last executing test programs: 10.181906613s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 8.388128155s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 6.470567377s ago: executing program 1 (id=204): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0xb66f) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/158, 0x9e, 0x0, 0x0, 0xfffffffffffffe88}, &(0x7f0000000400)=0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x4000) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r6) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x14) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0xa4, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x668a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1e5f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x19}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x40004830) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) sendmsg$nl_netfilter(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x90, 0x12, 0x1, 0x5, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x9}, [@generic="d5412cf16c844b93f5f171504368ba58930ff802c0e1ca99db41c2c286a01a3f8b46a6d4ee4e5430d9f7abc370baaf95b9d6fc9246e8c770cce610ee21064a6e6e63ec3ed47db084cd21f48e740e61b9d34fc3b3bf5699e7505db89202f865392855e19f5bd2ba5ccb525740dd0ba67896eeb9e21ee12d7c9dd5"]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6.436285828s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 4.58880168s ago: executing program 1 (id=208): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)={@val={0x0, 0x2}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x6558}}}}, 0x1a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.394962441s ago: executing program 0 (id=210): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000003340)={0x2020}, 0x2020) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x3, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) 4.394680661s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 4.394580591s ago: executing program 1 (id=211): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x10000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x10000) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) (async) 2.474613823s ago: executing program 0 (id=212): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) 2.469514463s ago: executing program 1 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e21, 0x8, 0xa, 0x0, 0x0, 0x2b, r3, r4}, {0x3, 0x876, 0x1, 0x6, 0x0, 0x4, 0x4c6, 0xfff}, {0xffffffffffffffc0, 0x20002000000, 0x1, 0x4}, 0x6, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x3500, 0x3, 0x3, 0xe3, 0x4, 0xc, 0xffffff82}}, 0xe8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x4000000000002f5, 0x1, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004300)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r9, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x6) 2.411742924s ago: executing program 0 (id=215): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="0f20c035000000800f22c0c4017a11a58353618ac401d05fd366ba200066b8890066ef66420f72d19ac7442400e4000000c7442402fffae64eff2c24440f20c03504000000440f22c066bad004b885eb0a10efb8010000000f01c1260f884bab0000", 0x62}], 0x1, 0x4d, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.411453734s ago: executing program 3 (id=216): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/rnullb0\x00') munlockall() (async) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 2.265798205s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 187.874818ms ago: executing program 0 (id=217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r2 = socket$inet(0x2, 0x1, 0x9) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000080)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000040)={0x9, 0x8}}) r4 = fcntl$getown(r0, 0x9) ptrace$setregs(0xf, r4, 0xc, &(0x7f0000000280)="2bfb24b96f33911cf7120d215a67289ecbf2163612d745d5d3cb38873bd96fc688dd672122259faca74ed46338e3012f2d73241d38a5688e526518455537c39e09a4f19170447fccb433279794bdd84c9d2dbed869486f4d0717eeab91d14f229ba3afa7b25e284cee91363725660ad9dfde03ddbd9610c5736660b85fd31735a0ffcfb4863e663d2809b19e5591902d2c7e546f1e8188eb96ecefbcc426f5903195296454b3a58bd55a8c6b4a72477c164c7a8e2386c478821122f5a743bf43ff55f42fd8461d595e6c22fcee23c84f113cca97b473e6e219c90fa93d2f41de7f021526d4f12b13256d5331364c60f1fbadf20ffe4fcfd46d5eeecfc4") 187.529758ms ago: executing program 1 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, &(0x7f0000000500)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff8, 0x3, 0x2, 0x8, 0x2}) 184.098629ms ago: executing program 3 (id=219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x1) (async) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r0, 0x3000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 155.558498ms ago: executing program 0 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x2003, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000000080)='./file0\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000240)) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f00000002c0)) r8 = fsmount(r5, 0x1, 0x6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x89d, 0x0, 0x81}]}) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r12, 0x4068aea3, &(0x7f0000000400)={0x80, 0x0, 0x2}) fsmount(r5, 0x0, 0x85) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x0, 0x0, 0x0}) 103.544049ms ago: executing program 1 (id=221): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x6, @string={0x6, 0x3, "244602dd"}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)={0x1}) 81.385059ms ago: executing program 3 (id=222): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802) socket$tipc(0x1e, 0x2, 0x0) (async) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x10406) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async, rerun: 64) r4 = dup(r2) (rerun: 64) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) write$FUSE_DIRENT(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00', @ANYRES64], 0x30) (async) write$FUSE_BMAP(r4, &(0x7f0000000380)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0xfdef}], 0x1) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x5) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 75.842089ms ago: executing program 0 (id=223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpriority(0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 13.012539ms ago: executing program 3 (id=224): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2008}, {r0}], 0x2, &(0x7f00000002c0), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$inet6(0xa, 