last executing test programs: 22.381075787s ago: executing program 1 (id=2140): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000487000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x20) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?cH[\xe5\xcf\xe0b&^\xbd\x15\xaecx@`\xe8\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 21.532776996s ago: executing program 1 (id=2155): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8261}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}}, 0x4000800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) r2 = epoll_create1(0x80000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.520012847s ago: executing program 1 (id=2156): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="08073b7c8770a76667002900c892efa56b5c7033e95b72049ffd58a8d3112815dbf84846c68bed0cce70f608993d34e6835a440a4d6ac7cf11a4002d87f422ae2ce5a11d2ec22c21fea703eeea38b50edcaca7226bb5", @ANYRES32=r0, @ANYBLOB], 0x28}], 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x74886000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 21.418550246s ago: executing program 1 (id=2157): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req={0x625d, 0x5, 0x1, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='%-^}*&+++,@\x00') unshare(0x22020600) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x5, 0x2, 0x8}, @fda={0x66646185, 0x800000000000000a, 0x2, 0x11}, @fd}}}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={@fd, @flat=@weak_handle={0x77682a85, 0x2, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x1b}}, &(0x7f0000000600)}}, @acquire, @increfs_done={0x40106308, 0x3}, @exit_looper, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x5, 0x0, &(0x7f00000009c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002580)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x8000000}}, 0x30) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000000)={0x1, 0xffffffff, 0x2, 0x8000, 0x7ff, 0xfffffe48}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 20.566659475s ago: executing program 1 (id=2160): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.562235126s ago: executing program 1 (id=2161): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x139200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x2e, 0x28, 0x10, 0x18, 0x7, 0x7, 0x4, 0x15, 0xffffffffffffffff}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) syz_open_dev$rtc(&(0x7f0000000140), 0x6, 0x80900) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.498898311s ago: executing program 32 (id=2161): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x139200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x2e, 0x28, 0x10, 0x18, 0x7, 0x7, 0x4, 0x15, 0xffffffffffffffff}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) syz_open_dev$rtc(&(0x7f0000000140), 0x6, 0x80900) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.884214196s ago: executing program 0 (id=2565): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040), 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x4) 1.372069018s ago: executing program 0 (id=2574): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.306974284s ago: executing program 0 (id=2579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.244182869s ago: executing program 0 (id=2583): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 1.243582149s ago: executing program 4 (id=2584): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa601, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000c40100"]) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) 1.243070309s ago: executing program 0 (id=2585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000100)=0x0) r4 = eventfd(0x8e) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x5a) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0}, &(0x7f0000000140)=0x40) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) dup(0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.241966469s ago: executing program 4 (id=2586): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780300", @ANYBLOB="37040000000000000000010000005c03088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001"], 0x378}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x14) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x4, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x401}], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x210181, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 737.77263ms ago: executing program 4 (id=2593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 64) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) (rerun: 64) ppoll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="66b805018ee866baf80cb8a748dc8def66bafc0cec0fc75d46c4c17f2d4c344c66baa100ed26660f38df34d40f01c866baf80cb8c8b93e86ef66bafc0cb800400000ef0f077deb", 0x47}], 0x1, 0x34, &(0x7f0000000180), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x600, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) 678.644005ms ago: executing program 4 (id=2594): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/112) rt_sigprocmask(0x1, &(0x7f0000000140)={[0x1000]}, 0x0, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 677.942605ms ago: executing program 4 (id=2595): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000d40)={0x14, 0x0, 0x0}, &(0x7f00000012c0)={0x44, &(0x7f0000000d80)={0x40, 0x0, 0x25, "5e54b33956ba88563329c527bb6d11e1aea8376af72026dddb3709cf310134e2f98da5ccc9"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x20, 0x83, 0x1, '}'}, &(0x7f0000001240)={0x20, 0x84, 0x1, 'a'}, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1d, @empty, 0x2, 0x400043, 'fo\x00', 0x2, 0x0, 0x48}, {@private=0xa810101, 0x4624, 0x0, 0x0, 0xffffffff, 0xdffffffe}}, 0x44) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000804000000db4a93fb453aa36a9eb7465ef399ddefffc57ad734c618dfb0dcf4182ff2754d12ab3c176708969dcbcf389667481d9b3dc7dfbccc2930a131d8e163bba83da2cf5a18de332dea436b0ecaad87e05ae379c820233ef609da1b579ef0d873879edcb2c3"], 0x0, 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000300)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x80e02, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x488, 0x0, 0xb8c}]}) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000600)={0x40, 0xf, 0xa4, {0xa4, 0x8, "c2d73c5f48fdeb96ce43b0233a3940ad45085b7f28851346667c54a6ce5db5bed68b7418604e52a7484ed7ef5edd21223d68d8bc1ecfc34438d4b2540b89c6b27f3c45a5b962ae4c41fd40c28fc312f70cd41ff9adb986f0d7c8f8cab7c5975ffa41847fad4b01067e83f3f3f0a03ce5764b3717057999e4e6cb841808ff38b22885f59e2e89c39ca2489020edfe636adb97c3a8e72171c97018ee477087e4029d5a"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="00030e0000000e036fa4e9e8d559619600000000"]}, &(0x7f00000002c0)={0x1c, &(0x7f0000000700)={0x40, 0x15, 0xeb, "87fe1a241b1d31014b93303fd7512788ee247e0fe5b36631eb3b960f22165e65188475191f3d9c2d62e1c5a62c9a8cb792ed626adcc8aed355ce9785620b56e05a0257ed3ccb9e9f2e28e2b0f20b791520d77f37c1388a83c69c6ffb430e2f3a911a57060d57d6afe60f32681845037600364d70e8cfa6775152c9cdcefc5cec388615ca7782812202328a1d19aea3c4c88304b5e335ebc5797f88dc0cf32b8d6217e631cf0c4ba1cef6ec269e3a1a37fe2b99a4c268e6c178d8819619e581a726e30d0772190c8164123a36bede02cfb9204bc6ae813d05df0e3a09a60e0f155d76c668066b1ce1a08881"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "68f990b74e6fd77693875b526f46d4f950efe24eef890fab68d4b2b2ee1328acc717f05e6d7121ad724574823cfa1d8ccbf38cdbc46dd94c4321eb0111e657dc7745c96069314e2f127b758d01bd93a323545ebd9b004311cb6e929577422e3487828cda3851f873dc42fd83fa8f253864598be649e44818e5663f648f1e81043815ad72f6f7e6cb5e4ec2c2f5c6a34cff79a981a440a212c459f60a5fbbec0748f8bb859d2aaeb421eb4e18d039e692669b04e34cb3cecbb9082aa3c3164ca07195be970eb6e353b21d239dbb8453f8f1c37244f9f314102e0f50c7e0743b08bf0ffe9f2cd7365e4556176645bf8590810cffc504285dce7f0320d0cacdb9061bea7c6f74218c5bf4aa99533875d9929eaa7d0f659a71ddf5167a4e420f82ba6f9b27f9546823f3923459cbbbed4cdbd54c0c8e8df735be50bbd595703b5e886763b634c3e5dfa3bd5c10337198cb5a79d237ba181337bed4fb6596bad6a669fd84eba951cd2a6f2a049a6e7b363c63bc859cb0f65682f9bf70733c5b4cb6ad2789d79accfd4a7a0421fd4f87a57de71cbc8ac6923393142d3f1368ee90535adfecdc135d6cee756893f07b6d6a12cd624b50a9c268c94ee34acdfe0adbb3fcb23d1b3ca5843d5292557825e6d14587328becc4a5668c9239c2508bb50187caf92711e32dc9998c6280d91d95ddd027404525c817af59586077e13480f4634a590510b5a839132247ff8cfddcbdf9466832d0ad3e816d2d2aeb97bff2728f1191ca4322d2ce803256cd98116828912ae053a92f6b6e75a558a46e8f8999f01b94f598d23d0e353b9d5ef6df3b7f4a73e5de291f3b2f02c14446ddbf75a53c33530a8a862aef8acb452f4ed4dc8fcff758dfd3db3360799344dcb78981a3e3037aace40a221704f53e34f2af3779d882a1b3659c07a54a8e9bf0220e35de81f52ce61df4f8e062a68fa2cd1426813476af3daa7714a17dbae3fb2867bd9b9f994fee2589fabadca591e0cdc88d2f1418563e236521ed9d23b9d2ba074367d57e9de0fde2bb8b31eae0fc844652584d8643a2a8b524cfdb5ee5588b38d982e41920fccbc2f3c5637a43ae90b16e6787c9e55ee95d687705cc2b71a24f13295e6adc26c9df6322d41f4b4d885244456b80d4040f3c16e7deaf42a6957985a330513adff2d506a1cdbafb6f0bb44f0f2a712893bb9cfb9adcb43ebe2ec1acf485665d624d9d40c88af66bdd9916344e38daded11aef209bcc80e2c07e90e45f4a3f927fd8274456540bc79da77277cd7eb850863b720257d554b014c963eb960140e557e82981e74908ebac2394a60139fbc763a03608309f36a2f53988eacdeb31fa9be7fb443f10a8bf7e69a49efaff5b1fec9e1bdf7db49c15041d291444dd3ba12dd8ef636c68a244b62141adc14ef23b27a78f164fa05e2af36572d6a5b32c"}, &(0x7f0000000240)={0x21, 0x0, 0x3, "221345"}}) 200.141344ms ago: executing program 3 (id=2597): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 182.458105ms ago: executing program 4 (id=2598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000008004d564b"]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0x2, 0x57e, 0x63a7, 0x1456}, 0xc, [0xbcf, 0x80, 0x7, 0x7fff, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6, 0x3, 0xd, 0x401, 0x8, 0x7fff, 0x2, 0x40000, 0xff, 0xe256, 0x81, 0x0, 0xea36, 0x1000, 0x3ff, 0x8, 0xffffffff, 0xffffffff, 0x6, 0xd23, 0x800, 0x100, 0x2, 0x7, 0x1, 0x6603, 0x5, 0x1, 0x6, 0x1, 0x5, 0x7, 0x239, 0x3, 0xfff, 0x626, 0x4, 0x1, 0x5, 0x400, 0x81, 0x8, 0x401, 0x2, 0x81, 0xb0, 0x40, 0x4, 0x81, 0xe, 0x1, 0x4, 0x70bd42eb, 0x401, 0x5], [0x10001, 0x7, 0x1, 0x1, 0x9, 0x0, 0xfffffffe, 0x3, 0x9, 0x7fff, 0xd, 0x1000, 0x2, 0x2, 0xfffffffa, 0xffff9b7f, 0x573, 0x0, 0x4, 0xcce, 0x1, 0x1, 0xfffffffb, 0x9, 0x9, 0xb, 0x7, 0x5, 0x4, 0x0, 0x80000001, 0x1c3a, 0x4, 0xe4, 0x1000, 0x3, 0x644200b5, 0x800, 0xf, 0x80000001, 0x1b7, 0x6d25, 0xffff7fff, 0x7d, 0x9, 0x2, 0x6, 0x7, 0x0, 0xa, 0x80000002, 0x79c052d1, 0xd947, 0x0, 0xffff, 0x5, 0xffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9, 0x200, 0x80000001], [0x8, 0x9, 0x0, 0xf4, 0xffff, 0x9, 0x0, 0x0, 0x1, 0x8, 0xddf5, 0x6, 0x0, 0x1, 0x4, 0xd, 0x100, 0x3, 0x0, 0x0, 0x7, 0x2, 0x5, 0xf, 0x80, 0x8, 0x4, 0x80000001, 0x78e, 0x5, 0x10000, 0x4, 0x4, 0x3, 0x7f, 0x4, 0x8, 0x5, 0x800, 0xec, 0xfffffff6, 0x0, 0x5, 0x800, 0x7f, 0x0, 0x1, 0x40, 0xfff, 0x6, 0x7, 0x2, 0x1, 0x5, 0x2, 0x4, 0x1000, 0xfffffffe, 0x7, 0x1, 0x3, 0x9, 0x5cf, 0x1], [0xf, 0x7, 0x178, 0x5, 0x9, 0xff, 0xd, 0x10000, 0x2, 0x3, 0x3, 0x4, 0x1, 0x759, 0x8, 0x24, 0xfffffff7, 0xea0, 0x3, 0x5, 0x8f, 0x5b7f503, 0x94, 0x2, 0x1000, 0xa5c0, 0x40b50c25, 0xfffffffe, 0x8, 0x8000, 0x8, 0xde76, 0x1, 0x1, 0x80000000, 0xe6ab, 0x0, 0x3bee5b16, 0x8, 0x81, 0xb828, 0x1dd30, 0x6, 0x6, 0x6, 0x10000, 0x7ff, 0x8000, 0x0, 0x558, 0x4b1f6667, 0x6, 0x1, 0x7, 0x0, 0x6, 0x7fffffff, 0x7, 0x101, 0x938, 0x3, 0x7, 0x5, 0x1935]}, 0x45c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x49, 0x6, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x40, 0x25, 0x4, 0x1cfbf09af5fd9869}]}, 0x20}}, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0xc7, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r9, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 107.132981ms ago: executing program 2 (id=2599): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}}], 0x1, 0x4000844) 106.477241ms ago: executing program 3 (id=2600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xfa3b6b2883b6fee3) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000700)={r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x104, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/69, 0x45, 0x0, 0x12}, @fda={0x66646185, 0x3, 