last executing test programs: 27.529831004s ago: executing program 2 (id=2234): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (rerun: 64) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x16, r2}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r2}, 0x14) (async) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) (async, rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 26.911211247s ago: executing program 2 (id=2250): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x3}, 0x4ce0}], 0x1, 0x20, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) dup3(r2, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x1, 0x4000005) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 26.903045258s ago: executing program 2 (id=2251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x2e) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000040)=0x80000003, 0x4) listen(r3, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x24) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0x6, 0x5, 0x36, 0xe, 0x9, 0xb, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x40000000000005, 0x7, 0x5, 0x4, 0x0, 0x20000000, 0xf2, 0x9, 0x8, 0x5, 0x2e4, 0x5, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) poll(&(0x7f0000000100)=[{r7, 0x4}, {r4, 0x1010}, {r3, 0xc040}, {r6, 0x1a0}], 0x4, 0x9) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r8, &(0x7f0000001c80)="b12a42ebda0a", 0x6) 26.796691228s ago: executing program 2 (id=2257): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)="3ba89b5705167f13fbfe66815bf33fc62296a46953", 0x15}], 0x1}}], 0x1, 0x4000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="540000003300000101000000fbdbdf2542004980a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea440072699e810823386640dc10600d481d35abd91a377483c3fd15420000"], 0x54}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="540000003300000101000000fbdbdf2542004980a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea440072699e810823386640dc10600d481d35abd91a377483c3fd15420000"], 0x54}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x10000, 0x50, 0x25}, 0x18) mkdirat(r2, &(0x7f00000005c0)='./file1\x00', 0x280) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000318000/0x1000)=nil, &(0x7f00004c4000/0x4000)=nil, 0x5a6cd6ee, &(0x7f0000000080)=[{0x1ff, 0x31}], 0x1, 0x1, 0x4, 0x0, 0x2, 0x42}) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000318000/0x1000)=nil, &(0x7f00004c4000/0x4000)=nil, 0x5a6cd6ee, &(0x7f0000000080)=[{0x1ff, 0x31}], 0x1, 0x1, 0x4, 0x0, 0x2, 0x42}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x48, 0x6e}) link(&(0x7f0000000300)='./file1/file0/file0\x00', &(0x7f0000000680)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x200000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x200000002}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 26.775888179s ago: executing program 2 (id=2258): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x6, 0x5, 0x1c, 0x9, "b103aaac018cdaf9b4461d4aa95946af755da304878016243a7bd7ff0300004d8327008d80d2c8d52695a5105cff7f0000610a0000000000000000000800", "ec4e976b008000008f080043f67f41be0ab003136e00", [0xfffffffffffffc00, 0x3]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r5, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000400)=0xffffff41, 0x4) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x40, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x2, 0x40000e, 0x5, 0x1, 0x7}, 0x31, [0x7, 0x8, 0x0, 0x2, 0x8, 0x3466, 0x7, 0x40, 0x50, 0x8, 0xc5ec, 0x7, 0x7, 0x401, 0x26d, 0x88, 0x99, 0x40, 0x0, 0x1, 0x1ff, 0x4f2a, 0x8, 0x2, 0x7, 0x4, 0x4, 0x2, 0x7ff, 0x4, 0xe9ac, 0x6, 0x31, 0x0, 0x877, 0x6, 0x3, 0x9, 0x7f, 0x5, 0x0, 0x1000, 0x0, 0x802, 0xb27, 0xb5, 0xffffffff, 0x3, 0xff, 0xe0, 0xfffffc01, 0x84b, 0x5, 0x7f, 0x0, 0xc, 0xfffffe01, 0x8, 0xe0000000, 0x9, 0x7, 0xff, 0x21f8, 0x3, 0x4, 0xcf, 0x5, 0xff, 0x0, 0x2, 0xa799, 0x5, 0x4, 0x5, 0x40, 0x800, 0x8, 0x1, 0x6, 0x5, 0x0, 0x7fff, 0xd, 0x8001, 0xfffffffd, 0x8, 0x7, 0x5, 0x5, 0x46f, 0xfffffff7, 0x9d, 0x8, 0x94, 0x0, 0x4, 0x7, 0xff, 0x5, 0x8, 0x1, 0x7, 0x89, 0x8, 0x51, 0x4, 0x5, 0x1, 0x1, 0x89, 0x6, 0x3, 0x10000, 0x4, 0x2, 0x4, 0xf45, 0x853d, 0x2b, 0x80000000, 0x593f, 0xffff, 0x5, 0x8, 0x9, 0x2, 0xfffff001, 0x9, 0x9, 0x3, 0x0, 0x40, 0xff000000, 0x1, 0x0, 0x6, 0xffff, 0xfffffff3, 0x800, 0x9, 0x3, 0x8, 0x3, 0x8, 0x2, 0x7, 0x80, 0x100, 0x5, 0x3, 0x3, 0xb, 0x78800000, 0x401, 0xa8c, 0xd4c, 0x1b, 0x0, 0x3, 0x1, 0xaa47, 0x9, 0x0, 0x97, 0xb9f4, 0x1, 0x200, 0xf, 0x101, 0x0, 0x8000, 0x24, 0x6d5, 0x0, 0x1, 0x7, 0x401, 0x0, 0x200, 0x6, 0xff, 0x4, 0x7, 0x7, 0x4, 0x2, 0x7, 0x9, 0x5, 0x4, 0x1, 0x1, 0xd, 0xff, 0x6, 0xffffff81, 0x0, 0x1, 0x540, 0x7, 0x9, 0x5, 0x1, 0xf, 0x5, 0xd3, 0xfff, 0xfffffff8, 0x40, 0x8, 0x6, 0x6, 0xd, 0x2, 0x3, 0x4e34, 0x401000, 0x9c, 0x1, 0x8001, 0xc, 0x7000, 0x9, 0x1, 0x9, 0xe7, 0x3, 0xe, 0x7f, 0x9ebf, 0x9, 0x2, 0x0, 0x3, 0x0, 0x5, 0x8, 0x0, 0xe8, 0x3, 0xb7b9, 0x3, 0xf90a0cf, 0x0, 0x9, 0x3, 0x8000, 0x2, 0x5, 0x3, 0xd, 0x2, 0x0, 0x100, 0xc, 0x1f1, 0x40, 0x7f, 0x81, 0x6, 0x4, 0xfffffff2, 0x7, 0x9, 0xfff, 0x5, 0xf, 0x2, 0xa5, 0x80000000, 0x2, 0xf55, 0x54, 0x9, 0x6, 0x9, 0x7fff, 0x5, 0xf, 0x2b4e1537, 0xfff, 0x8000, 0x7, 0x101, 0x2, 0xfff, 0x200, 0x400, 0x8, 0x6, 0x36286857, 0xc, 0x69b9, 0xb73b, 0x6d385bde, 0x4000, 0x7, 0x4, 0x1, 0xe3f, 0x401000, 0x400014, 0x8c69, 0x2, 0xff, 0x9, 0x7fffffff, 0x3ff, 0xe542, 0xe, 0x8000, 0x2, 0x6, 0xd, 0x5, 0x2, 0x100, 0x5, 0x8, 0x5, 0xd, 0x9, 0x5, 0xfffffff4, 0x1, 0xfffffffe, 0x2, 0xd06c, 0x8, 0xfffffffd, 0x1, 0x7, 0x1, 0x5, 0x4, 0xb6, 0x0, 0x3, 0x1000, 0x7, 0xffff, 0x2, 0x1, 0x80, 0x5ec, 0x0, 0x3fd, 0x4, 0x5, 0xba73564d, 0x3, 0x35f, 0x10, 0x800, 0xffff, 0x7, 0x8, 0x0, 0x81, 0x7, 0xedb, 0x5, 0x1, 0x3, 0x1301, 0x4, 0xf, 0x7, 0x7fffffff, 0x6, 0x8000, 0xd, 0x4, 0x5, 0x10000, 0x2, 0xfffff845, 0x7, 0x3, 0x8, 0x4, 0x9, 0x1000, 0x3, 0xffa, 0x1, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8, 0x5, 0x1, 0x7, 0x9, 0x7, 0x4, 0xb, 0x1, 0x8, 0x9, 0xfffffff5, 0x3, 0x2, 0xff, 0xc, 0x0, 0x7, 0x1, 0x6, 0x1, 0x100, 0x0, 0xae, 0xfff, 0xffffffff, 0x7, 0x7, 0x6, 0x4, 0x0, 0x7924, 0x6c49, 0x9, 0x10fff961, 0xffffffff, 0x700000, 0x7ff, 0x1, 0x1, 0x6, 0x50, 0xfffffffd, 0x22, 0x7ff, 0x7f, 0x4b, 0xaf, 0x7, 0x7fffffff, 0x4, 0x6, 0x5, 0xffff, 0xfff, 0x6, 0xd, 0x5, 0x41, 0x1000, 0x5, 0x7, 0x6, 0x6, 0xd, 0x3, 0x5, 0x401, 0x9, 0x1ff, 0x3, 0x7, 0x5, 0x400000, 0x8, 0x5, 0x1c8, 0xa, 0x9, 0x101, 0x2, 0x24, 0x3, 0x7fff, 0x1, 0x4, 0x843, 0x6, 0x1, 0x80000001, 0xa3fb, 0xde, 0x9, 0xa, 0x1, 0x4ded, 0x1, 0x2717, 0x4, 0x1, 0x8f, 0x79, 0x44, 0x5, 0x6f, 0x2, 0x200de82b, 0x7ff, 0x8764, 0x1ff, 0x4, 0x10, 0xb04, 0x10, 0x0, 0xb, 0x67e43db6, 0x2, 0x80, 0x80000000, 0x5, 0x7, 0x7, 0x40, 0x40, 0x3, 0x4, 0x10000, 0x0, 0xcb, 0x0, 0xfffffff9, 0x80000000, 0x5b20, 0x2, 0x0, 0x7, 0x10, 0xa, 0x6, 0x2, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0x7f, 0x482c, 0x6, 0x11, 0x1, 0x80000000, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8, 0x1, 0x0, 0x1f, 0x9, 0xffffffff, 0xeae, 0xfffffff8, 0xe, 0x7ff, 0x7, 0x4, 0xfffffffe, 0x6007, 0x2, 0x4, 0x7719, 0x5, 0x2, 0x5, 0x9, 0x1, 0xffffff22, 0x2, 0x9, 0x2, 0x2, 0x7, 0xa, 0x84ee, 0x2, 0xffffff76, 0x7fffffff, 0x3, 0x7, 0x600, 0xa1, 0x2, 0x1, 0x3, 0x10001, 0x9, 0x6, 0x83c, 0x73, 0x1, 0x0, 0x80, 0xfffff800, 0x81, 0x7, 0x5, 0x8001, 0xfff, 0x408, 0x3, 0x925, 0x2, 0xfffffffc, 0x8, 0x5, 0x8, 0x5, 0x2, 0x200, 0xffffffff, 0x9, 0x1, 0x800, 0x4, 0x9, 0x9, 0x2, 0x5db0, 0x4ac, 0x30000000, 0xffff, 0x5ec7, 0x5, 0x3, 0xf47c, 0x5, 0x4, 0x6, 0x4, 0x8, 0x6, 0xb4b8, 0x2, 0x9, 0xf, 0x81, 0x7, 0x4, 0x7fffffff, 0xbc, 0x2, 0x874, 0x6, 0x8, 0x7ff, 0x2, 0x10, 0x6d990895, 0x2, 0x3ffc00, 0x4, 0x0, 0x7f, 0x7, 0x7, 0x8700, 0x3, 0x2, 0x3, 0x3ff, 0x9, 0x3, 0x7, 0x8001, 0x10000, 0xa, 0x8, 0x4, 0xa3, 0x9, 0x1, 0x3, 0x828, 0x8, 0x4, 0xf, 0xfffffffd, 0x6, 0xff, 0xe, 0x7, 0x21, 0x9, 0x34054cff, 0x2, 0xcd, 0x7, 0x100, 0xbb9a, 0x4, 0x7ff, 0x2, 0x8, 0x1, 0x0, 0x2, 0x3, 0xffff0000, 0x80, 0xc0, 0x8, 0x7, 0x142, 0x0, 0x6e, 0x7, 0x6, 0x92, 0x5d8e, 0x1, 0xc60, 0x2ab37ab7, 0x1, 0x2d, 0x2, 0x80, 0x3, 0xf6, 0x3, 0x9, 0xb, 0x0, 0x3cd8ff06, 0x7, 0x6, 0x6, 0x5, 0x6, 0x9390, 0x5, 0x8, 0x7, 0x5, 0x100000, 0xe130, 0x7, 0x7, 0x8, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8, 0x40000000, 0x800, 0x80, 0x6ba4819b, 0x8, 0x8000, 0x6d3, 0x4, 0x8, 0x1, 0xf, 0x10000, 0x1f, 0x100, 0x0, 0xfffffffb, 0x2, 0xf8, 0x2, 0x3, 0x2, 0xa, 0x9, 0x7, 0x3731e312, 0x0, 0x2, 0x9, 0x2, 0x5, 0x9, 0x5, 0x1, 0xfffff000, 0x14f, 0x0, 0x5, 0x5, 0x7fffffff, 0x1, 0x6, 0xfffffffd, 0x9, 0xd, 0x3251, 0x44, 0x200, 0xfffffff1, 0x0, 0x80000000, 0x1, 0x6, 0x3, 0x7, 0x6, 0x4, 0x0, 0xd5, 0x401, 0x6, 0x7, 0x3, 0x7444, 0xe49f, 0xfffffff8, 0x8, 0x8, 0x5, 0x8, 0x6a0a, 0x40, 0xfffffff9, 0x7f, 0x81, 0x8001, 0x3, 0x2, 0x8, 0x6, 0x0, 0x5, 0x7, 0x101, 0xfffffff9, 0x3ff, 0xd, 0x7, 0xfffffffd, 0x0, 0x2, 0xa, 0x8, 0x6, 0x1c7, 0x8000, 0x4, 0xe, 0xff, 0x7, 0x8000, 0x5, 0x9, 0x6, 0x1ff, 0x4, 0x6, 0x400, 0x251a, 0x800, 0x489, 0x4, 0x8, 0x80, 0x0, 0x80, 0x1, 0x999, 0x7, 0x3, 0x22b, 0xffff, 0xa5, 0xf0, 0x7c6b00b5, 0x6, 0x4dfd40e9, 0x6, 0x9, 0x6, 0x94, 0xee4, 0x1, 0x61, 0x4, 0xf, 0x10000, 0x7, 0x2, 0x4, 0x800, 0x38, 0x144, 0x22, 0x4, 0xfa, 0x9, 0x0, 0xc10e, 0x5, 0x3, 0x1, 0x2, 0xfb19, 0x80, 0x3, 0x9, 0x6, 0xffff, 0x0, 0x209, 0x8, 0x80000000, 0x1, 0x2, 0x0, 0x7b, 0x4219, 0xffffff4f, 0xf7, 0xa, 0x6, 0x1, 0x9, 0x1, 0x1, 0x1ff, 0x9, 0x0, 0x7f, 0x7, 0x10, 0x1000, 0x8, 0x6, 0x4, 0xfffffbff, 0x6, 0x1, 0x0, 0x1, 0x1, 0xced, 0xfffffff7, 0x9, 0x7ff, 0x401, 0x5, 0x1, 0x100, 0x0, 0x5, 0xffff, 0x7, 0x100, 0x7d, 0x6c2, 0x0, 0x3, 0x9, 0x19, 0x7fff, 0xad47, 0x6, 0x8, 0x9db9, 0x6, 0x1000, 0x3ff, 0x6, 0x10000, 0x2, 0xc, 0xd, 0x3, 0x9, 0x8, 0xf, 0x5, 0x0, 0x5a8, 0x80, 0x9, 0xf, 0x40, 0xb1, 0xffffffff, 0x50, 0x8, 0x7, 0x4, 0x0, 0x19a, 0x1, 0x7, 0x6, 0x4, 0x5, 0x1, 0x2e000000, 0x1, 0x1, 0xb4, 0x3, 0x4, 0x40000000, 0x1000, 0x0, 0x800, 0x0, 0x5, 0x5e57e256, 0x5, 0x5, 0xa7000, 0x0, 0x5, 0x6, 0x7, 0x6, 0x4, 0xca, 0x1, 0x3, 0x4, 0x7, 0x9]}) 26.673521059s ago: executing program 2 (id=2259): capget(&(0x7f0000002040)={0x19980330}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x280) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 26.655632549s ago: executing program 32 (id=2259): capget(&(0x7f0000002040)={0x19980330}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x280) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 22.225022468s ago: executing program 3 (id=2315): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000004c0)={0x2c, 0x4, 0x0, 0x1000010}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB], 0x180}}, 0x0) read(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(r5, 0x0, r5) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sendmsg$inet6(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = dup(r9) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, &(0x7f0000000140)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4b86) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000001, 0x4010, r0, 0xc81b2000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 21.999668009s ago: executing program 3 (id=2321): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000080)=""/97, 0x61}], 0x2, 0x30, 0x9, 0xf) r4 = dup(r0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x5}}, 0x21) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) (async) preadv2(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000080)=""/97, 0x61}], 0x2, 0x30, 0x9, 0xf) (async) dup(r0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)={0x21, 0x3, 0x0, {0x5}}, 0x21) (async) 21.991740239s ago: executing program 3 (id=2323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e720007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001780)=""/4084, 0xff4}, {&(0x7f00000011c0)=""/212, 0xd4}], 0x2}, 0x9fd9}], 0x1, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2800000026000306"], 0x28}], 0x1}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 21.976802509s ago: executing program 3 (id=2324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80a82, 0x0) (async, rerun: 64) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) (async, rerun: 64) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000007fd) 21.965669409s ago: executing program 3 (id=2325): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="13edccb7184b55d805ddc5cfc9bd22ce868ee4428cd06277cb7d8d2da61619c2d4fed5183f9a5a2a55e116a29c2758b31c6d9d054a02a67d2e0005d897281a6f28cb89464f849802037ad27d9509457d69f238f8f533cf7174ab63033b96da0721cd8f48eb7ce35288498b6108c98611840b7301d315c298b8b43cc375fd", 0x7e}], 0x1}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) shutdown(r3, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x147050, r5, 0xca639000) 20.772166717s ago: executing program 3 (id=2332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="360f01de0f0ff7b4660f3a0e4f009a3f3e0f350f2284f30f09650f01c30f01cb66b9950800000f32", 0x28}], 0x1, 0x5, &(0x7f0000000340)=[@cstype3={0x5, 0xd}, @cr4={0x1, 0x20000}], 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) syz_io_uring_setup(0x39c3, &(0x7f0000000200)={0x0, 0x4d66, 0x20000, 0x0, 0x2}, &(0x7f0000000180), &(0x7f0000000280)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) 9.150430381s ago: executing program 0 (id=2398): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0xb, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x24000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x29, 0x0, &(0x7f0000001380)) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x200, 0x7fffff, 0xc3, 0x0, r6}, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab11328d, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r10, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x20004074}, 0x8010) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x7, 0x1, 0x6, 0x1, 0x3, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 9.146839871s ago: executing program 4 (id=2400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000000)="8892e15bcc3cad7d24902731e77fd5671bd9168bfe2c5c3fd7a232718554502dabf057a877c5ab4783f977997e8461649b77733a6ed3a893e7eeed61890fe20ccf7f357f535dc0", 0x47, r0}, 0x68) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x4155, &(0x7f0000000180)={0x0, 0x725, 0x40, 0x8001, 0x1a0}, &(0x7f0000000080), &(0x7f0000000200)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 7.527371832s ago: executing program 0 (id=2401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x400}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) 7.518804232s ago: executing program 1 (id=2402): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/24, 0x18, 0x3, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/159, 0x9f, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/75, 0x4b, 0x2, 0x15}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}}, @increfs_done={0x40106308, 0x3}], 0xf4, 0x0, &(0x7f0000000440)="ea189b2058a014f440cad8b8f039bd39b6049ca0a9f053315898275675a3d55ec8f09da22d8266b9649e36a448a3c56fdfdaafb110a400b04ee83486a87ceeba711d56778ec4e8c85ff3a5ead54aafe09cdbfed29efe821e4b4393002588a3c9df3ed2f7b62a66f407cd7ab59757ce79f0fdeba5bb7f9829f22ac831848549be05a8391349a6b0729a1a9ed272335f91afbcd59f0594016802e9ac84bd3b64d0543988df82c49c3020c8a1a03fa0d16783f4465cb1f169cfb5a25a0207fb3dde86147b8f259f4699778f0d8364cf5b24d7dc906afe7dc1ed140d7042d4016d87c3aedfefecd502c6bb2c4273c163a312e8520b7d"}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000600)) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xc) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000680)={{{0x1}}, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x2000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x3d) r8 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) setresuid(0x0, 0x0, 0xffffffffffffffff) r10 = dup(r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3d, &(0x7f0000000080)={0x2, 0xd}, 0x8) fsetxattr$trusted_overlay_upper(r10, &(0x7f0000000000), 0x0, 0xffffffee, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x900, 0x100001}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 7.511455592s ago: executing program 4 (id=2403): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0xa0000) read(r0, &(0x7f0000000240)=""/129, 0x81) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/2) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='aufs\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./cgroup/file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x3) syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0xa0000) (async) read(r0, &(0x7f0000000240)=""/129, 0x81) (async) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/2) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='aufs\x00', 0x0, 0x0) (async) lsetxattr$security_selinux(&(0x7f0000000080)='./cgroup/file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x3) (async) 5.773516263s ago: executing program 0 (id=2404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) accept(r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b43, &(0x7f0000000300)={0x0, 0xc5f8, 0x0, 0x0, 0x121}, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) unshare(0x60000600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x14, r4, 0x1, 0x4000}, 0x14}}, 0x0) mmap(&(0x7f0000802000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r2, 0x0) read(r2, &(0x7f0000000340)=""/116, 0x74) 5.772868373s ago: executing program 1 (id=2405): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.772700403s ago: executing program 4 (id=2406): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x5, 0x101080) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)=@keyring={'key_or_keyring:', r1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r5) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) cachestat(r6, &(0x7f0000000340)={0xffffffffffffffff, 0x4}, &(0x7f00000004c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x80000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@aname={'aname', 0x3d, ','}}, {@uname={'uname', 0x3d, '/dev/rtc#\x00'}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@aname={'aname', 0x3d, '!'}}, {@afid={'afid', 0x3d, 0x2}}, {@loose}], [{@audit}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, './binderfs/binder1\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@measure}, {@uid_gt={'uid>', r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/rtc#\x00'}}]}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 4.002064994s ago: executing program 0 (id=2407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) statfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) tkill(r7, 0x2) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) sendto$inet6(r9, &(0x7f0000000280)="4540b8b352776650066c0e0746d8c6daf4d06e026c85ff15efd4f388f580a538cfb7a3e2bbec36c60bb6f480fb7b44bddf03763dfbed74213027e9c8f76a321e60f931d8264b15c0faaebb615ecfa38dd6a2998f6bcb97f53b375c304fb139976a50b81c31da4816431b6445df923944b2311ceff1ba4bc0b4ef5eeb3bf8d3f086707b0c70359cd6016d893c4283004074617e14976068830d259a906ecd9b329b5f554a94096d425e36b92c41690462", 0xb0, 0x4000002, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xe, 0x0, 0x100000}, 0x20) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) r12 = fcntl$dupfd(r0, 0x406, r11) utimensat(r12, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) ptrace(0x4208, r7) 4.001833984s ago: executing program 1 (id=2408): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x317, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103"], 0x18}}, 0x4044004) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000) 4.001566464s ago: executing program 4 (id=2409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0xc, 0x0, 0x9, 0x5, 0x3, 0x14, 0x8, 0x91, 0x40, 0x4, 0x6, 0x2, 0x5}, {0x9, 0x4, 0x5, 0x0, 0x9, 0x40, 0x7, 0x3, 0x8, 0x4, 0x4, 0x2, 0x3}, {0x3855181a, 0x6, 0xc2, 0x25, 0x4, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x4, 0xfffffffffffffff7}], 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd5500fdffffff3900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000005600000119000d80180003801400030001000200e1fd0000030003003ef3090000000500020009002e0e04000000070001003b000000010064000000"], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001600)={{}, r7, 0xa, @inherit={0x80, &(0x7f0000002600)={0x1, 0x7, 0x4, 0x6, {0x20, 0x4, 0x0, 0x9ee, 0x101}, [0x8, 0x9, 0x5, 0x1, 0x6, 0x1, 0x5]}}, @devid}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x200000c1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffcf1) 3.970624805s ago: executing program 1 (id=2410): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x12}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0dcc78e81757b99abbb3a67a44e97134a3dd92832ead2d77"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x3) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x4, 0x29}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r3, 0x0, r2, 0x0, 0x25a5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x5) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000068001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x0) ioctl$EVIOCSABS0(r9, 0x401845c0, 0x0) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r10, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f00000003c0)=""/17) ftruncate(r10, 0x3) write(r1, &(0x7f0000000400)="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", 0xc01) 2.064731227s ago: executing program 0 (id=2411): io_setup(0x2adf, &(0x7f0000000180)=0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x141}], 0x1, 0x4dad) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000c5010000000000"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'rdma.current\x00'}, {0x20, '#! '}, {0x20, '{ -'}, {}]}, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) open(0x0, 