last executing test programs: 7m52.821370918s ago: executing program 1 (id=6): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000940)={'bridge0\x00', &(0x7f0000000900)=@ethtool_rxfh_indir={0x38}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000000c0)) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="0f009908000000ea64000000ae00c74424001fbf0000c74424026d94499fc7442406000000000f011424f30f090f01c4660f3882070f01cf0f01c9b805000000b9000000000f01c1b9f10b0000b800000000ba010000000f30", 0x59}], 0x1, 0x43, 0x0, 0x3e) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) copy_file_range(r9, 0x0, r9, &(0x7f0000000100)=0xffffffffffffffc0, 0x7, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000040)) (async) close_range(r2, 0xffffffffffffffff, 0x0) 7m52.745361539s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000180)='./file0\x00', 0x0, 0x109122, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 7m52.73395244s ago: executing program 1 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0xdc, 0xc00) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000001c0)=0x5) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x652cc3, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r9, 0xfffffffffffffc01, 0x0) (async) getsockopt$inet6_int(r9, 0x29, 0x13, &(0x7f0000000000), &(0x7f0000000080)=0x4) 7m51.884979153s ago: executing program 1 (id=17): add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f05e"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xfffffff7, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) 7m51.825619834s ago: executing program 1 (id=18): syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905820910000000000725"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) io_submit(r2, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r3, &(0x7f00000009c0)=']', 0x1, 0x8800000, 0x0, 0x0, r3}]) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000), 0x4000, 0x1800, 0x7, 0x2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7m51.811915064s ago: executing program 1 (id=19): sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x2}], 0xfffffffffffffee8, 0x0, &(0x7f0000000480)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851becdb93f1fdac6eae02bf72c9a8f24193aff4b1da44dc02bbac20b5f9b6656a0658e008d8e8f179fd219bca1c3ba94554fbd59d32814798bf3f64f83dc2d1c66ec847d31b173a1c65caa2035717b4347e9fbe3d5af3617e417265185d0aa9c63e71365d44f6bc9b869a332e05e1aa9ed2abddb09c8275e92"}) 7m51.779640525s ago: executing program 32 (id=19): sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x2}], 0xfffffffffffffee8, 0x0, &(0x7f0000000480)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851becdb93f1fdac6eae02bf72c9a8f24193aff4b1da44dc02bbac20b5f9b6656a0658e008d8e8f179fd219bca1c3ba94554fbd59d32814798bf3f64f83dc2d1c66ec847d31b173a1c65caa2035717b4347e9fbe3d5af3617e417265185d0aa9c63e71365d44f6bc9b869a332e05e1aa9ed2abddb09c8275e92"}) 6m27.114551476s ago: executing program 3 (id=1424): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0xffffffff}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000a80)=[@code={0x1, 0x46, {"660f3880060fc732b9800000c00f3235000800000f30c4e1a9e40ac42138128db896ed0c4431d0640fae36a5450f23fb660f38800a"}}, @code={0x1, 0x6b, {"470f07f3410f0018b9f50a0000b800200000ba000000000f3065660fc7362e67266647c7c60300b805000000b93b0000000f01c166b884000f00d0b9800000c00f3235000800000f300fc7b60400000066bad10466b8080066ef"}}, @code={0x1, 0x66, {"470f01c266470f3adf648b9c0666ba400066ed64400f00d3b9650300000f32468c97c850ad9c66660f38800366baf80cb81ae69681ef66bafc0c66edc4c1f167c766baf80cb828ff3d8bef66bafc0c66b8030066ef"}}, @cpuid={0x2, 0x18, {0x3c, 0x2}}, @code={0x1, 0x4e, {"c482d500a104397750c42175ef7d022e6664656726f30fc736400fc7690c3e0f32780066baa100ecc4a1fd72e236c4212573d2d0650f0faa67ffffffa6"}}, @cpuid={0x2, 0x18, {0x10001, 0x9}}, @code={0x1, 0x58, {"660f38804e0466ba2000edf20f5ff1f4470f308f297c80e666baf80cb832ee8a86ef66bafc0c66edf0f65cddd666baf80cb82a65578aef66bafc0c66edc461ff119c1a27000000"}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x69e0db2, 0x10001}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x4a, {"c402b9bd36c482853a2367430943c0b8010000000f01c198c4e3f568c5fc3645963e470f01df67360fc731b9800000c00f3235002000000f30"}}, @uexit={0x0, 0x18, 0xc}, @code={0x1, 0x52, {"64400f01c8660f388262006664f3afc4a258f7735e430f01c86744a7c4233979570003b98e030000b80c974c49baa58c16580f30c482c5929c909149de3847dcc1"}}, @uexit={0x0, 0x18, 0xff}, @uexit={0x0, 0x18, 0x10000}, @code={0x1, 0x8f, {"48b84b3a0000000000000f23d00f21f8353000000e0f23f80ff5af9f00000066ba2100ecf046f717260fc79af4720000c7442400d2000000c744240200000000ff1c2466baf80cb8941e5d84ef66bafc0c66b8050066efc744240000000100c744240244040000c7442406000000000f011424b9020a00000f32480fc71a"}}], 0x3a8}) r6 = fcntl$dupfd(r2, 0x406, r2) setns(r6, 0x4000000) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 6m27.065575856s ago: executing program 3 (id=1425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0982, 0x0) read$rfkill(r1, 0x0, 0x1b) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xba, 0xfffa, 0x1, 0x0, 0x4, 0x2040000, r3}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x30}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xae}}) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r6) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) tee(r5, r4, 0x547, 0x8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_complete(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m26.593497724s ago: executing program 3 (id=1429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/249, 0xf9, 0x0, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}, @dead_binder_done], 0x0, 0x0, 0x0}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0x2000, 0x0, 0x1}}, "3610374eef0d6d684b345534963d41633a2c8ae91bc44b87658461c42f6a140df69956619a6800c21f328b54ed425a7c3e30b74e4457eda36fa641b2a32ac8bdd1f470e746c60984a2af82a9b1c4b0fc4605a4ca148b3c03a4cc108d3b6078ab5cb9c99a47d91fe741242dd788adfaea3a1c6e8cd4138a995a37a0a0cafbddd04283f19ffbd730393f418a3cf05cb1f38e99c2d0d30437a24193cfaab8d2f66958d3ec81d7ab46aa40594c9ee3d3f4e291154b8424fa369421ed0831a64ba50891b7d6f52bec6fe9dadd5f4ce7749643ccd3f8459531ec60e06c0e559ef75d3a37dc3f4154d1e9dfa6aab6b76be1ada040cfbec450f6afa6c8440690c3cf581ae93c7b8705a3209ea3b146c957aa2ec413b704112ee4771f6f7ebdd9da18658e683d474f03bc1ac7d0d0b6f1688f38a4b1ee1998343aa513b673ac7177f86058dcc221380461fdb71e5be0730bc7256abfc9acfa634bdfb25915b4b00e1f7d791162b6abb05b825b0d73f05746b89a4a45fc918cf0f16e3b6c3c3908aa28b7c9093597229bb54165d84f394e13dd28ad97184f867859dada512988c8fe52ec3c287dcb81e610bcc86b45f7bcd560587c5614d69e08befdc63141353dd004b8f52414cb0ca05d41a7a62ff16bb9cea1d6004e0d6ca9e93b7863012be1bf695e5de9b6c62a3b2d45d34777113fa03b81063a0effff372c0231abc4941334bc006a1723c0761ca63e771c7ec6e8d12b682b6295ffb887e9f1aebc807f63c568490625b46206be1092125f4c732e25793b3fbbc2c363fdfde3245f07004293c8898e32cda9d202ea1f5018de398680099e6146be04feb5b4ec028f42d1056d79d95c7bf6179b08d1b42ae7ae4a4aee5083b8a59c4cd270fbe2e8df6e3820c25ac590e49c5e2bf4f1b48d6ef890264b05a4f5f9c083dc798859b00b1a02dd79db9afaa107ff954c81dd7d8ad4d3398caf4f3341cc48df0c231360947cd2331c4e0bb43620ae1d7728a63eea5e18beebcaeff21192a19f202af69bde47d0bb67969fe35af2ed0943d9227abaed3d1c3d705cecf6ab879a2e73d087661722c91296a4dada2690d6ab7dd7438af86278e6299f917f63a7e470533a606425af6c347633f9e2388a2ba5f7d3cb8b1bcc67d85bac15da1efaf838aa71727f6da2122583b3721cfb031835e6dc8acf16bf6b234068c95ef191fac8b191e8951f6efc56d823889dc2460aa2d6538fb3d60b28b09c3dec147f08467f80f124a9a487256353deebf5edec4f8f8ac3b3b8955fa0b0faff777efe3593659a056a011a69071eac5d81b81bf9883e7740780cec8e0ea59f465ac34d0263e12b3437923e84e2590a296196f877f83a8f7e20d485d419ebb69951b0c7ac9e0ee663127b2367c2e6a294f927a9b53c55618fcfeb1895e3988f4336fcaa7866621db474a442b53c6f2aad846ac12d6daaea3b3bcd5ed3f82a6a12fbeeb0c49895a8440884c035337d9e1ec3a64b6f4841b2fbe18f5691693bd54d3348f0a43314e16f37ccb7fc8bd037b895cba04835267e7db8e990ad424da78aed811cfa3b453817884e6429f42824aa7fed1e67aea10628ad675b074027be04861d9d7acdf493840f103339d091f9a263a17786c656119351701dd3ad9e9e939aadb851e94c72af22bbb9d8f3683989314428d0387d85eb1d483ba1ea11bd0da340bc19af3d2a79d0bbddf1fb877efbc150dbe90a3595561be5dc897332dcc3cefde2cae8f41d775e8e0da69674b1477dee0ff3a190c374d20a0c4ab2c78b988dbaab862fc5af129aeaeef50fbf3389e43dfc3fc4e7409b3e48777b42ecbe5dee51b2a13991bd4bd0b89f91f046361e481b9ccd3cc03be62f679d7e21fe6c91305648ea8f72384dd9286012f9ffdbb9a82635fae70d365b29240ad339fc2d24af41523b77a8f605e4cf0c5ac0d8f181641411f2a6b91c7ba280b1dc0f1dc7b52ae39503d802dc678dd316c83bb65bb8e7bea8c820c5c75e102adc9a122c3d0e7d819b70be70c88412be132ff9305211b095b1d186cf29fc7f387a25fb33d003e823d62299ea0e6d803cb737f8c33546ab6586c7bc8591ba2da6c706a197c56b0f415921688a27baffc06d01ecc611c7b8bce9315a72b7d030f4eead56917328c67b24a2593b952d75ed7414695e250c50a8b334c4a606281f8678fc9bae058d4d323f6020f01b772d7ccd5ad44d1520f4e7c9aadcc90fde20568cb87ca7df88cf10c73bdc23244d6253ce5f64c39265b9d90b8440f1020839f1bd43ab894211b5529e9b5d05c1ab006bda474364a9b28e716ec0e562e332d242a304842aebec7015d9aa874efd240062b6e45aae3b8b5c7552dd458afdbdf6e3657f0410048e00d863dbdc0134fe2bc727686a49e5d2da1dcad0963ded806ea36c557da1bb3f92cc90ec16bee7b14be3616e4d1fde50f0078a85c4a012bcd4dc44f85fb6c8bc6448e054bc4f0aa0ca60e098979a3a280d87c81f787a1d782a1c931ba08b5aac75710dd27ecc22da8ce9cce116901ba56cee4b5d20de27b276b18f5f25266bc84c0dc26271ef20d6e3fc7873841aa9c7de281b4a96b647375d0a06408db010e41dd6b2b19ffa416e6c2dfc222d2dee5c77de0369cba097f6586e9d8027ef5b1f1f645f3a4aef049df227e7cd02de12274fb29263839da1fff378e71d3302c198034013a851a3aeb4ea72d4944aba4934070de3166ac3352d8c9de0d7e2c63f6ce2a460e2507ed8d7e556f55e7fdfcaacb536d24be8125d5e23369b6165986d94142d5942788d42d1507afd2c2d6f232054a4bf37a6323a8932fcc0718b15d50933860b6287a007a090eba57fafba6fb07b0c10011983ae1acba7faf2c4d5a9b7aaa8f7878f40ff30373e4c8d4bf29c0a42274294a2a8c9a112060ec815e79304c84311e5472f4ca8ef2ee987225b6d162ed2d47fe702a94d7caa02190b4985b909374984d5bd7046f7ca0cf3079e78c9a007080c2456ca72625adb53b4a056b5d89b815ca561ce0de3cc8206df4cfcacc8d29824e1501823246a23827b086c605a8f12b2549f15cf7cc1d2bc6a4822b680cdebef716181ce0a762b503b2a421844cf48c0398e1097805afd459b742bf945ee29a0d4538611c9a39aa1e7c1f07fff53d22f51a9be5dcafd7ddec50f4afc0682ee3fa45cbf1514f47e8157195c93352d4e4685a3573aece9e01a20c7a1327e866450ed855dfe84f56ba990b3496f88dee8ec024e82dae2f310653caaa884d574788dc47dc16dd3a493c92e07322fd6d31358528959148574745ce7f338840b52c8d6855aeb21853326483deb17d15e0f2791cef1a374ae5d439ab345729340d157c1fff2369b638be5ad7e614bee3aadda87d94730565c2e3bf2e3cf45c3a423f8a13bcc1445be732ca82d4a1548b98b350a130126fb209cdea89c25cf4b8876d9a8699bd772d983015f6d7b2d3f8d327f8ae9b3cfeefc0699587e2a87baf748391460d18569061edb2435f7944b5da5287390d9f07839b0709d7ffae9403191b756cdf2a9b2d5b21bb0e087a74e3d192a40e25310a988e888c93ca04d63a01943b90abbd1e3d8ccc0c3e1603383d6df69b4cec55c42557a54ea885a60ffa65b2ad0ff60aca6107e5476fdaa3fbcb22eb7f11a074f11e8d0d1c139512786d4960ab98a8d128c1046e60072bdfc6c0b16b550768cfa7c0d2ab3d503ac9b92de6f1040147d0c6f1ca94f086f5cfd1c3b3858e602fe236dd9af19319f1a6c8d157d417c2fa2e9435d6bf651da77d30d06b60840d087740373a7fa4e039b61441b8e0a1c0cbd4fa3a622b5e9f122dfd883d2faaf66d9e1ce3de67609fee544cd47953fa3e1b4253249d8594ef8d4df5f5578a4de752ede69368825ba7131a35d1ef6c909c3a8fc14e35c33eba5ec5a43cf43440bf5e2c12673a86e85f9033d281b28099ca264221a20b339c3f37fb99233e8d97d481b53523ed5125c370c597871007f3d0754d626e5ef1b3bac79da5f52788a7b7abdbd77a48d5c1a8548a6453ea06d5b4dd91c6306665228da95e45cb423dc8f5de2c8fe75f16107c713f07bf36f67a2d5d38a7f7178d344894d1c2371c65b138e9758ee622d0f8cb218e0d291b4c51c64c36bf6126d794738d14a436029d5940589b76eb8d1c7de4412fcdf60ce8c8e9abca9f9379af0373a1b6cc053421fd90eb032fd00e9bc682f64b520a9db94faa29c74445a2393f46a49d47f7b211d18eb110b816085ca3d1e3d9883834e1ae0ab8a739ddc6230530586795ce85301dd0beaa41cb0c205d0107438e3b9a9ecada6cc559ba97508db012642ca5a9ab3f34f72531e20ba0bb7ee7a39b1da6dfd3a4ecd84597019fa4753cc58b71e9a741017f8cd0fd6568c9b3695b90bf109ce586e246f9329bf3e3da12d96e35f68e150ae5d83a44c8e308ec828f98576f7dce64b2fc6a0cb36b44267fa96c75a5c2435673216dff9c5635c9ee94cc27f9b975a733b3d686cb7a30d36f1d4930148a5e023b3d553c7e32eb2995f581ed96ae360221816c8b59ed1399c417e07f6151f021a9438b624eb70f4e4d5ae4a2f648334571b1f4ea750f12cc52d81f15802c196f8c5094ef47355330fd6d7eafcbd9d4dbbd45568ec57d6a4b4f24b9e3a8c8eeb681f8de745d6b134ee67ca95eaf3700d9a5a8d4b3f65abf6f3f04dbcb5b4585286889b92821f7e07c145f48a609a3e94a774a49cf67a08048ccdd98f2a7f4b73692d36bae296d46b78f62976aee7a438b9130cb06c0a42328890d9894f3515c43b2f4be33b97453740df55b20c680483b5d078a4588552230d82ba2c6d507524029e810476dd92ec4fc17308c7da9a2b8a3e58fccf14010fd579499f3b0917121831b2e1f6c9d12855dd3612336fa4f3ba4017dbba190b09477ebc0c41b6fa4142ea178bba16a6994d8cbc71775db8f4d6a514aa2ff72ff94201f91f118a7712cbaf09817bb6dca444a60013a51d1f255964bc1bbb6ebb8d05591a3713d152a3d772430d3ab4351ab7b1d1ab6dc61a28a71119c581350eeb505b281dd809cd7ebecc578e34fccedb5ba910f79749aefbeefbcdf6b51514e95195c570ab7eb229a6b3f60421c1b7264224515ddd445ff6fdddca131c12eadaf1f25312c9afc4af225d30bc7271da53a7c07392333ce2bb9090cbf4594473465e83aab04dbf5c54f509ef985e643d409e4733949a6b8ac3f286f7f21e7024e6b9a77992a23beab123574e2f525cb037a58f853aa90962853788c4dba134077355ecc1967b14c053513de56369eaa8d431400332041d9d4570088be3c26e580e94e45317ce9b922027ec840d709254cee28ec479bba8e5eb4d091876381ec313951939015c4bfd42d92eb883fee92055ed5d77f3a2f73275bbed3bf8ab0ceed25c36b8c7c18cc934bde0c73eb0f129f3c1fea657825b3e249add1bffde26299408dc9a68f959dfa6c0f849c26a0a4923c0287fc12e48cb6efdfb1ce35bf7666c198dc38ce96c2fc7168bc50fe9cd47d842bc873d0639bd5f09b0a870221e68ce43f47d29478b8e69442c224d14d74b348c530d0a4a8b5404c899a5e6136768ca0e78d65d13e5dff4f02840d988f3db9ddce31d28794773a4c53008bb39948e38c87e18d56fbece9db4826b0073e66c4852ab9ecdff80977524c9e23de8bc0eb556eb6d718279429fe4f20d02c0555ba7cf08ec1bf168c61c5e7fe8542271a229472c2eff82d2bbfe1c00eb0e400a4719f0cc2c6d70013fb883f009729c0af368d3aa6ab9a99c38755fd379f50e51a53b5e19a82f25", "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"}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 6m26.568297045s ago: executing program 3 (id=1430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 6m26.517650295s ago: executing program 3 (id=1431): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) fchown(r0, r1, r2) (async) fchown(r0, r1, r2) setxattr$security_capability(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x800, 0x6}, {0x3fb3, 0x64}], r1}, 0x18, 0x1) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x200085, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x200085, 0x0) 6m26.468077146s ago: executing program 3 (id=1433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 6m26.442771616s ago: executing program 33 (id=1433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 23.866418596s ago: executing program 5 (id=8448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 23.801313837s ago: executing program 5 (id=8451): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x8, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x70154000) getresuid(0x0, 0x0, 0x0) 23.405851983s ago: executing program 5 (id=8454): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 22.878995321s ago: executing program 5 (id=8460): unshare(0x22020600) r0 = memfd_create(&(0x7f0000000940)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1Rk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8\xa8\x9b\xa3[\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xef\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n/\xbc\xa2\x1d~w\x1arr_P\xae\xda\xe9&@c\xc4H\xbe]\x80\xd0\x89|\xfe:\xa2\xb7C\xa2\x89\xb1\xbeKL\xef\x1e%\xcbT\x1d3\xf5\xea\n\']f\x16\xb0\"\xb8\xda;x\xa0O\x02\xb9B\x00z\xdb\xa6\x14pu\xedoW\xc9\x88\x8eq\xf3bVv\x0e\xf1\x84\xc6\xad\x9b0\xfc)\xce\xef\x86\f|@\xe8\xbe\x80\xbb\xf0\xa1\x91\x9f\x1b^\xfa\x8a\x03\xe6\x0f\x00\x00\x00\x00\x00\x00\x00c\xb0\xfbf\xb5\x9b\xfdp\xd3\x8c\xbcO\x1f(\xee\xfaWSY\xc4\x171\xfd\r=zu\xcdK\x83\x9e\xa2\ak4\x01\xb5\xefD5\f]r\"{m\xc3\xdeG@R\xe7\'\x06$\xea\x91\xda\x00\xd2\x18z\xc20\x19\xd1\xf6nA\'\x91\xf7\x0e\x80\xad\x84\xa0\xcb\xb6$`\n\xa4O2\xae\xf4*\xe9\x04\r\xcd\xfc\xaf\x10h\x92\xf7\xef\xf3\'n/:\a\xeb\x12D\x87\xe8XY\xfb\xdc\xbe\x18\f\r\xa1\xfe,h\xa3-W\xe4\xa3\xb2\x99\xabc$\xb2\x89\r\xae\xfe\xf36\xe4\xe8\x1aO\x92\xb5\x93\'\x99\x9f\xbaO\x06\xd1c\xe1\x11$\xe8\xc6\xf2\xc4$,V`\xf6f\x8arA\xab\xa8\xd6\xa3\a\tg\xb8\xbd\x87;\x0f\x14\xf4\x03\xd9\xb5\xf6V\x02\x8b\xfc\r\xdeTq\x13\xabj\'\xb5\xc8\xf9s\xeb\xa1\xf7\xb2\x90y\x8a\xaf\xb8\xda\xf1 \xa2)$\x86(\xff\xc5x\xb1W\x1c\xed0\x00\x00\x00\x00', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x100}) 