last executing test programs: 3.174060539s ago: executing program 3 (id=842): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='cifs\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='9p\x00', 0x5a9d275120a0ad7e, &(0x7f0000000180)='/dev/rnullb0\x00') 3.11868185s ago: executing program 3 (id=843): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x2, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) ftruncate(r2, 0x2007ffb) (async, rerun: 64) sendfile(r2, r2, 0x0, 0x1000000201005) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0) (async, rerun: 64) r9 = openat(r2, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) (rerun: 64) sendfile(r9, r4, 0x0, 0x7ffff000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r10, 0xfffffffffffffffb, 0x0) (async) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r11, &(0x7f0000006b40)={0x2020}, 0x206e) 3.11768452s ago: executing program 3 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x10003, 0x0, 0xd7c3, 0xfffffff9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) memfd_secret(0xb268d0c03f4ca9e8) syz_clone3(&(0x7f00000002c0)={0x300000, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, 0x0, 0x0) unshare(0x26020400) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) 1.436523112s ago: executing program 3 (id=867): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e14900a1320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3206f842420f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x57}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000d000000000200000a000000d5"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fgetxattr(r6, &(0x7f00000001c0)=@random={'osx.', './binderfs/binder0\x00'}, &(0x7f0000000200)=""/139, 0x8b) (async) fgetxattr(r6, &(0x7f00000001c0)=@random={'osx.', './binderfs/binder0\x00'}, &(0x7f0000000200)=""/139, 0x8b) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x400c6314, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x400c6314, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 874.420883ms ago: executing program 2 (id=893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x376b000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r2) ptrace$peekuser(0x3, r2, 0x380) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000200)=0xffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000001, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000081}, 0x8001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x376b000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x8, r2) (async) ptrace$peekuser(0x3, r2, 0x380) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000200)=0xffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000001, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000081}, 0x8001) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) 871.845013ms ago: executing program 0 (id=894): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000200)) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 844.571424ms ago: executing program 2 (id=895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000100)=[@exit_looper, @enter_looper, @register_looper, @dead_binder_done], 0xf8, 0x0, &(0x7f0000000400)="927854f1bc25dea461c128108e17ed6983090acf49c4158ab4b2cdd691845262510bb1ccbac1ca8b30002a84fc90eff30a953c767b9435c8a28310984c79f25c4387855edc2b824b73b7ca01189f50517b92a92b455ad8c50373c88cc49705f9b47b6e6802bdc58178b89a5c1deeb4a157cca23de22c8a64ca603530e5bf1efd72b5bc7c6b115998e6c05bff4c187a248074851c4c451507f6f8a52eb5ba009dfddbeb4247fc1b514a57f8244cb25a25a06ceee760f65c0d2268110e7d0fb489ae88fb974c3919d47acd1b924805d9d9d63d5a38f88f533af9c0f94f6e3cfe02ed0f1e0f94092500f9056faae6f9b1b89a5101913f4e7242"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x4e, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000780)=[@request_death], 0x0, 0x0, 0x0}) epoll_create(0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f00000001c0)=[0x7f, 0x6, 0x5, 0x0, 0x564d0b35, 0x55d7, 0x1, 0x2]) 825.420274ms ago: executing program 2 (id=896): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r2, &(0x7f00000003c0), 0x100000000000022d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 773.091595ms ago: executing program 3 (id=897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080009000d000000", 0x24) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) eventfd2(0x6, 0x800) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setresuid(0xee00, 0xee01, 0x0) (async) utimensat(r8, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) (async) ioctl$ASHMEM_GET_NAME(r4, 0x40087708, 0x0) 754.683625ms ago: executing program 2 (id=898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 738.069616ms ago: executing program 2 (id=899): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 686.719096ms ago: executing program 3 (id=900): pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x1}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x19, r2, 0xd, 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0/../file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 685.629256ms ago: executing program 0 (id=901): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x62) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}, @register_looper, @register_looper, @free_buffer={0x40086303, r4}], 0x43, 0x0, &(0x7f00000002c0)="cca26629566d73a5edb46f01d62bd1126ee643b0718efc6bde025ce7657f7271e1768b227811d5580f66ab6cdfa52aeef88e21274369d5a25c5d3ee641f980bd511d8b"}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') getdents(r6, &(0x7f00000010c0)=""/4135, 0x1027) copy_file_range(r1, &(0x7f0000000340)=0x43, r6, &(0x7f0000000380)=0x80, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x110020, &(0x7f0000000140)='net/dev_snmp6\x00') r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000240)) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 637.566237ms ago: executing program 0 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="31106bb57c57e96f39f3497d66d988b8f6351b9fb69615e2ea1f223d8f42c89ffc4f080930e09618e5503f1cc2aeb2aebaec9f2343078d980594b067540671461780ed2b44f5e8a609b2361d783372d5d4804cab5422d6a7bf20abba07865a2391d81ed8b0c04bde72f4756505a1a2d9686b40a45a0c14993a63510c9d936f0251db149e247f634c8f7a580f0589c664429d6c7692a16e30ce46ec46eee4a666a854c4000b000280976b640868603000"], 0x2dc}], 0x1}, 0xcc000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x4208, r5) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000540)="66b857040f00d80f09c4e39d0ca20050000032f30fc77096c744240000000000c744240200500000c7442406000000000f011424b805000000b900000000c4c129d1c5b9010200000f06f20f5fb2bc250000", 0x52}], 0x1, 0x4, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x7, 0xd5d50000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x5) lseek(r8, 0x7a3a, 0x3) 609.105188ms ago: executing program 0 (id=903): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/74) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x716}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0xbf806730fe380bc2) (async) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 554.698549ms ago: executing program 0 (id=904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/127, 0x7f, 0x1, 0x39}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x6, 0x0, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) 553.799839ms ago: executing program 0 (id=905): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x401]}, 0x8, 0x80800) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0x4, 0x8000, 0x8, 0x5, 0x2c]}, &(0x7f0000000240)=0x54) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$int_out(r1, 0x5464, &(0x7f0000000280)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x40, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) 170.672217ms ago: executing program 2 (id=908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0xf7, 0x5, 0xf, 0x5, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x4, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0xb000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x10, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x8, 0xe6, 0x2, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x68, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x44, 0xdb, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x32}, 0xf}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x6}, {@private=0xa010102, 0xee6c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x3293aa44}, {@remote, 0x8}, {@empty, 0x22}]}, @timestamp={0x44, 0x8, 0xae, 0x0, 0x4, [0x7]}, @end, @noop, @ssrr={0x89, 0xf, 0x36, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}]}, @noop, @cipso={0x86, 0x13, 0x3, [{0x7, 0xd, "44a161f0533293a7f855f2"}]}, @rr={0x7, 0x23, 0x98, [@local, @loopback, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @end]}}}}}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xa87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7ff, 0x81, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x96, 0xff, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4e, 0xd4, 0x93}}]}}}]}}]}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 169.578977ms ago: executing program 1 (id=909): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="9d"}) 99.761758ms ago: executing program 1 (id=910): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 85.331068ms ago: executing program 1 (id=911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async, rerun: 64) r3 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @multicast2}, &(0x7f00000001c0)=0xc) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x81, &(0x7f0000000340)={0x11, 0x0, r8, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) (rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@private2, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket(0x11, 0x3, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x1, 0x6, @multicast}, 0x14) (async, rerun: 32) r14 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r14, &(0x7f00000001c0)={0x1d, r15}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000300)={@broadcast, @loopback, 0x0}, &(0x7f0000000340)=0xc) (async) r17 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r17, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r17, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf250700000064000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08010100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f626174616476001400020000000000000000000000000000000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000300590af52470000180080003000200000014000200776732000000000000000000000000000800030001000000140002006772657461703000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300020000001400020070696d7265673000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="50000180140002006272696467655f736c6176655f300000140002006d616376746170300000000000000000080003000100000008000100", @ANYRES32=r15, @ANYBLOB="1400020076657468315f746f5f6873720000000018000180140002006d61637674617030000000000000000034000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=r16, @ANYBLOB="1400020073797a6b616c6c6572310000000000004400018008000100", @ANYRES32=r19, @ANYBLOB="140002006d6163766c616e31000000000000000008000300020000000800030003000000140002006970366772657461703000000000000040000180140002006261746164765f736c6176655f30000014000200626f6e6430000000000000000000000014000200767863616e3100"/120], 0x208}, 0x1, 0x0, 0x0, 0x8010}, 0x4008040) (async) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 2.64612ms ago: executing program 1 (id=912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f0000000280)="dc52b3905f", 0x5}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000240)="9d", 0x1}, {&(0x7f0000000200)="d9df", 0x2}, {&(0x7f00000001c0)='\b', 0x1}, {&(0x7f0000000180)="a8d1588ddc489305000000", 0xfffffe03}, {&(0x7f00000007c0)="00ca6dd07b16bdab438234d55d2d5d0373d56efe3dedfcd02ba7e7b699c3c611e1d0a7b0fb5795dcfc1c6d01a368b3e11ade45da41570c27eeb6d71cc843a5d51e5dfa54a64453fa4753396817996637ca0391ff7395f08d0cf53ecde07271f84ec641d5d628044d5d9136166472a0d4f61b315d793fd46643cf2306af864edaaf77214e555088bac84d132ed17d60707e48afca3408d4b5220539", 0x9b}], 0x7, 0x3) close(r2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)={0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x7, 0xa, "f4df136befb0212c0ece"}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x9}]}, 