0xe0042, 0x120) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x89727a31546dcc47, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setpgid(r8, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r9, 0x0}]) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2.064452537s ago: executing program 1 (id=2412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x2c0d02, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.064177537s ago: executing program 4 (id=2413): keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000440)={0x0, 0x8000, 0x1000013}}) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000440)={0x0, 0x8000, 0x1000013}}) (async) 1.60465ms ago: executing program 0 (id=2414): mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x10000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 180.12µs ago: executing program 1 (id=2415): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES32], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2074) 0s ago: executing program 4 (id=2416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0xfffffffe, 0x9, 0xb587, 0x2, 0x4, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 21.420765][ T36] audit: type=1400 audit(1762213073.080:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.422094][ T282] cgroup: Unknown subsys name 'net' [ 21.443527][ T36] audit: type=1400 audit(1762213073.080:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.470769][ T36] audit: type=1400 audit(1762213073.110:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.471500][ T282] cgroup: Unknown subsys name 'devices' [ 21.612440][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.618045][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.753248][ T36] audit: type=1400 audit(1762213073.410:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.776583][ T36] audit: type=1400 audit(1762213073.410:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.786825][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.801538][ T36] audit: type=1400 audit(1762213073.410:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.833075][ T36] audit: type=1400 audit(1762213073.460:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.858646][ T36] audit: type=1400 audit(1762213073.460:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.887948][ T36] audit: type=1400 audit(1762213073.550:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.913495][ T36] audit: type=1400 audit(1762213073.550:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.913770][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.730402][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.737536][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.744658][ T290] bridge_slave_0: entered allmulticast mode [ 22.751052][ T290] bridge_slave_0: entered promiscuous mode [ 22.758895][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.765975][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.773081][ T290] bridge_slave_1: entered allmulticast mode [ 22.779251][ T290] bridge_slave_1: entered promiscuous mode [ 22.810783][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.817825][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.825150][ T292] bridge_slave_0: entered allmulticast mode [ 22.831428][ T292] bridge_slave_0: entered promiscuous mode [ 22.848052][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.855425][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.862637][ T292] bridge_slave_1: entered allmulticast mode [ 22.868819][ T292] bridge_slave_1: entered promiscuous mode [ 22.876259][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.883304][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.890347][ T289] bridge_slave_0: entered allmulticast mode [ 22.896637][ T289] bridge_slave_0: entered promiscuous mode [ 22.902961][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.909986][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.917086][ T289] bridge_slave_1: entered allmulticast mode [ 22.923315][ T289] bridge_slave_1: entered promiscuous mode [ 22.950846][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.957892][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.965086][ T291] bridge_slave_0: entered allmulticast mode [ 22.971335][ T291] bridge_slave_0: entered promiscuous mode [ 22.977633][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.984687][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.991750][ T291] bridge_slave_1: entered allmulticast mode [ 22.998028][ T291] bridge_slave_1: entered promiscuous mode [ 23.138798][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.145949][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.153228][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.160246][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.170487][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.177549][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.184837][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191893][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.220748][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.227789][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.235066][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.242095][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.271341][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.278391][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.285688][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.292741][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.303742][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.311059][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.318288][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.325725][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.333091][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.340352][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.347571][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.354823][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.374040][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.381184][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.388764][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.395826][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.419620][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.426780][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449434][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.456477][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.468965][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.476108][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.490432][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.497498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.518780][ T289] veth0_vlan: entered promiscuous mode [ 23.530216][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.537276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.545396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.552449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.569229][ T290] veth0_vlan: entered promiscuous mode [ 23.580966][ T289] veth1_macvtap: entered promiscuous mode [ 23.597658][ T292] veth0_vlan: entered promiscuous mode [ 23.622045][ T290] veth1_macvtap: entered promiscuous mode [ 23.637981][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.639535][ T292] veth1_macvtap: entered promiscuous mode [ 23.668752][ T291] veth0_vlan: entered promiscuous mode [ 23.699829][ T291] veth1_macvtap: entered promiscuous mode [ 23.774570][ T331] overlayfs: overlapping lowerdir path [ 23.860004][ T336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.885527][ T346] loop2: detected capacity change from 0 to 8388607 [ 23.902015][ T332] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 23.913969][ T336] bridge0: entered allmulticast mode [ 23.962327][ T344] netlink: 'syz.0.5': attribute type 4 has an invalid length. [ 23.969955][ T344] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5'. [ 23.983313][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.102575][ T368] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 24.170714][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.253627][ T377] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 24.330644][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 24.370923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.387364][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 24.406585][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.427453][ T9] usb 3-1: config 0 descriptor?? [ 24.507199][ T389] rust_binder: Error while translating object. [ 24.507257][ T389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.525318][ T389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 24.890239][ T397] rust_binder: Error while translating object. [ 24.909536][ T397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.919590][ T397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 24.973889][ T404] rust_binder: Error while translating object. [ 24.983139][ T404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 24.990078][ T404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:16 [ 25.078832][ T419] binder: Bad value for 'max' [ 25.120611][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.148697][ T423] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 25.156424][ T423] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.29'. [ 25.196996][ T426] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 25.197016][ T426] rust_binder: Error while translating object. [ 25.207810][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.214214][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 25.262996][ T432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.272387][ T432] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 25.278922][ T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 25.280623][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 25.287370][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:29 [ 25.298618][ T10] usb 4-1: config 206 has an invalid interface number: 251 but max is 1 [ 25.321556][ T10] usb 4-1: config 206 has an invalid interface number: 3 but max is 1 [ 25.329794][ T10] usb 4-1: config 206 has no interface number 0 [ 25.336560][ T10] usb 4-1: config 206 has no interface number 1 [ 25.346330][ T10] usb 4-1: config 206 interface 251 altsetting 128 endpoint 0x3 has invalid maxpacket 15320, setting to 64 [ 25.362183][ T10] usb 4-1: config 206 interface 3 altsetting 15 has a duplicate endpoint with address 0x3, skipping [ 25.374295][ T10] usb 4-1: config 206 interface 3 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 25.385428][ T10] usb 4-1: config 206 interface 3 altsetting 15 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 25.399429][ T10] usb 4-1: config 206 interface 3 altsetting 15 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 25.410494][ T10] usb 4-1: config 206 interface 3 altsetting 15 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 25.422194][ T10] usb 4-1: config 206 interface 251 has no altsetting 0 [ 25.429170][ T10] usb 4-1: config 206 interface 3 has no altsetting 0 [ 25.437901][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=b1.9a [ 25.447139][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.455606][ T10] usb 4-1: Manufacturer: 샇人袖켘솲㊄ꭖ奰嬯蕤뫬統䀑芄Ⱕ㵢웫鬘烱蟻椵ä•äŠ°ë¤©é¯¬ç¨ªç¥î¼­è¿™á˜—굊놯å·æ»âœ’풇顉铳黈ï¥íŠƒïšî•‰å«¥è¡™å«¬é‰¢ã­²âž¸æœµì¹œà² î¢»á°“ꮀ鹵㱹컜嫓᚛ᾪ㊖꽛ゥለ㰅ᎅâ³ë ¡í’“න镕┘휀噄⮈è®îœæº±î¼¦â¸ç‘鱻ꟈ쮊鞣쬰ꄮ兖㺒룿ɩ낟ੋ䪕⮞ﶚ溧ꕔ⌖⟉骬갣쇻栄斴괶ﬞíŸå¡—鹆 [ 25.491828][ T10] usb 4-1: SerialNumber: à ¾ [ 25.624116][ T450] ======================================================= [ 25.624116][ T450] WARNING: The mand mount option has been deprecated and [ 25.624116][ T450] and is ignored by this kernel. Remove the mand [ 25.624116][ T450] option from the mount to silence this warning. [ 25.624116][ T450] ======================================================= [ 25.659556][ T450] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 25.721326][ T10] usb 4-1: USB disconnect, device number 2 [ 25.761755][ T464] syz.0.39 (464): attempted to duplicate a private mapping with mremap. This is not supported. [ 25.789917][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 25.910920][ T471] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 26.157454][ T493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 26.210577][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.302637][ T499] rust_binder: 35: no such ref 1 [ 26.380546][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 26.389570][ T65] usb 1-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.400828][ T65] usb 1-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.413966][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.420885][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 26.432416][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.442650][ T65] usb 1-1: config 0 descriptor?? [ 26.560575][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.710577][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.760613][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.850543][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.859084][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.869830][ T65] logitech-djreceiver 0003:046D:C513.0001: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 26.911648][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.922625][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.932445][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.945388][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.955013][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.962546][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.963434][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 26.977349][ T10] usb 4-1: config 0 descriptor?? [ 26.992260][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.002346][ T9] usb 3-1: USB disconnect, device number 2 [ 27.198851][ T36] kauditd_printk_skb: 183 callbacks suppressed [ 27.198868][ T36] audit: type=1400 audit(1762213078.850:257): avc: denied { nlmsg_write } for pid=528 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.225420][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.244160][ T36] audit: type=1400 audit(1762213078.900:258): avc: denied { map } for pid=533 comm="syz.2.61" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.267763][ T36] audit: type=1400 audit(1762213078.900:259): avc: denied { create } for pid=533 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 27.288217][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.297974][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.306711][ T477] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 27.309986][ T9] usb 1-1: USB disconnect, device number 2 [ 27.324419][ T36] audit: type=1400 audit(1762213078.900:260): avc: denied { sys_admin } for pid=533 comm="syz.2.61" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 27.348591][ T36] audit: type=1400 audit(1762213078.920:261): avc: denied { watch watch_reads } for pid=533 comm="syz.2.61" path="/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.370590][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.412995][ T36] audit: type=1400 audit(1762213079.070:262): avc: denied { sqpoll } for pid=538 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.433089][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.441672][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.451686][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.459222][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.466989][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.474575][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.482175][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.489660][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.497355][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.504872][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.512448][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.519838][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.527355][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.534826][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.542580][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.549986][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.557919][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 27.565548][ T10] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 27.575656][ T10] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 27.610563][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.657466][ T36] audit: type=1400 audit(1762213079.310:263): avc: denied { create } for pid=518 comm="syz.3.58" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.663158][ T519] pim6reg1: entered promiscuous mode [ 27.683443][ T519] pim6reg1: entered allmulticast mode [ 27.692070][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.700740][ T36] audit: type=1400 audit(1762213079.310:264): avc: denied { mounton } for pid=518 comm="syz.3.58" path="/22/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.701998][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.731470][ T45] usb usb2-port1: attempt power cycle [ 27.740955][ T36] audit: type=1400 audit(1762213079.310:265): avc: denied { write } for pid=518 comm="syz.3.58" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.761637][ T36] audit: type=1400 audit(1762213079.310:266): avc: denied { open } for pid=518 comm="syz.3.58" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.821944][ T31] usb 4-1: USB disconnect, device number 3 [ 28.070567][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 28.080575][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.091659][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.218381][ T551] overlayfs: failed to clone lowerpath [ 28.224460][ T551] overlay: Unknown parameter 'subj_type' [ 28.224971][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.236374][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 28.242633][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.253702][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.263714][ T65] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 28.272801][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.281741][ T65] usb 1-1: config 0 descriptor?? [ 28.480576][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 28.501650][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.641534][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.660570][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 28.694813][ T65] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 28.750962][ T45] usb usb2-port1: unable to enumerate USB device [ 28.811645][ T9] usb 4-1: config 4 has an invalid interface number: 168 but max is 0 [ 28.819846][ T9] usb 4-1: config 4 has no interface number 0 [ 28.825959][ T9] usb 4-1: config 4 interface 168 has no altsetting 0 [ 28.834728][ T9] usb 4-1: New USB device found, idVendor=1652, idProduct=36cc, bcdDevice= f.69 [ 28.843837][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.851923][ T9] usb 4-1: Product: syz [ 28.856092][ T9] usb 4-1: Manufacturer: syz [ 28.860701][ T9] usb 4-1: SerialNumber: syz [ 28.953762][ T45] usb 1-1: USB disconnect, device number 3 [ 29.166935][ T578] No source specified [ 29.362422][ T586] Zero length message leads to an empty skb [ 29.436627][ T599] IPv6: NLM_F_CREATE should be specified when creating new route [ 29.485376][ T607] rust_binder: Write failure EFAULT in pid:64 [ 29.499832][ T612] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 29.507139][ T616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.515374][ T617] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 29.586616][ T9] usb 4-1: USB disconnect, device number 4 [ 29.709069][ T635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 29.719625][ T635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 29.819093][ T658] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.087605][ T673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 30.250560][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 30.401814][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.412608][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 30.424130][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 30.433964][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.448466][ T45] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 30.457551][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.465579][ T45] usb 1-1: Product: syz [ 30.469745][ T45] usb 1-1: Manufacturer: syz [ 30.474391][ T45] usb 1-1: SerialNumber: syz [ 30.479584][ T45] usb 1-1: config 0 descriptor?? [ 30.567537][ T687] capability: warning: `syz.1.111' uses 32-bit capabilities (legacy support in use) [ 30.669924][ T699] tmpfs: Unknown parameter 'nr_bloc+s' [ 30.688919][ T9] usb 1-1: USB disconnect, device number 4 [ 30.958550][ T719] tipc: Enabling of bearer rejected, media not registered [ 31.007596][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.007625][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:118 [ 31.205734][ T748] x_tables: unsorted entry at hook 1 [ 31.222454][ T748] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=748 comm=syz.2.131 [ 31.280599][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.298253][ T758] fuse: Bad value for 'user_id' [ 31.303220][ T758] fuse: Bad value for 'user_id' [ 31.312199][ T758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.320759][ T758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.429517][ T766] 9pnet_fd: Insufficient options for proto=fd [ 31.437096][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.448497][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.467500][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 31.476932][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.485950][ T31] usb 4-1: config 0 descriptor?? [ 31.550617][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 31.701514][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.712553][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.722498][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 31.731798][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.741212][ T45] usb 1-1: config 0 descriptor?? [ 31.808255][ T815] overlayfs: missing 'lowerdir' [ 31.894991][ T31] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 31.902036][ T31] lenovo 0003:17EF:6047.0004: item fetching failed at offset 3/5 [ 31.909913][ T31] lenovo 0003:17EF:6047.0004: hid_parse failed [ 31.916160][ T31] lenovo 0003:17EF:6047.0004: probe with driver lenovo failed with error -22 [ 32.095526][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 32.105368][ T736] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 32.150949][ T45] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 32.547953][ T9] usb 1-1: USB disconnect, device number 5 [ 32.851572][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 32.851587][ T36] audit: type=1400 audit(1762213084.510:303): avc: denied { setopt } for pid=836 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.876956][ T36] audit: type=1400 audit(1762213084.510:304): avc: denied { block_suspend } for pid=842 comm="syz.2.166" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.064065][ T854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.209281][ T863] rust_binder: Write failure EINVAL in pid:99 [ 33.243772][ T36] audit: type=1400 audit(1762213084.900:305): avc: denied { mounton } for pid=866 comm="syz.0.174" path="/syzcgroup/unified/syz0" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 33.285320][ T869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 33.326012][ T880] binder: Unknown parameter 'ÿ' [ 33.346962][ T36] audit: type=1400 audit(1762213085.000:306): avc: denied { accept } for pid=881 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.460279][ T36] audit: type=1326 audit(1762213085.110:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.483573][ T36] audit: type=1326 audit(1762213085.110:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.506875][ T36] audit: type=1326 audit(1762213085.110:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.530121][ T36] audit: type=1326 audit(1762213085.110:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.553346][ T36] audit: type=1326 audit(1762213085.110:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.576619][ T36] audit: type=1326 audit(1762213085.110:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 33.614025][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.713954][ T903] netlink: 260 bytes leftover after parsing attributes in process `syz.2.188'. [ 33.744878][ T909] rust_binder: Read failure Err(EAGAIN) in pid:137 [ 33.776115][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 33.778111][ T914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.787520][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 33.799326][ T914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.802345][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.826317][ T10] usb 1-1: Product: syz [ 33.829779][ T914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.830733][ T10] usb 1-1: Manufacturer: syz [ 33.845345][ T10] usb 1-1: SerialNumber: syz [ 33.848770][ T919] fuseblk: Unknown parameter 'Äç¡4ãÀ¬SêÌcG‘æìø’ªð¼ØŽao¥dË[»Ø‡ “' [ 33.853702][ T10] usb 1-1: config 0 descriptor?? [ 33.877480][ T921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.973731][ T934] netlink: 140 bytes leftover after parsing attributes in process `syz.1.202'. [ 33.982801][ T934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 34.272017][ T882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.280741][ T882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.332057][ T10] usb 1-1: USB disconnect, device number 6 [ 34.356716][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.365333][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.708357][ T981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 34.748985][ T987] netlink: 188 bytes leftover after parsing attributes in process `syz.2.221'. [ 34.816528][ T1001] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 34.824224][ T1001] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.226'. [ 34.885956][ T1009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.886222][ T1009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.892743][ T1009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:146 [ 34.915018][ T1012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.924709][ T1012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.954414][ T1019] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 35.401751][ T1071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.421500][ T1071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.646956][ T1083] rust_binder: 173: no such ref 1 [ 35.660992][ T1079] rust_binder: 173: no such ref 1 [ 35.910960][ T1097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.930680][ T1097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.252475][ T1103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:146 [ 36.721642][ T1131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.957453][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.014037][ T1168] 9pnet_fd: Insufficient options for proto=fd [ 37.040040][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 37.051196][ T1172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 37.224176][ T1207] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 37.231969][ T1207] netlink: 17 bytes leftover after parsing attributes in process `syz.2.291'. [ 37.646821][ T1238] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 37.916848][ T1248] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 37.921842][ T1250] overlayfs: missing 'lowerdir' [ 37.925098][ T1248] rust_binder: Write failure EINVAL in pid:152 [ 37.953359][ T1253] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 37.957043][ T36] kauditd_printk_skb: 412 callbacks suppressed [ 37.957059][ T36] audit: type=1400 audit(1762213089.610:725): avc: denied { append } for pid=1254 comm="syz.3.307" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.959587][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 38.082090][ T36] audit: type=1400 audit(1762213089.740:726): avc: denied { map } for pid=1256 comm="syz.0.308" path="socket:[7074]" dev="sockfs" ino=7074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.228588][ T36] audit: type=1400 audit(1762213089.880:727): avc: denied { read append } for pid=1281 comm="syz.0.314" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.251910][ T36] audit: type=1400 audit(1762213089.880:728): avc: denied { open } for pid=1281 comm="syz.0.314" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.275129][ T36] audit: type=1400 audit(1762213089.910:729): avc: denied { ioctl } for pid=1281 comm="syz.0.314" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.303490][ T36] audit: type=1400 audit(1762213089.960:730): avc: denied { map } for pid=1283 comm="syz.0.315" path="socket:[7152]" dev="sockfs" ino=7152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.326857][ T36] audit: type=1400 audit(1762213089.960:731): avc: denied { accept } for pid=1283 comm="syz.0.315" path="socket:[7152]" dev="sockfs" ino=7152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.357848][ T1290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 38.367993][ T36] audit: type=1400 audit(1762213090.020:732): avc: denied { getopt } for pid=1289 comm="syz.0.317" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.509873][ T1298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.319'. [ 38.565047][ T36] audit: type=1400 audit(1762213090.220:733): avc: denied { setattr } for pid=1305 comm="syz.1.323" name="" dev="pipefs" ino=7973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 38.587016][ T36] audit: type=1400 audit(1762213090.220:734): avc: denied { bind } for pid=1305 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.791587][ T1323] overlayfs: failed to clone upperpath [ 38.804437][ T1325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.805994][ T1325] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 38.893853][ T1329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.904189][ T1329] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 39.323938][ T1342] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 39.530571][ T521] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.660619][ T521] usb 1-1: device descriptor read/64, error -71 [ 39.840466][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.840664][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.860722][ T1380] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 39.867188][ T1380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.875211][ T1380] rust_binder: Read failure Err(EFAULT) in pid:233 [ 39.900568][ T521] usb 1-1: device descriptor read/64, error -71 [ 39.974130][ T1397] netlink: 188 bytes leftover after parsing attributes in process `syz.1.359'. [ 40.089118][ T1412] rust_binder: Write failure EFAULT in pid:246 [ 40.150574][ T521] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.241897][ T1422] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 40.249087][ T1422] rust_binder: Write failure EINVAL in pid:260 [ 40.262592][ T1425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 40.290562][ T521] usb 1-1: device descriptor read/64, error -71 [ 40.483775][ T1433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.485393][ T1434] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 40.510157][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.527452][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.540550][ T521] usb 1-1: device descriptor read/64, error -71 [ 40.660636][ T521] usb usb1-port1: attempt power cycle [ 40.730074][ T1468] netlink: 'syz.1.383': attribute type 29 has an invalid length. [ 40.737980][ T1468] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.383'. [ 40.836167][ T1487] veth0: entered promiscuous mode [ 40.841777][ T1486] veth0: left promiscuous mode [ 41.000602][ T521] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.021503][ T521] usb 1-1: device descriptor read/8, error -71 [ 41.053330][ T1510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.400'. [ 41.064582][ T1510] syzkaller0: entered allmulticast mode [ 41.070248][ T1510] syzkaller0: entered promiscuous mode [ 41.076803][ T1510] syzkaller0 (unregistering): left promiscuous mode [ 41.083426][ T1510] syzkaller0 (unregistering): left allmulticast mode [ 41.126927][ T1511] rust_binder: Write failure EINVAL in pid:276 [ 41.156111][ T521] usb 1-1: device descriptor read/8, error -71 [ 41.400577][ T521] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.421547][ T521] usb 1-1: device descriptor read/8, error -71 [ 41.491660][ T1518] overlayfs: failed to clone lowerpath [ 41.553903][ T521] usb 1-1: device descriptor read/8, error -71 [ 41.553993][ T1526] overlayfs: failed to clone lowerpath [ 41.662347][ T1540] 9pnet_fd: Insufficient options for proto=fd [ 41.670745][ T521] usb usb1-port1: unable to enumerate USB device [ 42.192201][ T1583] tipc: Started in network mode [ 42.197210][ T1583] tipc: Node identity 5226d6f963f, cluster identity 4711 [ 42.204336][ T1583] tipc: Enabled bearer , priority 0 [ 42.244957][ T1582] tipc: Disabling bearer [ 42.317353][ T1599] GUP no longer grows the stack in syz.1.434 (1599): 200000005000-200000008000 (200000004000) [ 42.327748][ T1599] CPU: 1 UID: 0 PID: 1599 Comm: syz.1.434 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 42.327777][ T1599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.327796][ T1599] Call Trace: [ 42.327804][ T1599] [ 42.327811][ T1599] __dump_stack+0x21/0x30 [ 42.327845][ T1599] dump_stack_lvl+0x10c/0x190 [ 42.327872][ T1599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.327898][ T1599] ? futex_lock_pi_atomic+0xdd/0xc70 [ 42.327923][ T1599] dump_stack+0x19/0x20 [ 42.327948][ T1599] fixup_user_fault+0x63d/0x6d0 [ 42.327973][ T1599] fault_in_user_writeable+0x76/0xe0 [ 42.327992][ T1599] futex_lock_pi+0x258/0xa10 [ 42.328013][ T1599] ? futex_unqueue+0x136/0x160 [ 42.328033][ T1599] ? __cfi_futex_lock_pi+0x10/0x10 [ 42.328056][ T1599] ? __cfi_futex_wake_mark+0x10/0x10 [ 42.328081][ T1599] ? futex_setup_timer+0xb4/0xd0 [ 42.328100][ T1599] ? __cfi_futex_wake_mark+0x10/0x10 [ 42.328125][ T1599] ? mas_find+0x358/0x5f0 [ 42.328145][ T1599] ? __kasan_check_write+0x18/0x20 [ 42.328175][ T1599] do_futex+0x25c/0x500 [ 42.328194][ T1599] ? __cfi_do_futex+0x10/0x10 [ 42.328226][ T1599] ? __vm_munmap+0x2c7/0x370 [ 42.328244][ T1599] __se_sys_futex+0x28f/0x300 [ 42.328264][ T1599] ? __x64_sys_futex+0x110/0x110 [ 42.328284][ T1599] ? __kasan_check_write+0x18/0x20 [ 42.328313][ T1599] __x64_sys_futex+0xe9/0x110 [ 42.328332][ T1599] x64_sys_call+0x227f/0x2ee0 [ 42.328359][ T1599] do_syscall_64+0x58/0xf0 [ 42.328383][ T1599] ? clear_bhb_loop+0x50/0xa0 [ 42.328404][ T1599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.328423][ T1599] RIP: 0033:0x7f34f4f8f6c9 [ 42.328443][ T1599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.328459][ T1599] RSP: 002b:00007f34f39e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.328482][ T1599] RAX: ffffffffffffffda RBX: 00007f34f51e5fa0 RCX: 00007f34f4f8f6c9 [ 42.328497][ T1599] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 42.328509][ T1599] RBP: 00007f34f5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 42.328521][ T1599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.328532][ T1599] R13: 00007f34f51e6038 R14: 00007f34f51e5fa0 R15: 00007ffee951d218 [ 42.328561][ T1599] [ 42.698125][ T1631] rust_binder: Error while translating object. [ 42.698176][ T1631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.712497][ T1631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 42.785026][ T1634] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 42.813148][ T1634] rust_binder: Error while translating object. [ 42.840641][ T1634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.857983][ T1634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 42.970122][ T1649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.970159][ T1649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:214 [ 43.000688][ T1651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.451'. [ 43.280552][ T398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.430555][ T398] usb 1-1: Using ep0 maxpacket: 8 [ 43.438543][ T398] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 43.454617][ T398] usb 1-1: config 0 has no interface number 0 [ 43.466410][ T398] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 43.475734][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.483994][ T398] usb 1-1: Product: syz [ 43.488438][ T398] usb 1-1: Manufacturer: syz [ 43.493146][ T398] usb 1-1: SerialNumber: syz [ 43.501327][ T398] usb 1-1: config 0 descriptor?? [ 43.714138][ T1687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.722745][ T1687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.734703][ T398] usb 1-1: USB disconnect, device number 12 [ 43.752668][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 43.752682][ T36] audit: type=1326 audit(1762213095.410:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.2.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc032d8f6c9 code=0x0 [ 43.847659][ T1690] rust_binder: Error in use_page_slow: ESRCH [ 43.847679][ T1690] rust_binder: use_range failure ESRCH [ 43.853716][ T1690] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 43.859207][ T1690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.867236][ T1690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:314 [ 43.888079][ T1694] netlink: 'syz.3.468': attribute type 5 has an invalid length. [ 43.904832][ T1694] netlink: 'syz.3.468': attribute type 5 has an invalid length. [ 43.912488][ T1694] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.468'. [ 43.921595][ T1695] netlink: 'syz.3.468': attribute type 5 has an invalid length. [ 43.929312][ T1695] netlink: 'syz.3.468': attribute type 5 has an invalid length. [ 43.936978][ T1695] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.468'. [ 44.042137][ T1702] cgroup: fork rejected by pids controller in /syz3 [ 44.089227][ T36] audit: type=1400 audit(1762213095.740:757): avc: denied { create } for pid=1735 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 44.110025][ T36] audit: type=1400 audit(1762213095.740:758): avc: denied { write } for pid=1735 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 44.222876][ T1751] netlink: 'syz.1.475': attribute type 4 has an invalid length. [ 44.400241][ T36] audit: type=1400 audit(1762213096.050:759): avc: denied { mounton } for pid=1761 comm="syz.0.477" path="/73/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 44.440437][ T1789] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼·¾¾Jüx“@ÖPŽòîQ[vÛ5o‹––· [ 44.459270][ T36] audit: type=1400 audit(1762213096.110:760): avc: denied { mount } for pid=1790 comm="syz.3.479" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.464236][ T1791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.481652][ T36] audit: type=1400 audit(1762213096.120:761): avc: denied { mounton } for pid=1790 comm="syz.3.479" path="/106/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.524801][ T36] audit: type=1400 audit(1762213096.120:762): avc: denied { read } for pid=1790 comm="syz.3.479" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.560396][ T36] audit: type=1400 audit(1762213096.140:763): avc: denied { open } for pid=1790 comm="syz.3.479" path="/106/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.584303][ T36] audit: type=1400 audit(1762213096.140:764): avc: denied { search } for pid=1790 comm="syz.3.479" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.613498][ T36] audit: type=1400 audit(1762213096.140:765): avc: denied { read } for pid=1790 comm="syz.3.479" name="saved_tgids" dev="tracefs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.699544][ T1811] rust_binder: Got transaction with invalid offset. [ 44.699597][ T1811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.706259][ T1811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 44.766685][ T1821] ip6gretap0: mtu less than device minimum [ 44.768571][ T1814] netlink: 104 bytes leftover after parsing attributes in process `syz.0.487'. [ 44.776502][ T1820] ip6gretap0: mtu less than device minimum [ 44.809439][ T1830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.492'. [ 44.819031][ T1831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.492'. [ 44.845085][ T1838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.494'. [ 44.906362][ T1851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.915435][ T1851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.929369][ T1851] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 45.099834][ T1875] rust_binder: Write failure EFAULT in pid:244 [ 45.140703][ T1882] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 45.430563][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.508527][ T1924] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 45.517363][ T1924] overlayfs: missing 'lowerdir' [ 45.551811][ T1931] raw_sendmsg: syz.2.528 forgot to set AF_INET. Fix it! [ 45.581546][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 45.588440][ T1935] rust_binder: 403: no such ref 1 [ 45.595069][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.610609][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.620718][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 45.629791][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.638619][ T31] usb 1-1: config 0 descriptor?? [ 45.660819][ T1940] overlayfs: failed to clone lowerpath [ 46.046248][ T31] kone 0003:1E7D:2CED.0006: item fetching failed at offset 2/5 [ 46.054011][ T31] kone 0003:1E7D:2CED.0006: parse failed [ 46.059666][ T31] kone 0003:1E7D:2CED.0006: probe with driver kone failed with error -22 [ 46.129445][ T1945] netlink: 120 bytes leftover after parsing attributes in process `syz.3.534'. [ 46.138475][ T1945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.534'. [ 46.291458][ T1958] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.300473][ T1958] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 46.309159][ T1958] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.317156][ T1958] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 46.328227][ T10] usb 1-1: USB disconnect, device number 13 [ 46.572043][ T1972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.580710][ T1972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.660137][ T1978] veth1: entered allmulticast mode [ 46.665647][ T1977] veth1: left allmulticast mode [ 46.680960][ T1980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 46.745659][ T1984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.754927][ T1984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.763191][ T1984] rust_binder: 437: no such ref 0 [ 46.768327][ T1984] rust_binder: 437: no such ref 0 [ 46.815127][ T1986] rust_binder: Error while translating object. [ 46.815156][ T1986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.821444][ T1986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 47.080562][ T65] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 47.241633][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.252650][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.262474][ T65] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 47.271601][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.286508][ T65] usb 1-1: config 0 descriptor?? [ 47.704313][ T65] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 47.711351][ T65] lenovo 0003:17EF:6047.0007: item fetching failed at offset 3/5 [ 47.719173][ T65] lenovo 0003:17EF:6047.0007: hid_parse failed [ 47.725364][ T65] lenovo 0003:17EF:6047.0007: probe with driver lenovo failed with error -22 [ 47.904442][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.912962][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.921533][ T1988] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 47.921985][ T521] usb 1-1: USB disconnect, device number 14 [ 47.960439][ T2024] netlink: 104 bytes leftover after parsing attributes in process `syz.2.561'. [ 47.970808][ T2024] bridge0: entered allmulticast mode [ 47.986733][ T2028] overlayfs: failed to clone upperpath [ 47.992599][ T2028] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 48.193912][ T2042] 9pnet_fd: Insufficient options for proto=fd [ 48.210978][ T2044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2044 comm=syz.1.570 [ 48.467387][ T2050] overlayfs: failed to clone upperpath [ 48.524885][ T2053] fuse: Bad value for 'user_id' [ 48.529783][ T2053] fuse: Bad value for 'user_id' [ 48.545366][ T2055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.574'. [ 48.589440][ T2055] bridge0: entered allmulticast mode [ 48.785953][ T2070] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 131072 [ 48.793790][ T2070] rust_binder: Write failure EINVAL in pid:262 [ 48.808686][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 48.808704][ T36] audit: type=1400 audit(1762213100.460:830): avc: denied { execute } for pid=2072 comm="syz.0.580" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.877628][ T2078] mmap: syz.2.582 (2078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.887725][ T2080] rust_binder: Got transaction with invalid offset. [ 48.889491][ T2080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.896156][ T2080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 49.123308][ T2097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.141207][ T2097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.289640][ T2127] /dev/loop0: Can't lookup blockdev [ 49.315775][ T2131] __vm_enough_memory: pid: 2131, comm: syz.1.603, bytes: 21199731810304 not enough memory for the allocation [ 49.354338][ T2134] rust_binder: Read failure Err(EAGAIN) in pid:284 [ 49.406656][ T2151] x_tables: duplicate entry at hook 2 [ 49.441985][ T2159] netlink: 'syz.2.612': attribute type 13 has an invalid length. [ 49.450118][ T2159] erspan0: refused to change device tx_queue_len [ 49.468527][ T2161] netlink: 'syz.2.613': attribute type 13 has an invalid length. [ 49.489525][ T2163] overlayfs: failed to clone lowerpath [ 49.674704][ T36] audit: type=1400 audit(1762213101.330:831): avc: denied { accept } for pid=2177 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.037567][ T2250] overlayfs: failed to clone lowerpath [ 50.043586][ T2250] overlayfs: failed to resolve 'func=BPRM_CHECK': -2 [ 50.090041][ T36] audit: type=1400 audit(1762213101.740:832): avc: denied { create } for pid=2255 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 50.116713][ T36] audit: type=1400 audit(1762213101.770:833): avc: denied { create } for pid=2257 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 50.629824][ T2275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.638368][ T2275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.650719][ T36] audit: type=1400 audit(1762213102.310:834): avc: denied { write } for pid=2274 comm="syz.3.657" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.650802][ T2275] random: crng reseeded on system resumption [ 50.673625][ T36] audit: type=1400 audit(1762213102.310:835): avc: denied { open } for pid=2274 comm="syz.3.657" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.703387][ T2276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444 [ 50.790450][ T36] audit: type=1326 audit(1762213102.440:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc032d8f6c9 code=0x7fc00000 [ 50.905225][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 51.021956][ T36] audit: type=1400 audit(1762213102.680:837): avc: denied { create } for pid=2321 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.325837][ T2345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.335063][ T2345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.383574][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.392470][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.394215][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.549952][ T2372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.550033][ T2370] rust_binder: Write failure EINVAL in pid:299 [ 51.718530][ T2388] SELinux: security policydb version 18 (MLS) not backwards compatible [ 51.728131][ T36] audit: type=1400 audit(1762213103.370:838): avc: denied { load_policy } for pid=2385 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.736956][ T2388] SELinux: failed to load policy [ 51.777049][ T36] audit: type=1400 audit(1762213103.430:839): avc: denied { connect } for pid=2397 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.796685][ T2398] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 51.796709][ T2398] rust_binder: Error while translating object. [ 51.808875][ T2398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.815072][ T2398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 51.837359][ T2404] rust_binder: Write failure EFAULT in pid:319 [ 51.895842][ T2409] kvm: kvm [2408]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 51.910751][ T2409] kvm: kvm [2408]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 51.933500][ T2409] rust_binder: Write failure EINVAL in pid:324 [ 52.119934][ T2423] kvm: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 52.134744][ T2423] kvm: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 52.145089][ T2423] kvm: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 52.156641][ T2423] kvm: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 52.165518][ T2423] kvm: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 52.176087][ T2423] kvm_intel: kvm [2422]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 52.240533][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 52.320123][ T2435] rust_binder: Error in use_page_slow: ESRCH [ 52.320141][ T2435] rust_binder: use_range failure ESRCH [ 52.326325][ T2435] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 52.331894][ T2435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.339797][ T2435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:477 [ 52.373851][ T2444] __vm_enough_memory: pid: 2444, comm: syz.3.715, bytes: 18014402804453376 not enough memory for the allocation [ 52.401915][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 52.412267][ T31] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 52.424990][ T31] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.437991][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 52.448486][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 52.460063][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.468285][ T31] usb 1-1: Product: syz [ 52.472616][ T31] usb 1-1: Manufacturer: syz [ 52.477232][ T31] usb 1-1: SerialNumber: syz [ 52.483329][ T2418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.490486][ T2418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.537415][ T2458] rust_binder: Error while translating object. [ 52.537451][ T2458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.543685][ T2458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:493 [ 52.657939][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.676735][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.702316][ T31] usb 1-1: USB disconnect, device number 15 [ 53.140556][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 53.270610][ T31] usb 1-1: device descriptor read/64, error -71 [ 53.305459][ T2466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.313498][ T2466] rust_binder: 499: no such ref 0 [ 53.445981][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.454947][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.510567][ T31] usb 1-1: device descriptor read/64, error -71 [ 53.750547][ T31] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 53.880596][ T31] usb 1-1: device descriptor read/64, error -71 [ 54.120558][ T31] usb 1-1: device descriptor read/64, error -71 [ 54.152272][ T2511] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 54.230692][ T31] usb usb1-port1: attempt power cycle [ 54.570562][ T31] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 54.591832][ T31] usb 1-1: device descriptor read/8, error -71 [ 54.721893][ T31] usb 1-1: device descriptor read/8, error -71 [ 54.960556][ T31] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 54.981571][ T31] usb 1-1: device descriptor read/8, error -71 [ 55.011032][ T2521] overlayfs: failed to clone lowerpath [ 55.033878][ T2525] tipc: Can't bind to reserved service type 0 [ 55.111068][ T31] usb 1-1: device descriptor read/8, error -71 [ 55.221087][ T31] usb usb1-port1: unable to enumerate USB device [ 55.586623][ T2552] overlay: ./file0 is not a directory [ 55.593636][ T2552] x_tables: duplicate underflow at hook 2 [ 56.002976][ T2559] rust_binder: Error while translating object. [ 56.003011][ T2559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.009341][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 56.235821][ T2577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 56.260548][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 56.278271][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 56.278286][ T36] audit: type=1400 audit(1762213107.930:845): avc: denied { read } for pid=2585 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.420573][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 56.426881][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.436750][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 56.448012][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 56.457279][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.469485][ T31] usb 1-1: config 0 descriptor?? [ 56.734863][ T2616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56317 sclass=netlink_route_socket pid=2616 comm=syz.1.771 [ 56.794778][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 56.877700][ T31] wacom 0003:056A:00B0.0008: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 56.887995][ T31] wacom 0003:056A:00B0.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.0-1/input0 [ 56.911316][ T31] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B0.0008/input/input6 [ 56.930719][ T36] audit: type=1400 audit(1762213108.590:846): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=494 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.953097][ T36] audit: type=1400 audit(1762213108.590:847): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=494 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.990823][ T36] audit: type=1400 audit(1762213115.653:848): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=494 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.020322][ T36] audit: type=1400 audit(1762213115.673:849): avc: denied { nlmsg_write } for pid=2633 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.041071][ T36] audit: type=1400 audit(1762213115.673:850): avc: denied { audit_write } for pid=2633 comm="syz.2.779" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.062087][ T36] audit: type=1107 audit(1762213115.673:851): pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 57.201391][ T10] usb 1-1: USB disconnect, device number 20 [ 57.321254][ T2641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:518 [ 57.377865][ T2650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.387150][ T2650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:527 [ 57.435202][ T2652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 57.453447][ T2653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 57.463784][ T36] audit: type=1400 audit(1762213116.123:852): avc: denied { bind } for pid=2651 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.483074][ T36] audit: type=1400 audit(1762213116.123:853): avc: denied { name_bind } for pid=2651 comm="syz.3.785" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 57.503714][ T36] audit: type=1400 audit(1762213116.123:854): avc: denied { node_bind } for pid=2651 comm="syz.3.785" saddr=fe80::aa src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 57.518525][ T2653] rust_binder: 2652 RLIMIT_NICE not set [ 57.525641][ T2653] rust_binder: inc_ref_done called when no active inc_refs [ 57.531245][ T2653] rust_binder: inc_ref_done called when no active inc_refs [ 57.592348][ T2656] rust_binder: Write failure EFAULT in pid:533 [ 57.592378][ T2657] rust_binder: Write failure EFAULT in pid:533 [ 57.774109][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 57.774137][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:545 [ 57.797516][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.815860][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.000553][ T521] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 58.151915][ T521] usb 1-1: not running at top speed; connect to a high speed hub [ 58.160328][ T521] usb 1-1: config 13 has an invalid interface number: 193 but max is 3 [ 58.168623][ T521] usb 1-1: config 13 has an invalid interface number: 87 but max is 3 [ 58.176841][ T521] usb 1-1: config 13 has an invalid interface number: 177 but max is 3 [ 58.185103][ T521] usb 1-1: config 13 has no interface number 0 [ 58.191303][ T521] usb 1-1: config 13 has no interface number 2 [ 58.197462][ T521] usb 1-1: config 13 has no interface number 3 [ 58.204537][ T521] usb 1-1: config 13 interface 177 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 58.215643][ T521] usb 1-1: config 13 interface 177 altsetting 127 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 58.227606][ T521] usb 1-1: config 13 interface 1 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 58.238663][ T521] usb 1-1: config 13 interface 193 has no altsetting 0 [ 58.245573][ T521] usb 1-1: config 13 interface 87 has no altsetting 0 [ 58.252371][ T521] usb 1-1: config 13 interface 177 has no altsetting 0 [ 58.259232][ T521] usb 1-1: config 13 interface 1 has no altsetting 0 [ 58.267519][ T521] usb 1-1: New USB device found, idVendor=2001, idProduct=331e, bcdDevice=18.bf [ 58.277560][ T521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.285604][ T521] usb 1-1: Product: syz [ 58.289785][ T521] usb 1-1: Manufacturer: ⟃꽀瀛ã»î¬ éŸ‰ê¯·ï®à²«â–»ìµ’￬綛鞫塥ã’뀬鹭历斉ê¨è”‰â“·ì—ᛘ紭뷳ₕĥ炻༖뵚ìžî ©î‹…瑋髩鯿숊밎晼姚䖥๢ë®ê³‡ï‰—Ñ«ë¬ªï­ [ 58.307536][ T521] usb 1-1: SerialNumber: syz [ 58.359959][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.368521][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.029894][ T521] usb 1-1: USB disconnect, device number 21 [ 59.050641][ T2803] rust_binder: Error in use_page_slow: ESRCH [ 59.050663][ T2803] rust_binder: use_range failure ESRCH [ 59.059280][ T2803] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 59.064981][ T2803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.073027][ T2803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:558 [ 59.087539][ T2803] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 59.105840][ T2803] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 59.156742][ T2821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.165794][ T2821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.989477][ T2883] can: request_module (can-proto-0) failed. [ 60.009144][ T2887] rust_binder: 363: no such ref 0 [ 60.025207][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 60.054604][ T2890] __vm_enough_memory: pid: 2890, comm: syz.3.870, bytes: 18014402804453376 not enough memory for the allocation [ 60.056435][ T2895] binder: Unknown parameter 'wtats' [ 60.308881][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 60.640612][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 60.800705][ T2927] tipc: Started in network mode [ 60.805735][ T2927] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 60.815181][ T2927] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 60.823462][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.831812][ T2927] tipc: Enabled bearer , priority 10 [ 60.834744][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.860889][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.880095][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 60.888496][ T31] usb 1-1: Manufacturer: syz [ 60.898783][ T31] usb 1-1: config 0 descriptor?? [ 60.908392][ T2930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.885'. [ 60.917369][ T2930] netlink: 43 bytes leftover after parsing attributes in process `syz.2.885'. [ 60.926289][ T2930] netlink: 'syz.2.885': attribute type 5 has an invalid length. [ 60.933984][ T2930] netlink: 43 bytes leftover after parsing attributes in process `syz.2.885'. [ 60.960836][ T2936] overlayfs: failed to clone upperpath [ 61.518548][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 61.528365][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.539031][ T31] usb 1-1: USB disconnect, device number 22 [ 61.555017][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 61.555032][ T36] audit: type=1400 audit(1762213120.213:870): avc: denied { create } for pid=2971 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.718310][ T36] audit: type=1400 audit(1762213120.373:871): avc: denied { append } for pid=2996 comm="syz.3.907" name="pfkey" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.951057][ T521] tipc: Node number set to 1 [ 61.968283][ T36] audit: type=1400 audit(1762213120.623:872): avc: denied { append } for pid=3018 comm="syz.3.913" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.993038][ T3019] overlayfs: conflicting options: nfs_export=on,index=off [ 62.028922][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 62.040920][ T3025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 62.061096][ T36] audit: type=1400 audit(1762213120.723:873): avc: denied { read } for pid=3026 comm="syz.1.917" path="socket:[14506]" dev="sockfs" ino=14506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.247119][ T3040] netlink: 260 bytes leftover after parsing attributes in process `syz.1.920'. [ 62.290567][ T521] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 62.451623][ T521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.462648][ T521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.472398][ T521] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 62.481589][ T521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.490432][ T521] usb 1-1: config 0 descriptor?? [ 62.619888][ T36] audit: type=1400 audit(1762213121.273:874): avc: denied { create } for pid=3074 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 62.898741][ T521] hid-generic 0003:04F3:0755.0009: item fetching failed at offset 3/5 [ 62.917022][ T521] hid-generic 0003:04F3:0755.0009: probe with driver hid-generic failed with error -22 [ 63.111545][ T3099] random: crng reseeded on system resumption [ 63.155239][ T3102] tipc: Enabling of bearer rejected, failed to enable media [ 63.178264][ T521] usb 1-1: USB disconnect, device number 23 [ 63.282284][ T36] audit: type=1400 audit(1762213121.943:875): avc: denied { map } for pid=3121 comm="syz.3.948" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.321195][ T3126] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 63.485805][ T3150] fuse: Unknown parameter 'groujÄV/ÉÊ9p€id' [ 63.701817][ T3168] rust_binder: 665: no such ref 0 [ 63.709467][ T3168] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 63.717172][ T3168] rust_binder: 665: no such ref 2 [ 63.722607][ T3168] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 63.759323][ T36] audit: type=1400 audit(1762213122.413:876): avc: denied { read } for pid=3177 comm="syz.0.969" name="file2" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.692785][ T3275] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 64.718006][ T3281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.727883][ T3281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.737655][ T3281] rust_binder: Error while translating object. [ 64.737711][ T3281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 64.744076][ T3281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:682 [ 64.887748][ T3288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 64.896907][ T3288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:397 [ 64.918586][ T36] audit: type=1400 audit(1762213123.573:877): avc: denied { write } for pid=3289 comm="syz.0.1010" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.998430][ T36] audit: type=1400 