last executing test programs: 2.391071466s ago: executing program 1 (id=569): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x50b02, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x400000f) ioctl$TCFLSH(r3, 0x800455ca, 0x1) socket$xdp(0x2c, 0x3, 0x0) close_range(r3, r3, 0x0) 2.388554926s ago: executing program 1 (id=571): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.328759902s ago: executing program 1 (id=574): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x6}, 0x1c) faccessat(r3, &(0x7f0000000200)='./file0\x00', 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.514694057s ago: executing program 3 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b000000010003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1.463530371s ago: executing program 3 (id=610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x20011, r0, 0xcef36000) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder0\x00', 0x1802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000776000/0x2000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000), 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/190, 0xbe}], 0x5, 0x0) mremap(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000034d000/0x2000)=nil) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0x0, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 1.463388021s ago: executing program 3 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000940)='\xa8\xabo\x82L\xe4\x920\vA\xfd\xe5\xcaxd\xd4\xf3\x8e\xe9y\x9a\f$p\xe6\xd0I_\xd7s`\xa6\xa4\xff\xbc@d>\xf1l\xc7}\xde8\xf1\xcb.G\x1dj\x03\xb9p\xc6!`\xd5\x15\xe1\xb9\xd3R\xa7\xeb\xbeD\xdb\xddk_\x8a\x00\xd1\xa8rH\x14\xb4\x90P\"\x7f\xed\xc6\xac-3`unuE\x8fv6V\x04\x8e', 0x0) (async) read(r0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140), &(0x7f0000000180)="3d22f36bd9025930869d3336ca6f2f9741c809a8536032b72d", 0x19, 0x6) (async) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 1.199245013s ago: executing program 0 (id=616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x1a00, 0xc0}, 0x0) 1.140756327s ago: executing program 0 (id=617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x494) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x6000, 0x77ef8801, 0xfe, 0x6, 0x6}) close_range(r1, r0, 0x2) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000140)=0xf) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000180)={0xce, 0x0, r3}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000340)={0x7f, &(0x7f0000000240)="8c9a86ae44291fd07d375da8964774ecad7f916f63d48185828f1e193a9a3a21ea3c956dcfc4d7d6625f2f37bc3e3d35354fa1268514895a4aee603c8dd74bd0c2df1870ec073ef11e52c0442888e7900bf457b3adbf092714712667691e22b76f89357a870684a07a92612aca6e252575b1ba727cfab1badbc771a0605a5cdc9d8db72ae9dcf37a1fac7ccd2d22394e1e5b2a2ac5c01c09d5931cb3361b8ba71c583fc746dd09f4ec85932747b052d9cb927280ee23202432d9c24dd134943a7bd3c6fbcecf9e4adc1fa189b34551aee44e8c9bad16d3c4ad28277d1807218266838f5b491c66"}) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x1000, 0x1) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000400)=@arm64_extra={0x603000000013c03d, &(0x7f00000003c0)=0x5}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000440)=0x9, 0x4) shutdown(r1, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000480)=0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f00000004c0)) epoll_pwait(r4, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f0000000540)={[0x1]}, 0x8) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x5) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000d40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f00000005c0)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x1}, 0x4, 0x80, 0x7, 0x39, 0x6, 'syz1\x00', "de18570062f572ee887316a27a554e90c3bb4d952d0876a207155aec8200f1c5", "79ff84abc037f9283e2a67e20f15ff2cce083bd5a6d806c95fdfe7d396dfa3b8", [{0x5, 0x4, {0x0, 0x81}}, {0x6, 0x95, {0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x7fff, 0x6, {0x3, 0x7ff}}, {0xfff, 0xff, {0x0, 0x1}}, {0x9, 0x1, {0x3}}, {0x6c9, 0xf, {0x2, 0xee}}, {0x40, 0x9, {0x2, 0x2}}, {0xfe00, 0xf, {0x0, 0x3}}, {0x4, 0x4, {0x2, 0x80000001}}, {0x6, 0xd0d0, {0x3, 0x7f}}, {0x9, 0x40, {0x0, 0xb5f3}}, {0x6, 0x4, {0x1, 0x44a}}, {0x3, 0x90d8, {0x3, 0x7}}, {0x0, 0x7, {0x2, 0x3}}, {0xcc7b, 0xc, {0x3, 0x8}}, {0x7, 0x4, {0x3, 0x40}}, {0xc, 0x8, {0x1, 0x2}}, {0x6, 0x7, {0x1, 0x8d}}, {0x1, 0x0, {0x2, 0x6}}, {0x2d1, 0x4, {0x1, 0x556}}, {0xffff, 0x60, {0x0, 0xdf4}}, {0xa77, 0x3, {0x1, 0x2}}, {0x5, 0xf42, {0x0, 0x5}}, {0xe, 0xb8, {0x2, 0x1ff}}, {0xfff, 0x2, {0x0, 0x4}}, {0x7, 0xb53c, {0x3, 0xffffffff}}, {0x5, 0x148}, {0x946d, 0x7f, {0x1, 0xfffffffc}}, {0xfff, 0x9, {0x2, 0x1ff}}, {0x8, 0x6, {0x0, 0x4}}, {0x64d9, 0x9, {0x0, 0x6}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0x8, {0x3, 0xdde}}, {0x6, 0x6, {0x1, 0x6}}, {0x6ae9, 0x4, {0x2, 0x76f}}, {0x0, 0xe4ed, {0x0, 0x3}}, {0x1f57, 0x81, {0x0, 0x1}}, {0x6, 0x0, {0x1, 0xa7}}, {0x8, 0x81, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xeb, 0x96, 0x10, 0xb, 0x21, 'syz1\x00', "44fba3a81c47bf8f25903851e38af3d146010118c70f9e33ae64fca03137df6d", "a55aa9ee979b7173171248c9de2401401838036220752181ca4e2c112703c16e", [{0x9, 0xff, {0x0, 0x1}}, {0xf9, 0x0, {0x1, 0x4}}, {0x35, 0x8001, {0x2}}, {0x9, 0x4, {0x3, 0x1}}, {0xd4b, 0x5, {0x1, 0xf}}, {0xce, 0x4, {0x3, 0x903}}, {0x7, 0x4, {0x2, 0xc}}, {0x5, 0x7, {0x0, 0x5}}, {0x3, 0x8, {0x0, 0x81}}, {0x1, 0x0, {0x0, 0x1}}, {0x6, 0x7ff, {0x0, 0x9}}, {0x28, 0x8, {0x1, 0x80}}, {0x0, 0x4, {0x1, 0x8}}, {0x5, 0x23, {0x2, 0x800}}, {0x2, 0xd7, {0x3, 0x8001}}, {0x7, 0xe6a, {0x1, 0x4}}, {0x1, 0xc611, {0x3}}, {0x3, 0x8, {0x3, 0x1}}, {0x5, 0x88c, {0x3, 0x5}}, {0x2, 0xd, {0x2}}, {0x400, 0xc, {0x2, 0x4}}, {0x2, 0x200, {0x2, 0x4}}, {0xdda, 0x100, {0x1, 0x1}}, {0x7, 0x6, {0x0, 0x5a}}, {0x6, 0x5ce5, {0x1, 0x4}}, {0x6, 0x0, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x3}}, {0x3, 0x2, {0x3, 0x7}}, {0x8000, 0x800, {0x2, 0x3}}, {0x8000, 0xf5, {0x1, 0x621d8658}}, {0x0, 0x1, {0x3, 0xffff}}, {0x7, 0x3, {0x3, 0x4}}, {0x8, 0x8734, {0x3, 0x9}}, {0x9, 0x9, {0x3, 0x7}}, {0x8, 0x67, {0x3, 0x1}}, {0x9b, 0x3ff, {0x1, 0x7fffffff}}, {0x7, 0x5, {0x0, 0x1}}, {0xaa71, 0x3, {0x2}}, {0x5, 0x3, {0x3, 0x4}}, {0xf, 0x3, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x8000}, 0x4, 0x3b, 0x0, 0x0, 0x21, 'syz1\x00', "96f91322f7a17f8e16c430e6e746fa8a3e49292bf7dc5284e0aacc01aec10291", "0d06bffaa19ad0928908bf1979690ea905ba189251f0c3ee4a029b20527d86c5", [{0x9, 0x2, {0x0, 0x4}}, {0xffff, 0x6, {0x3, 0xa}}, {0xcb9b, 0x0, {0x2, 0x6b5a}}, {0x5, 0x1, {0x0, 0x39b42733}}, {0x6, 0x0, {0x1, 0x1}}, {0x800, 0x79d, {0x3, 0x8}}, {0xf, 0xfff, {0x3, 0x2}}, {0x9, 0x1, {0x3}}, {0x5, 0x4, {0x1, 0xa}}, {0x5, 0x7, {0x1}}, {0x1, 0x1ff, {0x3, 0x5}}, {0x4, 0x3, {0x2, 0x1}}, {0x200, 0x5, {0x1, 0x4}}, {0x6, 0x0, {0x0, 0x9}}, {0x7, 0x81, {0x2, 0x8}}, {0x7, 0x4, {0x0, 0x6}}, {0xf507, 0x7, {0x0, 0x9d5}}, {0xf801, 0x9, {0x0, 0x5}}, {0x7c, 0xfffb, {0x2, 0x8}}, {0x7, 0x4b42, {0x3, 0x7}}, {0x9, 0x7, {0x3, 0x7}}, {0x10, 0x2, {0x2, 0xbd0d}}, {0x5, 0x207d, {0x2, 0xab7}}, {0xd, 0x0, {0x0, 0x1}}, {0x7, 0x802, {0x2, 0x4}}, {0x3bf, 0x3, {0x0, 0x4}}, {0x59, 0x70, {0x1, 0x8001}}, {0x8000, 0xff6a, {0x1, 0x2}}, {0xd4, 0x1, {0x2, 0x800}}, {0x2, 0x5, {0x3, 0x7}}, {0x190c, 0x3, {0x3, 0xfffffff9}}, {0xc, 0x7, {0x2, 0x9}}, {0xd, 0xff, {0x3}}, {0x1, 0x7}, {0x2, 0x159d, {0x1, 0x1}}, {0x7, 0xe8, {0x3, 0x4}}, {0x5, 0xec6b, {0x3, 0x7}}, {0x8, 0x8, {0x1, 0x6}}, {0x3, 0x6, {0x3, 0x2}}, {0x4000, 0x4, {0x1, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4811}, 0x4000) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000d80)={[0xeeee8000, 0x5000, 0x1, 0x10000], 0x7, 0x30, 0x2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000f40)={'sit0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x10, 0x1, 0xfffffffe, 0xb9, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x65, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x2c, 0x3, [{0x7, 0x6, "9d4ab2ac"}, {0x1, 0xe, "706bf7a5907457deb4777a9c"}, {0x7, 0x12, "192e85570c62a531164c1465686e6d0e"}]}, @timestamp_addr={0x44, 0xc, 0x12, 0x1, 0x9, [{@multicast1, 0x80000001}]}, @timestamp={0x44, 0x14, 0x31, 0x0, 0x9, [0x1, 0x5, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x54, 0x4f, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xb}, 0xd26}, {@loopback, 0x10001}, {@empty, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@empty, 0x7}, {@multicast1, 0x1}, {@remote, 0x3}, {@local, 0x80}, {@remote, 0x8}]}, @noop, @noop]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000001380)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000f80)=@expire={0x3bc, 0x18, 0x300, 0x70bd29, 0x25dfdbfd, {{{@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e24, 0x2, 0x4e24, 0x4, 0x2, 0x0, 0x0, 0x89, r5, 0xee00}, {@in=@multicast1, 0x4d4, 0xff}, @in=@loopback, {0x3, 0x7f, 0xfffffffffffffffd, 0x9852, 0x2, 0x4, 0x5, 0x9}, {0xfffffffffffffffb, 0x5, 0x3, 0x15c}, {0x80000001, 0x2, 0xfffffff7}, 0x70bd27, 0x3500, 0x2, 0x4, 0x7, 0xa5}, 0xc7}, [@migrate={0x134, 0x11, [{@in=@rand_addr=0x64010102, @in=@loopback, @in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x3505, 0xa, 0xa}, {@in=@loopback, @in=@loopback, @in6=@empty, @in=@private=0xa010102, 0x33, 0x0, 0x0, 0x34ff, 0x0, 0x2}, {@in=@local, @in=@broadcast, @in=@remote, @in=@rand_addr=0x64010102, 0x2b, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, @in6=@private0, 0xff, 0x1, 0x0, 0x0, 0x2, 0xa}]}, @tfcpad={0x8, 0x16, 0x2}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @migrate={0x180, 0x11, [{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3506, 0x2, 0x2}, {@in=@broadcast, @in6=@mcast1, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x93, 0x2, 0x0, 0x3500, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, @in6=@mcast1, @in6=@mcast1, 0x2b, 0x0, 0x0, 0x3501, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3506, 0xa}, {@in=@broadcast, @in=@private=0xa010100, @in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x0, 0x0, 0x3505, 0xa, 0x5}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x24}, 0x4000800) fcntl$setstatus(r1, 0x4, 0x0) lremovexattr(0xfffffffffffffffd, &(0x7f00000013c0)=@known='user.incfs.id\x00') syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x335, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x47, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x6000, 0x19, 0x1, {0x22, 0xec3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0x9, 0x10}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x200, 0xbb, 0x2, 0x3, 0x20, 0x8}, 0x103, &(0x7f0000001480)={0x5, 0xf, 0x103, 0x1, [@generic={0xfe, 0x10, 0x1, "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"}]}, 0x6, [{0x8b, &(0x7f00000015c0)=@string={0x8b, 0x3, "a8d82fb4cab8111bb797fcd14112062065a3a6176ed68ba22a13fb7dc365ed92ac77724bc7f49fa1e946f2afd309e0bc49e30771120c8256d6f62e3759b95d1d8e64ff20761f1b069b039d6bf439521d903e9e6cadbfd5bdba9d657357b82d6d0ead898eafdef8d5feb7266fba8470343476398f1b8527553f6a738a87f018db2fde8aa21463fa4979"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1001}}, {0xa6, &(0x7f00000016c0)=@string={0xa6, 0x3, "ed4a9ce008d83e6da98915a21e2fe68a44575cd86f22f3ed1241140c142f4342244f38549ce72aa60d7e9c35bdc016db8c507121eace192f64816ed78b2323514f8658a10ef291d41d9c5a98eca84ae12cec77d9e54ea152176cfcf0f8e8c2a946a4557671aea6302b919a96c0bb56063763b301f0fb719c1e49acfcc24324235b846b4d81e95c4cf15e18d7918d1799aa0b165222aefff038236514b73df49c03de4bbe"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x1404}}, {0xd3, &(0x7f00000017c0)=@string={0xd3, 0x3, "c9a91066c46809f6c3bd636d6dd4d6585da5bc7fcff99f671bca5725244fac9a21744a742a6503a30a42f5c3aea359ee135c517e3f12e75073e123e3bacabd71b1e61741f16028873c0bef1ade8f03cc7268dbbc1459fc1946d1d8c36799207bcdc78038ce4daa20188b9be8789cf93e202b39785cf22892872768747bd610a6b951d8cac6030251e157eca1098e6b59c2b5a3eb446fd4ca55827bbd8dbd9eec861d0b3eca309fafe98944b3b7770d0aa7ddb60406e2c46505028a6e09da23323da721b510dadaf6a0d59e062a8e0f3c5f"}}, {0x2a, &(0x7f00000018c0)=@string={0x2a, 0x3, "9e67736e7eff91609950a980d71a1e92b48082412e6207f73a6b16af3cd8279b146b6a374310d6be"}}]}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d8}, 0x20008004) 1.140574907s ago: executing program 3 (id=618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000740)=[@increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) 1.140478867s ago: executing program 3 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b200000100003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1.120595269s ago: executing program 3 (id=620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3"], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000040)={{0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b878f62c8166efbafc0cb008ee0f01300f01cff30f016bab66b9df0b000066b80040000066ba000000000f30660ff7e70f01c2baf80c66b84c53668766efbafc0c66b886a9000066ef0fc7bf49d0ffc7", 0x54}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x0, 0x18000}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 981.247581ms ago: executing program 1 (id=625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 937.010744ms ago: executing program 1 (id=628): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) fadvise64(r1, 0x3, 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x220040, 0x2) r5 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r10, &(0x7f0000000340), 0x8) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x20480, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="ff0f29128102b6edfe56354766646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r13 = socket$netlink(0x10, 0x3, 0x0) preadv(r12, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1, 0x6, 0x75c8) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 628.238979ms ago: executing program 0 (id=631): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x3, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = fsmount(r0, 0x0, 0x0) (rerun: 32) fchdir(r1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0x7, [0xa5, 0x8, 0x8, 0x7, 0xff, 0x5]}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000014000100000000002000000002000000040000001400010dff010006000000000000000000000001150002"], 0x44}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) (async, rerun: 32) mprotect(&(0x7f0000575000/0x4000)=nil, 0x4000, 0x1000009) (rerun: 32) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) inotify_add_watch(r1, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1000000) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) 573.241484ms ago: executing program 0 (id=632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x9]}, 0x0, 0x8) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000038c0)={&(0x7f000024c000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x3}) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "a29fd2dd75fbce6b", "3fc8c07215e3e9ed73eeedc458c8393df1877a9808cb5884de596f0e41773550", "6dd8e49a", "7e9337f85f381625"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r6, &(0x7f0000000740)=""/384, 0x200008c0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x2c004001, &(0x7f00000000c0)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x3a, 0x0, &(0x7f0000000040)=0xffffffffffffff65) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 572.137984ms ago: executing program 0 (id=633): symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@private0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20080c4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) userfaultfd(0x80001) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x34}], 0x1}, 0x20000000) 533.222987ms ago: executing program 0 (id=634): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x6}, 0x1c) faccessat(r3, &(0x7f0000000200)='./file0\x00', 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 277.850818ms ago: executing program 2 (id=641): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) creat(0x0, 0x141) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xd82, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close_range(r1, 0xffffffffffffffff, 0x0) 257.867659ms ago: executing program 2 (id=642): symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@private0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20080c4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) userfaultfd(0x80001) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x34}], 0x1}, 0x20000000) 257.349879ms ago: executing program 2 (id=643): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) (async) chdir(0x0) rmdir(0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) times(&(0x7f0000000000)) 209.366023ms ago: executing program 2 (id=644): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad88714", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 209.057393ms ago: executing program 2 (id=645): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000c0000000c00008008"], 0x20}}, 0x40816) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf0, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x35b}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf924}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2004c881}, 0x8010) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mlockall(0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 208.986113ms ago: executing program 2 (id=646): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) tkill(r0, 0x11) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=647): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000015c0)={'veth0_to_hsr\x00', &(0x7f0000001500)=@ethtool_rx_ntuple={0x35, {0x8, @tcp_ip4_spec={@local, @private=0xa010102, 0x4e24, 0x4e21, 0x3}, @esp_ip4_spec={@empty, @remote, 0x4, 0x3}, 0x3266, 0x81, 0x3, 0x7, 0xffffffffffffffff}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005e40), 0x2002, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) getresgid(0x0, 0x0, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f00000001c0), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x6000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66baf80cb85ddd178eef66bafc0cec66baf80cb8b9683b84ef66bafc0cec66baf80cb8746d5186ef66bafc0c66ed0f9d80008000003e420f01c3410fc7b166000000420f01c8650f01c9c402a59364f75cf30faeb240660000", 0x59}], 0x1, 0x7c, 0x0, 0xfffffe49) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) ioctl$sock_bt_hci(r10, 0x400448de, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x5000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x1000, 0xdddd0000, 0x8, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0xc, 0x3, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0xffff1000, 0x1000, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x100000, 0xeeef0000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x33}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x5e, 0x3]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 24.534696][ T36] audit: type=1400 audit(1754490184.140:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.535510][ T281] cgroup: Unknown subsys name 'net' [ 24.557396][ T36] audit: type=1400 audit(1754490184.140:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.584718][ T36] audit: type=1400 audit(1754490184.170:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.584855][ T281] cgroup: Unknown subsys name 'devices' [ 24.692561][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.698143][ T281] cgroup: Unknown subsys name 'rlimit' [ 24.788760][ T36] audit: type=1400 audit(1754490184.390:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.811939][ T36] audit: type=1400 audit(1754490184.390:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.836762][ T36] audit: type=1400 audit(1754490184.390:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.845584][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.868681][ T36] audit: type=1400 audit(1754490184.470:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.894108][ T36] audit: type=1400 audit(1754490184.470:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.931097][ T36] audit: type=1400 audit(1754490184.540:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.931959][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.956583][ T36] audit: type=1400 audit(1754490184.540:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.756609][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.763721][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.770801][ T289] bridge_slave_0: entered allmulticast mode [ 25.777019][ T289] bridge_slave_0: entered promiscuous mode [ 25.783264][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.790306][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.797493][ T291] bridge_slave_0: entered allmulticast mode [ 25.803679][ T291] bridge_slave_0: entered promiscuous mode [ 25.814903][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.821973][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.829025][ T289] bridge_slave_1: entered allmulticast mode [ 25.835360][ T289] bridge_slave_1: entered promiscuous mode [ 25.841696][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.848736][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.855848][ T291] bridge_slave_1: entered allmulticast mode [ 25.862059][ T291] bridge_slave_1: entered promiscuous mode [ 25.871293][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.878343][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.885465][ T288] bridge_slave_0: entered allmulticast mode [ 25.891645][ T288] bridge_slave_0: entered promiscuous mode [ 25.906492][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.913570][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.920645][ T288] bridge_slave_1: entered allmulticast mode [ 25.926991][ T288] bridge_slave_1: entered promiscuous mode [ 25.939779][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.946984][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.954056][ T290] bridge_slave_0: entered allmulticast mode [ 25.960142][ T290] bridge_slave_0: entered promiscuous mode [ 25.972008][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.979070][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.986197][ T290] bridge_slave_1: entered allmulticast mode [ 25.992389][ T290] bridge_slave_1: entered promiscuous mode [ 26.154110][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.161229][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.168474][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.175523][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.183855][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.190901][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.198210][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.205244][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.229034][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.236120][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.243409][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.250431][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.259291][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.266363][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.273641][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.280660][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.323494][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.331208][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.338341][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.346254][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.353412][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.360567][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.367918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.375107][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.388089][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.395172][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.403998][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.411149][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.429120][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.436191][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.445425][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.452520][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.477535][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.484606][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.492840][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.499861][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.512109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.519175][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.530111][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.537194][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.572417][ T291] veth0_vlan: entered promiscuous mode [ 26.596257][ T288] veth0_vlan: entered promiscuous mode [ 26.606051][ T289] veth0_vlan: entered promiscuous mode [ 26.619230][ T291] veth1_macvtap: entered promiscuous