0x48) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000000c0)=0x4e, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0xc804) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 1.21459ms ago: executing program 1 (id=913): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 0s ago: executing program 1 (id=914): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="810000000000000023000000000000007a00000000000000810000000000000005000000000000000500000000000000060000000000000005000000000000000600000000000000a9240000008000000000000000a000000800000000000000faffffffb36b6e000201020100000000d1000000000000000a00100001"], 0xcc}, 0x1, 0x0, 0x0, 0x405c844}, 0x20000010) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xb, 0x18, 0x79, 0x8, 0x403, 0xd578, 0x3200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xc2, 0x8, 0x0, 0xc, 0xcf, 0xc4, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x44013) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf25010000000800403eb29bb243a156c36b2dc5f5cdb709f781ed4e4551221ff20b6811d7aa18062b7343c96ee8d6d6cbfa382025b272acdc512fb418f2020adf24d81e042652ad513766262b27755b948187030b4864", @ANYRES32=r7, @ANYBLOB="0c009962030000004100fc119e21a50001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8805}, 0x1f95d83ee393ee1c) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/101) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.160663][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 19.160681][ T36] audit: type=1400 audit(1759623486.490:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.168205][ T36] audit: type=1400 audit(1759623486.490:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.172200][ T36] audit: type=1400 audit(1759623486.490:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1977]" dev="pipefs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.177945][ T36] audit: type=1400 audit(1759623486.490:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.183981][ T36] audit: type=1400 audit(1759623486.490:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 26.965723][ T36] audit: type=1400 audit(1759623494.290:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.967278][ T283] cgroup: Unknown subsys name 'net' [ 26.988769][ T36] audit: type=1400 audit(1759623494.300:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.016614][ T36] audit: type=1400 audit(1759623494.330:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.016847][ T283] cgroup: Unknown subsys name 'devices' [ 27.198309][ T283] cgroup: Unknown subsys name 'hugetlb' [ 27.203993][ T283] cgroup: Unknown subsys name 'rlimit' [ 27.380920][ T36] audit: type=1400 audit(1759623494.710:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.404847][ T36] audit: type=1400 audit(1759623494.710:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.418645][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.431792][ T36] audit: type=1400 audit(1759623494.710:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.463936][ T36] audit: type=1400 audit(1759623494.780:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.479699][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.489889][ T36] audit: type=1400 audit(1759623494.780:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.526398][ T36] audit: type=1400 audit(1759623494.810:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.553358][ T36] audit: type=1400 audit(1759623494.810:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.839690][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.847001][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.854621][ T291] bridge_slave_0: entered allmulticast mode [ 28.861219][ T291] bridge_slave_0: entered promiscuous mode [ 28.868544][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.875983][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.883395][ T291] bridge_slave_1: entered allmulticast mode [ 28.889986][ T291] bridge_slave_1: entered promiscuous mode [ 28.941885][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.949493][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.956751][ T293] bridge_slave_0: entered allmulticast mode [ 28.963319][ T293] bridge_slave_0: entered promiscuous mode [ 28.971546][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.978930][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.986342][ T293] bridge_slave_1: entered allmulticast mode [ 28.992627][ T293] bridge_slave_1: entered promiscuous mode [ 29.049872][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.057363][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.064553][ T292] bridge_slave_0: entered allmulticast mode [ 29.071448][ T292] bridge_slave_0: entered promiscuous mode [ 29.085956][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.093131][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.100858][ T290] bridge_slave_0: entered allmulticast mode [ 29.107342][ T290] bridge_slave_0: entered promiscuous mode [ 29.113589][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.120706][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.128027][ T292] bridge_slave_1: entered allmulticast mode [ 29.134531][ T292] bridge_slave_1: entered promiscuous mode [ 29.151856][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.159386][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.167060][ T290] bridge_slave_1: entered allmulticast mode [ 29.173661][ T290] bridge_slave_1: entered promiscuous mode [ 29.330457][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.337853][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.347185][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.354358][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.362096][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.369557][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.384751][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.391937][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.399587][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.406801][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.426352][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.433534][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.441167][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.448495][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.497619][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.505275][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.513031][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.521317][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.528991][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.537054][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.544955][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.559672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.567738][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.587763][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.595191][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.603541][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.610737][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.624037][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.631322][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.647513][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.655135][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.663629][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.670944][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.682125][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.689587][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.700763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.708223][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.760210][ T291] veth0_vlan: entered promiscuous mode [ 29.790349][ T293] veth0_vlan: entered promiscuous mode [ 29.797720][ T291] veth1_macvtap: entered promiscuous mode [ 29.822606][ T290] veth0_vlan: entered promiscuous mode [ 29.828770][ T292] veth0_vlan: entered promiscuous mode [ 29.851861][ T292] veth1_macvtap: entered promiscuous mode [ 29.859371][ T293] veth1_macvtap: entered promiscuous mode [ 29.873014][ T290] veth1_macvtap: entered promiscuous mode [ 29.903235][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.990985][ T339] binder: Unknown parameter '00000000000000000000' [ 30.023132][ T340] Zero length message leads to an empty skb [ 30.060073][ T354] /dev/rnullb0: Can't open blockdev [ 30.155628][ T369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.186809][ T369] syz.1.14 (369): /proc/368/oom_adj is deprecated, please use /proc/368/oom_score_adj instead. [ 30.382593][ T374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.416231][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.504972][ T375] ./cgroup: Can't lookup blockdev [ 30.567111][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.578040][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.588514][ T65] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.597999][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.606315][ T65] usb 4-1: SerialNumber: syz [ 30.712432][ T383] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 30.716190][ T386] batadv_slave_1: entered promiscuous mode [ 30.719898][ T384] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 30.728215][ T385] batadv_slave_1: left promiscuous mode [ 30.815419][ T371] FAT-fs (rnullb0): bogus number of reserved sectors [ 30.822331][ T371] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 30.834887][ T65] usb 4-1: USB disconnect, device number 2 [ 30.881393][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.005937][ T334] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 31.167404][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.180619][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 31.193899][ T334] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 31.203414][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.212584][ T334] usb 3-1: config 0 descriptor?? [ 31.218310][ T392] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.227855][ T334] usbhid 3-1:0.0: can't add hid device: -22 [ 31.234800][ T334] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 31.388776][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.388819][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 31.430861][ T334] usb 3-1: USB disconnect, device number 2 [ 31.503391][ T416] fuse: Bad value for 'user_id' [ 31.508663][ T416] fuse: Bad value for 'user_id' [ 31.595906][ T65] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.608861][ T418] overlayfs: failed to clone upperpath [ 31.757669][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.769439][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 31.784978][ T65] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 31.795305][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.804605][ T65] usb 4-1: config 0 descriptor?? [ 31.810570][ T404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.818842][ T65] usbhid 4-1:0.0: can't add hid device: -22 [ 31.825110][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 32.020177][ T46] usb 4-1: USB disconnect, device number 3 [ 32.034590][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 32.034610][ T36] audit: type=1400 audit(1759623499.350:182): avc: denied { write } for pid=403 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.236097][ T393] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 32.365973][ T393] usb 3-1: device descriptor read/64, error -71 [ 32.523329][ T36] audit: type=1400 audit(1759623499.850:183): avc: denied { accept } for pid=435 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.604909][ T36] audit: type=1400 audit(1759623499.930:184): avc: denied { transfer } for pid=437 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.615924][ T393] usb 3-1: device descriptor read/64, error -71 [ 32.625043][ T438] rust_binder: Error while translating object. [ 32.631541][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.638635][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:19 [ 32.677091][ T36] audit: type=1400 audit(1759623500.010:185): avc: denied { nlmsg_write } for pid=445 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.715505][ T36] audit: type=1400 audit(1759623500.040:186): avc: denied { create } for pid=447 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.735767][ T36] audit: type=1400 audit(1759623500.050:187): avc: denied { ioctl } for