audit(1762213123.653:878): avc: denied { map } for pid=3296 comm="syz.0.1012" path="socket:[15760]" dev="sockfs" ino=15760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.021898][ T36] audit: type=1400 audit(1762213123.653:879): avc: denied { read } for pid=3296 comm="syz.0.1012" path="socket:[15760]" dev="sockfs" ino=15760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.081095][ T3304] cannot load conntrack support for proto=3 [ 65.107407][ T3306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.191195][ T3317] rust_binder: Write failure EFAULT in pid:426 [ 65.229387][ T3319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.243782][ T3320] rust_binder: Error in use_page_slow: ESRCH [ 65.243807][ T3320] rust_binder: use_range failure ESRCH [ 65.249814][ T3320] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 65.255477][ T3320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.263462][ T3320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:428 [ 65.359905][ T3323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.392850][ T3323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.417443][ T3323] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 65.417861][ T3327] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.1023'. [ 65.442916][ T3329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 65.507959][ T3333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.815663][ T3372] rust_binder: 450: no such ref 0 [ 65.970174][ T3392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.977806][ T3392] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 65.977825][ T3393] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 66.013878][ T3397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.030444][ T3397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.100571][ T521] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 66.250567][ T521] usb 1-1: Using ep0 maxpacket: 32 [ 66.256880][ T521] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.267241][ T521] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 66.277909][ T521] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.287172][ T521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.295360][ T521] usb 1-1: Product: syz [ 66.299551][ T521] usb 1-1: Manufacturer: syz [ 66.304177][ T521] usb 1-1: SerialNumber: syz [ 66.638817][ T3426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.647974][ T3426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.717859][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.782499][ T3450] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1066'. [ 68.750546][ T2139] Bluetooth: hci0: command 0x1003 tx timeout [ 68.750546][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.870919][ T521] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 68.882625][ T521] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.907325][ T521] usb 1-1: USB disconnect, device number 24 [ 68.909918][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.001556][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 69.001574][ T36] audit: type=1400 audit(1762213127.653:884): avc: denied { read } for pid=3474 comm="syz.0.1074" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.030379][ T36] audit: type=1400 audit(1762213127.653:885): avc: denied { open } for pid=3474 comm="syz.0.1074" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.054241][ T36] audit: type=1400 audit(1762213127.663:886): avc: denied { ioctl } for pid=3474 comm="syz.0.1074" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.334697][ T3496] __vm_enough_memory: pid: 3496, comm: syz.3.1085, bytes: 18014402804453376 not enough memory for the allocation [ 69.350590][ T521] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 69.399680][ T3499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3499 comm=syz.3.1086 [ 69.412252][ T3499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3499 comm=syz.3.1086 [ 69.474975][ T3501] 9pnet_fd: Insufficient options for proto=fd [ 69.512336][ T521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.524101][ T521] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.533224][ T521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.541239][ T521] usb 1-1: Product: syz [ 69.545417][ T521] usb 1-1: Manufacturer: syz [ 69.550017][ T521] usb 1-1: SerialNumber: syz [ 69.555272][ T521] usb 1-1: config 0 descriptor?? [ 69.563310][ T521] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 69.577129][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.614947][ T3504] kvm: apic: phys broadcast and lowest prio [ 69.856172][ T36] audit: type=1400 audit(1762213128.513:887): avc: denied { relabelfrom } for pid=3509 comm="syz.2.1090" name="NETLINK" dev="sockfs" ino=16088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.881422][ T36] audit: type=1400 audit(1762213128.513:888): avc: denied { relabelto } for pid=3509 comm="syz.2.1090" name="NETLINK" dev="sockfs" ino=16088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 69.906686][ T36] audit: type=1400 audit(1762213128.513:889): avc: denied { ioctl } for pid=3509 comm="syz.2.1090" path="socket:[16088]" dev="sockfs" ino=16088 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 69.911188][ T521] usb 1-1: USB disconnect, device number 25 [ 70.060204][ T36] audit: type=1400 audit(1762213128.713:890): avc: denied { setopt } for pid=3513 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.278330][ T3531] netlink: 'syz.2.1098': attribute type 32 has an invalid length. [ 70.435947][ T3539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 70.520686][ T3537] process 'syz.3.1100' launched './file0' with NULL argv: empty string added [ 70.549617][ T36] audit: type=1400 audit(1762213129.203:891): avc: denied { getopt } for pid=3542 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.281434][ T3557] __vm_enough_memory: pid: 3557, comm: syz.3.1106, bytes: 18014402804453376 not enough memory for the allocation [ 71.353797][ T36] audit: type=1400 audit(1762213130.013:892): avc: denied { execute } for pid=3570 comm="syz.3.1111" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.401584][ T3578] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 71.524793][ T36] audit: type=1400 audit(1762213130.183:893): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.911602][ T3614] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 71.919627][ T3615] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 71.965975][ T3625] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1131'. [ 71.977857][ T3624] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.987547][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 72.034961][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 72.069561][ T3644] 9pnet_fd: Insufficient options for proto=fd [ 72.491759][ T3673] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 72.502662][ T3675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:781 [ 72.511760][ T3675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 72.521201][ T3675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:781 [ 72.590537][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.600627][ T2139] Bluetooth: hci0: command 0x1003 tx timeout [ 72.635034][ T3690] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 72.654031][ T3692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.681668][ T3699] rust_binder: Write failure EFAULT in pid:480 [ 73.270133][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 73.816006][ T3787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1194'. [ 73.825075][ T3787] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1194'. [ 73.834082][ T3787] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 73.842221][ T3787] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1194'. [ 73.861998][ T3789] >: renamed from veth0_vlan (while UP) [ 74.033675][ T3802] tipc: Started in network mode [ 74.038661][ T3802] tipc: Node identity 4, cluster identity 4711 [ 74.044899][ T3802] tipc: Node number set to 4 [ 74.049856][ T12] tipc: Subscription rejected, illegal request [ 74.293188][ T3807] binder: Unknown parameter 'Š¯1µrÙ@§Ž€˜磶M±bÖ“àOíGö›9×fY£qG‰Â›Þ½2ϲ:Ì †J [ 74.293188][ T3807] ' [ 74.751183][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.787133][ T3841] __vm_enough_memory: pid: 3841, comm: syz.0.1210, bytes: 18014402804453376 not enough memory for the allocation [ 74.820749][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 74.830265][ T3846] syz.0.1212 uses obsolete (PF_INET,SOCK_PACKET) [ 74.838048][ T3846] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 75.142835][ T3873] overlayfs: failed to clone lowerpath [ 75.218559][ T3884] rust_binder: Write failure EFAULT in pid:822 [ 75.256466][ T3894] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 75.271667][ T3894] rust_binder: Write failure EINVAL in pid:827 [ 75.300529][ T521] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 75.361075][ T3898] rust_binder: Error while translating object. [ 75.361122][ T3898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.367335][ T3898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:829 [ 75.406675][ T3910] netlink: 'syz.2.1237': attribute type 13 has an invalid length. [ 75.460587][ T521] usb 1-1: device descriptor read/64, error -71 [ 75.725486][ T521] usb 1-1: device descriptor read/64, error -71 [ 75.926008][ T3965] tipc: New replicast peer: 0.0.0.0 [ 75.931519][ T3965] tipc: Enabled bearer , priority 10 [ 75.970548][ T521] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 75.993255][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 75.993271][ T36] audit: type=1400 audit(1762213135.654:970): avc: denied { mounton } for pid=3981 comm="syz.2.1263" path="/binderfs2" dev="rootfs" ino=17310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 76.023130][ T36] audit: type=1400 audit(1762213135.654:971): avc: denied { associate } for pid=3984 comm="syz.2.1263" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 76.110583][ T521] usb 1-1: device descriptor read/64, error -71 [ 76.184914][ T3993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1266'. [ 76.350702][ T521] usb 1-1: device descriptor read/64, error -71 [ 76.460653][ T521] usb usb1-port1: attempt power cycle [ 76.572665][ T36] audit: type=1326 audit(1762213136.234:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.1269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x0 [ 76.672956][ T4009] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4009 comm=syz.3.1269 [ 76.714841][ T36] audit: type=1326 audit(1762213136.374:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.2.1270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc032d8f6c9 code=0x0 [ 76.800572][ T521] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 76.831583][ T521] usb 1-1: device descriptor read/8, error -71 [ 76.940529][ T545] tipc: Node number set to 836163321 [ 76.961566][ T521] usb 1-1: device descriptor read/8, error -71 [ 77.200552][ T521] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 77.231568][ T521] usb 1-1: device descriptor read/8, error -71 [ 77.361571][ T521] usb 1-1: device descriptor read/8, error -71 [ 77.452372][ T4020] 9pnet_fd: Insufficient options for proto=fd [ 77.470716][ T521] usb usb1-port1: unable to enumerate USB device [ 77.524066][ T36] audit: type=1400 audit(1762213137.184:974): avc: denied { lock } for pid=4026 comm="syz.1.1276" path="socket:[17937]" dev="sockfs" ino=17937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 78.087992][ T4039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.089677][ T4039] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 78.100605][ T4039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 78.108701][ T4039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:499 [ 78.120586][ T4046] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 78.130799][ T4046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 78.138849][ T4046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:499 [ 78.281505][ T4072] veth1: entered allmulticast mode [ 78.300979][ T4071] veth1: left allmulticast mode [ 78.339673][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 78.384722][ T4094] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 78.392612][ T4094] netlink: 'syz.3.1304': attribute type 2 has an invalid length. [ 78.495651][ T4115] netlink: 'syz.2.1311': attribute type 4 has an invalid length. [ 78.505205][ T4115] netlink: 'syz.2.1311': attribute type 4 has an invalid length. [ 78.973283][ T4130] netlink: 'syz.3.1318': attribute type 2 has an invalid length. [ 79.071159][ T4147] overlayfs: failed to clone upperpath [ 79.170536][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 79.200850][ T4152] overlay: ./file0 is not a directory [ 79.206608][ T4152] overlay: ./file0 is not a directory [ 79.321718][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.332693][ T9] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 79.345476][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.352106][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 79.361151][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.369641][ T9] usb 1-1: config 0 descriptor?? [ 79.374873][ T4122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.584031][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.592635][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.602032][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 79.608093][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 79.616782][ T9] usb 1-1: USB disconnect, device number 30 [ 80.040850][ T545] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 80.160432][ T36] audit: type=1400 audit(1762213139.814:975): avc: denied { setopt } for pid=4189 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.168775][ T4190] 9pnet_fd: Insufficient options for proto=fd [ 80.200528][ T545] usb 1-1: Using ep0 maxpacket: 32 [ 80.206787][ T545] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 80.220676][ T545] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.227359][ T545] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 80.236491][ T545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.245463][ T545] usb 1-1: config 0 descriptor?? [ 80.251553][ T545] hub 1-1:0.0: USB hub found [ 80.451656][ T545] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 80.652135][ T4122] overlayfs: missing 'lowerdir' [ 80.659333][ T545] usbhid 1-1:0.0: can't add hid device: -71 [ 80.665420][ T545] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.690900][ T545] usb 1-1: USB disconnect, device number 31 [ 80.796794][ T36] audit: type=1400 audit(1762213140.454:976): avc: denied { write } for pid=4232 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.418039][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 81.427772][ T4277] bridge_slave_1: left allmulticast mode [ 81.433618][ T4277] bridge_slave_1: left promiscuous mode [ 81.439252][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.446944][ T4277] bridge_slave_0: left allmulticast mode [ 81.452660][ T4277] bridge_slave_0: left promiscuous mode [ 81.458322][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.467317][ T4277] bridge0 (unregistering): left allmulticast mode [ 81.512465][ T4286] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1374'. [ 81.539123][ T4292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.540055][ T4292] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 81.548110][ T4292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.557074][ T4292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:511 [ 81.612563][ T36] audit: type=1400 audit(1762213141.274:977): avc: denied { write } for pid=4291 comm="syz.0.1376" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.647352][ T4292] virtio-fs: tag not found [ 81.654132][ T4296] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.1378'. [ 81.690380][ T4318] overlayfs: disabling nfs_export due to verity=on [ 81.696983][ T4318] overlayfs: missing 'lowerdir' [ 81.929612][ T4327] fuse: Bad value for 'fd' [ 81.983921][ T4349] overlayfs: failed to clone lowerpath [ 81.990216][ T4349] overlayfs: failed to clone lowerpath [ 82.003074][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 82.034242][ T4362] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1402'. [ 82.043813][ T4362] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1402'. [ 82.053733][ T4363] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1402'. [ 82.137332][ T36] audit: type=1400 audit(1762213141.794:978): avc: denied { nlmsg_read } for pid=4371 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.157944][ T36] audit: type=1326 audit(1762213141.794:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.3.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x0 [ 82.180545][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 82.186913][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 82.195112][ T9] usb 1-1: config 0 has no interface number 0 [ 82.201225][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 82.209457][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.218526][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.226532][ T9] usb 1-1: Product: syz [ 82.230721][ T9] usb 1-1: Manufacturer: syz [ 82.235357][ T9] usb 1-1: SerialNumber: syz [ 82.241148][ T9] usb 1-1: config 0 descriptor?? [ 82.247127][ T9] smsc75xx v1.0.0 [ 82.448731][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 82.459594][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.474777][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.485646][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 82.495830][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 82.506136][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 82.516398][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.527849][ T9] usb 1-1: USB disconnect, device number 32 [ 82.546341][ T4412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.546615][ T4413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.643287][ T4427] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 82.647319][ T4428] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 82.649912][ T4427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 82.657939][ T4428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 82.666316][ T4427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:544 [ 82.675209][ T4428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:544 [ 82.857722][ T4438] overlayfs: missing 'lowerdir' [ 82.925896][ T36] audit: type=1400 audit(1762213142.584:980): avc: denied { audit_read } for pid=4442 comm="syz.1.1430" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.040572][ T545] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 83.191616][ T545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.202596][ T545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.212352][ T545] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 83.221419][ T545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.229994][ T545] usb 1-1: config 0 descriptor?? [ 83.610808][ T4486] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1446'. [ 83.619915][ T4486] 0ªî{X¹¦: renamed from bridge_slave_1 (while UP) [ 83.627838][ T4486] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 83.647679][ T545] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 83.655135][ T545] lenovo 0003:17EF:6047.000A: item fetching failed at offset 3/5 [ 83.665174][ T545] lenovo 0003:17EF:6047.000A: hid_parse failed [ 83.679753][ T545] lenovo 0003:17EF:6047.000A: probe with driver lenovo failed with error -22 [ 83.847889][ T4433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.848367][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.864386][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.875183][ T545] usb 1-1: USB disconnect, device number 33 [ 84.261264][ T4579] bpf: Bad value for 'gid' [ 84.440039][ T4605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.440434][ T4605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 84.447016][ T4605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:554 [ 84.540155][ T4610] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 84.556782][ T4610] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 84.575100][ T4610] rust_binder: 558: no such ref 2 [ 84.580256][ T4610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 84.583409][ T4610] overlayfs: lower data-only dirs require metacopy support. [ 84.601255][ T4610] rust_binder: 558: no such ref 1 [ 84.601434][ T36] audit: type=1400 audit(1762213144.264:981): avc: denied { connect } for pid=4609 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.215295][ T4656] netlink: 'syz.2.1501': attribute type 4 has an invalid length. [ 85.251691][ T4658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1502'. [ 85.420419][ T4680] __vm_enough_memory: pid: 4680, comm: syz.0.1511, bytes: 21199865503744 not enough memory for the allocation [ 85.543488][ T4712] overlayfs: failed to clone lowerpath [ 85.572898][ T36] audit: type=1400 audit(2000000000.660:982): avc: denied { getopt } for pid=4715 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.805550][ T4719] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 85.943517][ T36] audit: type=1400 audit(2000000001.030:983): avc: denied { shutdown } for pid=4740 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.065140][ T36] audit: type=1400 audit(2000000001.150:984): avc: denied { accept } for pid=4743 comm="syz.3.