0xd43b39853deed28a, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 12.272459ms ago: executing program 3 (id=225): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="54040000ec03"], 0x454}, 0x1, 0x0, 0x0, 0x40018}, 0x200000a0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) 11.31505ms ago: executing program 3 (id=226): rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async) 0s ago: executing program 2 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) listen(r4, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r4, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a07000000070f00f40000002a25f4b2a25be1cfad445e0e7f017ef5c9daf32006b795b2e134aaaefcf632f60dc0799fc06f77ff824313a0a0915ee501b1d78425e825a4a4ac437004e8745787105d8df201e00a50c9ec32a859a88d97d7515e6d75f31900b926c8f4e190328e88a746966b386817c174cedfbda7b9f5cfe641206ce54ee997b07994bd3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 21.282472][ T36] audit: type=1400 audit(1762823426.810:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.283719][ T283] cgroup: Unknown subsys name 'net' [ 21.305236][ T36] audit: type=1400 audit(1762823426.810:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.332505][ T36] audit: type=1400 audit(1762823426.840:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.332668][ T283] cgroup: Unknown subsys name 'devices' [ 21.472738][ T283] cgroup: Unknown subsys name 'hugetlb' [ 21.478331][ T283] cgroup: Unknown subsys name 'rlimit' [ 21.589724][ T36] audit: type=1400 audit(1762823427.110:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.612960][ T36] audit: type=1400 audit(1762823427.110:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.620549][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.637899][ T36] audit: type=1400 audit(1762823427.110:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.669376][ T36] audit: type=1400 audit(1762823427.170:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.674639][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.695281][ T36] audit: type=1400 audit(1762823427.170:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.729548][ T36] audit: type=1400 audit(1762823427.200:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.755160][ T36] audit: type=1400 audit(1762823427.200:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.533299][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.540378][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.547457][ T293] bridge_slave_0: entered allmulticast mode [ 22.553756][ T293] bridge_slave_0: entered promiscuous mode [ 22.567238][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.574298][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.581419][ T293] bridge_slave_1: entered allmulticast mode [ 22.587552][ T293] bridge_slave_1: entered promiscuous mode [ 22.599560][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.606626][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.613761][ T291] bridge_slave_0: entered allmulticast mode [ 22.619891][ T291] bridge_slave_0: entered promiscuous mode [ 22.631491][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.638559][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.645638][ T292] bridge_slave_0: entered allmulticast mode [ 22.651808][ T292] bridge_slave_0: entered promiscuous mode [ 22.661145][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.668173][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.675252][ T291] bridge_slave_1: entered allmulticast mode [ 22.681410][ T291] bridge_slave_1: entered promiscuous mode [ 22.690327][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.697355][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.704569][ T292] bridge_slave_1: entered allmulticast mode [ 22.710882][ T292] bridge_slave_1: entered promiscuous mode [ 22.716927][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.724214][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.731392][ T290] bridge_slave_0: entered allmulticast mode [ 22.737514][ T290] bridge_slave_0: entered promiscuous mode [ 22.752642][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.759683][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.766842][ T290] bridge_slave_1: entered allmulticast mode [ 22.773088][ T290] bridge_slave_1: entered promiscuous mode [ 22.913457][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.920514][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.927781][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.934811][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.950930][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.957969][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.965248][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.972271][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.991058][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.998114][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.005389][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.012412][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.032876][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.040017][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.047292][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.054324][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.081598][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.088952][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.096343][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.104076][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.111372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118580][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.125929][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.133237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.147262][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.154317][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.166883][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.173936][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.194734][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.201802][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.209342][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.216387][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.224025][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.231076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.239550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.246591][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.256775][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.263821][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.277424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.284486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.328245][ T293] veth0_vlan: entered promiscuous mode [ 23.346853][ T291] veth0_vlan: entered promiscuous mode [ 23.354441][ T292] veth0_vlan: entered promiscuous mode [ 23.362139][ T293] veth1_macvtap: entered promiscuous mode [ 23.384262][ T292] veth1_macvtap: entered promiscuous mode [ 23.391868][ T291] veth1_macvtap: entered promiscuous mode [ 23.416841][ T290] veth0_vlan: entered promiscuous mode [ 23.423400][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.472192][ T290] veth1_macvtap: entered promiscuous mode [ 23.501555][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.543051][ T341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.729734][ T361] rust_binder: 11: no such ref 3 [ 23.734983][ T361] rust_binder: inc_ref_done called when no active inc_refs [ 23.735003][ T361] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 23.749350][ T361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 23.750500][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.771130][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.891319][ T373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.910466][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.918120][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 23.923367][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 23.929683][ T65] usb 4-1: config index 0 descriptor too short (expected 25953, got 27) [ 23.930798][ T375] /dev/rnullb0: Can't open blockdev [ 23.939020][ T65] usb 4-1: config 9 has an invalid interface number: 144 but max is 0 [ 23.952776][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.963572][ T31] usb 3-1: config 0 has no interfaces? [ 23.966610][ T377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 23.969178][ T65] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 23.988051][ T65] usb 4-1: config 9 has no interface number 0 [ 23.995249][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 24.004337][ T65] usb 4-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.017566][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 24.025714][ T31] usb 3-1: Manufacturer: syz [ 24.030755][ T65] usb 4-1: config 9 interface 144 has no altsetting 0 [ 24.037707][ T31] usb 3-1: config 0 descriptor?? [ 24.044635][ T65] usb 4-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 24.053835][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.061991][ T65] usb 4-1: Product: syz [ 24.066164][ T65] usb 4-1: Manufacturer: syz [ 24.070980][ T65] usb 4-1: SerialNumber: syz [ 24.077751][ T65] r8152-cfgselector 4-1: Unknown version 0x0000 [ 24.084048][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 24.090842][ T45] usb 2-1: config index 0 descriptor too short (expected 33545, got 36) [ 24.099200][ T45] usb 2-1: config 124 has too many interfaces: 65, using maximum allowed: 32 [ 24.107988][ T45] usb 2-1: config 124 has an invalid descriptor of length 81, skipping remainder of the config [ 24.118371][ T45] usb 2-1: config 124 has 0 interfaces, different from the descriptor's value: 65 [ 24.127620][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 24.136802][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.220387][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.441411][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 24.460695][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.481848][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.506730][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 24.533944][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 24.543621][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 24.560521][ T10] usb 1-1: Manufacturer: syz [ 24.570266][ T10] usb 1-1: config 0 descriptor?? [ 24.989000][ T10] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 24.996932][ T10] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 25.006203][ T10] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 25.204298][ T65] r8152 4-1:9.144: Expected endpoints are not found [ 25.211059][ T45] usb 2-1: string descriptor 0 read error: -71 [ 25.223505][ T45] usb 2-1: USB disconnect, device number 2 [ 25.229506][ T65] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 25.520343][ T45] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 25.527779][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.680327][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 26.204359][ T45] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 26.213583][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.223755][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.231618][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.240658][ T45] usb 2-1: config 1 has no interface number 1 [ 26.247126][ T65] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 26.290503][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 26.290518][ T36] audit: type=1400 audit(1762823431.820:156): avc: denied { unlink } for pid=404 comm="syz.3.20" name="#1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.342981][ T36] audit: type=1400 audit(1762823431.840:157): avc: denied { mount } for pid=404 comm="syz.3.20" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.378328][ T36] audit: type=1400 audit(1762823431.850:158): avc: denied { getattr } for pid=408 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.424394][ T36] audit: type=1400 audit(1762823431.890:159): avc: denied { read } for pid=410 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.467954][ T36] audit: type=1400 audit(1762823431.890:160): avc: denied { open } for pid=410 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.493874][ T65] usb 4-1: can't read configurations, error -71 [ 26.500228][ T10] usb 3-1: USB disconnect, device number 2 [ 26.500746][ T36] audit: type=1400 audit(1762823431.990:161): avc: denied { create } for pid=407 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.533395][ T36] audit: type=1400 audit(1762823431.990:162): avc: denied { write } for pid=407 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.560741][ T36] audit: type=1400 audit(1762823431.990:163): avc: denied { append } for pid=407 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.585271][ T45] usb 2-1: string descriptor 0 read error: -22 [ 26.591516][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.600587][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.614011][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 