22.825688662s ago: executing program 5 (id=8461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 22.825483952s ago: executing program 5 (id=8462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_usb_connect(0x2, 0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110014f218508d6160100cdb2010203010902"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 11.357360491s ago: executing program 2 (id=8497): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.781630616s ago: executing program 0 (id=8498): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x40050) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="8497", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000881) 9.781370196s ago: executing program 4 (id=8499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x5, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008602"]) 9.781087846s ago: executing program 2 (id=8500): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="12040e00e0ff030002004788aa96a13bb1000000000086dd", 0x18, 0x800, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 8.038685494s ago: executing program 0 (id=8501): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) symlink(0x0, 0x0) 8.038538684s ago: executing program 4 (id=8502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffc}, {0x0, 0x8, 0x100cc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x13c}}, 0x0) 8.038452764s ago: executing program 2 (id=8503): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x43, 0x9ee}}], 0x10}}], 0x1, 0x80) 6.161631003s ago: executing program 0 (id=8504): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)='B', 0x1}], 0x1, 0x0) 6.161480893s ago: executing program 4 (id=8505): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000000)={'wlan0\x00'}) 6.161396163s ago: executing program 2 (id=8506): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.253787913s ago: executing program 0 (id=8507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 4.253458833s ago: executing program 4 (id=8508): writev(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r2, &(0x7f0000001000)=""/4085, 0xff5) 2.191360456s ago: executing program 0 (id=8509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a32000000"], 0x2c}}, 0x0) 2.191216025s ago: executing program 4 (id=8510): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.191153496s ago: executing program 2 (id=8511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000040605000000000000000000070000030500010007"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) 745.74µs ago: executing program 0 (id=8512): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000200)={'pimreg0\x00', {0x2, 0x0, @multicast1}}) 191.11µs ago: executing program 4 (id=8513): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000000}) 0s ago: executing program 2 (id=8514): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) writev(r0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7fda644ea2ff9a2366bd5463c1c75dd7228b29bb5748e0850f158de8db6bef12cf53613ef9ba2ba647967670bebd902b78ff394afa5cc5cce09b3121b26864f83992ec63ad1016022f5167e09bf9e73bce815ef7916a4fbfa730f76c2cd9c686663fc9d34e0db4828395a04d05402d277a3a9dacd6743a776b3bede475c182ee1f25229146460532c9bfa216cb93057eed53e0c54c3a03b4f30e6602534633f30000005a1ebb3c92e0", 0xa9}, {&(0x7f0000000140)="8148ab31a01ba1dcad6d2c176f4cf626f34d8990d3228fbc4dc4304491b3ecdbcd6a89", 0x23}, {&(0x7f00000002c0)="144dd421d0f3b87c2c0883352b2f3e3f46eecbc20ab2df5e1f231e6640120361be857a1543df4f8e7884694bafca3ff2a046e171515a9b27c7703a39c0c143a6eb52e51baf9942f49eb89b5295f0bff0b97552d509060351982326e48dac07bc43cc470d18a326c0ded7", 0x6a}, {&(0x7f00000003c0)="1acd0fc7caef425dbe7bb346e61d8b3699e2fe93ea4fca0f3630b0f06e636b656da5c79e6a9f5f49016d387747fe9336c3191d906fbccea4f6031b9217e1a7da14c82895135d766b618fe6e1f44bc638ecfb6707ba0fc0f615953cf82462410a0d5be7bd694b786b0a152fbb5bcccae1878c8efa61e9e5d2c707d31fa14853fab397c2bc2858f2b5370de61b6f7334e4e8b2809c015094f9df6d3649b8e6f51ea0a5a0a644f0ce5aa1f338e9b1095f13f0d85555b2d29238437b62ff", 0xbc}, {&(0x7f0000000480)="23601137e08a6c9a39cc31e77de75cea9bbb5460f72ed005bcd11f895de60f4738c21b01763886c830a39dbf2b19517378f45faa382f61d1b4ca7748354b9590b2e9627fa04de0b30ab9b8d34f4d37b1fde15da5848d32344547c9d5547425b0fb34bbc43d774ef149ea9a7e52f00887d222c1088966c87782d42b28", 0x7c}, {&(0x7f0000000500)="eea606167a5c8a29e875eb8c7a8b51d571d3522301728f7023424bfdc008945db0be717ee8cbb5cb25c32567fd1c931e4a7dd88fb9de4ed49b38133a0c9be834935147c75561496e9e68555da82024e1767b74e93ece1755ff8c4973faca9031f522030dd512e34755c6c29f0f4d144bec730cf38565047ef3834eb0593a3cf73c6ba825f7b06c6d0f25197ba9868166ecaec47bb3148ef898b2a918280d7134e57b6edde31d45f3004a4d840b652b509892", 0xb2}, {&(0x7f00000005c0)="56bce820c9c7ae4e7ca3b733a59803f16b849328976b54b2d5a2b54a20051b62239259473158b898e77c3dd4fdec65fe838fe16e91468eaee6713edba7172393fe8b8cdf3837ee439e7792137a7edc3bd27e8526c44bb6a3409a", 0x5a}, {&(0x7f0000000c00)="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", 0x487}], 0x8) kernel console output (not intermixed with test programs): wn parameter 'roktmode' [ 334.431928][T18986] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 334.477374][T18989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.477406][T18989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 334.597417][T19009] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 334.606601][T19009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 334.614552][T19009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:287 [ 334.632941][T19011] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 334.667580][ T352] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 334.817330][ T352] usb 6-1: device descriptor read/64, error -71 [ 335.073832][ T352] usb 6-1: device descriptor read/64, error -71 [ 335.330441][ T352] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 335.469402][ T352] usb 6-1: device descriptor read/64, error -71 [ 335.725973][ T352] usb 6-1: device descriptor read/64, error -71 [ 335.843657][ T352] usb usb6-port1: attempt power cycle [ 336.207054][ T352] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 336.229407][ T352] usb 6-1: device descriptor read/8, error -71 [ 336.368941][ T352] usb 6-1: device descriptor read/8, error -71 [ 336.624118][ T352] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 336.646421][ T352] usb 6-1: device descriptor read/8, error -71 [ 336.785373][ T352] usb 6-1: device descriptor read/8, error -71 [ 336.902005][ T352] usb usb6-port1: unable to enumerate USB device [ 337.403078][ T36] audit: type=1400 audit(2000000090.500:1152): avc: denied { append } for pid=19024 comm="syz.0.6524" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 337.877923][T19038] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.929860][T19042] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 337.929886][T19042] rust_binder: Error while translating object. [ 337.938611][T19042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.945085][T19042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 338.016842][T19047] batadv_slave_1: entered promiscuous mode [ 338.032265][T19047] batadv_slave_1: left promiscuous mode [ 338.206173][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 338.366544][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 338.375447][ T36] audit: type=1400 audit(2000000091.408:1153): avc: denied { connect } for pid=19041 comm="syz.5.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.395434][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 338.403176][ T9] usb 6-1: no configurations [ 338.407808][ T9] usb 6-1: can't read configurations, error -22 [ 338.482868][T19058] overlayfs: conflicting options: nfs_export=on,index=off [ 338.490606][T19058] rust_binder: 19058: no such ref 1 [ 338.496006][T19058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:300 [ 338.499212][T19058] overlayfs: failed to resolve './file0': -2 [ 338.649444][T19066] cgroup: Unknown subsys name 'measure' [ 338.787915][T19078] random: crng reseeded on system resumption [ 338.843052][T19086] kvm: pic: non byte write [ 338.884986][T19096] ./file2: Can't lookup blockdev [ 338.941949][T19108] rust_binder: Write failure EINVAL in pid:185 [ 339.009622][ T36] audit: type=1400 audit(2000000092.006:1154): avc: denied { write } for pid=19110 comm="syz.0.6558" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.077721][ T36] audit: type=1400 audit(2000000092.006:1155): avc: denied { add_name } for pid=19110 comm="syz.0.6558" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.123910][ T36] audit: type=1400 audit(2000000092.006:1156): avc: denied { create } for pid=19110 comm="syz.0.6558" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 339.168316][ T36] audit: type=1400 audit(2000000092.006:1157): avc: denied { associate } for pid=19110 comm="syz.0.6558" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 339.445247][T19130] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6565'. [ 339.542497][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 339.713566][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 339.719770][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 339.726667][ T10] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 339.735928][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.744722][ T10] usb 1-1: config 0 descriptor?? [ 340.034811][ T36] audit: type=1400 audit(2000000092.970:1158): avc: denied { unmount } for pid=18039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 340.184301][ T10] a4tech 0003:09DA:001A.0006: item fetching failed at offset 4/5 [ 340.192327][ T10] a4tech 0003:09DA:001A.0006: parse failed [ 340.198418][ T10] a4tech 0003:09DA:001A.0006: probe with driver a4tech failed with error -22 [ 340.316433][T17154] Bluetooth: hci0: Frame reassembly failed (-84) [ 340.371759][T19166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215 [ 340.393454][T19120] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 340.410807][T19120] rust_binder: Write failure EINVAL in pid:66 [ 340.411604][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.426354][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.437325][ T10] usb 1-1: USB disconnect, device number 14 [ 340.492334][T19179] syz.0.6582 (19179): attempted to duplicate a private mapping with mremap. This is not supported. [ 340.640202][T19200] fuse: Unknown parameter '0x0000000000000005' [ 340.646908][ T36] audit: type=1326 audit(2000000093.540:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19199 comm="syz.2.6590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09cdb8e929 code=0x0 [ 340.868167][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 341.028492][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 341.034687][ T10] usb 1-1: config 4 has an invalid interface number: 140 but max is 0 [ 341.043032][ T10] usb 1-1: config 4 has no interface number 0 [ 341.049126][ T10] usb 1-1: config 4 interface 140 has no altsetting 0 [ 341.057332][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 341.066553][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.074567][ T10] usb 1-1: Product: syz [ 341.078724][ T10] usb 1-1: Manufacturer: syz [ 341.083321][ T10] usb 1-1: SerialNumber: syz [ 341.089957][ T10] ums-cypress 1-1:4.140: USB Mass Storage device detected [ 341.304655][ T10] usb 1-1: USB disconnect, device number 15 [ 341.559888][T19207] netlink: 'syz.2.6592': attribute type 32 has an invalid length. [ 341.852021][T19211] overlayfs: workdir and upperdir must be separate subtrees [ 341.942124][T19213] binder: Unknown parameter '00000000000000000094' [ 342.124336][T19218] overlayfs: failed to clone upperpath [ 342.131020][T19218] tmpfs: Unknown parameter 'no' [ 342.225847][ T352] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 342.386229][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 342.392427][ T352] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 342.403334][ T352] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.414310][ T352] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.427357][ T352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.433998][ T352] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 342.443042][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.451891][ T352] usb 1-1: config 0 descriptor?? [ 342.503825][T18920] Bluetooth: hci0: command 0x1003 tx timeout [ 342.504034][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.891878][ T352] magicmouse 0003:05AC:0269.0007: hidraw0: USB HID v0.03 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 343.107420][T19216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6596'. [ 343.158870][ T10] usb 1-1: USB disconnect, device number 16 [ 343.524826][T19165] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 343.705058][ T36] audit: type=1400 audit(2000000096.403:1160): avc: granted { setsecparam } for pid=19291 comm="syz.0.6621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 343.724465][ T36] audit: type=1400 audit(2000000096.403:1161): avc: granted { setsecparam } for pid=19291 comm="syz.0.6621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 343.751665][ T36] audit: type=1400 audit(2000000096.403:1162): avc: granted { setsecparam } for pid=19291 comm="syz.0.6621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 343.780072][T19301] rust_binder: 19301: no such ref 0 [ 343.785704][T19301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 344.153003][T19322] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 344.153031][T19322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 344.161839][T19322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:125 [ 344.341739][T19333] netlink: 'syz.2.6633': attribute type 12 has an invalid length. [ 344.666600][T19364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 344.666630][T19364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 344.677159][ T36] audit: type=1400 audit(2000000097.310:1163): avc: denied { map } for pid=19363 comm="syz.5.6642" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 345.080244][ T352] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 345.241546][ T352] usb 6-1: Using ep0 maxpacket: 32 [ 345.247845][ T352] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 345.256258][ T352] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 345.264946][ T352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 345.273955][ T352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.283638][ T352] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.293297][ T352] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.306290][ T352] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 345.315326][ T352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.323966][ T352] usb 6-1: config 0 descriptor?? [ 345.547364][ T352] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 345.559509][ T352] usb 6-1: USB disconnect, device number 34 [ 345.566351][ T352] usblp0: removed [ 346.309761][T19410] rust_binder: 19410: no such ref 3 [ 346.355382][ T36] audit: type=1326 audit(2000000098.881:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19387 comm="syz.0.6652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bb18e929 code=0x7fc00000 [ 346.461550][T19423] overlay: Bad value for 'upperdir' [ 346.491849][T19425] can0: slcan on ptm0. [ 346.680717][T19447] can1: slcan on ptm1. [ 346.716547][ T45] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 346.747983][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 346.876251][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 346.882468][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 346.889176][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 346.897657][ T10] usb 1-1: device descriptor read/64, error -71 [ 346.898253][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.913026][ T45] usb 6-1: config 0 descriptor?? [ 347.154238][ T10] usb 1-1: device descriptor read/64, error -71 [ 347.351919][ T45] ryos 0003:1E7D:31CE.0008: hidraw0: USB HID v0.07 Device [HID 1e7d:31ce] on usb-dummy_hcd.5-1/input0 [ 347.370871][ T45] usb 6-1: USB disconnect, device number 35 [ 347.410824][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 347.549791][ T10] usb 1-1: device descriptor read/64, error -71 [ 347.806382][ T10] usb 1-1: device descriptor read/64, error -71 [ 347.827720][ T45] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 347.924489][ T10] usb usb1-port1: attempt power cycle [ 347.989110][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 