last executing test programs: 4.818895106s ago: executing program 2 (id=413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30b}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 4.807218017s ago: executing program 2 (id=414): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x8}, &(0x7f0000000580)=0x20) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="db272dbd7000fadbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f00000012c0)=0xe) accept4(r6, 0x0, 0x0, 0x80000) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000140)="e8881b94288c6d2fc0575de69413065b4e3041e5d1750748c0d3eb6dfedc4bb0daa0e221d0f5c61e9b0e48085c9ec5b23b20e52a9bb51e2fa746835e50d7d79b6cd8aac70677a159a3c5ea020e459a3071cb10ec3835723bcb0ed6", 0x5b}, {&(0x7f00000004c0)="1411c7510a0cf37d1914ed57aec64319899dc6a198e615444247384d8de9db343b7ebf5df4a83e87a73ae2eeb522c8bfeb6ac358d8c0ed05e1f1d835677960c869ecaaf4e0206208d488c43d37087b60315db927cb5a1ebd0c169f5abefa1ab8b836c3cad9e6b2d1b4cee3b625021ba0456d57c42b77f9f75f69465d6223b1be93b855335dc9a6d75d29ce81b651862e973b702b1d23326b", 0x98}, {&(0x7f0000000100)}, {&(0x7f0000000740)="79072a5c3043d805c27cf095a82fce51b3399284bc940106388edead0034c7038acc172b8924e551b166d4c82db839fa4e0b310dcf8879b371ede1b327e14096d852cf1f785a4ca2a0e11cf2491ab167f96cc26e02bdb94fddae3c7888ae71ecbc531a6d79147d2fa15871f3da1ccea218a7ef56ff6829afb22002c0e50f324f8ae7d98ed8a801778bfc4fbf770db25f424d3d6483f1c2fa211f89d5d12eac4a03ec1c0b4f590b9b9510875f950ac37bc2e9efb7a026d9b2c84487b77eb7857a029beb2e55bb02a48e5c4206752f78667eae56", 0xd3}, {&(0x7f0000000840)="7e9f7e58d063c2c030da50389bd242dddd2762f9e588ec3ec157095757d7807d3271b06f0f5a6712f9622c1c1d0759f830318b5cb7e23d65fa7cd32cb269e58574a2c9f929e46aa2ad20364774e72e2ebbac121ddd2f57ac7f95c70a25429ece1052d36c7110e4bcd6778101470724a564ceecb12a2b6817b5edd59b5922fa47a7f68dedbf80e7017bcf03d4f6c59056b42276d6409f954b760075790021fa", 0x9f}, {&(0x7f0000000240)="80214b54537b9f11305cff0ef72360651a88bf1a3cc1d41ebc60d0e967de7a36582f8bd832dc6847863abbd6136ecd1c2a68c015eef2a2b9d412ee51d50c59c30356", 0x42}, {&(0x7f00000003c0)="55a85313d7fbb609ab32cc2fe159750e2d7ec9938b38b2cfeda218e8d1a47a530319549ab92c15645c47bd262593b25277e2f9993ba35f2a1a9ecb2c44eabebe53b8221f734402cb619e957985f8d4979f1b75c25d7ad72f25534fee97", 0x5d}], 0x7) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0x1a, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sendto$packet(r5, &(0x7f0000000180)="06031200f3ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fcntl$setlease(r5, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2a44840, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYRES16]) 3.907048676s ago: executing program 2 (id=416): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4c6081, 0x0) fadvise64(r0, 0x6, 0x7ffc, 0x3) 3.906036736s ago: executing program 2 (id=417): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000200000040d80472f3000000000001090224000100000000090400000103000000092100000001220300090581030000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\nV'], 0x0, 0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) (async) lseek(r2, 0x0, 0x3) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 2.322030889s ago: executing program 2 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_virtio(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x123060, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x200000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1c, 0x0, 0x14) mkdir(&(0x7f0000000040)='./file0\x00', 0x44) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2000040000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@remote, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}}, 0x48014) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r3, 0x8, &(0x7f0000000100)="05c5c5e77a77f7b711304574c358ba2547bb88c3b3a39f16343cf5289edd5b21b830e112cb1e046c0e5b5d7d0e62f4d706b053ff5b66d2b11ab1419314be3049cebcf700ce20160d65db8eada95f688482beb2c1216f8f5c744770ee3596cb30b48fa2e25812fe0fae44aa6d") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_mr_cache\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x1, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x10) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f00000000c0)=0x4e, 0x4) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0xc804) recvmsg(r8, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f00000001c0), 0x4) 1.117110557s ago: executing program 1 (id=455): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x20000003}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xe4, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x2, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x2, 0x38}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.116475748s ago: executing program 1 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f00000000c0)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1401, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000085040000"]) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000000)={@broadcast, @local, 0xffffffffffffffff, "78c1c278bba0c0e51fcd2d912e44a434fb34295bf43018a46bd8942625df9313", 0x3, 0xd036, 0x6, 0x8}, 0x3c) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0) 1.07872958s ago: executing program 1 (id=459): r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20000870, &(0x7f0000000240)={0x2, 0xffff, @remote}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r3) bind$unix(r4, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x26, 0x0, 0x0}) 1.07849112s ago: executing program 1 (id=460): clock_getres(0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'wlan0\x00', @broadcast}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000000090102000000000000f0ff010000020900010073797a300000000008000540000c0004800800014c0000000b3800020006000340000300002c00018014000300fc0200000000000000000000c30000fb4ef9f72051af536834b6cd5353baf488e65058a543ab56146b73d1d801c465f12b7be52f4d454df1f8bbf21c48c9f1316c7e4cbba72960f28a6723d1"], 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x48000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001500010025bd7000fbdbdf250a06"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) clock_getres(0x5, 0x0) r4 = socket$inet(0x2, 0x9, 0x3) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x7f, 0x0, &(0x7f00000002c0)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1ea888f71a664cc5a090000001deb29004dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da14edf5215b75a482436e231f28e370fafd3b4afd276d2f37fd35dbc82242c9e6de8a176199bb1c17e860163530f47a97d73"}) 1.07734964s ago: executing program 1 (id=462): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0xe}, 0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0x6, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x402c805}, 0x4000) sendmmsg$inet(r1, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x10000}], 0x1, 0x40, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="240000001e00210000000000000000000a000000050000000000000008000b250ba8187514223ae2ce09d3935d9e6a8c15231176b94cb2f6eee9f5ea81ec476609468d71fd86c1a604d4ce091ccbbcdd0e11d75aced9cfc3b45e381aad8123947efc725fa18a4b76faea6718c4df95177f20ab54406f1f134b14309a237184da8e0b9dfcf2749873391b073255c68b07a46c065c0aa1c2490215689ebd419f"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20004800) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r6, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0}) 1.026895614s ago: executing program 0 (id=464): r0 = syz_clone(0x2028411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4210, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.021847484s ago: executing program 0 (id=465): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 993.407716ms ago: executing program 0 (id=466): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000001080)=0x1, 0x4) r2 = accept4$bt_l2cap(r1, &(0x7f00000010c0)={0x1f, 0x0, @none}, &(0x7f0000001100)=0xe, 0x80000) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000001140)=0x7, 0x2) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000001180)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001200)=""/31, 