last executing test programs: 53.396107477s ago: executing program 2 (id=276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0xff80, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 53.395921837s ago: executing program 2 (id=277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000200)=0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x280, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x1e7240, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000440)=@srh={0x75, 0x0, 0x4, 0x0, 0x8d, 0x50, 0x7}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000080)={0x9, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 52.216760312s ago: executing program 2 (id=282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) (async) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 51.340179782s ago: executing program 2 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000bc0)=0x6, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1389, 0x10000000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 51.340012472s ago: executing program 2 (id=294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x2000000, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 51.274894717s ago: executing program 2 (id=295): ftruncate(0xffffffffffffffff, 0x398a0bdb) (async) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (rerun: 32) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x800, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x20000}}, 0xb8}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @broadcast}, &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r6) (async, rerun: 32) setreuid(r6, r6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=@expire={0x2c8, 0x18, 0x200, 0x70bd2b, 0x25dfdbfd, {{{@in=@multicast2, @in=@multicast2, 0x4e24, 0x7ff, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x33, r4, r6}, {@in6=@loopback, 0x4d4, 0xff}, @in=@loopback, {0x1ff, 0x1, 0x3209, 0x401, 0x4, 0xd49b, 0x9, 0x3}, {0xd6, 0x2bb9, 0x1, 0x3}, {0x3ff, 0x3554, 0x3}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x46, 0x81}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_thresh={0x8, 0xb, 0x81}, @tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x1, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x1, 0x3, 0xff, 0xe, 0x401, 0x70000000}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x3507, 0x2, 0x1, 0xf2, 0x952dc2f, 0xe, 0x13}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@private0, 0x3502, 0x0, 0x2, 0x53, 0x7ff, 0x6, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x3504, 0x0, 0x2, 0xa0, 0x2, 0x9c6, 0x5}, {{@in=@remote, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x3, 0x3, 0x9848, 0x7f, 0x226}]}, @sec_ctx={0x51, 0x8, {0x4d, 0x8, 0x1, 0x3f, 0x45, "b9e93b979c2dece5b896f1d04fa012ecd8b734cb772cabfc4b04f499ee98cbf126ec21a4e39cb69fbf4550aadd3bee3baec8647cbf97710fc057be55b19a73636865e3d262"}}, @srcaddr={0x14, 0xd, @in=@empty}, @offload={0xc, 0x1c, {r4, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x2c8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 51.206202863s ago: executing program 32 (id=295): ftruncate(0xffffffffffffffff, 0x398a0bdb) (async) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (rerun: 32) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x800, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x20000}}, 0xb8}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @broadcast}, &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r6) (async, rerun: 32) setreuid(r6, r6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=@expire={0x2c8, 0x18, 0x200, 0x70bd2b, 0x25dfdbfd, {{{@in=@multicast2, @in=@multicast2, 0x4e24, 0x7ff, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x33, r4, r6}, {@in6=@loopback, 0x4d4, 0xff}, @in=@loopback, {0x1ff, 0x1, 0x3209, 0x401, 0x4, 0xd49b, 0x9, 0x3}, {0xd6, 0x2bb9, 0x1, 0x3}, {0x3ff, 0x3554, 0x3}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x46, 0x81}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_thresh={0x8, 0xb, 0x81}, @tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x1, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x1, 0x3, 0xff, 0xe, 0x401, 0x70000000}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x3507, 0x2, 0x1, 0xf2, 0x952dc2f, 0xe, 0x13}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@private0, 0x3502, 0x0, 0x2, 0x53, 0x7ff, 0x6, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x3504, 0x0, 0x2, 0xa0, 0x2, 0x9c6, 0x5}, {{@in=@remote, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x3, 0x3, 0x9848, 0x7f, 0x226}]}, @sec_ctx={0x51, 0x8, {0x4d, 0x8, 0x1, 0x3f, 0x45, "b9e93b979c2dece5b896f1d04fa012ecd8b734cb772cabfc4b04f499ee98cbf126ec21a4e39cb69fbf4550aadd3bee3baec8647cbf97710fc057be55b19a73636865e3d262"}}, @srcaddr={0x14, 0xd, @in=@empty}, @offload={0xc, 0x1c, {r4, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x2c8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.408272516s ago: executing program 1 (id=956): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x6}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) (async) r3 = syz_open_pts(r0, 0x20000) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) 3.297516855s ago: executing program 4 (id=958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008817c802030109c6f41e1d004148d409009eaf0212000100"], 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f00000029c0)=""/208, 0xd0, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x4, 0x0, &(0x7f0000000540)="ae3f238d"}) 3.088084992s ago: executing program 0 (id=960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x80ffffffffffffff, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) 3.029440437s ago: executing program 1 (id=961): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x0, 0x8, 0x2, @mcast2, @private1, 0x10, 0x46, 0xf538, 0x40}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000040)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80840) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x12, 0x1000, &(0x7f00000029c0)="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"}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 3.005948338s ago: executing program 0 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0080000000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES16=r1], 0x6}}, 0x4000000) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x7, 0x9, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf250c00000008000300882e84a641fccb061ab3d7839577a994eacc3c3617ae295546461b1039939dabed8be3b0a38d8f79878539b69245e90b1e5712f5a918f33ef381d6e1fe8729c42e3383f21743bc697b97bcc90c86525bb0a9384a99ca3024ccb70b70d8df7b974fa954e7bb4aac194969942e15da3f169f203ce632b371009fa989ab", @ANYRES32=r4, @ANYBLOB="1c006e80040001000400010004000200040001000400020004000200"], 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4091) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) 2.948030093s ago: executing program 1 (id=964): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_clone(0x8b9a2000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r1}) sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00004bb000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x1) munlockall() ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='-\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 2.657251286s ago: executing program 1 (id=965): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) mount$binderfs(0x0, &(0x7f0000000340)='./binderfs\x00', &(0x7f0000000400), 0x1000401, &(0x7f0000000300)=ANY=[@ANYRES8=r0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername(r2, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0xa, 0x7f, 0x6}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000005a0400008014003c0000000000000000000000ffffac1414aa00"/40], 0x28}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) getdents64(r5, 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003040000000403070438374f17309ed67e82f5fa2bbbcfb38d00fa0cc8ca7ce5c5edf08ecbcef6a5bb47afa57aa71237005456"], 0x0, 0x0, 0x0}, 0x0) 2.656831536s ago: executing program 0 (id=966): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r0, 0x8940, &(0x7f0000000000)) setuid(0xee01) clock_adjtime(0x0, &(0x7f0000000000)={0x10001, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x8000000000000001, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x800000000, 0x1ff, 0x4}) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0xe3b, 0x6, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r6, &(0x7f0000000480)={0x7fffffff, 0x20, 0x0, 0x20, 0x3}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="58c36dcc", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRESHEX=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082bbd7000fbdbdf25720000000800030056afc6c722337b35a0ef1ef50dafe9072feb9c464919caf0c619794d9d5f7aa1ac", @ANYRES32=r10, @ANYBLOB="0c0099000900000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000404) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 2.108051841s ago: executing program 1 (id=967): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='-\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 2.064651334s ago: executing program 1 (id=968): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1b) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000780)=ANY=[@ANYRESOCT], 0x48) syz_clone3(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="09f5000000000000000050d4fbb2d35b0c0000004ada38742f22e0990c02174e9de9b5ff2cecdc64b0f482b7bb865c9d413fc457e6382b10581bf21dfb4a2fdba9b6b4889b7d10672d3c389af71def69a94a0f1d5d3814c821036d3251df5b000000000000006272bb5efc60a921141e7f623da03fdc4d57"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000008e04eeee28ede6000838101017fa780448c56f6fbfdb048414000000000001090224000100000000090400050103000063335b861bc2419e526bd13bde0c9b627086c3aa908515002400bd8c4fa69b78f7e25436f56aeb0ef4"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="ee220d"], 0x0, 0x0, 0x0}, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000100)={0x0, 0x21, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x4, "7cad09d4"}, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x20, 0x22, 0x14, {0x14, 0xc, "ca6689cd69c050e324a03777a6fe8d14b053"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x20, 0x11, 0x56, "f6d0714c4a0ed60387a307c79df447a8e5c1252e21908349a88c9869a2e1af7c9eddfaa27df640a3b15e1ae077c3a505b5ab5cb5bea0502540a7aff10c370f3e578edbb158ba7fa91d834e7598bdb1607957e552f637"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x64}, &(0x7f00000005c0)=ANY=[@ANYBLOB="20008e000000008c1bec22e0a534c4a0bcd024bac508f98c5995b8ca661dbfc173bda6ec21235f88177ae3487414a4a58290eec097e682aedf3466c827b853a2ee564ae6e29dda36f7727cf0b0129bc98f205624684af8f985b4dbdbb416cd47f5658cf167e4b73f2a9e2644fa31b194543c9d68a95e3a8286914850b916e5f29219b63e8580361360842da3ebcf26921d53d100"], &(0x7f00000006c0)={0x20, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x8}}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/223, 0xdf}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x5, 0x4, {{0x7, 0x4, 0x0, 0x1b, 0x1c, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) 1.671391046s ago: executing program 0 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x90, 0xa, 0x1, 0x0, 0xff, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000440)={0x900, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0xa}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/11, &(0x7f00000003c0)=[r1, r2], 0x2, {r3}}, 0x58) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r5, &(0x7f0000000100)="a00064bced2a4a68", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000007010040"]) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xfffffff0, 0x4, 0x2, 0xcd12, 0xffff, 0x6c}]}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) getpgid(0xffffffffffffffff) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x90, 0xa, 0x1, 0x0, 0xff}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x900, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0xa}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/11, &(0x7f00000003c0)=[r1, r2], 0x2, {r3}}, 0x58) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r5, &(0x7f0000000100)="a00064bced2a4a68", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000007010040"]) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xfffffff0, 0x4, 0x2, 0xcd12, 0xffff, 0x6c}]}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async) 1.434315565s ago: executing program 0 (id=975): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x282b6012}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40810) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="a5fef6d00eae1e94d76c467ab983fd15", 0x10) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x7, 0x7f, "c0bb890dfddc955339a237123d5ddb3653937565c8ca17f9d692a417cf6a1071bd7707860dc305ef19f92862a8d26cec976f562b2addfbac34ef6aded479f3", 0x8}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="a37be702dbf19ffc36cf1ca018e07e677b07861c2bb733da4ff76f779664e5", 0x1f}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x21b}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3000}}, @timestamping={{0x14, 0x1, 0x25, 0x3b6}}], 0xf0}, 0x44011) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) gettid() r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002500), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x38, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x8005) openat$kvm(0xffffffffffffff9c, &(0x7f0000002600), 0x145200, 0x0) sendmsg(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002640)="49e9ad411ab3d3515f64e2be0667e30070ba0e19f5efe4d1a28b519fc1d46df90c38c3972c61a8b26e4ce3ebb354db7dfed74814319f36ea90ecb7be41d9364a145a7578dd5556064bd27e27b074069dbdfb00f3ab11f6a00d907d687cdae0499a1755b8473e582319471874effe1ae5a96c4200d344cf9966f11f11a117c33238f91272955beee2cb2e29d09e8ec5f00366be", 0x93}, {&(0x7f0000002700)="089e2dd8d683fba8e2e7a85ea7ce3460302c8fd7648c550137a8f54f043f163dd37f6c48a6d13ada5109af99b209bc7dd7f41e6b599875cc049da23aae27aa938a46f915412b0a62c26dae486e76cb5efabe7b62f88175957c1daa0bafa948da51c7099730f785e6", 0x68}, {&(0x7f0000002780)="a9996d5a48e364105661764654e1d180e058036c4591cffd94534c9cdbe1d63aebbcfe356412a8a404abf51aa8d649eaac34fa674801c193ecb45ff23971063531b2980ca017cd4e76183e519b003ffde0d7b30308a7868e8c85f6a66a2225fa7ace3a947f", 0x65}, {&(0x7f0000002800)="baa573f03d00407e2ab65ca21e7f796c9748616f9554f9b848996204d3a6adcabb2b9eef097f3259df7622231a7ea681a51c042e101e19e25086a540b416f26c23d6e2376a9d", 0x46}, {&(0x7f0000002880)="276bc8da5baf549ce9472a759958a337d7b46d628ad1285104271d9a32d207f65b4df84e8fd3b610d9016223c651eed6c11096f0d7ace75716f6ee6e6be2adb32306997248d32c36a84b9a8ab35edc7069697fb10da3234ee238fd3f9112b191e114fa564858be5d09742f3ea5b2", 0x6e}], 0x5}, 0x40010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x41}, 0x20000844) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000002e40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c40)={0x1c0, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4669}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7cab}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @private1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20040804}, 0x40800) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000002e80)={0x1, 0x0, [{}]}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002f00), r0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002f40)={0xc8, r6, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd3}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private0, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44001}, 0x810) close(r2) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000032c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003100)={0x14c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x88, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @private1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x23}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) readv(r2, &(0x7f0000003600)=[{&(0x7f0000003300)=""/109, 0x6d}, {&(0x7f0000003380)=""/166, 0xa6}, {&(0x7f0000003440)=""/131, 0x83}, {&(0x7f0000003500)=""/217, 0xd9}], 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x68, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x114}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4010) syz_genetlink_get_family_id$tipc2(&(0x7f0000003780), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000038c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x38, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8000, 