348.000116][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 348.011189][ T45] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 348.020291][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.028284][ T45] usb 6-1: Product: syz [ 348.032486][ T45] usb 6-1: Manufacturer: syz [ 348.037078][ T45] usb 6-1: SerialNumber: syz [ 348.042338][ T45] usb 6-1: config 0 descriptor?? [ 348.047920][ T45] hub 6-1:0.0: bad descriptor, ignoring hub [ 348.054059][ T45] hub 6-1:0.0: probe with driver hub failed with error -5 [ 348.063850][ T45] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 348.078115][T18055] udevd[18055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 348.287444][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 348.309870][ T10] usb 1-1: device descriptor read/8, error -71 [ 348.426542][ T45] usb 6-1: USB disconnect, device number 36 [ 348.448904][ T10] usb 1-1: device descriptor read/8, error -71 [ 348.704404][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 348.726767][ T10] usb 1-1: device descriptor read/8, error -71 [ 348.865840][ T10] usb 1-1: device descriptor read/8, error -71 [ 348.982390][ T10] usb usb1-port1: unable to enumerate USB device [ 349.206824][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 349.367208][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 349.373401][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.384352][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 349.391029][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 349.400142][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.408680][ T9] usb 6-1: config 0 descriptor?? [ 349.721928][T19424] can0 (unregistered): slcan off ptm0. [ 349.848595][ T36] audit: type=1400 audit(2000000102.146:1165): avc: denied { write } for pid=19495 comm="syz.0.6675" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 349.873350][ T9] wacom 0003:056A:0057.0009: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.5-1/input0 [ 349.953387][T19447] can1 (unregistered): slcan off ptm1. [ 350.113996][ T36] audit: type=1400 audit(2000000102.389:1166): avc: denied { read } for pid=19529 comm="syz.4.6676" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.138129][ T36] audit: type=1400 audit(2000000102.389:1167): avc: denied { open } for pid=19529 comm="syz.4.6676" path="/129/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.163130][ T36] audit: type=1400 audit(2000000102.417:1168): avc: denied { ioctl } for pid=19529 comm="syz.4.6676" path="/129/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.335663][ T45] usb 6-1: USB disconnect, device number 37 [ 350.453683][T19599] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.461011][T19599] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.468329][T19599] bridge_slave_0: entered allmulticast mode [ 350.474737][T19599] bridge_slave_0: entered promiscuous mode [ 350.481499][T19599] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.488623][T19599] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.495833][T19599] bridge_slave_1: entered allmulticast mode [ 350.502253][T19599] bridge_slave_1: entered promiscuous mode [ 350.549248][T19599] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.556331][T19599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.563586][T19599] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.570635][T19599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.589878][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.597208][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.606288][T17137] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.613355][T17137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.622335][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.629390][T17116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.658726][T19599] veth0_vlan: entered promiscuous mode [ 350.672544][T19599] veth1_macvtap: entered promiscuous mode [ 350.734048][T19623] rust_binder: Error while translating object. [ 350.734088][T19623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 350.740705][T19623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:279 [ 350.874187][T19644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 350.883307][T19644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 350.905774][T19647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 350.951519][T17116] Bluetooth: hci0: Frame reassembly failed (-84) [ 351.291492][ T64] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 351.451834][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 351.458049][ T64] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 351.466393][ T64] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.476512][ T64] usb 6-1: config 0 has no interface number 0 [ 351.484157][ T64] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 351.493207][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.501221][ T64] usb 6-1: Product: syz [ 351.505471][ T64] usb 6-1: Manufacturer: syz [ 351.510071][ T64] usb 6-1: SerialNumber: syz [ 351.515135][ T64] usb 6-1: config 0 descriptor?? [ 351.521005][ T64] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 351.527426][ T64] usb 6-1: No valid video chain found. [ 351.736112][ T352] usb 6-1: USB disconnect, device number 38 [ 351.944578][ T64] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 351.946561][T19674] netlink: 'syz.0.6708': attribute type 6 has an invalid length. [ 351.986787][ T10] syzkaller0: tun_net_xmit 76 [ 352.041434][T19675] syzkaller0: create flow: hash 2784980757 index 0 [ 352.083881][T19675] syzkaller0 (unregistered): delete flow: hash 2784980757 index 0 [ 352.114673][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 352.121100][ T64] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 352.129138][ T64] usb 3-1: can't read configurations, error -22 [ 352.264359][ T64] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 352.424761][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 352.431250][ T64] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 352.439208][ T64] usb 3-1: can't read configurations, error -22 [ 352.445562][ T64] usb usb3-port1: attempt power cycle [ 352.809593][ T64] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 352.833476][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 352.844256][ T64] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 352.856258][ T64] usb 3-1: can't read configurations, error -22 [ 352.923914][ T36] audit: type=1400 audit(2000000105.018:1169): avc: denied { mounton } for pid=19685 comm="syz.5.6712" path="/99/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 352.946924][ T36] audit: type=1400 audit(2000000105.018:1170): avc: denied { remount } for pid=19685 comm="syz.5.6712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 352.967252][ T36] audit: type=1400 audit(2000000105.064:1171): avc: denied { unmount } for pid=18039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 352.994230][ T64] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.995091][T19688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=19688 comm=syz.5.6713 [ 353.014894][T19688] 8021q: VLANs not supported on lo [ 353.017652][T19691] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 98) [ 353.020197][T19691] rust_binder: Error while translating object. [ 353.032057][T19691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.038590][T19691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 353.048961][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 353.074172][ T64] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 353.082325][ T64] usb 3-1: can't read configurations, error -22 [ 353.089110][ T64] usb usb3-port1: unable to enumerate USB device [ 353.109047][T18920] Bluetooth: hci0: command 0x1003 tx timeout [ 353.109532][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 353.143542][T19706] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 353.151582][T19706] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 353.160134][T19706] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 353.168136][T19706] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 353.190208][T19708] rust_binder: 19708: no such ref 3 [ 353.354809][ T64] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 353.516158][ T64] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 353.527470][ T64] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 353.537562][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 353.546620][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.969557][T19712] rust_binder: Error in use_page_slow: ESRCH [ 353.969581][T19712] rust_binder: use_range failure ESRCH [ 353.975648][T19712] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 353.981197][T19712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 353.989307][T19712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:308 [ 354.284876][ T45] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 354.424234][ T64] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 354.432363][ T64] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input17 [ 354.456966][ T45] usb 6-1: config 0 has no interfaces? [ 354.463876][ T45] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 354.473009][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.481337][ T45] usb 6-1: Product: syz [ 354.485486][ T45] usb 6-1: Manufacturer: syz [ 354.490115][ T45] usb 6-1: SerialNumber: syz [ 354.495366][ T45] usb 6-1: config 0 descriptor?? [ 354.715950][ T10] usb 6-1: USB disconnect, device number 39 [ 354.909448][T19719] tipc: Started in network mode [ 354.914322][T19719] tipc: Node identity 02b507765c2, cluster identity 4711 [ 354.921525][T19719] tipc: Enabled bearer , priority 0 [ 354.929230][T19719] tipc: Disabling bearer [ 354.982267][T19721] input: syz0 as /devices/virtual/input/input18 [ 355.223384][T19724] rust_binder: Write failure EFAULT in pid:21 [ 355.690236][T19750] overlayfs: failed to resolve './file1': -2 [ 355.741864][T19754] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 355.741893][T19754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 355.750105][T19754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:326 [ 356.124286][T19755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.142344][T19755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.305158][T19766] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 356.330585][T19768] rust_binder: Write failure EFAULT in pid:331 [ 356.426013][T19777] rust_binder: Error in use_page_slow: ESRCH [ 356.426034][T19777] rust_binder: use_range failure ESRCH [ 356.428168][T19778] rust_binder: Error in use_page_slow: ESRCH [ 356.432124][T19777] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 356.437789][T19778] rust_binder: use_range failure ESRCH [ 356.443639][T19777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.451678][T19778] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 356.457495][T19777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 356.466430][T19778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.466455][T19778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 356.466592][T19778] rust_binder: Error in use_page_slow: ESRCH [ 356.474989][T19777] rust_binder: Error in use_page_slow: ESRCH [ 356.483813][T19778] rust_binder: use_range failure ESRCH [ 356.492989][T19777] rust_binder: use_range failure ESRCH [ 356.501944][T19778] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 356.507992][T19777] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 356.513959][T19778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.519371][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 356.524802][T19778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 356.543411][T19777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.566601][T19777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 356.668872][ T10] usb 3-1: device descriptor read/64, error -71 [ 356.733634][T19794] rust_binder: Error in use_page_slow: ESRCH [ 356.733652][T19794] rust_binder: use_range failure ESRCH [ 356.739656][T19794] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 356.745169][T19794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.753073][T19794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:345 [ 356.936151][ T10] usb 3-1: device descriptor read/64, error -71 [ 357.032358][ T64] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 357.171392][ T64] usb 6-1: device descriptor read/64, error -71 [ 357.203439][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.233861][ T9] usb 1-1: USB disconnect, device number 21 [ 357.276107][ T36] audit: type=1400 audit(2000000109.087:1172): avc: denied { setattr } for pid=19800 comm="syz.0.6753" name="UDPLITEv6" dev="sockfs" ino=70914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.342440][ T10] usb 3-1: device descriptor read/64, error -71 [ 357.358805][T19805] netlink: 679 bytes leftover after parsing attributes in process `syz.0.6754'. [ 357.449287][ T64] usb 6-1: device descriptor read/64, error -71 [ 357.598961][ T10] usb 3-1: device descriptor read/64, error -71 [ 357.705877][ T64] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 357.716644][ T10] usb usb3-port1: attempt power cycle [ 357.844845][ T64] usb 6-1: device descriptor read/64, error -71 [ 358.080065][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 358.101433][ T64] usb 6-1: device descriptor read/64, error -71 [ 358.102483][ T10] usb 3-1: device descriptor read/8, error -71 [ 358.219137][ T64] usb usb6-port1: attempt power cycle [ 358.262875][ T10] usb 3-1: device descriptor read/8, error -71 [ 358.298765][ T36] audit: type=1400 audit(2000000110.050:1173): avc: denied { write } for pid=19807 comm="syz.0.6755" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.518380][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 358.540739][ T10] usb 3-1: device descriptor read/8, error -71 [ 358.582617][ T64] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 358.604839][ T64] usb 6-1: device descriptor read/8, error -71 [ 358.679701][ T10] usb 3-1: device descriptor read/8, error -71 [ 358.743877][ T64] usb 6-1: device descriptor read/8, error -71 [ 358.796413][ T10] usb usb3-port1: unable to enumerate USB device [ 358.999430][ T64] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 359.021831][ T64] usb 6-1: device descriptor read/8, error -71 [ 359.169067][ T64] usb 6-1: device descriptor read/8, error -71 [ 359.288179][ T64] usb usb6-port1: unable to enumerate USB device [ 359.535352][T19818] rust_binder: 19818: no such ref 0 [ 359.588830][T19820] can0: slcan on ptm0. [ 359.594055][T19820] bridge0: port 3(vlan0) entered blocking state [ 359.600384][T19820] bridge0: port 3(vlan0) entered disabled state [ 359.606677][T19820] vlan0: entered allmulticast mode [ 359.612219][T19820] veth0_vlan: entered allmulticast mode [ 359.618287][T19820] vlan0: entered promiscuous mode [ 359.623609][T19820] bridge0: port 3(vlan0) entered blocking state [ 359.629876][T19820] bridge0: port 3(vlan0) entered forwarding state [ 359.886769][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 359.972318][ T64] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 360.023869][T19844] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 360.032676][ T45] usb 3-1: device descriptor read/64, error -71 [ 360.092062][T19847] 9pnet_fd: p9_fd_create_tcp (19847): problem connecting socket to 127.0.0.1 [ 360.135290][ T64] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.144434][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.152437][ T64] usb 1-1: Product: syz [ 360.156702][ T64] usb 1-1: Manufacturer: syz [ 360.161382][ T64] usb 1-1: SerialNumber: syz [ 360.185829][T19851] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6766'. [ 360.195540][T19851] binder: Unknown parameter 'r ' [ 360.303680][ T45] usb 3-1: device descriptor read/64, error -71 [ 360.336105][T19862] can1: slcan on ptm2. [ 360.378877][T19862] can1 (unregistered): slcan off ptm2. [ 360.560273][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 360.699269][ T45] usb 3-1: device descriptor read/64, error -71 [ 360.955797][ T45] usb 3-1: device descriptor read/64, error -71 [ 360.987888][ T1549] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 361.073493][ T45] usb usb3-port1: attempt power cycle [ 361.126850][ T1549] usb 6-1: device descriptor read/64, error -71 [ 361.383422][ T1549] usb 6-1: device descriptor read/64, error -71 [ 361.436912][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 