0x1f}, {&(0x7f0000001240)=""/122, 0x7a}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/43, 0x2b}, {&(0x7f00000013c0)=""/42, 0x2a}, {&(0x7f0000001400)=""/134, 0x86}, {&(0x7f00000014c0)=""/253, 0xfd}, {&(0x7f00000015c0)=""/36, 0x24}, {&(0x7f0000001600)=""/28, 0x1c}, {&(0x7f0000001640)=""/201, 0xc9}], 0xa, &(0x7f0000001800)=""/137, 0x89}, 0x5}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001980)=""/117, 0x75}, {&(0x7f0000001a00)=""/120, 0x78}, {&(0x7f0000001a80)=""/129, 0x81}], 0x4, &(0x7f0000001b80)=""/209, 0xd1}, 0x3}], 0x2, 0x10100, &(0x7f0000001d40)={r3, r4+60000000}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) clock_gettime(0x6, &(0x7f0000001e00)) r5 = userfaultfd(0x80001) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000001e40)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000001e80)=0x7, &(0x7f0000001ec0)=0x1) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001f00)) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000001f40)={0x3, 0x2, 0x9f, 0xfff, 0x5, 0x9, 0x8, 0x7, 0x1, 0x2, 0x9a, 0x0, 0x9, 0x2}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000001f80)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/204, 0xcc}, {&(0x7f00000020c0)=""/17, 0x11}], 0x2, &(0x7f0000002140)=""/67, 0x43}, 0x9}], 0x1, 0x60, &(0x7f0000002200)={0x77359400}) r6 = add_key$fscrypt_provisioning(&(0x7f0000002240), &(0x7f0000002280)={'syz', 0x2}, &(0x7f00000022c0)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000002340)={@id={0x2, 0x0, @d}, 0x10, r6, '\x00', @d}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/key-users\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r7) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, r9, 0x10, 0x70bd2c, 0x4, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002640)={'netdevsim0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xff}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x91a}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x5}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048040}, 0x240008d5) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x28, r9, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc67dbb22a8fd1edf) 770.2034ms ago: executing program 3 (id=467): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 714.974064ms ago: executing program 3 (id=468): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_clone(0x1100000, &(0x7f0000000040)="40fb56038e0b6b6ff53c840008a1c9b90e024b74d9b15259fbf8cae8a6ba", 0x1e, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="3a17131f44a224b8bb7fae40966f05a40bf633bad1d87587f90569261fa7e0cdac8be81e28ab64b48f5ab2f9688e8057cc699da55012e07d687beedbee") sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="14008600fe8000000000000000000000000000aa0000"], 0x1a8}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) truncate(&(0x7f0000000e40)='./file0\x00', 0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rt_sigqueueinfo(r7, 0x3d, &(0x7f0000000280)={0x20, 0xa4f5, 0xfffffffe}) ioctl$TCXONC(r6, 0x540a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r10, 0xaea2, 0x5) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r12, 0x8000, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x4, 0x102, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) sendto$inet(r0, &(0x7f0000000180)="69d71340feda2ef14b9ed6c49c44eb53caf03182501978ba7cf7092b49099df54f176bc3be81d4c5ff1becdc84cf59a9d9533f575152a96847be7325c7673b7818c51668339d0eb6f967db209fd4f3ac437f1234416d9875d37f7169e0b6eb", 0x5f, 0x800, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 714.679693ms ago: executing program 3 (id=469): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x8024, &(0x7f0000000180)=ANY=[@ANYRES16]) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f00000000c0)=""/110, 0x6e}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x8024, &(0x7f0000000180)=ANY=[@ANYRES16]) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f00000000c0)=""/110, 0x6e}) (async) 683.876466ms ago: executing program 3 (id=470): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x406180, 0x100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe, 0x7a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000200), 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000080)={0x3}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f0000000240)='smb3\x00', 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xebec}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x44}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xddb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20009}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x404c840}, 0x4004880) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) 649.576698ms ago: executing program 2 (id=471): futex(&(0x7f0000000000)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 478.936199ms ago: executing program 3 (id=472): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) lseek(r0, 0x81, 0x1) madvise(&(0x7f0000581000/0x2000)=nil, 0x2000, 0x19) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "ad68c505883b9b8d", "250093783ef0322a3efb042a19f31a8d", "2cc05c26", "0aed3de0576d3db0"}, 0x28) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a40300003f0000012bbd7000fbdbdf250d00000008004700", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1c001f80040004ffffffffffffffff762f726e756c6c6230000000004d02cc8008002b00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0800f800", @ANYRES32=r5, @ANYBLOB], 0x3a4}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 254.982904ms ago: executing program 3 (id=473): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x267, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0xd0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x5}) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0x22, 0x4, {0x4, 0x21, 'zZ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x7, &(0x7f0000000080)}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x202001, 0x0) close_range(r3, r4, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 227.143356ms ago: executing program 1 (id=474): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = dup(r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) mmap$binder(&(0x7f0000036000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) utimes(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') exit(0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r8, 0x2000000000000170, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000001140)="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", 0x1000, 0xfffffffffffff39e, 0x0, 0x3, r7}]) preadv(r7, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 107.035903ms ago: executing program 0 (id=475): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x200, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x200, 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) 106.749433ms ago: executing program 0 (id=476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async, rerun: 32) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 0s ago: executing program 0 (id=477): syslog(0x3, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = timerfd_create(0x8, 0x80000) clock_gettime(0x0, &(0x7f0000000140)) r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) rmdir(&(0x7f0000000040)='./bus\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540)) read(r1, &(0x7f0000000000)=""/162, 0xa2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x20, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x8, 0x2, 0xffff}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB="00fbb70102b5c0d48fba6792a101e45209912fadec2ea65db22a79288d90337a910b6e83000bfc308ebbf31a52613783298738a9c2c7f83344bbf57ed70c6f08a51ecfbb04799b3c7d01b815026235888f74946cda824330e31c2738cbf132e8e0c169b527a55281000000f6030c5c12c3a2d07e2342aac485934df89f804981d55085ca02d2a4504962adac2482de1acceb7743d610c422258133b367afb890cf4f571ebdd1393cbf88eda97a77fe5b"], 0xb7, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000580)=ANY=[@ANYBLOB="fcccdf93cb798fa27800c209d5f7a4e75cbf377360c18ce8acf511f7ed71d3cd55283c4a1aa61a5cf82443eb43dda910229faf6d022783e2a4463ddb646c0c6b512ce2685352ccfd5c"], 