pid=447 comm="syz.0.41" path="socket:[4366]" dev="sockfs" ino=4366 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.762201][ T36] audit: type=1400 audit(1759623500.050:188): avc: denied { read } for pid=447 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.783262][ T36] audit: type=1400 audit(1759623500.120:189): avc: denied { module_load } for pid=451 comm="syz.0.43" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=3912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 32.885947][ T393] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.955927][ T46] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.045953][ T393] usb 3-1: device descriptor read/64, error -71 [ 33.107635][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.119135][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.132854][ T46] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 33.142859][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.152830][ T46] usb 4-1: config 0 descriptor?? [ 33.158514][ T444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.167178][ T46] usbhid 4-1:0.0: can't add hid device: -22 [ 33.173265][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 33.306288][ T393] usb 3-1: device descriptor read/64, error -71 [ 33.369061][ T36] audit: type=1400 audit(1759623500.710:190): avc: denied { ioctl } for pid=443 comm="syz.3.39" path="socket:[4389]" dev="sockfs" ino=4389 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.369990][ T65] usb 4-1: USB disconnect, device number 4 [ 33.426016][ T393] usb usb3-port1: attempt power cycle [ 33.519629][ T36] audit: type=1400 audit(1759623500.850:191): avc: denied { watch_reads } for pid=454 comm="syz.0.44" path="/17" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.765993][ T393] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.787393][ T393] usb 3-1: device descriptor read/8, error -71 [ 33.913072][ T463] rust_binder: 25: no such ref 0 [ 33.919299][ T393] usb 3-1: device descriptor read/8, error -71 [ 34.166044][ T393] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 34.197315][ T393] usb 3-1: device descriptor read/8, error -71 [ 34.265994][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.327383][ T393] usb 3-1: device descriptor read/8, error -71 [ 34.398914][ T475] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 34.417313][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.429866][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.440592][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.451253][ T393] usb usb3-port1: unable to enumerate USB device [ 34.460379][ T46] usb 4-1: config 0 descriptor?? [ 34.601808][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 34.627199][ T495] ======================================================= [ 34.627199][ T495] WARNING: The mand mount option has been deprecated and [ 34.627199][ T495] and is ignored by this kernel. Remove the mand [ 34.627199][ T495] option from the mount to silence this warning. [ 34.627199][ T495] ======================================================= [ 34.679115][ T495] overlayfs: failed to clone lowerpath [ 34.881228][ T46] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 34.892727][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input4 [ 34.980882][ T46] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 35.315941][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.329730][ T393] usb 4-1: USB disconnect, device number 5 [ 35.466099][ T46] usb 3-1: device descriptor read/64, error -71 [ 35.716166][ T46] usb 3-1: device descriptor read/64, error -71 [ 35.975885][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.117121][ T46] usb 3-1: device descriptor read/64, error -71 [ 36.354637][ T526] tipc: Enabling of bearer rejected, failed to enable media [ 36.375883][ T46] usb 3-1: device descriptor read/64, error -71 [ 36.496052][ T46] usb usb3-port1: attempt power cycle [ 36.545018][ T546] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 36.865935][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.907573][ T46] usb 3-1: device descriptor read/8, error -71 [ 36.913271][ T568] fuse: Bad value for 'user_id' [ 36.919236][ T568] fuse: Bad value for 'user_id' [ 37.037179][ T46] usb 3-1: device descriptor read/8, error -71 [ 37.160166][ T582] rust_binder: Error in use_page_slow: ESRCH [ 37.160192][ T582] rust_binder: use_range failure ESRCH [ 37.166697][ T582] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 37.172363][ T582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.180875][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:57 [ 37.241704][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 37.241723][ T36] audit: type=1400 audit(1759623504.570:217): avc: denied { write } for pid=585 comm="syz.3.89" name="xfrm_stat" dev="proc" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.295921][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.312242][ T588] rust_binder: Error while translating object. [ 37.312321][ T588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.317156][ T46] usb 3-1: device descriptor read/8, error -71 [ 37.320159][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:65 [ 37.394477][ T591] raw_sendmsg: syz.3.91 forgot to set AF_INET. Fix it! [ 37.414642][ T36] audit: type=1400 audit(1759623504.750:218): avc: denied { create } for pid=589 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.436264][ T590] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 37.442315][ T590] syzkaller1: group set to 0 [ 37.447071][ T590] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 37.453106][ T590] syzkaller1: group set to 0 [ 37.457955][ T36] audit: type=1400 audit(1759623504.770:219): avc: denied { connect } for pid=589 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.477571][ T590] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 37.483758][ T590] syzkaller1: group set to 0 [ 37.488667][ T590] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 37.495018][ T590] syzkaller1: group set to 0 [ 37.499944][ T46] usb 3-1: device descriptor read/8, error -71 [ 37.506334][ T591] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 37.507935][ T36] audit: type=1400 audit(1759623504.840:220): avc: denied { read write } for pid=589 comm="syz.3.91" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.515926][ T590] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 37.517547][ T36] audit: type=1400 audit(1759623504.850:221): avc: denied { open } for pid=589 comm="syz.3.91" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.541569][ T590] syzkaller1: group set to 0 [ 37.616096][ T46] usb usb3-port1: unable to enumerate USB device [ 37.654786][ T599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 37.677571][ T36] audit: type=1400 audit(1759623505.010:222): avc: denied { create } for pid=602 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 37.703008][ T605] rust_binder: Error while translating object. [ 37.703047][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 37.710077][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:46 [ 37.732543][ T601] rust_binder: Write failure EFAULT in pid:72 [ 37.743327][ T36] audit: type=1400 audit(1759623505.080:223): avc: denied { mounton } for pid=594 comm="syz.3.92" path="/21/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 37.772284][ T36] audit: type=1400 audit(1759623505.080:224): avc: denied { read } for pid=606 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.800109][ T610] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.848648][ T615] netlink: 'syz.3.98': attribute type 15 has an invalid length. [ 37.866543][ T36] audit: type=1400 audit(1759623505.200:225): avc: denied { getopt } for pid=614 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.869965][ T615] rust_binder: Error while translating object. [ 37.886396][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.892849][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80 [ 38.077799][ T621] binder: Bad value for 'max' [ 38.227625][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 38.238733][ T625] netlink: 56 bytes leftover after parsing attributes in process `syz.2.101'. [ 38.248348][ T625] rust_binder: Write failure EINVAL in pid:22 [ 38.341916][ T628] rust_binder: 51: no such ref 2 [ 38.354452][ T628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 38.648565][ T627] overlayfs: overlapping lowerdir path [ 38.998372][ T44] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.307589][ T634] overlayfs: overlapping lowerdir path [ 41.065950][ T637] Bluetooth: hci0: command 0x1003 tx timeout [ 41.065985][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.081136][ T36] audit: type=1400 audit(1759623508.420:226): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.621425][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 41.787707][ T657] veth1: entered allmulticast mode [ 41.807527][ T659] veth1: left allmulticast mode [ 41.838000][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.928041][ T669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.945354][ T669] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 42.116259][ T679] binder: Bad value for 'max' [ 42.179405][ T683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 42.200236][ T685] netlink: 'syz.2.121': attribute type 16 has an invalid length. [ 42.617741][ T696] netlink: 'syz.1.124': attribute type 3 has an invalid length. [ 42.641859][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 42.641879][ T36] audit: type=1400 audit(1759623509.970:241): avc: denied { read } for pid=699 comm="syz.1.125" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.385925][ T434] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 43.510379][ T36] audit: type=1400 audit(1759623510.840:242): avc: denied { listen } for pid=705 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.531718][ T434] usb 3-1: device descriptor read/64, error -71 [ 43.554456][ T36] audit: type=1400 audit(1759623510.880:243): avc: denied { unlink } for pid=707 comm="syz.1.128" name="#1" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.577321][ T36] audit: type=1400 audit(1759623510.880:244): avc: denied { mount } for pid=707 comm="syz.1.128" name="/" dev="overlay" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.599643][ T36] audit: type=1400 audit(1759623510.900:245): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.785872][ T434] usb 3-1: device descriptor read/64, error -71 [ 43.935402][ T36] audit: type=1400 audit(1759623511.260:246): avc: denied { write } for pid=712 comm="syz.3.130" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.936016][ T713] rust_binder: Error in use_page_slow: ESRCH [ 43.960377][ T36] audit: type=1400 audit(1759623511.260:247): avc: denied { open } for pid=712 comm="syz.3.130" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.992543][ T713] rust_binder: use_range failure ESRCH [ 43.992574][ T713] rust_binder: Failed to allocate buffer. len:1080, is_oneway:false [ 43.998288][ T713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.006606][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:86 [ 44.045871][ T434] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 44.068879][ T36] audit: type=1400 audit(1759623511.410:248): avc: denied { mounton } for pid=714 comm="syz.3.131" path="/syzcgroup/unified/syz3" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 44.113562][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 44.195967][ T434] usb 3-1: device descriptor read/64, error -71 [ 44.272725][ T36] audit: type=1400 audit(1759623511.600:249): avc: denied { mount } for pid=720 comm="syz.3.133" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.323860][ T722] 9pnet_fd: Insufficient options for proto=fd [ 44.382734][ T36] audit: type=1400 audit(1759623511.710:250): avc: denied { nlmsg_read } for pid=720 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.382749][ T723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.133'. [ 44.435905][ T434] usb 3-1: device descriptor read/64, error -71 [ 44.467099][ T726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 44.482505][ T728] rust_binder: 106: no such ref 3 [ 44.497176][ T728] rust_binder: 106: no such ref 4294967293 [ 44.522611][ T732] netlink: 3 bytes leftover after parsing attributes in process `syz.1.136'. [ 44.533123][ T732] netlink: 3 bytes leftover after parsing attributes in process `syz.1.136'. [ 