26.626777][ T36] audit: type=1400 audit(1762823432.150:164): avc: denied { unlink } for pid=418 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.636639][ T421] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.696525][ T36] audit: type=1400 audit(1762823432.220:165): avc: denied { write } for pid=423 comm="syz.2.22" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.815986][ T31] usb 2-1: USB disconnect, device number 3 [ 26.970466][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.993158][ T45] usb 1-1: USB disconnect, device number 2 [ 27.005752][ T432] loop7: detected capacity change from 0 to 7 [ 27.012338][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.021505][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.029436][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.038562][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.046406][ T432] loop7: unable to read partition table [ 27.052332][ T432] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 27.060387][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.074940][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.084098][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.093275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.101626][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.107973][ T434] tipc: Started in network mode [ 27.110831][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.115808][ T434] tipc: Node identity aa0cdedbd188, cluster identity 4711 [ 27.124213][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.131681][ T434] tipc: Enabled bearer , priority 0 [ 27.139729][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.146559][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 27.154871][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.168589][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.172364][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.183448][ T436] syzkaller0: entered promiscuous mode [ 27.194238][ T10] usb 3-1: config 0 descriptor?? [ 27.197481][ T436] syzkaller0: entered allmulticast mode [ 27.211589][ T434] tipc: Resetting bearer [ 27.273316][ T436] syz.3.25 (436): attempted to duplicate a private mapping with mremap. This is not supported. [ 27.322114][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 27.344262][ T443] rust_binder: Write failure EFAULT in pid:16 [ 27.357517][ T445] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 27.363741][ T445] rust_binder: Error while translating object. [ 27.376177][ T445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.382613][ T445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 27.401870][ T447] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use) [ 27.408239][ T10] usb 3-1: Cannot set autoneg [ 27.447788][ T453] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 27.453226][ T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 27.468030][ T433] tipc: Resetting bearer [ 27.472385][ T10] usb 3-1: USB disconnect, device number 3 [ 27.480561][ T433] tipc: Disabling bearer [ 27.558200][ T473] rust_binder: Error in use_page_slow: ESRCH [ 27.558215][ T473] rust_binder: use_range failure ESRCH [ 27.570247][ T455] rust_binder: Error while translating object. [ 27.570321][ T455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.577683][ T455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:37 [ 27.586032][ T473] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 27.586463][ T468] rust_binder: 37: no such ref 3 [ 27.608658][ T473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.608687][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:27 [ 27.618203][ T468] rust_binder: inc_ref_done called when no active inc_refs [ 27.627419][ T468] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 27.641718][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 27.696706][ T490] rust_binder: 36: no such ref 0 [ 27.711425][ T490] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 27.718471][ T490] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 27.725762][ T490] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 27.732892][ T490] rust_binder: 36: no such ref 0 [ 27.854142][ T500] rust_binder: Error while translating object. [ 27.854196][ T500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 27.860421][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:46 [ 27.888599][ T504] exFAT-fs (rnullb0): invalid boot record signature [ 27.904224][ T504] exFAT-fs (rnullb0): failed to read boot sector [ 27.910614][ T504] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.926158][ T506] rust_binder: 52: no such ref 0 [ 27.931970][ T506] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 27.939180][ T506] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 28.010357][ T387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.030323][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.038434][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.160356][ T387] usb 2-1: Using ep0 maxpacket: 16 [ 28.166596][ T387] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.177858][ T387] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.184492][ T387] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 28.193602][ T387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.200313][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 28.207150][ T387] usb 2-1: config 0 descriptor?? [ 28.208766][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 28.221027][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 28.231141][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.241586][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.250713][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.258744][ T45] usb 4-1: Product: syz [ 28.263524][ T45] usb 4-1: Manufacturer: syz [ 28.268368][ T45] usb 4-1: SerialNumber: syz [ 28.677445][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.686188][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.703846][ T490] erofs: Bad value for 'dax' [ 28.722781][ T45] usb 4-1: 0:2 : does not exist [ 28.787745][ T525] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 28.839489][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 28.928944][ T10] usb 4-1: USB disconnect, device number 5 [ 29.174057][ T540] rust_binder: Write failure EFAULT in pid:73 [ 29.190235][ T544] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 29.208826][ T544] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 29.223227][ T544] kvm: user requested TSC rate below