0x1, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/64, 0x40, 0x0, 0x32}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x100b}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/184, 0xb8, 0x0, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1000}, @exit_looper, @clear_death, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x2, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/167, 0xa7, 0x2, 0x3e}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000580)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 104.953871ms ago: executing program 2 (id=2601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 104.252651ms ago: executing program 2 (id=2602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = getpid() syz_pidfd_open(r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper], 0x0, 0x0, 0x0}) 103.802001ms ago: executing program 3 (id=2603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 86.696573ms ago: executing program 2 (id=2604): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x1fe, 0x8005, 0x4}) r3 = eventfd(0x5) r4 = eventfd2(0x10, 0x80000) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './cgroup'}}, {@release_agent={'release_agent', 0x3d, './cgroup'}}]}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r4, 0x4, 0x2, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x4, 0x2, r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 34.425717ms ago: executing program 3 (id=2605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x6, 0x1ff, 0xffffffff, 0x7, "ff11004000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xe8) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r8, &(0x7f0000004280)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x24000010) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff803000000000000000000080008000d0000000000", 0x24) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x200084, &(0x7f00000026c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030376638642c736d61636b6673726f6f743d2ead2e2b2c7b28282b1f7b2c2c7375626a5f747970653d2e2c2b2d2df8252c657569643c", @ANYRESDEC=r6, @ANYBLOB="53de"]) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r9, 0x80605414, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r10 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f00000001c0)=0x1, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 33.997197ms ago: executing program 2 (id=2606): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BLKRAGET(r0, 0x1263, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000) (async, rerun: 64) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) read$FUSE(r4, &(0x7f0000002f00)={0x2020}, 0x2020) (async) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 30.366917ms ago: executing program 2 (id=2607): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000366000/0x2000)=nil, 0x2000, 0x13) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000300)={{r1}}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000539000/0x2000)=nil, 0x2000}}) syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 28.789798ms ago: executing program 3 (id=2608): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f0000000080)='./file0\x00', 0x145c40, 0x100) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x40) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="784104a5ad0f54decddb3f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) umount2(&(0x7f0000000040)='.\x00', 0x2) 25.769398ms ago: executing program 0 (id=2596): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=2609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='./binderfs/binder0\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) kernel console output (not intermixed with test programs): 4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.2.1172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f539a78ebe9 code=0x0 [ 102.492003][ T36] audit: type=1400 audit(2000000001.320:36847): avc: denied { read write } for pid=3929 comm="syz.1.1174" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.492341][ T3930] deleting an unspecified loop device is not supported. [ 102.517573][ T36] audit: type=1400 audit(2000000001.320:36848): avc: denied { open } for pid=3929 comm="syz.1.1174" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.550699][ T36] audit: type=1400 audit(2000000001.320:36849): avc: denied { ioctl } for pid=3929 comm="syz.1.1174" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.594581][ T3930] overlayfs: overlapping lowerdir path [ 102.697035][ T36] audit: type=1400 audit(2000000001.530:36850): avc: denied { bind } for pid=3943 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.708113][ T3946] raw_sendmsg: syz.0.1179 forgot to set AF_INET. Fix it! [ 102.925120][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 103.076396][ T10] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 103.084710][ T10] usb 2-1: config 127 has no interface number 0 [ 103.091132][ T10] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 103.100366][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.112096][ T10] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 103.250801][ T36] audit: type=1326 audit(2000000002.080:36851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.1183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f539a78ebe9 code=0x0 [ 103.323247][ T3964] 9pnet_fd: Insufficient options for proto=fd [ 103.332385][ T3964] 9pnet_fd: Insufficient options for proto=fd [ 103.346990][ T3970] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 103.364005][ T3942] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 103.371927][ T3942] rust_binder: Error while translating object. [ 103.382820][ T3942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.389224][ T3942] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 103.398732][ T3942] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:693 [ 103.411369][ T10] usb 2-1: USB disconnect, device number 43 [ 103.916878][ T814] rust_binder: 3941: removing orphan mapping 0:24 [ 103.945380][ T3982] tmpfs: Unknown parameter 'q ' [ 104.061497][ T3986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.061536][ T3986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:705 [ 104.110104][ T36] audit: type=1404 audit(2000000002.940:36852): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 104.134574][ T36] audit: type=1400 audit(2000000002.960:36853): avc: denied { read write } for pid=3998 comm="syz.0.1197" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 104.158616][ T36] audit: type=1400 audit(2000000002.960:36854): avc: denied { read } for pid=3998 comm="syz.0.1197" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 104.192347][ T36] audit: type=1400 audit(2000000002.960:36855): avc: denied { read write } for pid=3998 comm="syz.0.1197" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 104.222272][ T4002] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.236763][ T4004] kvm: user requested TSC rate below hardware speed [ 104.281586][ T4004] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 104.290453][ T4004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 104.439283][ T4026] /dev/rnullb0: Can't open blockdev [ 104.481348][ T4018] cgroup: fork rejected by pids controller in /syz1 [ 104.507599][ T4050] __nla_validate_parse: 31 callbacks suppressed [ 104.507619][ T4050] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1205'. [ 104.714471][ T4068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.716789][ T4068] rust_binder: Error while translating object. [ 104.723568][ T4068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 104.730065][ T4068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:760 [ 104.839550][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.849003][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.855789][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.862525][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.869825][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.876383][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.883091][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.890083][ T4074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.905081][ T45] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 105.043248][ T4092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.044242][ T4092] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1217'. [ 105.085409][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 105.092309][ T45] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 105.100989][ T45] usb 4-1: config 0 has no interface number 0 [ 105.107394][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 105.117824][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.130274][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 105.145252][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.153553][ T45] usb 4-1: Product: syz [ 105.158055][ T45] usb 4-1: Manufacturer: syz [ 105.162684][ T45] usb 4-1: SerialNumber: syz [ 105.169094][ T45] usb 4-1: config 0 descriptor?? [ 105.174575][ T4066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.182372][ T4066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.390715][ T4066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.398055][ T4066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.474911][ T4106] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1221'. [ 105.572504][ T4108] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 105.580115][ T4108] rust_binder: Write failure EINVAL in pid:717 [ 105.723288][ T4113] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1224'. [ 105.740648][ T4113] __vm_enough_memory: pid: 4113, comm: syz.1.1224, bytes: 18014402804453376 not enough memory for the allocation [ 105.764346][ T4117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.764769][ T4117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:790 [ 106.009030][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.028818][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 106.039348][ T45] asix 4-1:0.251: probe with driver asix failed with error -71 [ 106.050460][ T45] usb 4-1: USB disconnect, device number 35 [ 106.775138][ T398] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 106.926333][ T398] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.937695][ T398] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.948665][ T398] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.957778][ T398] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 106.966500][ T398] usb 4-1: Product: syz [ 106.970698][ T398] usb 4-1: Manufacturer: syz [ 106.977833][ T398] hub 4-1:4.0: USB hub found [ 107.180781][ T398] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 107.205473][ T398] usb 4-1: USB disconnect, device number 36 [ 107.709826][ T4203] FAULT_INJECTION: forcing a failure. [ 107.709826][ T4203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.727763][ T4206] x_tables: unsorted entry at hook 2 [ 107.734330][ T4203] CPU: 1 UID: 0 PID: 4203 Comm: syz.1.1255 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 107.734374][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 107.734394][ T4203] Call Trace: [ 107.734401][ T4203] [ 107.734410][ T4203] __dump_stack+0x21/0x30 [ 107.734445][ T4203] dump_stack_lvl+0x10c/0x190 [ 107.734471][ T4203] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.734498][ T4203] dump_stack+0x19/0x20 [ 107.734521][ T4203] should_fail_ex+0x3d9/0x530 [ 107.734548][ T4203] should_fail+0xf/0x20 [ 107.734572][ T4203] should_fail_usercopy+0x1e/0x30 [ 107.734590][ T4203] _copy_from_user+0x22/0xb0 [ 107.734609][ T4203] userfaultfd_ioctl+0x9f7/0x4750 [ 107.734629][ T4203] ? do_vfs_ioctl+0xeda/0x1e30 [ 107.734651][ T4203] ? arch_stack_walk+0x10b/0x170 [ 107.734679][ T4203] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 107.734700][ T4203] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 107.734718][ T4203] ? _parse_integer+0x2e/0x40 [ 107.734746][ T4203] ? ioctl_has_perm+0x384/0x4d0 [ 107.734769][ T4203] ? has_cap_mac_admin+0xd0/0xd0 [ 107.734792][ T4203] ? selinux_file_ioctl+0x6e0/0x1360 [ 107.734815][ T4203] ? vfs_write+0x8ba/0xe80 [ 107.734833][ T4203] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 107.734856][ T4203] ? __cfi_vfs_write+0x10/0x10 [ 107.734874][ T4203] ? __kasan_check_write+0x18/0x20 [ 107.734899][ T4203] ? mutex_unlock+0x8b/0x240 [ 107.734925][ T4203] ? __cfi_mutex_unlock+0x10/0x10 [ 107.734949][ T4203] ? __fget_files+0x2c5/0x340 [ 107.734969][ T4203] ? __fget_files+0x2c5/0x340 [ 107.734988][ T4203] ? bpf_lsm_file_ioctl+0xd/0x20 [ 107.735019][ T4203] ? security_file_ioctl+0x34/0xd0 [ 107.735038][ T4203] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 107.735073][ T4203] __se_sys_ioctl+0x135/0x1b0 [ 107.735094][ T4203] __x64_sys_ioctl+0x7f/0xa0 [ 107.735112][ T4203] x64_sys_call+0x1878/0x2ee0 [ 107.735137][ T4203] do_syscall_64+0x58/0xf0 [ 107.735159][ T4203] ? clear_bhb_loop+0x50/0xa0 [ 107.735178][ T4203] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.735206][ T4203] RIP: 0033:0x7f0bc1b8ebe9 [ 107.735225][ T4203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.735242][ T4203] RSP: 002b:00007f0bc2a92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.735266][ T4203] RAX: ffffffffffffffda RBX: 00007f0bc1db5fa0 RCX: 00007f0bc1b8ebe9 [ 107.735281][ T4203] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 107.735438][ T4203] RBP: 00007f0bc2a92090 R08: 0000000000000000 R09: 0000000000000000 [ 107.735450][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.735462][ T4203] R13: 00007f0bc1db6038 R14: 00007f0bc1db5fa0 R15: 00007ffe4c5927f8 [ 107.735477][ T4203] [ 107.738788][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 107.738805][ T36] audit: type=1400 audit(2000000262.575:36959): avc: denied { read write } for pid=4207 comm="syz.0.1257" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.041058][ T36] audit: type=1400 audit(2000000262.615:36960): avc: denied { open } for pid=4207 comm="syz.0.1257" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.064477][ T36] audit: type=1400 audit(2000000262.615:36961): avc: denied { ioctl } for pid=4207 comm="syz.0.1257" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.089621][ T36] audit: type=1400 audit(2000000262.615:36962): avc: denied { read } for pid=4204 comm="syz.3.1256" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.114037][ T36] audit: type=1400 audit(2000000262.615:36963): avc: denied { open } for pid=4204 comm="syz.3.1256" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.138822][ T36] audit: type=1400 audit(2000000262.645:36964): avc: denied { relabelfrom } for pid=4210 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.158098][ T4218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.159264][ T4218] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 108.159257][ T36] audit: type=1400 audit(2000000262.645:36965): avc: denied { relabelto } for pid=4210 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.165867][ T4218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:642 [ 108.199201][ T36] audit: type=1400 audit(2000000263.035:36966): avc: denied { sys_module } for pid=4220 comm="syz.2.1261" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.287118][ T36] audit: type=1400 audit(2000000263.125:36967): avc: denied { ioctl } for pid=4222 comm="syz.0.1262" path="socket:[22976]" dev="sockfs" ino=22976 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.317574][ T36] audit: type=1400 audit(2000000263.125:36968): avc: denied { write } for pid=4222 comm="syz.0.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.431701][ T4239] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 108.445232][ T4239] rust_binder: Write failure EINVAL in pid:817 [ 108.464664][ T4241] rust_binder: Write failure EFAULT in pid:819 [ 108.492713][ T4237] FAULT_INJECTION: forcing a failure. [ 108.492713][ T4237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.518421][ T4237] CPU: 0 UID: 0 PID: 4237 Comm: syz.3.1266 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 108.518455][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 108.518466][ T4237] Call Trace: [ 108.518473][ T4237] [ 108.518481][ T4237] __dump_stack+0x21/0x30 [ 108.518501][ T4253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.518513][ T4237] dump_stack_lvl+0x10c/0x190 [ 108.518539][ T4237] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.518562][ T4237] ? __kasan_check_write+0x18/0x20 [ 108.518588][ T4237] dump_stack+0x19/0x20 [ 108.518609][ T4237] should_fail_ex+0x3d9/0x530 [ 108.518636][ T4237] should_fail_alloc_page+0xeb/0x110 [ 108.518656][ T4237] __alloc_pages_noprof+0x19b/0x7b0 [ 108.518679][ T4237] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 108.518703][ T4237] __folio_alloc_noprof+0x14/0x80 [ 108.518725][ T4237] shmem_mfill_atomic_pte+0x253/0x9d0 [ 108.518745][ T4237] ? __cfi_shmem_mfill_atomic_pte+0x10/0x10 [ 108.518763][ T4237] ? selinux_file_open+0x457/0x610 [ 108.518785][ T4237] mfill_atomic_copy+0x698/0xd50 [ 108.518811][ T4237] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 108.518836][ T4237] userfaultfd_ioctl+0x33f4/0x4750 [ 108.518855][ T4237] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 108.518876][ T4237] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 108.518894][ T4237] ? _parse_integer+0x2e/0x40 [ 108.518920][ T4237] ? ioctl_has_perm+0x384/0x4d0 [ 108.518941][ T4237] ? has_cap_mac_admin+0xd0/0xd0 [ 108.518962][ T4237] ? selinux_file_ioctl+0x6e0/0x1360 [ 108.518982][ T4237] ? vfs_write+0x8ba/0xe80 [ 108.518998][ T4237] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 108.519020][ T4237] ? __cfi_vfs_write+0x10/0x10 [ 108.519036][ T4237] ? __kasan_check_write+0x18/0x20 [ 108.519060][ T4237] ? mutex_unlock+0x8b/0x240 [ 108.519085][ T4237] ? __cfi_mutex_unlock+0x10/0x10 [ 108.519109][ T4237] ? __fget_files+0x2c5/0x340 [ 108.519129][ T4237] ? __fget_files+0x2c5/0x340 [ 108.519148][ T4237] ? bpf_lsm_file_ioctl+0xd/0x20 [ 108.519171][ T4237] ? security_file_ioctl+0x34/0xd0 [ 108.519191][ T4237] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 108.519208][ T4237] __se_sys_ioctl+0x135/0x1b0 [ 108.519228][ T4237] __x64_sys_ioctl+0x7f/0xa0 [ 108.519247][ T4237] x64_sys_call+0x1878/0x2ee0 [ 108.519271][ T4237] do_syscall_64+0x58/0xf0 [ 108.519294][ T4237] ? clear_bhb_loop+0x50/0xa0 [ 108.519312][ T4237] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.519339][ T4237] RIP: 0033:0x7f4aa978ebe9 [ 108.519362][ T4237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.519378][ T4237] RSP: 002b:00007f4aaa645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.519400][ T4237] RAX: ffffffffffffffda RBX: 00007f4aa99b5fa0 RCX: 00007f4aa978ebe9 [ 108.519414][ T4237] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 108.519427][ T4237] RBP: 00007f4aaa645090 R08: 0000000000000000 R09: 0000000000000000 [ 108.519440][ T4237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.519452][ T4237] R13: 00007f4aa99b6038 R14: 00007f4aa99b5fa0 R15: 00007ffd7014e218 [ 108.519467][ T4237] [ 108.926243][ T4265] rust_binder: 751: no such ref 4294967293 [ 108.932314][ T4265] rust_binder: 751: no such ref 2 [ 108.980889][ T45] rust_binder: 4263: removing orphan mapping 0:24 [ 109.156290][ T4275] rust_binder: Read failure Err(EFAULT) in pid:759 [ 109.371355][ T4290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.399671][ T4292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.660355][ T4310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.660779][ T4312] overlayfs: failed to resolve './file1': -2 [ 109.667260][ T4310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.845097][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 110.016823][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 110.024854][ T10] usb 2-1: too many configurations: 175, using maximum allowed: 8 [ 110.034142][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.044901][ T10] usb 2-1: can't read configurations, error -61 [ 110.115173][ T45] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 110.175138][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 110.266418][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 110.277707][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.292326][ T45] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 110.301816][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.310037][ T45] usb 1-1: Product: 闪ﵴ瀯⠣åÒŽä–‰ã’ۣ뵺撵㾌ᚨ魢ä³åƒ¡ì·²ç­˜ê³ªã£­à­¬ë—¬à©¨ì£šê³†ï†‹æ½ƒã¢Šê„¤ì‚’佮ᭃ徯䲔ṳ鿦胧찯層휟鴴≰å©áª­ç–ƒç•¹á€…˥袅Ლ피á»ïœ½ì”㎈ã“媟휷Òኵ쉥棲⃵ꬫãŠï‹ˆï‹¥ïž£ä¸®ëƒï†§èœ²ï¶°æ·°çˆ«ä–Žî¤å´µä½‚剘貣赔 [ 110.335886][ T45] usb 1-1: Manufacturer: ц [ 110.337370][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 110.340615][ T45] usb 1-1: SerialNumber: á° [ 110.348393][ T10] usb 2-1: too many configurations: 175, using maximum allowed: 8 [ 110.362057][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.369748][ T10] usb 2-1: can't read configurations, error -61 [ 110.376611][ T10] usb usb2-port1: attempt power cycle [ 110.556348][ T4323] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 110.570296][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 110.579955][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 110.593185][ T45] usb 1-1: USB disconnect, device number 32 [ 110.599476][ T4325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:675 [ 110.725152][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 110.757216][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 110.765377][ T10] usb 2-1: too many configurations: 175, using maximum allowed: 8 [ 110.774581][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.782263][ T10] usb 2-1: can't read configurations, error -61 [ 110.915126][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 110.937208][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 110.945274][ T10] usb 2-1: too many configurations: 175, using maximum allowed: 8 [ 110.954272][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.962000][ T10] usb 2-1: can't read configurations, error -61 [ 110.968452][ T10] usb usb2-port1: unable to enumerate USB device [ 111.217302][ T4341] FAULT_INJECTION: forcing a failure. [ 111.217302][ T4341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.230558][ T4341] CPU: 1 UID: 0 PID: 4341 Comm: syz.0.1300 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 111.230598][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 111.230611][ T4341] Call Trace: [ 111.230620][ T4341] [ 111.230628][ T4341] __dump_stack+0x21/0x30 [ 111.230660][ T4341] dump_stack_lvl+0x10c/0x190 [ 111.230682][ T4341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.230698][ T4341] dump_stack+0x19/0x20 [ 111.230712][ T4341] should_fail_ex+0x3d9/0x530 [ 111.230739][ T4341] should_fail+0xf/0x20 [ 111.230763][ T4341] should_fail_usercopy+0x1e/0x30 [ 111.230796][ T4341] _copy_to_user+0x24/0xa0 [ 111.230819][ T4341] simple_read_from_buffer+0xed/0x160 [ 111.230843][ T4341] proc_fail_nth_read+0x19e/0x210 [ 111.230859][ T4341] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 111.230873][ T4341] ? bpf_lsm_file_permission+0xd/0x20 [ 111.230889][ T4341] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 111.230904][ T4341] vfs_read+0x27b/0xb60 [ 111.230920][ T4341] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 111.230934][ T4341] ? __cfi_vfs_read+0x10/0x10 [ 111.230950][ T4341] ? __kasan_check_write+0x18/0x20 [ 111.230967][ T4341] ? mutex_lock+0x92/0x1c0 [ 111.230984][ T4341] ? __cfi_mutex_lock+0x10/0x10 [ 111.230999][ T4341] ? __fget_files+0x2c5/0x340 [ 111.231012][ T4341] ksys_read+0x141/0x250 [ 111.231022][ T4341] ? __cfi_ksys_read+0x10/0x10 [ 111.231033][ T4341] ? __kasan_check_read+0x15/0x20 [ 111.231048][ T4341] __x64_sys_read+0x7f/0x90 [ 111.231059][ T4341] x64_sys_call+0x2638/0x2ee0 [ 111.231076][ T4341] do_syscall_64+0x58/0xf0 [ 111.231090][ T4341] ? clear_bhb_loop+0x50/0xa0 [ 111.231102][ T4341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.231121][ T4341] RIP: 0033:0x7fcd2078d5fc [ 111.231134][ T4341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.231144][ T4341] RSP: 002b:00007fcd2165b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.231234][ T4341] RAX: ffffffffffffffda RBX: 00007fcd209b5fa0 RCX: 00007fcd2078d5fc [ 111.231248][ T4341] RDX: 000000000000000f RSI: 00007fcd2165b0a0 RDI: 0000000000000007 [ 111.231257][ T4341] RBP: 