44.542276][ T732] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 44.566074][ T434] usb usb3-port1: attempt power cycle [ 44.714394][ T723] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 44.915911][ T434] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 44.956885][ T434] usb 3-1: device descriptor read/8, error -71 [ 45.090432][ T434] usb 3-1: device descriptor read/8, error -71 [ 45.345913][ T434] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 45.366948][ T434] usb 3-1: device descriptor read/8, error -71 [ 45.497074][ T434] usb 3-1: device descriptor read/8, error -71 [ 45.606017][ T434] usb usb3-port1: unable to enumerate USB device [ 46.110981][ T723] overlayfs: failed to get uuid (28/file1, err=-13); falling back to uuid=null. [ 46.200847][ T747] Source file dentry negative [ 46.446120][ T759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.446624][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.725954][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 46.756111][ T804] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 46.784532][ T809] capability: warning: `syz.0.159' uses 32-bit capabilities (legacy support in use) [ 46.849661][ T820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.868525][ T820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 46.876086][ T434] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 46.877865][ T820] bridge_slave_1: left allmulticast mode [ 46.892246][ T820] bridge_slave_1: left promiscuous mode [ 46.892314][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 46.898852][ T820] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.907219][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.925638][ T820] bridge_slave_0: left allmulticast mode [ 46.928339][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.933428][ T820] bridge_slave_0: left promiscuous mode [ 46.942649][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.949852][ T820] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.963737][ T65] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.980497][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.992581][ T65] usb 2-1: config 0 descriptor?? [ 47.047268][ T434] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.058232][ T434] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.069627][ T434] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.080779][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.089991][ T434] usb 3-1: SerialNumber: syz [ 47.300236][ T787] netlink: 124 bytes leftover after parsing attributes in process `syz.2.153'. [ 47.400642][ T65] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 47.417380][ T65] microsoft 0003:045E:07DA.0002: item fetching failed at offset 31/34 [ 47.427207][ T65] microsoft 0003:045E:07DA.0002: parse failed [ 47.435282][ T65] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 47.609728][ T393] usb 2-1: USB disconnect, device number 2 [ 47.725901][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 47.725920][ T36] audit: type=1400 audit(1759623515.050:264): avc: denied { ioctl } for pid=838 comm="syz.0.168" path="socket:[6682]" dev="sockfs" ino=6682 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.758664][ T36] audit: type=1400 audit(1759623515.100:265): avc: denied { read } for pid=838 comm="syz.0.168" path="socket:[6682]" dev="sockfs" ino=6682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.808612][ T36] audit: type=1400 audit(1759623515.140:266): avc: denied { write } for pid=838 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.830099][ T36] audit: type=1400 audit(1759623515.140:267): avc: denied { create } for pid=838 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.879921][ T434] usb 3-1: USB disconnect, device number 15 [ 48.020121][ T36] audit: type=1400 audit(1759623515.350:268): avc: denied { write } for pid=838 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.046333][ T849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 48.421326][ T36] audit: type=1400 audit(1759623515.750:269): avc: denied { ioctl } for pid=858 comm="syz.2.174" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.460265][ T859] fuse: Unknown parameter ' ' [ 48.485877][ T36] audit: type=1400 audit(1759623515.790:270): avc: denied { map } for pid=858 comm="syz.2.174" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 48.509526][ T637] Bluetooth: hci0: command 0x1003 tx timeout [ 48.518617][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.535122][ T36] audit: type=1400 audit(1759623515.790:271): avc: denied { execute } for pid=858 comm="syz.2.174" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 48.544948][ T863] syz.3.175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.576419][ T863] rust_binder: 124: no such ref 0 [ 48.582266][ T863] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 48.594197][ T863] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 48.654673][ T877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 48.773913][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 48.783724][ T36] audit: type=1400 audit(1759623516.110:272): avc: denied { accept } for pid=875 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.375894][ T434] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 49.527105][ T434] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.538272][ T434] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.550677][ T434] usb 2-1: config 220 has no interface number 2 [ 49.557285][ T434] usb 2-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 49.569347][ T434] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.582672][ T434] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 49.596483][ T434] usb 2-1: config 220 interface 0 has no altsetting 0 [ 49.603916][ T434] usb 2-1: config 220 interface 76 has no altsetting 0 [ 49.611754][ T434] usb 2-1: config 220 interface 1 has no altsetting 0 [ 49.620889][ T434] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 49.640044][ T434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.648918][ T434] usb 2-1: Product: syz [ 49.653764][ T434] usb 2-1: Manufacturer: syz [ 49.659675][ T434] usb 2-1: SerialNumber: syz [ 49.935332][ T434] usb 2-1: selecting invalid altsetting 0 [ 49.952984][ T434] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 49.967296][ T434] usb 2-1: No valid video chain found. [ 49.968445][ T902] input: syz0 as /devices/virtual/input/input5 [ 49.991121][ T434] usb 2-1: USB disconnect, device number 3 [ 50.006065][ T36] audit: type=1400 audit(1759623777.345:273): avc: denied { connect } for pid=901 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.028518][ T900] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 50.028559][ T900] rust_binder: Error while translating object. [ 50.040305][ T900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.046966][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 50.147947][ T905] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 50.224163][ T913] netlink: 220 bytes leftover after parsing attributes in process `syz.2.191'. [ 50.405050][ T916] rust_binder: Write failure EFAULT in pid:135 [ 50.405821][ T916] rust_binder: Write failure EFAULT in pid:135 [ 51.081651][ T926] tipc: Enabling of bearer rejected, failed to enable media [ 51.088505][ T936] /dev/rnullb0: Can't open blockdev [ 51.136359][ T941] 9pnet_fd: Insufficient options for proto=fd [ 51.143962][ T941] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 51.243273][ T952] netlink: 'syz.2.205': attribute type 6 has an invalid length. [ 51.255506][ T952] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.327350][ T957] sit0: entered promiscuous mode [ 51.337364][ T957] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 51.355537][ T957] netlink: 9 bytes leftover after parsing attributes in process `syz.1.201'. [ 51.625745][ T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.765469][ T65] usb 3-1: device descriptor read/64, error -71 [ 51.837386][ T965] 9pnet_fd: Insufficient options for proto=fd [ 52.025483][ T65] usb 3-1: device descriptor read/64, error -71 [ 52.275502][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.415490][ T65] usb 3-1: device descriptor read/64, error -71 [ 52.562499][ T991] tmpfs: Bad value for 'size' [ 52.655474][ T65] usb 3-1: device descriptor read/64, error -71 [ 52.770556][ T65] usb usb3-port1: attempt power cycle [ 52.794288][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 52.794307][ T36] audit: type=1400 audit(1759624036.122:295): avc: denied { unlink } for pid=291 comm="syz-executor" name="file2" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.830761][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.830786][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:157 [ 52.910069][ T1002] rust_binder: Error while translating object. [ 52.925624][ T1001] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 52.933033][ T1001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.941481][ T1002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 52.951021][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:159 [ 52.960666][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:159 [ 53.115500][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 53.146585][ T65] usb 3-1: device descriptor read/8, error -71 [ 53.276494][ T65] usb 3-1: device descriptor read/8, error -71 [ 53.309501][ T36] audit: type=1400 audit(1759624036.642:296): avc: denied { shutdown } for pid=1010 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.413417][ T36] audit: type=1400 audit(1759624036.742:297): avc: denied { connect } for pid=1014 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.448431][ T36] audit: type=1400 audit(1759624036.762:298): avc: denied { map } for pid=1014 comm="syz.1.227" path="socket:[6101]" dev="sockfs" ino=6101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 53.515461][ T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.546519][ T65] usb 3-1: device descriptor read/8, error -71 [ 53.679100][ T65] usb 3-1: device descriptor read/8, error -71 [ 53.785692][ T65] usb usb3-port1: unable to enumerate USB device [ 54.033289][ T1034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1034 comm=syz.1.235 [ 54.035586][ T1035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1035 comm=syz.1.235 [ 54.060038][ T1034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=1034 comm=syz.1.235 [ 54.367608][ T36] audit: type=1400 audit(1759624037.702:299): avc: denied { compute_member } for pid=1043 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.456389][ T1051] KVM: debugfs: duplicate directory 1051-4 [ 54.540164][ T1056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.564734][ T1059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.581119][ T1059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.591218][ T1059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.600772][ T1059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.610727][ T1059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.727963][ T1072] veth0: entered promiscuous mode [ 54.733555][ T1072] veth0: left promiscuous mode [ 54.785758][ T1077] 9pnet_fd: Insufficient options for proto=fd [ 54.960460][ T36] audit: type=1400 audit(1759624038.292:300): avc: denied { ioctl } for pid=1099 comm="syz.0.256" path="socket:[8336]" dev="sockfs" ino=8336 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.065463][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 55.111555][ T36] audit: type=1400 audit(1759624038.442:301): avc: denied { map } for pid=1106 comm="syz.1.258" path="socket:[8348]" dev="sockfs" ino=8348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.156290][ T36] audit: type=1400 audit(1759624038.492:302): avc: denied { bind } for pid=1109 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.244494][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.255820][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 55.264681][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 55.277021][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 55.290827][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.300871][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.313119][ T9] usb 3-1: Product: syz [ 55.319863][ T9] usb 3-1: Manufacturer: syz [ 55.325461][ T9] usb 3-1: SerialNumber: syz [ 55.559691][ T1083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1083 