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.143593][ T4753] fuse: Bad value for 'fd' [ 86.367772][ T4792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 86.425033][ T4794] 9pnet_fd: Insufficient options for proto=fd [ 86.432058][ T4794] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1548'. [ 86.635399][ T4815] netlink: 'syz.1.1556': attribute type 25 has an invalid length. [ 86.667603][ T36] audit: type=1400 audit(2000000001.750:985): avc: denied { read } for pid=4819 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.692051][ T36] audit: type=1326 audit(2000000001.780:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.1.1559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f4f8f6c9 code=0x0 [ 86.707697][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4824 comm=syz.0.1560 [ 95.191742][ T4836] sit0: entered promiscuous mode [ 95.201875][ T4836] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1565'. [ 95.221340][ T4836] overlayfs: failed to resolve './file1': -2 [ 95.430512][ T36] audit: type=1400 audit(2000000010.510:987): avc: denied { create } for pid=4876 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 95.461843][ T4874] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 95.522068][ T36] audit: type=1400 audit(2000000010.610:988): avc: denied { create } for pid=4886 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.557552][ T36] audit: type=1400 audit(2000000010.630:989): avc: denied { create } for pid=4890 comm="syz.2.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 95.586694][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 96.066328][ T4926] overlayfs: failed to clone lowerpath [ 96.136436][ T36] audit: type=1400 audit(2000000011.220:990): avc: denied { bpf } for pid=4927 comm="syz.1.1598" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.175811][ T36] audit: type=1400 audit(2000000011.260:991): avc: denied { create } for pid=4927 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.278508][ T4957] 9pnet_fd: Insufficient options for proto=fd [ 96.300823][ T4966] overlayfs: conflicting options: userxattr,metacopy=on [ 96.320139][ T4969] 9pnet_fd: Insufficient options for proto=fd [ 96.572541][ T4980] /dev/loop0: Can't lookup blockdev [ 96.901785][ T36] audit: type=1400 audit(2000000011.990:992): avc: denied { lock } for pid=5010 comm="syz.2.1626" path="socket:[20127]" dev="sockfs" ino=20127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.980784][ T5021] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1631'. [ 97.044856][ T5034] overlayfs: failed to clone lowerpath [ 97.051387][ T5034] overlayfs: failed to clone lowerpath [ 97.820762][ T5062] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 98.496550][ T5107] overlayfs: failed to clone upperpath [ 98.621222][ T5134] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 98.631423][ T36] audit: type=1400 audit(2000000013.720:993): avc: denied { relabelto } for pid=5133 comm="syz.3.1675" name="NETLINK" dev="sockfs" ino=20353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 99.159201][ T5166] veth0_to_batadv: entered allmulticast mode [ 99.163194][ T5168] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 99.174495][ T5168] overlayfs: missing 'lowerdir' [ 99.216576][ T36] audit: type=1400 audit(2000000014.300:994): avc: denied { create } for pid=5180 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 99.713475][ T5209] overlayfs: failed to clone lowerpath [ 99.719016][ T5210] overlayfs: failed to clone lowerpath [ 99.726316][ T36] audit: type=1400 audit(2000000014.810:995): avc: denied { create } for pid=5208 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.785761][ T36] audit: type=1326 audit(2000000014.870:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7ffc0000 [ 100.000977][ T5272] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1729'. [ 100.492093][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 100.492112][ T36] audit: type=1400 audit(2000000015.580:1095): avc: denied { execute } for pid=5321 comm="syz.0.1747" path="/cpuacct.usage_sys" dev="rootfs" ino=21608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.533162][ T36] audit: type=1400 audit(2000000015.580:1096): avc: denied { create } for pid=5321 comm="syz.0.1747" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 100.561148][ T36] audit: type=1400 audit(2000000015.580:1097): avc: denied { read } for pid=5321 comm="syz.0.1747" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="rootfs" ino=21609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 100.590604][ T36] audit: type=1400 audit(2000000015.580:1098): avc: denied { open } for pid=5321 comm="syz.0.1747" path=2FFDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="rootfs" ino=21609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 100.620741][ T36] audit: type=1400 audit(2000000015.580:1099): avc: denied { ioctl } for pid=5321 comm="syz.0.1747" path=2FFDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="rootfs" ino=21609 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 100.650791][ T5326] netlink: 'syz.3.1748': attribute type 2 has an invalid length. [ 100.772489][ T36] audit: type=1400 audit(2000000015.860:1100): avc: denied { create } for pid=5337 comm="syz.3.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.408178][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 101.798264][ T5379] incfs_lookup_dentry err:-13 [ 101.803185][ T5379] incfs: Can't find or create .index dir in ./file0 [ 101.809964][ T5379] incfs: mount failed -13 [ 102.915549][ T5434] 9pnet_fd: Insufficient options for proto=fd [ 102.951447][ T36] audit: type=1400 audit(2000000018.040:1101): avc: denied { mounton } for pid=5431 comm="syz.0.1789" path="pipe:[21309]" dev="pipefs" ino=21309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 103.523607][ T5478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'. [ 103.897075][ T5498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1811'. [ 103.917381][ T5500] tipc: Enabling of bearer rejected, failed to enable media [ 104.423646][ T5625] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1822'. [ 105.304926][ T5661] overlayfs: failed to clone upperpath [ 105.341959][ T5666] bpf: Bad value for 'uid' [ 105.347457][ T36] audit: type=1326 audit(2000000020.434:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.0.1836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91e418f6c9 code=0x0 [ 105.784322][ T5669] overlayfs: missing 'lowerdir' [ 105.886371][ T5676] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1840'. [ 106.292674][ T5697] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1849'. [ 106.302707][ T5697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.317951][ T5698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1849'. [ 106.327360][ T5698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.020129][ T5731] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 107.027961][ T5731] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1862'. [ 107.345315][ T5781] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 107.492433][ T36] audit: type=1326 audit(2000000022.584:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.515895][ T36] audit: type=1326 audit(2000000022.584:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.539565][ T36] audit: type=1326 audit(2000000022.584:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.563131][ T36] audit: type=1326 audit(2000000022.584:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.586575][ T36] audit: type=1326 audit(2000000022.584:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.609816][ T36] audit: type=1326 audit(2000000022.584:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.633226][ T36] audit: type=1326 audit(2000000022.584:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.656558][ T36] audit: type=1326 audit(2000000022.584:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.679993][ T36] audit: type=1326 audit(2000000022.584:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.703229][ T36] audit: type=1326 audit(2000000022.594:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f4f8f6c9 code=0x7ffc0000 [ 107.746768][ T5821] devpts: called with bogus options [ 107.761597][ T5819] netlink: 'syz.1.1891': attribute type 27 has an invalid length. [ 107.771974][ T5819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.013066][ T5846] EXT4-fs: Ignoring removed check option [ 108.025433][ T5846] No source specified [ 108.043507][ T5846] EXT4-fs: Ignoring removed check option [ 108.049182][ T5846] No source specified [ 109.330346][ T5896] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1915'. [ 109.657884][ T5931] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.1924'. [ 109.667144][ T5931] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1924'. [ 110.282730][ T5961] fuse: Bad value for 'fd' [ 110.548427][ T5969] netlink: 'syz.2.1938': attribute type 12 has an invalid length. [ 110.971052][ T6006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6006 comm=syz.3.1950 [ 111.035902][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.043058][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.050186][ T6007] bridge_slave_0: entered allmulticast mode [ 111.056489][ T6007] bridge_slave_0: entered promiscuous mode [ 111.063935][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.071202][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.078281][ T6007] bridge_slave_1: entered allmulticast mode [ 111.084681][ T6007] bridge_slave_1: entered promiscuous mode [ 111.151090][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.158167][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.165479][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.172515][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.194946][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.202434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.211821][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.218894][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.228096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.235160][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.262673][ T6007] veth0_vlan: entered promiscuous mode [ 111.275881][ T6007] veth1_macvtap: entered promiscuous mode [ 111.384778][ T6055] overlayfs: failed to clone upperpath [ 111.596409][ T6090] fuse: Bad value for 'fd' [ 111.666803][ T6095] syz.3.1975 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.842135][ T545] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 111.858861][ T545] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.110815][ T545] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.271959][ T545] usb 2-1: config 0 has no interfaces? [ 112.278543][ T545] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.287775][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.295825][ T545] usb 2-1: SerialNumber: syz [ 112.301184][ T545] usb 2-1: config 0 descriptor?? [ 112.451544][ T6116] /dev/loop0: Can't lookup blockdev [ 112.559223][ T6118] 9pnet_fd: Insufficient options for proto=fd [ 112.565923][ T545] usb 2-1: USB disconnect, device number 6 [ 112.927266][ T6138] netlink: 'syz.0.1991': attribute type 22 has an invalid length. [ 113.051177][ T6167] overlayfs: failed to clone upperpath [ 113.173862][ T6195] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 113.181150][ T6195] rust_binder: 6195 RLIMIT_NICE not set [ 113.202477][ T6198] rust_binder: 32: no such ref 2 [ 113.224141][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 113.224156][ T36] audit: type=1400 audit(2000000028.313:1185): avc: denied { write } for pid=6200 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 113.263490][ T36] audit: type=1400 audit(2000000028.343:1186): avc: denied { read } for pid=6200 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 113.313586][ T6203] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 113.313609][ T6203] rust_binder: Error while translating object. [ 113.322460][ T6203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.328671][ T6203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 113.363391][ T6213] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 113.589233][ T6229] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2025'. [ 113.630658][ T545] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.802897][ T545] usb 2-1: Using ep0 maxpacket: 32 [ 113.809348][ T545] usb 2-1: config 4 has an invalid interface number: 49 but max is 0 [ 113.817555][ T545] usb 2-1: config 4 has an invalid descriptor of length 52, skipping remainder of the config [ 113.827760][ T545] usb 2-1: config 4 has no interface number 0 [ 113.833869][ T545] usb 2-1: too many endpoints for config 4 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 113.844764][ T545] usb 2-1: config 4 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 113.857985][ T545] usb 2-1: config 4 interface 49 has no altsetting 0 [ 113.865746][ T545] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.874830][ T545] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 113.883255][ T545] usb 2-1: Product: syz [ 113.887421][ T545] usb 2-1: Manufacturer: syz [ 114.065191][ T6239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8745 sclass=netlink_route_socket pid=6239 comm=syz.0.2029 [ 114.098530][ T545] hub 2-1:4.49: bad descriptor, ignoring hub [ 114.108224][ T545] hub 2-1:4.49: probe with driver hub failed with error -5 [ 114.153450][ T6247] netlink: 'syz.0.2032': attribute type 4 has an invalid length. [ 114.174812][ T6250] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2033'. [ 114.197554][ T6253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2034'. [ 114.265354][ T6265] netlink: 'syz.0.2038': attribute type 19 has an invalid length. [ 114.273493][ T6265] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2038'. [ 114.290817][ T545] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 114.373314][ T36] audit: type=1400 audit(2000000029.463:1187): avc: denied { shutdown } for pid=6266 comm="syz.3.2039" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.479804][ T6274] overlayfs: failed to clone upperpath [ 114.662140][ T6300] fuse: Bad value for 'fd' [ 114.688610][ T6302] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2051'. [ 114.690007][ T545] usb 2-1: failed to restore interface 49 altsetting 56 (error=-71) [ 114.707898][ T545] usb 2-1: USB disconnect, device number 7 [ 114.726092][ T36] audit: type=1400 audit(2000000029.813:1188): avc: denied { mounton } for pid=6301 comm="syz.2.2051" path="/file0" dev="ramfs" ino=23445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 115.231317][ T6328] netlink: 'syz.1.2061': attribute type 12 has an invalid length. [ 115.296550][ T6339] netlink: 'syz.3.2065': attribute type 12 has an invalid length. [ 115.336112][ T6346] overlayfs: missing 'lowerdir' [ 115.680542][ T545] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.702417][ T36] audit: type=1326 audit(115.669:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.2.2077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc032d8f6c9 code=0x0 [ 115.830510][ T545] usb 2-1: Using ep0 maxpacket: 16 [ 115.836691][ T545] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 115.844896][ T545] usb 2-1: config 0 has no interface number 0 [ 115.851005][ T545] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 115.860927][ T545] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 115.872269][ T545] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 115.881405][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.889578][ T545] usb 2-1: Product: syz [ 115.894073][ T545] usb 2-1: Manufacturer: syz [ 115.898722][ T545] usb 2-1: SerialNumber: syz [ 115.905793][ T545] usb 2-1: config 0 descriptor?? [ 115.911645][ T6359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.918853][ T6359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.128642][ T6359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.136732][ T6359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.179302][ T6379] syz.0.2079: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 116.214774][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.0.2079 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 116.214822][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.214837][ T6379] Call Trace: [ 116.214856][ T6379] [ 116.214864][ T6379] __dump_stack+0x21/0x30 [ 116.214900][ T6379] dump_stack_lvl+0x10c/0x190 [ 116.214928][ T6379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.214956][ T6379] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 116.214985][ T6379] dump_stack+0x19/0x20 [ 116.215011][ T6379] warn_alloc+0x1bc/0x2a0 [ 116.215039][ T6379] ? kasan_save_free_info+0x4a/0x60 [ 116.215068][ T6379] ? __cfi_warn_alloc+0x10/0x10 [ 116.215096][ T6379] ? __get_vm_area_node+0x1dc/0x3a0 [ 116.215123][ T6379] ? packet_set_ring+0x735/0x2850 [ 116.215151][ T6379] __vmalloc_node_range_noprof+0x68e/0x1420 [ 116.215180][ T6379] ? packet_set_ring+0x669/0x2850 [ 116.215206][ T6379] ? do_sock_setsockopt+0x26d/0x400 [ 116.215235][ T6379] ? __x64_sys_setsockopt+0x1b8/0x250 [ 116.215268][ T6379] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 116.215298][ T6379] ? __asan_memset+0x39/0x50 [ 116.215316][ T6379] ? __alloc_pages_noprof+0xbf/0x7b0 [ 116.215344][ T6379] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 116.215372][ T6379] ? packet_set_ring+0x735/0x2850 [ 116.215398][ T6379] vzalloc_noprof+0xfd/0x1d0 [ 116.215427][ T6379] ? packet_set_ring+0x735/0x2850 [ 116.215453][ T6379] ? __cfi_vzalloc_noprof+0x10/0x10 [ 116.215488][ T6379] ? packet_set_ring+0x669/0x2850 [ 116.215516][ T6379] packet_set_ring+0x735/0x2850 [ 116.215544][ T6379] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 116.215572][ T6379] ? packet_mmap+0x570/0x570 [ 116.215598][ T6379] ? __check_object_size+0xe0/0x810 [ 116.215617][ T6379] ? __asan_memcpy+0x5a/0x80 [ 116.215635][ T6379] ? __cfi___check_object_size+0x10/0x10 [ 116.215654][ T6379] ? avc_has_perm_noaudit+0x286/0x360 [ 116.215683][ T6379] ? __kasan_check_write+0x18/0x20 [ 116.215714][ T6379] ? _copy_from_user+0x8b/0xb0 [ 116.215740][ T6379] packet_setsockopt+0xc5d/0x12a0 [ 116.215767][ T6379] ? __cfi_packet_setsockopt+0x10/0x10 [ 116.215794][ T6379] ? selinux_socket_setsockopt+0x2ea/0x390 [ 116.215827][ T6379] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 116.215861][ T6379] ? do_futex+0x309/0x500 [ 116.215883][ T6379] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 116.215909][ T6379] ? security_socket_setsockopt+0x33/0xd0 [ 116.215930][ T6379] ? __cfi_packet_setsockopt+0x10/0x10 [ 116.215956][ T6379] do_sock_setsockopt+0x26d/0x400 [ 116.215985][ T6379] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 116.216016][ T6379] __x64_sys_setsockopt+0x1b8/0x250 [ 116.216047][ T6379] x64_sys_call+0x2adc/0x2ee0 [ 116.216077][ T6379] do_syscall_64+0x58/0xf0 [ 116.216103][ T6379] ? clear_bhb_loop+0x50/0xa0 [ 116.216126][ T6379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.216148][ T6379] RIP: 0033:0x7f91e418f6c9 [ 116.216165][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.216182][ T6379] RSP: 002b:00007f91e5027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.216204][ T6379] RAX: ffffffffffffffda RBX: 00007f91e43e5fa0 RCX: 00007f91e418f6c9 [ 116.216219][ T6379] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 116.216234][ T6379] RBP: 00007f91e4211f91 R08: 000000000000001c R09: 0000000000000000 [ 116.216246][ T6379] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 116.216259][ T6379] R13: 00007f91e43e6038 R14: 00007f91e43e5fa0 R15: 00007ffc524bcfa8 [ 116.216277][ T6379] [ 116.216351][ T6379] Mem-Info: [ 116.567084][ T6379] active_anon:60913 inactive_anon:10 isolated_anon:0 [ 116.567084][ T6379] active_file:22703 inactive_file:2528 isolated_file:0 [ 116.567084][ T6379] unevictable:16397 dirty:51 writeback:0 [ 116.567084][ T6379] slab_reclaimable:6546 slab_unreclaimable:72031 [ 116.567084][ T6379] mapped:26010 shmem:54531 pagetables:1372 [ 116.567084][ T6379] sec_pagetables:0 bounce:0 [ 116.567084][ T6379] kernel_misc_reclaimable:0 [ 116.567084][ T6379] free:1443802 free_pcp:6278 free_cma:0 [ 116.613075][ T6379] Node 0 active_anon:246552kB inactive_anon:40kB active_file:90812kB inactive_file:10112kB unevictable:65588kB isolated(anon):0kB isolated(file):0kB mapped:106840kB dirty:204kB writeback:0kB shmem:221024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6344kB pagetables:5488kB sec_pagetables:0kB all_unreclaimable? no [ 116.664298][ T6379] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 116.730280][ T6379] lowmem_reserve[]: 0 3921 3921 [ 116.735287][ T6379] Normal free:2818780kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:239952kB inactive_anon:40kB active_file:90812kB inactive_file:10112kB unevictable:65588kB writepending:204kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:9144kB local_pcp:7752kB free_cma:0kB [ 116.800492][ T6379] lowmem_reserve[]: 0 0 0 [ 116.805151][ T6379] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 116.835195][ T6379] Normal: 331*4kB (UME) 186*8kB (UME) 357*16kB (UME) 209*32kB (UME) 121*64kB (UME) 75*128kB (ME) 81*256kB (UM) 62*512kB (UM) 29*1024kB (UM) 15*2048kB (M) 651*4096kB (M) = 2811948kB [ 116.864139][ T6379] 87445 total pagecache pages [ 116.868969][ T6379] 13 pages in swap cache [ 116.873264][ T6379] Free swap = 124696kB [ 116.877454][ T6379] Total swap = 124996kB [ 116.887813][ T6379] 2097051 pages RAM [ 116.892538][ T6379] 0 pages HighMem/MovableOnly [ 116.897409][ T6379] 351537 pages reserved [ 116.901616][ T6379] 0 pages cma reserved [ 116.908791][ T6379] Memory allocations: [ 116.912947][ T6379] 0 B 0 init/main.c:1370 func:do_initcalls [ 116.920362][ T6379] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 116.928606][ T6379] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 116.937219][ T6379] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 116.960596][ T6379] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 116.968563][ T6379] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 116.977409][ T6379] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 116.990905][ T6379] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 116.998875][ T6379] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 117.001089][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.020737][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.029471][ T6388] bridge_slave_0: entered allmulticast mode [ 117.035438][ T6379] 0 B 0 init/initramfs.c:101 func:find_link [ 117.048653][ T6388] bridge_slave_0: entered promiscuous mode [ 117.055327][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.064737][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.074841][ T6388] bridge_slave_1: entered allmulticast mode [ 117.082617][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.085656][ T6388] bridge_slave_1: entered promiscuous mode [ 117.095026][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 117.132870][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.143238][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.155013][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.165780][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.183847][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.202406][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.213060][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.227524][ T293] bridge_slave_1: left allmulticast mode [ 117.233774][ T293] bridge_slave_1: left promiscuous mode [ 117.239456][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.240512][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.257033][ T293] bridge_slave_0: left allmulticast mode [ 117.258459][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.268128][ T293] bridge_slave_0: left promiscuous mode [ 117.273220][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.288279][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.288745][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.307282][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.317863][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.328311][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.340062][ T293] bridge0 (unregistering): left allmulticast mode [ 117.340126][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.357124][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.367544][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.379242][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.389839][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.400537][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.412208][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.422739][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.434917][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.445375][ T293] tipc: Disabling bearer [ 117.450954][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.461254][ T293] tipc: Left network mode [ 117.465829][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.476418][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.481184][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.488258][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.493602][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.493724][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.504218][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.510890][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.535904][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.547486][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.558767][ T293] veth1_macvtap: left promiscuous mode [ 117.564321][ T293] veth0_vlan: left promiscuous mode [ 117.582116][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.602727][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.634201][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.651550][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.662010][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.674821][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.698066][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.711370][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.717656][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.728735][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.739553][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.751993][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.756734][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.769228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.779681][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'. [ 117.790161][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.797223][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.806190][ T6421] overlayfs: failed to clone upperpath [ 117.812279][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.829792][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.841208][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.854667][ T6388] veth0_vlan: entered promiscuous mode [ 117.855583][ T6426] overlayfs: failed to clone upperpath [ 117.866019][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.885895][ T6388] veth1_macvtap: entered promiscuous mode [ 117.887177][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.912492][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.932896][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 117.953088][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.975446][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.995141][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.012082][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.025077][ T6424] 9pnet_fd: Insufficient options for proto=fd [ 118.032197][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.051060][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.071571][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.083448][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.098324][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.110015][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.120784][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.121235][ T6445] netlink: 'syz.0.2098': attribute type 11 has an invalid length. [ 118.131388][ T36] audit: type=1400 audit(118.089:1190): avc: denied { create } for pid=6444 comm="syz.0.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 118.150540][ T6445] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2098'. [ 118.158391][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.181256][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.213719][ T6459] netlink: 'syz.0.2101': attribute type 11 has an invalid length. [ 118.218655][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.232475][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.242318][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 118.244544][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.279783][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.300720][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.325892][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.333348][ T6477] __vm_enough_memory: pid: 6477, comm: syz.2.2110, bytes: 18014402804453376 not enough memory for the allocation [ 118.338426][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.360492][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.387257][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.398026][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.408922][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.421211][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.433537][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.445393][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.456989][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.468068][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.478428][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.492612][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.503248][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.514336][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.526078][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.538258][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.548746][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.560464][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.582818][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.593429][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.607973][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.618835][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.629190][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 118.629997][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2124'. [ 118.640978][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.662085][ T545] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 118.673492][ T545] asix 2-1:0.251: probe with driver asix failed with error -5 [ 118.684106][ T545] usb 2-1: USB disconnect, device number 8 [ 118.980529][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.988108][ T545] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 119.140852][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 119.146879][ T545] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 119.155368][ T545] usb 2-1: config 8 has no interface number 0 [ 119.161644][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.176154][ T545] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 119.187719][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.197712][ T545] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 119.208978][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 119.218105][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.227483][ T545] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 119.236669][ T31] usb 3-1: config 0 descriptor?? [ 119.241677][ T545] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 119.249662][ T545] usb 2-1: Product: syz [ 119.254012][ T545] usb 2-1: Manufacturer: syz [ 119.258651][ T545] usb 2-1: SerialNumber: syz [ 119.263934][ T31] hub 3-1:0.0: USB hub found [ 119.463938][ T31] hub 3-1:0.0: 7 ports detected [ 119.469150][ T31] hub 3-1:0.0: insufficient power available to use all downstream ports [ 119.469829][ T6410] tap0: tun_chr_ioctl cmd 1074025676 [ 119.482906][ T6410] tap0: owner set to 0 [ 119.550347][ T545] usb 2-1: USB disconnect, device number 9 [ 119.665261][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.673960][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.684687][ T31] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 119.693904][ T31] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 119.720926][ T31] usb 3-1: USB disconnect, device number 3 [ 120.090868][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 120.137283][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 120.180539][ T36] audit: type=1400 audit(120.139:1191): avc: denied { create } for pid=6618 comm="syz.3.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.269449][ T6642] overlayfs: missing 'lowerdir' [ 120.400981][ T6664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.446402][ T6674] netlink: 'syz.1.2172': attribute type 153 has an invalid length. [ 120.466811][ T6674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2172'. [ 120.476732][ T6675] rust_binder: 92: no such ref 0 [ 120.481745][ T6675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 120.481855][ T6674] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 120.498084][ T6674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.498101][ T6675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.504834][ T6674] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 120.511994][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.671553][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.681417][ T31] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 120.690575][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.699323][ T31] usb 3-1: config 0 descriptor?? [ 121.110654][ T31] greenasia 0003:0E8F:0012.000C: invalid report_count 546658438 [ 121.118375][ T31] greenasia 0003:0E8F:0012.000C: item 0 4 1 9 parsing failed [ 121.125936][ T31] greenasia 0003:0E8F:0012.000C: parse failed [ 121.132063][ T31] greenasia 0003:0E8F:0012.000C: probe with driver greenasia failed with error -22 [ 121.318268][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.326818][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.337287][ T521] usb 3-1: USB disconnect, device number 4 [ 121.433174][ T36] audit: type=1400 audit(121.387:1192): avc: denied { ioctl } for pid=6687 comm="syz.1.2177" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 121.479064][ T6692] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=6692 comm=syz.1.2179 [ 121.500507][ T6692] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6692 comm=syz.1.2179 [ 121.513857][ T6692] __vm_enough_memory: pid: 6692, comm: syz.1.2179, bytes: 18014402804453376 not enough memory for the allocation [ 121.554164][ T36] audit: type=1400 audit(121.493:1193): avc: denied { module_load } for pid=6695 comm="syz.1.2181" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 121.554616][ T6696] kernel read not supported for file /policy (pid: 6696 comm: syz.1.2181) [ 121.670795][ T36] audit: type=1326 audit(121.619:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 121.860704][ T6717] overlayfs: failed to clone upperpath [ 121.910153][ T6728] rust_binder: Write failure EFAULT in pid:41 [ 121.977286][ T6731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6731 comm=syz.2.2193 [ 121.997565][ T6731] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 122.237604][ T545] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 122.403617][ T545] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.413861][ T545] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 122.428047][ T545] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 122.448015][ T545] usb 3-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 122.457295][ T545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.465482][ T545] usb 3-1: SerialNumber: syz [ 122.475464][ T36] audit: type=1326 audit(122.395:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.2202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d60d8f6c9 code=0x0 [ 122.528640][ T36] audit: type=1400 audit(122.444:1196): avc: denied { mount } for pid=6749 comm="syz.1.2202" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 122.679278][ T521] usb 3-1: USB disconnect, device number 5 [ 123.264183][ T6760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 123.264450][ T6760] rust_binder: 6760 RLIMIT_NICE not set [ 123.274269][ T6760] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 123.279862][ T6760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 123.287873][ T6760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:45 [ 123.310467][ T6762] netlink: 'syz.2.2206': attribute type 15 has an invalid length. [ 123.327842][ T6763] netlink: 'syz.3.2205': attribute type 4 has an invalid length. [ 123.373090][ T6770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 123.373179][ T6770] rust_binder: 6770 RLIMIT_NICE not set [ 123.481243][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 123.517181][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2221'. [ 123.699326][ T545] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 123.854619][ T545] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.867444][ T545] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 123.876595][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.885147][ T545] usb 2-1: config 0 descriptor?? [ 124.103737][ T6826] binder: Unknown parameter 'stats7¡±' [ 124.154120][ T6834] rust_binder: Error while translating object. [ 124.154163][ T6834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.160393][ T6834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 124.187674][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.198405][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.204109][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.210550][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.210568][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.229666][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.229843][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.237005][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.242767][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.249472][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.255855][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.262319][ T6838] rust_binder: Error in use_page_slow: ESRCH [ 124.274922][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.274946][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.281572][ T6838] rust_binder: use_range failure ESRCH [ 124.295408][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.295429][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.301865][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.306244][ T545] wacom 0003:056A:00F0.000D: collection stack underflow [ 124.308364][ T6838] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 124.319299][ T545] wacom 0003:056A:00F0.000D: item 0 4 0 12 parsing failed [ 124.336936][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.336960][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.338654][ T545] wacom 0003:056A:00F0.000D: parse failed [ 124.343459][ T6838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.350312][ T545] wacom 0003:056A:00F0.000D: probe with driver wacom failed with error -22 [ 124.355624][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.381006][ T6838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:71 [ 124.381069][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.390093][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.397521][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.405358][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.412230][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.418862][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.425395][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.431876][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.438382][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.444867][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.453459][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.460758][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.463454][ T6856] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 124.467355][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.488338][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.495143][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.501838][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.508445][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.518745][ T36] audit: type=1400 audit(124.379:1197): avc: denied { accept } for pid=6789 comm="syz.1.2216" path="socket:[25391]" dev="sockfs" ino=25391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.519954][ T545] usb 2-1: USB disconnect, device number 10 [ 124.556389][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.556416][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.562920][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.569456][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.571352][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 124.576208][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.594592][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.601153][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.610692][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.619509][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.626076][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.632618][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.639190][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.645802][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.652334][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.659096][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.665585][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.672059][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.678551][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.685019][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.691580][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.698082][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.704555][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.711046][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.717577][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.724060][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.730623][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.737307][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.743870][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.840378][ T6894] overlay: ./file0 is not a directory [ 124.985390][ T46] bridge_slave_1: left allmulticast mode [ 124.991744][ T46] bridge_slave_1: left promiscuous mode [ 124.997676][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.005539][ T46] bridge_slave_0: left allmulticast mode [ 125.011221][ T46] bridge_slave_0: left promiscuous mode [ 125.017156][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.105717][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 125.132423][ T46] veth1_macvtap: left promiscuous mode [ 125.143251][ T46] veth0_vlan: left promiscuous mode [ 125.278518][ T6928] rust_binder: Write failure EFAULT in pid:136 [ 125.285791][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.319990][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.329833][ T6915] bridge_slave_0: entered allmulticast mode [ 125.336658][ T6915] bridge_slave_0: entered promiscuous mode [ 125.343228][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.350325][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.357554][ T6915] bridge_slave_1: entered allmulticast mode [ 125.364070][ T6915] bridge_slave_1: entered promiscuous mode [ 125.417029][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.424140][ T6915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.431430][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.438477][ T6915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.459014][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.466543][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.475892][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.483062][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.492964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.500022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.526475][ T6915] veth0_vlan: entered promiscuous mode [ 125.537416][ T6915] veth1_macvtap: entered promiscuous mode [ 125.567638][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 125.576656][ T6943] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2260'. [ 125.585628][ T6943] tipc: Invalid UDP bearer configuration [ 125.585751][ T6943] tipc: Enabling of bearer rejected, failed to enable media [ 125.680233][ T545] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.813647][ T545] usb 2-1: device descriptor read/64, error -71 [ 126.059413][ T545] usb 2-1: device descriptor read/64, error -71 [ 126.157020][ T36] audit: type=1326 audit(125.978:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.0.2276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91e418f6c9 code=0x0 [ 126.312383][ T545] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.452343][ T545] usb 2-1: device descriptor read/64, error -71 [ 126.688276][ T6989] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.697180][ T545] usb 2-1: device descriptor read/64, error -71 [ 126.823490][ T545] usb usb2-port1: attempt power cycle [ 127.072342][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.162400][ T545] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.193407][ T545] usb 2-1: device descriptor read/8, error -71 [ 127.232338][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 127.238640][ T65] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 127.249900][ T65] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.265790][ T65] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.279119][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.285915][ T65] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 127.295182][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.305012][ T65] usb 5-1: config 0 descriptor?? [ 127.323413][ T545] usb 2-1: device descriptor read/8, error -71 [ 127.562404][ T545] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.583389][ T545] usb 2-1: device descriptor read/8, error -71 [ 127.714293][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.721159][ T545] usb 2-1: device descriptor read/8, error -71 [ 127.727418][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.734245][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.741023][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.747826][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.754637][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.761400][ T65] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 127.769580][ T65] sony 0003:054C:024B.000E: hiddev96,hidraw0: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.4-1/input0 [ 127.781532][ T65] sony 0003:054C:024B.000E: failed to claim input [ 127.842429][ T545] usb usb2-port1: unable to enumerate USB device [ 127.917649][ T521] usb 5-1: USB disconnect, device number 2 [ 128.178497][ T36] audit: type=1326 audit(127.997:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7013 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de118f6c9 code=0x7fc00000 [ 128.209229][ T36] audit: type=1400 audit(128.027:1200): avc: denied { getopt } for pid=7017 comm="syz.3.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.504068][ T36] audit: type=1400 audit(128.317:1201): avc: denied { setopt } for pid=7022 comm="syz.1.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.526051][ T7025] overlayfs: failed to resolve './file0': -2 [ 128.564921][ T36] audit: type=1326 audit(128.387:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.1.2302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d60d8f6c9 code=0x0 [ 128.641084][ T36] audit: type=1326 audit(128.457:1203): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.2304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794458f6c9 code=0x0 [ 128.712575][ T7047] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 128.979727][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.994430][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.002601][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.010671][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.018847][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.027346][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.035409][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.043483][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.051729][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.060032][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.068417][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.076817][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.085162][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.093545][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.101628][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.109902][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.118394][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.126768][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.135151][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.143427][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.151653][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.161114][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.183101][ T7064] Invalid ELF header magic: != ELF [ 129.188407][ T36] audit: type=1400 audit(129.007:1204): avc: denied { module_load } for pid=7063 comm="syz.3.2311" path="/bus" dev="ramfs" ino=27970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 129.211599][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.222206][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.230403][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.238691][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.256218][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.264687][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.273243][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.281483][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.289845][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.298219][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.306609][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.314911][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.323122][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.331301][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.340064][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.348455][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.356708][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.365279][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.373760][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.381881][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.390154][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.398590][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.407022][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.415491][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.423796][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.432129][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.440488][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.449261][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.458547][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.467103][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.480670][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.489152][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.497374][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.510150][ T7079] netlink: 'syz.3.2315': attribute type 27 has an invalid length. [ 129.521418][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.535615][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.536411][ T7079] sit0: left promiscuous mode [ 129.543938][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.556510][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.564602][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.573156][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.581706][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.589805][ T7079] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 129.589941][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.596719][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.608163][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.621106][ T7060] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.714145][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 129.770603][ T7112] rust_binder: Got transaction with invalid offset. [ 129.770645][ T7112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.782760][ T7112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 129.790234][ T7114] netlink: 'syz.0.2328': attribute type 2 has an invalid length. [ 129.813416][ T36] audit: type=1400 audit(129.637:1205): avc: denied { ioctl } for pid=7115 comm="syz.4.2329" path="socket:[28099]" dev="sockfs" ino=28099 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.868361][ T7122] fuse: Bad value for 'rootmode' [ 129.984333][ T9] usb 4-1: USB disconnect, device number 5 [ 130.142568][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.162516][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.169608][ T7136] bridge_slave_0: entered allmulticast mode [ 130.207870][ T7136] bridge_slave_0: entered promiscuous mode [ 130.230278][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.249642][ T36] audit: type=1400 audit(130.067:1206): avc: denied { setattr } for pid=7147 comm="syz.1.2341" name="KEY" dev="sockfs" ino=28208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.254645][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.279137][ T7136] bridge_slave_1: entered allmulticast mode [ 130.285718][ T7136] bridge_slave_1: entered promiscuous mode [ 130.301588][ T7152] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 130.350483][ T12] 0ªî{X¹¦: left allmulticast mode [ 130.369501][ T12] 0ªî{X¹¦: left promiscuous mode [ 130.374914][ T12] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 130.376066][ T7158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.382193][ T12] bridge_slave_0: left allmulticast mode [ 130.392455][ T7158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 130.397080][ T7158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:70 [ 130.399264][ T12] bridge_slave_0: left promiscuous mode [ 130.422937][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.430914][ T7161] 9pnet_fd: Insufficient options for proto=fd [ 130.536365][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.543471][ T7136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.550782][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.557859][ T7136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.589916][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.607196][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.636209][ T12] tipc: Disabling bearer [ 130.643772][ T12] tipc: Left network mode [ 130.643820][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.655262][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.694446][ T36] audit: type=1404 audit(130.517:1207): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 130.739614][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.746697][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.798852][ T7136] veth0_vlan: entered promiscuous mode [ 130.826476][ T7136] veth1_macvtap: entered promiscuous mode [ 130.852802][ T7212] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2363'. [ 130.861900][ T7212] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.887537][ T7217] netlink: 'syz.1.2365': attribute type 4 has an invalid length. [ 131.203446][ T12] bridge_slave_1: left allmulticast mode [ 131.209101][ T12] bridge_slave_1: left promiscuous mode [ 131.214788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.222278][ T12] bridge_slave_0: left allmulticast mode [ 131.228060][ T12] bridge_slave_0: left promiscuous mode [ 131.233709][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.384595][ T12] veth1_macvtap: left promiscuous mode [ 131.390220][ T12] veth0_vlan: left promiscuous mode [ 131.408339][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 131.408353][ T36] audit: type=1400 audit(131.227:1298): avc: denied { execmem } for pid=7221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 131.446975][ T36] audit: type=1400 audit(131.237:1299): avc: denied { create } for pid=7224 comm="syz.4.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 131.468514][ T36] audit: type=1400 audit(131.237:1300): avc: denied { create } for pid=7224 comm="syz.4.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 131.490481][ T36] audit: type=1400 audit(131.247:1301): avc: denied { read write } for pid=6007 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.514128][ T36] audit: type=1400 audit(131.257:1302): avc: denied { create } for pid=7222 comm="syz.0.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 131.534051][ T36] audit: type=1400 audit(131.257:1303): avc: denied { create } for pid=7222 comm="syz.0.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 131.555285][ T36] audit: type=1400 audit(131.257:1304): avc: denied { name_bind } for pid=7222 comm="syz.0.2366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 131.576817][ T36] audit: type=1400 audit(131.257:1305): avc: denied { create } for pid=7222 comm="syz.0.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 131.596890][ T36] audit: type=1400 audit(131.287:1306): avc: denied { read write } for pid=7226 comm="syz.1.2368" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 131.619636][ T36] audit: type=1400 audit(131.287:1307): avc: denied { read write } for pid=7226 comm="syz.1.2368" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 131.959068][ T7240] netlink: 'syz.4.2371': attribute type 27 has an invalid length. [ 134.092208][ T7266] netlink: 'syz.0.2377': attribute type 46 has an invalid length. [ 137.116457][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 137.116475][ T36] audit: type=1400 audit(136.937:1385): avc: denied { execmem } for pid=7287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 137.142371][ T36] audit: type=1400 audit(136.937:1386): avc: denied { read } for pid=7290 comm="syz.1.2387" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 137.164401][ T36] audit: type=1400 audit(136.937:1387): avc: denied { append } for pid=7290 comm="syz.1.2387" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 137.186671][ T36] audit: type=1400 audit(136.937:1388): avc: denied { create } for pid=7290 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.206494][ T36] audit: type=1400 audit(136.937:1389): avc: denied { create } for pid=7290 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.226344][ T36] audit: type=1400 audit(136.947:1390): avc: denied { read write } for pid=6007 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.249834][ T36] audit: type=1400 audit(136.957:1391): avc: denied { execmem } for pid=7288 comm="syz.0.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 137.268470][ T36] audit: type=1400 audit(136.967:1392): avc: denied { read } for pid=7289 comm="syz.4.2388" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 137.288990][ T36] audit: type=1400 audit(136.967:1393): avc: denied { read write } for pid=7289 comm="syz.4.2388" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 137.311585][ T36] audit: type=1400 audit(136.967:1394): avc: denied { read } for pid=7289 comm="syz.4.2388" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 142.559313][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 142.559330][ T36] audit: type=1400 audit(142.377:1430): avc: denied { name_bind } for pid=7321 comm="syz.0.2398" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 142.586641][ T36] audit: type=1400 audit(142.387:1431): avc: denied { read } for pid=7322 comm="syz.1.2399" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 142.608681][ T36] audit: type=1400 audit(142.387:1432): avc: denied { execmem } for pid=7320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 142.627522][ T36] audit: type=1400 audit(142.397:1433): avc: denied { read write } for pid=6007 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.651080][ T36] audit: type=1400 audit(142.407:1434): avc: denied { read } for pid=7324 comm="syz.4.2400" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 142.673155][ T36] audit: type=1400 audit(142.407:1435): avc: denied { create } for pid=7324 comm="syz.4.2400" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 142.693764][ T36] audit: type=1400 audit(142.417:1436): avc: denied { read write } for pid=6915 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.717243][ T36] audit: type=1400 audit(142.457:1437): avc: denied { create } for pid=7321 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 142.737087][ T36] audit: type=1400 audit(142.457:1438): avc: denied { create } for pid=7321 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 142.756965][ T36] audit: type=1400 audit(142.467:1439): avc: denied { execute } for pid=7321 comm="syz.0.2398" path="/432/cpuacct.usage_percpu" dev="tmpfs" ino=2346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 147.707957][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 147.707976][ T36] audit: type=1400 audit(147.527:1465): avc: denied { execmem } for pid=7347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 147.735378][ T36] audit: type=1400 audit(147.537:1466): avc: denied { read } for pid=7348 comm="syz.1.2408" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 147.776518][ T36] audit: type=1400 audit(147.537:1467): avc: denied { create } for pid=7348 comm="syz.1.2408" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 147.797252][ T36] audit: type=1400 audit(147.537:1468): avc: denied { create } for pid=7348 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 147.816510][ T36] audit: type=1400 audit(147.537:1469): avc: denied { read write } for pid=7348 comm="syz.1.2408" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 147.839026][ T36] audit: type=1400 audit(147.537:1470): avc: denied { create } for pid=7348 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 147.858855][ T36] audit: type=1400 audit(147.537:1471): avc: denied { write } for pid=7348 comm="syz.1.2408" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 147.881069][ T36] audit: type=1400 audit(147.537:1472): avc: denied { read write } for pid=6007 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 147.904726][ T36] audit: type=1400 audit(147.557:1473): avc: denied { create } for pid=7354 comm="syz.1.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 147.924713][ T36] audit: type=1400 audit(147.557:1474): avc: denied { read } for pid=7354 comm="syz.1.2410" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 151.954207][ T333] bridge_slave_1: left allmulticast mode [ 151.959915][ T333] bridge_slave_1: left promiscuous mode [ 151.965737][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.974020][ T333] bridge_slave_0: left allmulticast mode [ 151.979685][ T333] bridge_slave_0: left promiscuous mode [ 151.985388][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.993784][ T333] bridge_slave_1: left allmulticast mode [ 151.999469][ T333] bridge_slave_1: left promiscuous mode [ 152.005128][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.012899][ T333] bridge_slave_0: left allmulticast mode [ 152.018538][ T333] bridge_slave_0: left promiscuous mode [ 152.024179][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.185976][ T333] veth1_macvtap: left promiscuous mode [ 152.191493][ T333] veth0_vlan: left promiscuous mode [ 152.197224][ T333] veth1_macvtap: left promiscuous mode [ 152.202793][ T333] veth0_vlan: left promiscuous mode