361.459417][ T45] usb 3-1: device descriptor read/8, error -71 [ 361.598263][ T45] usb 3-1: device descriptor read/8, error -71 [ 361.640004][ T1549] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 361.778987][ T1549] usb 6-1: device descriptor read/64, error -71 [ 361.853835][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 361.876247][ T45] usb 3-1: device descriptor read/8, error -71 [ 362.015255][ T45] usb 3-1: device descriptor read/8, error -71 [ 362.035573][ T1549] usb 6-1: device descriptor read/64, error -71 [ 362.131889][ T45] usb usb3-port1: unable to enumerate USB device [ 362.153245][ T1549] usb usb6-port1: attempt power cycle [ 362.431096][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.507853][T19874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 362.507876][T19874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401 [ 362.517446][ T1549] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 362.549771][ T1549] usb 6-1: device descriptor read/8, error -71 [ 362.688687][ T1549] usb 6-1: device descriptor read/8, error -71 [ 362.838870][T19819] can0 (unregistered): slcan off ptm0. [ 362.855862][T19892] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 362.866244][T19892] SELinux: failed to load policy [ 362.885240][T19892] kvm: apic: phys broadcast and lowest prio [ 362.944839][ T1549] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 362.945861][T19901] syzkaller0: create flow: hash 2784980757 index 0 [ 362.965435][ T64] usb 1-1: USB disconnect, device number 22 [ 362.998749][ T1549] usb 6-1: device descriptor read/8, error -71 [ 363.022284][T19901] syzkaller0 (unregistered): delete flow: hash 2784980757 index 0 [ 363.139267][ T1549] usb 6-1: device descriptor read/8, error -71 [ 363.265061][ T1549] usb usb6-port1: unable to enumerate USB device [ 363.870830][T19908] overlayfs: statfs failed on './file0' [ 363.959866][ T1549] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 364.130948][ T1549] usb 6-1: Invalid ep0 maxpacket: 32 [ 364.152343][ T10] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 364.163114][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 364.269896][ T1549] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 364.291263][ T10] usb 1-1: device descriptor read/64, error -71 [ 364.323343][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 364.329551][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 364.337795][ T9] usb 3-1: config 0 has no interface number 0 [ 364.343882][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 364.352103][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 364.361187][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.369272][ T9] usb 3-1: Product: syz [ 364.373428][ T9] usb 3-1: Manufacturer: syz [ 364.378035][ T9] usb 3-1: SerialNumber: syz [ 364.383119][ T9] usb 3-1: config 0 descriptor?? [ 364.388859][ T9] smsc75xx v1.0.0 [ 364.440937][ T1549] usb 6-1: Invalid ep0 maxpacket: 32 [ 364.446467][ T1549] usb usb6-port1: attempt power cycle [ 364.547882][ T10] usb 1-1: device descriptor read/64, error -71 [ 364.804416][ T10] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 364.825829][ T1549] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 364.847549][ T1549] usb 6-1: Invalid ep0 maxpacket: 32 [ 364.943397][ T10] usb 1-1: device descriptor read/64, error -71 [ 364.986178][ T1549] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 365.007891][ T1549] usb 6-1: Invalid ep0 maxpacket: 32 [ 365.013298][ T1549] usb usb6-port1: unable to enumerate USB device [ 365.031136][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 365.042003][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 365.199971][ T10] usb 1-1: device descriptor read/64, error -71 [ 365.317709][ T10] usb usb1-port1: attempt power cycle [ 365.681345][ T10] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 365.703414][ T10] usb 1-1: device descriptor read/8, error -71 [ 365.842402][ T10] usb 1-1: device descriptor read/8, error -71 [ 366.097991][ T10] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 366.120468][ T10] usb 1-1: device descriptor read/8, error -71 [ 366.259372][ T10] usb 1-1: device descriptor read/8, error -71 [ 366.376052][ T10] usb usb1-port1: unable to enumerate USB device [ 366.816534][T19980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.816570][T19980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 366.850722][T19985] usb usb8: usbfs: process 19985 (syz.5.6798) did not claim interface 0 before use [ 366.939635][T19990] 9pnet_fd: Insufficient options for proto=fd [ 366.946547][T19990] overlay: ./bus is not a directory [ 367.133381][ T36] audit: type=1400 audit(2000000118.310:1174): avc: denied { append } for pid=20003 comm="syz.0.6802" name="pfkey" dev="proc" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 367.134399][T20004] 9pnet_fd: Insufficient options for proto=fd [ 367.199866][T20009] netlink: 328 bytes leftover after parsing attributes in process `syz.0.6804'. [ 367.629824][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 367.732391][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 367.743433][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 367.758181][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.780178][ T9] usb 3-1: USB disconnect, device number 26 [ 368.413544][T20025] FAT-fs (rnullb0): bogus number of reserved sectors [ 368.422274][T20025] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 368.539123][T20036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 368.540436][T20036] rust_binder: Write failure EINVAL in pid:97 [ 368.562085][T20041] rust_binder: 20041: no such ref 0 [ 368.627161][ T36] audit: type=1400 audit(2000000119.713:1175): avc: denied { ioctl } for pid=20044 comm="syz.5.6816" path="socket:[71914]" dev="sockfs" ino=71914 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.792020][ T1549] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 368.920317][ T31] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 368.952375][ T1549] usb 1-1: Using ep0 maxpacket: 32 [ 368.958644][ T1549] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 368.970374][ T1549] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 368.979471][ T1549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.987473][ T1549] usb 1-1: Product: syz [ 368.991627][ T1549] usb 1-1: Manufacturer: syz [ 368.996318][ T1549] usb 1-1: SerialNumber: syz [ 369.001530][ T1549] usb 1-1: config 0 descriptor?? [ 369.007318][ T1549] usb 1-1: bad CDC descriptors [ 369.012341][ T1549] usb 1-1: unsupported MDLM descriptors [ 369.081775][ T31] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.092830][ T31] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 369.103474][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 369.110140][ T31] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 369.121677][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.126618][T20050] binder: Unknown parameter 'fscontext?}' [ 369.134283][ T31] usb 6-1: config 0 descriptor?? [ 369.141173][T20047] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 369.154180][T20052] netlink: 'syz.2.6819': attribute type 64 has an invalid length. [ 369.162096][T20052] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6819'. [ 369.171872][T20052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.171896][T20052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 369.277311][ T36] audit: type=1400 audit(2000000120.321:1176): avc: denied { view } for pid=20037 comm="syz.0.6814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 369.640745][ T31] uclogic 0003:28BD:0055.000A: interface is invalid, ignoring [ 369.858575][ T10] usb 6-1: USB disconnect, device number 52 [ 370.660251][T20070] rust_binder: 20070: no such ref 0 [ 370.673645][T20071] rust_binder: Write failure EINVAL in pid:111 [ 370.709319][ T36] audit: type=1400 audit(2000000121.658:1177): avc: denied { lock } for pid=20072 comm="syz.2.6826" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 370.764903][T20075] rust_binder: Write failure EINVAL in pid:116 [ 371.281885][T20082] can0: slcan on ptm0. [ 371.432672][T20094] tipc: Started in network mode [ 371.442291][T20094] tipc: Node identity 9e0c2b482ee, cluster identity 4711 [ 371.443602][T20084] can0 (unregistered): slcan off ptm0. [ 371.456648][T20094] tipc: Enabled bearer , priority 0 [ 371.479728][T20094] tipc: Disabling bearer [ 371.503025][T20104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 371.504396][ T36] audit: type=1400 audit(2000000122.397:1178): avc: denied { setopt } for pid=20103 comm="syz.2.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 371.535888][T20106] TCP: TCP_TX_DELAY enabled [ 371.905716][ T1549] usb 1-1: USB disconnect, device number 27 [ 372.458903][ T1549] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 372.490553][T20145] binder: Bad value for 'stats' [ 372.619336][ T1549] usb 6-1: Using ep0 maxpacket: 16 [ 372.625588][ T1549] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 372.635497][ T1549] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 372.646773][ T1549] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.655925][ T1549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.663952][ T1549] usb 6-1: Product: 㫎칏솚ﮡ䡤魧膡ႛ⛰磈᳠䞪뇳噻邃铲﹪迋倖뫔礛ൌ⺤項졚埙㳱㋌丬䲜燜處팑㑣 [ 372.677777][ T1549] usb 6-1: Manufacturer: ྜ䙚杷諶఩쎧♱⎒뀦礏꧆バ뎵Ⱌ訽ꈰ௺ȷ빂嬰␈蜄셽됒﯎쯁׫អ뼂ꟺ໚凯⼟視礔혲だȀ嚬эⶅ峗ꬽ㨽觴⛏שּׁꉓ直廉쨴ꥧ瀰啟䵈褳Ꮑ牕ꊣげ엕㮩趂㒌䕹彺␇䍡߀᧼톕ꇆ痾皰싪꿦탾ꪞ胼蟄ꄕ홯珒鸆ᖴᲺⵙ솥晐駜菂༤ᣡᮤ⼢펐로钾␣粥䢌㓋 [ 372.712303][ T1549] usb 6-1: SerialNumber: ꂂ≗훹ᤞ [ 372.768923][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 372.854449][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 372.930540][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.940742][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.949723][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.964265][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.973374][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.981437][ T10] usb 1-1: Product: syz [ 372.985641][ T10] usb 1-1: Manufacturer: syz [ 372.990242][ T10] usb 1-1: SerialNumber: syz [ 372.997266][ T10] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 373.003905][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 373.010722][ T10] cdc_ncm 1-1:1.0: bind() failure [ 373.036220][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 373.043030][ T31] usb 3-1: config 0 has an invalid interface number: 36 but max is 1 [ 373.051361][ T31] usb 3-1: config 0 has an invalid interface number: 129 but max is 1 [ 373.059683][ T31] usb 3-1: config 0 has no interface number 0 [ 373.065816][ T31] usb 3-1: config 0 has no interface number 1 [ 373.071960][ T31] usb 3-1: config 0 interface 129 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 373.082953][ T31] usb 3-1: config 0 interface 36 has no altsetting 0 [ 373.089654][ T31] usb 3-1: config 0 interface 129 has no altsetting 0 [ 373.098549][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 373.111764][ T31] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=cb.5d [ 373.120831][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.129143][ T31] usb 3-1: Product: syz [ 373.133381][ T1549] cdc_ncm 6-1:1.0: bind() failure [ 373.139021][ T1549] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 373.145853][ T1549] cdc_ncm 6-1:1.1: bind() failure [ 373.151939][ T31] usb 3-1: Manufacturer: syz [ 373.156612][ T31] usb 3-1: SerialNumber: syz [ 373.161530][ T1549] usb 6-1: USB disconnect, device number 53 [ 373.167707][ T31] usb 3-1: config 0 descriptor?? [ 373.217432][ T36] audit: type=1400 audit(2000000123.997:1179): avc: denied { write } for pid=20146 comm="syz.0.6843" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 373.270523][T20161] binder: Bad value for 'max' [ 373.389092][T20154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145 [ 373.508034][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 373.512462][T20163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 373.523439][ T64] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 373.934267][ T64] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 374.023591][ T31] asix 3-1:0.36 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 374.033951][ T31] asix 3-1:0.36: probe with driver asix failed with error -71 [ 374.043088][ T31] asix 3-1:0.129 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 374.055780][ T31] asix 3-1:0.129: probe with driver asix failed with error -71 [ 374.067001][ T31] usb 3-1: USB disconnect, device number 27 [ 374.083937][ T64] usb 6-1: device descriptor read/64, error -71 [ 374.185313][T20174] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.193360][T20174] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 374.201883][T20174] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.209881][T20174] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 374.218600][T20175] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.226597][T20175] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 374.235229][T20175] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.243184][T20175] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 374.311743][T20182] tipc: Enabled bearer , priority 0 [ 374.319417][T20182] tipc: Disabling bearer [ 374.351188][ T64] usb 6-1: device descriptor read/64, error -71 [ 374.397803][T17117] Bluetooth: hci0: Frame reassembly failed (-84) [ 374.607751][ T64] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 374.746713][ T64] usb 6-1: device descriptor read/64, error -71 [ 375.003274][ T64] usb 6-1: device descriptor read/64, error -71 [ 375.120982][ T64] usb usb6-port1: attempt power cycle [ 375.484348][ T64] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 375.506724][ T64] usb 6-1: device descriptor read/8, error -71 [ 375.645681][ T64] usb 6-1: device descriptor read/8, error -71 [ 375.763048][ T31] usb 1-1: USB disconnect, device number 28 [ 375.833932][T20194] fuse: Unknown parameter 'group_5i00000000000000000000' [ 375.901292][ T64] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 375.923737][ T64] usb 6-1: device descriptor read/8, error -71 [ 376.062712][ T64] usb 6-1: device descriptor read/8, error -71 [ 376.181405][ T64] usb usb6-port1: unable to enumerate USB device [ 376.542785][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 376.542787][T18920] Bluetooth: hci0: command 0x1003 tx timeout [ 376.835588][T20229] binder: Bad value for 'max' [ 376.920631][T20233] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 377.280368][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 377.442520][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 377.451820][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.460282][ T31] usb 1-1: config 0 descriptor?? [ 377.472801][ T64] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 377.633161][ T64] usb 6-1: device descriptor read/64, error -71 [ 377.692073][T20255] rust_binder: Error while translating object. [ 377.692107][T20255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 377.698434][T20255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 377.720944][ T36] audit: type=1326 audit(2000000128.216:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.2.6878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c9f8e929 code=0x0 [ 377.896387][ T31] apple 0003:05AC:027A.000C: item fetching failed at offset 1/5 [ 377.898290][T20259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.904264][ T64] usb 6-1: device descriptor read/64, error -71 [ 377.913341][T20259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.919094][ T31] apple 0003:05AC:027A.000C: parse failed [ 377.932616][ T31] apple 0003:05AC:027A.000C: probe with driver apple failed with error -22 [ 377.944352][ T31] usb 1-1: USB disconnect, device number 29 [ 378.019060][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 378.150835][T20274] rust_binder: Write failure EFAULT in pid:292 [ 378.189066][ T64] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 378.338802][ T64] usb 6-1: device descriptor read/64, error -71 [ 378.378958][T20279] FAT-fs (rnullb0): bogus number of reserved sectors [ 378.385782][T20279] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 378.426219][T20283] rust_binder: Write failure EINVAL in pid:301 [ 378.437882][ T36] audit: type=1400 audit(2000000128.889:1181): avc: denied { nosuid_transition } for pid=20284 comm="syz.0.6886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 378.465108][ T36] audit: type=1400 audit(2000000128.889:1182): avc: denied { transition } for pid=20284 