0x5}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x80) mknod(&(0x7f0000003900)='./file0\x00', 0x8, 0x5147) 1.309224725s ago: executing program 3 (id=976): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x1) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x1, 0x0, 0xa}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) fcntl$setsig(r2, 0xa, 0x16) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000300)) pwrite64(r1, &(0x7f0000000340)="718003a9aaeea816111849f6841c75f1d82eb01b5806585531af140ca3b3fff2c82fdb7d8188071af803308234734e5a4a0fcf982c4f186c05556747f8000a6e68544d807c0fdd6608c1a6db18868e94b5b365fbd52f460ae61ad81f", 0x5c, 0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000002480)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000002440)={0x9, 0x4}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x6000) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000002580)={0x4, 0xa1, 0x4, 0x80b, 0x8, 0x0, [{0x2, 0x1, 0x1, '\x00', 0x28c}, {0x8, 0xfffffffffffffeff, 0x2}, {0x5, 0x2, 0xeb, '\x00', 0x8}, {0xffffffff, 0x5, 0xfffffffffffffffe, '\x00', 0x4}, {0x5, 0x3, 0x5, '\x00', 0x2700}, {0x3, 0x6, 0x1, '\x00', 0x808}, {0x40, 0x6, 0x5, '\x00', 0x2080}, {0xe, 0x1eb356c8, 0x2, '\x00', 0x404}]}) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/uevent_helper', 0x400001, 0x60) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f00000027c0)) (async) write$FUSE_POLL(r6, &(0x7f0000002800)={0x18, 0xfffffffffffffffc, r4, {0x80000000}}, 0x18) dup(r3) (async) write$binfmt_register(r6, &(0x7f0000002840)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '/dev/fuse\x00', 0x3a, '@],-[&', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x4f, 0x50]}, 0x3b) (async) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002880)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000002980)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, r8, &(0x7f00000029c0)={0x7f, 0xa, 0x10, 0x1000, 0x6, 0x9, 0x9, 0x81, 0xfffffff9}) (async) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000002a40)=0x1) (async) sendmsg$xdp(r6, &(0x7f0000003fc0)={&(0x7f0000002a80)={0x2c, 0xe, r7, 0x23}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000002ac0)="37d149ae8b36fcac4dc5451778644235d33dceb9a7de769e5cfd81316f9156", 0x1f}, {&(0x7f0000002b00)="b7fca71b270d966898d0f0022a0f92a8e7ad311b88c4729536a1538e64e0a676e778a92132824ca29af681c064659a74f15daa286b084c3bfb1ad425bf6452976c9e0ff8b579ea48e497aa82cf712af52c4b7c849e639431a056d0ca0f19bf5f2db47e3eb1e4b99c53d27fa9b92d4a18b52ac0fe7ef70172b5a57973fe68670d90f968a0ae159d79f01262b9968eafc66822e237313aa78e0125ce9a66e347dca5edbb6e0d801ba321c979e03a419140a542e9bc108dc6a47ec51f0c05bd4a90c728bb38f3f4a01b08fab3f719ac01d421895362ab6f321220a00e87c8", 0xdd}, {&(0x7f0000002c00)="f8dac4817afe144fb6537a52ae4017acf2eee1554ac6f47b0ab5b1cdaa14bd2820d6611c7a611c89b44a69f4039bb82bb9e10e93386c7e24b8cb395e9ce4963323193e280c0fac6b827cc41d5ae99660896cccc35e609eb886cf4ac1967b86", 0x5f}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="a893a46670ee70aa7a880e70", 0xc}, {&(0x7f0000003cc0)="c744712d9c65808f83dfd1ec36fde5848edf0604ded3a8580395f570687710028c85987e2ee2d9cdacbeaf0aa8d961329529560bd9c1c28ebf5f7e0dc88b69b84f0a52c8a942ccbdc579d20983ef7ea5314a1081dbfd5e24e70bf881f8eaa3b63de4f754c496b96a4aeca176f3242eb2b4743fdfd09ba3353bdedf3fa169ec6cede1d8b75055be92f98dac50ccfc3be963e1df7adbd71dfff4708e016b62560735ed32eefccceb0081270cfb9c7593522bd7577695e647773bfad986f3fa72811291159e1b0ab95b", 0xc8}, {&(0x7f0000003dc0)="6abe27d0d532750f5ac800876ee26b59ce4eff15e1a454cb0a0f6f81a0196ee834a589d30041aec417e1524228f549d8ff75d65637c6868d9841447c00d7820684cf6721fb05030951bdf3457930611616380fb919f8abb9c6ef927e6037", 0x5e}, {&(0x7f0000003e40)="514e616833be860bdda7a625c9bd563fd4002670dee46adf490600080621d5bc19fa4818a80734670d66972e61102e2f8ad6f969d8e1c8b416cb2fc7e7840e58d3113cf2e63ddfca496901af39605c8c765448d2c5a06ec40eedadaf59c8097f107da3a70a4a", 0x66}, {&(0x7f0000003ec0)="8c73fc1502f0475592f864b3c93d3b06233e43301ec61c4bf9285657f4513afaf6a09a90471043d4fa6faa1f0f0e558903aea2973bd225c2c99c1c5e", 0x3c}], 0x9, 0x0, 0x0, 0x10000000}, 0x4000015) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004000)={0x0, @remote}, &(0x7f0000004040)=0xc) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000004080)={0x2, 0x48, 0x3, 0x4, 0x0, [0x1, 0x81, 0x2, 0x1]}) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000040c0)={r6, 0x0, 0x1000, 0x1000}) (async) r9 = memfd_create(&(0x7f0000004100)='[@\x00', 0x5) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000004240)={0x2, &(0x7f0000004200)=[{0x3, 0xe, &(0x7f0000004140)="d8d6d20a7a36f3b15d121cf70849"}, {0x1000, 0x64, &(0x7f0000004180)="48254f289fbe06efaf663a4e4815d0b360eb8732bd046802ac241f5fefdef02c39ea81777a738eaf358afe360d5cc08c8e88ca3eb989b026cf204c1815577b63b30e71c6c609cb799657362becd77f2c594007cece623473e8d8741287c932e0298f8cff", 0x1}]}) 1.287048747s ago: executing program 3 (id=977): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1.230509971s ago: executing program 3 (id=978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 977.377681ms ago: executing program 3 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff}, 0x80009}], 0x1, 0x10002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) clock_adjtime(0x7, &(0x7f0000000580)={0xe4, 0x5, 0xd6b, 0x6, 0x6, 0x0, 0x6, 0xa9, 0x3, 0x7, 0x5, 0x8001, 0x8, 0xfffffffffffffe00, 0x1, 0x1, 0x7fff, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x1, 0x7fffffffffffffff, 0x3, 0x100000000000006, 0x10, 0x0, 0x7e706d6a}) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 970.591352ms ago: executing program 3 (id=980): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(0x3) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d042600c, 0x13, r0, 0xb085c000) 534.859537ms ago: executing program 0 (id=981): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') pwritev(r3, 0x0, 0x0, 0x43b, 0xf) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x5, 0x15, 0xff, 0x3, 0x84, 0xa00000, &(0x7f0000000140)="68fa85e1dca53e740521f0ef5313920ae5c842486ea68a51d2b4bf371327d52292432977675eccc3db00818564ca8585f49bfedd3752a825b1c1534199589318a3387175e6b69df436449ac0b7dcdd1888bfa5896f3950ea4256c78a21999ebb1ab5c9523a74d48a60bd339d25acf50f5e4c15a3309fbf4aee6aa00ee1147ed0bc087116"}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 168.728507ms ago: executing program 4 (id=982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x30, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) 168.409267ms ago: executing program 4 (id=983): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x47, 0x8, 0x3, 0x8, {{0x5, 0x4, 0x2, 0x1b, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast}}}}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x2, 0x0, 0x8}) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) 156.197947ms ago: executing program 4 (id=984): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) timer_create(0x7, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000000)={0x0, 0x53b, 0x3ff}) syz_open_procfs(0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000080)={0x0, 0x800, [0x800, 0x8000000000000000, 0x7, 0x3, 0x7, 0x4]}) 79.469604ms ago: executing program 3 (id=985): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}]}, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=':\x00', 0x2, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000140)={0x4, 0x4000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57788000) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) recvmmsg(r6, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x2}, 0x1}, {{0x0, 0x0, 0x0}, 0x9fe}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10060, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 401.32µs ago: executing program 4 (id=986): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) 0s ago: executing program 4 (id=987): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0xff, @none, 0x0, 0x2}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001480)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="054553a50b85375506a353ba2475"], 0x14}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000300)={0xb9, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) r5 = socket$packet(0x11, 0x2, 0x300) getsockname(r5, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000200)=0x80) kernel console output (not intermixed with test programs): 400 audit(1754964080.976:226): avc: denied { ioctl } for pid=664 comm="syz.3.110" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.072131][ T36] audit: type=1400 audit(1754964081.126:227): avc: denied { create } for pid=669 comm="syz.3.112" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.075721][ T9] usb 3-1: USB disconnect, device number 2 [ 33.144682][ T672] rust_binder: Write failure EFAULT in pid:96 [ 33.175611][ T676] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48421 sclass=netlink_xfrm_socket pid=676 comm=syz.0.114 [ 33.194924][ T678] tmpfs: Unknown parameter ')' [ 33.455278][ T690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.463764][ T690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.934835][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.005224][ T707] can0: slcan on ptm0. [ 34.010841][ T707] devtmpfs: Unknown parameter '^ *([%Ž' [ 34.084850][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 34.096764][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.110424][ T45] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 34.121239][ T706] can0 (unregistered): slcan off ptm0. [ 34.124863][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.144816][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.159009][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 34.161958][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.174307][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.190514][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.198748][ T45] usb 3-1: Product: syz [ 34.203067][ T45] usb 3-1: Manufacturer: syz [ 34.214230][ T45] usb 3-1: SerialNumber: syz [ 34.428315][ T45] usb 3-1: 0:2 : does not exist [ 34.461037][ T45] usb 3-1: USB disconnect, device number 3 [ 34.547400][ T760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.556202][ T760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.231613][ T777] tipc: Enabling of bearer rejected, failed to enable media [ 35.354868][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.396460][ T786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.405829][ T786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.514839][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 35.521275][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.532332][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.542118][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.551246][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.560010][ T9] usb 3-1: config 0 descriptor?? [ 35.564854][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.565947][ T9] hub 3-1:0.0: USB hub found [ 35.724859][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 35.731543][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.739970][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.750108][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.761010][ T64] usb 4-1: config 1 interface 0 has no altsetting 1 [ 35.766053][ T9] hub 3-1:0.0: 1 port detected [ 35.769144][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.781496][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.789536][ T64] usb 4-1: Product: syz [ 35.793709][ T64] usb 4-1: Manufacturer: syz [ 35.798330][ T64] usb 4-1: SerialNumber: syz [ 36.004874][ T783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.005044][ T783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 36.016280][ T783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 36.017680][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.043907][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.180173][ T797] tipc: Enabling of bearer rejected, failed to enable media [ 36.370144][ T9] hub 3-1:0.0: activate --> -90 [ 36.570923][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.777870][ T45] usb 3-1: USB disconnect, device number 4 [ 37.290516][ T813] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551500) [ 37.290544][ T813] rust_binder: Error while translating object. [ 37.302839][ T813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.309092][ T813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 37.344848][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.505948][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.516930][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.526728][ T45] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.535815][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.544474][ T45] usb 2-1: config 0 descriptor?? [ 37.644864][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.774862][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.014905][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.254850][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.271352][ T64] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 38.277709][ T823] binder: Bad value for 'stats' [ 38.286023][ T64] cdc_ncm 4-1:1.0: bind() failure [ 38.293033][ T64] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 38.299947][ T64] cdc_ncm 4-1:1.1: bind() failure [ 38.306748][ T64] usb 4-1: USB disconnect, device number 4 [ 38.317271][ T826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.317297][ T826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.384832][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.406763][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 38.406781][ T36] audit: type=1326 audit(1754964086.466:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.3.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd6c98ebe9 code=0x0 [ 38.448675][ T835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.463098][ T36] audit: type=1400 audit(1754964086.516:268): avc: denied { write } for pid=838 comm="syz.3.159" path="socket:[7112]" dev="sockfs" ino=7112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.463608][ T839] tipc: Enabled bearer , priority 0 [ 38.501022][ T839] tipc: Disabling bearer [ 38.554615][ T45] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 38.567330][ T45] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 38.575694][ T45] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 38.583820][ T45] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 38.594991][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.595402][ T45] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 38.610330][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.618569][ T45] usb 2-1: USB disconnect, device number 2 [ 38.635340][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.744978][ T9] usb usb3-port1: attempt power cycle [ 39.091298][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.116014][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.142710][ T36] audit: type=1400 audit(1754964087.196:269): avc: denied { write } for pid=850 comm="syz.0.163" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 39.144338][ T851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.175036][ T851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.186906][ T851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.195420][ T851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.203905][ T851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.212411][ T851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.255879][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.494876][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.516004][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.645894][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.734038][ T36] audit: type=1400 audit(1754964087.786:270): avc: denied { write } for pid=852 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.753038][ T36] audit: type=1400 audit(1754964087.796:271): avc: denied { connect } for pid=852 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.767937][ T857] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 39.780261][ T9] usb usb3-port1: unable to enumerate USB device [ 39.784859][ T857] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 39.796663][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.800863][ T36] audit: type=1400 audit(1754964087.856:272): avc: denied { write } for pid=856 