00007fcd2165b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.231265][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.231273][ T4341] R13: 00007fcd209b6038 R14: 00007fcd209b5fa0 R15: 00007ffd50ef85f8 [ 111.231285][ T4341] [ 111.735119][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 111.766620][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 111.895146][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 111.901497][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.909695][ T10] usb 4-1: config 0 has no interface number 0 [ 111.918036][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.927191][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.935317][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 111.940468][ T10] usb 4-1: Product: syz [ 111.944683][ T10] usb 4-1: Manufacturer: syz [ 111.950165][ T10] usb 4-1: SerialNumber: syz [ 111.955476][ T9] usb 1-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 111.966268][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.975802][ T10] usb 4-1: config 0 descriptor?? [ 111.982064][ T10] smsc95xx v2.0.0 [ 111.986753][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.995898][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.003916][ T9] usb 1-1: Product: syz [ 112.008411][ T9] usb 1-1: Manufacturer: syz [ 112.013249][ T9] usb 1-1: SerialNumber: syz [ 112.018715][ T9] usb 1-1: config 0 descriptor?? [ 112.383112][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 112.394300][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.590816][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 113.590836][ T36] audit: type=1400 audit(2000000268.425:36998): avc: denied { mounton } for pid=4407 comm="syz.1.1323" path="/274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 113.737917][ T36] audit: type=1400 audit(2000000268.575:36999): avc: denied { setopt } for pid=4414 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.845348][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.854392][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.280200][ T36] audit: type=1400 audit(2000000269.115:37000): avc: denied { ioctl } for pid=4425 comm="syz.1.1328" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.284720][ T4426] rust_binder: Write failure EFAULT in pid:866 [ 114.308406][ T36] audit: type=1400 audit(2000000269.115:37001): avc: denied { listen } for pid=4425 comm="syz.1.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.368123][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 114.379321][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.388817][ T10] usb 4-1: USB disconnect, device number 37 [ 114.423192][ T4435] rust_binder: Write failure EFAULT in pid:874 [ 114.446876][ T36] audit: type=1400 audit(2000000269.285:37002): avc: denied { bind } for pid=4437 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.705146][ T387] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 114.835121][ T387] usb 2-1: device descriptor read/64, error -71 [ 114.880885][ T36] audit: type=1400 audit(2000000269.715:37003): avc: denied { setopt } for pid=4459 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.902537][ T36] audit: type=1400 audit(2000000269.715:37004): avc: denied { bind } for pid=4459 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.075088][ T387] usb 2-1: device descriptor read/64, error -71 [ 115.315089][ T387] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 115.369680][ T45] usb 1-1: USB disconnect, device number 33 [ 115.384679][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 115.393807][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1341'. [ 115.406259][ T4464] Falling back ldisc for ttyS3. [ 115.439070][ T36] audit: type=1400 audit(2000000270.275:37005): avc: denied { read } for pid=4467 comm="syz.3.1343" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.441380][ T4466] bridge0: entered promiscuous mode [ 115.470434][ T387] usb 2-1: device descriptor read/64, error -71 [ 115.476874][ T4466] bridge0: entered allmulticast mode [ 115.702515][ T36] audit: type=1400 audit(2000000270.535:37006): avc: denied { write } for pid=4488 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.723538][ T387] usb 2-1: device descriptor read/64, error -71 [ 115.835235][ T387] usb usb2-port1: attempt power cycle [ 115.885360][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 115.975174][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 116.035157][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 116.041963][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.050296][ T10] usb 1-1: config 0 has no interface number 0 [ 116.058367][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.067842][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.076014][ T10] usb 1-1: Product: syz [ 116.080362][ T10] usb 1-1: Manufacturer: syz [ 116.085083][ T10] usb 1-1: SerialNumber: syz [ 116.090423][ T10] usb 1-1: config 0 descriptor?? [ 116.096293][ T10] smsc95xx v2.0.0 [ 116.127538][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.138475][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.149661][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.160193][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.174561][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.183787][ T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.192398][ T387] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 116.199975][ T31] usb 4-1: Manufacturer: syz [ 116.205557][ T31] usb 4-1: config 0 descriptor?? [ 116.226548][ T387] usb 2-1: device descriptor read/8, error -71 [ 116.356514][ T387] usb 2-1: device descriptor read/8, error -71 [ 116.457851][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 116.463864][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.475641][ T31] usb 4-1: USB disconnect, device number 38 [ 116.498151][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 116.509022][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.595141][ T387] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 116.616261][ T387] usb 2-1: device descriptor read/8, error -71 [ 116.746505][ T387] usb 2-1: device descriptor read/8, error -71 [ 116.855179][ T387] usb usb2-port1: unable to enumerate USB device [ 116.999172][ T4502] rust_binder: Failed copying into alloc: EFAULT [ 116.999194][ T4502] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 117.005788][ T4502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.014591][ T4502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:704 [ 117.060306][ T36] audit: type=1400 audit(2000000271.895:37007): avc: denied { create } for pid=4506 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.182675][ T4510] rust_binder: Write failure EFAULT in pid:714 [ 117.471089][ T4524] tmpfs: Unknown parameter 'hugeeÍ' [ 117.655317][ T4533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.924226][ T4487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.942677][ T4487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.944659][ T4562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 118.105118][ T659] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 118.256244][ T659] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 118.264710][ T659] usb 2-1: config 0 has no interface number 0 [ 118.271135][ T659] usb 2-1: config 0 interface 214 has no altsetting 0 [ 118.288776][ T659] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 118.300737][ T659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.309277][ T659] usb 2-1: Product: syz [ 118.313590][ T659] usb 2-1: Manufacturer: syz [ 118.318541][ T659] usb 2-1: SerialNumber: syz [ 118.332607][ T659] usb 2-1: config 0 descriptor?? [ 118.340805][ T659] ax88179_178a 2-1:0.214: probe with driver ax88179_178a failed with error -22 [ 118.439091][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 118.452477][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 118.462597][ T10] usb 1-1: USB disconnect, device number 34 [ 118.856373][ T659] rust_binder: 4569: removing orphan mapping 0:24 [ 118.943739][ T4584] netlink: 'syz.2.1383': attribute type 16 has an invalid length. [ 118.951701][ T4584] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1383'. [ 119.019402][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 119.019424][ T36] audit: type=1400 audit(2000000273.855:37018): avc: denied { mounton } for pid=4589 comm="syz.0.1385" path="/syzcgroup/unified/syz0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 119.061597][ T36] audit: type=1400 audit(2000000273.895:37019): avc: denied { name_bind } for pid=4591 comm="syz.0.1386" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.088753][ T4592] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1386'. [ 119.110969][ T36] audit: type=1400 audit(2000000273.945:37020): avc: denied { unlink } for pid=4593 comm="syz.0.1387" name="#1e" dev="tmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.136120][ T36] audit: type=1400 audit(2000000273.945:37021): avc: denied { getattr } for pid=4593 comm="syz.0.1387" name="/" dev="incremental-fs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.160329][ T36] audit: type=1400 audit(2000000273.945:37022): avc: denied { mount } for pid=4593 comm="syz.0.1387" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.182594][ T36] audit: type=1400 audit(2000000273.955:37023): avc: denied { write } for pid=4593 comm="syz.0.1387" name="/" dev="incremental-fs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.205644][ T36] audit: type=1400 audit(2000000273.955:37024): avc: denied { unmount } for pid=4593 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.264510][ T36] audit: type=1400 audit(2000000274.095:37025): avc: denied { map } for pid=4619 comm="syz.0.1398" path="socket:[25113]" dev="sockfs" ino=25113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 119.310746][ T4624] fuse: Bad value for 'fd' [ 119.326342][ T4626] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.327362][ T4626] 9pnet_fd: Insufficient options for proto=fd [ 119.442867][ T4629] overlayfs: overlapping lowerdir path [ 119.450750][ T4629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.460878][ T4629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.685084][ T10] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 119.815119][ T10] usb 4-1: device descriptor read/64, error -71 [ 119.865553][ T36] audit: type=1400 audit(2000000274.705:37026): avc: denied { bind } for pid=4643 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.897731][ T36] audit: type=1400 audit(2000000274.735:37027): avc: denied { mounton } for pid=4645 comm="syz.2.1408" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 119.897781][ T4646] 9pnet_fd: Insufficient options for proto=fd [ 120.065176][ T10] usb 4-1: device descriptor read/64, error -71 [ 120.305267][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 120.435113][ T10] usb 4-1: device descriptor read/64, error -71 [ 120.675129][ T10] usb 4-1: device descriptor read/64, error -71 [ 120.785227][ T10] usb usb4-port1: attempt power cycle [ 121.125144][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 121.146718][ T10] usb 4-1: device descriptor read/8, error -71 [ 121.276300][ T10] usb 4-1: device descriptor read/8, error -71 [ 121.311911][ T659] usb 2-1: USB disconnect, device number 52 [ 121.382029][ T4693] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 121.515214][ T10] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 121.536602][ T10] usb 4-1: device descriptor read/8, error -71 [ 121.645214][ T659] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 121.666478][ T10] usb 4-1: device descriptor read/8, error -71 [ 121.775267][ T10] usb usb4-port1: unable to enumerate USB device [ 121.805200][ T659] usb 2-1: Using ep0 maxpacket: 16 [ 121.812180][ T659] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.820789][ T659] usb 2-1: config 0 has no interface number 0 [ 121.828759][ T659] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.840588][ T659] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.851090][ T659] usb 2-1: config 0 interface 41 has no altsetting 0 [ 121.860670][ T659] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 121.869995][ T659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.878573][ T659] usb 2-1: Product: syz [ 121.883555][ T659] usb 2-1: Manufacturer: syz [ 121.888356][ T659] usb 2-1: SerialNumber: syz [ 121.897960][ T659] usb 2-1: config 0 descriptor?? [ 121.904227][ T4681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.912392][ T4681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.121122][ T4681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.129354][ T4681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.439835][ T4700] netlink: 'syz.2.1425': attribute type 11 has an invalid length. [ 122.493743][ T4707] overlayfs: failed to clone upperpath [ 122.738918][ T659] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 122.845163][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 122.995113][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 123.001524][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.010154][ T9] usb 4-1: config 0 has no interface number 0 [ 123.022246][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.031521][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.039625][ T9] usb 4-1: Product: syz [ 123.043826][ T9] usb 4-1: Manufacturer: syz [ 123.048472][ T9] usb 4-1: SerialNumber: syz [ 123.053791][ T9] usb 4-1: config 0 descriptor?? [ 123.060034][ T9] smsc95xx v2.0.0 [ 123.252448][ T4729] overlayfs: failed to clone upperpath [ 123.446579][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.453816][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.461365][ T4731] bridge_slave_0: entered allmulticast mode [ 123.468109][ T4731] bridge_slave_0: entered promiscuous mode [ 123.474197][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.475327][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.486743][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.493653][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.510161][ T4731] bridge_slave_1: entered allmulticast mode [ 123.516999][ T4731] bridge_slave_1: entered promiscuous mode [ 123.528021][ T46] bridge_slave_1: left allmulticast mode [ 123.534517][ T46] bridge_slave_1: left promiscuous mode [ 123.540487][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.548369][ T46] bridge_slave_0: left allmulticast mode [ 123.554307][ T46] bridge_slave_0: left promiscuous mode [ 123.560244][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.650514][ T46] tipc: Left network mode [ 123.656823][ T46] veth1_macvtap: left promiscuous mode [ 123.662637][ T46] veth0_vlan: left promiscuous mode [ 123.709209][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.716327][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.723653][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.730724][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.753832][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.761556][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.772668][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.779827][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.789573][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.796759][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.826823][ T4731] veth0_vlan: entered promiscuous mode [ 123.838774][ T4731] veth1_macvtap: entered promiscuous mode [ 123.916102][ T4748] syz.0.1440 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 124.186531][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 124.186549][ T36] audit: type=1400 audit(2000000279.025:37038): avc: denied { write } for pid=4680 comm="syz.1.1419" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.197594][ T659] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 124.216280][ T36] audit: type=1400 audit(2000000279.025:37039): avc: denied { map } for pid=4680 comm="syz.1.1419" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.229126][ T659] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 124.262956][ T659] usb 2-1: USB disconnect, device number 53 [ 124.501002][ T4760] incfs: Error accessing: ./file0. [ 124.506279][ T4760] incfs: mount failed -20 [ 124.639963][ T4769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.682089][ T36] audit: type=1400 audit(2000000279.515:37040): avc: denied { read } for pid=4773 comm="syz.2.1449" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.712466][ T36] audit: type=1400 audit(2000000279.515:37041): avc: denied { open } for pid=4773 comm="syz.2.1449" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.737287][ T36] audit: type=1400 audit(2000000279.515:37042): avc: denied { ioctl } for pid=4773 comm="syz.2.1449" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.764176][ T36] audit: type=1400 audit(2000000279.515:37043): avc: denied { execute } for pid=4773 comm="syz.2.1449" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.912977][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.921752][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.165541][ T387] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 125.315103][ T387] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.409354][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 125.422711][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.433190][ T9] usb 4-1: USB disconnect, device number 43 [ 125.445261][ T387] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 125.595160][ T387] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.600783][ T387] usb usb2-port1: attempt power cycle [ 125.937191][ T4799] rust_binder: Error while translating object. [ 125.937226][ T4799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 125.944229][ T4799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:751 [ 125.945107][ T387] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 125.995498][ T387] usb 2-1: Invalid ep0 maxpacket: 64 [ 126.125319][ T387] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 126.145617][ T387] usb 2-1: Invalid ep0 maxpacket: 64 [ 126.151077][ T387] usb usb2-port1: unable to enumerate USB device [ 126.275175][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 126.435578][ T31] usb 4-1: no configurations [ 126.440588][ T31] usb 4-1: can't read configurations, error -22 [ 126.575118][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 126.725507][ T31] usb 4-1: no configurations [ 126.730197][ T31] usb 4-1: can't read configurations, error -22 [ 126.736656][ T31] usb usb4-port1: attempt power cycle [ 126.813422][ T36] audit: type=1400 audit(2000000281.645:37044): avc: denied { mount } for pid=4817 comm="syz.2.1464" name="/" dev="ramfs" ino=26466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.836270][ T36] audit: type=1400 audit(2000000281.645:37045): avc: denied { unmount } for pid=4731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.856920][ T36] audit: type=1400 audit(2000000281.675:37046): avc: denied { getopt } for pid=4819 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.953438][ T36] audit: type=1400 audit(2000000281.785:37047): avc: denied { read } for pid=4831 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.105162][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 127.125069][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.125855][ T31] usb 4-1: no configurations [ 127.137372][ T31] usb 4-1: can't read configurations, error -22 [ 127.275109][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 127.275141][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 127.276298][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 127.296185][ T9] usb 3-1: config 0 has no interface number 0 [ 127.304134][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 127.305846][ T31] usb 4-1: no configurations [ 127.313259][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.318588][ T31] usb 4-1: can't read configurations, error -22 [ 127.326837][ T9] usb 3-1: Product: syz [ 127.333752][ T31] usb usb4-port1: unable to enumerate USB device [ 127.337619][ T9] usb 3-1: Manufacturer: syz [ 127.348776][ T9] usb 3-1: SerialNumber: syz [ 127.354480][ T9] usb 3-1: config 0 descriptor?? [ 127.361090][ T9] smsc95xx v2.0.0 [ 127.762751][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 127.773583][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 128.340436][ T4852] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9 sclass=netlink_xfrm_socket pid=4852 comm=syz.0.1477 [ 128.386215][ T4856] fuse: Bad value for 'fd' [ 128.420244][ T4862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'. [ 129.037603][ T4883] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 129.037790][ T4883] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.075346][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'. [ 129.176768][ T4890] overlayfs: failed to clone upperpath [ 129.188516][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.197481][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.234218][ T4897] tmpfs: Unknown parameter 'quota' [ 129.242115][ T4897] overlayfs: failed to clone upperpath [ 129.250293][ T4897] tmpfs: Unknown parameter 'quota' [ 129.283039][ T4906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1498'. [ 129.303593][ T4908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1499'. [ 129.606822][ T4915] input: syz1 as /devices/virtual/input/input21 [ 129.613963][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 129.613978][ T36] audit: type=1400 audit(2000000284.445:37054): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=634 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.643249][ T36] audit: type=1400 audit(2000000284.455:37055): avc: denied { append } for pid=4914 comm="syz.3.1501" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.667924][ T36] audit: type=1400 audit(2000000284.455:37056): avc: denied { open } for pid=94 comm="acpid" path=2F6465762F696E7075742F6576656E7433202864656C6574656429 dev="devtmpfs" ino=634 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.729398][ T4920] netlink: 'syz.3.1503': attribute type 30 has an invalid length. [ 129.739310][ T36] audit: type=1400 audit(2000000284.575:37057): avc: denied { create } for pid=4919 comm="syz.3.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.769541][ T4922] 9pnet_fd: Insufficient options for proto=fd [ 129.779640][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 129.791394][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 129.795068][ T31] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 129.804321][ T9] usb 3-1: USB disconnect, device number 3 [ 129.828920][ T4928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'. [ 129.856616][ T4932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1509'. [ 129.916501][ T36] audit: type=1400 audit(2000000284.755:37058): avc: denied { accept } for pid=4938 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.937953][ T36] audit: type=1400 audit(2000000284.755:37059): avc: denied { create } for pid=4938 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 129.956253][ T31] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 129.971441][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.981675][ T31] usb 2-1: config 0 descriptor?? [ 130.190151][ T31] usb 2-1: Cannot read MAC address [ 130.195742][ T31] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 130.208757][ T31] usb 2-1: USB disconnect, device number 58 [ 130.364363][ T36] audit: type=1400 audit(2000000285.195:37060): avc: denied { bind } for pid=4950 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.366195][ T4952] overlay: ./file0 is not a directory [ 130.384343][ T36] audit: type=1400 audit(2000000285.195:37061): avc: denied { listen } for pid=4950 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.410519][ T36] audit: type=1400 audit(2000000285.195:37062): avc: denied { accept } for pid=4950 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.432245][ T36] audit: type=1400 audit(2000000285.195:37063): avc: denied { write } for pid=4950 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.484002][ T4966] hub 6-0:1.0: USB hub found [ 130.488979][ T4966] hub 6-0:1.0: 1 port detected [ 130.720422][ T4968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.735213][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 130.773548][ T4969] fuse: Bad value for 'group_id' [ 130.778712][ T4969] fuse: Bad value for 'group_id' [ 130.906596][ T31] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 130.915137][ T31] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 130.924155][ T31] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 130.935360][ T31] usb 3-1: config 8 has no interface number 0 [ 130.941759][ T31] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 130.954253][ T31] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.973109][ T31] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 130.979084][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1526'. [ 130.982906][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.000808][ T31] usb 3-1: Product: syz [ 131.005182][ T31] usb 3-1: Manufacturer: syz [ 131.010048][ T31] usb 3-1: SerialNumber: syz [ 131.235101][ T31] usb 3-1: USB disconnect, device number 4 [ 131.463724][ T4993] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 131.586491][ T5008] rust_binder: Write failure EFAULT in pid:951 [ 131.732218][ T5012] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1539'. [ 131.774922][ T5018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.841863][ T5024] netlink: 'syz.1.1542': attribute type 13 has an invalid length. [ 131.870010][ T5027] netlink: 'syz.1.1543': attribute type 27 has an invalid length. [ 132.082911][ T5038] overlayfs: failed to clone upperpath [ 132.125073][ T45] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 132.275113][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 132.282794][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 132.294924][ T45] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.296343][ T5058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 132.303328][ T45] usb 2-1: Product: syz [ 132.323258][ T45] usb 2-1: Manufacturer: syz [ 132.327961][ T45] usb 2-1: SerialNumber: syz [ 132.334543][ T45] usb 2-1: config 0 descriptor?? [ 132.542170][ T5031] rust_binder: Write failure EFAULT in pid:972 [ 132.553883][ T45] usb 2-1: USB disconnect, device number 59 [ 133.295091][ T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 133.455127][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 133.461767][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.470426][ T31] usb 2-1: config 0 has no interface number 0 [ 133.478621][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.488080][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.496458][ T31] usb 2-1: Product: syz [ 133.501782][ T31] usb 2-1: Manufacturer: syz [ 133.507360][ T31] usb 2-1: SerialNumber: syz [ 133.513057][ T31] usb 2-1: config 0 descriptor?? [ 133.519474][ T31] smsc95xx v2.0.0 [ 133.920930][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 133.932104][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.285649][ T5166] 9pnet_fd: Insufficient options for proto=fd [ 134.387487][ T5168] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 134.403137][ T5168] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 134.981261][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 134.981283][ T36] audit: type=1326 audit(2000000289.815:37075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2078ebe9 code=0x0 [ 135.253455][ T5200] input: syz1 as /devices/virtual/input/input22 [ 135.261802][ T36] audit: type=1400 audit(2000000290.095:37076): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=649 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.346742][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.356237][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.380724][ T5205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.380876][ T5204] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 135.823336][ T5207] overlayfs: failed to clone upperpath [ 135.841913][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 135.853258][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 135.865142][ T31] usb 2-1: USB disconnect, device number 60 [ 135.876224][ T5211] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 136.371774][ T36] audit: type=1400 audit(2000000291.205:37077): avc: denied { mounton } for pid=5221 comm="syz.1.1613" path="/proc/978/task" dev="proc" ino=28473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.755202][ T5232] fuse: Unknown parameter 'ÿxk0x0000000000000004' [ 136.771816][ T5234] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1618'. [ 136.798885][ T36] audit: type=1400 audit(2000000291.635:37078): avc: denied { connect } for pid=5237 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.945112][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 137.096970][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.105201][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 137.113790][ T45] usb 3-1: config 13 has an invalid interface number: 90 but max is 0 [ 137.122833][ T45] usb 3-1: config 13 has no interface number 0 [ 137.129156][ T45] usb 3-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 137.142708][ T45] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 137.152154][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.160218][ T45] usb 3-1: Product: syz [ 137.164492][ T45] usb 3-1: Manufacturer: syz [ 137.169371][ T45] usb 3-1: SerialNumber: syz [ 137.378888][ T5228] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 137.386712][ T5228] netlink: 'syz.2.1615': attribute type 6 has an invalid length. [ 137.394520][ T5228] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1615'. [ 137.426855][ T45] usb 3-1: USB disconnect, device number 5 [ 137.484586][ T5263] overlayfs: failed to clone upperpath [ 137.509033][ T5267] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1630'. [ 137.518187][ T5267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1630'. [ 137.995989][ T5282] rust_binder: Write failure EINVAL in pid:143 [ 138.025195][ T5286] tmpfs: Bad value for 'huge' [ 138.112441][ T5298] netlink: 'syz.2.1643': attribute type 29 has an invalid length. [ 138.120800][ T5298] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1643'. [ 138.475109][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 138.627324][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 138.635135][ T45] usb 3-1: can't read configurations, error -71 [ 138.958035][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.967806][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.979414][ T5313] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 138.979435][ T5313] rust_binder: Error while translating object. [ 138.992109][ T5313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.998480][ T5313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984 [ 139.148961][ T36] audit: type=1400 audit(2000000293.985:37079): avc: denied { remount } for pid=5317 comm="syz.2.1651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.197839][ T5327] cgroup: Bad value for 'name' [ 139.205090][ T659] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 139.366249][ T659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.391740][ T659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.405138][ T659] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 139.418023][ T659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.427493][ T659] usb 2-1: config 0 descriptor?? [ 139.673052][ T659] usbhid 2-1:0.0: can't add hid device: -71 [ 139.682480][ T659] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 139.694340][ T659] usb 2-1: USB disconnect, device number 61 [ 140.200149][ T36] audit: type=1400 audit(2000000295.035:37080): avc: denied { bind } for pid=5349 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.236293][ T5357] netlink: 'syz.1.1662': attribute type 30 has an invalid length. [ 140.370246][ T5365] batadv_slave_1: entered promiscuous mode [ 140.508133][ T5380] rust_binder: Write failure EFAULT in pid:189 [ 140.597844][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2565 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.616817][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2578 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.629658][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2580 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.642745][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2578 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.655643][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2562 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.668389][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2565 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.681613][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2565 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.694261][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2574 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.707011][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2574 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.719915][ T5387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=5387 comm=syz.3.1672 [ 140.751915][ T36] audit: type=1400 audit(2000000295.585:37081): avc: denied { map } for pid=5400 comm="syz.3.1676" path="socket:[29988]" dev="sockfs" ino=29988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.755294][ T5401] 9pnet_fd: Insufficient options for proto=fd [ 140.776390][ T36] audit: type=1400 audit(2000000295.585:37082): avc: denied { accept } for pid=5400 comm="syz.3.1676" path="socket:[29988]" dev="sockfs" ino=29988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.835129][ T45] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 140.955167][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.985111][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 141.105067][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 141.110401][ T36] audit: type=1400 audit(2000000295.945:37083): avc: denied { map } for pid=5411 comm="syz.0.1680" path="socket:[29995]" dev="sockfs" ino=29995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 141.133707][ T45] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 141.142157][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.150389][ T31] usb 3-1: config 0 has no interface number 0 [ 141.160661][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.170098][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.178403][ T31] usb 3-1: Product: syz [ 141.182885][ T31] usb 3-1: Manufacturer: syz [ 141.187608][ T31] usb 3-1: SerialNumber: syz [ 141.193197][ T31] usb 3-1: config 0 descriptor?? [ 141.199098][ T31] smsc95xx v2.0.0 [ 141.285072][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 141.290517][ T45] usb usb2-port1: attempt power cycle [ 141.332392][ T5417] netlink: 'syz.3.1682': attribute type 4 has an invalid length. [ 141.340217][ T5417] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1682'. [ 141.600456][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 141.611325][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 141.635205][ T45] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 141.655402][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 141.785122][ T45] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 141.805516][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 141.811202][ T45] usb usb2-port1: unable to enumerate USB device [ 142.408280][ T36] audit: type=1326 audit(2000000297.245:37084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.1694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 143.019974][ T5454] overlayfs: failed to clone upperpath [ 143.133391][ T5469] overlayfs: failed to clone upperpath [ 143.198544][ T36] audit: type=1400 audit(2000000298.035:37085): avc: denied { setopt } for pid=5477 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.226631][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 143.237520][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.246741][ T31] usb 3-1: USB disconnect, device number 8 [ 143.368772][ T5364] batadv_slave_1: left promiscuous mode [ 143.370314][ T5494] overlayfs: failed to clone upperpath [ 143.765079][ T45] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 143.780804][ T5514] overlay: ./file0 is not a directory [ 143.915046][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 143.921393][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 231, using maximum allowed: 30 [ 143.932417][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 231 [ 143.945723][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 143.954793][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.963825][ T45] usb 2-1: config 0 descriptor?? [ 144.276811][ T36] audit: type=1400 audit(2000000299.115:37086): avc: denied { ioctl } for pid=5540 comm="syz.2.1729" path="socket:[30179]" dev="sockfs" ino=30179 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.381400][ T5560] overlayfs: failed to clone upperpath [ 144.672006][ T36] audit: type=1400 audit(2000000299.505:37087): avc: denied { setopt } for pid=5586 comm="syz.3.