comm="syz.0.6886" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 378.502908][ T36] audit: type=1400 audit(2000000128.889:1183): avc: denied { entrypoint } for pid=20284 comm="syz.0.6886" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=168 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 378.536392][T20289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:307 [ 378.541051][ T36] audit: type=1400 audit(2000000128.889:1184): avc: denied { noatsecure } for pid=20284 comm="syz.0.6886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 378.560315][T20291] binder: Bad value for 'defcontext' [ 378.578531][T20291] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 378.702299][ T64] usb 6-1: device descriptor read/64, error -71 [ 378.819927][ T64] usb usb6-port1: attempt power cycle [ 378.833352][T20303] syzkaller0: create flow: hash 2784980757 index 0 [ 378.885080][T20302] syzkaller0 (unregistered): delete flow: hash 2784980757 index 0 [ 379.045253][ T36] audit: type=1400 audit(2000000129.460:1185): avc: denied { mount } for pid=20313 comm="syz.0.6897" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 379.069815][T20314] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 379.083329][ T36] audit: type=1400 audit(2000000129.488:1186): avc: denied { unmount } for pid=18858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 379.183485][ T64] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 379.205736][ T64] usb 6-1: device descriptor read/8, error -71 [ 379.311560][T20323] rust_binder: Write failure EINVAL in pid:203 [ 379.344864][ T64] usb 6-1: device descriptor read/8, error -71 [ 379.610976][ T64] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 379.633442][ T64] usb 6-1: device descriptor read/8, error -71 [ 379.772346][ T64] usb 6-1: device descriptor read/8, error -71 [ 379.869533][T20325] SELinux: ebitmap: map size 3019833413 does not match my size 64 (high bit was 0) [ 379.879000][T20325] SELinux: failed to load policy [ 379.887653][T20325] x_tables: duplicate entry at hook 1 [ 379.893271][ T64] usb usb6-port1: unable to enumerate USB device [ 380.101289][T20331] rust_binder: Got transaction with invalid offset. [ 380.101328][T20331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.108051][T20331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 380.250786][T20345] rust_binder: Write failure EINVAL in pid:218 [ 380.260389][T20345] netlink: 'syz.2.6907': attribute type 12 has an invalid length. [ 380.306732][T20348] FAT-fs (rnullb0): bogus number of reserved sectors [ 380.313515][T20348] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 380.861746][ T1549] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 380.963667][T20374] rust_binder: Write failure EINVAL in pid:439 [ 381.033848][ T1549] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 381.049152][ T1549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.057957][ T1549] usb 6-1: config 0 descriptor?? [ 381.064838][ T10] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 381.226689][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.243178][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 381.255080][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 381.264886][ T36] audit: type=1400 audit(2000000131.527:1187): avc: denied { setattr } for pid=20381 comm="syz.2.6920" name="HCI" dev="sockfs" ino=75202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.266886][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 381.310734][ T1549] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 381.320852][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.321451][ T1549] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 381.332849][ T10] usb 1-1: config 0 descriptor?? [ 381.339272][ T1549] asix 6-1:0.0: probe with driver asix failed with error -71 [ 381.346595][T20372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.353108][ T1549] usb 6-1: USB disconnect, device number 62 [ 381.394584][T20389] fuse: Bad value for 'user_id' [ 381.399540][T20389] fuse: Bad value for 'user_id' [ 381.467093][T20392] rust_binder: Write failure EFAULT in pid:460 [ 381.549434][T20397] ./cgroup: Can't lookup blockdev [ 381.561995][T20399] ./cgroup: Can't lookup blockdev [ 381.629496][T20401] kvm: pic: non byte write [ 381.814920][ T10] logitech 0003:046D:C286.000D: unknown main item tag 0x6 [ 381.892496][T20408] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 381.909668][ T10] logitech 0003:046D:C286.000D: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 381.928550][T20408] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 381.941495][ T445] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 381.962870][ T10] logitech 0003:046D:C286.000D: no inputs found [ 382.135401][ T445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.157143][ T445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.177874][ T445] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 382.197059][ T445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.216953][ T445] usb 3-1: config 0 descriptor?? [ 382.520774][T20429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.571701][T20429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 382.615544][T20433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6936'. [ 382.677388][ T445] belkin 0003:1020:0006.000E: unknown main item tag 0x3 [ 382.693362][ T445] belkin 0003:1020:0006.000E: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 382.732580][ T1549] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 382.757258][T20446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6941'. [ 382.773899][T20451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.778670][T20451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 382.785116][T20451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 382.894011][ T1549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.914110][ T1549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.923918][ T1549] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 382.933016][ T1549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.944080][ T1549] usb 6-1: config 0 descriptor?? [ 383.033972][T20463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 383.034006][T20463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:481 [ 383.060042][T20465] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 383.165326][ T1549] belkin 0003:1020:0006.000F: unknown main item tag 0x3 [ 383.181726][ T1549] belkin 0003:1020:0006.000F: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 383.204478][ T1549] usb 6-1: USB disconnect, device number 63 [ 384.024262][ T445] usb 1-1: USB disconnect, device number 31 [ 384.051593][ T36] audit: type=1326 audit(2000000134.137:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20486 comm="syz.0.6952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1bb18e929 code=0x0 [ 384.485843][ T352] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 384.648470][ T352] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 384.657595][ T352] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 384.665686][ T352] usb 6-1: Product: syz [ 384.669892][ T352] usb 6-1: Manufacturer: syz [ 384.674489][ T352] usb 6-1: SerialNumber: syz [ 384.679813][ T352] usb 6-1: config 0 descriptor?? [ 384.894357][ T1549] usb 3-1: USB disconnect, device number 28 [ 385.230426][T20510] /dev/rnullb0: Can't open blockdev [ 385.335450][ T352] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.346159][ T352] asix 6-1:0.0: probe with driver asix failed with error -71 [ 385.356194][ T352] usb 6-1: USB disconnect, device number 64 [ 385.427992][ T36] audit: type=1400 audit(2000000135.428:1189): avc: denied { remount } for pid=20523 comm="syz.0.6966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 385.653210][T20533] overlayfs: failed to resolve './file1': -2 [ 385.659806][T20533] rust_binder: Error while translating object. [ 385.659826][T20533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 385.666124][T20533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:375 [ 385.683836][ T352] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 385.855241][ T352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.866232][ T352] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.875263][ T352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.883969][ T352] usb 6-1: config 0 descriptor?? [ 386.025323][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 386.164318][ T10] usb 1-1: device descriptor read/64, error -71 [ 386.320946][ T352] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 386.330479][ T352] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input21 [ 386.407843][ T352] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 386.422086][ T10] usb 1-1: device descriptor read/64, error -71 [ 386.720253][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 386.749025][ T36] audit: type=1400 audit(2000000136.662:1190): avc: granted { setsecparam } for pid=20548 comm="syz.2.6975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 386.869859][ T10] usb 1-1: device descriptor read/64, error -71 [ 386.929333][ T352] usb 6-1: USB disconnect, device number 65 [ 386.972649][T20555] tipc: Enabled bearer , priority 0 [ 386.980282][T20554] tipc: Disabling bearer [ 387.126427][ T10] usb 1-1: device descriptor read/64, error -71 [ 387.244105][ T10] usb usb1-port1: attempt power cycle [ 387.276101][ T64] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 387.436431][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 387.449830][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.463017][ T64] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 387.470696][ T64] usb 3-1: can't read configurations, error -71 [ 387.493963][T20567] rust_binder: 20567: no such ref 3 [ 387.499378][T20567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498 [ 387.530462][T20574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.618209][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 387.640713][ T10] usb 1-1: device descriptor read/8, error -71 [ 387.779688][ T10] usb 1-1: device descriptor read/8, error -71 [ 387.831994][ T64] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 387.993472][ T64] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.004514][ T64] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 388.015153][ T64] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 388.025929][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.032531][ T64] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 388.041585][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.045815][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 388.050351][ T64] usb 3-1: config 0 descriptor?? [ 388.062455][T20564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.069625][T20564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.079249][ T10] usb 1-1: device descriptor read/8, error -71 [ 388.112974][T20581] fuse: Bad value for 'rootmode' [ 388.189231][T20588] tipc: Enabling of bearer rejected, failed to enable media [ 388.207510][ T36] audit: type=1400 audit(2000000138.028:1191): avc: denied { read append } for pid=20589 comm="syz.5.6989" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.243128][ T10] usb 1-1: device descriptor read/8, error -71 [ 388.268154][T20593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.268178][T20593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524 [ 388.355834][T20605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:536 [ 388.366770][ T10] usb usb1-port1: unable to enumerate USB device [ 388.379950][T20607] rust_binder: Error while translating object. [ 388.382268][T20607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 388.388658][T20607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:538 [ 388.429795][T20611] overlayfs: conflicting options: metacopy=off,verity=on [ 388.471271][ T36] audit: type=1400 audit(2000000138.271:1192): avc: denied { mounton } for pid=20616 comm="syz.5.6998" path="/181/file0" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 388.507363][ T64] hid-generic 0003:1B1C:1C0D.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 388.556758][T20629] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 388.556787][T20629] rust_binder: Error while translating object. [ 388.569152][T20629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.575558][T20629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 388.722922][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6981'. [ 388.745868][ T36] audit: type=1400 audit(2000000138.533:1193): avc: denied { create } for pid=20638 comm="syz.5.7005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.912855][ T10] usb 3-1: USB disconnect, device number 30 [ 388.924314][T20651] binder: Unknown parameter '\ʼnk-6' [ 389.104214][ T9] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 389.265731][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 389.273957][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.284162][ T9] usb 6-1: config 0 has no interface number 0 [ 389.291724][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 389.300818][ T9] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 389.309040][ T9] usb 6-1: Product: syz [ 389.313194][ T9] usb 6-1: Manufacturer: syz [ 389.317778][ T9] usb 6-1: SerialNumber: syz [ 389.322917][ T9] usb 6-1: config 0 descriptor?? [ 389.330299][ T64] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.489056][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 389.495373][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.506479][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.516472][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.526412][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.542717][ T64] usb 1-1: config 0 descriptor?? [ 389.544480][T20663] binder: Unknown parameter 'uid>00000000000000049663' [ 389.548653][ T64] hub 1-1:0.0: USB hub found [ 389.560686][ T9] usb 6-1: USB disconnect, device number 66 [ 389.762256][ T64] hub 1-1:0.0: 1 port detected [ 390.225006][T20670] rust_binder: Write failure EINVAL in pid:582 [ 390.364195][ T36] audit: type=1400 audit(2000000140.039:1194): avc: denied { setattr } for pid=20677 comm="syz.2.7016" name="[userfaultfd]" dev="anon_inodefs" ino=77872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.405211][T17117] bridge_slave_1: left allmulticast mode [ 390.410937][T17117] bridge_slave_1: left promiscuous mode [ 390.416570][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.425050][T17117] bridge_slave_0: left allmulticast mode [ 390.426999][ T36] audit: type=1400 audit(2000000140.095:1195): avc: denied { map } for pid=20680 comm="syz.2.7017" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.433335][T17932] udevd[17932]: symlink '../../loop8' '/dev/disk/by-diskseq/64.tmp-b7:8' failed: Read-only file system [ 390.460563][ T36] audit: type=1400 audit(2000000140.133:1196): avc: denied { execute } for pid=20680 comm="syz.2.7017" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.465846][T17117] bridge_slave_0: left promiscuous mode [ 390.489855][ T1549] hub 1-1:0.0: activate --> -90 [ 390.497287][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 390.503137][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.516774][T20683] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 98) [ 390.516799][T20683] rust_binder: Error while translating object. [ 390.517793][T17932] udevd[17932]: symlink '../../loop8' '/dev/disk/by-diskseq/64.tmp-b7:8' failed: Read-only file system [ 390.527594][T20683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 390.545076][T20683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 390.557615][T17932] udevd[17932]: symlink '../../loop8' '/dev/disk/by-diskseq/64.tmp-b7:8' failed: Read-only file system [ 390.639229][T20693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.673094][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.688286][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.707854][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 390.714239][T17117] veth1_macvtap: left promiscuous mode [ 390.720072][T17117] veth0_vlan: left promiscuous mode [ 390.725617][ T9] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 959 [ 390.736040][ T9] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 16 [ 390.746125][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 390.754554][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 390.763918][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.774425][ T9] usb 6-1: Product: 䋛宺㲤᳥⻧䊬웇昫捞ﯸ轡㫶팱뤕Ԏ瘪뀏䇹꽴ෞ劗੾䍨㢖眱㴢뻋煣ﻺ䳭鬫ཤ㺡腨톟郘唌ﱖ归폢䮿隘ꁞ퓙ඍ㤶굈蝸娑騘噪뜋庅겏ྯ殕㩘럄پ븞雚ﮈⲚ뉴컩鏅ㄌ圾놦旐´䒙䁂挨ﻇ쮞梀ᢈ댑윂죀쑒셟뵝鱢ႉ䒦ퟢ녀祉歒專鋰庮⦫霁ꘫ㋐筊穌䟗㥳땏衑漥땊ﶳ緙閯 [ 390.833360][ T9] usb 6-1: Manufacturer: ⌘ᣲ冈ꜚ͔ᆃ倆戦箬픆乼ᇂ绦㟹ځ⿈᝛竅腃䑥ꁰ釉㠞䕸≴鍳燃ᣠ酻쾺﴿飭沏妞䤜ݵộ睳➖냴䵙元묷郣ᛢ⟃ᩕ⋒ [ 390.865446][ T9] usb 6-1: SerialNumber: syz [ 390.878896][ T352] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 390.887434][T20673] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 390.898030][T20673] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 390.935331][ T1549] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 390.942195][ T1549] usb 1-1-port1: connect-debounce failed [ 390.948336][ T64] usb 1-1: Failed to suspend device, error -71 [ 390.949020][T20659] usb 1-1: USB disconnect, device number 36 [ 391.049868][ T352] usb 3-1: Using ep0 maxpacket: 16 [ 391.056412][ T352] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.067475][ T352] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.077334][ T352] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 391.090347][ T352] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.097137][ T352] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 391.106272][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.114885][ T352] usb 3-1: config 0 descriptor?? [ 391.338671][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 391.351199][ T9] usb 6-1: USB disconnect, device number 67 [ 391.358101][ T9] usblp0: removed [ 391.577495][ T352] hid (null): invalid report_size 50650 [ 391.583112][ T352] hid (null): nested delimiters [ 391.588138][ T352] hid (null): unknown global tag 0xc [ 391.593429][ T352] hid (null): unknown global tag 0x40 [ 391.600181][ T352] hid (null): global environment stack underflow [ 391.744814][ T445] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 391.809541][ T352] usb 3-1: USB disconnect, device number 31 [ 391.907343][ T445] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.915382][ T445] usb 1-1: not running at top speed; connect to a high speed hub [ 391.924000][ T445] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 391.932224][ T445] usb 1-1: config 1 has no interface number 0 [ 391.938337][ T445] usb 1-1: config 1 interface 121 has no altsetting 0 [ 391.946420][ T445] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 391.955487][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.963505][ T445] usb 1-1: Product: syz [ 391.967734][ T445] usb 1-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 391.985545][ T445] usb 1-1: SerialNumber: syz [ 392.397658][T20714] binder: Bad value for 'max' [ 392.647488][ T36] audit: type=1400 audit(2000000142.181:1197): avc: denied { getopt } for pid=20726 comm="syz.2.7032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 392.678781][T20732] exFAT-fs (rnullb0): invalid boot record signature [ 392.685410][T20732] exFAT-fs (rnullb0): failed to read boot sector [ 392.691928][T20732] exFAT-fs (rnullb0): failed to recognize exfat type [ 392.733864][T20739] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 392.742726][T20739] rust_binder: Write failure EINVAL in pid:602 [ 392.815370][ T36] audit: type=1400 audit(2000000142.340:1198): avc: denied { link } for pid=20745 comm="syz.5.7040" name="#3f" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 392.861763][T20750] binder: Unknown parameter 'fscontext?}' [ 392.918003][T20754] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 393.191660][T20760] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 393.209640][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 393.369741][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 393.431782][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.439544][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 393.447852][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 393.455451][ T9] usb 3-1: can't read configurations, error -71 [ 394.029465][T18055] udevd[18055]: symlink '../../loop8' '/dev/disk/by-diskseq/66.tmp-b7:8' failed: Read-only file system [ 394.043603][T18055] udevd[18055]: symlink '../../loop8' '/dev/disk/by-diskseq/66.tmp-b7:8' failed: Read-only file system [ 394.061173][T18055] udevd[18055]: symlink '../../loop8' '/dev/disk/by-diskseq/66.tmp-b7:8' failed: Read-only file system [ 394.076296][T18055] udevd[18055]: symlink '../../loop8' '/dev/disk/by-diskseq/66.tmp-b7:8' failed: Read-only file system [ 394.089930][T18055] udevd[18055]: symlink '../../loop8' '/dev/disk/by-diskseq/66.tmp-b7:8' failed: Read-only file system [ 394.123606][T20789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7055'. [ 394.175025][T20799] overlayfs: failed to resolve './file1': -2 [ 394.259416][T20805] FAT-fs (rnullb0): bogus number of reserved sectors [ 394.270025][T20805] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 394.279509][T20797] netlink: 'syz.5.7057': attribute type 12 has an invalid length. [ 394.301781][ T36] audit: type=1326 audit(2000000143.725:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20812 comm="syz.2.7062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c9f8e929 code=0x0 [ 394.442026][T20825] syzkaller0: create flow: hash 2784980757 index 0 [ 394.460284][T20659] syzkaller0: tun_net_xmit 76 [ 394.471075][T20828] virtio-fs: tag not found [ 394.477216][T20828] rust_binder: Write failure EFAULT in pid:650 [ 394.478015][T20829] virtio-fs: tag not found [ 394.547296][T20825] syzkaller0 (unregistered): delete flow: hash 2784980757 index 0 [ 394.595278][T20845] overlayfs: conflicting options: userxattr,verity=require [ 394.659061][T20848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 394.659115][T20848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:539 [ 394.668823][T20848] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 394.678201][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 394.693924][T20848] rust_binder: Read failure Err(EFAULT) in pid:539 [ 394.742287][ T445] usb_ehset_test 1-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 394.766752][ T445] usb 1-1: USB disconnect, device number 37 [ 394.855919][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 394.863587][ T36] audit: type=1400 audit(2000000144.248:1200): avc: denied { getattr } for pid=20850 comm="syz.4.7073" path="cgroup:[4026532412]" dev="nsfs" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.863636][T20851] overlayfs: statfs failed on './file0' [ 394.904457][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 394.911883][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 394.921219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.935333][T20870] syz.5.7080: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 394.943319][ T9] usb 3-1: config 0 descriptor?? [ 394.956466][T20870] CPU: 1 UID: 0 PID: 20870 Comm: syz.5.7080 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 394.956501][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.956517][T20870] Call Trace: [ 394.956524][T20870] [ 394.956533][T20870] __dump_stack+0x21/0x30 [ 394.956581][T20870] dump_stack_lvl+0x10c/0x190 [ 394.956613][T20870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 394.956638][T20870] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 394.956661][T20870] dump_stack+0x19/0x20 [ 394.956684][T20870] warn_alloc+0x1bc/0x2a0 [ 394.956706][T20870] ? stack_depot_save_flags+0x38/0x800 [ 394.956732][T20870] ? __cfi_warn_alloc+0x10/0x10 [ 394.956752][T20870] ? kasan_save_track+0x4f/0x80 [ 394.956778][T20870] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 394.956803][T20870] ? xskq_create+0x68/0x2a0 [ 394.956824][T20870] ? xsk_init_queue+0xb6/0x120 [ 394.956843][T20870] ? xsk_setsockopt+0x43f/0x6f0 [ 394.956862][T20870] ? do_sock_setsockopt+0x26d/0x400 [ 394.956883][T20870] ? __x64_sys_setsockopt+0x1b8/0x250 [ 394.956901][T20870] ? x64_sys_call+0x2adc/0x2ee0 [ 394.956927][T20870] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 394.956949][T20870] __vmalloc_node_range_noprof+0x135/0x1420 [ 394.956977][T20870] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 394.956999][T20870] ? avc_has_perm+0x144/0x220 [ 394.957018][T20870] ? kasan_save_alloc_info+0x40/0x50 [ 394.957041][T20870] ? __kasan_kmalloc+0x96/0xb0 [ 394.957067][T20870] vmalloc_user_noprof+0x77/0x90 [ 394.957087][T20870] ? xskq_create+0xdb/0x2a0 [ 394.957109][T20870] xskq_create+0xdb/0x2a0 [ 394.957130][T20870] xsk_init_queue+0xb6/0x120 [ 394.957151][T20870] xsk_setsockopt+0x43f/0x6f0 [ 394.957172][T20870] ? __cfi_xsk_setsockopt+0x10/0x10 [ 394.957191][T20870] ? do_futex+0x309/0x500 [ 394.957219][T20870] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 394.957240][T20870] ? security_socket_setsockopt+0x33/0xd0 [ 394.957266][T20870] ? __cfi_xsk_setsockopt+0x10/0x10 [ 394.957287][T20870] do_sock_setsockopt+0x26d/0x400 [ 394.957308][T20870] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 394.957330][T20870] __x64_sys_setsockopt+0x1b8/0x250 [ 394.957353][T20870] x64_sys_call+0x2adc/0x2ee0 [ 394.957379][T20870] do_syscall_64+0x58/0xf0 [ 394.957397][T20870] ? clear_bhb_loop+0x50/0xa0 [ 394.957420][T20870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 394.957441][T20870] RIP: 0033:0x7f256878e929 [ 394.957468][T20870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.957487][T20870] RSP: 002b:00007f25696ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 394.957510][T20870] RAX: ffffffffffffffda RBX: 00007f25689b5fa0 RCX: 00007f256878e929 [ 394.957527][T20870] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 394.957541][T20870] RBP: 00007f2568810b39 R08: 0000000000000004 R09: 0000000000000000 [ 394.957554][T20870] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 394.957566][T20870] R13: 0000000000000000 R14: 00007f25689b5fa0 R15: 00007ffe93f58038 [ 394.957582][T20870] [ 394.957592][T20870] Mem-Info: [ 395.022529][T20872] FAT-fs (rnullb0): bogus number of reserved sectors [ 395.026631][T20870] active_anon:7002 inactive_anon:45 isolated_anon:0 [ 395.026631][T20870] active_file:13597 inactive_file:15802 isolated_file:0 [ 395.026631][T20870] unevictable:0 dirty:77 writeback:0 [ 395.026631][T20870] slab_reclaimable:6532 slab_unreclaimable:75121 [ 395.026631][T20870] mapped:24753 shmem:164 pagetables:1106 [ 395.026631][T20870] sec_pagetables:0 bounce:0 [ 395.026631][T20870] kernel_misc_reclaimable:0 [ 395.026631][T20870] free:1512172 free_pcp:1842 free_cma:0 [ 395.032904][T20872] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 395.037102][T20870] Node 0 active_anon:28008kB inactive_anon:180kB active_file:54388kB inactive_file:63208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99012kB dirty:308kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6936kB pagetables:4424kB sec_pagetables:0kB all_unreclaimable? no [ 395.315631][ T445] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 395.321562][T20870] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5720kB free_cma:0kB [ 395.390427][T20870] lowmem_reserve[]: 0 3921 3921 [ 395.395308][T20870] Normal free:3089572kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28076kB inactive_anon:180kB active_file:54388kB inactive_file:63208kB unevictable:0kB writepending:308kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:888kB local_pcp:312kB free_cma:0kB [ 395.401069][ T9] ryos 0003:1E7D:31CE.0013: item fetching failed at offset 6/7 [ 395.426988][T20870] lowmem_reserve[]: 0 0 0 [ 395.434405][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 395.438683][T20870] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 395.448471][ T9] ryos 0003:1E7D:31CE.0013: parse failed [ 395.461853][T20878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.468792][ T9] ryos 0003:1E7D:31CE.0013: probe with driver ryos failed with error -22 [ 395.472882][T20878] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 232, limit: 1152, size: 4094) [ 395.481061][T20870] Normal: [ 395.483989][T20878] rust_binder: Error while translating object. [ 395.494386][T20870] 159*4kB (UE) 1277*8kB [ 395.497782][T20878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 395.504936][T20870] (UME) [ 395.508043][T20878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 395.520156][ T445] usb 6-1: device descriptor read/64, error -71 [ 395.525240][T20878] rust_binder: Got transaction with invalid offset. [ 395.535571][T20870] 2537*16kB (UME) 1831*32kB (UME) 1913*64kB (UME) 705*128kB (UME) 356*256kB (UME) 135*512kB (UME) 53*1024kB (ME) 12*2048kB (UME) 616*4096kB (UM) = 3084948kB [ 395.542529][T20878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 395.558050][T20870] 29609 total pagecache pages [ 395.558067][T20870] 50 pages in swap cache [ 395.567786][T20878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 395.572133][T20870] Free swap = 124424kB [ 395.591047][T20870] Total swap = 124996kB [ 395.595285][T20870] 2097051 pages RAM [ 395.599092][T20870] 0 pages HighMem/MovableOnly [ 395.603835][T20870] 351521 pages reserved [ 395.608070][T20870] 0 pages cma reserved [ 395.614473][T20870] Memory allocations: [ 395.614768][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 395.618860][T20870] 0 B 0 init/main.c:1370 func:do_initcalls [ 395.624653][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 395.631147][T20870] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 395.645807][ T10] usb 1-1: config 0 has no interface number 0 [ 395.648684][T20870] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 395.653184][ T36] audit: type=1400 audit(2000000144.987:1201): avc: denied { ioctl } for pid=20877 comm="syz.4.7081" path="socket:[79439]" dev="sockfs" ino=79439 ioctlcmd=0xae89 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.661169][T20870] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 395.693399][T20870] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 395.695208][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 395.702377][T20870] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 395.702400][T20870] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 395.713158][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.722509][T20870] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 395.730085][ T10] usb 1-1: Product: syz [ 395.744278][T20870] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 395.748274][ T10] usb 1-1: Manufacturer: syz [ 395.756327][T20870] 0 B 0 init/initramfs.c:101 func:find_link [ 395.760589][ T10] usb 1-1: SerialNumber: syz [ 395.773226][ T10] usb 1-1: config 0 descriptor?? [ 395.779410][ T10] smsc95xx v2.0.0 [ 395.807046][T20881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.808993][T20881] rust_binder: Write failure EINVAL in pid:548 [ 395.882046][ T445] usb 6-1: device descriptor read/64, error -71 [ 396.149760][ T445] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 396.207313][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 396.218049][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 396.288293][ T445] usb 6-1: device descriptor read/64, error -71 [ 396.544881][ T445] usb 6-1: device descriptor read/64, error -71 [ 396.662578][ T445] usb usb6-port1: attempt power cycle [ 397.025927][ T445] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 397.048341][ T445] usb 6-1: device descriptor read/8, error -71 [ 397.087162][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 397.098245][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 397.109018][ T10] usb 1-1: USB disconnect, device number 38 [ 397.187323][ T445] usb 6-1: device descriptor read/8, error -71 [ 397.442885][ T445] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 397.465282][ T445] usb 6-1: device descriptor read/8, error -71 [ 397.508067][ T352] usb 3-1: USB disconnect, device number 34 [ 398.022813][ T445] usb 6-1: device descriptor read/8, error -71 [ 398.109892][ T36] audit: type=1404 audit(2000000147.288:1202): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 398.127956][ T36] audit: type=1400 audit(2000000147.307:1203): avc: denied { read } for pid=20916 comm="syz.2.7096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=0 [ 398.138162][T18091] udevd[18091]: Unable to fix SELinux security context of /dev/char/10:232: Read-only file system [ 398.150398][ T36] audit: type=1400 audit(2000000147.307:1204): avc: denied { ioctl } for pid=20916 comm="syz.2.7096" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 398.183903][ T36] audit: type=1400 audit(2000000147.307:1205): avc: denied { ioctl } for pid=20904 comm="syz.0.7093" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 398.185885][ T445] usb usb6-port1: unable to enumerate USB device [ 398.219092][ T36] audit: type=1400 audit(2000000147.316:1206): avc: denied { write } for pid=20916 comm="syz.2.7096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 398.239469][ T36] audit: type=1400 audit(2000000147.316:1207): avc: denied { name_bind } for pid=20916 comm="syz.2.7096" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 398.258128][T20923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 398.261575][ T36] audit: type=1400 audit(2000000147.382:1208): avc: denied { read write } for pid=18039 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 398.271162][T20923] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 398.293506][ T36] audit: type=1400 audit(2000000147.391:1209): avc: denied { read } for pid=20918 comm="syz.5.7097" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 408.624332][ T36] kauditd_printk_skb: 207 callbacks suppressed [ 408.624351][ T36] audit: type=1400 audit(2000000157.119:1416): avc: denied { read } for pid=20977 comm="syz.0.7117" dev="nsfs" ino=4026532400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 408.669825][ T36] audit: type=1400 audit(2000000157.129:1417): avc: denied { read write } for pid=20980 comm="syz.5.7120" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 408.694758][ T36] audit: type=1400 audit(2000000157.129:1418): avc: denied { mounton } for pid=20978 comm="syz.4.7118" path="/199" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 408.717983][T20990] binfmt_misc: register: failed to install interpreter file ./file0 [ 408.722393][ T36] audit: type=1400 audit(2000000157.129:1419): avc: denied { create } for pid=20980 comm="syz.5.