last executing test programs: 6.599756274s ago: executing program 0 (id=371): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)={0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.884196556s ago: executing program 0 (id=402): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0xe, 0x1, {0x56, 0x4, 0x10, {0x6, 0x3}, {0xf635, 0xff}, @rumble={0x1ff, 0x82}}, {0x56, 0x80, 0x0, {0x1ff, 0x7fff}, {0x96, 0x2}, @period={0x5b, 0x3, 0x3, 0x5, 0x7711, {0x7, 0x4, 0x8, 0x1}, 0x7, &(0x7f0000000640)=[0x7f, 0x0, 0xdac0, 0x1, 0x3, 0x0, 0x9c]}}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000680)={0x1, 0x9}) (async) r4 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008891}, 0xc081) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) ustat(0x1, &(0x7f0000000000)) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r6) (async) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000001c0), 0x4) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2f000000675120364f1a095b6f3a86998b73d1ee95ca36c099df38678eae6f7c34ccbb013bb2cbdf5e75337ba3226e0b7ec05081f068192fe507a0a5b5672bb546aec7a34799e50a5adb1f4811165e3672e3f64b78cfe2a7da43bf169aca6ec4535c1d924a55f8daefcee003d6d7c7e234f0dfd05f8e0cc4a680bb79c61717bdf44a6872039234339a6826ade6b126c7d976cf8298c862fe784d02a83aa264cf2129763410b7f8155b77dd30894b24831eb23839b5f5d5c75f98fec472a66e63b9b70f539b696337b89e52293ca4ea9cd98e69da1df1b49a1bd15e05f522", @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf250f0000001400078008000200faffffff0800020000010000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000480)=[@register_looper, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r11, 0x3, 0xffffffffffffffff, 0x5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) 3.70783285s ago: executing program 0 (id=403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xa87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7ff, 0x81, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x96, 0xff, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4e, 0xd4, 0x93}}]}}}]}}]}}, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r2 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r3 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 2.016230282s ago: executing program 1 (id=433): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003c40)=""/4110, 0x100e}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2855}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 2.011435962s ago: executing program 1 (id=434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.836255845s ago: executing program 1 (id=437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r1], 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.556281391s ago: executing program 3 (id=441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x2, 0x6, 0xd, 0xf, 0x2, 0x95, 0x53, 0xff, 0x5, 0x6, 0x3, 0x0, 0xf373}, {0x3, 0x7, 0x8, 0x8, 0xa, 0x10, 0x8, 0x7, 0x3, 0x1, 0xf, 0x2, 0x5}, {0x3, 0x7, 0x9, 0x0, 0x0, 0x5a, 0x6, 0xfe, 0x1, 0x9, 0x6, 0x7f, 0x1200}], 0x6}) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d", @ANYRES32=r6, @ANYBLOB="799577b09f79f0e19a8eb732a4f435"], 0xb0) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@appraise}, {@euid_eq={'euid', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4075, 0xfeb}], 0x4}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.525320141s ago: executing program 3 (id=442): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003c40)=""/4110, 0x100e}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2855}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1.473825323s ago: executing program 3 (id=443): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x0, 0x100}) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 1.296417186s ago: executing program 1 (id=444): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8006) sendfile(r0, r0, 0x0, 0x7ffff000) 1.296204466s ago: executing program 1 (id=445): unshare(0x2c050080) socket(0x10, 0x1, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r0, 0xff, 0x22, 0x0, &(0x7f00000002c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0x82fae000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r1, 0x8b78f000) 1.263341436s ago: executing program 1 (id=446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioperm(0x1, 0x3, 0x163f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x7ff, 0x100000000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = userfaultfd(0x1) ftruncate(r0, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x10802, 0x20) unlinkat(r3, &(0x7f0000000440)='./file0\x00', 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x6, 0xc8}]}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = fcntl$dupfd(r6, 0x0, r6) sendmsg$key(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) 1.246597127s ago: executing program 2 (id=447): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000300)="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", 0x18}, {&(0x7f00000000c0)="714cbda4", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0xf000000) 1.160265908s ago: executing program 2 (id=448): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xb4, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xfa9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xffff2dd0}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6515}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x444c2}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, r3, 0xf4877000) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) (async) sendfile(r2, r2, 0x0, 0x7ffff001) 1.05278596s ago: executing program 2 (id=449): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) close(0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 996.468372ms ago: executing program 2 (id=450): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20004010) (async) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20004010) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) preadv(r1, &(0x7f0000004c80)=[{&(0x7f0000004b00)=""/225, 0xe1}], 0x1, 0x9, 0x7) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x40, 0xad) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002200)={0x0, @multicast2, @dev}, &(0x7f0000002240)=0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000001b00010027bd7000fcdbdf250000000000000000000001fc01000000000000000000004e2180014e0dfff00200a100e32200e2ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="810000000000000023000000000000007a000000000000028100000000000005000000000000000500000000000000060000000000000005000000000000000600000000000000a9240000e08000000000000000a000000800000000000000faffffffb36b6e000201020100000000d1000000000000000a00100001"], 0xcc}, 0x1, 0x0, 0x0, 0x405c844}, 0x48800) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000001b00010027bd7000fcdbdf250000000000000000000001fc01000000000000000000004e2180014e0dfff00200a100e32200e2ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="810000000000000023000000000000007a000000000000028100000000000005000000000000000500000000000000060000000000000005000000000000000600000000000000a9240000e08000000000000000a000000800000000000000faffffffb36b6e000201020100000000d1000000000000000a00100001"], 0xcc}, 0x1, 0x0, 0x0, 0x405c844}, 0x48800) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0x100000004, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000002280)={@rand_addr=0x64010100, @private=0xa010101, r4}, 0xc) (async) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000002280)={@rand_addr=0x64010100, @private=0xa010101, r4}, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f06006f64653d3030ef303030d6f5468eb9c891bbbbc34dc59e88eab1303030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f06006f64653d3030ef303030d6f5468eb9c891bbbbc34dc59e88eab1303030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000006e80)={0x2020}, 0x2082) (async) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x10000007fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0x0, 0x0, r9, r10, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000022c0)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76fa095ce64b4bc9501f112779508030a1059d0579771bc137749a219b6ae070768a074ac6da45f0f163aa30d15aec32a060e74c02f24af6bc7a11628fdb193e92a209ad164c217edb42527e9f42558ad0b4c3283b57f230bbb45a978a0ef2bbeb60df20eca3f40730bebcca0d66c75b53c9719242cf6fb8d1ff45f33beacabc135ccce4d3ba70ec5ca023ab1271b74fba14f1cd425a4c4d9059ec4317f63c024bb28565022daca023edce326b1d314f96edc242b1da2a1ec048a52b8a540e031c4d870cb180d03ec56b9c934", 0x184}, {&(0x7f0000002480)="892950e2405ee8629d9384a91c16d1706a3e7d7f05119f95ca750000da32130800000000000000f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77fef1475f345a2c8b178eeeba0cde7318a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a197e826294f28365e3ecdf1fb2e5084c4edfc609666723e102584046d3eccb5242ca52e91f00", 0xffffffffffffff72}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0xc010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 836.323234ms ago: executing program 2 (id=451): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003c40)=""/4110, 0x100e}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2855}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 818.018185ms ago: executing program 2 (id=452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 607.427499ms ago: executing program 3 (id=453): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, 0x0, 0x0) read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000140001002bbd7000ffdbdf25fc010000000000000000000000000000640101000000000000000000000000004e21000d4e2400080a0020007300000014351814d01d5de0c668ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e00010000000a0010000100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire={0x40046305, 0x1}, @exit_looper, @exit_looper, @register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) 508.202671ms ago: executing program 0 (id=454): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) recvmmsg(r1, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x10000}], 0x1, 0x40, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x3, 0x8, 0x3, 0x9}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) getrlimit(0xc, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f00000016c0)={0x2, 0x2, 0x2000, 0x1000, &(0x7f000004b000/0x1000)=nil, 0x3, r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x4c8800, 0x8}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001680)='./binderfs/binder0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 341.730214ms ago: executing