comm="syz.0.165" name="igmp" dev="proc" ino=4026532427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.154842][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 40.284843][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.426702][ T36] audit: type=1400 audit(1754964088.486:273): avc: denied { ioctl } for pid=860 comm="syz.2.167" path="socket:[8245]" dev="sockfs" ino=8245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.451068][ T36] audit: type=1400 audit(1754964088.486:274): avc: denied { listen } for pid=860 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.466600][ T864] tipc: Started in network mode [ 40.476465][ T864] tipc: Node identity e2ee3e175452, cluster identity 4711 [ 40.483674][ T864] tipc: Enabled bearer , priority 0 [ 40.501809][ T864] syzkaller0: entered promiscuous mode [ 40.507334][ T864] syzkaller0: entered allmulticast mode [ 40.513082][ T864] tipc: Resetting bearer [ 40.521493][ T864] tipc: Resetting bearer [ 40.533545][ T864] tipc: Disabling bearer [ 40.544835][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.604843][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 40.611007][ T844] Bluetooth: hci1: command 0x1003 tx timeout [ 40.619811][ T866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 40.636562][ T36] audit: type=1400 audit(1754964088.696:275): avc: denied { setopt } for pid=865 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.784835][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 40.904865][ T406] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.914874][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.055982][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.066961][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.076836][ T406] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.085999][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.094519][ T406] usb 3-1: config 0 descriptor?? [ 41.151650][ T36] audit: type=1400 audit(1754964089.206:276): avc: denied { ioctl } for pid=871 comm="syz.3.172" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.183937][ T874] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 41.191499][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.191565][ T874] rust_binder: Write failure EINVAL in pid:171 [ 41.304946][ T45] usb usb2-port1: attempt power cycle [ 41.444846][ T330] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.594866][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 41.601434][ T330] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.612493][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.619150][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 41.628230][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.636993][ T330] usb 4-1: config 0 descriptor?? [ 41.654871][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 41.675918][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.804877][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 41.805933][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.810965][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.044196][ T330] logitech 0003:046D:CA04.0007: item fetching failed at offset 1/5 [ 42.052378][ T330] logitech 0003:046D:CA04.0007: parse failed [ 42.058493][ T330] logitech 0003:046D:CA04.0007: probe with driver logitech failed with error -22 [ 42.067774][ T45] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.096022][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.105326][ T406] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 42.114838][ T406] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 42.122930][ T406] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 42.131144][ T406] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 42.138680][ T406] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 42.148972][ T406] usb 3-1: USB disconnect, device number 9 [ 42.236137][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.337333][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.346362][ T45] usb usb2-port1: unable to enumerate USB device [ 42.352392][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.627079][ T880] binder: Unknown parameter 'fscontext?}' [ 42.634988][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.642913][ T880] netlink: 'syz.2.176': attribute type 11 has an invalid length. [ 42.651779][ T880] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 43.042648][ T895] rust_binder: Failed to allocate buffer. len:4304, is_oneway:false [ 43.461718][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 43.461739][ T36] audit: type=1400 audit(1754964091.516:281): avc: denied { relabelfrom } for pid=904 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.495613][ T36] audit: type=1400 audit(1754964091.516:282): avc: denied { relabelto } for pid=904 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.524898][ T906] tipc: Started in network mode [ 43.529823][ T906] tipc: Node identity 4e8bb2396e65, cluster identity 4711 [ 43.544874][ T906] tipc: Enabled bearer , priority 0 [ 43.667463][ T907] tipc: Disabling bearer [ 43.694441][ T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.702964][ T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.216044][ T406] usb 4-1: USB disconnect, device number 5 [ 44.238818][ T36] audit: type=1400 audit(1754964092.296:283): avc: denied { append } for pid=910 comm="syz.3.186" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.411161][ T36] audit: type=1400 audit(1754964092.466:284): avc: denied { write } for pid=922 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.430802][ T36] audit: type=1400 audit(1754964092.486:285): avc: denied { setopt } for pid=922 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.499268][ T925] rust_binder: Write failure EFAULT in pid:168 [ 44.509774][ T36] audit: type=1400 audit(1754964092.566:286): avc: denied { bind } for pid=926 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.539137][ T36] audit: type=1400 audit(1754964092.566:287): avc: denied { listen } for pid=926 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.610178][ T36] audit: type=1400 audit(1754964092.666:288): avc: denied { write } for pid=933 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.684839][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 44.684853][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.742135][ T939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.750709][ T939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.954879][ T406] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.084903][ T511] Bluetooth: hci1: command 0x1003 tx timeout [ 45.084903][ T844] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 45.104865][ T406] usb 3-1: Using ep0 maxpacket: 32 [ 45.116466][ T406] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.130189][ T406] usb 3-1: config 3 has an invalid interface number: 43 but max is 0 [ 45.138386][ T406] usb 3-1: config 3 has no interface number 0 [ 45.144604][ T406] usb 3-1: config 3 interface 43 has no altsetting 0 [ 45.153129][ T406] usb 3-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 45.169630][ T406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.175367][ T36] audit: type=1400 audit(1754964093.226:289): avc: denied { read write } for pid=942 comm="syz.3.198" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.177691][ T406] usb 3-1: Product: syz [ 45.206270][ T406] usb 3-1: Manufacturer: syz [ 45.210892][ T406] usb 3-1: SerialNumber: syz [ 45.216413][ T36] audit: type=1400 audit(1754964093.226:290): avc: denied { open } for pid=942 comm="syz.3.198" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.241851][ T945] rust_binder: Got transaction with invalid offset. [ 45.241893][ T945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.248725][ T945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 45.343844][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.375028][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.415362][ T973] binder: Bad value for 'stats' [ 45.420436][ T973] binder: Bad value for 'stats' [ 45.474219][ T978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.483180][ T978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.509013][ T980] binder: Bad value for 'max' [ 45.745089][ T937] rust_binder: Got transaction with invalid offset. [ 45.745135][ T937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.752003][ T937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 45.804891][ T330] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.871808][ T406] rndis_host 3-1:3.43: More than one union descriptor, skipping ... [ 45.880060][ T406] usb 3-1: bad CDC descriptors [ 45.885452][ T406] cdc_acm 3-1:3.43: More than one union descriptor, skipping ... [ 45.899682][ T406] usb 3-1: USB disconnect, device number 10 [ 45.913386][ T995] capability: warning: `syz.2.214' uses 32-bit capabilities (legacy support in use) [ 45.977413][ T984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.977436][ T984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:129 [ 45.987773][ T330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.004566][ T330] usb 2-1: no configurations [ 46.009176][ T330] usb 2-1: can't read configurations, error -22 [ 46.192872][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.201439][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.244865][ T406] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.394842][ T406] usb 3-1: Using ep0 maxpacket: 16 [ 46.401019][ T406] usb 3-1: config 0 has an invalid interface number: 212 but max is 3 [ 46.409259][ T406] usb 3-1: config 0 has an invalid interface number: 201 but max is 3 [ 46.417465][ T406] usb 3-1: config 0 has an invalid interface number: 85 but max is 3 [ 46.425589][ T406] usb 3-1: config 0 has an invalid interface number: 75 but max is 3 [ 46.433684][ T406] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.443761][ T406] usb 3-1: config 0 has no interface number 0 [ 46.449870][ T406] usb 3-1: config 0 has no interface number 1 [ 46.455963][ T406] usb 3-1: config 0 has no interface number 2 [ 46.462038][ T406] usb 3-1: config 0 has no interface number 3 [ 46.468152][ T406] usb 3-1: config 0 interface 212 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 46.479040][ T406] usb 3-1: config 0 interface 212 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 46.493908][ T406] usb 3-1: config 0 interface 85 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 46.505226][ T406] usb 3-1: config 0 interface 85 altsetting 129 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 46.516324][ T406] usb 3-1: config 0 interface 75 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 46.529352][ T1018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.224'. [ 46.538793][ T406] usb 3-1: config 0 interface 212 has no altsetting 0 [ 46.545615][ T406] usb 3-1: config 0 interface 201 has no altsetting 0 [ 46.552408][ T406] usb 3-1: config 0 interface 85 has no altsetting 0 [ 46.559146][ T406] usb 3-1: config 0 interface 75 has no altsetting 0 [ 46.567445][ T406] usb 3-1: New USB device found, idVendor=12d1, idProduct=47e3, bcdDevice=58.3e [ 46.576573][ T406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.584579][ T406] usb 3-1: Product: ċ‘ˆí‘¸äµĦĉĴĤċĴáğ´ä‰µáŞŻċŸ˜á™—çˆ²Û·äş ç¤żĉ½Ĥċ“çŸá³´ċ‰’éž”ìâ—î˘ċ•ëĞĴజéĥ菋甕ĉĥä‰„狗ް뉝ä´ë€ğ역能•†²†ëĤꆙ✕é ĉ„ğ뒜 ŞïŠğîğáİ擄ċ‚ƒê†›í—Ħâ½âž†ä½œá¨­ [ 46.603969][ T406] usb 3-1: Manufacturer: çĞžè€·ä•ğ˜çİĞçŸĤêżä•™ä”Şéż²á’£è²‘ä¤”ä†…â³Żâ¨Şí›žé²żï’–“™íşïž›„çıïĤè–ê–˜éŞµï˜²ì…‘é˜›é²ë‚İà­½ĉ‡‚焵ĉĤ²ĉ—îħ‡ä™ŞÌĥïşĉ°ċˆ°ç”€à´şċž‡î˜‹á˘…Şé³‘ï´˘îŻğ⤝ĉŽìż“꽌ğ‡ê·ŻÇ–ꖄµ•á•ç˘‹ê£ì˜Ÿàĥ›ë›Ħꖚî·äŒ¨ìŽ€ìħšċ‰°âçˆ‹è€çˆ–ĉ ² ċħ ëš™ÈĤí­ê“ìż˜ħï˘™oʃċĞ‹èĵ£ı³ë‹™é”ˆá–íˆ°ì½›ë—şż›ìŸĞì­¸âğğ뎽é¨ĞïŻç˘ €…ĉşŽá‡Şà£‡í†´í‘…ꇐ跐„ž [ 46.638983][ T406] usb 3-1: SerialNumber: · [ 46.644253][ T406] usb 3-1: config 0 descriptor?? [ 46.863079][ T406] usb 3-1: USB disconnect, device number 11 [ 46.870754][ T1040] rust_binder: 215: no such ref 1 [ 46.874818][ T330] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.991848][ T1048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.000959][ T1048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.015170][ T330] usb 2-1: device descriptor read/64, error -71 [ 47.254844][ T330] usb 2-1: device descriptor read/64, error -71 [ 47.366193][ T330] usb usb2-port1: attempt power cycle [ 47.371786][ T1050] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 47.379039][ T1050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 47.463520][ T1055] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=36 [ 47.472798][ T1055] rust_binder: Error while translating object. [ 47.481600][ T1055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.489050][ T1055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 47.575065][ T1068] rust_binder: Write failure EINVAL in pid:120 [ 47.660783][ T1075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.704869][ T330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.726515][ T330] usb 2-1: device descriptor read/8, error -71 [ 47.809680][ T1097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 47.855965][ T330] usb 2-1: device descriptor read/8, error -71 [ 47.924820][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.972883][ T1115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 47.981926][ T1119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 48.074827][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 48.081087][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.094953][ T330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.102134][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.120138][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.125923][ T330] usb 2-1: device descriptor read/8, error -71 [ 48.129230][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.145191][ T9] usb 4-1: config 0 descriptor?? [ 48.151151][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 48.157147][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 48.164432][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 48.210060][ T1134] binder: Unknown parameter 'fsname' [ 48.265869][ T330] usb 2-1: device descriptor read/8, error -71 [ 48.336118][ T1154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.384953][ T330] usb usb2-port1: unable to enumerate USB device [ 48.412153][ T1162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.420680][ T1162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.430556][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.439046][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.574852][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.724820][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 48.730972][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 48.740238][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.748834][ T9] usb 3-1: config 0 descriptor?? [ 48.754838][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 48.963163][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.963200][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 48.967534][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.979073][ T1154] syzkaller0: entered promiscuous mode [ 48.982460][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.990773][ T1154] syzkaller0: entered allmulticast mode [ 49.067268][ T9] usb 3-1: Detected FT232A [ 49.072563][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.081831][ T9] usb 3-1: USB disconnect, device number 12 [ 49.088280][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.098284][ T9] ftdi_sio 3-1:0.0: device disconnected [ 49.638968][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 49.638988][ T36] audit: type=1400 audit(1754964097.696:308): avc: denied { setattr } for pid=1180 comm="syz.1.283" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.749959][ T1187] ======================================================= [ 49.749959][ T1187] WARNING: The mand mount option has been deprecated and [ 49.749959][ T1187] and is ignored by this kernel. Remove the mand [ 49.749959][ T1187] option from the mount to silence this warning. [ 49.749959][ T1187] ======================================================= [ 49.784910][ T36] audit: type=1400 audit(1754964097.806:309): avc: denied { remount } for pid=1186 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.805201][ T1187] binder: Binderfs stats mode cannot be changed during a remount [ 49.858283][ T1194] overlay: filesystem on ./bus not supported as upperdir [ 49.890073][ T36] audit: type=1400 audit(1754964097.946:310): avc: denied { remount } for pid=1195 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.915215][ T1196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.289'. [ 49.924222][ T36] audit: type=1400 audit(1754964097.976:311): avc: denied { nlmsg_read } for pid=1195 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.205506][ T406] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.354825][ T406] usb 2-1: Using ep0 maxpacket: 16 [ 50.364088][ T406] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 50.373367][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.381656][ T406] usb 2-1: Product: syz [ 50.389566][ T406] usb 2-1: Manufacturer: syz [ 50.394189][ T406] usb 2-1: SerialNumber: syz [ 50.401692][ T1205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.410376][ T1205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.418519][ T406] r8152-cfgselector 2-1: Unknown version 0x0000 [ 50.424822][ T406] r8152-cfgselector 2-1: config 0 descriptor?? [ 50.448728][ T36] audit: type=1400 audit(1754964098.506:312): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.525716][ T46] bridge_slave_1: left allmulticast mode [ 50.531570][ T46] bridge_slave_1: left promiscuous mode [ 50.537300][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.545979][ T46] bridge_slave_0: left allmulticast mode [ 50.551698][ T46] bridge_slave_0: left promiscuous mode [ 50.557623][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.650936][ T36] audit: type=1400 audit(1754964098.706:313): avc: denied { mounton } for pid=1209 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.679973][ T46] tipc: Left network mode [ 50.686140][ T46] veth1_macvtap: left promiscuous mode [ 50.691726][ T46] veth0_vlan: left promiscuous mode [ 50.734377][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.741481][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.748596][ T1209] bridge_slave_0: entered allmulticast mode [ 50.754766][ T1209] bridge_slave_0: entered promiscuous mode [ 50.761106][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.768237][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.777248][ T1209] bridge_slave_1: entered allmulticast mode [ 50.784169][ T1209] bridge_slave_1: entered promiscuous mode [ 50.826012][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.833055][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.840345][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.846323][ T64] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 50.847403][ T1209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.882736][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.890092][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.900512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.907569][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.917228][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.924282][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.958449][ T1209] veth0_vlan: entered promiscuous mode [ 50.975613][ T1209] veth1_macvtap: entered promiscuous mode [ 51.001307][ T36] audit: type=1400 audit(1754964099.056:314): avc: denied { mounton } for pid=1209 comm="syz-executor" path="/root/syzkaller.bxETF1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 51.051839][ T36] audit: type=1400 audit(1754964099.106:315): avc: denied { bind } for pid=1225 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.053083][ T1226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.074974][ T36] audit: type=1400 audit(1754964099.106:316): avc: denied { write } for pid=1225 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.087298][ T1226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.133244][ T36] audit: type=1400 audit(1754964099.186:317): avc: denied { write } for pid=1225 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.236186][ T330] usb 4-1: USB disconnect, device number 6 [ 51.384980][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.541730][ T1256] SELinux: security_context_str_to_sid (sytem_uŬGı) failed with errno=-22 [ 51.545169][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 51.556634][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.567853][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.577857][ T64] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.587357][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.601928][ T64] usb 5-1: config 0 descriptor?? [ 51.607845][ T64] hub 5-1:0.0: USB hub found [ 51.684873][ T330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.806091][ T1166] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.818463][ T64] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 51.831251][ T64] usbhid 5-1:0.0: can't add hid device: -71 [ 51.837532][ T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 51.845421][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 51.857876][ T330] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 51.866350][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.877146][ T64] usb 5-1: USB disconnect, device number 2 [ 51.883989][ T330] usb 2-1: config 0 has no interface number 0 [ 51.891794][ T330] usb 2-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 51.905161][ T330] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 51.914252][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.923585][ T1273] binder: Unknown parameter 'fscontext?}' [ 51.932005][ T330] usb 2-1: config 0 descriptor?? [ 51.950696][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.967440][ T330] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 51.967797][ T1166] usb 4-1: Using ep0 maxpacket: 32 [ 51.996466][ T1166] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.006696][ T1166] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.019959][ T1166] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.029286][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.038394][ T1166] usb 4-1: config 0 descriptor?? [ 52.044362][ T1166] hub 4-1:0.0: bad descriptor, ignoring hub [ 52.056867][ T1166] hub 4-1:0.0: probe with driver hub failed with error -5 [ 52.064295][ T1166] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 52.142098][ T64] usb 2-1: USB disconnect, device number 12 [ 52.214909][ T1293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 52.290360][ T1296] kvm: kvm [1294]: vcpu10, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x1 [ 52.647046][ T1306] fuse: Unknown parameter 'f[¤ğÖTn5 ’Âìô).R¨U0x0000000000000003' [ 52.775615][ T1319] SELinux: security_context_str_to_sid (syste_uŬGı ‰:˙ß) failed with errno=-22 [ 53.186313][ T1330] x_tables: duplicate underflow at hook 2 [ 53.558188][ T1352] binder: Unknown parameter '184467440737095516150x0000000000000000˙ĈçRmÇÄ?9>¤żŻ14\SNhÔ' [ 53.570102][ T1352] 9pnet_fd: Insufficient options for proto=fd [ 53.573356][ T1353] overlayfs: failed to resolve './file1': -2 [ 53.775855][ T1377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=1377 comm=syz.1.353 [ 53.790510][ T1377] input: syz1 as /devices/virtual/input/input7 [ 53.803291][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.814441][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.930051][ T1391] tipc: Started in network mode [ 53.934977][ T1391] tipc: Node identity baeec3bb1112, cluster identity 4711 [ 53.942118][ T1391] tipc: Enabled bearer , priority 0 [ 53.957949][ T1391] syzkaller0: entered promiscuous mode [ 53.963432][ T1391] syzkaller0: entered allmulticast mode [ 53.969402][ T1391] tipc: Resetting bearer [ 54.058544][ T1394] SELinux: security_context_str_to_sid (sytem_uŬGı) failed with errno=-22 [ 54.705676][ T1388] tipc: Resetting bearer [ 54.718644][ T1388] tipc: Disabling bearer [ 54.728269][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 54.728286][ T36] audit: type=1400 audit(1754964102.786:328): avc: denied { read } for pid=1412 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.754454][ T1413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.754763][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 54.762226][ T1413] tipc: Started in network mode [ 54.776252][ T1413] tipc: Node identity a2fee6a94e1f, cluster identity 4711 [ 54.787672][ T1413] tipc: Enabled bearer , priority 0 [ 54.802372][ T1413] tipc: Disabling bearer [ 54.847506][ T1419] loop7: detected capacity change from 0 to 7 [ 54.854038][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.863197][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.871157][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.880341][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.888197][ T350] loop7: unable to read partition table [ 54.897311][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.906500][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.914812][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.923982][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.932048][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.941232][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.949269][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.958467][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.966772][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.975934][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 54.983991][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.993134][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.001180][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.010344][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.018203][ T1419] loop7: unable to read partition table [ 55.024925][ T1419] loop_reread_partitions: partition scan of loop7 (úùƒċĦ™‰üCêj̖˘P=½?}X‹ş œëÜ%ġĞ`Éĉրù…ˆ{íİ֐˜Èµ4FLQkŬŠ) failed (rc=-5) [ 55.050737][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.059941][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.067968][ T109] loop7: unable to read partition table [ 55.124006][ T1437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.124038][ T1437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.225346][ T36] audit: type=1400 audit(1754964103.286:329): avc: denied { read } for pid=1452 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.284975][ T9] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 55.296820][ T9] usb 4-1: device reset changed ep0 maxpacket size! [ 55.308194][ T9] usb 4-1: USB disconnect, device number 7 [ 55.494857][ T330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.554855][ T1166] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.604831][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.654844][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 55.661020][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.671140][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.684073][ T330] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.693137][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.701748][ T330] usb 5-1: config 0 descriptor?? [ 55.707652][ T330] hub 5-1:0.0: bad descriptor, ignoring hub [ 55.713568][ T330] hub 5-1:0.0: probe with driver hub failed with error -5 [ 55.715230][ T1166] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 55.720962][ T330] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 55.737794][ T1166] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 55.746989][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 55.755271][ T1166] usb 2-1: Product: syz [ 55.759544][ T1166] usb 2-1: Manufacturer: syz [ 55.764129][ T1166] usb 2-1: SerialNumber: syz [ 55.769736][ T1166] usb 2-1: config 0 descriptor?? [ 55.775184][ T9] usb 4-1: too many configurations: 40, using maximum allowed: 8 [ 55.783304][ T1166] cdc_acm 2-1:0.0: Zero length descriptor references [ 55.790064][ T1166] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 55.799627][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 55.807353][ T9] usb 4-1: can't read configurations, error -61 [ 55.934900][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 56.028571][ T1457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 56.029583][ T1166] usb 2-1: USB disconnect, device number 13 [ 56.085243][ T9] usb 4-1: too many configurations: 40, using maximum allowed: 8 [ 56.094073][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 56.101693][ T9] usb 4-1: can't read configurations, error -61 [ 56.108070][ T9] usb usb4-port1: attempt power cycle [ 56.445139][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 56.465580][ T9] usb 4-1: too many configurations: 40, using maximum allowed: 8 [ 56.474319][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 56.481944][ T9] usb 4-1: can't read configurations, error -61 [ 56.556726][ T330] rust_binder: 1456: removing orphan mapping 0:24 [ 56.618008][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.646685][ T9] usb 4-1: too many configurations: 40, using maximum allowed: 8 [ 56.659518][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 56.668427][ T9] usb 4-1: can't read configurations, error -61 [ 56.674949][ T9] usb usb4-port1: unable to enumerate USB device [ 56.813308][ T36] audit: type=1400 audit(1754964104.866:330): avc: denied { connect } for pid=1474 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.819453][ T1475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16470 sclass=netlink_route_socket pid=1475 comm=syz.0.387 [ 57.274858][ T1166] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 57.426212][ T1166] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.434291][ T1166] usb 2-1: not running at top speed; connect to a high speed hub [ 57.442752][ T1166] usb 2-1: config 1 interface 0 has no altsetting 0 [ 57.450667][ T1166] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.459804][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.467841][ T1166] usb 2-1: Product: syz [ 57.472024][ T1166] usb 2-1: Manufacturer: syz [ 57.476649][ T1166] usb 2-1: SerialNumber: syz [ 57.728927][ T1166] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 57.738681][ T1166] usb 2-1: USB disconnect, device number 14 [ 58.292364][ T1504] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 58.307705][ T1508] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 58.412153][ T1511] rust_binder: 254: no such ref 0 [ 58.924833][ T844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.937220][ T1166] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 58.947310][ T1166] usb 5-1: device reset changed ep0 maxpacket size! [ 58.954209][ T1166] usb 5-1: USB disconnect, device number 3 [ 58.980650][ T1538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.989742][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.160301][ T36] audit: type=1400 audit(1754964107.216:331): avc: denied { write } for pid=1546 comm="syz.3.412" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.197615][ T331] rust_binder: 1509: removing orphan mapping 0:24 [ 59.254819][ T1166] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.285511][ T1555] netlink: 'syz.1.415': attribute type 2 has an invalid length. [ 59.293268][ T1557] netlink: 'syz.1.415': attribute type 2 has an invalid length. [ 59.303397][ T1555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.312431][ T1555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.394828][ T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 59.405961][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.416936][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.426729][ T1166] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.435903][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.444471][ T1166] usb 5-1: config 0 descriptor?? [ 59.524516][ T1562] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.538699][ T1562] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.538740][ T811] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 59.575960][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.586201][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.596081][ T330] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.599534][ T36] audit: type=1400 audit(1754964107.656:332): avc: denied { read } for pid=1565 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.605303][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.633113][ T330] usb 4-1: SerialNumber: syz [ 59.638167][ T36] audit: type=1400 audit(1754964107.686:333): avc: denied { map } for pid=1565 comm="syz.0.419" path="socket:[12005]" dev="sockfs" ino=12005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.664314][ T36] audit: type=1400 audit(1754964107.686:334): avc: denied { accept } for pid=1565 comm="syz.0.419" path="socket:[12005]" dev="sockfs" ino=12005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.714838][ T811] usb 2-1: Using ep0 maxpacket: 8 [ 59.720605][ T811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.729361][ T811] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 59.738145][ T811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.750012][ T811] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.757615][ T36] audit: type=1400 audit(1754964107.816:335): avc: denied { bind } for pid=1567 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.759025][ T811] usb 2-1: config 1 has no interface number 1 [ 59.785434][ T811] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 59.798411][ T811] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.811549][ T811] usb 2-1: config 1 interface 2 has no altsetting 0 [ 59.820188][ T811] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.829445][ T811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.837567][ T811] usb 2-1: Product: syz [ 59.840408][ T1547] rust_binder: Write failure EFAULT in pid:264 [ 59.841771][ T811] usb 2-1: Manufacturer: syz [ 59.841792][ T811] usb 2-1: SerialNumber: syz [ 59.859803][ T330] usb 4-1: 0:2 : does not exist [ 59.867617][ T330] usb 4-1: USB disconnect, device number 12 [ 59.879598][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.977826][ T1579] binder: Bad value for 'max' [ 60.052361][ T1581] fuse: Bad value for 'rootmode' [ 60.071974][ T1583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.080896][ T1583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.095629][ T811] usb 2-1: USB disconnect, device number 15 [ 60.470313][ T1166] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 60.479542][ T1166] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 60.490386][ T1166] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 60.498576][ T1166] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 60.506225][ T1166] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 60.516560][ T1166] usb 5-1: USB disconnect, device number 4 [ 60.609813][ T1591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.609846][ T1591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 60.624334][ T1591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.638197][ T1591] rust_binder: Read failure Err(EFAULT) in pid:268 [ 60.677434][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.696505][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.944813][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 61.094821][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 61.106425][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 61.124840][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.147357][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.156484][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.164523][ T9] usb 2-1: Product: ఄ [ 61.168939][ T9] usb 2-1: Manufacturer: ï âžé§³ê’Šç•Şë³şâ‡îˆä£î¤ğîŞ¤ï–·¤€â˘¸á™ĴĜĞ䌄൞쎇éħ’ċ‡¨…şëƒì˜Šé­†âžíœ¸çĥï­“ç°¤îĞë£‰âŻïĤ·ë‘§àı”á²‚éŸŻä˘ƒé¤„áı€èƒ¤Ŭ€ïžİ醲ċ‚ŠÖœîğ²ížµç²žëĥİጳĉ³’ċĵ´ážï˜Ĵî·‡ä“ç¤‡í™­ë‹›êŞ´ĉ¨İ˜ëĤ›âħ½ĉš‰ëµ‰éŽ¸£€ĉ‡ĵç‹›èŞ ċ³âğ¨ëĵŻêğħ’½éħżè‹ìĵﴁîĞ„ĉ‰ċ£Ĥïı [ 61.196718][ T9] usb 2-1: SerialNumber: syz [ 61.254832][ T331] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 61.385007][ T331] usb 5-1: device descriptor read/64, error -71 [ 61.405759][ T1599] usb usb8: usbfs: process 1599 (syz.1.431) did not claim interface 0 before use [ 61.415554][ T1599] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 61.427383][ T9] usb 2-1: 0:2 : does not exist [ 61.435835][ T9] usb 2-1: USB disconnect, device number 16 [ 61.514815][ T1166] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 61.634815][ T331] usb 5-1: device descriptor read/64, error -71 [ 61.644826][ T1166] usb 4-1: device descriptor read/64, error -71 [ 61.874899][ T331] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 61.884840][ T1166] usb 4-1: device descriptor read/64, error -71 [ 62.007581][ T331] usb 5-1: device descriptor read/64, error -71 [ 62.124864][ T1166] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 62.244841][ T331] usb 5-1: device descriptor read/64, error -71 [ 62.254839][ T1166] usb 4-1: device descriptor read/64, error -71 [ 62.264836][ T811] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 62.354931][ T331] usb usb5-port1: attempt power cycle [ 62.414867][ T811] usb 2-1: Using ep0 maxpacket: 32 [ 62.421162][ T811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.431353][ T811] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.444276][ T811] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.453341][ T811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.461920][ T811] usb 2-1: config 0 descriptor?? [ 62.468301][ T811] hub 2-1:0.0: bad descriptor, ignoring hub [ 62.474261][ T811] hub 2-1:0.0: probe with driver hub failed with error -5 [ 62.481658][ T811] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 62.494856][ T1166] usb 4-1: device descriptor read/64, error -71 [ 62.605008][ T1166] usb usb4-port1: attempt power cycle [ 62.684848][ T511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.684860][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 62.694981][ T331] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 62.725950][ T331] usb 5-1: device descriptor read/8, error -71 [ 62.806395][ T1624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.815019][ T1624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.855884][ T331] usb 5-1: device descriptor read/8, error -71 [ 62.944823][ T1166] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 62.965828][ T1166] usb 4-1: device descriptor read/8, error -71 [ 63.094875][ T331] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 63.103317][ T1166] usb 4-1: device descriptor read/8, error -71 [ 63.115877][ T331] usb 5-1: device descriptor read/8, error -71 [ 63.245909][ T331] usb 5-1: device descriptor read/8, error -71 [ 63.344918][ T1166] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 63.355091][ T331] usb usb5-port1: unable to enumerate USB device [ 63.366040][ T1166] usb 4-1: device descriptor read/8, error -71 [ 63.496652][ T1166] usb 4-1: device descriptor read/8, error -71 [ 63.601758][ T1635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.604945][ T1166] usb usb4-port1: unable to enumerate USB device [ 63.611048][ T1635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.626395][ T1635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.635089][ T1635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.177107][ T1645] 9pnet_virtio: no channels available for device ./file0 [ 64.196448][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.205561][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.288295][ T36] audit: type=1400 audit(1754964112.346:336): avc: denied { bind } for pid=1648 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.308300][ T36] audit: type=1400 audit(1754964112.346:337): avc: denied { map } for pid=1648 comm="syz.3.450" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.391831][ T1655] overlayfs: overlapping lowerdir path [ 64.404857][ T64] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.554824][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 64.561086][ T64] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.569965][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.580069][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.590365][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.599441][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.607469][ T64] usb 5-1: Product: syz [ 64.611617][ T64] usb 5-1: Manufacturer: syz [ 64.616226][ T64] usb 5-1: SerialNumber: syz [ 64.768276][ T36] audit: type=1400 audit(1754964112.826:338): avc: denied { map } for pid=1670 comm="syz.0.456" path="socket:[13549]" dev="sockfs" ino=13549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.791942][ T36] audit: type=1400 audit(1754964112.826:339): avc: denied { read } for pid=1670 comm="syz.0.456" path="socket:[13549]" dev="sockfs" ino=13549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.023175][ T64] usb 5-1: 0:2 : does not exist [ 65.192281][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.200899][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.539963][ T1721] binder: Bad value for 'defcontext' [ 65.591296][ T1727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.591332][ T1727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:313 [ 65.705320][ T1166] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 65.723204][ T1166] usb 2-1: device reset changed ep0 maxpacket size! [ 65.730371][ T1166] usb 2-1: USB disconnect, device number 17 [ 65.829274][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.838076][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.846038][ T331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 65.855583][ T64] usb 5-1: USB disconnect, device number 9 [ 65.872814][ T36] audit: type=1400 audit(1754964113.926:340): avc: denied { create } for pid=1743 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 65.920961][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.929518][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.004845][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 66.011248][ T331] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.022027][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 66.031127][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.039486][ T1166] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 66.047343][ T331] usb 4-1: config 0 descriptor?? [ 66.052560][ T1729] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 66.060869][ T331] hub 4-1:0.0: bad descriptor, ignoring hub [ 66.066844][ T331] hub 4-1:0.0: probe with driver hub failed with error -5 [ 66.074136][ T331] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 66.206121][ T1166] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 66.215392][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.223939][ T1166] usb 2-1: config 0 descriptor?? [ 66.379370][ T1753] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 66.387119][ T1753] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 66.432673][ T1166] usb 2-1: Cannot read MAC address [ 66.437929][ T1166] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 66.455284][ T1166] usb 2-1: USB disconnect, device number 18 [ 66.459305][ T1753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.486'. [ 66.476802][ T1756] fuse: Bad value for 'fd' [ 66.503106][ T36] audit: type=1400 audit(1754964114.556:341): avc: denied { ioctl } for pid=1757 comm="syz.0.489" path="socket:[14353]" dev="sockfs" ino=14353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.004841][ T330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 67.019246][ T1781] rust_binder: Error while translating object. [ 67.019272][ T1781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.025523][ T1781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 67.155947][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.176110][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.185914][ T330] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 67.195016][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.206051][ T330] usb 5-1: config 0 descriptor?? [ 67.235331][ T1790] binder: Bad value for 'max' [ 67.399526][ T36] audit: type=1400 audit(1754964115.456:342): avc: denied { bind } for pid=1802 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.214550][ T330] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71 [ 68.223495][ T330] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 68.231612][ T330] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71 [ 68.239776][ T330] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 68.247351][ T330] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 68.257883][ T330] usb 5-1: USB disconnect, device number 10 [ 68.267741][ T1808] UHID_CREATE from different security context by process 505 (syz.0.507), this is not allowed. [ 68.328753][ T1812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.337267][ T1812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.345939][ T1812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 68.636573][ T1834] rust_binder: Error while translating object. [ 68.636626][ T1834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 68.642873][ T1834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:327 [ 68.782313][ T36] audit: type=1400 audit(1754964116.836:343): avc: denied { create } for pid=1851 comm="syz.4.521" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.782892][ T1852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.791625][ T36] audit: type=1400 audit(1754964116.836:344): avc: denied { link } for pid=1851 comm="syz.4.521" name="#1b" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.812199][ T1852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 68.821530][ T36] audit: type=1400 audit(1754964116.836:345): avc: denied { rename } for pid=1851 comm="syz.4.521" name="#1c" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.844036][ T1854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.900874][ T1859] overlayfs: failed to set uuid (45/file1, err=-1); falling back to uuid=null. [ 68.964879][ T1166] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 68.984540][ T1862] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 68.984572][ T1862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 68.992624][ T1862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:144 [ 69.014889][ T36] audit: type=1400 audit(1754964117.076:346): avc: denied { write } for pid=1863 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.124830][ T1166] usb 2-1: Using ep0 maxpacket: 16 [ 69.131043][ T1166] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.145923][ T1166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.163216][ T1166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.173675][ T1166] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.183073][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.192435][ T1166] usb 2-1: Product: syz [ 69.197403][ T1166] usb 2-1: Manufacturer: syz [ 69.202025][ T1166] usb 2-1: SerialNumber: syz [ 69.305118][ T331] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 69.318125][ T331] usb 4-1: device reset changed ep0 maxpacket size! [ 69.325101][ T331] usb 4-1: USB disconnect, device number 17 [ 69.609889][ T1166] usb 2-1: 0:2 : does not exist [ 69.634859][ T331] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 69.785941][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.796945][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.806744][ T331] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.815867][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.824644][ T331] usb 4-1: config 0 descriptor?? [ 69.869460][ T1871] binder: Binderfs stats mode cannot be changed during a remount [ 69.913114][ T1874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.933222][ T1874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.952745][ T1874] netlink: 224 bytes leftover after parsing attributes in process `syz.4.528'. [ 69.972086][ T1874] SELinux: security_context_str_to_sid (0000000000000000000001200000000000000000157) failed with errno=-22 [ 70.040497][ T1166] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 70.055876][ T1166] usb 2-1: USB disconnect, device number 19 [ 70.069467][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.118043][ T36] audit: type=1400 audit(1754964118.166:347): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.147466][ T406] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 70.165952][ T36] audit: type=1400 audit(1754964118.226:348): avc: denied { create } for pid=1886 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.294823][ T406] usb 5-1: device descriptor read/64, error -71 [ 70.544815][ T406] usb 5-1: device descriptor read/64, error -71 [ 70.794857][ T406] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 70.824054][ T1898] SELinux: security_context_str_to_sid () failed with errno=-22 [ 70.854082][ T331] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 70.863710][ T331] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 70.872414][ T331] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 70.881084][ T331] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 70.894132][ T331] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 70.910729][ T331] usb 4-1: USB disconnect, device number 18 [ 70.924820][ T406] usb 5-1: device descriptor read/64, error -71 [ 70.926768][ T1908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 