0x10}], 0x2, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x5, 0x2, 0x9, '\x00', 0xfffffffffffffff9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x61, 0x0, &(0x7f0000000080)="3e411cc217cf51dcc1113562af3e3df80f4c69aab76f7a90f989d8843feed7304f120a6fedf392af51f8e9d1e967b23afe3a67972e36036f43a40fcfd7ca8b9bf594e620e1fbf943471a6b5b6167932996cb12b47803323eec06fef5b6baa095d2"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 23.906896][ T36] audit: type=1400 audit(1759820960.890:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.908514][ T282] cgroup: Unknown subsys name 'net' [ 23.929654][ T36] audit: type=1400 audit(1759820960.890:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.957219][ T36] audit: type=1400 audit(1759820960.920:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.957485][ T282] cgroup: Unknown subsys name 'devices' [ 24.065999][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.071664][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.247005][ T36] audit: type=1400 audit(1759820961.230:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.270248][ T36] audit: type=1400 audit(1759820961.230:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.290107][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.295871][ T36] audit: type=1400 audit(1759820961.230:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.328006][ T36] audit: type=1400 audit(1759820961.290:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.345452][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.354338][ T36] audit: type=1400 audit(1759820961.290:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.388986][ T36] audit: type=1400 audit(1759820961.320:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.414546][ T36] audit: type=1400 audit(1759820961.320:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.250663][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.258199][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.265484][ T291] bridge_slave_0: entered allmulticast mode [ 25.272082][ T291] bridge_slave_0: entered promiscuous mode [ 25.278996][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.286693][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.293987][ T291] bridge_slave_1: entered allmulticast mode [ 25.300291][ T291] bridge_slave_1: entered promiscuous mode [ 25.324173][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.331337][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.338510][ T289] bridge_slave_0: entered allmulticast mode [ 25.345204][ T289] bridge_slave_0: entered promiscuous mode [ 25.351694][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.358833][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.365971][ T289] bridge_slave_1: entered allmulticast mode [ 25.372312][ T289] bridge_slave_1: entered promiscuous mode [ 25.434029][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.441382][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.448821][ T292] bridge_slave_0: entered allmulticast mode [ 25.455193][ T292] bridge_slave_0: entered promiscuous mode [ 25.465796][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.472889][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.480066][ T290] bridge_slave_0: entered allmulticast mode [ 25.486382][ T290] bridge_slave_0: entered promiscuous mode [ 25.492813][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.499907][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.507036][ T290] bridge_slave_1: entered allmulticast mode [ 25.513369][ T290] bridge_slave_1: entered promiscuous mode [ 25.519548][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.526873][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.534243][ T292] bridge_slave_1: entered allmulticast mode [ 25.540780][ T292] bridge_slave_1: entered promiscuous mode [ 25.710561][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.718215][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.725591][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.732663][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.748366][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.755452][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.762756][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.769947][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.779732][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.786913][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.794343][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.801411][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.827689][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.834965][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.842369][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.849978][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.897453][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.905211][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.912687][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.921129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.929393][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.936955][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.944369][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.952856][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.966094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.973199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.988536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.995824][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.011805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.019088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.029744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.037075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.070804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.085787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.093072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.101592][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.109385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.117369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.124744][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.169080][ T291] veth0_vlan: entered promiscuous mode [ 26.178775][ T292] veth0_vlan: entered promiscuous mode [ 26.200430][ T292] veth1_macvtap: entered promiscuous mode [ 26.215871][ T289] veth0_vlan: entered promiscuous mode [ 26.229628][ T290] veth0_vlan: entered promiscuous mode [ 26.242142][ T291] veth1_macvtap: entered promiscuous mode [ 26.258974][ T290] veth1_macvtap: entered promiscuous mode [ 26.268776][ T289] veth1_macvtap: entered promiscuous mode [ 26.291906][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.400291][ T343] 9pnet_fd: Insufficient options for proto=fd [ 26.427988][ T345] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.508416][ T339] rust_binder: Error in use_page_slow: ESRCH [ 26.508449][ T339] rust_binder: use_range failure ESRCH [ 26.515057][ T339] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 26.520702][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 26.529201][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 26.706601][ T361] GUP no longer grows the stack in syz.2.11 (361): 200000001000-200000c01000 (200000000000) [ 26.726609][ T361] CPU: 1 UID: 0 PID: 361 Comm: syz.2.11 Not tainted syzkaller #0 fb7788b0c98d0be826a5a6580fd4830f58b39720 [ 26.726646][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 26.726673][ T361] Call Trace: [ 26.726681][ T361] [ 26.726690][ T361] __dump_stack+0x21/0x30 [ 26.726741][ T361] dump_stack_lvl+0x10c/0x190 [ 26.726772][ T361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.726803][ T361] ? find_vma+0xcd/0x110 [ 26.726836][ T361] dump_stack+0x19/0x20 [ 26.726863][ T361] __get_user_pages+0x1e34/0x22d0 [ 26.726894][ T361] ? __kasan_check_write+0x18/0x20 [ 26.726932][ T361] ? down_read_killable+0x79/0xf0 [ 26.726954][ T361] ? populate_vma_page_range+0x230/0x230 [ 26.726984][ T361] ? kernel_text_address+0xa9/0xe0 [ 26.727017][ T361] __gup_longterm_locked+0xcb1/0x1580 [ 26.727051][ T361] ? stack_depot_save_flags+0x399/0x800 [ 26.727075][ T361] gup_fast_fallback+0x12ae/0x14a0 [ 26.727098][ T361] ? kasan_save_track+0x3e/0x80 [ 26.727115][ T361] ? kasan_save_alloc_info+0x40/0x50 [ 26.727138][ T361] ? __kmalloc_cache_noprof+0x24c/0x490 [ 26.727154][ T361] ? futex_lock_pi+0x77a/0xa10 [ 26.727175][ T361] ? __x64_sys_futex+0xe9/0x110 [ 26.727191][ T361] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.727221][ T361] ? get_user_pages_fast_only+0xc0/0xc0 [ 26.727245][ T361] get_user_pages_fast+0x73/0xb0 [ 26.727266][ T361] get_futex_key+0x24d/0x930 [ 26.727282][ T361] ? __cfi_get_futex_key+0x10/0x10 [ 26.727297][ T361] ? futex_lock_pi+0x77a/0xa10 [ 26.727316][ T361] ? futex_setup_timer+0xb4/0xd0 [ 26.727331][ T361] futex_lock_pi+0x1c0/0xa10 [ 26.727350][ T361] ? futex_unqueue+0x136/0x160 [ 26.727367][ T361] ? __cfi_futex_lock_pi+0x10/0x10 [ 26.727387][ T361] ? __cfi_futex_wake_mark+0x10/0x10 [ 26.727408][ T361] ? futex_setup_timer+0xb4/0xd0 [ 26.727424][ T361] ? __cfi_futex_wake_mark+0x10/0x10 [ 26.727445][ T361] ? __kasan_check_write+0x18/0x20 [ 26.727471][ T361] ? up_read+0x26/0x1d0 [ 26.727492][ T361] do_futex+0x25c/0x500 [ 26.727508][ T361] ? __cfi_do_futex+0x10/0x10 [ 26.727525][ T361] ? vm_mmap_pgoff+0x145/0x4e0 [ 26.727540][ T361] __se_sys_futex+0x28f/0x300 [ 26.727559][ T361] ? __x64_sys_futex+0x110/0x110 [ 26.727578][ T361] ? __kasan_check_write+0x18/0x20 [ 26.727604][ T361] __x64_sys_futex+0xe9/0x110 [ 26.727621][ T361] x64_sys_call+0x227f/0x2ee0 [ 26.727647][ T361] do_syscall_64+0x58/0xf0 [ 26.727667][ T361] ? clear_bhb_loop+0x50/0xa0 [ 26.727683][ T361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.727709][ T361] RIP: 0033:0x7f056af8eec9 [ 26.727732][ T361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 26.727747][ T361] RSP: 002b:00007f056bd4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.727768][ T361] RAX: ffffffffffffffda RBX: 00007f056b1e5fa0 RCX: 00007f056af8eec9 [ 26.727781][ T361] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 26.727792][ T361] RBP: 00007f056b011f91 R08: 0000000000000000 R09: 0000000000000002 [ 26.727803][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.727821][ T361] R13: 00007f056b1e6038 R14: 00007f056b1e5fa0 R15: 00007ffd16e33a28 [ 26.727836][ T361] [ 26.921823][ T363] __vm_enough_memory: pid: 363, comm: syz.2.12, bytes: 18014402804453376 not enough memory for the allocation [ 26.926490][ T334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.186465][ T381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18'. [ 27.195985][ T382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 27.205682][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 27.233589][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 27.240439][ T334] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 27.253125][ T334] usb 4-1: config 0 has no interface number 0 [ 27.260689][ T386] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 27.268415][ T334] usb 4-1: config 0 interface 13 has no altsetting 0 [ 27.277009][ T334] usb 4-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 27.286795][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.294375][ T386] netlink: 'syz.1.20': attribute type 17 has an invalid length. [ 27.295187][ T334] usb 4-1: Product: syz [ 27.307222][ T334] usb 4-1: Manufacturer: syz [ 27.312130][ T334] usb 4-1: SerialNumber: syz [ 27.333835][ T334] usb 4-1: config 0 descriptor?? [ 27.344659][ T334] usb-storage 4-1:0.13: USB Mass Storage device detected [ 27.373655][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.425591][ T398] overlayfs: failed to clone upperpath [ 27.490265][ T393] __vm_enough_memory: pid: 393, comm: syz.0.21, bytes: 18014402804453376 not enough memory for the allocation [ 27.523801][ T9] usb 3-1: device descriptor read/64, error -71 [ 27.552724][ T350] rust_binder: Got transaction with invalid offset. [ 27.552779][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.564662][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 27.575234][ T334] usb 4-1: USB disconnect, device number 2 [ 27.773616][ T9] usb 3-1: device descriptor read/64, error -71 [ 27.971762][ T422] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 27.971800][ T422] rust_binder: Error while translating object. [ 27.981481][ T422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.990035][ T422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 28.018487][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.136088][ T445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.157292][ T449] rust_binder: Error while translating object. [ 28.163629][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.163887][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.177279][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:14 [ 28.243640][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.319717][ T466] input: syz0 as /devices/virtual/input/input4 [ 28.403616][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.409956][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 28.415658][ T64] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 28.425059][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 28.432780][ T64] usb 1-1: can't read configurations, error -61 [ 28.523958][ T9] usb usb3-port1: attempt power cycle [ 28.563660][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.713690][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 28.719540][ T64] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 28.730835][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 28.739031][ T64] usb 1-1: can't read configurations, error -61 [ 28.746476][ T64] usb usb1-port1: attempt power cycle [ 28.844984][ T496] process 'syz.1.57' launched './file1' with NULL argv: empty string added [ 28.873663][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.894634][ T9] usb 3-1: device descriptor read/8, error -71 [ 28.920675][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 28.920694][ T36] audit: type=1400 audit(1759820965.900:185): avc: denied { sqpoll } for pid=504 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.976632][ T36] audit: type=1400 audit(1759820965.960:186): avc: denied { lock } for pid=504 comm="syz.1.61" path="socket:[3763]" dev="sockfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 29.024851][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.083886][ T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.104007][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 29.109635][ T64] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 29.119024][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 29.126803][ T64] usb 1-1: can't read configurations, error -61 [ 29.253666][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.264004][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.274057][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 29.279630][ T64] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 29.288949][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 29.296651][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.303284][ T64] usb 1-1: can't read configurations, error -61 [ 29.318964][ T64] usb usb1-port1: unable to enumerate USB device [ 29.424838][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.453643][ T470] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.533737][ T9] usb usb3-port1: unable to enumerate USB device [ 29.614875][ T470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.625143][ T470] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.636314][ T470] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 29.647674][ T470] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.662031][ T470] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.671160][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.679246][ T470] usb 4-1: Product: syz [ 29.683446][ T470] usb 4-1: Manufacturer: syz [ 29.688088][ T470] usb 4-1: SerialNumber: syz [ 29.694016][ T508] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 29.702128][ T470] cdc_mbim 4-1:1.0: skipping garbage [ 30.105633][ T470] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 30.112323][ T509] netlink: 196 bytes leftover after parsing attributes in process `syz.3.62'. [ 30.121768][ T470] cdc_mbim 4-1:1.0: bind() failure [ 30.125672][ T36] audit: type=1400 audit(1759820967.100:187): avc: denied { connect } for pid=513 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.130502][ T470] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 30.148062][ T36] audit: type=1400 audit(1759820967.130:188): avc: denied { append } for pid=513 comm="syz.2.64" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.153598][ T470] cdc_ncm 4-1:1.1: bind() failure [ 30.493009][ T531] overlayfs: conflicting options: metacopy=off,verity=require [ 30.501351][ T36] audit: type=1400 audit(1759820967.480:189): avc: denied { create } for pid=528 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 30.537722][ T36] audit: type=1400 audit(1759820967.520:190): avc: denied { connect } for pid=533 comm="syz.1.70" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.978294][ T542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.978331][ T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 30.988439][ T542] __vm_enough_memory: pid: 542, comm: syz.2.73, bytes: 18014402804453376 not enough memory for the allocation [ 31.010836][ T36] audit: type=1400 audit(1759820967.990:191): avc: denied { read write } for pid=541 comm="syz.2.73" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.034342][ T36] audit: type=1400 audit(1759820967.990:192): avc: denied { open } for pid=541 comm="syz.2.73" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.074049][ T36] audit: type=1400 audit(1759820968.060:193): avc: denied { write } for pid=546 comm="syz.2.75" name="tcp6" dev="proc" ino=4026532596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.098138][ T36] audit: type=1400 audit(1759820968.060:194): avc: denied { map } for pid=546 comm="syz.2.75" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.133585][ T334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.218064][ T9] usb 4-1: USB disconnect, device number 3 [ 32.262625][ T605] 9pnet_fd: Insufficient options for proto=fd [ 32.285016][ T334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.301555][ T334] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 32.316825][ T334] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.328306][ T334] usb 1-1: config 1 interface 1 has no altsetting 0 [ 32.336995][ T334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.346245][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.354422][ T334] usb 1-1: Product: syz [ 32.364357][ T334] usb 1-1: Manufacturer: syz [ 32.369076][ T334] usb 1-1: SerialNumber: syz [ 32.412598][ T613] rust_binder: 46: no such ref 0 [ 32.418054][ T613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 32.479477][ T616] fuse: Unknown parameter '["<]˱df0x0000000000000006' [ 32.577458][ T552] netlink: 393 bytes leftover after parsing attributes in process `syz.0.76'. [ 32.590975][ T334] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 32.601208][ T334] usb 1-1: USB disconnect, device number 6 [ 32.813630][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.827309][ T631] ======================================================= [ 32.827309][ T631] WARNING: The mand mount option has been deprecated and [ 32.827309][ T631] and is ignored by this kernel. Remove the mand [ 32.827309][ T631] option from the mount to silence this warning. [ 32.827309][ T631] ======================================================= [ 32.864308][ T631] overlayfs: failed to clone lowerpath [ 32.906722][ T642] overlayfs: failed to clone upperpath [ 32.953647][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.193614][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.393755][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.442209][ T654] netlink: 188 bytes leftover after parsing attributes in process `syz.2.109'. [ 33.451400][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.545137][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.556147][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.568497][ T9] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 33.577631][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.585684][ T9] usb 1-1: Product: syz [ 33.589949][ T9] usb 1-1: Manufacturer: syz [ 33.593611][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.594682][ T9] usb 1-1: SerialNumber: syz [ 33.606956][ T9] usb 1-1: config 0 descriptor?? [ 33.613405][ T9] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 33.619860][ T9] usb 1-1: No valid video chain found. [ 33.833595][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.943696][ T45] usb usb4-port1: attempt power cycle [ 33.990821][ T674] Zero length message leads to an empty skb [ 34.004576][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 34.004597][ T36] audit: type=1400 audit(1759820970.990:229): avc: denied { create } for pid=672 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.031247][ T676] binder: Bad value for 'max' [ 34.065963][ T36] audit: type=1400 audit(1759820971.010:230): avc: denied { bind } for pid=672 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.095443][ T36] audit: type=1400 audit(1759820971.010:231): avc: denied { name_bind } for pid=672 comm="syz.2.114" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 34.131154][ T36] audit: type=1400 audit(1759820971.010:232): avc: denied { node_bind } for pid=672 comm="syz.2.114" saddr=::ffff:10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 34.154002][ T36] audit: type=1400 audit(1759820971.020:233): avc: denied { read } for pid=672 comm="syz.2.114" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.177603][ T36] audit: type=1400 audit(1759820971.020:234): avc: denied { open } for pid=672 comm="syz.2.114" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.214798][ T36] audit: type=1400 audit(1759820971.020:235): avc: denied { ioctl } for pid=672 comm="syz.2.114" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.313576][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.334587][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.456441][ T689] syz.1.121 (689): attempted to duplicate a private mapping with mremap. This is not supported. [ 34.474992][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.723607][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.744690][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.775452][ T700] x_tables: unsorted entry at hook 2 [ 34.817088][ T703] /dev/rnullb0: Can't lookup blockdev [ 34.874630][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.937147][ T36] audit: type=1400 audit(1759820971.920:236): avc: denied { accept } for pid=711 comm="syz.2.129" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.983807][ T45] usb usb4-port1: unable to enumerate USB device [ 35.283617][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 35.434621][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 35.453078][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 35.466431][ T45] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 35.475750][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.485254][ T45] usb 3-1: config 0 descriptor?? [ 35.492873][ T723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.505891][ T45] usbhid 3-1:0.0: can't add hid device: -22 [ 35.523727][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 35.555408][ T36] audit: type=1400 audit(1759820972.540:237): avc: denied { read } for pid=724 comm="syz.3.132" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.587553][ T36] audit: type=1400 audit(1759820972.560:238): avc: denied { open } for pid=724 comm="syz.3.132" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.627903][ T729] /dev/rnullb0: Can't lookup blockdev [ 35.633910][ T729] /dev/rnullb0: Can't lookup blockdev [ 35.709355][ T64] usb 3-1: USB disconnect, device number 6 [ 36.164641][ T64] usb 1-1: USB