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.520517][ T5622] incfs: Options parsing error. -22 [ 145.525807][ T5622] incfs: mount failed -22 [ 145.540209][ T5627] overlayfs: failed to clone upperpath [ 145.648425][ T5644] 9pnet_fd: Insufficient options for proto=fd [ 145.734907][ T659] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96 [ 145.745282][ T36] audit: type=1400 audit(2000000300.585:37088): avc: denied { read } for pid=5653 comm="syz.2.1762" path="socket:[30341]" dev="sockfs" ino=30341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.795184][ T36] audit: type=1400 audit(2000000300.635:37089): avc: denied { nlmsg_read } for pid=5656 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.398291][ T659] usb 2-1: USB disconnect, device number 66 [ 146.426090][ T36] audit: type=1400 audit(2000000301.265:37090): avc: denied { listen } for pid=5661 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.446310][ T36] audit: type=1400 audit(2000000301.265:37091): avc: denied { accept } for pid=5661 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.748998][ T5678] proc: Unknown parameter 'ethtool' [ 146.865055][ T659] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 147.016651][ T659] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.028754][ T659] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.035443][ T659] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 147.044887][ T659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.053950][ T659] usb 2-1: config 0 descriptor?? [ 147.300076][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 147.398217][ T36] audit: type=1400 audit(2000000562.230:37092): avc: denied { ioctl } for pid=5689 comm="syz.2.1775" path="socket:[30401]" dev="sockfs" ino=30401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.666741][ T659] usbhid 2-1:0.0: can't add hid device: -71 [ 147.672906][ T659] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.682701][ T659] usb 2-1: USB disconnect, device number 67 [ 147.837545][ T36] audit: type=1326 audit(2000000562.670:37093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bc1b8ebe9 code=0x0 [ 148.135079][ T659] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 148.285071][ T659] usb 2-1: Using ep0 maxpacket: 32 [ 148.292095][ T659] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 148.300294][ T659] usb 2-1: config 0 has no interface number 0 [ 148.308280][ T659] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 148.317489][ T659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.325843][ T659] usb 2-1: Product: syz [ 148.330125][ T659] usb 2-1: Manufacturer: syz [ 148.335059][ T659] usb 2-1: SerialNumber: syz [ 148.340411][ T659] usb 2-1: config 0 descriptor?? [ 148.346242][ T659] smsc95xx v2.0.0 [ 148.747856][ T659] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 148.758780][ T659] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.824776][ T36] audit: type=1400 audit(2000000563.650:37094): avc: denied { mount } for pid=5724 comm="syz.3.1787" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 148.847544][ T5727] overlayfs: failed to resolve '/stats': -2 [ 149.422684][ T5738] overlayfs: failed to resolve './file2': -2 [ 149.512986][ T36] audit: type=1326 audit(2000000564.340:37095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.3.1800" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 150.171603][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.180287][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.438042][ T36] audit: type=1400 audit(2000000565.270:37096): avc: denied { lock } for pid=5796 comm="syz.2.1812" path="socket:[30501]" dev="sockfs" ino=30501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 150.579758][ T36] audit: type=1400 audit(2000000565.410:37097): avc: denied { map } for pid=5822 comm="syz.0.1820" path="pipe:[30884]" dev="pipefs" ino=30884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 150.666245][ T659] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 150.677260][ T659] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 150.686811][ T659] usb 2-1: USB disconnect, device number 68 [ 151.096379][ T36] audit: type=1400 audit(2000000565.930:37098): avc: denied { mount } for pid=5832 comm="syz.0.1824" name="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.144194][ T36] audit: type=1326 audit(2000000565.970:37099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.1828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2078ebe9 code=0x0 [ 151.182066][ T5851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.182830][ T5851] rust_binder: Error while translating object. [ 151.189542][ T5851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 151.195777][ T5851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1030 [ 151.223500][ T5863] rust_binder: 1033: no such ref 2 [ 151.233869][ T36] audit: type=1400 audit(2000000566.060:37100): avc: denied { map } for pid=5860 comm="syz.1.1835" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 151.300608][ T36] audit: type=1400 audit(2000000566.130:37101): avc: denied { accept } for pid=5874 comm="syz.0.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.375324][ T36] audit: type=1400 audit(2000000566.210:37102): avc: denied { write } for pid=5878 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.379172][ T5879] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1840'. [ 151.450137][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 151.715234][ T5915] 9pnet_fd: Insufficient options for proto=fd [ 151.731126][ T5917] tmpfs: Unknown parameter 'quota' [ 151.737549][ T5917] overlayfs: failed to clone upperpath [ 151.775364][ T36] audit: type=1326 audit(2000000566.610:37103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5924 comm="syz.3.1854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 152.189496][ T5928] fuse: Unknown parameter '^f6iƒˆ’00000000000000000000' [ 152.503980][ T36] audit: type=1400 audit(2000000567.330:37104): avc: denied { mounton } for pid=5948 comm="syz.1.1863" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.566748][ T5959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.595263][ T5965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.888671][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 152.922138][ T5988] netlink: 680 bytes leftover after parsing attributes in process `syz.0.1877'. [ 153.458580][ T36] audit: type=1400 audit(2000000568.291:37105): avc: denied { mount } for pid=6021 comm="syz.2.1892" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 153.501976][ T659] rust_binder: 6018: removing orphan mapping 0:4120 [ 153.515922][ T6030] rust_binder: Error while translating object. [ 153.515980][ T6030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.522794][ T6030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1067 [ 153.540682][ T6034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.602247][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 153.618555][ T6036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1069 [ 153.691771][ T6051] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1904'. [ 153.711378][ T36] audit: type=1400 audit(2000000568.541:37106): avc: denied { map } for pid=6050 comm="syz.0.1904" path="socket:[32157]" dev="sockfs" ino=32157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 153.748869][ T6055] overlayfs: empty lowerdir [ 153.756234][ T36] audit: type=1400 audit(2000000568.591:37107): avc: denied { connect } for pid=6054 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.805873][ T6071] incfs: Error accessing: ./file0/file0. [ 153.811751][ T6071] incfs: mount failed -20 [ 153.893027][ T6079] selinux_netlink_send: 1 callbacks suppressed [ 153.893049][ T6079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6079 comm=syz.3.1914 [ 153.963462][ T6083] __vm_enough_memory: pid: 6083, comm: syz.3.1916, bytes: 21200028835840 not enough memory for the allocation [ 154.277704][ T6105] fuse: Unknown parameter '017777777777777777777770x0000000000000006' [ 154.317791][ T6111] overlayfs: failed to clone upperpath [ 154.406205][ T6124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.406230][ T6124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.422954][ T6124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.422987][ T6124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.824708][ T659] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 154.985348][ T659] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.996507][ T659] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 155.008344][ T659] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.015956][ T659] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 155.028914][ T659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.040092][ T659] usb 2-1: config 0 descriptor?? [ 155.045935][ T6152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.070677][ T6197] 9pnet_fd: Insufficient options for proto=fd [ 155.104017][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 155.263270][ T659] usb 2-1: string descriptor 0 read error: -71 [ 155.271417][ T659] usbhid 2-1:0.0: can't add hid device: -71 [ 155.277454][ T659] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.286565][ T659] usb 2-1: USB disconnect, device number 69 [ 155.821791][ T6240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6240 comm=syz.1.1970 [ 156.208249][ T6250] overlayfs: failed to clone upperpath [ 156.228650][ T6255] netlink: 'syz.0.1975': attribute type 27 has an invalid length. [ 156.241168][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 156.404297][ T6261] tmpfs: Bad value for 'size' [ 156.419629][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 156.419648][ T36] audit: type=1400 audit(2000000571.251:37116): avc: denied { append } for pid=6263 comm="syz.1.1978" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.531581][ T6271] fuse: Unknown parameter '0x0000000000000005' [ 156.794015][ T31] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 156.944017][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 156.951909][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.966206][ T31] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 156.976294][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 156.987939][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.997679][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.008898][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 157.017510][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.026683][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.035004][ T31] usb 2-1: Product: syz [ 157.039200][ T31] usb 2-1: Manufacturer: syz [ 157.043989][ T31] usb 2-1: SerialNumber: syz [ 157.452854][ T6273] binder: Bad value for 'stats' [ 157.459051][ T31] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 157.467346][ T31] usb 2-1: 2:1 : format type 9 is not supported yet [ 157.478699][ T31] usb 2-1: USB disconnect, device number 70 [ 157.491599][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.516294][ T36] audit: type=1400 audit(2000000572.351:37117): avc: denied { create } for pid=6292 comm="syz.3.