71.071845][ T1921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.109199][ T1927] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 71.123158][ T1927] rust_binder: Write failure EINVAL in pid:381 [ 71.174975][ T406] usb 5-1: device descriptor read/64, error -71 [ 71.194268][ T36] audit: type=1400 audit(1754964119.246:349): avc: denied { execute } for pid=1934 comm="syz.1.550" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.294903][ T406] usb usb5-port1: attempt power cycle [ 71.389629][ T1949] netlink: 260 bytes leftover after parsing attributes in process `syz.3.556'. [ 71.411274][ T36] audit: type=1400 audit(1754964119.466:350): avc: denied { read } for pid=1950 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.430617][ T1955] sit0: entered promiscuous mode [ 71.437892][ T1955] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 71.445660][ T1955] netlink: 1 bytes leftover after parsing attributes in process `syz.3.559'. [ 71.455891][ T1955] bridge0: entered allmulticast mode [ 71.462923][ T1955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 71.497586][ T1958] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 71.498187][ T1956] cgroup2: Unknown parameter 'freezer' [ 71.572808][ T36] audit: type=1400 audit(1754964119.626:351): avc: denied { execute } for pid=1971 comm="syz.3.566" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 71.642626][ T1982] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 71.642657][ T1982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.650813][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:356 [ 71.660372][ T406] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 71.689086][ T1987] binder: Unknown parameter 'vw' [ 71.699013][ T406] usb 5-1: device descriptor read/8, error -71 [ 71.795235][ T2000] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 71.802917][ T2000] netlink: 17 bytes leftover after parsing attributes in process `syz.1.577'. [ 71.835851][ T406] usb 5-1: device descriptor read/8, error -71 [ 71.843038][ T1998] rust_binder: Error while translating object. [ 71.843098][ T1998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 71.849407][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:369 [ 71.923632][ T2004] kvm: pic: single mode not supported [ 71.946619][ T2004] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 72.012713][ T36] audit: type=1400 audit(1754964120.066:352): avc: denied { name_bind } for pid=1999 comm="syz.1.577" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.084884][ T406] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 72.105914][ T406] usb 5-1: device descriptor read/8, error -71 [ 72.112934][ T2015] rust_binder: 2013 RLIMIT_NICE not set [ 72.119450][ T330] rust_binder: 2012: removing orphan mapping 0:1048 [ 72.209950][ T2025] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 72.218311][ T2025] rust_binder: Write failure EINVAL in pid:392 [ 72.245845][ T406] usb 5-1: device descriptor read/8, error -71 [ 72.269376][ T2029] binder: Binderfs stats mode cannot be changed during a remount [ 72.312230][ T2036] binder: Unknown parameter 'fsmagic' [ 72.329238][ T2039] binder: Bad value for 'max' [ 72.364941][ T406] usb usb5-port1: unable to enumerate USB device [ 72.433658][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.442184][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.554839][ T330] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 72.685178][ T330] usb 4-1: device descriptor read/64, error -71 [ 72.876297][ T2068] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 33554432 [ 72.884180][ T2068] rust_binder: Read failure Err(EAGAIN) in pid:410 [ 72.924826][ T330] usb 4-1: device descriptor read/64, error -71 [ 72.999156][ T2073] veth1_macvtap: left promiscuous mode [ 73.005396][ T2075] netlink: 176 bytes leftover after parsing attributes in process `syz.4.603'. [ 73.009784][ T2073] macsec0: entered promiscuous mode [ 73.020955][ T2073] macsec0: entered allmulticast mode [ 73.037636][ T36] audit: type=1400 audit(1754964121.096:353): avc: denied { mounton } for pid=2072 comm="syz.1.605" path="cgroup:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.100226][ T2090] binder: Unknown parameter 'aontext' [ 73.144076][ T2097] mmap: syz.1.611 (2097): VmData 20824064 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 73.174832][ T330] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 73.315526][ T330] usb 4-1: device descriptor read/64, error -71 [ 73.414829][ T406] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 73.427699][ T1166] rust_binder: 2109: removing orphan mapping 0:24 [ 73.434250][ T1166] rust_binder: 2109: removing orphan mapping 24:1024 [ 73.525408][ T2123] FAT-fs (rnullb0): bogus number of reserved sectors [ 73.532249][ T2123] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 73.554833][ T330] usb 4-1: device descriptor read/64, error -71 [ 73.564933][ T406] usb 5-1: Using ep0 maxpacket: 8 [ 73.571227][ T406] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 73.579524][ T406] usb 5-1: config 0 has no interface number 0 [ 73.586984][ T406] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 73.596093][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.604075][ T406] usb 5-1: Product: syz [ 73.608294][ T406] usb 5-1: Manufacturer: syz [ 73.612895][ T406] usb 5-1: SerialNumber: syz [ 73.620632][ T406] usb 5-1: config 0 descriptor?? [ 73.664923][ T330] usb usb4-port1: attempt power cycle [ 73.696200][ T2128] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 73.751262][ T331] rust_binder: 2126: removing orphan mapping 0:112 [ 73.757896][ T331] rust_binder: 2126: removing orphan mapping 112:1048 [ 73.842369][ T406] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 73.848792][ T406] usb 5-1: No streaming interface found for terminal 6. [ 73.855916][ T406] usb 5-1: Failed to create links for entity 5 [ 73.862083][ T406] usb 5-1: Failed to register entities (-22). [ 73.869859][ T406] usb 5-1: USB disconnect, device number 15 [ 74.004821][ T330] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 74.025769][ T330] usb 4-1: device descriptor read/8, error -71 [ 74.155845][ T330] usb 4-1: device descriptor read/8, error -71 [ 74.391523][ T36] audit: type=1400 audit(1754964122.446:354): avc: denied { mount } for pid=2146 comm="syz.1.629" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.394857][ T330] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 74.436241][ T330] usb 4-1: device descriptor read/8, error -71 [ 74.566089][ T330] usb 4-1: device descriptor read/8, error -71 [ 74.674952][ T330] usb usb4-port1: unable to enumerate USB device [ 74.694818][ T64] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 74.846221][ T64] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.854299][ T64] usb 5-1: not running at top speed; connect to a high speed hub [ 74.862765][ T64] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 74.870809][ T64] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 74.879782][ T64] usb 5-1: config 1 has no interface number 3 [ 74.885883][ T64] usb 5-1: too many endpoints for config 1 interface 4 altsetting 149: 63, using maximum allowed: 30 [ 74.896784][ T64] usb 5-1: config 1 interface 4 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 74.909969][ T64] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 74.920846][ T64] usb 5-1: config 1 interface 4 has no altsetting 0 [ 74.927449][ T64] usb 5-1: config 1 interface 1 has no altsetting 0 [ 74.935508][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.944562][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.952597][ T64] usb 5-1: Product: syz [ 74.956782][ T64] usb 5-1: Manufacturer: syz [ 74.961367][ T64] usb 5-1: SerialNumber: syz [ 75.173571][ T64] usb 5-1: found format II with max.bitrate = 48041, frame size=3 [ 75.181534][ T64] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 75.195392][ T64] usb 5-1: USB disconnect, device number 16 [ 75.208657][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.230412][ T2159] netlink: 152 bytes leftover after parsing attributes in process `syz.1.633'. [ 75.380495][ T2164] rust_binder: 396: no such ref 2048 [ 75.385940][ T2164] rust_binder: 396: no such ref 2 [ 75.391011][ T2164] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.391028][ T2164] rust_binder: Read failure Err(EFAULT) in pid:396 [ 75.399588][ T2164] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.413689][ T2164] rust_binder: 396: no such ref 0 [ 75.419214][ T2164] rust_binder: Error while translating object. [ 75.419243][ T2164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 75.425631][ T2164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:396 [ 75.674839][ T331] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 75.796980][ T2182] overlayfs: failed to clone upperpath [ 75.814850][ T331] usb 4-1: device descriptor read/64, error -71 [ 75.832874][ T36] audit: type=1400 audit(1754964123.886:355): avc: denied { getopt } for pid=2187 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.884246][ T36] audit: type=1400 audit(1754964123.936:356): avc: denied { ioctl } for pid=2187 comm="syz.4.646" path="socket:[16689]" dev="sockfs" ino=16689 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.065031][ T331] usb 4-1: device descriptor read/64, error -71 [ 76.204837][ T1166] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 76.304818][ T331] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 76.355881][ T1166] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 76.364115][ T1166] usb 5-1: config 0 has no interface number 0 [ 76.371397][ T1166] usb 5-1: New USB device found, idVendor=17ef, idProduct=3899, bcdDevice=71.0d [ 76.380971][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.395378][ T1166] usb 5-1: config 0 descriptor?? [ 76.404425][ T1166] usb-storage 5-1:0.159: USB Mass Storage device detected [ 76.414303][ T1166] usb-storage 5-1:0.159: Quirks match for vid 17ef pid 3899: 800000 [ 76.430916][ T2206] overlayfs: failed to clone upperpath [ 76.434864][ T331] usb 4-1: device descriptor read/64, error -71 [ 76.610797][ T1166] usb 5-1: USB disconnect, device number 17 [ 76.626886][ T2218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.674817][ T331] usb 4-1: device descriptor read/64, error -71 [ 76.784940][ T331] usb usb4-port1: attempt power cycle [ 76.944829][ T1166] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 77.094846][ T1166] usb 5-1: Using ep0 maxpacket: 8 [ 77.101011][ T1166] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.109428][ T1166] usb 5-1: config 179 has no interface number 0 [ 77.115753][ T1166] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.126845][ T1166] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.138085][ T331] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 77.145695][ T1166] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.156909][ T1166] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.174582][ T1166] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.190178][ T1166] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.199501][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.207646][ T331] usb 4-1: device descriptor read/8, error -71 [ 77.217610][ T2220] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 77.239976][ T36] audit: type=1400 audit(1754964125.296:357): avc: denied { mount } for pid=2232 comm="syz.0.663" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.261679][ T2234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=2234 comm=syz.1.662 [ 77.322627][ T2246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 77.336265][ T331] usb 4-1: device descriptor read/8, error -71 [ 77.365479][ T2246] tipc: Enabling of bearer rejected, failed to enable media [ 77.574852][ T331] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 77.605995][ T331] usb 4-1: device descriptor read/8, error -71 [ 77.638826][ T1166] usb 5-1: USB disconnect, device number 18 [ 77.644827][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.644864][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.735872][ T331] usb 4-1: device descriptor read/8, error -71 [ 77.844964][ T331] usb usb4-port1: unable to enumerate USB device [ 77.850176][ T2257] fuse: Bad value for 'fd' [ 78.236692][ T36] audit: type=1400 audit(1754964126.296:358): avc: denied { map } for pid=2261 comm="syz.4.673" path="socket:[16038]" dev="sockfs" ino=16038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.259744][ T36] audit: type=1400 audit(1754964126.296:359): avc: denied { read } for pid=2261 comm="syz.4.673" path="socket:[16038]" dev="sockfs" ino=16038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.291042][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.291539][ T2267] rust_binder: Error in use_page_slow: ESRCH [ 78.298152][ T2267] rust_binder: use_range failure ESRCH [ 78.304153][ T2267] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 78.309763][ T2267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.317695][ T2267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:207 [ 78.332065][ T2267] rust_binder: Error in use_page_slow: ESRCH [ 78.341290][ T2267] rust_binder: use_range failure ESRCH [ 78.347584][ T2267] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 78.357812][ T2267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.366878][ T2267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:207 [ 78.624823][ T331] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 78.720980][ T2278] overlayfs: failed to resolve './file1': -2 [ 78.757471][ T2280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2280 comm=syz.1.680 [ 78.794907][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 78.805615][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 78.818001][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 78.836980][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.846421][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.855515][ T331] usb 5-1: config 0 descriptor?? [ 78.861051][ T2272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 78.869402][ T331] hub 5-1:0.0: USB hub found [ 79.070316][ T331] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 79.287995][ T331] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 79.297274][ T331] hid-generic 0003:046D:C31C.000B: probe with driver hid-generic failed with error -22 [ 79.604913][ T331] usb 5-1: USB disconnect, device number 19 [ 79.742638][ T36] audit: type=1326 audit(1754964127.796:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2292 comm="syz.1.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558ebe9 code=0x0 [ 79.888289][ T2310] overlayfs: failed to clone lowerpath [ 80.071396][ T2315] fuse: Bad value for 'fd' [ 80.076260][ T2315] binder: Unknown parameter '00000000000000000000' [ 80.677877][ T2343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.686625][ T2343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.865477][ T2345] overlayfs: failed to resolve './file1': -2 [ 80.947433][ T2350] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.956623][ T2350] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.977809][ T36] audit: type=1400 audit(1754964129.036:361): avc: denied { mount } for pid=2354 comm="syz.4.703" name="/" dev="configfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.000858][ T36] audit: type=1400 audit(1754964129.056:362): avc: denied { search } for pid=2354 comm="syz.4.703" name="/" dev="configfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.023441][ T36] audit: type=1400 audit(1754964129.056:363): avc: denied { read } for pid=2354 comm="syz.4.703" name="/" dev="configfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.045405][ T36] audit: type=1400 audit(1754964129.056:364): avc: denied { open } for pid=2354 comm="syz.4.703" path="/" dev="configfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.114488][ T2361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.265263][ T2372] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 81.336497][ T36] audit: type=1400 audit(1754964129.396:365): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.363884][ T2386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.372556][ T2386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.534850][ T330] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 81.687122][ T330] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.696269][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.704287][ T330] usb 5-1: Product: syz [ 81.708464][ T330] usb 5-1: Manufacturer: syz [ 81.713063][ T330] usb 5-1: SerialNumber: syz [ 82.063449][ T2415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.078158][ T2415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.521357][ T36] audit: type=1326 audit(1754964130.576:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2420 comm="syz.3.