program 3 (id=455): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0xc, 0xfffffffffffffd00}}, 0x28) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) ioctl$FIONCLEX(r0, 0x5450) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 156.312938ms ago: executing program 0 (id=456): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000300)="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", 0x18}, {&(0x7f00000000c0)="714cbda4", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x28000000) 307.44µs ago: executing program 3 (id=457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000137000/0x400000)=nil) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup2(r1, r1) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000200)={0xb0000017}) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, 0x0, 0x0) close_range(r0, r3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 0 (id=458): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x81, r2, &(0x7f0000000280)="f0c9e95dae599d1b7ddd255fb763b5cff1a752df2498e06ae37159e824e948f816f5f0a94e00a74f74ed84d1432b7d6a2d4b0c5732aa5f682febd08586c59324f800b778", 0x44, 0xafe3, 0x0, 0x2, r5}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r7, r7, 0x0, 0x7a680000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000100000000000000000000000100"], 0x28) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r10, 0x80045515, 0x0) syz_io_uring_setup(0xbab, &(0x7f0000000140)={0x0, 0x8000b206, 0xd632ee2e158bcb6, 0x1, 0x229}, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0xaf9, 0x0, 0x7}, {0x347, 0x0, 0x67c}, {0x641, 0x0, 0x5}, {0x813, 0x0, 0x6}, {0xbdf, 0x0, 0x3}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r12, 0x8010aebc, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.267035][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 18.267053][ T36] audit: type=1400 audit(1759402957.040:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.272033][ T36] audit: type=1400 audit(1759402957.040:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.275670][ T36] audit: type=1400 audit(1759402957.040:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2032]" dev="pipefs" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.279892][ T36] audit: type=1400 audit(1759402957.040:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.283843][ T36] audit: type=1400 audit(1759402957.040:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 26.798926][ T36] audit: type=1400 audit(1759402965.570:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.800405][ T282] cgroup: Unknown subsys name 'net' [ 26.821884][ T36] audit: type=1400 audit(1759402965.570:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.849346][ T36] audit: type=1400 audit(1759402965.610:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.849566][ T282] cgroup: Unknown subsys name 'devices' [ 26.958742][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.965498][ T282] cgroup: Unknown subsys name 'rlimit' [ 27.098852][ T36] audit: type=1400 audit(1759402965.870:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.122363][ T36] audit: type=1400 audit(1759402965.870:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.139718][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.147549][ T36] audit: type=1400 audit(1759402965.870:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.179139][ T36] audit: type=1400 audit(1759402965.930:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.204989][ T36] audit: type=1400 audit(1759402965.930:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.212554][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.230672][ T36] audit: type=1400 audit(1759402965.980:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.265462][ T36] audit: type=1400 audit(1759402965.980:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.569654][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.576989][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.584193][ T289] bridge_slave_0: entered allmulticast mode [ 28.590818][ T289] bridge_slave_0: entered promiscuous mode [ 28.610353][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.617485][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.624583][ T289] bridge_slave_1: entered allmulticast mode [ 28.631021][ T289] bridge_slave_1: entered promiscuous mode [ 28.660330][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.667724][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.674848][ T290] bridge_slave_0: entered allmulticast mode [ 28.681359][ T290] bridge_slave_0: entered promiscuous mode [ 28.694601][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.701865][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.709060][ T290] bridge_slave_1: entered allmulticast mode [ 28.715631][ T290] bridge_slave_1: entered promiscuous mode [ 28.750107][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.757199][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.764814][ T291] bridge_slave_0: entered allmulticast mode [ 28.771251][ T291] bridge_slave_0: entered promiscuous mode [ 28.781525][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788756][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.795904][ T292] bridge_slave_0: entered allmulticast mode [ 28.802152][ T292] bridge_slave_0: entered promiscuous mode [ 28.812338][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.819711][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.826986][ T291] bridge_slave_1: entered allmulticast mode [ 28.833254][ T291] bridge_slave_1: entered promiscuous mode [ 28.842896][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.850140][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.857256][ T292] bridge_slave_1: entered allmulticast mode [ 28.863528][ T292] bridge_slave_1: entered promiscuous mode [ 28.999299][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.006401][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.013752][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.020828][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.081794][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.089084][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.096395][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.103451][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.114507][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.121804][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.129415][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.136575][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.148748][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.155879][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.163180][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.170350][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.207886][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.215614][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.223160][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.231247][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.239296][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.247291][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.255052][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.262625][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.286708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.293971][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.301683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.309213][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.340116][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.347529][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.355831][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.363075][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.370714][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.377842][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.385685][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.392832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.418887][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.426057][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.434020][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.441295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.474854][ T290] veth0_vlan: entered promiscuous mode [ 29.486722][ T291] veth0_vlan: entered promiscuous mode [ 29.493407][ T289] veth0_vlan: entered promiscuous mode [ 29.512599][ T290] veth1_macvtap: entered promiscuous mode [ 29.530190][ T289] veth1_macvtap: entered promiscuous mode [ 29.542939][ T292] veth0_vlan: entered promiscuous mode [ 29.550368][ T291] veth1_macvtap: entered promiscuous mode [ 29.595116][ T292] veth1_macvtap: entered promiscuous mode [ 29.611184][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.659608][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.709890][ T335] Zero length message leads to an empty skb [ 29.738474][ T342] No source specified [ 29.975298][ T330] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 30.126563][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 30.137848][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.151926][ T330] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 30.161991][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.171882][ T359] sit0: entered promiscuous mode [ 30.178761][ T359] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 30.181500][ T330] usb 4-1: config 0 descriptor?? [ 30.186577][ T359] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.192073][ T341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.203196][ T359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.207971][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 30.219340][ T359] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 30.225923][ T330] usbhid 4-1:0.0: can't add hid device: -22 [ 30.235909][ T359] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.251694][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 30.375315][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 30.399158][ T367] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.424023][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.436099][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.527186][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 30.538219][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.551501][ T10] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 30.560749][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.569985][ T10] usb 2-1: config 0 descriptor?? [ 30.579729][ T354] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.588252][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 30.596855][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 30.605320][ T31] usb 4-1: USB disconnect, device number 2 [ 30.675316][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.745449][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.805287][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.906578][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.916561][ T66] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 30.925724][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.934748][ T66] usb 1-1: config 0 descriptor?? [ 31.055289][ T45] usb 3-1: device descriptor read/64, error -71 [ 31.098307][ T386] netlink: 220 bytes leftover after parsing attributes in process `syz.3.16'. [ 31.111199][ T386] devpts: called with bogus options [ 31.315268][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.344648][ T66] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 31.455281][ T45] usb 3-1: device descriptor read/64, error -71 [ 31.575533][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.725300][ T45] usb 3-1: device descriptor read/64, error -71 [ 31.735051][ T388] veth0_to_team: entered promiscuous mode [ 31.741761][ T388] veth0_to_team: entered allmulticast mode [ 31.835380][ T45] usb usb3-port1: attempt power cycle [ 32.175343][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.196498][ T45] usb 3-1: device descriptor read/8, error -71 [ 32.252161][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.260667][ T10] usb 4-1: no configurations [ 32.262228][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 32.262248][ T36] audit: type=1400 audit(1759402971.040:150): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.265715][ T10] usb 4-1: can't read configurations, error -22 [ 32.337394][ T45] usb 3-1: device descriptor read/8, error -71 [ 32.351307][ T36] audit: type=1400 audit(1759402971.120:151): avc: denied { read write } for pid=379 comm="syz.0.15" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.375446][ T36] audit: type=1400 audit(1759402971.120:152): avc: denied { open } for pid=379 comm="syz.0.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.399957][ T36] audit: type=1400 audit(1759402971.120:153): avc: denied { ioctl } for pid=379 comm="syz.0.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.425431][ T36] audit: type=1400 audit(1759402971.120:154): avc: denied { create } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.444998][ T36] audit: type=1400 audit(1759402971.120:155): avc: denied { connect } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.464683][ T36] audit: type=1400 audit(1759402971.120:156): avc: denied { connect } for pid=397 comm="syz.3.19" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.485112][ T36] audit: type=1400 audit(1759402971.120:157): avc: denied { write } for pid=397 comm="syz.3.19" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.508448][ T36] audit: type=1400 audit(1759402971.180:158): avc: denied { setopt } for pid=404 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.528922][ T36] audit: type=1400 audit(1759402971.180:159): avc: denied { read } for pid=379 comm="syz.0.15" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.582602][ T416] input: syz1 as /devices/virtual/input/input4 [ 32.615267][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.637929][ T45] usb 3-1: device descriptor read/8, error -71 [ 32.673722][ T424] bpf: Bad value for 'gid' [ 32.715560][ T429] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.766543][ T45] usb 3-1: device descriptor read/8, error -71 [ 32.885360][ T45] usb usb3-port1: unable to enumerate USB device [ 33.092151][ T45] usb 2-1: USB disconnect, device number 2 [ 33.145308][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.296959][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.306193][ T10] usb 4-1: config 2 has an invalid interface number: 34 but max is 2 [ 33.315103][ T10] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 33.323703][ T10] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 33.334007][ T10] usb 4-1: config 2 has no interface number 0 [ 33.340167][ T10] usb 4-1: config 2 has no interface number 2 [ 33.346752][ T10] usb 4-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 33.358266][ T10] usb 4-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 33.369632][ T10] usb 4-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 33.382684][ T10] usb 4-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 33.395467][ T10] usb 4-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 33.408920][ T10] usb 4-1: config 2 interface 1 has no altsetting 0 [ 33.415582][ T10] usb 4-1: config 2 interface 34 has no altsetting 0 [ 33.422316][ T10] usb 4-1: config 2 interface 6 has no altsetting 0 [ 33.439801][ T10] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 33.450490][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.456196][ T437] rust_binder: Error while translating object. [ 33.458642][ T437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.465440][ T10] usb 4-1: Product: syz [ 33.469741][ T437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 33.474900][ T10] usb 4-1: Manufacturer: syz [ 33.490426][ T442] rust_binder: Write failure EFAULT in pid:24 [ 33.500544][ T330] usb 1-1: USB disconnect, device number 2 [ 33.514118][ T10] usb 4-1: SerialNumber: syz [ 33.611423][ T449] netlink: 'syz.1.35': attribute type 13 has an invalid length. [ 33.627188][ T452] overlay: filesystem on ./file0 not supported as upperdir [ 33.723403][ T462] kvm: kvm [461]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xffffffffffffffff [ 33.738787][ T10] usb 4-1: selecting invalid altsetting 0 [ 33.739477][ T462] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 33.767595][ T10] usb 4-1: USB disconnect, device number 4 [ 33.796463][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.847736][ T465] mmap: syz.1.40 (465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.955249][ T330] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.053631][ T472] sit0: entered promiscuous mode [ 34.060789][ T472] netlink: 1 bytes leftover after parsing attributes in process `syz.0.42'. [ 34.079688][ T483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 34.105241][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 34.121239][ T493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 34.131224][ T330] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 34.145444][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.157324][ T330] usb 3-1: config 0 descriptor?? [ 34.214977][ T498] netlink: 393 bytes leftover after parsing attributes in process `syz.1.51'. [ 34.224769][ T498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=498 comm=syz.1.51 [ 34.258474][ T500] /dev/sg0: Can't lookup blockdev [ 34.338653][ T510] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 34.338676][ T510] rust_binder: Error while translating object. [ 34.347664][ T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.354044][ T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 34.385680][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.525328][ T66] usb 1-1: device descriptor read/64, error -71 [ 34.615311][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.765267][ T66] usb 1-1: device descriptor read/64, error -71 [ 34.766431][ T10] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.781855][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.789929][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 34.799144][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.808005][ T10] usb 2-1: config 0 descriptor?? [ 34.838154][ T514] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.904391][ T518] syzkaller0: entered promiscuous mode [ 34.910008][ T518] syzkaller0: entered allmulticast mode [ 34.997730][ T522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.998278][ T522] bridge0: entered allmulticast mode [ 35.010614][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.016190][ T522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 35.027868][ T522] bridge_slave_1: left allmulticast mode [ 35.033586][ T522] bridge_slave_1: left promiscuous mode [ 35.039299][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.047077][ T522] bridge_slave_0: left allmulticast mode [ 35.053031][ T522] bridge_slave_0: left promiscuous mode [ 35.059222][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.066681][ T523] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 35.068954][ T522] bridge0 (unregistering): left allmulticast mode [ 35.145310][ T66] usb 1-1: device descriptor read/64, error -71 [ 35.217667][ T10] ryos 0003:1E7D:3138.0002: collection stack underflow [ 35.225040][ T10] ryos 0003:1E7D:3138.0002: item 0 4 0 12 parsing failed [ 35.232564][ T10] ryos 0003:1E7D:3138.0002: parse failed [ 35.238388][ T10] ryos 0003:1E7D:3138.0002: probe with driver ryos failed with error -22 [ 35.385354][ T66] usb 1-1: device descriptor read/64, error -71 [ 35.420981][ T10] usb 2-1: USB disconnect, device number 3 [ 35.495385][ T66] usb usb1-port1: attempt power cycle [ 35.568937][ T330] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.579216][ T330] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 35.589992][ T330] asix 3-1:0.0: probe with driver asix failed with error -71 [ 35.598630][ T330] usb 3-1: USB disconnect, device number 6 [ 35.835256][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.856384][ T66] usb 1-1: device descriptor read/8, error -71 [ 35.986504][ T66] usb 1-1: device descriptor read/8, error -71 [ 35.995284][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.145341][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 36.152031][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.160694][ T45] usb 4-1: config 0 has no interface number 0 [ 36.167288][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 36.175374][ T330] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 36.183620][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.184529][ T539] loop7: detected capacity change from 0 to 7 [ 36.193106][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.207394][ T45] usb 4-1: Product: syz [ 36.211965][ T45] usb 4-1: Manufacturer: syz [ 36.216631][ T45] usb 4-1: SerialNumber: syz [ 36.222164][ T45] usb 4-1: config 0 descriptor?? [ 