comm=syz.2.252 [ 55.905818][ T1117] process 'syz.3.261' launched './file0' with NULL argv: empty string added [ 55.916080][ T36] audit: type=1400 audit(1759624039.252:303): avc: denied { execute_no_trans } for pid=1116 comm="syz.3.261" path="/53/file0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.957030][ T1117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 56.079955][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 56.100714][ T9] cdc_ncm 3-1:1.0: bind() failure [ 56.114849][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 56.135153][ T9] cdc_ncm 3-1:1.1: bind() failure [ 56.165577][ T9] usb 3-1: USB disconnect, device number 20 [ 56.190091][ T36] audit: type=1400 audit(1759624039.522:304): avc: denied { read } for pid=1129 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.350703][ T1125] rust_binder: 130: no such ref 0 [ 56.794045][ T1149] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 57.849196][ T1195] overlayfs: failed to clone upperpath [ 57.920453][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 57.920478][ T36] audit: type=1400 audit(1759624041.212:308): avc: denied { bind } for pid=1194 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.988413][ T1206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.988599][ T1206] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 57.995949][ T1206] rust_binder: Error while translating object. [ 58.008583][ T36] audit: type=1400 audit(1759624041.222:309): avc: denied { block_suspend } for pid=1194 comm="syz.2.290" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.040255][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.040290][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 58.050564][ T36] audit: type=1400 audit(1759624041.232:310): avc: denied { remount } for pid=1197 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.114986][ T36] audit: type=1400 audit(1759624041.442:311): avc: denied { mounton } for pid=1214 comm="syz.1.297" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.119082][ T1216] futex_wake_op: syz.3.296 tries to shift op by 32; fix this program [ 58.151736][ T1217] futex_wake_op: syz.3.296 tries to shift op by 32; fix this program [ 58.220111][ T36] audit: type=1400 audit(1759624041.552:312): avc: denied { bind } for pid=1194 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.224698][ T1196] input: syz0 as /devices/virtual/input/input6 [ 58.267836][ T1235] syz.3.302(1235): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 58.349655][ T36] audit: type=1400 audit(1759624041.682:313): avc: denied { read write } for pid=1236 comm="syz.2.303" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.377328][ T36] audit: type=1400 audit(1759624041.682:314): avc: denied { open } for pid=1236 comm="syz.2.303" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.403271][ T36] audit: type=1400 audit(1759624041.702:315): avc: denied { ioctl } for pid=1236 comm="syz.2.303" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.670693][ T1248] rust_binder: 148: no such ref 3 [ 58.676058][ T1248] rust_binder: 148: no such ref 2 [ 58.685818][ T1248] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 58.693151][ T36] audit: type=1400 audit(1759624042.012:316): avc: denied { write } for pid=1247 comm="syz.2.306" name="file2" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.731649][ T36] audit: type=1400 audit(1759624042.012:317): avc: denied { open } for pid=1247 comm="syz.2.306" path="/48/file2" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.935993][ T1274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 58.946041][ T1274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 58.959407][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 59.035439][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 59.219185][ T9] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 59.229143][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.237904][ T9] usb 3-1: Product: syz [ 59.242481][ T9] usb 3-1: Manufacturer: syz [ 59.247462][ T9] usb 3-1: SerialNumber: syz [ 59.249104][ T1279] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 59.354789][ T1288] random: crng reseeded on system resumption [ 59.465569][ T9] usb 3-1: USB disconnect, device number 21 [ 59.556473][ T1297] overlayfs: failed to clone upperpath [ 59.678932][ T1302] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 59.685849][ T1303] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 59.725508][ T393] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 59.799752][ T1304] netlink: 'syz.0.325': attribute type 17 has an invalid length. [ 59.965475][ T393] usb 4-1: device descriptor read/64, error -71 [ 60.205537][ T393] usb 4-1: device descriptor read/64, error -71 [ 60.426930][ T1326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 60.436330][ T1326] bridge_slave_1: left allmulticast mode [ 60.442210][ T1326] bridge_slave_1: left promiscuous mode [ 60.448119][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.455719][ T393] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 60.463968][ T1326] bridge_slave_0: left allmulticast mode [ 60.470225][ T1326] bridge_slave_0: left promiscuous mode [ 60.476769][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.586232][ T393] usb 4-1: device descriptor read/64, error -71 [ 60.825531][ T393] usb 4-1: device descriptor read/64, error -71 [ 60.925638][ T1342] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=788 sclass=netlink_xfrm_socket pid=1342 comm=syz.2.340 [ 60.938833][ T393] usb usb4-port1: attempt power cycle [ 61.144334][ T1359] IPv6: Can't replace route, no match found [ 61.265476][ T1112] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 61.275455][ T393] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 61.306493][ T393] usb 4-1: device descriptor read/8, error -71 [ 61.370132][ T1389] fuse: Bad value for 'fd' [ 61.416642][ T1112] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.423873][ T1112] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 61.433207][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.442777][ T1112] usb 3-1: config 0 descriptor?? [ 61.446546][ T393] usb 4-1: device descriptor read/8, error -71 [ 61.628974][ T1411] overlayfs: failed to clone upperpath [ 61.671298][ T1415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1415 comm=syz.0.364 [ 61.684382][ T1415] netlink: 80 bytes leftover after parsing attributes in process `syz.0.364'. [ 61.695444][ T393] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 61.726486][ T393] usb 4-1: device descriptor read/8, error -71 [ 61.736074][ T1417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 61.855281][ T1112] apple 0003:05AC:0267.0003: unknown main item tag 0x2 [ 61.863245][ T1112] apple 0003:05AC:0267.0003: hidraw0: USB HID v1.01 Device [HID 05ac:0267] on usb-dummy_hcd.2-1/input0 [ 61.877279][ T393] usb 4-1: device descriptor read/8, error -71 [ 61.912495][ T1429] fuseblk: Bad value for 'fd' [ 61.952240][ T1438] netlink: 25 bytes leftover after parsing attributes in process `syz.1.373'. [ 61.995670][ T393] usb usb4-port1: unable to enumerate USB device [ 62.064109][ T393] usb 3-1: USB disconnect, device number 22 [ 62.663566][ T1464] /dev/loop0: Can't lookup blockdev [ 62.815545][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 62.965626][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 62.972073][ T9] usb 3-1: config 7 has an invalid interface number: 162 but max is 0 [ 62.981745][ T9] usb 3-1: config 7 has no interface number 0 [ 62.988279][ T9] usb 3-1: config 7 interface 162 has no altsetting 0 [ 62.997173][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=24.38 [ 63.007023][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.015209][ T9] usb 3-1: Product: syz [ 63.019698][ T9] usb 3-1: Manufacturer: syz [ 63.024393][ T9] usb 3-1: SerialNumber: syz [ 63.136174][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 63.136192][ T36] audit: type=1400 audit(1759624046.472:338): avc: denied { read write } for pid=1470 comm="syz.3.387" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.169555][ T36] audit: type=1400 audit(1759624046.482:339): avc: denied { open } for pid=1470 comm="syz.3.387" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.192173][ T1473] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.215937][ T36] audit: type=1400 audit(1759624046.482:340): avc: denied { ioctl } for pid=1470 comm="syz.3.387" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.215976][ T36] audit: type=1400 audit(1759624046.482:341): avc: denied { create } for pid=1470 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 63.216001][ T36] audit: type=1400 audit(1759624046.482:342): avc: denied { map } for pid=1470 comm="syz.3.387" path="socket:[9097]" dev="sockfs" ino=9097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.216028][ T36] audit: type=1400 audit(1759624046.482:343): avc: denied { accept } for pid=1470 comm="syz.3.387" path="socket:[9097]" dev="sockfs" ino=9097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.216056][ T36] audit: type=1400 audit(1759624046.522:344): avc: denied { remount } for pid=1472 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.224794][ T36] audit: type=1400 audit(1759624046.552:345): avc: denied { listen } for pid=1474 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.250317][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.310334][ T36] audit: type=1400 audit(1759624046.632:346): avc: denied { mount } for pid=1477 comm="syz.3.391" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.334955][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.411516][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.422168][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.436219][ T9] asix 3-1:7.162 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 63.448032][ T9] asix 3-1:7.162: probe with driver asix failed with error -71 [ 63.449905][ T36] audit: type=1400 audit(1759624046.782:347): avc: denied { getopt } for pid=1483 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.457709][ T9] usb 3-1: USB disconnect, device number 23 [ 64.029600][ T1501] rust_binder: Write failure EFAULT in pid:181 [ 64.050632][ T1503] veth1: entered allmulticast mode [ 64.064380][ T1503] /dev/rnullb0: Can't open blockdev [ 64.096277][ T1507] veth1: left allmulticast mode [ 64.286299][ T1537] overlayfs: failed to clone upperpath [ 64.293387][ T1542] netlink: 72 bytes leftover after parsing attributes in process `syz.2.410'. [ 64.405956][ T1559] __vm_enough_memory: pid: 1559, comm: syz.3.415, bytes: 18014402804453376 not enough memory for the allocation [ 64.447627][ T1567] binder: Unknown parameter '' [ 64.602058][ T1584] rust_binder: Write failure EFAULT in pid:238 [ 64.728980][ T1600] overlayfs: failed to clone lowerpath [ 64.925528][ T393] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 65.075555][ T393] usb 4-1: Using ep0 maxpacket: 32 [ 65.082160][ T393] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.090563][ T393] usb 4-1: config 0 has no interface number 0 [ 65.098739][ T393] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.108127][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.116463][ T393] usb 4-1: Product: syz [ 65.120783][ T393] usb 4-1: Manufacturer: syz [ 65.125670][ T393] usb 4-1: SerialNumber: syz [ 65.132139][ T393] usb 4-1: config 0 descriptor?? [ 65.138217][ T393] smsc95xx v2.0.0 [ 65.539730][ T393] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 65.565433][ T393] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.787169][ T1596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.799620][ T1596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.910744][ T1643] rust_binder: Error while translating object. [ 65.910788][ T1643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.917311][ T1643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 65.946677][ T1645] can0: slcan on ptm0. [ 66.008094][ T1646] can0 (unregistered): slcan off ptm0. [ 66.018852][ T1596] rust_binder: Write failure EFAULT in pid:244 [ 66.019347][ T393] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 66.036961][ T393] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 66.049079][ T393] usb 4-1: USB disconnect, device number 11 [ 66.360333][ T1680] syz.0.449 (1680): attempted to duplicate a private mapping with mremap. This is not supported. [ 