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd6c98ebe9 code=0x0 [ 82.622959][ T36] audit: type=1400 audit(1754964130.676:367): avc: denied { create } for pid=2420 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 83.181100][ T2451] overlayfs: failed to clone upperpath [ 83.188631][ T36] audit: type=1326 audit(1754964131.246:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558ebe9 code=0x0 [ 83.367722][ T2454] kvm: emulating exchange as write [ 83.884837][ T330] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 83.966237][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.975043][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.022757][ T36] audit: type=1400 audit(1754964132.076:369): avc: denied { getopt } for pid=2461 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.023457][ T2462] bpf: Bad value for 'gid' [ 84.043093][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 84.047667][ T2463] bpf: Bad value for 'gid' [ 84.053767][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.067970][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.077765][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.086875][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.095971][ T330] usb 4-1: config 0 descriptor?? [ 84.108149][ T330] hub 4-1:0.0: USB hub found [ 84.156534][ T2477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.747'. [ 84.182853][ T36] audit: type=1400 audit(1754964132.236:370): avc: denied { map } for pid=2480 comm="syz.1.748" path="socket:[17351]" dev="sockfs" ino=17351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.210511][ T2481] tipc: Can't bind to reserved service type 0 [ 84.260342][ T2490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 84.302319][ T1166] usb 5-1: USB disconnect, device number 20 [ 84.319583][ T330] hub 4-1:0.0: 1 port detected [ 84.393857][ T2502] overlayfs: missing 'lowerdir' [ 84.534231][ T2507] binder: Unknown parameter 'contextÀ' [ 84.613687][ T2512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2512 comm=syz.0.760 [ 84.635695][ T1166] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 84.806796][ T1166] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 84.816454][ T1166] usb 5-1: config 0 has no interface number 0 [ 84.822598][ T1166] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.833544][ T1166] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 84.846272][ T1166] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 84.858554][ T1166] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.868491][ T1166] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.883023][ T1166] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 84.892146][ T1166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.900199][ T1166] usb 5-1: Product: syz [ 84.904379][ T1166] usb 5-1: Manufacturer: syz [ 84.909033][ T1166] usb 5-1: SerialNumber: syz [ 84.914712][ T1166] usb 5-1: config 0 descriptor?? [ 84.920304][ T2499] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.927696][ T330] hub 4-1:0.0: activate --> -90 [ 84.946780][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.955972][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.180092][ T2519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.188714][ T2519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.272856][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.303665][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.319236][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.372414][ T330] usb 4-1-port1: cannot disable (err = -71) [ 85.374193][ T331] usb 4-1: USB disconnect, device number 27 [ 85.391444][ T1166] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 85.400760][ T1166] scsi host1: usb-storage 5-1:0.189 [ 85.409620][ T1166] usb 5-1: USB disconnect, device number 21 [ 85.482858][ T2544] input: syz1 as /devices/virtual/input/input12 [ 85.599216][ T2547] overlay: Unknown parameter 'uid>00000000000000000000' [ 85.985802][ T2566] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 85.994203][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 85.994220][ T36] audit: type=1400 audit(1754964134.046:377): avc: denied { wake_alarm } for pid=2561 comm="syz.4.773" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.137631][ T2574] binder: Binderfs stats mode cannot be changed during a remount [ 86.364814][ T1166] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 86.450000][ T36] audit: type=1400 audit(1754964134.506:378): avc: granted { setsecparam } for pid=2578 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 86.497322][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.504822][ T1166] usb 4-1: device descriptor read/64, error -71 [ 86.681456][ T36] audit: type=1400 audit(1754964134.736:379): avc: denied { setopt } for pid=2588 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.711576][ T36] audit: type=1400 audit(1754964134.766:380): avc: denied { ioctl } for pid=2565 comm="syz.3.774" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.765334][ T1166] usb 4-1: device descriptor read/64, error -71 [ 86.819986][ T36] audit: type=1400 audit(1754964134.876:381): avc: denied { read write } for pid=1209 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.844273][ T36] audit: type=1400 audit(1754964134.876:382): avc: denied { open } for pid=1209 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.868496][ T36] audit: type=1400 audit(1754964134.876:383): avc: denied { ioctl } for pid=1209 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.896357][ T2594] binder: Unknown parameter 'defcontext01777777777777777777777' [ 86.896370][ T36] audit: type=1400 audit(1754964134.956:384): avc: denied { remount } for pid=2592 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.014837][ T1166] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 87.144832][ T1166] usb 4-1: device descriptor read/64, error -71 [ 87.248707][ T36] audit: type=1400 audit(1754964135.306:385): avc: denied { name_bind } for pid=2602 comm="syz.1.789" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.270476][ T36] audit: type=1400 audit(1754964135.306:386): avc: denied { node_bind } for pid=2602 comm="syz.1.789" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.411573][ T2606] input: syz1 as /devices/virtual/input/input13 [ 87.424807][ T1166] usb 4-1: device descriptor read/64, error -71 [ 87.544892][ T1166] usb usb4-port1: attempt power cycle [ 87.641608][ T2617] usb usb8: usbfs: process 2617 (syz.0.795) did not claim interface 0 before use [ 87.730745][ T2629] 9pnet_fd: Insufficient options for proto=fd [ 87.738736][ T2627] random: crng reseeded on system resumption [ 87.802345][ T2625] incfs: Backing dir is not set, filesystem can't be mounted. [ 87.824835][ T2625] incfs: mount failed -2 [ 87.884811][ T1166] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 87.918401][ T1166] usb 4-1: device descriptor read/8, error -71 [ 88.057390][ T1166] usb 4-1: device descriptor read/8, error -71 [ 88.186743][ T331] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 88.199476][ T2651] rust_binder: 683: no such ref 0 [ 88.206459][ T2651] netlink: 'syz.0.804': attribute type 46 has an invalid length. [ 88.214192][ T2651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.804'. [ 88.224375][ T2651] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 88.294806][ T1166] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 88.316993][ T1166] usb 4-1: device descriptor read/8, error -71 [ 88.447413][ T1166] usb 4-1: device descriptor read/8, error -71 [ 88.555445][ T1166] usb usb4-port1: unable to enumerate USB device [ 89.099688][ T2667] rust_binder: Write failure EFAULT in pid:685 [ 89.217418][ T2674] /dev/rnullb0: Can't open blockdev [ 89.292117][ T2677] rust_binder: 691: no such ref 2 [ 90.307550][ T2712] overlayfs: missing 'lowerdir' [ 90.334827][ T811] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 90.416962][ T2720] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 90.453449][ T2725] 9pnet_fd: Insufficient options for proto=fd [ 90.474801][ T811] usb 4-1: device descriptor read/64, error -71 [ 90.688045][ T2735] tipc: Enabling of bearer rejected, failed to enable media [ 90.706380][ T2739] __vm_enough_memory: pid: 2739, comm: syz.0.837, bytes: 21200211988480 not enough memory for the allocation [ 90.738000][ T811] usb 4-1: device descriptor read/64, error -71 [ 90.780603][ T2742] overlayfs: failed to resolve './file1': -2 [ 90.904838][ T2750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.906942][ T2750] rust_binder: Write failure EINVAL in pid:292 [ 90.918309][ T2752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.937041][ T2750] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 90.974814][ T811] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 90.995289][ T36] kauditd_printk_skb: 463 callbacks suppressed [ 90.995308][ T36] audit: type=1400 audit(1754964139.056:850): avc: denied { ioctl } for pid=2693 comm="syz.3.821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.061559][ T2757] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 91.074735][ T36] audit: type=1400 audit(1754964139.096:851): avc: denied { ioctl } for pid=2693 comm="syz.3.821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.131661][ T36] audit: type=1400 audit(1754964139.096:852): avc: denied { ioctl } for pid=2693 comm="syz.3.821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.175240][ T811] usb 4-1: device descriptor read/64, error -71 [ 91.181666][ T36] audit: type=1400 audit(1754964139.096:853): avc: denied { ioctl } for pid=2693 comm="syz.3.821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.224614][ T36] audit: type=1400 audit(1754964139.106:854): avc: denied { read write } for pid=2755 comm="syz.0.844" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 91.263817][ T36] audit: type=1400 audit(1754964139.106:855): avc: denied { read write open } for pid=2755 comm="syz.0.844" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 91.292130][ T36] audit: type=1400 audit(1754964139.106:856): avc: denied { read write } for pid=2755 comm="syz.0.844" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.317983][ T36] audit: type=1400 audit(1754964139.106:857): avc: denied { read write open } for pid=2755 comm="syz.0.844" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.349764][ T36] audit: type=1400 audit(1754964139.116:858): avc: denied { relabelfrom } for pid=2755 comm="syz.0.844" name="NETLINK" dev="sockfs" ino=18903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.357900][ T2772] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.380024][ T36] audit: type=1400 audit(1754964139.116:859): avc: denied { mac_admin } for pid=2755 comm="syz.0.844" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.437835][ T2775] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.437858][ T2775] rust_binder: Read failure Err(EFAULT) in pid:298 [ 91.448760][ T2776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.464817][ T811] usb 4-1: device descriptor read/64, error -71 [ 91.513468][ T2779] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 91.595317][ T811] usb usb4-port1: attempt power cycle [ 91.602913][ T2786] rust_binder: Error while translating object. [ 91.602955][ T2786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.612630][ T2786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 91.685901][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.709517][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.766053][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.794975][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.934833][ T811] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 91.970358][ T811] usb 4-1: device descriptor read/8, error -71 [ 92.054821][ T331] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 92.117588][ T811] usb 4-1: device descriptor read/8, error -71 [ 92.204840][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 92.227440][ T331] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.244798][ T331] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.265876][ T331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.284820][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.291529][ T2833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.871'. [ 92.304279][ T331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.305646][ T2833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'. [ 92.322872][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.354809][ T811] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 92.354809][ T331] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.354843][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.387841][ T811] usb 4-1: device descriptor read/8, error -71 [ 92.403929][ T331] usb 5-1: config 0 descriptor?? [ 92.538697][ T811] usb 4-1: device descriptor read/8, error -71 [ 92.642107][ T2849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:724 [ 92.643140][ T331] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.664925][ T811] usb usb4-port1: unable to enumerate USB device [ 92.713776][ T331] usb 5-1: USB disconnect, device number 23 [ 92.736467][ T331] usblp0: removed [ 92.756762][ T2853] overlay: Unknown parameter 'subj_type' [ 92.907594][ T2858] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 92.919750][ T2858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.164852][ T331] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 93.325459][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 93.357030][ T331] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.374794][ T331] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.383437][ T331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.414088][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.431952][ T331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.454824][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.470600][ T331] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.479768][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.490139][ T331] usb 5-1: config 0 descriptor?? [ 93.702399][ T331] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.905592][ T2795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.914210][ T2795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.925160][ C0] usblp0: nonzero read bulk status received: -71 [ 93.931991][ T331] usb 5-1: USB disconnect, device number 24 [ 94.017178][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.017517][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.018436][ T2901] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 94.023996][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.042033][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.050223][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.057303][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.063831][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.070665][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.077299][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.083839][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.090412][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.096991][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.103611][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.111099][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.118274][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.125502][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.132714][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.141021][ T2794] usblp0: removed [ 