36.228902][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.238445][ T45] smsc75xx v1.0.0 [ 36.256483][ T66] usb 1-1: device descriptor read/8, error -71 [ 36.326892][ T330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.335626][ T330] usb 2-1: not running at top speed; connect to a high speed hub [ 36.344612][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.354922][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.366792][ T330] usb 2-1: string descriptor 0 read error: -22 [ 36.373484][ T330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.390046][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.399494][ T66] usb 1-1: device descriptor read/8, error -71 [ 36.413225][ T330] usb 2-1: 0:2 : does not exist [ 36.470473][ T545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 36.470911][ T545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.480115][ T545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 36.515365][ T66] usb usb1-port1: unable to enumerate USB device [ 36.839771][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 36.850988][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.173655][ T549] SELinux: syz.0.71 (549) set checkreqprot to 1. This is no longer supported. [ 37.263837][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 37.275828][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 37.287319][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 37.297334][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 37.308875][ T45] usb 4-1: USB disconnect, device number 5 [ 37.343864][ T553] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.370733][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 37.370767][ T36] audit: type=1400 audit(1759402976.140:222): avc: denied { append } for pid=554 comm="syz.0.74" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.379868][ T555] __vm_enough_memory: pid: 555, comm: syz.0.74, bytes: 18014402804453376 not enough memory for the allocation [ 37.414150][ T330] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 37.424530][ T330] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 37.434761][ T330] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 37.464678][ T330] usb 2-1: USB disconnect, device number 4 [ 37.663914][ T574] netlink: 328 bytes leftover after parsing attributes in process `syz.0.80'. [ 37.675635][ T574] 9pnet_fd: Insufficient options for proto=fd [ 37.699202][ T36] audit: type=1400 audit(1759402976.470:223): avc: denied { ioctl } for pid=575 comm="syz.0.81" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.725768][ T36] audit: type=1400 audit(1759402976.470:224): avc: denied { write } for pid=575 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.748167][ T578] /dev/rnullb0: Can't open blockdev [ 37.768826][ T36] audit: type=1400 audit(1759402976.540:225): avc: denied { map } for pid=579 comm="syz.0.83" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 37.812700][ T36] audit: type=1400 audit(1759402976.540:226): avc: denied { execute } for pid=579 comm="syz.0.83" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 37.870711][ T588] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 37.870760][ T588] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.879689][ T588] rust_binder: Read failure Err(EFAULT) in pid:79 [ 37.895340][ T588] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 37.910181][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 37.973159][ T36] audit: type=1400 audit(1759402976.740:227): avc: denied { connect } for pid=592 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.012660][ T36] audit: type=1400 audit(1759402976.780:228): avc: denied { create } for pid=592 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.033461][ T36] audit: type=1400 audit(1759402976.780:229): avc: denied { bind } for pid=592 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.069409][ T36] audit: type=1400 audit(1759402976.840:230): avc: denied { connect } for pid=592 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.205281][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.241887][ T611] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 38.243250][ T36] audit: type=1400 audit(1759402977.010:231): avc: denied { ioctl } for pid=612 comm="syz.1.97" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.251245][ T611] rust_binder: Write failure EINVAL in pid:51 [ 38.293997][ T615] rust_binder: 64: no such ref 3 [ 38.306426][ T616] rust_binder: 64: no such ref 3 [ 38.355310][ T330] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.364261][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.387360][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.399261][ T627] netlink: 'syz.1.101': attribute type 46 has an invalid length. [ 38.407200][ T627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.417136][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.419421][ T628] netlink: 'syz.1.101': attribute type 46 has an invalid length. [ 38.433604][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.436384][ T628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.101'. [ 38.450111][ T10] usb 4-1: SerialNumber: syz [ 38.516309][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.528162][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.532888][ T636] rust_binder: 634 RLIMIT_NICE not set [ 38.538312][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.538759][ T634] rust_binder: Read failure Err(EFAULT) in pid:74 [ 38.543951][ T330] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.577915][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.577952][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:78 [ 38.589560][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.617615][ T330] usb 1-1: config 0 descriptor?? [ 38.631268][ T642] __vm_enough_memory: pid: 642, comm: syz.1.107, bytes: 18014402804453376 not enough memory for the allocation [ 38.644656][ T642] __vm_enough_memory: pid: 642, comm: syz.1.107, bytes: 18014402804453376 not enough memory for the allocation [ 38.698878][ T356] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.742005][ T10] usb 4-1: 0:2 : does not exist [ 38.747152][ T10] usb 4-1: unit 5: unexpected type 0x0b [ 38.754685][ T10] usb 4-1: USB disconnect, device number 6 [ 38.787847][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.845394][ T356] usb 3-1: device descriptor read/64, error -71 [ 38.900238][ T658] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 38.908570][ T658] rust_binder: Write failure EINVAL in pid:98 [ 38.921966][ T660] __vm_enough_memory: pid: 660, comm: syz.1.112, bytes: 18014402804453376 not enough memory for the allocation [ 39.024905][ T330] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x1 [ 39.032780][ T330] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 39.044897][ T330] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 39.085308][ T356] usb 3-1: device descriptor read/64, error -71 [ 39.280650][ T674] can0: slcan on ptm1. [ 39.335318][ T356] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.409224][ T66] usb 1-1: USB disconnect, device number 7 [ 39.485337][ T356] usb 3-1: device descriptor read/64, error -71 [ 39.527819][ T330] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.706357][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.725267][ T330] usb 4-1: config 0 has no interfaces? [ 39.734120][ T330] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 39.745003][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.753237][ T356] usb 3-1: device descriptor read/64, error -71 [ 39.768739][ T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 39.771527][ T330] usb 4-1: config 0 descriptor?? [ 39.865362][ T356] usb usb3-port1: attempt power cycle [ 39.976847][ T702] rust_binder: 113: no such ref 0 [ 39.982066][ T704] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 39.989780][ T704] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 39.991383][ T445] usb 4-1: USB disconnect, device number 7 [ 40.034687][ T710] ======================================================= [ 40.034687][ T710] WARNING: The mand mount option has been deprecated and [ 40.034687][ T710] and is ignored by this kernel. Remove the mand [ 40.034687][ T710] option from the mount to silence this warning. [ 40.034687][ T710] ======================================================= [ 40.070672][ T330] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.079362][ T674] can0 (unregistered): slcan off ptm1. [ 40.149661][ T726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.149692][ T726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.205313][ T356] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.236374][ T330] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 40.249108][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.260739][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.271712][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 40.271798][ T356] usb 3-1: device descriptor read/8, error -71 [ 40.293075][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 40.302405][ T330] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 40.312380][ T330] usb 1-1: Manufacturer: syz [ 40.318913][ T330] usb 1-1: config 0 descriptor?? [ 40.416314][ T356] usb 3-1: device descriptor read/8, error -71 [ 40.555306][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.655291][ T356] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.677066][ T356] usb 3-1: device descriptor read/8, error -71 [ 40.705649][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 40.712273][ T66] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.720728][ T66] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.729444][ T66] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.730851][ T330] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 40.738492][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.746493][ T330] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 40.758294][ T66] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.770118][ T330] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 40.773004][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.797461][ T66] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.812504][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.824497][ T66] usb 2-1: config 0 descriptor?? [ 40.826270][ T356] usb 3-1: device descriptor read/8, error -71 [ 40.945428][ T356] usb usb3-port1: unable to enumerate USB device [ 40.986652][ T31] usb 1-1: USB disconnect, device number 8 [ 