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 408.745932][ T36] audit: type=1400 audit(2000000157.129:1420): avc: denied { read write } for pid=20980 comm="syz.5.7120" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 408.770380][ T36] audit: type=1400 audit(2000000157.129:1421): avc: denied { read } for pid=20980 comm="syz.5.7120" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 408.779554][T18858] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.793574][ T36] audit: type=1400 audit(2000000157.129:1422): avc: denied { create } for pid=20980 comm="syz.5.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 408.799989][T18858] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 408.819795][ T36] audit: type=1400 audit(2000000157.129:1423): avc: denied { read write } for pid=20980 comm="syz.5.7120" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 408.939100][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7130'. [ 409.968198][T21054] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7145'. [ 409.977583][T21053] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7145'. [ 411.074599][T21133] netlink: 'syz.5.7174': attribute type 16 has an invalid length. [ 412.753374][T21280] netlink: 'syz.4.7226': attribute type 4 has an invalid length. [ 412.856295][T21297] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 413.588131][T21390] netlink: 'syz.5.7265': attribute type 13 has an invalid length. [ 413.632356][T21394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7267'. [ 413.698471][T21403] netlink: 'syz.5.7271': attribute type 3 has an invalid length. [ 413.706265][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7271'. [ 414.079352][ T36] kauditd_printk_skb: 1081 callbacks suppressed [ 414.079371][ T36] audit: type=1400 audit(2000000162.227:2480): avc: denied { read write } for pid=16417 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.110190][ T36] audit: type=1400 audit(2000000162.227:2481): avc: denied { read } for pid=21413 comm="syz.4.7275" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.133357][ T36] audit: type=1400 audit(2000000162.227:2482): avc: denied { mount } for pid=21413 comm="syz.4.7275" name="/" dev="configfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 414.156136][ T36] audit: type=1400 audit(2000000162.227:2483): avc: denied { read write } for pid=21413 comm="syz.4.7275" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.180481][ T36] audit: type=1400 audit(2000000162.227:2484): avc: denied { read write } for pid=16417 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.204922][ T36] audit: type=1400 audit(2000000162.255:2485): avc: denied { read write } for pid=18858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.229200][ T36] audit: type=1400 audit(2000000162.264:2486): avc: denied { read write } for pid=18858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.254485][ T36] audit: type=1400 audit(2000000162.283:2487): avc: denied { read } for pid=21422 comm="syz.0.7278" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.277723][ T36] audit: type=1400 audit(2000000162.283:2488): avc: denied { sys_module } for pid=21422 comm="syz.0.7278" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 414.300560][ T36] audit: type=1400 audit(2000000162.283:2489): avc: denied { read } for pid=21422 comm="syz.0.7278" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.430567][T21475] can0: slcan on ptm0. [ 414.486527][T21474] can0 (unregistered): slcan off ptm0. [ 417.714621][T21698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=109 sclass=netlink_audit_socket pid=21698 comm=syz.2.7376 [ 418.729494][T21845] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.740879][T21845] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.749354][T21845] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.770658][T21846] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.780052][T21846] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.794053][T21845] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 418.806471][T21850] netlink: 396 bytes leftover after parsing attributes in process `syz.0.7429'. [ 419.240538][T21908] can0: slcan on ptm0. [ 419.305488][T21907] can0 (unregistered): slcan off ptm0. [ 419.433465][ T36] kauditd_printk_skb: 44726 callbacks suppressed [ 419.433488][ T36] audit: type=1400 audit(2000000167.231:46532): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 419.440321][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.461303][ T36] audit: type=1400 audit(2000000167.240:46533): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 419.467631][ T148] audit: audit_lost=239 audit_rate_limit=0 audit_backlog_limit=64 [ 419.489137][ T36] audit: type=1400 audit(2000000167.240:46534): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 419.496483][ T148] audit: backlog limit exceeded [ 419.517815][ T36] audit: type=1400 audit(2000000167.240:46535): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 419.522790][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.543622][ T36] audit: type=1400 audit(2000000167.240:46536): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 419.550006][ T148] audit: audit_lost=240 audit_rate_limit=0 audit_backlog_limit=64 [ 419.750848][T21931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21931 comm=syz.4.7459 [ 419.804091][T21938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7461'. [ 419.819954][T21938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7461'. [ 419.950166][T21955] can0: slcan on ptm0. [ 420.001501][T21955] can0 (unregistered): slcan off ptm0. [ 424.450970][T22294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22294 comm=syz.4.7582 [ 424.789519][ T36] kauditd_printk_skb: 49090 callbacks suppressed [ 424.789537][ T36] audit: type=1400 audit(2000000172.245:94678): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 424.796160][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.796179][ T148] audit: audit_lost=557 audit_rate_limit=0 audit_backlog_limit=64 [ 424.796193][ T148] audit: backlog limit exceeded [ 424.836649][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.843216][ T148] audit: audit_lost=558 audit_rate_limit=0 audit_backlog_limit=64 [ 424.846998][ T36] audit: type=1400 audit(2000000172.245:94679): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 424.851180][ T148] audit: backlog limit exceeded [ 424.877252][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.883785][ T148] audit: audit_lost=559 audit_rate_limit=0 audit_backlog_limit=64 [ 425.179294][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.199225][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 425.231332][T22334] FAULT_INJECTION: forcing a failure. [ 425.231332][T22334] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 425.272467][T22334] CPU: 1 UID: 0 PID: 22334 Comm: syz.5.7597 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 425.272501][T22334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.272513][T22334] Call Trace: [ 425.272520][T22334] [ 425.272528][T22334] __dump_stack+0x21/0x30 [ 425.272557][T22334] dump_stack_lvl+0x10c/0x190 [ 425.272580][T22334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 425.272604][T22334] dump_stack+0x19/0x20 [ 425.272625][T22334] should_fail_ex+0x3d9/0x530 [ 425.272648][T22334] should_fail+0xf/0x20 [ 425.272669][T22334] should_fail_usercopy+0x1e/0x30 [ 425.272692][T22334] _copy_to_user+0x24/0xa0 [ 425.272720][T22334] simple_read_from_buffer+0xed/0x160 [ 425.272741][T22334] proc_fail_nth_read+0x19e/0x210 [ 425.272762][T22334] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 425.272782][T22334] ? bpf_lsm_file_permission+0xd/0x20 [ 425.272805][T22334] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 425.272824][T22334] vfs_read+0x278/0xb60 [ 425.272849][T22334] ? __cfi_vfs_read+0x10/0x10 [ 425.272871][T22334] ? __kasan_check_write+0x18/0x20 [ 425.272894][T22334] ? mutex_lock+0x92/0x1c0 [ 425.272916][T22334] ? __cfi_mutex_lock+0x10/0x10 [ 425.272938][T22334] ? __fget_files+0x2c5/0x340 [ 425.272966][T22334] ksys_read+0x141/0x250 [ 425.272990][T22334] ? __cfi_ksys_read+0x10/0x10 [ 425.273014][T22334] ? __kasan_check_read+0x15/0x20 [ 425.273037][T22334] __x64_sys_read+0x7f/0x90 [ 425.273061][T22334] x64_sys_call+0x2638/0x2ee0 [ 425.273086][T22334] do_syscall_64+0x58/0xf0 [ 425.273104][T22334] ? clear_bhb_loop+0x50/0xa0 [ 425.273127][T22334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 425.273148][T22334] RIP: 0033:0x7f256878d33c [ 425.273164][T22334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 425.273180][T22334] RSP: 002b:00007f25696ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.273202][T22334] RAX: ffffffffffffffda RBX: 00007f25689b5fa0 RCX: 00007f256878d33c [ 425.273224][T22334] RDX: 000000000000000f RSI: 00007f25696ad0a0 RDI: 0000000000000004 [ 425.273237][T22334] RBP: 00007f25696ad090 R08: 0000000000000000 R09: 0000000000000000 [ 425.273251][T22334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.273263][T22334] R13: 0000000000000000 R14: 00007f25689b5fa0 R15: 00007ffe93f58038 [ 425.273279][T22334] [ 425.343754][T22351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=22351 comm=syz.0.7605 [ 427.355188][T18920] Bluetooth: hci0: command 0x1003 tx timeout [ 427.361234][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 429.155394][T22516] netlink: 'syz.0.7663': attribute type 4 has an invalid length. [ 430.145541][ T36] kauditd_printk_skb: 40969 callbacks suppressed [ 430.145558][ T36] audit: type=1400 audit(2000000177.259:128850): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.153030][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.173343][ T36] audit: type=1400 audit(2000000177.259:128851): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.179757][ T148] audit: audit_lost=2826 audit_rate_limit=0 audit_backlog_limit=64 [ 430.201061][ T36] audit: type=1400 audit(2000000177.259:128852): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.208673][ T148] audit: backlog limit exceeded [ 430.229889][ T36] audit: type=1400 audit(2000000177.259:128853): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.235031][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.256140][ T36] audit: type=1400 audit(2000000177.259:128854): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.262268][ T148] audit: audit_lost=2827 audit_rate_limit=0 audit_backlog_limit=64 [ 434.006312][T22895] netlink: 'syz.2.7790': attribute type 12 has an invalid length. [ 434.803257][T22967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=22967 comm=syz.2.7815 [ 435.502118][ T36] kauditd_printk_skb: 44766 callbacks suppressed [ 435.502137][ T36] audit: type=1400 audit(2000000001.505:173170): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.508156][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.508611][ T36] audit: type=1400 audit(2000000001.505:173171): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.529876][ T148] audit: audit_lost=2978 audit_rate_limit=0 audit_backlog_limit=64 [ 435.536602][ T36] audit: type=1400 audit(2000000001.505:173172): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.557583][ T148] audit: backlog limit exceeded [ 435.566042][ T36] audit: type=1400 audit(2000000001.505:173173): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.587343][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.591771][ T36] audit: type=1400 audit(2000000001.505:173174): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 435.620233][ T148] audit: audit_lost=2979 audit_rate_limit=0 audit_backlog_limit=64 [ 436.330837][T23060] pim6reg1: entered promiscuous mode [ 436.336266][T23060] pim6reg1: entered allmulticast mode [ 436.988882][T23107] x_tables: duplicate underflow at hook 1 [ 437.846851][T23175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7888'. [ 440.858287][ T36] kauditd_printk_skb: 41908 callbacks suppressed [ 440.858304][ T36] audit: type=1400 audit(2000000006.510:213672): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 440.869973][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.897064][T19599] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.903937][T19599] audit: audit_lost=3450 audit_rate_limit=0 audit_backlog_limit=64 [ 440.906567][T18039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.912828][T19599] audit: backlog limit exceeded [ 440.923546][ T148] audit: audit_lost=3451 audit_rate_limit=0 audit_backlog_limit=64 [ 440.932376][ T148] audit: backlog limit exceeded [ 440.934370][ T36] audit: type=1400 audit(2000000006.510:213673): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 440.942787][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.231246][T23578] netlink: 'syz.4.8062': attribute type 49 has an invalid length. [ 445.247134][T23578] netlink: 'syz.4.8062': attribute type 49 has an invalid length. [ 446.217526][ T36] kauditd_printk_skb: 32756 callbacks suppressed [ 446.217544][ T36] audit: type=1400 audit(2000000011.524:245277): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 446.225232][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.279508][T18858] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.286353][T18858] audit: audit_lost=3837 audit_rate_limit=0 audit_backlog_limit=64 [ 446.288245][ T148] audit: audit_lost=3838 audit_rate_limit=0 audit_backlog_limit=64 [ 446.298945][ T36] audit: type=1400 audit(2000000011.524:245278): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 446.320313][ T148] audit: backlog limit exceeded [ 446.331051][T18858] audit: backlog limit exceeded [ 446.339408][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.347531][T23605] audit: audit_backlog=65 > audit_backlog_limit=64 [ 451.569411][ T36] kauditd_printk_skb: 52982 callbacks suppressed [ 451.569429][ T36] audit: type=1400 audit(2000000016.519:297840): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.581496][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 451.597190][ T36] audit: type=1400 audit(2000000016.528:297841): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.603581][ T148] audit: audit_lost=3980 audit_rate_limit=0 audit_backlog_limit=64 [ 451.624675][ T36] audit: type=1400 audit(2000000016.528:297842): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.632730][ T148] audit: backlog limit exceeded [ 451.653821][ T36] audit: type=1400 audit(2000000016.528:297843): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.659061][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 451.679823][ T36] audit: type=1400 audit(2000000016.528:297844): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 451.686389][ T148] audit: audit_lost=3981 audit_rate_limit=0 audit_backlog_limit=64 [ 456.925470][ T36] kauditd_printk_skb: 51257 callbacks suppressed [ 456.925487][ T36] audit: type=1400 audit(2000000021.542:347235): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 456.931810][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 456.947480][ T36] audit: type=1400 