mode [ 26.628543][ T288] veth1_macvtap: entered promiscuous mode [ 26.643781][ T290] veth0_vlan: entered promiscuous mode [ 26.668496][ T289] veth1_macvtap: entered promiscuous mode [ 26.679070][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.692187][ T290] veth1_macvtap: entered promiscuous mode [ 26.778759][ T335] rust_binder: pid 335 performed invalid decrement on ref [ 26.815271][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.830163][ T344] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure [ 26.942270][ T347] netlink: 'syz.0.6': attribute type 11 has an invalid length. [ 27.037162][ T350] rust_binder: Write failure EFAULT in pid:4 [ 27.102420][ T356] rust_binder: 11: no such ref 0 [ 27.114430][ T356] rust_binder: 11: no such ref 1 [ 27.130970][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.145638][ T358] overlayfs: missing 'lowerdir' [ 27.150721][ T359] overlayfs: missing 'lowerdir' [ 27.233966][ T364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 27.280991][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 27.289178][ T366] rust_binder: Error while translating object. [ 27.291346][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.295651][ T366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.304439][ T45] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 27.311848][ T366] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 27.321799][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.330118][ T366] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:10 [ 27.342682][ T45] usb 2-1: Product: syz [ 27.363083][ T45] usb 2-1: Manufacturer: syz [ 27.363162][ T63] rust_binder: 365: removing orphan mapping 0:1048 [ 27.367692][ T45] usb 2-1: SerialNumber: syz [ 27.385342][ T45] usb 2-1: config 0 descriptor?? [ 27.391229][ T45] usb 2-1: bad CDC descriptors [ 27.396252][ T45] usb 2-1: unsupported MDLM descriptors [ 27.464000][ T383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 27.503666][ T393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.648452][ T405] rust_binder: 14: no such ref 0 [ 27.660350][ T405] rust_binder: 14: no such ref 1 [ 27.747496][ T63] usb 2-1: USB disconnect, device number 2 [ 27.833817][ T427] /dev/rnullb0: Can't open blockdev [ 27.848473][ T429] rust_binder: 33: no such ref 0 [ 27.853979][ T429] rust_binder: 33: no such ref 1 [ 27.869302][ T431] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 27.980366][ T454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.980486][ T454] rust_binder: 35: no such ref 1 [ 27.999526][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.018696][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.029353][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.047924][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.082835][ T463] /dev/rnullb0: Can't open blockdev [ 28.132710][ T472] netlink: 'syz.3.49': attribute type 4 has an invalid length. [ 28.140695][ T472] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 28.148582][ T472] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.49'. [ 28.196205][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 28.197318][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 28.303698][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x60000007 [ 28.361551][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x60000007 [ 28.402888][ T483] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 65) [ 28.402917][ T483] rust_binder: Error while translating object. [ 28.411525][ T479] kvm_intel: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x60000001 [ 28.432515][ T483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.432550][ T483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 28.453593][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x60000001 [ 28.455653][ T483] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.471962][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x60000001 [ 28.491847][ T483] rust_binder: Read failure Err(EFAULT) in pid:6 [ 28.523887][ T486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.524877][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x60000001 [ 28.538432][ T486] rust_binder: 9: no such ref 1 [ 28.564016][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x60000001 [ 28.601199][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x6000fff1 [ 28.643577][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x6000ffcf [ 28.645945][ T490] input: syz0 as /devices/virtual/input/input4 [ 28.671533][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x6000ffbe [ 28.688781][ T479] kvm: kvm [478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x6000ff6b [ 28.972070][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.972199][ T506] rust_binder: 51: no such ref 1 [ 29.207579][ T532] rust_binder: 51: no such ref 1 [ 29.281633][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.360972][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.441222][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.441249][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.442315][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 29.452173][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.461021][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.469400][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.486607][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.490983][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.493257][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.499608][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 29.509567][ T330] usb 4-1: device descriptor read/64, error -71 [ 29.531690][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 29.544541][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 29.553228][ T557] rust_binder: 75: no such ref 1 [ 29.558970][ T9] usb 2-1: Manufacturer: syz [ 29.572781][ T9] usb 2-1: config 0 descriptor?? [ 29.770982][ T330] usb 4-1: device descriptor read/64, error -71 [ 29.840997][ T533] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.985874][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 29.993207][ T9] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 30.001712][ T9] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 30.012899][ T533] usb 3-1: Using ep0 maxpacket: 32 [ 30.021172][ T330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.021596][ T533] usb 3-1: config 1 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 30.040309][ T533] usb 3-1: config 1 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.050315][ T533] usb 3-1: config 1 interface 0 has no altsetting 0 [ 30.058451][ T533] usb 3-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.40 [ 30.067675][ T533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.075699][ T533] usb 3-1: Product: syz [ 30.079848][ T533] usb 3-1: Manufacturer: syz [ 30.084435][ T533] usb 3-1: SerialNumber: syz [ 30.161039][ T330] usb 4-1: device descriptor read/64, error -71 [ 30.230973][ T558] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.336168][ T36] kauditd_printk_skb: 189 callbacks suppressed [ 30.336184][ T36] audit: type=1400 audit(1754490189.940:263): avc: denied { append } for pid=517 comm="syz.1.68" name="hiddev0" dev="devtmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.365665][ T558] usb 1-1: device descriptor read/64, error -71 [ 30.421147][ T330] usb 4-1: device descriptor read/64, error -71 [ 30.526550][ T566] usb 2-1: USB disconnect, device number 3 [ 30.532779][ T330] usb usb4-port1: attempt power cycle [ 30.533361][ T574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 30.549370][ T574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 30.562001][ T533] usbhid 3-1:1.0: can't add hid device: -71 [ 30.567947][ T533] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 30.577850][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 30.588546][ T533] usb 3-1: USB disconnect, device number 2 [ 30.620964][ T558] usb 1-1: device descriptor read/64, error -71 [ 30.747651][ T36] audit: type=1400 audit(1754490190.350:264): avc: denied { getopt } for pid=580 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.747963][ T581] exFAT-fs (rnullb0): invalid boot record signature [ 30.773776][ T581] exFAT-fs (rnullb0): failed to read boot sector [ 30.780095][ T581] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.809495][ T585] rust_binder: 42: no such ref 1 [ 30.860982][ T558] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.880975][ T330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.903569][ T330] usb 4-1: device descriptor read/8, error -71 [ 31.000990][ T558] usb 1-1: device descriptor read/64, error -71 [ 31.032086][ T330] usb 4-1: device descriptor read/8, error -71 [ 31.262926][ T558] usb 1-1: device descriptor read/64, error -71 [ 31.281020][ T330] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.302065][ T330] usb 4-1: device descriptor read/8, error -71 [ 31.344885][ T599] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.357233][ T36] audit: type=1400 audit(1754490190.960:265): avc: denied { getopt } for pid=598 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.376589][ T36] audit: type=1400 audit(1754490190.960:266): avc: denied { read } for pid=598 comm="syz.2.94" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.399609][ T36] audit: type=1400 audit(1754490190.960:267): avc: denied { open } for pid=598 comm="syz.2.94" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.401904][ T558] usb usb1-port1: attempt power cycle [ 31.422539][ T36] audit: type=1400 audit(1754490190.960:268): avc: denied { ioctl } for pid=598 comm="syz.2.94" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.482093][ T330] usb 4-1: device descriptor read/8, error -71 [ 31.601059][ T330] usb usb4-port1: unable to enumerate USB device [ 31.622523][ T36] audit: type=1400 audit(1754490191.230:269): avc: denied { name_bind } for pid=600 comm="syz.2.95" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.644352][ T36] audit: type=1400 audit(1754490191.230:270): avc: denied { node_bind } for pid=600 comm="syz.2.95" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.785118][ T613] rust_binder: 56: no such ref 1 [ 31.808644][ T36] audit: type=1400 audit(1754490191.410:271): avc: denied { read write } for pid=616 comm="syz.1.102" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.811006][ T558] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.843110][ T36] audit: type=1400 audit(1754490191.410:272): avc: denied { open } for pid=616 comm="syz.1.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.852085][ T558] usb 1-1: device descriptor read/8, error -71 [ 31.931095][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.011964][ T558] usb 1-1: device descriptor read/8, error -71 [ 32.080963][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 32.087101][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.098704][ T330] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 32.108001][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.116014][ T330] usb 3-1: Product: syz [ 32.120186][ T330] usb 3-1: Manufacturer: syz [ 32.125532][ T330] usb 3-1: SerialNumber: syz [ 32.133523][ T330] usb 3-1: config 0 descriptor?? [ 32.140880][ T330] usb 3-1: bad CDC descriptors [ 32.145997][ T330] usb 3-1: unsupported MDLM descriptors [ 32.258445][ T558] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 32.291933][ T558] usb 1-1: device descriptor read/8, error -71 [ 32.393593][ T330] usb 3-1: USB disconnect, device number 3 [ 32.453378][ T558] usb 1-1: device descriptor read/8, error -71 [ 32.579426][ T558] usb usb1-port1: unable to enumerate USB device [ 33.021990][ T638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.048595][ T641] rust_binder: 71: no such ref 1 [ 33.105322][ T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.126044][ T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.154115][ T565] kernel read not supported for file inotify (pid: 565 comm: kworker/0:4) [ 33.213583][ T663] binder: Unknown parameter '18446744073709551615' [ 33.255762][ T670] rust_binder: 75: no such ref 1 [ 33.291541][ T675] process 'syz.3.123' launched './file1' with NULL argv: empty string added [ 33.348871][ T533] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.445356][ T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.509207][ T533] usb 2-1: Using ep0 maxpacket: 16 [ 33.515564][ T533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.526851][ T533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.536985][ T533] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 33.552074][ T533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.563109][ T533] usb 2-1: config 0 descriptor?? [ 33.637540][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 33.643822][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.655371][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 33.664469][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.672639][ T63] usb 3-1: Product: syz [ 33.676848][ T63] usb 3-1: Manufacturer: syz [ 33.682405][ T63] usb 3-1: SerialNumber: syz [ 33.688240][ T63] usb 3-1: config 0 descriptor?? [ 33.694634][ T63] usb 3-1: bad CDC descriptors [ 33.699780][ T63] usb 3-1: unsupported MDLM descriptors [ 33.784318][ T533] usbhid 2-1:0.0: can't add hid device: -71 [ 33.797901][ T533] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.819360][ T533] usb 2-1: USB disconnect, device number 4 [ 33.945647][ T330] usb 3-1: USB disconnect, device number 4 [ 34.083372][ T692] input: syz1 as /devices/virtual/input/input6 [ 34.349476][ T697] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.371389][ T698] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.374681][ T700] rust_binder: 93: no such ref 1 [ 34.469000][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.481265][ T713] overlayfs: failed to resolve './file1': -2 [ 34.570577][ T716] rust_binder: 715 RLIMIT_NICE not set [ 34.573412][ T63] rust_binder: 714: removing orphan mapping 0:4240 [ 34.625198][ T722] rust_binder: 75: no such ref 1 [ 34.626708][ T721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 34.677476][ T726] netlink: 92 bytes leftover after parsing attributes in process `syz.0.142'. [ 34.715599][ T729] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 34.806714][ T558] rust_binder: 720: removing orphan mapping 0:112 [ 34.815868][ T558] rust_binder: 0: removing orphan mapping 112:1048 [ 35.080747][ T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.251786][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 35.258025][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.269864][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 35.279248][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.287468][ T63] usb 3-1: Product: syz [ 35.291724][ T63] usb 3-1: Manufacturer: syz [ 35.296563][ T63] usb 3-1: SerialNumber: syz [ 35.305448][ T63] usb 3-1: config 0 descriptor?? [ 35.316284][ T63] usb 3-1: bad CDC descriptors [ 35.321147][ T63] usb 3-1: unsupported MDLM descriptors [ 35.570312][ T558] usb 3-1: USB disconnect, device number 5 [ 35.750772][ T752] rust_binder: 122: no such ref 1 [ 35.777536][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 35.777555][ T36] audit: type=1400 audit(1754490195.155:300): avc: denied { mount } for pid=753 comm="syz.0.153" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.878185][ T36] audit: type=1400 audit(1754490195.239:301): avc: denied { ioctl } for pid=761 comm="syz.3.156" path="socket:[6826]" dev="sockfs" ino=6826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.878507][ T764] ======================================================= [ 35.878507][ T764] WARNING: The mand mount option has been deprecated and [ 35.878507][ T764] and is ignored by this kernel. Remove the mand [ 35.878507][ T764] option from the mount to silence this warning. [ 35.878507][ T764] ======================================================= [ 35.902746][ T36] audit: type=1400 audit(1754490195.239:302): avc: denied { remount } for pid=763 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.938096][ T764] binder: Unknown parameter 'func' [ 35.962852][ T36] audit: type=1400 audit(1754490195.323:303): avc: denied { bind } for pid=761 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.000684][ T769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.001978][ T36] audit: type=1400 audit(1754490195.351:304): avc: denied { mounton } for pid=765 comm="syz.0.158" path="/proc/89/task" dev="proc" ino=6895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.009410][ T769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.032769][ T36] audit: type=1400 audit(1754490195.351:305): avc: denied { mount } for pid=765 comm="syz.0.158" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.060946][ T36] audit: type=1400 audit(1754490195.417:306): avc: denied { associate } for pid=765 comm="syz.0.158" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.101257][ T774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=774 comm=syz.3.160 [ 36.114934][ T774] 9pnet_fd: Insufficient options for proto=fd [ 36.131560][ T776] rust_binder: 134: no such ref 1 [ 36.149811][ T36] audit: type=1400 audit(1754490195.492:307): avc: denied { create } for pid=771 comm="syz.0.159" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.175076][ T36] audit: type=1400 audit(1754490195.492:308): avc: denied { write } for pid=771 comm="syz.0.159" name="file2" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.197530][ T36] audit: type=1400 audit(1754490195.492:309): avc: denied { open } for pid=771 comm="syz.0.159" path="/33/file2" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.391618][ T799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=799 comm=syz.2.168 [ 36.412280][ T772] rust_binder: Read failure Err(EFAULT) in pid:95 [ 36.535835][ T805] rust_binder: 104: no such ref 1 [ 36.630887][ T709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.630904][ T712] Bluetooth: hci0: command 0x1003 tx timeout [ 36.630945][ T710] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.972989][ T558] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.154816][ T558] usb 2-1: Using ep0 maxpacket: 32 [ 37.161328][ T558] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.173567][ T558] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 37.183131][ T558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.192921][ T558] usb 2-1: Product: syz [ 37.197287][ T558] usb 2-1: Manufacturer: syz [ 37.202030][ T558] usb 2-1: SerialNumber: syz [ 37.212349][ T558] usb 2-1: config 0 descriptor?? [ 37.220108][ T558] usb 2-1: bad CDC descriptors [ 37.235488][ T558] usb 2-1: unsupported MDLM descriptors [ 37.365485][ T838] 9pnet_fd: Insufficient options for proto=fd [ 37.432695][ T63] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 37.469057][ T533] usb 2-1: USB disconnect, device number 5 [ 37.573416][ T857] rust_binder: 113: no such ref 1 [ 37.608778][ T859] TCP: TCP_TX_DELAY enabled [ 37.615619][ T63] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 37.623642][ T63] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 37.633861][ T63] usb 4-1: config 0 has no interface number 1 [ 37.640158][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 37.651043][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 37.664017][ T63] usb 4-1: too many endpoints for config 0 interface 2 altsetting 3: 32, using maximum allowed: 30 [ 37.674724][ T63] usb 4-1: config 0 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 37.687699][ T63] usb 4-1: config 0 interface 2 has no altsetting 0 [ 37.694471][ T63] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.10 [ 37.703573][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.713433][ T63] usb 4-1: config 0 descriptor?? [ 37.718659][ T816] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.941001][ T816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.949642][ T816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.959590][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 37.965578][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 37.974555][ T63] usb 4-1: string descriptor 0 read error: -71 [ 37.983958][ T63] usb 4-1: USB disconnect, device number 6 [ 38.122194][ T877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 38.247230][ T890] rust_binder: 102: no such ref 1 [ 38.437600][ T330] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.533838][ T558] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.599056][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 38.609613][ T330] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.617856][ T330] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 38.627840][ T330] usb 4-1: config 0 has no interface number 1 [ 38.634920][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 38.648261][ T330] usb 4-1: too many endpoints for config 0 interface 2 altsetting 3: 32, using maximum allowed: 30 [ 38.659464][ T330] usb 4-1: config 0 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 38.672931][ T330] usb 4-1: config 0 interface 2 has no altsetting 0 [ 38.691012][ T330] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.10 [ 38.700368][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.708619][ T558] usb 2-1: Using ep0 maxpacket: 32 [ 38.724889][ T558] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.733075][ T558] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 38.742187][ T558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.751148][ T330] usb 4-1: config 0 descriptor?? [ 38.757328][ T558] usb 2-1: Product: syz [ 38.768474][ T558] usb 2-1: Manufacturer: syz [ 38.775779][ T558] usb 2-1: SerialNumber: syz [ 38.785072][ T558] usb 2-1: config 0 descriptor?? [ 39.005760][ T892] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 39.006287][ T558] usb 2-1: USB disconnect, device number 6 [ 39.192968][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.203831][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 39.209919][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.218402][ T330] usb 4-1: string descriptor 0 read error: -71 [ 39.225738][ T330] usb 4-1: USB disconnect, device number 7 [ 39.351566][ T903] devpts: called with bogus options [ 39.371975][ T907] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 39.756782][ T933] Unsupported ieee802154 address type: 0 [ 39.881125][ T938] rust_binder: 146: no such ref 1 [ 40.083379][ T956] overlayfs: failed to clone lowerpath [ 40.568852][ T970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.110256][ T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.283645][ T63] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 41.292731][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.300793][ T63] usb 1-1: Product: syz [ 41.305195][ T63] usb 1-1: Manufacturer: syz [ 41.310512][ T63] usb 1-1: SerialNumber: syz [ 41.316242][ T63] usb 1-1: config 0 descriptor?? [ 41.334916][ T565] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.505859][ T565] usb 4-1: Using ep0 maxpacket: 32 [ 41.513856][ T565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.526001][ T565] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 41.535276][ T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.551524][ T565] usb 4-1: Product: syz [ 41.555728][ T565] usb 4-1: Manufacturer: syz [ 41.565762][ T565] usb 4-1: SerialNumber: syz [ 41.573808][ T565] usb 4-1: config 0 descriptor?? [ 41.582489][ T565] usb 4-1: bad CDC descriptors [ 41.587495][ T565] usb 4-1: unsupported MDLM descriptors [ 41.861642][ T533] usb 4-1: USB disconnect, device number 8 [ 41.885552][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 41.885569][ T36] audit: type=1400 audit(1754490200.861:323): avc: denied { setopt } for pid=1043 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.959329][ T1055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1055 comm=syz.2.262 [ 42.034342][ T36] audit: type=1400 audit(1754490201.001:324): avc: denied { read } for pid=1058 comm="syz.2.264" path="socket:[8432]" dev="sockfs" ino=8432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.089443][ T36] audit: type=1400 audit(1754490201.057:325): avc: denied { setattr } for pid=1058 comm="syz.2.264" name="RAW" dev="sockfs" ino=8432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.113934][ T36] audit: type=1400 audit(1754490201.076:326): avc: denied { create } for pid=1058 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 42.133971][ T36] audit: type=1400 audit(1754490201.076:327): avc: denied { connect } for pid=1058 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.400528][ T63] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 42.504079][ T1062] rust_binder: 160: no such ref 1 [ 42.531969][ T36] audit: type=1400 audit(1754490201.460:328): avc: denied { map } for pid=1065 