41.034345][ T66] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.047076][ T66] usb 2-1: USB disconnect, device number 5 [ 41.053776][ T66] usblp0: removed [ 41.475315][ T356] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.529876][ T764] capability: warning: `syz.0.131' uses 32-bit capabilities (legacy support in use) [ 41.625298][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 41.632187][ T356] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.640778][ T356] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.649793][ T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.657630][ T356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.667039][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.677240][ T356] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.687199][ T356] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.700389][ T356] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.709538][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.718538][ T356] usb 2-1: config 0 descriptor?? [ 41.815295][ T66] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.836283][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.846718][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.856732][ T330] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.866028][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.874204][ T330] usb 4-1: SerialNumber: syz [ 41.927953][ T356] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.966499][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 41.978038][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 41.990713][ T66] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 42.000244][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.009436][ T66] usb 1-1: config 0 descriptor?? [ 42.014936][ T766] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.081403][ T757] rust_binder: Error while translating object. [ 42.081451][ T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.087822][ T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:89 [ 42.165788][ T356] usb 2-1: USB disconnect, device number 6 [ 42.182173][ T356] usblp0: removed [ 42.353822][ T770] rust_binder: Error while translating object. [ 42.353848][ T770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.360129][ T770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 42.437976][ T773] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 42.624815][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 42.624833][ T36] audit: type=1400 audit(1759402981.390:266): avc: denied { map } for pid=765 comm="syz.0.132" path="/proc/92/task/92/loginuid" dev="proc" ino=6178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 42.657668][ T66] usb 1-1: string descriptor 0 read error: -71 [ 42.664198][ T66] uclogic 0003:5543:0081.0005: failed retrieving string descriptor #200: -71 [ 42.697788][ T66] uclogic 0003:5543:0081.0005: failed retrieving pen parameters: -71 [ 42.700942][ T36] audit: type=1400 audit(1759402981.470:267): avc: denied { lock } for pid=774 comm="syz.1.136" path="socket:[6181]" dev="sockfs" ino=6181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 42.706381][ T66] uclogic 0003:5543:0081.0005: failed probing pen v2 parameters: -71 [ 42.737566][ T66] uclogic 0003:5543:0081.0005: failed probing parameters: -71 [ 42.745252][ T66] uclogic 0003:5543:0081.0005: probe with driver uclogic failed with error -71 [ 42.759667][ T66] usb 1-1: USB disconnect, device number 9 [ 42.812923][ T36] audit: type=1400 audit(1759402981.580:268): avc: denied { create } for pid=776 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.833664][ T36] audit: type=1400 audit(1759402981.590:269): avc: denied { write } for pid=776 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.856262][ T36] audit: type=1400 audit(1759402981.590:270): avc: denied { unmount } for pid=776 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.877148][ T36] audit: type=1400 audit(1759402981.650:271): avc: denied { connect } for pid=778 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.896945][ T36] audit: type=1400 audit(1759402981.650:272): avc: denied { write } for pid=778 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.897079][ T779] tipc: Started in network mode [ 42.921342][ T779] tipc: Node identity ac14142f, cluster identity 4711 [ 42.928509][ T779] tipc: New replicast peer: 0.0.0.0 [ 42.934176][ T779] tipc: Enabled bearer , priority 10 [ 43.247109][ T789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 43.249792][ T788] rust_binder: Failed copying remainder into alloc: EFAULT [ 43.256552][ T788] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 43.258196][ T36] audit: type=1400 audit(1759402982.030:273): avc: denied { ioctl } for pid=786 comm="syz.2.141" path="socket:[6205]" dev="sockfs" ino=6205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.264274][ T788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.300114][ T788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:100 [ 43.340693][ T796] raw_sendmsg: syz.2.145 forgot to set AF_INET. Fix it! [ 43.361772][ T36] audit: type=1400 audit(1759402982.140:274): avc: denied { setopt } for pid=795 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.489321][ T36] audit: type=1400 audit(1759402982.260:275): avc: denied { ioctl } for pid=809 comm="syz.1.148" path="socket:[6237]" dev="sockfs" ino=6237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.578109][ T818] netlink: 'syz.1.150': attribute type 39 has an invalid length. [ 43.635245][ T445] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.786345][ T445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.815258][ T445] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.834784][ T445] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.855232][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.863471][ T445] usb 1-1: SerialNumber: syz [ 44.055261][ T31] tipc: Node number set to 2886997039 [ 44.082550][ T806] netlink: 124 bytes leftover after parsing attributes in process `syz.0.147'. [ 44.094974][ T807] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 44.109387][ T445] usb 1-1: USB disconnect, device number 10 [ 44.373982][ T330] usb 4-1: 0:2 : does not exist [ 44.379333][ T829] rust_binder: Write failure EFAULT in pid:87 [ 44.396091][ T330] usb 4-1: USB disconnect, device number 8 [ 44.411719][ T835] SELinux: security_context_str_to_sid () failed with errno=-22 [ 44.805244][ T445] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.255247][ T445] usb 3-1: Using ep0 maxpacket: 32 [ 45.433642][ T445] usb 3-1: config 3 has an invalid interface number: 68 but max is 2 [ 45.452863][ T445] usb 3-1: config 3 has an invalid interface number: 214 but max is 2 [ 45.471444][ T445] usb 3-1: config 3 has an invalid interface number: 219 but max is 2 [ 45.485225][ T445] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 45.504121][ T445] usb 3-1: config 3 has an invalid interface number: 188 but max is 2 [ 45.519840][ T445] usb 3-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 45.539282][ T445] usb 3-1: config 3 has no interface number 0 [ 45.555237][ T445] usb 3-1: config 3 has no interface number 1 [ 45.565239][ T445] usb 3-1: config 3 has no interface number 2 [ 45.571376][ T445] usb 3-1: config 3 has no interface number 3 [ 45.589487][ T445] usb 3-1: config 3 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.612743][ T445] usb 3-1: config 3 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.635234][ T445] usb 3-1: config 3 interface 68 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 45.665238][ T445] usb 3-1: config 3 interface 68 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 45.685241][ T445] usb 3-1: config 3 interface 214 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 45.705235][ T445] usb 3-1: config 3 interface 214 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 45.706849][ T868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 45.725243][ T445] usb 3-1: config 3 interface 219 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 45.745281][ T445] usb 3-1: config 3 interface 219 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 45.756349][ T868] bridge_slave_1: left allmulticast mode [ 45.762039][ T868] bridge_slave_1: left promiscuous mode [ 45.775302][ T445] usb 3-1: config 3 interface 219 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 45.795481][ T868] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.800056][ T445] usb 3-1: config 3 interface 219 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 45.814842][ T868] bridge_slave_0: left allmulticast mode [ 45.830214][ T445] usb 3-1: config 3 interface 219 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 45.845303][ T868] bridge_slave_0: left promiscuous mode [ 45.851106][ T445] usb 3-1: config 3 interface 219 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 45.851183][ T868] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.873731][ T445] usb 3-1: config 3 interface 219 altsetting 7 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 45.900319][ T445] usb 3-1: too many endpoints for config 3 interface 188 altsetting 226: 203, using maximum allowed: 30 [ 45.923272][ T445] usb 3-1: config 3 interface 188 altsetting 226 has a duplicate endpoint with address 0x4, skipping [ 45.954947][ T445] usb 3-1: config 3 interface 188 altsetting 226 has a duplicate endpoint with address 0x6, skipping [ 45.975328][ T445] usb 3-1: config 3 interface 188 altsetting 226 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 45.998552][ T445] usb 3-1: config 3 interface 188 altsetting 226 has 4 endpoint descriptors, different from the interface descriptor's value: 203 [ 46.026576][ T445] usb 3-1: config 3 interface 219 has no altsetting 0 [ 46.041803][ T445] usb 3-1: config 3 interface 188 has no altsetting 0 [ 46.156227][ T445] usb 3-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=c9.43 [ 46.165823][ T445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.184118][ T445] usb 3-1: Product: syz [ 46.188540][ T445] usb 3-1: Manufacturer: Ⰱ [ 46.193262][ T445] usb 3-1: SerialNumber: syz [ 46.207808][ T878] netlink: 'syz.0.171': attribute type 27 has an invalid length. [ 46.237759][ T878] sit0: left promiscuous mode [ 46.268924][ T840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.286976][ T879] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 46.429041][ T858] rust_binder: 101: no such ref 1 [ 46.477693][ T858] rust_binder: Write failure EINVAL in pid:101 [ 