disconnect, device number 7 [ 36.276886][ T751] fuse: Bad value for 'group_id' [ 36.285869][ T751] fuse: Bad value for 'group_id' [ 36.398690][ T772] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 36.416020][ T776] overlayfs: failed to clone lowerpath [ 36.532438][ T783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.532478][ T783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 36.758122][ T803] fuse: Unknown parameter 'grzp_id' [ 36.777895][ T803] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 36.916435][ T817] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.924520][ T817] rust_binder: Read failure Err(EFAULT) in pid:131 [ 36.943589][ T334] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.103588][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 37.110894][ T334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.119689][ T334] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 37.128091][ T334] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 37.143566][ T334] usb 1-1: config 13 has no interface number 0 [ 37.149822][ T334] usb 1-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.172214][ T334] usb 1-1: config 13 interface 50 has no altsetting 0 [ 37.180212][ T826] capability: warning: `syz.1.167' uses deprecated v2 capabilities in a way that may be insecure [ 37.181719][ T334] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 37.200280][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.208502][ T334] usb 1-1: Product: syz [ 37.212749][ T334] usb 1-1: Manufacturer: syz [ 37.217653][ T334] usb 1-1: SerialNumber: syz [ 37.435437][ T334] usb 1-1: MIDIStreaming interface descriptor not found [ 37.450923][ T334] usb 1-1: USB disconnect, device number 8 [ 37.463022][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.113096][ T871] /dev/rnullb0: Can't lookup blockdev [ 38.624585][ T876] netlink: 'syz.3.181': attribute type 27 has an invalid length. [ 38.653264][ T876] netlink: 'syz.3.181': attribute type 27 has an invalid length. [ 38.957872][ T917] tmpfs: Unknown parameter '' [ 39.073955][ T928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.090377][ T930] overlay: ./file0 is not a directory [ 39.186924][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 39.186944][ T36] audit: type=1400 audit(1759820976.170:272): avc: denied { associate } for pid=931 comm="syz.3.202" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 39.221121][ T934] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.284708][ T36] audit: type=1401 audit(1759820976.200:273): op=setxattr invalid_context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tipc: Started in network mode [ 39.394185][ T947] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 39.395388][ T945] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 39.412261][ T36] audit: type=1400 audit(1759820976.250:274): avc: denied { relabelto } for pid=931 comm="syz.3.202" name="file0" dev="rootfs" ino=6391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 39.426935][ T945] tipc: Enabling of bearer rejected, failed to enable media [ 39.446586][ T36] audit: type=1400 audit(1759820976.250:275): avc: denied { associate } for pid=931 comm="syz.3.202" name="file0" dev="rootfs" ino=6391 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 39.499856][ T36] audit: type=1400 audit(1759820976.370:276): avc: denied { execheap } for pid=946 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.510915][ T962] devpts: called with bogus options [ 39.519749][ T36] audit: type=1400 audit(1759820976.430:277): avc: denied { remount } for pid=954 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 39.538625][ T966] overlayfs: failed to clone lowerpath [ 39.549637][ T968] incfs: Options parsing error. -22 [ 39.556027][ T968] incfs: mount failed -22 [ 39.583311][ T36] audit: type=1400 audit(1759820976.560:278): avc: denied { map } for pid=969 comm="syz.0.215" path="socket:[6433]" dev="sockfs" ino=6433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.639515][ T979] overlayfs: failed to clone upperpath [ 39.640077][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 39.665186][ T984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.222'. [ 39.683840][ T984] netlink: 43 bytes leftover after parsing attributes in process `syz.1.222'. [ 39.693104][ T984] netlink: 'syz.1.222': attribute type 6 has an invalid length. [ 39.700975][ T984] netlink: 'syz.1.222': attribute type 5 has an invalid length. [ 39.708748][ T984] netlink: 43 bytes leftover after parsing attributes in process `syz.1.222'. [ 39.752538][ T36] audit: type=1400 audit(1759820976.730:279): avc: denied { getopt } for pid=981 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.766449][ T994] batadv_slave_1: mtu less than device minimum [ 39.829818][ T1002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.829845][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 39.953100][ T36] audit: type=1400 audit(1759820976.930:280): avc: denied { getopt } for pid=1012 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 39.992245][ T36] audit: type=1400 audit(1759820976.940:281): avc: denied { write } for pid=1012 comm="syz.0.233" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.993299][ T1015] rust_binder: Write failure EFAULT in pid:85 [ 40.030305][ T1017] tipc: Enabling of bearer rejected, media not registered [ 40.045829][ T1017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 40.066707][ T1019] input: syz0 as /devices/virtual/input/input7 [ 40.144075][ T1030] binder: Bad value for 'max' [ 40.150313][ T1030] binder: Unknown parameter 'max00000000' [ 40.433608][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.528881][ T1065] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 40.583572][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 40.600979][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.620695][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.631152][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.646612][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.684022][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.693942][ T10] usb 3-1: config 0 descriptor?? [ 40.727988][ T1087] netlink: 57 bytes leftover after parsing attributes in process `syz.3.259'. [ 40.853937][ T1092] fuse: Bad value for 'fd' [ 40.912870][ T1108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 40.937372][ T1110] overlayfs: failed to clone lowerpath [ 40.941395][ T1111] overlayfs: failed to clone lowerpath [ 41.004562][ T1120] syz.3.269 uses obsolete (PF_INET,SOCK_PACKET) [ 41.102173][ T10] microsoft 0003:045E:07DA.0001: report_id 0 is invalid [ 41.109910][ T10] microsoft 0003:045E:07DA.0001: item 0 0 1 8 parsing failed [ 41.118228][ T10] microsoft 0003:045E:07DA.0001: parse failed [ 41.124995][ T10] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 41.303059][ T1036] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 41.304149][ T334] usb 3-1: USB disconnect, device number 7 [ 41.543695][ T1152] /dev/rnullb0: Can't lookup blockdev [ 41.951810][ T1163] rust_binder: 1162 RLIMIT_NICE not set [ 41.952067][ T1162] rust_binder: 148: no such ref 2 [ 41.968244][ T334] rust_binder: 0: removing orphan mapping 0:1168 [ 42.086092][ T1167] netlink: 'syz.1.288': attribute type 3 has an invalid length. [ 42.094178][ T1167] netlink: 152 bytes leftover after parsing attributes in process `syz.1.288'. [ 42.104214][ T1168] netlink: 'syz.1.288': attribute type 3 has an invalid length. [ 42.104736][ T1169] netlink: 152 bytes leftover after parsing attributes in process `syz.1.288'. [ 42.223586][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 42.244572][ T1181] /dev/rnullb0: Can't lookup blockdev [ 42.374689][ T10] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 42.385627][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.396644][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 42.407570][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 42.421511][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.430725][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.439060][ T10] usb 3-1: SerialNumber: syz [ 42.444877][ T1165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.727639][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 42.734865][ T10] usb 3-1: USB disconnect, device number 8 [ 43.243721][ T12] tipc: Subscription rejected, illegal request [ 43.294824][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 43.483041][ T1234] tipc: New replicast peer: 255.255.255.255 [ 43.498608][ T1234] tipc: Enabled bearer , priority 10 [ 43.744953][ T1255] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=1255 comm=syz.0.317 [ 43.758798][ T1255] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 44.014062][ T1269] rust_binder: 132: no such ref 0 [ 44.019228][ T1269] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 44.026924][ T1269] rust_binder: 132: no such ref 2 [ 44.032192][ T1269] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 44.246701][ T1283] capability: warning: `syz.1.326' uses 32-bit capabilities (legacy support in use) [ 44.330365][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 44.330384][ T36] audit: type=1400 audit(1759820981.310:305): avc: denied { lock } for pid=1293 comm="syz.1.331" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.407481][ T1305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'. [ 44.431785][ T1307] netlink: 'syz.1.336': attribute type 4 has an invalid length. [ 44.441420][ T1307] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.613605][ T10] tipc: Node number set to 4278321153 [ 44.714977][ T36] audit: type=1400 audit(1759820981.700:306): avc: denied { read } for pid=1311 comm="syz.0.338" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.752371][ T36] audit: type=1400 audit(1759820981.700:307): avc: denied { open } for pid=1311 comm="syz.0.338" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.798499][ T36] audit: type=1400 audit(1759820981.780:308): avc: denied { map } for pid=1322 comm="syz.3.343" path="socket:[7350]" dev="sockfs" ino=7350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 44.983610][ T334] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 45.065970][ T36] audit: type=1400 audit(1759820982.050:309): avc: denied { create } for pid=1350 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 45.120085][ T36] audit: type=1400 audit(1759820982.100:310): avc: denied { ioctl } for pid=1359 comm="syz.1.357" path="socket:[7385]" dev="sockfs" ino=7385 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.137327][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 45.159232][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 45.160883][ T36] audit: type=1400 audit(1759820982.140:311): avc: denied { shutdown } for pid=1361 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.172410][ T334] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 45.192371][ T1362] 9pnet_fd: Insufficient options for proto=fd [ 45.201250][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.219366][ T334] usb 1-1: config 0 descriptor?? [ 45.224756][ T1319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.234315][ T334] usbhid 1-1:0.0: can't add hid device: -22 [ 45.242575][ T334] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 45.249292][ T1368] overlayfs: failed to clone upperpath [ 45.256003][ T1367] overlayfs: failed to clone upperpath [ 45.372313][ T1373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 45.382428][ T36] audit: type=1400 audit(1759820982.360:312): avc: denied { listen } for pid=1372 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.409950][ T1375] fuse: Unknown parameter 'fz'&N$h3fT|YN*kBڔB`?iI6&%j' [ 45.421543][ T36] audit: type=1400 audit(1759820982.400:313): avc: denied { getopt } for pid=1374 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.445684][ T334] usb 1-1: USB disconnect, device number 9 [ 45.972228][ T36] audit: type=1400 audit(1759820982.950:314): avc: denied { write } for pid=1394 comm="syz.0.371" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.974248][ T1395] binder: Unknown parameter 'max[00000000000017777777777' [ 46.002331][ T1397] overlayfs: failed to clone upperpath [ 46.080488][ T1404] No source specified [ 46.084935][ T1404] /dev/rnullb0: Can't lookup blockdev [ 46.807774][ T1439] incfs: Error accessing: ./file0. [ 46.813005][ T1439] incfs: mount failed -20 [ 46.896864][ T1451] binder: Bad value for 'max' [ 46.904456][ T1455] /dev/rnullb0: Can't lookup blockdev [ 47.086065][ T1467] /dev/loop1: Can't lookup blockdev [ 47.416060][ T1475] rust_binder: Error while translating object. [ 47.416104][ T1475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.432563][ T1475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:164 [ 47.483354][ T1477] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 47.505208][ T1477] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 47.505239][ T1477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 47.513771][ T1477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:166 [ 47.635007][ T1479] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 233) [ 47.644931][ T1479] rust_binder: Error while translating object. [ 47.655615][ T1479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.661868][ T1479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 47.701470][ T1481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 48.015698][ T1507] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 48.034821][ T1507] SELinux: failed to load policy [ 48.055273][ T1509] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 49.203618][ T64] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.364600][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.375820][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.385666][ T64] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 49.394840][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.404654][ T64] usb 3-1: config 0 descriptor?? [ 49.820744][ T64] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 49.839369][ T64] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 49.853587][ T64] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 49.872040][ T64] hid-led 0003:04D8:F372.0002: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 49.921366][ T64] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 49.971395][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 49.971415][ T36] audit: type=1400 audit(1759820986.950:326): avc: denied { nlmsg_read } for pid=1534 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.031502][ T64] usb 3-1: USB disconnect, device number 9 [ 50.044343][ T9] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 50.048171][ T36] audit: type=1400 audit(1759820987.010:327): avc: denied { create } for pid=1517 comm="syz.2.417" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.073312][ T9] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 50.085397][ T9] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 50.105945][ T36] audit: type=1400 audit(1759820987.010:328): avc: denied { write } for pid=1517 comm="syz.2.417" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.109772][ T9] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 50.157754][ T36] audit: type=1400 audit(1759820987.010:329): avc: denied { open } for pid=1517 comm="syz.2.417" path="/65/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.162164][ T9] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 50.204842][ T9] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 50.211078][ T36] audit: type=1400 audit(1759820987.090:330): avc: denied { write } for pid=1538 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.224741][ T9] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 50.251439][ T9] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 50.270575][ T9] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 50.285429][ T9] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 50.304831][ T9] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 50.322600][ T9] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 50.341535][ T9] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 50.362568][ T9] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 50.371974][ T9] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 50.381944][ T1543] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 50.391350][ T9] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 50.401403][ T9] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 50.414665][ T9] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 50.547419][ T36] audit: type=1400 audit(1759820987.530:331): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.608683][ T1552] tipc: Enabling of bearer rejected, failed to enable media [ 50.610521][ T36] audit: type=1400 audit(1759820987.570:332): avc: denied { remount } for pid=1551 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.794018][ T1570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 50.873673][ T64] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.023608][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 51.030945][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.044362][ T64] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 51.053492][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.079477][ T64] usb 3-1: config 0 descriptor?? [ 51.082825][ T36] audit: type=1400 audit(1759820988.060:333): avc: denied { ioctl } for pid=1585 comm="syz.1.445" path="socket:[7711]" dev="sockfs" ino=7711 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.098584][ T1583] veth0_virt_wifi: entered allmulticast mode [ 51.195727][ T36] audit: type=1400 audit(1759820988.180:334): avc: denied { create } for pid=1595 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 51.216800][ T1581] veth0_virt_wifi: left allmulticast mode [ 51.513717][ T64] wacom 0003:056A:032B.0003: hidraw0: USB HID v0.09 Device [HID 056a:032b] on usb-dummy_hcd.2-1/input0 [ 51.528973][ T1605] /dev/rnullb0: Can't lookup blockdev [ 51.548530][ T1607] bpf: Bad value for 'gid' [ 51.566531][ T36] audit: type=1400 audit(1759820988.550:335): avc: denied { bind } for pid=1608 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.698864][ T45] usb 3-1: USB disconnect, device number 10 [ 51.741707][ T1618] ./cgroup: Can't lookup blockdev [ 51.747117][ T1615] ./cgroup: Can't lookup blockdev [ 51.770393][ T1623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.799099][ T12] tipc: Subscription rejected, illegal request [ 51.815554][ T1634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176 [ 51.848417][ T1639] __vm_enough_memory: pid: 1639, comm: syz.0.465, bytes: 18014402804453376 not enough memory for the allocation [ 52.124966][ T1648] netlink: 384 bytes leftover after parsing attributes in process `syz.3.468'. [ 52.286730][ T1658] FAT-fs (rnullb0): bogus number of reserved sectors [ 52.295989][ T1658] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 52.877984][ T1678] ------------[ cut here ]------------ [ 52.883580][ T1678] WARNING: CPU: 1 PID: 1678 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 52.898922][ T1678] Modules linked in: [ 52.902931][ T1678] CPU: 1 UID: 0 PID: 1678 Comm: syz.0.477 Not tainted syzkaller #0 fb7788b0c98d0be826a5a6580fd4830f58b39720 [ 52.914457][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.924623][ T1678] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 52.930557][ T1678] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1f ee 05 00 0f 85 be 00 00 00 c6 05 d5 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 52.950238][ T1678] RSP: 0018:ffffc9000f8f7540 EFLAGS: 00010246 [ 52.956460][ T1678] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 52.964528][ T1678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f8f75f8 [ 52.972623][ T1678] RBP: ffffc9000f8f7680 R08: ffffc9000f8f75f7 R09: 0000000000000000 [ 52.980677][ T1678] R10: ffffc9000f8f75e0 R11: fffff52001f1eebf R12: ffffc9000f8f7580 [ 52.988880][ T1678] R13: dffffc0000000000 R14: 1ffff92001f1eeac R15: 0000000000000000 [ 52.997016][ T1678] FS: 00007f92e57796c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.006038][ T1678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.012655][ T1678] CR2: 0000200000000140 CR3: 000000011b0dc000 CR4: 00000000003526b0 [ 53.020763][ T1678] Call Trace: [ 53.024124][ T1678] [ 53.027077][ T1678] ? vfs_write+0x3c0/0xf30 [ 53.031591][ T1678] ? ksys_write+0x141/0x250 [ 53.036171][ T1678] ? x64_sys_call+0x271c/0x2ee0 [ 53.041079][ T1678] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.046903][ T1678] ? hashtab_init+0xdb/0x1f0 [ 53.051527][ T1678] ___kmalloc_large_node+0x81/0x220 [ 53.056790][ T1678] ? hashtab_init+0xdb/0x1f0 [ 53.061417][ T1678] __kmalloc_large_node_noprof+0x1e/0xe0 [ 53.067104][ T1678] ? hashtab_init+0xdb/0x1f0 [ 53.071733][ T1678] __kmalloc_noprof+0x336/0x530 [ 53.076807][ T1678] ? kasan_save_alloc_info+0x40/0x50 [ 53.082168][ T1678] hashtab_init+0xdb/0x1f0 [ 53.086671][ T1678] ? class_read+0x162/0x8a0 [ 53.091217][ T1678] symtab_init+0x44/0x70 [ 53.095510][ T1678] class_read+0x1df/0x8a0 [ 53.099891][ T1678] ? hashtab_init+0xdb/0x1f0 [ 53.104531][ T1678] ? __cfi_class_read+0x10/0x10 [ 53.109421][ T1678] ? hashtab_init+0x105/0x1f0 [ 53.114145][ T1678] policydb_read+0xaa8/0x28c0 [ 53.118856][ T1678] ? __kasan_kmalloc+0x96/0xb0 [ 53.123677][ T1678] ? __cfi_policydb_read+0x10/0x10 [ 53.128817][ T1678] ? security_load_policy+0x128/0x12f0 [ 53.134324][ T1678] security_load_policy+0x162/0x12f0 [ 53.139641][ T1678] ? avc_has_perm_noaudit+0x286/0x360 [ 53.145079][ T1678] ? _raw_spin_unlock+0x45/0x60 [ 53.149972][ T1678] ? __check_object_size+0x50a/0x810 [ 53.155317][ T1678] ? __cfi_security_load_policy+0x10/0x10 [ 53.161277][ T1678] ? __kasan_check_write+0x18/0x20 [ 53.166472][ T1678] sel_write_load+0x298/0x5e0 [ 53.171216][ T1678] ? futex_wait+0x29a/0x7a0 [ 53.173659][ T64] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.175772][ T1678] ? __cfi_sel_write_load+0x10/0x10 [ 53.188531][ T1678] ? __cfi_futex_wait+0x10/0x10 [ 53.193424][ T1678] ? bpf_lsm_file_permission+0xd/0x20 [ 53.198888][ T1678] ? __cfi_sel_write_load+0x10/0x10 [ 53.204156][ T1678] vfs_write+0x3c0/0xf30 [ 53.208430][ T1678] ? __cfi_vfs_write+0x10/0x10 [ 53.213292][ T1678] ? __kasan_check_write+0x18/0x20 [ 53.218478][ T1678] ? mutex_lock+0x92/0x1c0 [ 53.222942][ T1678] ? __cfi_mutex_lock+0x10/0x10 [ 53.227867][ T1678] ? __fget_files+0x2c5/0x340 [ 53.232677][ T1678] ksys_write+0x141/0x250 [ 53.237065][ T1678] ? __cfi_ksys_write+0x10/0x10 [ 53.241978][ T1678] ? __kasan_check_write+0x18/0x20 [ 53.247156][ T1678] ? fpregs_restore_userregs+0x11d/0x260 [ 53.252823][ T1678] __x64_sys_write+0x7f/0x90 [ 53.257480][ T1678] x64_sys_call+0x271c/0x2ee0 [ 53.262220][ T1678] do_syscall_64+0x58/0xf0 [ 53.266701][ T1678] ? clear_bhb_loop+0x50/0xa0 [ 53.271421][ T1678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.277387][ T1678] RIP: 0033:0x7f92e498eec9 [ 53.281926][ T1678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.301771][ T1678] RSP: 002b:00007f92e5779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.310616][ T1678] RAX: ffffffffffffffda RBX: 00007f92e4be5fa0 RCX: 00007f92e498eec9 [ 53.318651][ T1678] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000007 [ 53.326719][ T1678] RBP: 00007f92e4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 53.334774][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.342786][ T1678] R13: 00007f92e4be6038 R14: 00007f92e4be5fa0 R15: 00007ffcfa10e7e8 [ 53.343583][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 53.350830][ T1678] [ 53.358094][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.359015][ T1678] ---[ end trace 0000000000000000 ]--- [ 53.364104][ T1678] SELinux: failed to load policy [ 53.369024][ T64] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.386299][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.396420][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.408354][ T64] usb 1-1: string descriptor 0 read error: -22 [ 53.414634][ T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.423767][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.439641][ T64] usb 1-1: 0:2 : does not exist [ 53.645295][ T45] usb 1-1: USB disconnect, device number 10