66.384921][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.398647][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.405483][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 66.412685][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.433942][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.448768][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.462725][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.477254][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.492594][ T1683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1683 comm=syz.0.450 [ 66.537125][ T1688] overlayfs: failed to clone upperpath [ 66.566565][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.577886][ T9] usb 3-1: config 0 has no interfaces? [ 66.584066][ T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 66.593717][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.604466][ T9] usb 3-1: config 0 descriptor?? [ 66.812488][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.821639][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.832822][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.843850][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.853682][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.863608][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.872181][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.882713][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.893862][ T9] usb 3-1: USB disconnect, device number 24 [ 67.338534][ T1699] KVM: debugfs: duplicate directory 1699-4 [ 67.447534][ T1701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.447573][ T1701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 67.561229][ T1710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 67.571097][ T1710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:253 [ 67.636336][ T1718] cgroup: Bad value for 'name' [ 68.206227][ T1729] netlink: 556 bytes leftover after parsing attributes in process `syz.0.466'. [ 68.598785][ T393] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 68.756697][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.766873][ T393] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 68.776112][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.785604][ T393] usb 3-1: config 0 descriptor?? [ 68.967228][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 68.967248][ T36] audit: type=1400 audit(1759624052.302:401): avc: denied { create } for pid=1747 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.194833][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.202486][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.210216][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.218085][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.225662][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.233145][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.240504][ T393] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.248910][ T393] nintendo 0003:057E:200E.0004: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 69.315482][ T393] nintendo 0003:057E:200E.0004: Failed charging grip handshake [ 69.323225][ T393] nintendo 0003:057E:200E.0004: Failed to initialize controller; ret=-110 [ 69.333410][ T393] nintendo 0003:057E:200E.0004: probe - fail = -110 [ 69.340332][ T393] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -110 [ 69.764215][ T1758] rust_binder: Write failure EFAULT in pid:268 [ 70.344980][ T1757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'. [ 70.390748][ T1767] fuse: Bad value for 'fd' [ 70.436033][ T1776] tipc: Started in network mode [ 70.448764][ T1776] tipc: Node identity , cluster identity 4711 [ 70.460162][ T1776] tipc: Failed to obtain node identity [ 70.467915][ T1776] tipc: Enabling of bearer rejected, failed to enable media [ 70.499914][ T36] audit: type=1400 audit(1759624053.832:402): avc: denied { shutdown } for pid=1781 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.552427][ T1791] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.712846][ T1794] 9pnet_fd: Insufficient options for proto=fd [ 71.310919][ T393] usb 3-1: USB disconnect, device number 25 [ 71.345484][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 71.401274][ T1810] rust_binder: Write failure EFAULT in pid:228 [ 71.467842][ T36] audit: type=1400 audit(1759624054.802:403): avc: denied { write } for pid=1811 comm="syz.2.491" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.515516][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 71.522361][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.530864][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.541122][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 71.550324][ T9] usb 4-1: config 1 has no interface number 1 [ 71.556478][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 71.569565][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.580971][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.590155][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.598349][ T9] usb 4-1: Product: syz [ 71.602737][ T9] usb 4-1: Manufacturer: syz [ 71.607560][ T9] usb 4-1: SerialNumber: syz [ 71.815612][ T1814] netlink: 168 bytes leftover after parsing attributes in process `syz.3.486'. [ 71.843367][ T9] usb 4-1: USB disconnect, device number 12 [ 71.899296][ T36] audit: type=1400 audit(1759624055.232:404): avc: denied { read } for pid=1817 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.009811][ T1820] rust_binder: Got transaction with invalid offset. [ 72.009856][ T1820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.022586][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 72.926746][ T1851] tmpfs: Unknown parameter 'nr_iyoes' [ 73.195451][ T334] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 73.316734][ T1867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=6 sclass=netlink_tcpdiag_socket pid=1867 comm=syz.0.505 [ 73.345791][ T36] audit: type=1400 audit(1759624056.682:405): avc: denied { mount } for pid=1868 comm="syz.0.506" name="/" dev="configfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.371014][ T334] usb 3-1: Using ep0 maxpacket: 8 [ 73.377443][ T334] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 73.386756][ T334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.398049][ T334] usb 3-1: config 0 has no interface number 0 [ 73.406230][ T334] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 73.415878][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.424384][ T334] usb 3-1: Product: syz [ 73.428865][ T334] usb 3-1: Manufacturer: syz [ 73.436721][ T36] audit: type=1400 audit(1759624056.772:406): avc: denied { search } for pid=1868 comm="syz.0.506" name="/" dev="configfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.459826][ T334] usb 3-1: SerialNumber: syz [ 73.467194][ T334] usb 3-1: config 0 descriptor?? [ 73.473471][ T334] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 73.480105][ T334] usb 3-1: No valid video chain found. [ 73.616200][ T1876] overlayfs: failed to clone upperpath [ 73.717107][ T36] audit: type=1326 audit(1759624057.052:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.1.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3042b8eec9 code=0x7fc00000 [ 73.834710][ T62] usb 3-1: USB disconnect, device number 26 [ 73.946493][ T1888] rust_binder: Error while translating object. [ 73.946529][ T1888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.952908][ T1888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 74.030303][ T1891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.513'. [ 74.157271][ T36] audit: type=1400 audit(1759624057.492:408): avc: denied { nlmsg_read } for pid=1895 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.356718][ T1902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 74.356760][ T1902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 74.386586][ T36] audit: type=1400 audit(1759624057.722:409): avc: denied { write } for pid=1904 comm="syz.2.518" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.805125][ T1919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 75.822372][ T1923] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 75.842751][ T36] audit: type=1400 audit(1759624059.172:410): avc: denied { mount } for pid=1927 comm="syz.3.527" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.065451][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 76.195447][ T9] usb 3-1: device descriptor read/64, error -71 [ 76.302840][ T36] audit: type=1400 audit(1759624059.632:411): avc: denied { setattr } for pid=1936 comm="syz.0.530" path="socket:[11123]" dev="sockfs" ino=11123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.475968][ T9] usb 3-1: device descriptor read/64, error -71 [ 76.523741][ T36] audit: type=1400 audit(1759624059.852:412): avc: denied { write } for pid=1941 comm="syz.3.532" name="icmp6" dev="proc" ino=4026532605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.559824][ T1946] fuse: Unknown parameter '0xffffffffffffffff' [ 76.599384][ T1951] rust_binder: Write failure EINVAL in pid:298 [ 76.725548][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 76.865459][ T9] usb 3-1: device descriptor read/64, error -71 [ 77.105510][ T9] usb 3-1: device descriptor read/64, error -71 [ 77.177358][ T36] audit: type=1326 audit(1759624060.512:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d98eec9 code=0x7fc00000 [ 77.215608][ T9] usb usb3-port1: attempt power cycle [ 77.363101][ T36] audit: type=1400 audit(1759624060.692:414): avc: denied { append } for pid=1965 comm="syz.3.541" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.432546][ T1969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.542'. [ 77.445168][ T1969] mmap: syz.1.542 (1969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.521231][ T36] audit: type=1400 audit(1759624060.852:415): avc: denied { create } for pid=1965 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.521734][ T1966] rust_binder: Failed copying remainder into alloc: EFAULT [ 77.541879][ T36] audit: type=1400 audit(1759624060.852:416): avc: denied { create } for pid=1965 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.541901][ T1966] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 77.541962][ T1966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.578830][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 77.578913][ T1966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:302 [ 77.606519][ T9] usb 3-1: device descriptor read/8, error -71 [ 77.756570][ T9] usb 3-1: device descriptor read/8, error -71 [ 77.805909][ T36] audit: type=1400 audit(1759624061.142:417): avc: denied { sqpoll } for pid=1976 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.995475][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 78.016633][ T9] usb 3-1: device descriptor read/8, error -71 [ 78.153717][ T9] usb 3-1: device descriptor read/8, error -71 [ 78.265537][ T9] usb usb3-port1: unable to enumerate USB device [ 78.830777][ T2061] overlayfs: failed to resolve 'uuid=off': -2 [ 78.915813][ T2067] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 78.930845][ T2067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 78.989395][ T2071] rust_binder: Error in use_page_slow: ESRCH [ 78.989469][ T2071] rust_binder: use_range failure ESRCH [ 78.995753][ T2071] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 79.001537][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.013028][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:270 [ 79.039665][ T2076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.049282][ T2076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:275 [ 79.206940][ T2092] netlink: 'syz.2.574': attribute type 40 has an invalid length. [ 79.227093][ T2095] tipc: Started in network mode [ 79.232377][ T2095] tipc: Node identity 46ccf6ce84a6, cluster identity 4711 [ 79.240288][ T2095] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 79.250274][ T2095] tipc: Enabled bearer , priority 10 [ 79.406388][ T2106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 79.517133][ T2113] binder: Bad value for 'max' [ 79.842260][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 79.842284][ T36] audit: type=1326 audit(1759624063.172:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2073 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d98eec9 code=0x7fc00000 [ 79.939469][ T2143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 