46.527914][ T884] netlink: 'syz.0.173': attribute type 4 has an invalid length. [ 46.562333][ T884] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 46.812555][ T897] overlayfs: failed to clone upperpath [ 47.508977][ T445] usb 3-1: can't set config #3, error -71 [ 47.533161][ T445] usb 3-1: USB disconnect, device number 11 [ 47.589255][ T903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.589290][ T903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:132 [ 47.969567][ T936] rust_binder: Error while translating object. [ 47.979300][ T936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.985684][ T936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:99 [ 48.039384][ T946] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 48.047836][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 48.047856][ T36] audit: type=1400 audit(1759402986.820:285): avc: denied { read } for pid=937 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.162146][ T36] audit: type=1400 audit(1759402986.930:286): avc: denied { mount } for pid=954 comm="syz.1.197" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.186812][ T960] binder: Bad value for 'max' [ 48.259898][ T36] audit: type=1400 audit(1759402987.030:287): avc: denied { sqpoll } for pid=961 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.621008][ T970] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 48.665381][ T974] overlay: Unknown parameter 'permit_directio' [ 48.704510][ T36] audit: type=1400 audit(1759402987.470:288): avc: denied { block_suspend } for pid=976 comm="syz.0.205" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.237865][ T998] option changes via remount are deprecated (pid=997 comm=syz.2.211) [ 49.238574][ T36] audit: type=1400 audit(1759402988.010:289): avc: denied { remount } for pid=997 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.246296][ T998] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 49.309915][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 49.319012][ T1001] bridge_slave_1: left allmulticast mode [ 49.324867][ T1001] bridge_slave_1: left promiscuous mode [ 49.331030][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.346286][ T1001] bridge_slave_0: left allmulticast mode [ 49.352129][ T1001] bridge_slave_0: left promiscuous mode [ 49.358268][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.601199][ T36] audit: type=1400 audit(1759402988.370:290): avc: denied { listen } for pid=1003 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.621923][ T36] audit: type=1400 audit(1759402988.380:291): avc: denied { getopt } for pid=1003 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.798544][ T1006] netlink: 'syz.1.214': attribute type 58 has an invalid length. [ 49.845292][ T330] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 49.867199][ T1010] rust_binder: Error while translating object. [ 49.867235][ T1010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.873615][ T1010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 49.896875][ T1012] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 49.913777][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 49.927731][ T1014] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.945079][ T1014] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 49.953838][ T1014] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.962031][ T1014] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 49.998794][ T330] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 50.006712][ T330] usb 1-1: can't read configurations, error -71 [ 50.038955][ T36] audit: type=1400 audit(1759402988.810:292): avc: granted { setsecparam } for pid=1018 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 50.112291][ T36] audit: type=1400 audit(1759402988.880:293): avc: granted { setsecparam } for pid=1018 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 50.145035][ T36] audit: type=1400 audit(1759402988.910:294): avc: denied { connect } for pid=1025 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.146281][ T1026] netlink: 'syz.3.222': attribute type 2 has an invalid length. [ 50.176084][ T1026] exFAT-fs (rnullb0): invalid boot record signature [ 50.182704][ T1026] exFAT-fs (rnullb0): failed to read boot sector [ 50.189453][ T1026] exFAT-fs (rnullb0): failed to recognize exfat type [ 50.216365][ T1028] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.224425][ T1028] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 50.233233][ T1028] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.241575][ T1028] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 50.305317][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.424102][ T1051] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 50.455258][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 50.464465][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.474476][ T10] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 50.483417][ T10] usb 3-1: config 0 has no interface number 0 [ 50.489642][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 50.500912][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 50.511785][ T10] usb 3-1: config 0 interface 88 has no altsetting 0 [ 50.519777][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 50.550112][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 50.559936][ T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 50.571788][ T10] usb 3-1: Product: syz [ 50.576833][ T10] usb 3-1: SerialNumber: syz [ 50.578399][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.590194][ T10] usb 3-1: config 0 descriptor?? [ 50.604534][ T1057] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.232'. [ 50.745256][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 50.762056][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 50.780900][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 50.790771][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 50.800618][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.811257][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 50.822087][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.836190][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 50.846052][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.861531][ T31] usb 4-1: config 0 descriptor?? [ 50.981096][ T10] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input5 [ 51.008102][ T10] usb 3-1: USB disconnect, device number 12 [ 51.055084][ T1068] fuse: Unknown parameter '0xffffffffffffffff' [ 51.084630][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.145316][ T31] usb 4-1: USB disconnect, device number 9 [ 51.166452][ T31] usblp0: removed [ 51.191619][ T1074] x_tables: duplicate underflow at hook 4 [ 51.416970][ T1085] rust_binder: Write failure EINVAL in pid:179 [ 51.554450][ T1098] can0: slcan on ptm3. [ 51.581064][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.595249][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.765277][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 51.773873][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 51.783044][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 51.791716][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 51.800859][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.810614][ T66] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 51.818336][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.828197][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.841986][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.852280][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.870046][ T31] usb 4-1: config 0 descriptor?? [ 51.995271][ T66] usb 1-1: device descriptor read/64, error -71 [ 52.067842][ T1126] 9pnet_fd: Insufficient options for proto=fd [ 52.114740][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 52.265310][ T66] usb 1-1: device descriptor read/64, error -71 [ 52.315081][ T31] usb 4-1: USB disconnect, device number 10 [ 52.325085][ T31] usblp0: removed [ 52.505255][ T66] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.645289][ T66] usb 1-1: device descriptor read/64, error -71 [ 52.885275][ T66] usb 1-1: device descriptor read/64, error -71 [ 53.012166][ T1145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1145 comm=syz.1.253 [ 53.024764][ T66] usb usb1-port1: attempt power cycle [ 53.063317][ T36] kauditd_printk_skb: 484 callbacks suppressed [ 53.063336][ T36] audit: type=1400 audit(1759402991.830:779): avc: denied { create } for pid=1146 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.071513][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 53.118592][ T36] audit: type=1400 audit(1759402991.840:780): avc: denied { write } for pid=1146 comm="syz.3.254" name="raw" dev="proc" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.150812][ T36] audit: type=1400 audit(1759402991.840:781): avc: denied { write } for pid=1146 comm="syz.3.254" path="/proc/141/net/raw" dev="proc" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.187231][ T36] audit: type=1400 audit(1759402991.840:782): avc: denied { read } for pid=1146 comm="syz.3.254" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.210298][ T36] audit: type=1400 audit(1759402991.840:783): avc: denied { read open } for pid=1146 comm="syz.3.254" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.231209][ T1153] rust_binder: Error while translating object. [ 53.235598][ T36] audit: type=1400 audit(1759402991.840:784): avc: denied { ioctl } for pid=1146 comm="syz.3.254" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.235719][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 53.241904][ T36] audit: type=1400 audit(1759402991.870:785): avc: denied { create } for pid=1146 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.241942][ T36] audit: type=1400 audit(1759402991.870:786): avc: denied { ioctl } for pid=1097 comm="syz.0.244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.241969][ T36] audit: type=1400 audit(1759402991.880:787): avc: denied { ioctl } for pid=1097 comm="syz.0.244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.241999][ T36] audit: type=1400 audit(1759402991.890:788): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.272159][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:146 [ 53.375267][ T66] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.408004][ T66] usb 1-1: device descriptor read/8, error -71 [ 53.537665][ T66] usb 1-1: device descriptor read/8, error -71 [ 53.585264][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.627127][ T1155] veth1: entered allmulticast mode [ 53.637575][ T1154] veth1: left allmulticast mode [ 53.775278][ T66] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 53.798033][ T66] usb 1-1: device descriptor read/8, error -71 [ 53.935025][ T66] usb 1-1: device descriptor read/8, error -71 [ 54.045700][ T66] usb usb1-port1: unable to enumerate USB device [ 54.382261][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.412551][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.422467][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.532802][ T1193] netlink: 76 bytes leftover after parsing attributes in process `syz.1.268'. [ 54.566723][ T10] usb 3-1: device descriptor read/64, error -71 [ 54.615239][ T422] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 54.632584][ T1098] can0 (unregistered): slcan off ptm3. [ 54.698478][ T1196] process 'syz.1.269' launched './file1' with NULL argv: empty string added [ 54.742010][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.778196][ T422] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.801455][ T422] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.815582][ T10] usb 3-1: device descriptor read/64, error -71 [ 54.842049][ T422] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.852898][ T1209] 9pnet_fd: Insufficient options for proto=fd [ 54.866718][ T422] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 54.881263][ T422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.893714][ T1179] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 55.055246][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 55.195265][ T10] usb 3-1: device descriptor read/64, error -71 [ 55.435282][ T10] usb 3-1: device descriptor read/64, error -71 [ 55.563053][ T10] usb usb3-port1: attempt power cycle [ 55.719148][ T1266] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.283'. [ 55.905264][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 55.924407][ T1278] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 55.951272][ T10] usb 3-1: device descriptor read/8, error -71 [ 56.089391][ T10] usb 3-1: device descriptor read/8, error -71 [ 56.359706][ T1295] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 56.820309][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.826737][ T1101] Bluetooth: hci0: command 0x1003 tx timeout [ 56.956491][ T1309] netlink: 64 bytes leftover after parsing attributes in process `syz.1.294'. [ 57.235227][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.600344][ T10] usb 3-1: device not accepting address 16, error -71 [ 58.610885][ T10] usb usb3-port1: unable to enumerate USB device [ 58.657007][ T36] kauditd_printk_skb: 964 callbacks suppressed [ 58.657029][ T36] audit: type=1400 audit(1759402997.420:1753): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.785812][ T36] audit: type=1400 audit(1759402997.420:1754): avc: denied { create } for pid=1344 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.847050][ T1357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 58.866810][ T36] audit: type=1400 audit(1759402997.420:1755): avc: denied { setopt } for pid=1344 comm="syz.2.306" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.881778][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.894101][ T36] audit: type=1400 audit(1759402997.420:1756): avc: denied { setopt } for pid=1344 comm="syz.2.306" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.914797][ T36] audit: type=1400 audit(1759402997.430:1757): avc: denied { write } for pid=1344 comm="syz.2.306" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.935993][ T36] audit: type=1400 audit(1759402997.430:1758): avc: denied { read write } for pid=1344 comm="syz.2.306" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.946031][ T1359] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.959452][ T36] audit: type=1400 audit(1759402997.430:1759): avc: denied { read write open } for pid=1344 comm="syz.2.306" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.968065][ T1359] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 58.990133][ T36] audit: type=1400 audit(1759402997.430:1760): avc: denied { ioctl } for pid=1344 comm="syz.2.306" path="socket:[8639]" dev="sockfs" ino=8639 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.005259][ T1132] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 59.026036][ T1360] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 59.185505][ T1132] usb 1-1: Using ep0 maxpacket: 8 [ 59.202936][ T1132] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 59.213587][ T1132] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 59.222948][ T1132] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 59.233102][ T1132] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 59.244940][ T1132] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.257844][ T1132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.278548][ T1132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.307253][ T1132] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 59.338805][ T1132] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 59.356406][ T1132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.369965][ T1132] usb 1-1: Product: syz [ 59.374259][ T1132] usb 1-1: Manufacturer: syz [ 59.388097][ T1132] usb 1-1: SerialNumber: syz [ 59.398368][ T1132] usb 1-1: config 0 descriptor?? [ 59.415417][ T1352] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.427973][ T1132] hub 1-1:0.0: bad descriptor, ignoring hub [ 59.437042][ T1132] hub 1-1:0.0: probe with driver hub failed with error -5 [ 59.447383][ T1132] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 59.707487][ T1367] rust_binder: Error while translating object. [ 59.707526][ T1367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.720614][ T1367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 60.083780][ T422] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 60.102198][ T422] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input6 [ 60.374375][ T1377] netlink: 164 bytes leftover after parsing attributes in process `syz.1.316'. [ 60.387285][ T1377] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 60.945243][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 60.951446][ T1101] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.130140][ T1391] tipc: Enabling of bearer rejected, failed to enable media [ 61.291797][ T1396] /dev/loop0: Can't lookup blockdev [ 61.629452][ T1419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 61.680128][ T381] usb 1-1: USB disconnect, device number 17 [ 61.778481][ T1426] netlink: 'syz.2.334': attribute type 2 has an invalid length. [ 62.255259][ T381] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 62.405275][ T381] usb 1-1: Using ep0 maxpacket: 32 [ 62.413465][ T381] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.424508][ T381] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.436729][ T381] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 62.446061][ T381] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 62.454611][ T381] usb 1-1: Product: syz [ 62.458891][ T381] usb 1-1: Manufacturer: syz [ 62.475833][ T381] hub 1-1:4.0: USB hub found [ 62.595238][ T330] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.698555][ T381] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 62.727100][ T381] usb 1-1: USB disconnect, device number 18 [ 62.746022][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 62.765815][ T330] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.774340][ T330] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.796300][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.816688][ T330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.835214][ T330] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.854866][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.878413][ T330] usb 3-1: config 0 descriptor?? [ 63.089798][ T330] usb 3-1: USB disconnect, device number 17 [ 63.525288][ T1494] FAT-fs (rnullb0): bogus number of reserved sectors [ 63.532485][ T1494] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 63.543403][ T1494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1494 comm=syz.0.356 [ 63.726664][ T36] kauditd_printk_skb: 443 callbacks suppressed [ 63.726684][ T36] audit: type=1400 audit(1759403002.500:2203): avc: denied { create } for pid=1495 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.781347][ T36] audit: type=1400 audit(1759403002.500:2204): avc: denied { write } for pid=1495 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.820227][ T36] audit: type=1400 audit(1759403002.500:2205): avc: denied { ioctl } for pid=1495 comm="syz.0.357" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.865239][ T36] audit: type=1400 audit(1759403002.540:2206): avc: denied { read write } for pid=1495 comm="syz.0.357" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.908607][ T36] audit: type=1400 audit(1759403002.540:2207): avc: denied { read write open } for pid=1495 comm="syz.0.357" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.971869][ T36] audit: type=1400 audit(1759403002.540:2208): avc: denied { ioctl } for pid=1495 comm="syz.0.357" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.036351][ T36] audit: type=1400 audit(1759403002.720:2209): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 64.123205][ T36] audit: type=1400 audit(1759403002.730:2210): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.200945][ T36] audit: type=1400 audit(1759403002.730:2211): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.289287][ T36] audit: type=1400 audit(1759403002.730:2212): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.387749][ T1512] rust_binder: Error while translating object. [ 64.387799][ T1512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.400923][ T1512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 64.913067][ T1533] netlink: 680 bytes leftover after parsing attributes in process `syz.3.370'. [ 64.974168][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.015252][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.141303][ T1541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 65.165244][ T10] usb 3-1: device descriptor read/64, error -71 [ 65.393588][ T1555] netlink: 'syz.3.376': attribute type 28 has an invalid length. [ 65.402546][ T1555] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 65.402572][ T1555] rust_binder: Error while translating object. [ 65.413448][ T1555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.420287][ T1555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 65.435884][ T10] usb 3-1: device descriptor read/64, error -71 [ 65.537999][ T1561] rust_binder: 239: no such ref 3 [ 65.685294][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.825359][ T10] usb 3-1: device descriptor read/64, error -71 [ 66.075250][ T10] usb 3-1: device descriptor read/64, error -71 [ 66.185832][ T10] usb usb3-port1: attempt power cycle [ 66.496867][ T1583] cgroup: Invalid name [ 66.525272][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 66.566886][ T10] usb 3-1: device descriptor read/8, error -71 [ 66.708769][ T10] usb 3-1: device descriptor read/8, error -71 [ 66.885109][ T1598] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 66.885883][ T1598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.975876][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 67.018512][ T10] usb 3-1: device descriptor read/8, error -71 [ 67.025264][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 67.031499][ T1101] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.148970][ T10] usb 3-1: device descriptor read/8, error -71 [ 67.278991][ T10] usb usb3-port1: unable to enumerate USB device [ 67.895382][ T1637] /dev/loop0: Can't lookup blockdev [ 67.985735][ T1642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.406'. [ 68.043495][ T1645] fuseblk: Bad value for 'group_id' [ 68.075242][ T1645] fuseblk: Bad value for 'group_id' [ 68.125253][ T381] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 68.225576][ T1662] usb usb9: usbfs: process 1662 (syz.3.412) did not claim interface 0 before use [ 68.247295][ T1662] rust_binder: Got transaction with invalid offset. [ 68.247338][ T1662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.254429][ T1662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 68.275837][ T1653] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 68.285522][ T1669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.437127][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.455088][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.468039][ T1676] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 68.587923][ T1683] loop6: detected capacity change from 0 to 7 [ 68.614234][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.624575][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.633794][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.642742][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.652061][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.660884][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.670312][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.680308][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.689612][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.699763][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.708992][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.741491][ T1688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 68.760651][ T36] kauditd_printk_skb: 1365 callbacks suppressed [ 68.760671][ T36] audit: type=1400 audit(1759403007.540:3578): avc: denied { read write } for pid=1687 comm="syz.2.421" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.760999][ T1688] random: crng reseeded on system resumption [ 68.769543][ T36] audit: type=1400 audit(1759403007.540:3579): avc: denied { ioctl open } for pid=1687 comm="syz.2.421" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.861171][ T36] audit: type=1400 audit(1759403007.630:3580): avc: denied { name_bind } for pid=1691 comm="syz.1.422" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.883183][ T36] audit: type=1400 audit(1759403007.630:3581): avc: denied { node_bind } for pid=1691 comm="syz.1.422" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.909050][ T36] audit: type=1400 audit(1759403007.670:3582): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.934796][ T36] audit: type=1400 audit(1759403007.670:3583): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.961165][ T36] audit: type=1400 audit(1759403007.670:3584): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.989781][ T36] audit: type=1400 audit(1759403007.690:3585): avc: denied { read write } for pid=1693 comm="syz.2.423" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.014877][ T36] audit: type=1400 audit(1759403007.690:3586): avc: denied { read write open } for pid=1693 comm="syz.2.423" path="/dev/input/event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.041695][ T36] audit: type=1400 audit(1759403007.690:3587): avc: denied { mounton } for pid=1693 comm="syz.2.423" path="/70/file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.375130][ T1709] kvm: emulating exchange as write [ 69.383774][ T1709] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 69.392270][ T1709] rust_binder: Write failure EINVAL in pid:299 [ 69.537235][ T1721] tipc: Enabling of bearer rejected, failed to enable media [ 69.544117][ T1723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.563634][ T1723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.579960][ T1727] tipc: Enabling of bearer rejected, failed to enable media [ 69.956665][ T1745] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 70.335031][ T1766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=1766 comm=syz.2.448 [ 70.359111][ T1765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 70.599254][ T1773] fuse: Unknown parameter 'roo' [ 70.605382][ T1774] fuse: Unknown parameter 'roo' [ 70.725837][ T1780] can0: slcan on ptm0. [ 71.055229][ T445] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.080971][ T1784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 71.245593][ T445] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.266056][ T1788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.454'. [ 71.280476][ T445] usb 3-1: config 0 has no interfaces? [ 71.300722][ T445] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 71.327963][ T445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.368168][ T445] usb 3-1: config 0 descriptor?? [ 71.582431][ T445] usb 3-1: USB disconnect, device number 22 [ 71.645412][ T1780] can0 (unregistered): slcan off ptm0. [ 71.688821][ T1802] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 71.701566][ T1802] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 71.710049][ T1802] CPU: 1 UID: 0 PID: 1802 Comm: syz.0.458 Not tainted syzkaller #0 c28964d659af56c9aa0a1d789b6c5ee0e7b35bd1 [ 71.721654][ T1802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.731942][ T1802] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 71.738417][ T1802] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 71.758416][ T1802] RSP: 0018:ffffc9000f56f820 EFLAGS: 00010202 [ 71.764583][ T1802] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888119d21300 [ 71.772772][ T1802] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 71.781043][ T1802] RBP: ffffc9000f56fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 71.789142][ T1802] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 71.797270][ T1802] R13: 7ffffffffffff9b7 R14: ffff888109736838 R15: ffff888109736828 [ 71.805463][ T1802] FS: 00007f9f717db6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.814528][ T1802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.821269][ T1802] CR2: 000000110c343037 CR3: 000000010b7f2000 CR4: 00000000003526b0 [ 71.829489][ T1802] Call Trace: [ 71.832894][ T1802] [ 71.835871][ T1802] ? __cfi_iter_file_splice_write+0x10/0x10 [ 71.841827][ T1802] ? __kasan_kmalloc+0x96/0xb0 [ 71.846845][ T1802] ? __kasan_check_write+0x18/0x20 [ 71.852120][ T1802] ? __cfi_iter_file_splice_write+0x10/0x10 [ 71.858276][ T1802] direct_splice_actor+0x276/0x4b0 [ 71.863443][ T1802] splice_direct_to_actor+0x4fe/0xbc0 [ 71.869142][ T1802] ? __cfi_direct_splice_actor+0x10/0x10 [ 71.874918][ T1802] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 71.880949][ T1802] do_splice_direct+0x182/0x270 [ 71.885902][ T1802] ? __cfi_do_splice_direct+0x10/0x10 [ 71.891503][ T1802] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 71.897451][ T1802] ? security_file_permission+0x2e/0xc0 [ 71.903172][ T1802] ? rw_verify_area+0xac/0x230 [ 71.908083][ T1802] do_sendfile+0x5c8/0xfb0 [ 71.912558][ T1802] ? vfs_writev+0xcf0/0xcf0 [ 71.917364][ T1802] ? __se_sys_futex+0x28f/0x300 [ 71.922354][ T1802] __x64_sys_sendfile64+0x193/0x1f0 [ 71.927962][ T1802] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 71.933759][ T1802] ? switch_fpu_return+0x12/0x20 [ 71.938884][ T1802] x64_sys_call+0xa26/0x2ee0 [ 71.943601][ T1802] do_syscall_64+0x58/0xf0 [ 71.948174][ T1802] ? clear_bhb_loop+0x50/0xa0 [ 71.952907][ T1802] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.958859][ T1802] RIP: 0033:0x7f9f7098eec9 [ 71.963352][ T1802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.983262][ T1802] RSP: 002b:00007f9f717db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.991727][ T1802] RAX: ffffffffffffffda RBX: 00007f9f70be5fa0 RCX: 00007f9f7098eec9 [ 71.999812][ T1802] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 72.007893][ T1802] RBP: 00007f9f70a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.016059][ T1802] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 72.024332][ T1802] R13: 00007f9f70be6038 R14: 00007f9f70be5fa0 R15: 00007fffe5234d28 [ 72.032539][ T1802] [ 72.035569][ T1802] Modules linked in: [ 72.039598][ T1802] ---[ end trace 0000000000000000 ]--- [ 72.107952][ T1807] fuse: Bad value for 'fd' [ 72.152084][ T1802] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 72.206491][ T1802] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 72.278066][ T1802] RSP: 0018:ffffc9000f56f820 EFLAGS: 00010202 [ 72.299159][ T1802] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888119d21300 [ 72.313647][ T1802] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 72.342047][ T1802] RBP: ffffc9000f56fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 72.360382][ T1802] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 72.385265][ T1802] R13: 7ffffffffffff9b7 R14: ffff888109736838 R15: ffff888109736828 [ 72.407155][ T1802] FS: 00007f9f717db6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.440219][ T1802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.455302][ T1802] CR2: 00007f0f5cbb4198 CR3: 000000010b7f2000 CR4: 00000000003526b0 [ 72.483704][ T1802] Kernel panic - not syncing: Fatal exception [ 72.490110][ T1802] Kernel Offset: disabled [ 72.494479][ T1802] Rebooting in 86400 seconds..