audit(2000000021.542:347236): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 456.953303][ T148] audit: audit_lost=4604 audit_rate_limit=0 audit_backlog_limit=64 [ 456.978877][ T36] audit: type=1400 audit(2000000021.542:347237): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 456.981304][ T148] audit: backlog limit exceeded [ 457.003591][ T36] audit: type=1400 audit(2000000021.542:347238): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 457.010218][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.025471][T16417] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.036113][ T148] audit: audit_lost=4605 audit_rate_limit=0 audit_backlog_limit=64 [ 462.281481][ T36] kauditd_printk_skb: 47035 callbacks suppressed [ 462.281505][ T36] audit: type=1400 audit(2000000026.556:392990): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 462.295854][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 462.322334][T16417] audit: audit_backlog=65 > audit_backlog_limit=64 [ 462.333673][T16417] audit: audit_lost=5034 audit_rate_limit=0 audit_backlog_limit=64 [ 462.345549][ T148] audit: audit_lost=5035 audit_rate_limit=0 audit_backlog_limit=64 [ 462.352535][ T36] audit: type=1400 audit(2000000026.556:392991): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 462.353581][ T148] audit: backlog limit exceeded [ 462.381184][T16417] audit: backlog limit exceeded [ 462.392207][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 462.398772][ T148] audit: audit_lost=5036 audit_rate_limit=0 audit_backlog_limit=64 [ 462.984557][T23997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=23997 comm=syz.4.8258 [ 466.529102][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8338'. [ 467.221603][T24187] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8348'. [ 467.637401][ T36] kauditd_printk_skb: 47776 callbacks suppressed [ 467.637419][ T36] audit: type=1400 audit(2000000031.551:438301): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 467.644561][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.672289][ T148] audit: audit_lost=5859 audit_rate_limit=0 audit_backlog_limit=64 [ 467.680421][ T148] audit: backlog limit exceeded [ 467.685524][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.692260][ T148] audit: audit_lost=5860 audit_rate_limit=0 audit_backlog_limit=64 [ 467.700298][ T148] audit: backlog limit exceeded [ 467.705474][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.708349][ T36] audit: type=1400 audit(2000000031.560:438302): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 467.712102][ T148] audit: audit_lost=5861 audit_rate_limit=0 audit_backlog_limit=64 [ 472.993436][ T36] kauditd_printk_skb: 46789 callbacks suppressed [ 472.993456][ T36] audit: type=1400 audit(2000000036.574:483405): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 472.999904][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.025682][T18039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.027713][ T148] audit: audit_lost=6424 audit_rate_limit=0 audit_backlog_limit=64 [ 473.034096][T18039] audit: audit_lost=6425 audit_rate_limit=0 audit_backlog_limit=64 [ 473.042540][ T148] audit: backlog limit exceeded [ 473.050061][T18039] audit: backlog limit exceeded [ 473.055068][ T36] audit: type=1400 audit(2000000036.574:483406): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 473.065797][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.081153][ T36] audit: type=1400 audit(2000000036.574:483407): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 474.279508][T24448] udevd[24448]: Unable to fix SELinux security context of /dev/char/10:232: Read-only file system [ 474.353496][T24448] udevd[24448]: Unable to fix SELinux security context of /dev/char/10:232: Read-only file system [ 474.439215][T17142] bridge_slave_1: left allmulticast mode [ 474.451714][T17142] bridge_slave_1: left promiscuous mode [ 474.464343][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.479224][T17142] bridge_slave_0: left allmulticast mode [ 474.491857][T17142] bridge_slave_0: left promiscuous mode [ 474.502436][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.622050][T17142] tipc: Left network mode [ 474.633300][T17142] veth1_macvtap: left promiscuous mode [ 474.643666][T17142] veth0_vlan: left promiscuous mode [ 477.977101][T17142] bridge_slave_1: left allmulticast mode [ 477.983162][T17142] bridge_slave_1: left promiscuous mode [ 477.989221][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.998652][T17142] bridge_slave_0: left allmulticast mode [ 478.004600][T17142] bridge_slave_0: left promiscuous mode [ 478.010650][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.349470][ T36] kauditd_printk_skb: 57098 callbacks suppressed [ 478.349488][ T36] audit: type=1400 audit(2000000041.578:538605): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.355513][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.355853][ T36] audit: type=1400 audit(2000000041.578:538606): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.376948][ T148] audit: audit_lost=7060 audit_rate_limit=0 audit_backlog_limit=64 [ 478.383749][ T36] audit: type=1400 audit(2000000041.578:538607): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.404890][ T148] audit: backlog limit exceeded [ 478.412769][ T36] audit: type=1400 audit(2000000041.578:538608): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.434296][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.438798][ T36] audit: type=1400 audit(2000000041.578:538609): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.459832][ T148] audit: audit_lost=7061 audit_rate_limit=0 audit_backlog_limit=64 [ 483.705631][ T36] kauditd_printk_skb: 61378 callbacks suppressed [ 483.705650][ T36] audit: type=1400 audit(2000000046.582:599987): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.711923][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 483.712031][ T36] audit: type=1400 audit(2000000046.592:599988): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.733159][ T148] audit: audit_lost=7062 audit_rate_limit=0 audit_backlog_limit=64 [ 483.739895][ T36] audit: type=1400 audit(2000000046.592:599989): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.760862][ T148] audit: backlog limit exceeded [ 483.768741][ T36] audit: type=1400 audit(2000000046.592:599990): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.790165][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 483.794665][ T36] audit: type=1400 audit(2000000046.592:599991): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.815776][ T148] audit: audit_lost=7063 audit_rate_limit=0 audit_backlog_limit=64 [ 489.061433][ T36] kauditd_printk_skb: 61851 callbacks suppressed [ 489.061451][ T36] audit: type=1400 audit(2000000051.606:661842): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 489.067544][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.067815][ T36] audit: type=1400 audit(2000000051.606:661843): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 489.088911][ T148] audit: audit_lost=7064 audit_rate_limit=0 audit_backlog_limit=64 [ 489.095676][ T36] audit: type=1400 audit(2000000051.606:661844): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 489.116717][ T148] audit: backlog limit exceeded [ 489.124550][ T36] audit: type=1400 audit(2000000051.606:661845): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 489.145807][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.150397][ T36] audit: type=1400 audit(2000000051.606:661846): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 489.171582][ T148] audit: audit_lost=7065 audit_rate_limit=0 audit_backlog_limit=64 [ 494.417393][ T36] kauditd_printk_skb: 50995 callbacks suppressed [ 494.417487][ T36] audit: type=1400 audit(2000000056.601:711917): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 494.427563][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 494.445172][ T36] audit: type=1400 audit(2000000056.610:711918): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 494.451627][ T148] audit: audit_lost=7374 audit_rate_limit=0 audit_backlog_limit=64 [ 494.473011][ T36] audit: type=1400 audit(2000000056.610:711919): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 494.480727][ T148] audit: backlog limit exceeded [ 494.501897][ T36] audit: type=1400 audit(2000000056.610:711920): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 494.507071][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 494.527841][ T36] audit: type=1400 audit(2000000056.610:711921): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 494.534241][ T148] audit: audit_lost=7375 audit_rate_limit=0 audit_backlog_limit=64 [ 496.717923][ T10] ================================================================== [ 496.726023][ T10] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 496.732789][ T10] Write of size 8 at addr 0000000000000098 by task kworker/0:1/10 [ 496.740578][ T10] [ 496.742897][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 496.742921][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.742933][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 496.742987][ T10] Call Trace: [ 496.742994][ T10] [ 496.743002][ T10] __dump_stack+0x21/0x30 [ 496.743024][ T10] dump_stack_lvl+0x10c/0x190 [ 496.743049][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 496.743070][ T10] print_report+0x3d/0x70 [ 496.743086][ T10] kasan_report+0x163/0x1a0 [ 496.743110][ T10] ? down_write+0x83/0x2a0 [ 496.743131][ T10] ? down_write+0x83/0x2a0 [ 496.743151][ T10] kasan_check_range+0x299/0x2a0 [ 496.743173][ T10] __kasan_check_write+0x18/0x20 [ 496.743192][ T10] down_write+0x83/0x2a0 [ 496.743211][ T10] ? __cfi_down_write+0x10/0x10 [ 496.743230][ T10] ? _raw_spin_lock+0x8c/0x120 [ 496.743257][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 496.743279][ T10] ? mutex_unlock+0x8b/0x240 [ 496.743297][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 496.743315][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 496.743341][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 496.743370][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 496.743391][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 496.743409][ T10] ? update_curr+0x60d/0xc60 [ 496.743429][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 496.743457][ T10] ? update_load_avg+0x506/0x19a0 [ 496.743473][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 496.743496][ T10] ? dequeue_entity+0xa9c/0x1750 [ 496.743515][ T10] ? tg_unthrottle_up+0x980/0x980 [ 496.743532][ T10] ? kasan_save_track+0x4f/0x80 [ 496.743551][ T10] ? kasan_save_free_info+0x4a/0x60 [ 496.743568][ T10] ? __kasan_slab_free+0x5f/0x80 [ 496.743589][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 496.743606][ T10] ? sched_clock_noinstr+0xd/0x30 [ 496.743624][ T10] ? sched_clock+0x44/0x60 [ 496.743639][ T10] ? sched_clock_cpu+0x75/0x400 [ 496.743656][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 496.743673][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 496.743691][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 496.743709][ T10] ? __kasan_check_write+0x18/0x20 [ 496.743726][ T10] ? __switch_to+0xc7b/0x1310 [ 496.743744][ T10] ? psi_group_change+0xb44/0x1130 [ 496.743761][ T10] ? __cfi___switch_to+0x10/0x10 [ 496.743780][ T10] ? _raw_spin_unlock+0x45/0x60 [ 496.743793][ T10] ? __switch_to_asm+0x3d/0x70 [ 496.743812][ T10] ? __schedule+0x1463/0x1f10 [ 496.743828][ T10] ? kick_pool+0xad/0x550 [ 496.743842][ T10] process_scheduled_works+0x7d2/0x1020 [ 496.743865][ T10] worker_thread+0xc58/0x1250 [ 496.743887][ T10] kthread+0x2ca/0x370 [ 496.743907][ T10] ? __cfi_worker_thread+0x10/0x10 [ 496.743927][ T10] ? __cfi_kthread+0x10/0x10 [ 496.743947][ T10] ret_from_fork+0x64/0xa0 [ 496.743964][ T10] ? __cfi_kthread+0x10/0x10 [ 496.743984][ T10] ret_from_fork_asm+0x1a/0x30 [ 496.744005][ T10] [ 496.744011][ T10] ================================================================== [ 497.065265][ T10] Disabling lock debugging due to kernel taint [ 497.071468][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 497.079294][ T10] #PF: supervisor write access in kernel mode [ 497.079308][ T10] #PF: error_code(0x0002) - not-present page [ 497.079326][ T10] PGD 0 P4D 0 [ 497.094714][ T10] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 497.100778][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 497.115610][ T10] Tainted: [B]=BAD_PAGE [ 497.119741][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.129780][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 497.146556][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 497.151579][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 497.171175][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 497.177232][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 497.185189][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 497.193146][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 497.201107][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 497.209070][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 497.217029][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 497.225944][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.232521][ T10] CR2: 0000000000000098 CR3: 000000011dfd0000 CR4: 00000000003526b0 [ 497.240483][ T10] Call Trace: [ 497.243748][ T10] [ 497.246665][ T10] ? __cfi_down_write+0x10/0x10 [ 497.251521][ T10] ? _raw_spin_lock+0x8c/0x120 [ 497.256280][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 497.261468][ T10] ? mutex_unlock+0x8b/0x240 [ 497.266049][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 497.271105][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 497.276671][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 497.289464][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 497.294587][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 497.300644][ T10] ? update_curr+0x60d/0xc60 [ 497.305223][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 497.318407][ T10] ? update_load_avg+0x506/0x19a0 [ 497.323418][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 497.328953][ T10] ? dequeue_entity+0xa9c/0x1750 [ 497.333878][ T10] ? tg_unthrottle_up+0x980/0x980 [ 497.338893][ T10] ? kasan_save_track+0x4f/0x80 [ 497.343734][ T10] ? kasan_save_free_info+0x4a/0x60 [ 497.348920][ T10] ? __kasan_slab_free+0x5f/0x80 [ 497.353848][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 497.359037][ T10] ? sched_clock_noinstr+0xd/0x30 [ 497.364047][ T10] ? sched_clock+0x44/0x60 [ 497.368451][ T10] ? sched_clock_cpu+0x75/0x400 [ 497.373287][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 497.379340][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 497.384626][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 497.389899][ T10] ? __kasan_check_write+0x18/0x20 [ 497.395004][ T10] ? __switch_to+0xc7b/0x1310 [ 497.399670][ T10] ? psi_group_change+0xb44/0x1130 [ 497.404771][ T10] ? __cfi___switch_to+0x10/0x10 [ 497.409707][ T10] ? _raw_spin_unlock+0x45/0x60 [ 497.414540][ T10] ? __switch_to_asm+0x3d/0x70 [ 497.419296][ T10] ? __schedule+0x1463/0x1f10 [ 497.423960][ T10] ? kick_pool+0xad/0x550 [ 497.428278][ T10] process_scheduled_works+0x7d2/0x1020 [ 497.433916][ T10] worker_thread+0xc58/0x1250 [ 497.438589][ T10] kthread+0x2ca/0x370 [ 497.442650][ T10] ? __cfi_worker_thread+0x10/0x10 [ 497.447751][ T10] ? __cfi_kthread+0x10/0x10 [ 497.452333][ T10] ret_from_fork+0x64/0xa0 [ 497.456736][ T10] ? __cfi_kthread+0x10/0x10 [ 497.461319][ T10] ret_from_fork_asm+0x1a/0x30 [ 497.466074][ T10] [ 497.469085][ T10] Modules linked in: [ 497.472964][ T10] CR2: 0000000000000098 [ 497.477105][ T10] ---[ end trace 0000000000000000 ]--- [ 497.482543][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 497.487558][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 497.507150][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 497.513208][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 497.521163][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 497.529118][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 497.537117][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 497.545078][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 497.553034][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 497.561949][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.568520][ T10] CR2: 0000000000000098 CR3: 000000011dfd0000 CR4: 00000000003526b0 [ 497.576481][ T10] Kernel panic - not syncing: Fatal exception [ 497.582831][ T10] Kernel Offset: disabled [ 497.587141][ T10] Rebooting in 86400 seconds..