] [ 194.914805][ T8042] ---[ end trace 0000000000000000 ]--- [ 194.956218][ T8042] SELinux: failed to load policy