hardware speed [ 29.470346][ T362] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.522371][ T558] rust_binder: Error while translating object. [ 29.522413][ T558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.528644][ T558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:39 [ 29.570357][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.621940][ T362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.633115][ T362] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 29.642237][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.651613][ T362] usb 1-1: config 0 descriptor?? [ 29.730318][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 29.736697][ T45] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.746846][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.753490][ T45] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 29.762594][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.771695][ T45] usb 3-1: config 0 descriptor?? [ 30.059029][ T362] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 30.066816][ T362] lenovo 0003:17EF:6067.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 30.090361][ T517] Bluetooth: hci0: command 0x1003 tx timeout [ 30.096481][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.180161][ T45] elecom 0003:056E:00FF.0003: item fetching failed at offset 7/8 [ 30.188215][ T45] elecom 0003:056E:00FF.0003: probe with driver elecom failed with error -22 [ 30.284569][ T533] usb 1-1: USB disconnect, device number 3 [ 30.382066][ T556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.390712][ T556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.400502][ T556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.409051][ T556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.417550][ T45] usb 3-1: USB disconnect, device number 4 [ 30.750403][ T533] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 30.880322][ T533] usb 4-1: device descriptor read/64, error -71 [ 30.943051][ T387] usbhid 2-1:0.0: can't add hid device: -71 [ 30.949066][ T387] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.957717][ T387] usb 2-1: USB disconnect, device number 4 [ 31.110373][ T569] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.120384][ T533] usb 4-1: device descriptor read/64, error -71 [ 31.170386][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.260333][ T569] usb 1-1: device descriptor read/64, error -71 [ 31.321440][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.332385][ T45] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 31.341437][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.349914][ T45] usb 3-1: config 0 descriptor?? [ 31.355191][ T573] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 31.362407][ T533] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 31.500340][ T569] usb 1-1: device descriptor read/64, error -71 [ 31.506665][ T533] usb 4-1: device descriptor read/64, error -71 [ 31.740342][ T569] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 31.750432][ T533] usb 4-1: device descriptor read/64, error -71 [ 31.765190][ T573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.773760][ T573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.782085][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 31.782101][ T36] audit: type=1400 audit(1762823437.310:212): avc: denied { listen } for pid=572 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.787499][ T573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.816004][ T573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.825323][ T573] Zero length message leads to an empty skb [ 31.831941][ T36] audit: type=1400 audit(1762823437.360:213): avc: denied { ioctl } for pid=572 comm="syz.2.66" path="socket:[4850]" dev="sockfs" ino=4850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.856526][ T36] audit: type=1400 audit(1762823437.360:214): avc: denied { ioctl } for pid=572 comm="syz.2.66" path="socket:[4855]" dev="sockfs" ino=4855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.880984][ T569] usb 1-1: device descriptor read/64, error -71 [ 31.887296][ T533] usb usb4-port1: attempt power cycle [ 31.979384][ T36] audit: type=1400 audit(1762823437.500:215): avc: denied { ioctl } for pid=587 comm="syz.1.71" path="socket:[3992]" dev="sockfs" ino=3992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.004364][ T36] audit: type=1400 audit(1762823437.510:216): avc: denied { getopt } for pid=587 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.038518][ T36] audit: type=1400 audit(1762823437.560:217): avc: denied { execute } for pid=589 comm="syz.1.72" path="/22/cpuacct.usage_percpu" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.110328][ T36] audit: type=1400 audit(1762823437.630:218): avc: denied { write } for pid=591 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.142513][ T599] binder: Unknown parameter 'obj_user' [ 32.150335][ T569] usb 1-1: device descriptor read/64, error -71 [ 32.230333][ T533] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 32.251311][ T533] usb 4-1: device descriptor read/8, error -71 [ 32.260506][ T569] usb usb1-port1: attempt power cycle [ 32.375283][ T604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 32.375448][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.385596][ T533] usb 4-1: device descriptor read/8, error -71 [ 32.386244][ T36] audit: type=1400 audit(1762823437.910:219): avc: denied { create } for pid=603 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.417508][ T36] audit: type=1400 audit(1762823437.920:220): avc: denied { map } for pid=603 comm="syz.2.77" path="socket:[4878]" dev="sockfs" ino=4878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.440842][ T36] audit: type=1400 audit(1762823437.920:221): avc: denied { read } for pid=603 comm="syz.2.77" path="socket:[4878]" dev="sockfs" ino=4878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.450343][ T387] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.541977][ T608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.551420][ T611] capability: warning: `syz.2.79' uses deprecated v2 capabilities in a way that may be insecure [ 32.591081][ T619] rust_binder: Error while translating object. [ 32.591106][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.597329][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:52 [ 32.610360][ T569] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 32.630439][ T533] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 32.640327][ T387] usb 2-1: Using ep0 maxpacket: 16 [ 32.646570][ T569] usb 1-1: device descriptor read/8, error -71 [ 32.652847][ T387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.663062][ T387] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 32.672214][ T387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 32.683632][ T387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.693364][ T387] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.704263][ T387] usb 2-1: config 1 interface 1 has no altsetting 0 [ 32.710918][ T533] usb 4-1: device descriptor read/8, error -71 [ 32.718491][ T387] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.727563][ T387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.735563][ T387] usb 2-1: Product: syz [ 32.739711][ T387] usb 2-1: Manufacturer: syz [ 32.744399][ T387] usb 2-1: SerialNumber: syz [ 32.781308][ T569] usb 1-1: device descriptor read/8, error -71 [ 32.841316][ T533] usb 4-1: device descriptor read/8, error -71 [ 32.950458][ T533] usb usb4-port1: unable to enumerate USB device [ 32.951402][ T602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=602 comm=syz.1.76 [ 33.030320][ T569] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 33.051333][ T569] usb 1-1: device descriptor read/8, error -71 [ 33.181341][ T569] usb 1-1: device descriptor read/8, error -71 [ 33.290558][ T569] usb usb1-port1: unable to enumerate USB device [ 33.540270][ T628] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 33.727430][ T630] netlink: 140 bytes leftover after parsing attributes in process `syz.3.85'. [ 33.738036][ T630] rust_binder: 51: no such ref 0 [ 33.743037][ T630] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 33.750117][ T630] rust_binder: 51: no such ref 2 [ 33.755125][ T630] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 34.293845][ T675] rust_binder: 61: no such ref 1 [ 34.307322][ T675] rust_binder: Write failure EFAULT in pid:61 [ 34.308166][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.322766][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.484475][ T681] tipc: Cannot configure node identity twice [ 34.694019][ T692] rust_binder: Error in use_page_slow: ESRCH [ 34.694053][ T692] rust_binder: use_range failure ESRCH [ 34.700175][ T692] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 34.705863][ T692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.714213][ T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 35.060374][ T569] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.176127][ T387] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 35.184061][ T387] usb 2-1: 2:1 : format type 9 is not supported yet [ 35.194846][ T387] usb 2-1: USB disconnect, device number 5 [ 35.205900][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.250374][ T569] usb 1-1: Using ep0 maxpacket: 8 [ 35.256864][ T569] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.267191][ T569] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.276237][ T569] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 35.287898][ T569] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 35.299123][ T569] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 35.310415][ T569] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 35.319458][ T569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.337802][ T569] hub 1-1:1.0: bad descriptor, ignoring hub [ 35.345626][ T569] hub 1-1:1.0: probe with driver hub failed with error -5 [ 35.353979][ T569] cdc_wdm 1-1:1.0: skipping garbage [ 35.359747][ T569] cdc_wdm 1-1:1.0: skipping garbage [ 35.365555][ T569] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 35.650311][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 35.750465][ T569] usb 1-1: USB disconnect, device number 8 [ 35.801240][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.811064][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 35.820140][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.829006][ T31] usb 2-1: config 0 descriptor?? [ 35.923800][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 35.932303][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 35.943144][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 35.943767][ T740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 35.954085][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 35.968996][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 35.979711][ T741] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 222) [ 35.979735][ T741] rust_binder: Error while translating object. [ 35.980200][ T729] kvm_intel: kvm [728]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 35.990443][ T741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.005443][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 36.035519][ T743] 9pnet_fd: Insufficient options for proto=fd [ 36.164025][ T46] bridge_slave_1: left allmulticast mode [ 36.165126][ T762] rust_binder: Write failure EINVAL in pid:109 [ 36.176491][ T46] bridge_slave_1: left promiscuous mode [ 36.177027][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 36.182979][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.201486][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.210539][ T46] bridge_slave_0: left allmulticast mode [ 36.216198][ T46] bridge_slave_0: left promiscuous mode [ 36.222910][ T45] usb 3-1: USB disconnect, device number 5 [ 36.233379][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.252084][ T31] hid-picolcd 0003:04D8:C002.0004: item fetching failed at offset 5/7 [ 36.262490][ T31] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 36.270018][ T31] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22 [ 36.348962][ T752] tipc: New replicast peer: 255.255.255.255 [ 36.355138][ T752] tipc: Enabled bearer , priority 10 [ 36.363666][ T46] veth1_macvtap: left promiscuous mode [ 36.369248][ T46] veth0_vlan: left promiscuous mode [ 36.446432][ T717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 36.458788][ T45] usb 2-1: USB disconnect, device number 6 [ 36.470311][ T65] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.630439][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 36.636665][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.646457][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.655350][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.664628][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.674342][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.684066][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.697097][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.706174][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.718353][ T65] usb 1-1: config 0 descriptor?? [ 36.925967][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 36.938410][ T65] usb 1-1: USB disconnect, device number 9 [ 36.945034][ T65] usblp0: removed [ 37.044957][ T781] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.044981][ T781] rust_binder: Read failure Err(EFAULT) in pid:90 [ 37.054537][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 37.054553][ T36] audit: type=1400 audit(1762823442.580:266): avc: denied { map } for pid=780 comm="syz.1.132" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.091392][ T781] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 37.430366][ T65] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.470355][ T9] tipc: Node number set to 2072305371 [ 37.580347][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 37.586550][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.594937][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.603561][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.612710][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.622393][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.632071][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.645076][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.654140][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.669600][ T65] usb 1-1: config 0 descriptor?? [ 37.703785][ T36] audit: type=1400 audit(1762823443.230:267): avc: denied { bind } for pid=787 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.755412][ T788] ======================================================= [ 37.755412][ T788] WARNING: The mand mount option has been deprecated and [ 37.755412][ T788] and is ignored by this kernel. Remove the mand [ 37.755412][ T788] option from the mount to silence this warning. [ 37.755412][ T788] ======================================================= [ 37.790415][ T788] fuse: Bad value for 'fd' [ 37.876295][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.030347][ T569] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.181355][ T569] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 38.191696][ T569] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 38.200757][ T569] usb 2-1: config 220 interface 0 has no altsetting 0 [ 38.208853][ T569] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 38.217931][ T569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.225932][ T569] usb 2-1: Product: syz [ 38.230095][ T569] usb 2-1: Manufacturer: syz [ 38.234717][ T36] audit: type=1400 audit(1762823443.750:268): avc: denied { read write } for pid=765 comm="syz.0.130" name="lp0" dev="devtmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 38.235473][ T45] usb 1-1: USB disconnect, device number 10 [ 38.259178][ T569] usb 2-1: SerialNumber: syz [ 38.269834][ T36] audit: type=1400 audit(1762823443.750:269): avc: denied { open } for pid=765 comm="syz.0.130" path="/dev/usb/lp0" dev="devtmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 38.294468][ T45] usblp0: removed [ 38.496392][ T36] audit: type=1400 audit(1762823444.020:270): avc: denied { ioctl } for pid=787 comm="syz.1.133" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.562560][ T569] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 38.568975][ T569] usb 2-1: No valid video chain found. [ 38.576069][ T569] usb 2-1: USB disconnect, device number 7 [ 39.190634][ T36] audit: type=1400 audit(1762823444.720:271): avc: denied { append } for pid=797 comm="syz.1.135" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.201017][ T800] process 'syz.0.134' launched '/dev/fd/4' with NULL argv: empty string added [ 39.249835][ T36] audit: type=1400 audit(1762823444.760:272): avc: denied { ioctl } for pid=805 comm="syz.1.137" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.307119][ T36] audit: type=1400 audit(1762823444.770:273): avc: denied { execute_no_trans } for pid=796 comm="syz.0.134" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.540370][ T569] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 39.691498][ T569] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.704328][ T569] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 39.713407][ T569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.721907][ T569] usb 2-1: config 0 descriptor?? [ 40.140852][ T569] usbhid 2-1:0.0: can't add hid device: -71 [ 40.146902][ T569] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 40.156618][ T569] usb 2-1: USB disconnect, device number 8 [ 40.330586][ T904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 40.420817][ T36] audit: type=1400 audit(1762823445.950:274): avc: denied { watch_reads } for pid=883 comm="syz.0.143" path="/37/file1" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.446584][ T885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.273258][ T911] rust_binder: Write failure EFAULT in pid:121 [ 41.308980][ T916] __vm_enough_memory: pid: 916, comm: syz.0.153, bytes: 18014402804453376 not enough memory for the allocation [ 41.331305][ T36] audit: type=1400 audit(1762823446.860:275): avc: denied { getopt } for pid=917 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.420341][ T517] Bluetooth: hci0: command 0x1003 tx timeout [ 42.420368][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.851115][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 43.851132][ T36] audit: type=1400 audit(1762823449.370:278): avc: denied { read } for pid=960 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.120346][ T65] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.272661][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 44.281877][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.289843][ T65] usb 2-1: Product: syz [ 44.294035][ T65] usb 2-1: Manufacturer: syz [ 44.298621][ T65] usb 2-1: SerialNumber: syz [ 45.167636][ T36] audit: type=1400 audit(1762823450.690:279): avc: denied { bind } for pid=980 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.204292][ T36] audit: type=1400 audit(1762823450.690:280): avc: denied { node_bind } for pid=980 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.229313][ T987] fuse: blksize only supported for fuseblk [ 45.444661][ T36] audit: type=1400 audit(1762823450.970:281): avc: denied { read } for pid=989 comm="syz.0.170" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.445436][ T991] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 45.468099][ T36] audit: type=1400 audit(1762823450.970:282): avc: denied { open } for pid=989 comm="syz.0.170" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.475553][ T991] rust_binder: Write failure EFAULT in pid:139 [ 45.498852][ T36] audit: type=1400 audit(1762823450.970:283): avc: denied { ioctl } for pid=989 comm="syz.0.170" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.747028][ T36] audit: type=1400 audit(1762823452.270:284): avc: denied { block_suspend } for pid=1011 comm="syz.0.177" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.808516][ T533] usb 2-1: USB disconnect, device number 9 [ 48.181550][ T36] audit: type=1400 audit(1762823453.710:285): avc: denied { ioctl } for pid=1018 comm="syz.1.179" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.594228][ T36] audit: type=1400 audit(1762823457.120:286): avc: denied { setattr } for pid=1047 comm="syz.0.187" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 51.638884][ T1058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.686716][ T36] audit: type=1400 audit(1762823457.210:287): avc: denied { ioctl } for pid=1068 comm="syz.3.193" path="socket:[6947]" dev="sockfs" ino=6947 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.533672][ T1081] rust_binder: Write failure EFAULT in pid:139 [ 53.555332][ T1084] binder: Unknown parameter '' [ 53.566521][ T36] audit: type=1400 audit(1762823459.080:288): avc: denied { remount } for pid=1083 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.587614][ T1084] binder: Unknown parameter '' [ 53.591114][ T1093] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 53.647729][ T36] audit: type=1400 audit(1762823459.170:289): avc: denied { mount } for pid=1102 comm="syz.1.204" name="/" dev="ramfs" ino=6968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.880400][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 54.030344][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 54.036449][ T65] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.047417][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.054112][ T65] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 54.063150][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.071597][ T65] usb 1-1: config 0 descriptor?? [ 54.321670][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 54.327634][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 54.336208][ T65] usb 1-1: USB disconnect, device number 11 [ 55.535954][ T36] audit: type=1400 audit(1762823461.060:290): avc: denied { read write } for pid=1118 comm="syz.0.207" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.570855][ T36] audit: type=1400 audit(1762823461.060:291): avc: denied { open } for pid=1118 comm="syz.0.207" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.594657][ T36] audit: type=1400 audit(1762823461.080:292): avc: denied { ioctl } for pid=1118 comm="syz.0.207" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.594853][ T1115] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 55.619196][ T36] audit: type=1400 audit(1762823461.090:293): avc: denied { create } for pid=1118 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.635219][ T1115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 55.645999][ T36] audit: type=1400 audit(1762823461.090:294): avc: denied { getopt } for pid=1118 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.712240][ T1125] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 55.722724][ T1127] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 57.730926][ T36] audit: type=1400 audit(1762823463.260:295): avc: denied { connect } for pid=1132 comm="syz.1.213" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.819931][ T36] audit: type=1400 audit(1762823463.340:296): avc: denied { getopt } for pid=1132 comm="syz.1.213" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.902870][ T36] audit: type=1400 audit(1762823463.420:297): avc: denied { bind } for pid=1132 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.937876][ T36] audit: type=1400 audit(1762823465.460:298): avc: denied { getopt } for pid=1148 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.966729][ T36] audit: type=1400 audit(1762823465.490:299): avc: denied { mount } for pid=1154 comm="syz.0.220" name="/" dev="configfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.049964][ T36] audit: type=1400 audit(1762823465.570:300): avc: denied { name_bind } for pid=1159 comm="syz.3.222" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.082383][ T36] audit: type=1400 audit(1762823465.600:301): avc: denied { nlmsg_write } for pid=1169 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=129 state=3 status=67 (errno 32: Broken pipe) [ 60.134959][ T36] audit: type=1400 audit(1762823465.660:302): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1582]" dev="pipefs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 60.240324][ T387] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 60.312348][ T330] bridge_slave_1: left allmulticast mode [ 60.318019][ T330] bridge_slave_1: left promiscuous mode [ 60.323708][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.331359][ T330] bridge_slave_0: left allmulticast mode [ 60.336999][ T330] bridge_slave_0: left promiscuous mode [ 60.342713][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.362983][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.372143][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.380170][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.389296][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.397163][ T111] loop7: unable to read partition table [ 60.482668][ T330] tipc: Disabling bearer [ 60.488055][ T330] tipc: Left network mode [ 60.492985][ T330] veth1_macvtap: left promiscuous mode [ 60.498464][ T330] veth0_vlan: left promiscuous mode [ 60.782540][ T330] bridge_slave_1: left allmulticast mode [ 60.788200][ T330] bridge_slave_1: left promiscuous mode [ 60.793835][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.801307][ T330] bridge_slave_0: left allmulticast mode [ 60.806935][ T330] bridge_slave_0: left promiscuous mode [ 60.812577][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.820126][ T330] bridge_slave_1: left allmulticast mode [ 60.825876][ T330] bridge_slave_1: left promiscuous mode [ 60.831476][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.838870][ T330] bridge_slave_0: left allmulticast mode [ 60.844615][ T330] bridge_slave_0: left promiscuous mode [ 60.850195][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.003495][ T330] veth1_macvtap: left promiscuous mode [ 61.008993][ T330] veth0_vlan: left promiscuous mode [ 61.014553][ T330] veth1_macvtap: left promiscuous mode [ 61.020036][ T330] veth0_vlan: left promiscuous mode