79.942426][ T2145] overlayfs: failed to clone lowerpath [ 80.365637][ T62] tipc: Node number set to 3261789902 [ 80.372053][ T36] audit: type=1400 audit(1759624063.702:429): avc: denied { read append } for pid=2173 comm="syz.3.604" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.425499][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 80.479742][ T2181] 9pnet_fd: Insufficient options for proto=fd [ 80.492326][ T36] audit: type=1400 audit(1759624063.822:430): avc: denied { remount } for pid=2175 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.505796][ T2185] /dev/loop0: Can't lookup blockdev [ 80.586484][ T9] usb 3-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 80.588677][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 80.597174][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.623726][ T9] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 80.635128][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.652640][ T9] usb 3-1: config 0 descriptor?? [ 80.850660][ T2222] overlay: ./file0 is not a directory [ 80.861251][ T9] usb 3-1: string descriptor 0 read error: -71 [ 80.871321][ T9] usb 3-1: USB disconnect, device number 31 [ 80.878006][ T36] audit: type=1400 audit(1759624064.212:431): avc: denied { read } for pid=2223 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.162035][ T2230] fuse: Unknown parameter 'Sas' [ 81.384765][ T2248] rust_binder: Error while translating object. [ 81.384804][ T2248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 81.391676][ T2248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 81.696267][ T2266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.366546][ T2280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 82.461210][ T2285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.461239][ T2285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:321 [ 82.483402][ T36] audit: type=1400 audit(1759624065.812:432): avc: denied { ioctl } for pid=2286 comm="syz.2.639" path="socket:[12865]" dev="sockfs" ino=12865 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.645473][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 82.796814][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.806372][ T36] audit: type=1400 audit(1759624066.142:433): avc: denied { accept } for pid=2302 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.808232][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.837788][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 82.847284][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.856484][ T9] usb 4-1: config 0 descriptor?? [ 82.869951][ T2306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2306 comm=syz.1.645 [ 83.267072][ T9] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 83.274901][ T9] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 83.282372][ T9] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 83.290020][ T9] playstation 0003:054C:0DF2.0005: item fetching failed at offset 3/5 [ 83.298917][ T9] playstation 0003:054C:0DF2.0005: Parse failed [ 83.305636][ T9] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22 [ 83.702702][ T2326] __vm_enough_memory: pid: 2326, comm: syz.2.652, bytes: 18014402804453376 not enough memory for the allocation [ 83.745154][ T2331] rust_binder: Read failure Err(EAGAIN) in pid:351 [ 83.791439][ T36] audit: type=1400 audit(1759624067.122:434): avc: denied { mounton } for pid=2340 comm="syz.2.657" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.832765][ T36] audit: type=1400 audit(1759624067.162:435): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.863137][ T36] audit: type=1400 audit(1759624067.192:436): avc: denied { write } for pid=2343 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.170574][ T36] audit: type=1326 audit(1759624067.502:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2367 comm="syz.0.666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d98eec9 code=0x0 [ 84.975476][ T334] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 85.127660][ T334] usb 3-1: config 14 has an invalid interface number: 159 but max is 0 [ 85.136407][ T334] usb 3-1: config 14 has no interface number 0 [ 85.143347][ T334] usb 3-1: config 14 interface 159 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 85.154633][ T334] usb 3-1: config 14 interface 159 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 85.166504][ T334] usb 3-1: config 14 interface 159 altsetting 2 has an endpoint descriptor with address 0x1B, changing to 0xB [ 85.179933][ T334] usb 3-1: config 14 interface 159 altsetting 2 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 85.191437][ T334] usb 3-1: config 14 interface 159 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 85.203000][ T334] usb 3-1: config 14 interface 159 has no altsetting 0 [ 85.212751][ T334] usb 3-1: New USB device found, idVendor=3731, idProduct=0112, bcdDevice=c0.48 [ 85.222397][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.230822][ T334] usb 3-1: Product: ࠒ [ 85.235181][ T334] usb 3-1: Manufacturer: 䨐 [ 85.240255][ T334] usb 3-1: SerialNumber: syz [ 85.308021][ T9] usb 4-1: USB disconnect, device number 13 [ 85.349136][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 85.349156][ T36] audit: type=1400 audit(1759624068.682:440): avc: denied { bind } for pid=2382 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.461753][ T334] usb 3-1: USB disconnect, device number 32 [ 86.104348][ T2425] 9pnet: Could not find request transport: foz%#d [ 86.136894][ T2429] mmap: syz.1.686 (2429): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 86.187818][ T2431] bpf: Bad value for 'gid' [ 86.671775][ T36] audit: type=1326 audit(1759624070.002:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.0.691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d4d98eec9 code=0x0 [ 86.693033][ T2447] __vm_enough_memory: pid: 2447, comm: syz.3.694, bytes: 18014402804453376 not enough memory for the allocation [ 86.722583][ T36] audit: type=1326 audit(1759624070.052:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3042b8eec9 code=0x0 [ 86.762784][ T2458] rust_binder: 381: no such ref 0 [ 86.764472][ T2456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.768288][ T2458] rust_binder: 381: no such ref 2 [ 86.788693][ T2458] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 86.925444][ T1112] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 87.105438][ T1112] usb 3-1: Using ep0 maxpacket: 16 [ 87.112204][ T1112] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.123009][ T1112] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.134245][ T1112] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 87.144020][ T1112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.152344][ T1112] usb 3-1: Product: syz [ 87.157085][ T1112] usb 3-1: Manufacturer: syz [ 87.163313][ T1112] usb 3-1: SerialNumber: syz [ 87.171053][ T1112] usb 3-1: config 0 descriptor?? [ 87.630001][ T2482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=2482 comm=syz.2.693 [ 87.663301][ T2444] veth1_macvtap: left promiscuous mode [ 87.721747][ T2482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.693'. [ 87.755523][ T2482] netlink: 'syz.2.693': attribute type 6 has an invalid length. [ 87.774236][ T2482] netlink: 'syz.2.693': attribute type 5 has an invalid length. [ 87.782222][ T36] audit: type=1400 audit(1759624071.102:443): avc: denied { execute } for pid=2440 comm="syz.2.693" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.825424][ T2482] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 87.848451][ T1112] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 87.875496][ T1112] asix 3-1:0.0: probe with driver asix failed with error -71 [ 87.895400][ T1112] usb 3-1: USB disconnect, device number 33 [ 88.011582][ T2491] overlayfs: failed to clone upperpath [ 88.404161][ T2523] tipc: Enabling of bearer rejected, failed to enable media [ 88.533640][ T2530] syzkaller0: entered promiscuous mode [ 88.539325][ T2530] syzkaller0: entered allmulticast mode [ 88.555454][ T1112] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 88.641470][ T2543] x_tables: duplicate entry at hook 2 [ 88.650298][ T2545] fuse: Unknown parameter 'yc˜' [ 88.705438][ T1112] usb 4-1: Using ep0 maxpacket: 16 [ 88.712077][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.724983][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.734907][ T1112] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 88.746774][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.761561][ T1112] usb 4-1: config 0 descriptor?? [ 88.804068][ T2562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 88.812092][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 88.813326][ T2566] /dev/nbd1: Can't lookup blockdev [ 88.824042][ T2564] 9pnet_fd: Insufficient options for proto=fd [ 88.995484][ T393] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 89.146732][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 89.158038][ T393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 89.171244][ T393] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 89.178116][ T1112] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0006/input/input8 [ 89.182527][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.196025][ T1112] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0006/input/input9 [ 89.225583][ T1112] kye 0003:0458:5012.0006: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 89.233650][ T393] usb 3-1: config 0 descriptor?? [ 89.244883][ T2556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 89.255310][ T393] usbhid 3-1:0.0: can't add hid device: -22 [ 89.263902][ T393] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 89.352700][ T2583] tipc: Started in network mode [ 89.357755][ T2583] tipc: Node identity ac14140f, cluster identity 4711 [ 89.364811][ T2583] tipc: New replicast peer: 255.255.255.255 [ 89.371602][ T2583] tipc: Enabled bearer , priority 10 [ 89.393332][ T2585] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.590961][ T1112] usb 4-1: USB disconnect, device number 14 [ 89.605051][ T2608] overlayfs: failed to clone upperpath [ 89.980834][ T2622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.981200][ T1112] usb 3-1: USB disconnect, device number 34 [ 89.989552][ T2622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.118676][ T36] audit: type=1326 audit(1759624073.452:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.143051][ T36] audit: type=1326 audit(1759624073.452:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.167534][ T36] audit: type=1326 audit(1759624073.452:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.193677][ T36] audit: type=1326 audit(1759624073.452:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.219371][ T36] audit: type=1326 audit(1759624073.452:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.243947][ T36] audit: type=1326 audit(1759624073.452:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0157d8eec9 code=0x7ffc0000 [ 90.365436][ T334] tipc: Node number set to 2886997007 [ 90.487721][ T2656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 90.496848][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 90.496868][ T36] audit: type=1400 audit(1759624073.822:480): avc: denied { getopt } for pid=2653 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.555473][ T1112] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 90.688593][ T36] audit: type=1326 audit(1759624074.022:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2680 comm="syz.1.