94.152014][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.152384][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.159569][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.166763][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.173294][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.180797][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.187940][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.194520][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.202010][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.209345][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.216604][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.223194][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.230648][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.237832][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.244354][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.251760][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.258926][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.266063][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.272631][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.280151][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.287578][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.294228][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.301687][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.308844][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.316070][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.322685][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.330223][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.337422][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.343977][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.351429][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.358607][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.365258][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.371797][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.378453][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.385011][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.391572][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.399474][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.425151][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.435133][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.455160][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.461738][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.469094][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.475749][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.483818][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.503992][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.520207][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.531205][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.547963][ T2900] rust_binder: Write failure EFAULT in pid:441 [ 94.950041][ T2975] incfs: Options parsing error. -22 [ 94.961910][ T2975] incfs: mount failed -22 [ 95.404291][ T2991] rust_binder: Error while translating object. [ 95.404323][ T2991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.420007][ T2991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:767 [ 96.013266][ T36] kauditd_printk_skb: 935 callbacks suppressed [ 96.013284][ T36] audit: type=1400 audit(1754964144.066:1795): avc: denied { read } for pid=3014 comm="syz.3.931" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.050332][ T3020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:472 [ 96.113279][ T36] audit: type=1400 audit(1754964144.066:1796): avc: denied { read open } for pid=3014 comm="syz.3.931" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.195809][ T36] audit: type=1400 audit(1754964144.066:1797): avc: denied { create } for pid=3014 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.234867][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 96.240251][ T36] audit: type=1400 audit(1754964144.076:1798): avc: denied { create } for pid=3014 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.308690][ T3031] fuse: Bad value for 'user_id' [ 96.313668][ T36] audit: type=1400 audit(1754964144.086:1799): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.345005][ T3031] fuse: Bad value for 'user_id' [ 96.350856][ T3030] devpts: called with bogus options [ 96.377000][ T3030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.384516][ T36] audit: type=1400 audit(1754964144.086:1800): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.409539][ T3030] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 96.424802][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 96.429434][ T3030] audit: backlog limit exceeded [ 96.438623][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.454817][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 96.473609][ T31] usb 5-1: config 1 has no interface number 0 [ 96.493829][ T31] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 96.520865][ T31] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.544641][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 96.545087][ T3036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 96.656736][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 96.665939][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.673940][ T31] usb 5-1: Product: syz [ 96.678146][ T31] usb 5-1: Manufacturer: syz [ 96.682753][ T31] usb 5-1: SerialNumber: syz [ 96.702826][ T3006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 96.725436][ T3006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 96.984819][ T1751] usb 4-1: new full-speed USB device number 36 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK [ 97.146345][ T1751] usb 4-1: not running at top speed; connect to a high speed hub [ 97.161874][ T3006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.184458][ T3006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.195480][ T1751] usb 4-1: config 1 interface 0 has no altsetting 0 Stopping crond: [ 97.225216][ T1751] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.234300][ T1751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 stopped /usr/sbin/crond (pid 194) OK [ 97.408002][ T1751] usb 4-1: Product: syz [ 97.412905][ T1751] usb 4-1: Manufacturer: syz [ 97.423428][ T1751] usb 4-1: SerialNumber: syz [ 97.651417][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 97.692838][ T1751] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 97.713343][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 97.729369][ T1751] usb 4-1: USB disconnect, device number 36 [ 97.766983][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 97.774971][ T1751] usblp0: removed [ 97.822267][ T31] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:2f:ce:75:7d:3e Stopping dhcpcd... [ 97.885703][ T31] usb 5-1: USB disconnect, device number 25 [ 97.905970][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 98.017107][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 stopped /sbin/dhcpcd (pid 147) [ 98.056843][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 98.085310][ T3093] netlink: 'syz.1.951': attribute type 4 has an invalid length. [ 98.090126][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 98.121332][ T3093] netlink: 'syz.1.951': attribute type 17 has an invalid length. Stopping network: [ 98.304106][ T3105] netlink: 8404 bytes leftover after parsing attributes in process `syz.1.954'. [ 98.595010][ T3127] rust_binder: Failed copying remainder into alloc: EFAULT [ 98.595034][ T3127] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 98.616682][ T3127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 98.626091][ T3125] rust_binder: 812: no such ref 1 [ 98.639524][ T3127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:326 [ 98.864821][ T811] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 99.054823][ T811] usb 5-1: device descriptor read/64, error -71 [ 99.184802][ T1751] usb 4-1: new high-speed USB device number 37 using dummy_hcd OK Stopping iptables: OK [ 99.294833][ T811] usb 5-1: device descriptor read/64, error -71 Stopping system message bus: [ 99.354806][ T1751] usb 4-1: Using ep0 maxpacket: 16 [ 99.362925][ T1751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.374336][ T1751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.384228][ T1751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.397158][ T1751] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.406272][ T1751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.416285][ T1751] usb 4-1: config 0 descriptor?? [ 99.534821][ T811] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 99.635451][ T3141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.648651][ T3141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.674842][ T811] usb 5-1: device descriptor read/64, error -71 done [ 99.888102][ T1751] usbhid 4-1:0.0: can't add hid device: -71 [ 99.894096][ T1751] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.904297][ T1751] usb 4-1: USB disconnect, device number 37 [ 99.924827][ T811] usb 5-1: device descriptor read/64, error -71 [ 100.045345][ T811] usb usb5-port1: attempt power cycle [ 100.211110][ T3199] binder: Unknown parameter 'fscontext?}' [ 100.404910][ T811] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 100.451902][ T811] usb 5-1: device descriptor read/8, error -71 [ 100.546409][ T3221] binder: Unknown parameter 'defcontext01777777777777777777777' [ 100.588387][ T811] usb 5-1: device descriptor read/8, error -71 Stopping klogd: [ 100.807001][ T3228] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 100.834806][ T811] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 100.870373][ T811] usb 5-1: device descriptor read/8, error -71 OK Stopping acpid: [ 101.007367][ T811] usb 5-1: device descriptor read/8, error -71 [ 101.114952][ T811] usb usb5-port1: unable to enumerate USB device [ 101.115325][ T36] kauditd_printk_skb: 923 callbacks suppressed [ 101.115340][ T36] audit: type=1400 audit(1754964149.176:2719): avc: denied { ioctl } for pid=3122 comm="syz.4.958" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.263044][ T36] audit: type=1400 audit(1754964149.316:2720): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.287183][ T36] audit: type=1400 audit(1754964149.316:2721): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.312128][ T36] audit: type=1400 audit(1754964149.316:2722): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.337600][ T36] audit: type=1400 audit(1754964149.346:2723): avc: denied { read write } for pid=3236 comm="syz.0.981" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.360729][ T36] audit: type=1400 audit(1754964149.346:2724): avc: denied { read write open } for pid=3236 comm="syz.0.981" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.384717][ T36] audit: type=1400 audit(1754964149.346:2725): avc: denied { map } for pid=3236 comm="syz.0.981" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.407758][ T36] audit: type=1400 audit(1754964149.346:2726): avc: denied { read write } for pid=3236 comm="syz.0.981" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.431380][ T36] audit: type=1400 audit(1754964149.346:2727): avc: denied { read } for pid=3236 comm="syz.0.981" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.454076][ T36] audit: type=1400 audit(1754964149.346:2728): avc: denied { read open } for pid=3236 comm="syz.0.981" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.616099][ T3243] process 'syz.4.983' launched './file1' with NULL argv: empty string added [ 101.787618][ T3246] ------------[ cut here ]------------ [ 101.793251][ T3246] WARNING: CPU: 0 PID: 3246 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 101.803467][ T3246] Modules linked in: [ 101.807692][ T3246] CPU: 0 UID: 0 PID: 3246 Comm: syz.3.985 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 101.821162][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.831239][ T3246] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 101.837363][ T3246] Code: 00 48 8b 5d a0 74 08 48 89 df e8 02 43 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 101.850552][ T3253] devpts: called with bogus options [ 101.857051][ T3246] RSP: 0018:ffffc9000080fc88 EFLAGS: 00010202 [ 101.868449][ T3246] RAX: 1ffffd1ffff8431a RBX: ffffc9000e66e8e8 RCX: ffffffff816dc149 [ 101.876477][ T3246] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc218d0 [ 101.884451][ T3246] RBP: ffffc9000080fcf0 R08: ffffe8ffffc218d7 R09: 1ffffd1ffff8431a [ 101.892446][ T3246] R10: dffffc0000000000 R11: fffff91ffff8431b R12: dffffc0000000000 [ 101.900451][ T3246] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc218d0 [ 101.908454][ T3246] FS: 00005555644f7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.917461][ T3246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.924066][ T3246] CR2: 0000555561c594a8 CR3: 000000011f2f0000 CR4: 00000000003526b0 [ 101.932057][ T3246] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 101.940074][ T3246] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 101.948070][ T3246] Call Trace: [ 101.951371][ T3246] [ 101.954312][ T3246] kvm_put_kvm+0x1100/0x12b0 [ 101.958927][ T3246] ? __cfi_kvm_vm_release+0x10/0x10 [ 101.964149][ T3246] kvm_vm_release+0x47/0x70 [ 101.968697][ T3246] __fput+0x1fe/0xa00 [ 101.972711][ T3246] ? __cfi__raw_spin_lock_irq+0x10/0x10 OK[ 101.978408][ T3246] ____fput+0x20/0x30 [ 101.982556][ T3246] task_work_run+0x1e0/0x250 [ 101.987256][ T3246] ? __cfi_task_work_run+0x10/0x10 [ 101.992388][ T3246] ? __kasan_check_write+0x18/0x20 [ 101.997575][ T3246] resume_user_mode_work+0x36/0x50 [ 102.002712][ T3246] syscall_exit_to_user_mode+0x64/0xb0 [ 102.008226][ T3246] do_syscall_64+0x64/0xf0 [ 102.012671][ T3246] ? clear_bhb_loop+0x50/0xa0 [ 102.017407][ T3246] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.023333][ T3246] RIP: 0033:0x7fbd6c98ebe9 [ 102.027796][ T3246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 Stopping syslogd[ 102.047456][ T3246] RSP: 002b:00007fff40e48a38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 : [ 102.057370][ T3246] RAX: 0000000000000000 RBX: 0000000000018d4a RCX: 00007fbd6c98ebe9 [ 102.065465][ T3246] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 102.073465][ T3246] RBP: 00007fbd6cbb7da0 R08: 0000000000000001 R09: 0000001b40e48d2f [ 102.081490][ T3246] R10: 0000001b2df20000 R11: 0000000000000246 R12: 00007fbd6cbb5fac [ 102.089507][ T3246] R13: 00007fbd6cbb5fa0 R14: ffffffffffffffff R15: 00007fff40e48b50 [ 102.097524][ T3246] [ 102.100565][ T3246] ---[ end trace 0000000000000000 ]--- stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.1.19 closed by remote host. umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to[ 102.630478][ T329] bridge_slave_1: left allmulticast mode [ 102.636193][ T329] bridge_slave_1: left promiscuous mode [ 102.641826][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.649285][ T329] bridge_slave_0: left allmulticast mode [ 102.655018][ T329] bridge_slave_0: left promiscuous mode [ 102.660650][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.677681][ T329] bridge0 (unregistering): left allmulticast mode [ 102.686252][ T811] usb 1-1: USB disconnect, device number 4 [ 102.866035][ T329] tipc: Left network mode [ 102.871253][ T329] veth1_macvtap: left promiscuous mode [ 102.876783][ T329] veth0_vlan: left promiscuous mode [ 103.118020][ T329] bridge_slave_1: left allmulticast mode [ 103.123677][ T329] bridge_slave_1: left promiscuous mode [ 103.129323][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.136819][ T329] bridge_slave_0: left allmulticast mode [ 103.142448][ T329] bridge_slave_0: left promiscuous mode [ 103.148096][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.155764][ T329] bridge_slave_1: left allmulticast mode [ 103.161396][ T329] bridge_slave_1: left promiscuous mode [ 103.167009][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.174433][ T329] bridge_slave_0: left allmulticast mode [ 103.180151][ T329] bridge_slave_0: left promiscuous mode [ 103.185758][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.193198][ T329] bridge_slave_1: left allmulticast mode [ 103.198857][ T329] bridge_slave_1: left promiscuous mode [ 103.204419][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.211664][ T329] bridge_slave_0: left allmulticast mode [ 103.217299][ T329] bridge_slave_0: left promiscuous mode [ 103.222858][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.447431][ T329] tipc: Left network mode [ 103.451862][ T329] tipc: Left network mode [ 103.456483][ T329] tipc: Left network mode [ 103.462362][ T329] veth1_macvtap: left promiscuous mode [ 103.467914][ T329] veth0_vlan: left promiscuous mode [ 103.473436][ T329] veth0_vlan: left promiscuous mode [ 103.478896][ T329] veth1_macvtap: left promiscuous mode [ 103.484364][ T329] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 104.511794][ T3260] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 104.518405][ T3260] ACPI: PM: Preparing to enter system sleep state S5 [ 104.525338][ T3260] kvm: exiting hardware virtualization [ 104.530885][ T3260] reboot: Power down serialport: VM disconnected.