comm="syz.3.267" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.556121][ T36] audit: type=1400 audit(1754490201.460:329): avc: denied { read write } for pid=1065 comm="syz.3.267" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.628347][ T63] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 42.639496][ T63] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 42.640027][ T1076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1076 comm=syz.1.271 [ 42.650234][ T63] asix 1-1:0.0: probe with driver asix failed with error -71 [ 42.662571][ T36] audit: type=1400 audit(1754490201.563:330): avc: denied { mounton } for pid=1072 comm="syz.3.269" path="/66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 42.719423][ T63] usb 1-1: USB disconnect, device number 6 [ 42.764592][ T36] audit: type=1400 audit(1754490201.684:331): avc: denied { create } for pid=1080 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 42.792303][ T1086] rust_binder: 177: no such ref 1 [ 42.938614][ T36] audit: type=1400 audit(1754490201.852:332): avc: denied { write } for pid=1095 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.980974][ T1102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=1102 comm=syz.2.281 [ 42.981112][ T565] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.010666][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 43.066782][ T533] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.152166][ T565] usb 2-1: Using ep0 maxpacket: 32 [ 43.158444][ T565] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.170119][ T565] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 43.179259][ T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.187287][ T565] usb 2-1: Product: syz [ 43.191448][ T565] usb 2-1: Manufacturer: syz [ 43.196054][ T565] usb 2-1: SerialNumber: syz [ 43.201182][ T565] usb 2-1: config 0 descriptor?? [ 43.207642][ T565] usb 2-1: bad CDC descriptors [ 43.212599][ T565] usb 2-1: unsupported MDLM descriptors [ 43.228142][ T533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.239107][ T533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.248865][ T533] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.261919][ T533] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.271129][ T533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.279574][ T533] usb 4-1: config 0 descriptor?? [ 43.298564][ T1107] rust_binder: 121: no such ref 1 [ 43.331771][ T1111] rust_binder: 125: no such ref 2 [ 43.438730][ T565] usb 2-1: USB disconnect, device number 8 [ 43.503116][ T1117] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 43.632568][ T1135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8474 sclass=netlink_route_socket pid=1135 comm=syz.2.293 [ 43.716278][ T533] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 43.725137][ T533] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 43.819428][ T1143] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 43.826651][ T1143] rust_binder: Write failure EINVAL in pid:141 [ 44.271590][ T1156] overlayfs: missing 'lowerdir' [ 44.339972][ T63] usb 4-1: USB disconnect, device number 9 [ 44.849414][ T1165] overlayfs: failed to clone upperpath [ 44.901072][ T1169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24602 sclass=netlink_route_socket pid=1169 comm=syz.3.306 [ 44.969559][ T63] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.113201][ T330] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.121616][ T330] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.141815][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.157177][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.167130][ T63] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.176562][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.184974][ T63] usb 1-1: SerialNumber: syz [ 45.232905][ T1185] SELinux: failed to load policy [ 45.247590][ T533] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.296953][ T1192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57370 sclass=netlink_route_socket pid=1192 comm=syz.1.315 [ 45.322145][ T1194] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.407912][ T533] usb 4-1: Using ep0 maxpacket: 16 [ 45.417351][ T533] usb 4-1: config 16 has an invalid interface number: 81 but max is 3 [ 45.426339][ T63] usb 1-1: 0:2 : does not exist [ 45.440645][ T533] usb 4-1: config 16 has an invalid interface number: 243 but max is 3 [ 45.448948][ T533] usb 4-1: config 16 has an invalid interface number: 62 but max is 3 [ 45.458211][ T63] usb 1-1: USB disconnect, device number 7 [ 45.464434][ T533] usb 4-1: config 16 has an invalid interface number: 162 but max is 3 [ 45.475226][ T533] usb 4-1: config 16 has an invalid interface number: 132 but max is 3 [ 45.482128][ T522] udevd[522]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.484269][ T533] usb 4-1: config 16 has 5 interfaces, different from the descriptor's value: 4 [ 45.508401][ T533] usb 4-1: config 16 has no interface number 0 [ 45.514789][ T533] usb 4-1: config 16 has no interface number 1 [ 45.520969][ T533] usb 4-1: config 16 has no interface number 2 [ 45.527279][ T533] usb 4-1: config 16 has no interface number 3 [ 45.533464][ T533] usb 4-1: config 16 has no interface number 4 [ 45.546867][ T533] usb 4-1: config 16 interface 81 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0 [ 45.556987][ T533] usb 4-1: config 16 interface 81 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 45.572394][ T533] usb 4-1: config 16 interface 81 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 45.594091][ T533] usb 4-1: config 16 interface 81 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 45.609306][ T533] usb 4-1: config 16 interface 81 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 45.620362][ T533] usb 4-1: config 16 interface 81 altsetting 6 endpoint 0x7 has invalid maxpacket 983, setting to 64 [ 45.631483][ T533] usb 4-1: config 16 interface 81 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 45.642455][ T533] usb 4-1: config 16 interface 81 altsetting 6 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 45.656802][ T533] usb 4-1: too many endpoints for config 16 interface 243 altsetting 185: 154, using maximum allowed: 30 [ 45.668250][ T533] usb 4-1: config 16 interface 243 altsetting 185 has a duplicate endpoint with address 0x4, skipping [ 45.679349][ T533] usb 4-1: config 16 interface 243 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 45.700137][ T533] usb 4-1: config 16 interface 243 altsetting 185 has 2 endpoint descriptors, different from the interface descriptor's value: 154 [ 45.713995][ T533] usb 4-1: config 16 interface 62 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 45.725156][ T533] usb 4-1: config 16 interface 62 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 45.736218][ T533] usb 4-1: config 16 interface 162 altsetting 64 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 45.747551][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 45.758568][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 45.769794][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 45.780940][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 45.801346][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 45.812718][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 45.823746][ T533] usb 4-1: config 16 interface 162 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 45.825356][ T1212] devpts: called with bogus options [ 45.834803][ T1211] devpts: called with bogus options [ 45.845504][ T533] usb 4-1: config 16 interface 132 altsetting 81 has a duplicate endpoint with address 0x7, skipping [ 45.856935][ T533] usb 4-1: config 16 interface 132 altsetting 81 has a duplicate endpoint with address 0x2, skipping [ 45.867986][ T533] usb 4-1: config 16 interface 132 altsetting 81 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 45.879421][ T533] usb 4-1: config 16 interface 132 altsetting 81 endpoint 0xF has invalid maxpacket 9959, setting to 1024 [ 45.896055][ T533] usb 4-1: config 16 interface 132 altsetting 81 has an invalid descriptor for endpoint zero, skipping [ 45.909184][ T533] usb 4-1: config 16 interface 132 altsetting 81 has a duplicate endpoint with address 0xB, skipping [ 45.921164][ T533] usb 4-1: config 16 interface 81 has no altsetting 0 [ 45.928043][ T533] usb 4-1: config 16 interface 243 has no altsetting 0 [ 45.935077][ T533] usb 4-1: config 16 interface 62 has no altsetting 0 [ 45.942020][ T533] usb 4-1: config 16 interface 162 has no altsetting 0 [ 45.949234][ T533] usb 4-1: config 16 interface 132 has no altsetting 0 [ 45.957751][ T533] usb 4-1: New USB device found, idVendor=08ca, idProduct=2040, bcdDevice=8a.e1 [ 45.967147][ T533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.972122][ T1218] netlink: 'syz.2.325': attribute type 58 has an invalid length. [ 45.975554][ T533] usb 4-1: Product: syz [ 45.998078][ T533] usb 4-1: Manufacturer: syz [ 46.005067][ T1222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62746 sclass=netlink_route_socket pid=1222 comm=syz.0.326 [ 46.017798][ T533] usb 4-1: SerialNumber: syz [ 46.028624][ T533] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 46.048222][ T533] usb 4-1: no configuration chosen from 1 choice [ 46.361433][ T1237] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 46.626621][ T330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.711347][ T1247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64538 sclass=netlink_route_socket pid=1247 comm=syz.2.336 [ 46.797653][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 46.804513][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.815148][ T330] usb 2-1: can't read configurations, error -61 [ 46.958087][ T330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.102478][ T1274] rust_binder: Write failure EFAULT in pid:171 [ 47.139749][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 47.152526][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 47.160151][ T330] usb 2-1: can't read configurations, error -61 [ 47.166708][ T330] usb usb2-port1: attempt power cycle [ 47.525806][ T1276] netlink: 'syz.2.346': attribute type 3 has an invalid length. [ 47.533470][ T1276] netlink: 944 bytes leftover after parsing attributes in process `syz.2.346'. [ 47.535339][ T330] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.567750][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 47.574646][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 47.582371][ T330] usb 2-1: can't read configurations, error -61 [ 47.599818][ T1289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 47.608569][ T1289] overlayfs: missing 'lowerdir' [ 47.624566][ T1291] Zero length message leads to an empty skb [ 47.727760][ T330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.749612][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 47.756267][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 47.764075][ T330] usb 2-1: can't read configurations, error -61 [ 47.770505][ T330] usb usb2-port1: unable to enumerate USB device [ 47.962579][ T1297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.969209][ T1297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.192946][ T330] usb 4-1: USB disconnect, device number 10 [ 48.341614][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.341635][ T36] audit: type=1400 audit(1754490206.904:343): avc: denied { create } for pid=1313 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 48.399929][ T1317] netlink: 'syz.2.364': attribute type 3 has an invalid length. [ 48.416337][ T1317] netlink: 944 bytes leftover after parsing attributes in process `syz.2.364'. [ 48.454304][ T36] audit: type=1400 audit(1754490207.007:344): avc: denied { lock } for pid=1320 comm="syz.3.366" path="socket:[10301]" dev="sockfs" ino=10301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 48.524528][ T1327] overlayfs: failed to clone upperpath [ 49.226506][ T1349] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 49.234291][ T1349] netlink: 944 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.253092][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.260342][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.299266][ T558] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 49.347194][ T1357] input: syz1 as /devices/virtual/input/input8 [ 49.459613][ T558] usb 1-1: Using ep0 maxpacket: 16 [ 49.465752][ T558] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 