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3042b8eec9 code=0x0 [ 90.715441][ T1112] usb 4-1: Using ep0 maxpacket: 16 [ 90.722122][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.733633][ T1112] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.746662][ T1112] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 90.757055][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.768006][ T1112] usb 4-1: config 0 descriptor?? [ 91.181018][ T1112] logitech 0003:046D:C219.0007: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.3-1/input0 [ 91.192883][ T1112] logitech 0003:046D:C219.0007: no inputs found [ 91.517094][ T36] audit: type=1400 audit(1759624074.852:482): avc: denied { setopt } for pid=2722 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.631277][ T2735] 9pnet_fd: Insufficient options for proto=fd [ 92.395699][ T36] audit: type=1400 audit(1759624075.732:483): avc: denied { create } for pid=2772 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.397225][ T2776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.419823][ T36] audit: type=1400 audit(1759624075.752:484): avc: denied { create } for pid=2772 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.444778][ T2776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.460887][ T2778] overlayfs: failed to clone lowerpath [ 92.574957][ T2797] VFS: Mount too revealing [ 93.104439][ T2823] netlink: 182 bytes leftover after parsing attributes in process `syz.1.813'. [ 93.209981][ T36] audit: type=1400 audit(1759624076.542:485): avc: denied { read } for pid=2814 comm="syz.3.817" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.235533][ T36] audit: type=1400 audit(1759624076.542:486): avc: denied { open } for pid=2814 comm="syz.3.817" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.261929][ T36] audit: type=1400 audit(1759624076.562:487): avc: denied { ioctl } for pid=2814 comm="syz.3.817" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.314146][ T36] audit: type=1326 audit(1759624076.642:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2829 comm="syz.1.820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3042b8eec9 code=0x0 [ 93.379504][ T2835] /dev/rnullb0: Can't open blockdev [ 93.413551][ T2840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.414129][ T2840] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 93.421410][ T2841] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 93.493251][ T2854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 93.501959][ T2854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:431 [ 93.563260][ T2862] binder: Bad value for 'max' [ 93.603991][ T2864] input: syz0 as /devices/virtual/input/input10 [ 93.631080][ T2864] /dev/rnullb0: Can't open blockdev [ 93.649058][ T2868] x_tables: duplicate underflow at hook 1 [ 93.713590][ T36] audit: type=1400 audit(1759624077.042:489): avc: denied { getopt } for pid=2876 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.756788][ T2883] netlink: 680 bytes leftover after parsing attributes in process `syz.2.840'. [ 93.801477][ T2893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 94.177367][ T2898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 94.307561][ T2910] netlink: 4296 bytes leftover after parsing attributes in process `syz.2.850'. [ 94.769002][ T2902] overlayfs: failed to clone upperpath [ 94.871002][ T2917] overlayfs: failed to clone lowerpath [ 94.936506][ T2929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2929 comm=syz.2.857 [ 94.983423][ T2936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'. [ 94.992778][ T2936] netlink: 17 bytes leftover after parsing attributes in process `syz.2.859'. [ 95.002962][ T2936] tipc: Invalid UDP bearer configuration [ 95.003003][ T2936] tipc: Enabling of bearer rejected, failed to enable media [ 95.019130][ T2936] bridge0: port 3(erspan0) entered blocking state [ 95.026217][ T2936] bridge0: port 3(erspan0) entered disabled state [ 95.033073][ T2936] erspan0: entered allmulticast mode [ 95.039674][ T2936] erspan0: entered promiscuous mode [ 95.045759][ T2936] bridge0: port 3(erspan0) entered blocking state [ 95.052402][ T2936] bridge0: port 3(erspan0) entered forwarding state [ 95.650939][ T2955] kvm: kvm [2954]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0x200000000 [ 95.678487][ T2975] /dev/loop0: Can't lookup blockdev [ 95.684725][ T2955] kvm: kvm [2954]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0x200000000 [ 95.697855][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.698016][ T2957] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 95.705287][ T2955] kvm: kvm [2954]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x2be702111 [ 95.726510][ T2957] rust_binder: Write failure EINVAL in pid:452 [ 95.730125][ T2956] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 95.735006][ T36] audit: type=1400 audit(1759624079.062:490): avc: denied { read } for pid=2983 comm="syz.1.878" name="file2" dev="tmpfs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.737416][ T2956] rust_binder: Write failure EINVAL in pid:452 [ 95.770672][ T2955] kvm: kvm [2954]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x200000000 [ 95.797509][ T2955] kvm: kvm [2954]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x200000000 [ 96.099559][ T3017] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 96.130030][ T36] audit: type=1400 audit(1759624079.462:491): avc: denied { setopt } for pid=3036 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.153559][ T3038] rust_binder: Write failure EINVAL in pid:457 [ 96.154125][ T3038] overlayfs: failed to resolve './file1': -2 [ 96.168011][ T3038] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 96.176058][ T3038] rust_binder: Write failure EINVAL in pid:457 [ 96.262717][ T36] audit: type=1400 audit(1759624079.592:492): avc: denied { remount } for pid=3051 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.310877][ T3056] netlink: 696 bytes leftover after parsing attributes in process `syz.0.902'. [ 96.358985][ T36] audit: type=1400 audit(1759624079.692:493): avc: denied { getopt } for pid=3048 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.683662][ T3073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'. [ 96.696884][ T3072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3072 comm=syz.1.906 [ 244.076881][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.3.900:3049] [ 244.076932][ C0] CPU#0 Utilization every 22s during lockup: [ 244.076942][ C0] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 244.076957][ C0] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 244.076971][ C0] #3: 100% system, 1% softirq, 1% hardirq, 0% idle [ 244.076985][ C0] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 244.076999][ C0] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 244.077013][ C0] Modules linked in: [ 244.077048][ C0] CPU: 0 UID: 0 PID: 3049 Comm: syz.3.900 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b [ 244.077069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.077090][ C0] RIP: 0010:change_mnt_propagation+0x112/0xb00 [ 244.077130][ C0] Code: 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 77 4e e7 ff 4d 39 2e 0f 84 8f 00 00 00 <49> 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 244.077145][ C0] RSP: 0018:ffffc9000e86f9c0 EFLAGS: 00000206 [ 244.077160][ C0] RAX: 1ffff11026a13fbc RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 244.077173][ C0] RDX: ffffc90002244000 RSI: 000000000007ffff RDI: 0000000000080000 [ 244.077185][ C0] RBP: ffffc9000e86fa10 R08: ffff88813781d0ef R09: 0000000000000000 [ 244.077197][ C0] R10: ffff88813781d0e0 R11: ffffed1026f03a1e R12: ffff88813509fdc0 [ 244.077210][ C0] R13: ffff888110d9a880 R14: ffff88813509fde0 R15: ffff888134fee540 [ 244.077223][ C0] FS: 00007f0158ca86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 244.077238][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.077250][ C0] CR2: 0000000000000000 CR3: 0000000139cd4000 CR4: 00000000003526b0 [ 244.077264][ C0] Call Trace: [ 244.077272][ C0] [ 244.077288][ C0] umount_tree+0xdfd/0xf70 [ 244.077312][ C0] ? irqentry_exit+0x4a/0x60 [ 244.077328][ C0] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 244.077358][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 244.077375][ C0] ? __detach_mounts+0x610/0x610 [ 244.077396][ C0] attach_recursive_mnt+0x6df/0x21e0 [ 244.077414][ C0] ? __asan_memset+0x39/0x50 [ 244.077443][ C0] ? graft_tree+0x1c0/0x1c0 [ 244.077459][ C0] ? clone_mnt+0xa27/0xc80 [ 244.077479][ C0] graft_tree+0x157/0x1c0 [ 244.077495][ C0] do_loopback+0x364/0x4b0 [ 244.077517][ C0] ? path_mount+0x1050/0x1050 [ 244.077538][ C0] ? security_capable+0xcf/0xf0 [ 244.077559][ C0] ? ns_capable+0x91/0xf0 [ 244.077580][ C0] path_mount+0x582/0x1050 [ 244.077602][ C0] ? putname+0x113/0x150 [ 244.077617][ C0] __se_sys_mount+0x2bd/0x480 [ 244.077631][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 244.077645][ C0] ? __kasan_check_write+0x18/0x20 [ 244.077667][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 244.077687][ C0] __x64_sys_mount+0xc3/0xf0 [ 244.077701][ C0] x64_sys_call+0x2021/0x2ee0 [ 244.077724][ C0] do_syscall_64+0x58/0xf0 [ 244.077741][ C0] ? clear_bhb_loop+0x50/0xa0 [ 244.077755][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.077779][ C0] RIP: 0033:0x7f0157d8eec9 [ 244.077799][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.077812][ C0] RSP: 002b:00007f0158ca8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.077827][ C0] RAX: ffffffffffffffda RBX: 00007f0157fe5fa0 RCX: 00007f0157d8eec9 [ 244.077838][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 244.077848][ C0] RBP: 00007f0157e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.077858][ C0] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 244.077867][ C0] R13: 00007f0157fe6038 R14: 00007f0157fe5fa0 R15: 00007ffcb15a30e8 [ 244.077880][ C0] [ 244.077890][ C0] Sending NMI from CPU 0 to CPUs 1: [ 244.464644][ C1] NMI backtrace for cpu 1 [ 244.464664][ C1] CPU: 1 UID: 0 PID: 3069 Comm: syz.0.905 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b [ 244.464697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.464707][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 244.464731][ C1] Code: cc cc cc b8 1e 1d 21 8b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 244.464745][ C1] RSP: 0018:ffffc9000e2b7710 EFLAGS: 000002d3 [ 244.464761][ C1] RAX: ffffffff81439535 RBX: 0000000000000003 RCX: ffff8881146e2600 [ 244.464774][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 244.464785][ C1] RBP: ffffc9000e2b7710 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 244.464798][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 244.464811][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92001c56ee4 [ 244.464822][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 244.464836][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.464850][ C1] CR2: 00007f3043aebf70 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 244.464865][ C1] Call Trace: [ 244.464873][ C1] [ 244.464881][ C1] kvm_wait+0x1ba/0x220 [ 244.464904][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 244.464927][ C1] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 244.464951][ C1] ? syscall_exit_to_user_mode+0x58/0xb0 [ 244.464968][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 244.464993][ C1] _raw_spin_lock+0x109/0x120 [ 244.465011][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 244.465031][ C1] mntput_no_expire+0x147/0x6c0 [ 244.465053][ C1] ? __kasan_check_write+0x18/0x20 [ 244.465078][ C1] ? lockref_put_return+0x156/0x1d0 [ 244.465101][ C1] ? mntput+0xd0/0xd0 [ 244.465121][ C1] ? __kasan_check_write+0x18/0x20 [ 244.465145][ C1] ? _raw_spin_lock+0x8c/0x120 [ 244.465164][ C1] mntput+0x63/0xd0 [ 244.465184][ C1] path_put+0x5b/0x70 [ 244.465199][ C1] exit_fs+0xe8/0x160 [ 244.465214][ C1] do_exit+0x98d/0x2630 [ 244.465235][ C1] ? __cfi_do_exit+0x10/0x10 [ 244.465254][ C1] ? futex_wake+0x5fb/0x900 [ 244.465273][ C1] ? futex_setup_timer+0xb4/0xd0 [ 244.465289][ C1] ? __kasan_check_write+0x18/0x20 [ 244.465317][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 244.465335][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 244.465355][ C1] do_group_exit+0x22a/0x300 [ 244.465374][ C1] ? __kasan_check_write+0x18/0x20 [ 244.465398][ C1] get_signal+0x139d/0x14f0 [ 244.465423][ C1] arch_do_signal_or_restart+0x96/0x720 [ 244.465448][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 244.465475][ C1] syscall_exit_to_user_mode+0x58/0xb0 [ 244.465491][ C1] do_syscall_64+0x64/0xf0 [ 244.465511][ C1] ? clear_bhb_loop+0x50/0xa0 [ 244.465535][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.465560][ C1] RIP: 0033:0x7f8d4d98eec9 [ 244.465573][ C1] Code: Unable to access opcode bytes at 0x7f8d4d98ee9f. [ 244.465581][ C1] RSP: 002b:00007f8d4c3f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 244.465598][ C1] RAX: fffffffffffffe00 RBX: 00007f8d4dbe5fa8 RCX: 00007f8d4d98eec9 [ 244.465610][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d4dbe5fa8 [ 244.465621][ C1] RBP: 00007f8d4dbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 244.465632][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.465642][ C1] R13: 00007f8d4dbe6038 R14: 00007ffc4817cd60 R15: 00007ffc4817ce48 [ 244.465656][ C1]