49.474122][ T558] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 49.482428][ T558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.492608][ T558] usb 1-1: config 0 has no interface number 0 [ 49.499947][ T558] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 49.509007][ T558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.517090][ T558] usb 1-1: Product: syz [ 49.521240][ T558] usb 1-1: Manufacturer: syz [ 49.525925][ T558] usb 1-1: SerialNumber: syz [ 49.531047][ T558] usb 1-1: config 0 descriptor?? [ 49.609290][ T533] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.656156][ T1360] rust_binder: 1359 RLIMIT_NICE not set [ 49.660382][ T565] rust_binder: 1358: removing orphan mapping 0:4240 [ 49.678858][ T1362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.679250][ T1362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 49.706800][ T1368] rust_binder: pid 1368 performed invalid decrement on ref [ 49.756314][ T1373] FAULT_INJECTION: forcing a failure. [ 49.756314][ T1373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.769535][ T1373] CPU: 0 UID: 0 PID: 1373 Comm: syz.1.388 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 49.769573][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.769590][ T1373] Call Trace: [ 49.769596][ T1373] [ 49.769604][ T1373] __dump_stack+0x21/0x30 [ 49.769634][ T1373] dump_stack_lvl+0x10c/0x190 [ 49.769657][ T1373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.769691][ T1373] dump_stack+0x19/0x20 [ 49.769713][ T1373] should_fail_ex+0x3d9/0x530 [ 49.769738][ T1373] should_fail+0xf/0x20 [ 49.769759][ T1373] should_fail_usercopy+0x1e/0x30 [ 49.769785][ T1373] _copy_from_user+0x22/0xb0 [ 49.769805][ T1373] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x491/0xa290 [ 49.769852][ T1373] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 49.769923][ T1373] ? is_bpf_text_address+0x17b/0x1a0 [ 49.769942][ T1373] ? kernel_text_address+0xa9/0xe0 [ 49.769964][ T1373] ? __kernel_text_address+0x11/0x40 [ 49.769985][ T1373] ? unwind_get_return_address+0x51/0x90 [ 49.770005][ T1373] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.770029][ T1373] ? arch_stack_walk+0x10b/0x170 [ 49.770060][ T1373] ? is_bpf_text_address+0x17b/0x1a0 [ 49.770078][ T1373] ? kernel_text_address+0xa9/0xe0 [ 49.770098][ T1373] ? __kernel_text_address+0x11/0x40 [ 49.770119][ T1373] ? unwind_get_return_address+0x51/0x90 [ 49.770138][ T1373] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.770163][ T1373] ? arch_stack_walk+0x10b/0x170 [ 49.770190][ T1373] ? is_bpf_text_address+0x17b/0x1a0 [ 49.770208][ T1373] ? kernel_text_address+0xa9/0xe0 [ 49.770228][ T1373] ? __kernel_text_address+0x11/0x40 [ 49.770249][ T1373] ? unwind_get_return_address+0x51/0x90 [ 49.770269][ T1373] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.770293][ T1373] ? arch_stack_walk+0x10b/0x170 [ 49.770318][ T1373] ? __kasan_check_write+0x18/0x20 [ 49.770342][ T1373] ? _raw_spin_lock+0x8c/0x120 [ 49.770369][ T1373] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.770395][ T1373] ? stack_depot_save_flags+0x38/0x800 [ 49.770422][ T1373] ? _raw_spin_unlock+0x45/0x60 [ 49.770448][ T1373] ? rust_helper_spin_unlock+0x19/0x30 [ 49.770471][ T1373] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 49.770498][ T1373] ? __kasan_slab_alloc+0x73/0x90 [ 49.770525][ T1373] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 49.770551][ T1373] ? security_inode_alloc+0x51/0x200 [ 49.770575][ T1373] ? inode_init_always_gfp+0x756/0x9e0 [ 49.770594][ T1373] ? proc_pid_make_inode+0x25/0x140 [ 49.770620][ T1373] ? proc_pident_instantiate+0x6d/0x2c0 [ 49.770638][ T1373] ? proc_tid_base_lookup+0x2f/0x40 [ 49.770661][ T1373] ? do_filp_open+0x1c6/0x3e0 [ 49.770688][ T1373] ? do_sys_openat2+0x12c/0x1c0 [ 49.770712][ T1373] ? __x64_sys_openat+0x13a/0x170 [ 49.770734][ T1373] ? x64_sys_call+0xe69/0x2ee0 [ 49.770758][ T1373] ? do_syscall_64+0x58/0xf0 [ 49.770784][ T1373] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.770808][ T1373] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 49.770836][ T1373] ? avc_has_perm_noaudit+0x268/0x360 [ 49.770859][ T1373] ? __asan_memcpy+0x5a/0x80 [ 49.770882][ T1373] ? avc_has_perm_noaudit+0x286/0x360 [ 49.770905][ T1373] ? avc_has_perm+0x144/0x220 [ 49.770926][ T1373] ? __cfi_avc_has_perm+0x10/0x10 [ 49.770949][ T1373] ? selinux_file_open+0x457/0x610 [ 49.770970][ T1373] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 49.771000][ T1373] ? avc_has_extended_perms+0x7c7/0xdd0 [ 49.771022][ T1373] ? __asan_memcpy+0x5a/0x80 [ 49.771045][ T1373] ? avc_has_extended_perms+0x921/0xdd0 [ 49.771065][ T1373] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 49.771094][ T1373] ? do_vfs_ioctl+0xeda/0x1e30 [ 49.771112][ T1373] ? arch_stack_walk+0x10b/0x170 [ 49.771137][ T1373] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 49.771158][ T1373] ? _parse_integer+0x2e/0x40 [ 49.771183][ T1373] ? ioctl_has_perm+0x384/0x4d0 [ 49.771201][ T1373] ? has_cap_mac_admin+0xd0/0xd0 [ 49.771220][ T1373] ? proc_fail_nth_write+0x17e/0x210 [ 49.771242][ T1373] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.771264][ T1373] ? selinux_file_ioctl+0x6e0/0x1360 [ 49.771283][ T1373] ? vfs_write+0x8ba/0xe80 [ 49.771308][ T1373] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.771327][ T1373] ? __cfi_vfs_write+0x10/0x10 [ 49.771351][ T1373] ? __kasan_check_write+0x18/0x20 [ 49.771375][ T1373] ? mutex_unlock+0x8b/0x240 [ 49.771396][ T1373] ? __cfi_mutex_unlock+0x10/0x10 [ 49.771416][ T1373] ? __fget_files+0x2c5/0x340 [ 49.771435][ T1373] ? __fget_files+0x2c5/0x340 [ 49.771453][ T1373] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 49.771482][ T1373] ? __se_sys_ioctl+0x114/0x1b0 [ 49.771498][ T1373] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 49.771528][ T1373] __se_sys_ioctl+0x135/0x1b0 [ 49.771547][ T1373] __x64_sys_ioctl+0x7f/0xa0 [ 49.771564][ T1373] x64_sys_call+0x1878/0x2ee0 [ 49.771588][ T1373] do_syscall_64+0x58/0xf0 [ 49.771614][ T1373] ? clear_bhb_loop+0x50/0xa0 [ 49.771636][ T1373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.771656][ T1373] RIP: 0033:0x7fb62f78ebe9 [ 49.771673][ T1373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.771700][ T1373] RSP: 002b:00007fb6305d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.771724][ T1373] RAX: ffffffffffffffda RBX: 00007fb62f9b5fa0 RCX: 00007fb62f78ebe9 [ 49.771739][ T1373] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 49.771752][ T1373] RBP: 00007fb6305d3090 R08: 0000000000000000 R09: 0000000000000000 [ 49.771765][ T1373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.771776][ T1373] R13: 00007fb62f9b6038 R14: 00007fb62f9b5fa0 R15: 00007ffeacc0c4c8 [ 49.771793][ T1373] [ 50.358453][ T533] usb 4-1: Using ep0 maxpacket: 32 [ 50.375004][ T558] usb 1-1: Found UVC 0.00 device syz (046c:14e0) [ 50.375075][ T533] usb 4-1: config index 0 descriptor too short (expected 54, got 36) [ 50.381696][ T558] usb 1-1: No valid video chain found. [ 50.396324][ T558] usb 1-1: USB disconnect, device number 8 [ 50.413150][ T533] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 50.421364][ T533] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.431603][ T533] usb 4-1: config 0 has no interface number 0 [ 50.442914][ T533] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 8.05 [ 50.452350][ T533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.460457][ T533] usb 4-1: Product: syz [ 50.464760][ T533] usb 4-1: Manufacturer: syz [ 50.469374][ T533] usb 4-1: SerialNumber: syz [ 50.476318][ T533] usb 4-1: config 0 descriptor?? [ 50.514349][ T36] audit: type=1400 audit(1754490209.933:345): avc: denied { write } for pid=1382 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.516003][ T1383] overlayfs: failed to clone upperpath [ 50.580512][ T1389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.589141][ T1389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.702888][ T36] audit: type=1400 audit(1754490210.111:346): avc: denied { watch } for pid=1356 comm="syz.3.382" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.760127][ T9] usb 4-1: USB disconnect, device number 11 [ 50.828051][ T533] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.928447][ T36] audit: type=1400 audit(1754490210.326:347): avc: denied { connect } for pid=1397 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.948090][ T36] audit: type=1400 audit(1754490210.326:348): avc: denied { append } for pid=1397 comm="syz.0.398" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.989436][ T533] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 50.997659][ T533] usb 2-1: config 0 has no interface number 0 [ 51.009858][ T533] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.027214][ T533] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 51.036394][ T533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.045514][ T533] usb 2-1: Product: syz [ 51.049722][ T533] usb 2-1: Manufacturer: syz [ 51.054352][ T533] usb 2-1: SerialNumber: syz [ 51.059865][ T533] usb 2-1: config 0 descriptor?? [ 51.065639][ T533] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 51.071963][ T533] usb 2-1: No valid video chain found. [ 51.117860][ T1414] netlink: 'syz.2.404': attribute type 3 has an invalid length. [ 51.125926][ T1414] netlink: 944 bytes leftover after parsing attributes in process `syz.2.404'. [ 51.148731][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.196342][ T1426] rust_binder: pid 1426 performed invalid decrement on ref [ 51.269770][ T1432] rust_binder: 205: no such ref 0 [ 51.279773][ T330] usb 2-1: USB disconnect, device number 13 [ 51.319774][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 51.331701][ T1434] rust_binder: 205: no such ref 1 [ 51.336822][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.362559][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 51.371617][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.380212][ T9] usb 4-1: Product: syz [ 51.384562][ T9] usb 4-1: Manufacturer: syz [ 51.389230][ T9] usb 4-1: SerialNumber: syz [ 51.395902][ T9] usb 4-1: config 0 descriptor?? [ 51.401718][ T9] usb 4-1: bad CDC descriptors [ 51.416159][ T9] usb 4-1: unsupported MDLM descriptors [ 51.459359][ T36] audit: type=1400 audit(1754490210.822:349): avc: denied { connect } for pid=1429 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.491101][ T36] audit: type=1400 audit(1754490210.850:350): avc: denied { setopt } for pid=1429 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.528577][ T1438] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 51.536287][ T1438] netlink: 944 bytes leftover after parsing attributes in process `syz.2.415'. [ 51.577317][ T1448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=1448 comm=syz.2.420 [ 51.599317][ T36] audit: type=1326 audit(1754490210.953:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a6798ebe9 code=0x0 [ 51.639058][ T330] usb 4-1: USB disconnect, device number 12 [ 51.931701][ T1459] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 51.941537][ T36] audit: type=1400 audit(1754490211.271:352): avc: denied { relabelto } for pid=1458 comm="syz.1.423" name="cgroup" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 51.943082][ T1459] FAT-fs (rnullb0): bogus number of reserved sectors [ 51.975743][ T1459] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 52.143872][ T1463] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 52.151596][ T1463] netlink: 944 bytes leftover after parsing attributes in process `syz.1.425'. [ 52.182366][ T1467] rust_binder: Write failure EFAULT in pid:230 [ 52.382754][ T1494] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 52.396661][ T1494] netlink: 944 bytes leftover after parsing attributes in process `syz.3.437'. [ 52.419594][ T1496] rust_binder: pid 1496 performed invalid decrement on ref [ 52.570592][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.720259][ T565] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.732023][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.742176][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.751719][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.760854][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.768948][ T9] usb 2-1: SerialNumber: syz [ 52.880608][ T565] usb 4-1: Using ep0 maxpacket: 16 [ 52.886877][ T565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.898465][ T565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.907759][ T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.915832][ T565] usb 4-1: Product: syz [ 52.920000][ T565] usb 4-1: Manufacturer: syz [ 52.924709][ T565] usb 4-1: SerialNumber: syz [ 52.931217][ T565] cdc_ncm 4-1:1.0: skipping garbage [ 52.936648][ T565] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 52.944119][ T565] cdc_ncm 4-1:1.0: bind() failure [ 52.989793][ T1487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.998878][ T1487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.010626][ T9] usb 2-1: 0:2 : does not exist [ 53.015550][ T9] usb 2-1: unit 5: unexpected type 0x09 [ 53.025091][ T9] usb 2-1: USB disconnect, device number 14 [ 53.035818][ T522] udevd[522]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.146064][ T1503] cgroup: Invalid name [ 53.150674][ T330] usb 4-1: USB disconnect, device number 13 [ 53.697331][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 53.697353][ T36] audit: type=1400 audit(1754490212.917:363): avc: denied { write } for pid=1506 comm="syz.3.443" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.797601][ T1509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.797828][ T1509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:234 [ 53.810793][ T330] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.916268][ T1515] netlink: 'syz.3.447': attribute type 3 has an invalid length. [ 53.923985][ T1515] netlink: 944 bytes leftover after parsing attributes in process `syz.3.447'. [ 53.943042][ T36] audit: type=1400 audit(1754490213.142:364): avc: denied { mount } for pid=1516 comm="syz.3.448" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.965884][ T1519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.974311][ T36] audit: type=1400 audit(1754490213.142:365): avc: denied { mounton } for pid=1516 comm="syz.3.448" path="/95/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.974339][ T36] audit: type=1400 audit(1754490213.142:366): avc: denied { read } for pid=1516 comm="syz.3.448" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.974356][ T36] audit: type=1400 audit(1754490213.142:367): avc: denied { open } for pid=1516 comm="syz.3.448" path="/95/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.003116][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 54.018818][ T1519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.041545][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.064679][ T330] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 54.073760][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.081874][ T330] usb 2-1: Product: syz [ 54.086216][ T330] usb 2-1: Manufacturer: syz [ 54.090833][ T330] usb 2-1: SerialNumber: syz [ 54.095951][ T330] usb 2-1: config 0 descriptor?? [ 54.101822][ T330] usb 2-1: bad CDC descriptors [ 54.106705][ T330] usb 2-1: unsupported MDLM descriptors [ 54.195545][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.352946][ T330] usb 2-1: USB disconnect, device number 15 [ 54.366614][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 54.372841][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.383791][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.393555][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.406394][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 54.415512][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.424146][ T31] usb 4-1: config 0 descriptor?? [ 54.645940][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 54.652019][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 54.660681][ T31] usb 4-1: USB disconnect, device number 14 [ 54.801486][ T1522] 9pnet_fd: p9_fd_create_unix (1522): problem connecting socket: ./file0: -111 [ 54.870049][ T1544] netlink: 'syz.2.457': attribute type 3 has an invalid length. [ 54.877746][ T1544] netlink: 944 bytes leftover after parsing attributes in process `syz.2.457'. [ 55.021682][ T1552] rust_binder: Error while translating object. [ 55.021725][ T1552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 55.027962][ T1552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:250 [ 55.183792][ T36] audit: type=1400 audit(1754490214.301:368): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 55.436858][ T1571] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 55.444568][ T1571] netlink: 944 bytes leftover after parsing attributes in process `syz.2.469'. [ 55.487058][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 55.498528][ T36] audit: type=1400 audit(1754490214.591:369): avc: denied { setopt } for pid=1578 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.530710][ T36] audit: type=1400 audit(1754490214.591:370): avc: denied { bind } for pid=1578 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.585340][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.730419][ T36] audit: type=1400 audit(1754490214.816:371): avc: denied { map } for pid=1603 comm="syz.2.483" path="socket:[11098]" dev="sockfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.765141][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 55.770389][ T36] audit: type=1400 audit(1754490214.835:372): avc: denied { mounton } for pid=1605 comm="syz.0.482" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.778834][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.816463][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 55.826027][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.834103][ T9] usb 4-1: Product: syz [ 55.841542][ T9] usb 4-1: Manufacturer: syz [ 55.850027][ T9] usb 4-1: SerialNumber: syz [ 55.855884][ T9] usb 4-1: config 0 descriptor?? [ 55.862952][ T9] usb 4-1: bad CDC descriptors [ 55.868768][ T9] usb 4-1: unsupported MDLM descriptors [ 55.960676][ T1620] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 55.968375][ T1620] netlink: 944 bytes leftover after parsing attributes in process `syz.0.488'. [ 56.046396][ T1623] fuse: Unknown parameter 'rotm000000@<"/' [ 56.053403][ T1623] rust_binder: 1622 RLIMIT_NICE not set [ 56.094498][ T9] rust_binder: 1621: removing orphan mapping 0:4240 [ 56.095832][ T330] usb 4-1: USB disconnect, device number 15 [ 56.626701][ T1645] netlink: 'syz.1.497': attribute type 3 has an invalid length. [ 56.634512][ T1645] netlink: 944 bytes leftover after parsing attributes in process `syz.1.497'. [ 56.702701][ T1649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 56.723284][ T1649] binder: Unknown parameter 'l2_drops' [ 56.820986][ T1662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.876472][ T1666] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 56.902609][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.182082][ T1675] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 57.196378][ T1675] netlink: 944 bytes leftover after parsing attributes in process `syz.0.509'. [ 57.242381][ T330] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.392072][ T330] usb 4-1: device descriptor read/64, error -71 [ 57.584667][ T592] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.648631][ T330] usb 4-1: device descriptor read/64, error -71 [ 57.723475][ T592] usb 1-1: device descriptor read/64, error -71 [ 57.905195][ T330] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.980030][ T592] usb 1-1: device descriptor read/64, error -71 [ 58.044159][ T330] usb 4-1: device descriptor read/64, error -71 [ 58.236729][ T592] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 58.289515][ T1698] 9pnet_fd: Insufficient options for proto=fd [ 58.302659][ T1702] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 58.310347][ T1702] netlink: 944 bytes leftover after parsing attributes in process `syz.2.519'. [ 58.319353][ T330] usb 4-1: device descriptor read/64, error -71 [ 58.386266][ T592] usb 1-1: device descriptor read/64, error -71 [ 58.439809][ T330] usb usb4-port1: attempt power cycle [ 58.642852][ T592] usb 1-1: device descriptor read/64, error -71 [ 58.760777][ T592] usb usb1-port1: attempt power cycle [ 58.803229][ T330] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.825668][ T330] usb 4-1: device descriptor read/8, error -71 [ 58.958872][ T1720] netlink: 'syz.2.528': attribute type 3 has an invalid length. [ 58.966626][ T1720] netlink: 944 bytes leftover after parsing attributes in process `syz.2.528'. [ 58.967665][ T330] usb 4-1: device descriptor read/8, error -71 [ 59.102645][ T565] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 59.123926][ T592] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 59.146306][ T592] usb 1-1: device descriptor read/8, error -71 [ 59.230852][ T330] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 59.253314][ T330] usb 4-1: device descriptor read/8, error -71 [ 59.264000][ T565] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 59.274903][ T565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.285822][ T565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.295646][ T565] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 59.296064][ T592] usb 1-1: device descriptor read/8, error -71 [ 59.309477][ T565] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 59.324094][ T565] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 59.332209][ T565] usb 2-1: Manufacturer: syz [ 59.337355][ T565] usb 2-1: config 0 descriptor?? [ 59.392517][ T330] usb 4-1: device descriptor read/8, error -71 [ 59.508871][ T330] usb usb4-port1: unable to enumerate USB device [ 59.562245][ T592] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.584649][ T592] usb 1-1: device descriptor read/8, error -71 [ 59.724302][ T592] usb 1-1: device descriptor read/8, error -71 [ 59.771971][ T565] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 59.779646][ T565] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 59.788246][ T565] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 59.840266][ T592] usb usb1-port1: unable to enumerate USB device [ 60.054385][ T592] usb 2-1: USB disconnect, device number 16 [ 60.115045][ T1750] netlink: 'syz.3.538': attribute type 3 has an invalid length. [ 60.122712][ T1750] netlink: 944 bytes leftover after parsing attributes in process `syz.3.538'. [ 60.141707][ T1752] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 60.599899][ T1761] fuse: Unknown parameter 'group_idD00000000000000000000' [ 60.635868][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 60.635886][ T36] audit: type=1400 audit(1754490219.399:383): avc: denied { mount } for pid=1766 comm="syz.2.546" name="/" dev="configfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.636188][ T1767] overlayfs: failed to clone lowerpath [ 60.668027][ T1769] netlink: 'syz.0.547': attribute type 3 has an invalid length. [ 60.678023][ T1769] netlink: 944 bytes leftover after parsing attributes in process `syz.0.547'. [ 60.725128][ T36] audit: type=1400 audit(1754490219.484:384): avc: denied { mount } for pid=1782 comm="syz.2.552" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.798249][ T1786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.798392][ T1786] rust_binder: 273: no such ref 1 [ 60.877185][ T330] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 61.037620][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 61.043936][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.055531][ T330] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 61.064636][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.072780][ T330] usb 2-1: Product: syz [ 61.076968][ T330] usb 2-1: Manufacturer: syz [ 61.081717][ T330] usb 2-1: SerialNumber: syz [ 61.087061][ T330] usb 2-1: config 0 descriptor?? [ 61.093254][ T330] usb 2-1: bad CDC descriptors [ 61.098208][ T330] usb 2-1: unsupported MDLM descriptors [ 61.319423][ T9] usb 2-1: USB disconnect, device number 17 [ 61.347603][ T565] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 61.497750][ T36] audit: type=1400 audit(1754490220.213:385): avc: denied { bind } for pid=1792 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.518076][ T565] usb 4-1: Using ep0 maxpacket: 32 [ 61.525039][ T565] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 61.533326][ T565] usb 4-1: config 0 has no interface number 0 [ 61.539480][ T1795] netlink: 'syz.2.557': attribute type 3 has an invalid length. [ 61.547275][ T1795] netlink: 944 bytes leftover after parsing attributes in process `syz.2.557'. [ 61.557519][ T565] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 61.566770][ T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.574966][ T565] usb 4-1: Product: syz [ 61.579620][ T565] usb 4-1: Manufacturer: syz [ 61.584427][ T565] usb 4-1: SerialNumber: syz [ 61.585331][ T36] audit: type=1400 audit(1754490220.297:386): avc: denied { wake_alarm } for pid=1796 comm="syz.2.558" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.590183][ T565] usb 4-1: config 0 descriptor?? [ 61.617903][ T565] smsc95xx v2.0.0 [ 61.629205][ T1799] overlay: ./file0 is not a directory [ 61.635318][ T1799] devpts: called with bogus options [ 61.680755][ T1801] netlink: 96 bytes leftover after parsing attributes in process `syz.0.560'. [ 61.693141][ T36] audit: type=1400 audit(1754490220.391:387): avc: denied { read } for pid=1800 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.855133][ T1809] syzkaller0: entered promiscuous mode [ 61.860642][ T1809] syzkaller0: entered allmulticast mode [ 62.044008][ T36] audit: type=1400 audit(1754490220.728:388): avc: denied { accept } for pid=1812 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.047168][ T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 62.079899][ T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 62.090856][ T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 62.105214][ T1818] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 62.105258][ T565] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 62.126042][ T1818] netlink: 944 bytes leftover after parsing attributes in process `syz.0.566'. [ 62.131142][ T565] usb 4-1: USB disconnect, device number 20 [ 62.177237][ T1821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.180047][ T1821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.199878][ T1821] rust_binder: 285: no such ref 1 [ 62.309908][ T1842] netlink: 'syz.3.575': attribute type 3 has an invalid length. [ 62.317642][ T1842] netlink: 944 bytes leftover after parsing attributes in process `syz.3.575'. [ 62.512878][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 62.540536][ T1857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.581'. [ 62.557477][ T1859] batadv_slave_1: entered promiscuous mode [ 62.564908][ T1858] batadv_slave_1: left promiscuous mode [ 62.599175][ T1867] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 62.606933][ T1867] netlink: 944 bytes leftover after parsing attributes in process `syz.2.586'. [ 62.629999][ T36] audit: type=1326 audit(1754490221.261:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6798ebe9 code=0x7ffc0000 [ 62.653746][ T36] audit: type=1326 audit(1754490221.261:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6798ebe9 code=0x7ffc0000 [ 62.677550][ T36] audit: type=1326 audit(1754490221.261:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6798ebe9 code=0x7ffc0000 [ 62.683884][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 62.701148][ T36] audit: type=1326 audit(1754490221.261:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1870 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6798ebe9 code=0x7ffc0000 [ 62.731946][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.744738][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 62.754117][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.762342][ T9] usb 2-1: Product: syz [ 62.766821][ T9] usb 2-1: Manufacturer: syz [ 62.771649][ T9] usb 2-1: SerialNumber: syz [ 62.777684][ T9] usb 2-1: config 0 descriptor?? [ 62.783956][ T9] usb 2-1: bad CDC descriptors [ 62.789084][ T9] usb 2-1: unsupported MDLM descriptors [ 62.895660][ T1891] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 62.903449][ T1891] netlink: 944 bytes leftover after parsing attributes in process `syz.2.597'. [ 63.010714][ T592] usb 2-1: USB disconnect, device number 18 [ 63.105345][ T1919] netlink: 960 bytes leftover after parsing attributes in process `syz.3.608'. [ 63.127211][ T1921] incfs: Options parsing error. -22 [ 63.135331][ T1921] incfs: mount failed -22 [ 63.158766][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.167421][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.175276][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.189311][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.196505][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.203818][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.211005][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.218147][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.225327][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.232586][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.239699][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.246848][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.254067][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.254574][ T1931] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 63.268480][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.275891][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.284482][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.286981][ T1933] rust_binder: pid 1933 performed invalid decrement on ref [ 63.300051][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.307670][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.315390][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.322768][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.330126][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.337389][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.344548][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.352265][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.359777][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.367110][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.374325][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.383523][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.391764][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.399226][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.407209][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.415917][ T1926] overlay: filesystem on ./bus not supported as upperdir [ 63.447213][ T1943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.447349][ T1943] rust_binder: inc_ref_done called when no active inc_refs [ 63.453870][ T1943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316 [ 63.470110][ T1945] netlink: 'syz.3.619': attribute type 3 has an invalid length. [ 63.504852][ T1947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.560572][ T1949] tipc: Enabling of bearer rejected, failed to enable media [ 63.585542][ T1953] 9p: Unknown Cache mode or invalid value f [ 63.636867][ T1959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.637059][ T1959] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 63.676254][ T1968] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 63.753010][ T565] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 63.783403][ T1972] 9pnet_fd: Insufficient options for proto=fd [ 63.914347][ T565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.924548][ T565] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.934122][ T565] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.943358][ T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.951363][ T565] usb 4-1: SerialNumber: syz [ 64.179199][ T1947] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 64.260301][ T565] usb 4-1: 0:2 : does not exist [ 64.276923][ T565] usb 4-1: USB disconnect, device number 21 [ 64.316624][ T1996] netlink: 'syz.2.639': attribute type 3 has an invalid length. [ 64.340986][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 64.501287][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 64.507440][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.519052][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 64.528144][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.536328][ T9] usb 1-1: Product: syz [ 64.540506][ T9] usb 1-1: Manufacturer: syz [ 64.545152][ T9] usb 1-1: SerialNumber: syz [ 64.550647][ T9] usb 1-1: config 0 descriptor?? [ 64.556644][ T9] usb 1-1: bad CDC descriptors [ 64.561632][ T9] usb 1-1: unsupported MDLM descriptors [ 64.628677][ T2020] ------------[ cut here ]------------ [ 64.634199][ T2020] WARNING: CPU: 0 PID: 2020 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 64.643674][ T2020] Modules linked in: [ 64.647567][ T2020] CPU: 0 UID: 0 PID: 2020 Comm: syz.1.647 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 64.660950][ T2020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.671273][ T2020] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 64.677199][ T2020] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 64.696946][ T2020] RSP: 0018:ffffc9000f657680 EFLAGS: 00010246 [ 64.703016][ T2020] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 64.711100][ T2020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f657738 [ 64.719108][ T2020] RBP: ffffc9000f6577a8 R08: ffffc9000f657737 R09: 0000000000000000 [ 64.727130][ T2020] R10: ffffc9000f657720 R11: fffff52001ecaee7 R12: ffffc9000f6576c0 [ 64.735120][ T2020] R13: dffffc0000000000 R14: 1ffff92001ecaed4 R15: 0000000000000000 [ 64.743288][ T2020] FS: 00007fb6305d36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.752599][ T2020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.759284][ T2020] CR2: 0000200000005000 CR3: 0000000137e3e000 CR4: 00000000003526b0 [ 64.767301][ T2020] Call Trace: [ 64.770618][ T2020] [ 64.773549][ T2020] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.779317][ T2020] ? kasan_save_alloc_info+0x40/0x50 [ 64.784613][ T2020] ? __kasan_slab_alloc+0x73/0x90 [ 64.789660][ T2020] ? hashtab_init+0xdb/0x1f0 [ 64.794284][ T2020] ___kmalloc_large_node+0x9c/0x1d0 [ 64.799613][ T2020] ? ebitmap_read+0x21d/0x990 [ 64.804368][ T2020] ? hashtab_init+0xdb/0x1f0 [ 64.809076][ T2020] __kmalloc_large_node_noprof+0x1e/0xe0 [ 64.814734][ T2020] ? hashtab_init+0xdb/0x1f0 [ 64.819329][ T2020] __kmalloc_noprof+0x26d/0x450 [ 64.824219][ T2020] hashtab_init+0xdb/0x1f0 [ 64.828670][ T2020] ? policydb_read+0x86f/0x28c0 [ 64.833535][ T2020] symtab_init+0x44/0x70 [ 64.837781][ T2020] policydb_read+0x8fe/0x28c0 [ 64.842448][ T2020] ? kasan_save_alloc_info+0x40/0x50 [ 64.847950][ T2020] ? __cfi_policydb_read+0x10/0x10 [ 64.853086][ T2020] ? security_load_policy+0x128/0x12f0 [ 64.858606][ T2020] security_load_policy+0x162/0x12f0 [ 64.863917][ T2020] ? irqentry_exit+0x4a/0x60 [ 64.868542][ T2020] ? exc_page_fault+0x66/0xc0 [ 64.873246][ T2020] ? asm_exc_page_fault+0x2b/0x30 [ 64.878318][ T2020] ? __cfi_security_load_policy+0x10/0x10 [ 64.884064][ T2020] ? rep_movs_alternative+0x4a/0xa0 [ 64.889333][ T2020] sel_write_load+0x298/0x5e0 [ 64.894016][ T2020] ? futex_wait+0x29a/0x7a0 [ 64.898550][ T2020] ? __cfi_sel_write_load+0x10/0x10 [ 64.903764][ T2020] ? __cfi_futex_wait+0x10/0x10 [ 64.908623][ T2020] ? bpf_lsm_file_permission+0xd/0x20 [ 64.913999][ T2020] ? __cfi_sel_write_load+0x10/0x10 [ 64.919217][ T2020] vfs_write+0x3c0/0xe80 [ 64.923493][ T2020] ? __cfi_vfs_write+0x10/0x10 [ 64.928265][ T2020] ? __kasan_check_write+0x18/0x20 [ 64.933392][ T2020] ? mutex_lock+0x92/0x1c0 [ 64.937805][ T2020] ? __cfi_mutex_lock+0x10/0x10 [ 64.942661][ T2020] ? __fget_files+0x2c5/0x340 [ 64.947336][ T2020] ksys_write+0x141/0x250 [ 64.951709][ T2020] ? __cfi_ksys_write+0x10/0x10 [ 64.956562][ T2020] ? __kasan_check_write+0x18/0x20 [ 64.961698][ T2020] ? fpregs_restore_userregs+0x11d/0x260 [ 64.967328][ T2020] __x64_sys_write+0x7f/0x90 [ 64.971935][ T2020] x64_sys_call+0x271c/0x2ee0 [ 64.976648][ T2020] do_syscall_64+0x58/0xf0 [ 64.981068][ T2020] ? clear_bhb_loop+0x50/0xa0 [ 64.985755][ T2020] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.991685][ T2020] RIP: 0033:0x7fb62f78ebe9 [ 64.996113][ T2020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.015738][ T2020] RSP: 002b:00007fb6305d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.024151][ T2020] RAX: ffffffffffffffda RBX: 00007fb62f9b5fa0 RCX: 00007fb62f78ebe9 [ 65.032250][ T2020] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000007 [ 65.040237][ T2020] RBP: 00007fb62f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.048223][ T2020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.056295][ T2020] R13: 00007fb62f9b6038 R14: 00007fb62f9b5fa0 R15: 00007ffeacc0c4c8 [ 65.064376][ T2020] [ 65.067393][ T2020] ---[ end trace 0000000000000000 ]--- [ 65.072933][ T2020] SELinux: failed to load policy [ 65.081807][ T592] usb 1-1: USB disconnect, device number 13