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 158.082836][ T6324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1127 [ 158.155274][ T36] audit: type=1400 audit(2000000572.991:37118): avc: denied { remount } for pid=6336 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.184537][ T36] audit: type=1400 audit(2000000573.001:37119): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.191396][ T6339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1136 [ 158.213840][ T6343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.224299][ T36] audit: type=1400 audit(2000000573.061:37120): avc: denied { write } for pid=6342 comm="syz.1.2008" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 158.354006][ T6349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.462610][ T36] audit: type=1400 audit(2000000573.291:37121): avc: denied { setopt } for pid=6363 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.967228][ T36] audit: type=1400 audit(2000000573.801:37122): avc: denied { bind } for pid=6375 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.987037][ T36] audit: type=1400 audit(2000000573.801:37123): avc: denied { node_bind } for pid=6375 comm="syz.3.2021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 159.022139][ T6380] /dev/loop0: Can't lookup blockdev [ 159.038958][ T6383] overlayfs: missing 'lowerdir' [ 159.274394][ T6401] mmap: syz.1.2030 (6401): VmData 20824064 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 159.357367][ T36] audit: type=1400 audit(2000000574.191:37124): avc: denied { sqpoll } for pid=6411 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.360604][ T6412] binder: Binderfs stats mode cannot be changed during a remount [ 159.406640][ T36] audit: type=1400 audit(2000000574.241:37125): avc: denied { relabelfrom } for pid=6417 comm="syz.1.2036" name="NETLINK" dev="sockfs" ino=32794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.554082][ T6489] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2062'. [ 160.694394][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 160.720762][ T6503] overlayfs: failed to clone upperpath [ 160.750242][ T6508] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 160.793638][ T9] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 160.943531][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.073502][ T9] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 161.223536][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.229035][ T9] usb usb2-port1: attempt power cycle [ 161.354915][ T6533] overlayfs: failed to resolve './file1': -2 [ 161.573409][ T9] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 161.593811][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.607115][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 161.697923][ T6560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.706993][ T6560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.723411][ T9] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 161.743730][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.749443][ T9] usb usb2-port1: unable to enumerate USB device [ 161.751500][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 161.766791][ T6566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6566 comm=syz.3.2089 [ 162.692714][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 162.692735][ T36] audit: type=1400 audit(2000000577.522:37134): avc: denied { create } for pid=6635 comm="syz.0.2112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.857341][ T6651] netlink: 'syz.3.2116': attribute type 12 has an invalid length. [ 163.463458][ T6681] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2127'. [ 163.580563][ T36] audit: type=1400 audit(2000000578.402:37135): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 163.633387][ T6706] bridge0: port 3(veth0_to_bond) entered blocking state [ 163.640783][ T6706] bridge0: port 3(veth0_to_bond) entered disabled state [ 163.647935][ T6706] veth0_to_bond: entered allmulticast mode [ 163.654309][ T6706] veth0_to_bond: entered promiscuous mode [ 163.677780][ T6713] overlayfs: failed to clone upperpath [ 163.691471][ T36] audit: type=1326 audit(2000000578.522:37136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.3.2136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 164.146463][ T36] audit: type=1326 audit(2000000578.982:37137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2078ebe9 code=0x7fc00000 [ 164.740260][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 164.755005][ T36] audit: type=1400 audit(2000000000.200:37138): avc: denied { write } for pid=6772 comm="syz.1.2156" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.805215][ T36] audit: type=1400 audit(2000000000.250:37139): avc: denied { mount } for pid=6774 comm="syz.1.2157" name="/" dev="pstore" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 164.806053][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.883984][ T6776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 164.890659][ T6776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1207 [ 165.056642][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 165.645691][ T36] audit: type=1400 audit(2000000001.090:37140): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 165.827596][ T46] bridge_slave_1: left allmulticast mode [ 165.833464][ T46] bridge_slave_1: left promiscuous mode [ 165.844799][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.852677][ T46] bridge_slave_0: left allmulticast mode [ 165.858817][ T46] bridge_slave_0: left promiscuous mode [ 165.864736][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.003189][ T46] tipc: Disabling bearer [ 166.016179][ T46] tipc: Left network mode [ 166.030632][ T46] veth1_macvtap: left promiscuous mode [ 166.037473][ T46] veth0_vlan: left promiscuous mode [ 166.099336][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.108911][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.117710][ T6786] bridge_slave_0: entered allmulticast mode [ 166.124358][ T6786] bridge_slave_0: entered promiscuous mode [ 166.131024][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.138244][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.145677][ T6786] bridge_slave_1: entered allmulticast mode [ 166.152347][ T6786] bridge_slave_1: entered promiscuous mode [ 166.198891][ T36] audit: type=1400 audit(2000000001.640:37141): avc: denied { wake_alarm } for pid=6825 comm="syz.2.2175" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.257443][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.264838][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.272120][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.279204][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.299705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.307199][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.316747][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.323947][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.333342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.340850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.364428][ T6786] veth0_vlan: entered promiscuous mode [ 166.381811][ T6786] veth1_macvtap: entered promiscuous mode [ 166.454541][ T6867] wireguard: wg2: Could not create IPv4 socket [ 166.529824][ T6870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.698729][ T6910] 9pnet_fd: Insufficient options for proto=fd [ 167.633040][ T604] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 167.663545][ T6976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6976 comm=syz.3.2224 [ 167.676915][ T6977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6977 comm=syz.3.2224 [ 167.691163][ T6976] overlayfs: failed to clone lowerpath [ 167.794891][ T604] usb 5-1: not running at top speed; connect to a high speed hub [ 167.814086][ T604] usb 5-1: config 9 has an invalid interface number: 9 but max is 2 [ 167.822221][ T604] usb 5-1: config 9 has an invalid interface number: 70 but max is 2 [ 167.830438][ T604] usb 5-1: config 9 has an invalid interface number: 59 but max is 2 [ 167.838759][ T604] usb 5-1: config 9 has no interface number 0 [ 167.844986][ T604] usb 5-1: config 9 has no interface number 1 [ 167.851229][ T604] usb 5-1: config 9 has no interface number 2 [ 167.857505][ T604] usb 5-1: config 9 interface 9 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 167.868756][ T604] usb 5-1: config 9 interface 9 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 167.879817][ T604] usb 5-1: config 9 interface 9 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 167.890515][ T604] usb 5-1: config 9 interface 9 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 167.901404][ T604] usb 5-1: config 9 interface 70 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 167.912464][ T604] usb 5-1: config 9 interface 70 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 167.923106][ T604] usb 5-1: config 9 interface 70 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 167.933944][ T604] usb 5-1: config 9 interface 70 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 167.944619][ T604] usb 5-1: config 9 interface 70 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.955623][ T604] usb 5-1: config 9 interface 70 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 167.966290][ T604] usb 5-1: config 9 interface 70 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 167.976935][ T604] usb 5-1: config 9 interface 70 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 167.988785][ T604] usb 5-1: config 9 interface 70 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 167.999533][ T604] usb 5-1: config 9 interface 59 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 168.010374][ T604] usb 5-1: config 9 interface 59 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 168.021123][ T604] usb 5-1: config 9 interface 59 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 168.032389][ T604] usb 5-1: config 9 interface 59 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 168.043209][ T604] usb 5-1: config 9 interface 59 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 168.054052][ T604] usb 5-1: config 9 interface 59 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 168.064783][ T604] usb 5-1: config 9 interface 9 has no altsetting 0 [ 168.071468][ T604] usb 5-1: config 9 interface 59 has no altsetting 0 [ 168.079719][ T604] usb 5-1: New USB device found, idVendor=2040, idProduct=d863, bcdDevice=5a.ec [ 168.089189][ T604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.097644][ T604] usb 5-1: Product: ࡃ [ 168.101921][ T604] usb 5-1: Manufacturer: äŽè³¢îƒè–—剚蹠왟䴔ဨꦧ툤樵䧚扇㤶㩉ᒳ㑉áŠå´œçŠë©„嫽֩à§ë‚¡ê‰™ì’´á€ë¦–갸꘮ґ冩啶벊蚨霹 [ 168.116867][ T604] usb 5-1: SerialNumber:  [ 168.226806][ T36] audit: type=1326 audit(2000000003.670:37142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.3.2227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 168.332944][ T604] usb 5-1: USB disconnect, device number 2 [ 168.695515][ T7002] 9pnet_fd: Insufficient options for proto=fd [ 168.904987][ T7004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.905022][ T7004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.911494][ T7004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.911513][ T7004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.183044][ T45] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 169.354449][ T45] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 169.362725][ T45] usb 5-1: config 0 has no interface number 0 [ 169.369126][ T45] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 169.380307][ T45] usb 5-1: config 0 interface 214 has no altsetting 0 [ 169.388629][ T45] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 169.397760][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.405804][ T45] usb 5-1: Product: syz [ 169.409977][ T45] usb 5-1: Manufacturer: syz [ 169.414666][ T45] usb 5-1: SerialNumber: syz [ 169.419823][ T45] usb 5-1: config 0 descriptor?? [ 169.425125][ T7009] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.633097][ T7009] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.421291][ T36] audit: type=1400 audit(2000000005.860:37143): avc: denied { search } for pid=7094 comm="syz.0.2267" name="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.443945][ T36] audit: type=1400 audit(2000000005.860:37144): avc: denied { read } for pid=7094 comm="syz.0.2267" name="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.467130][ T36] audit: type=1400 audit(2000000005.860:37145): avc: denied { open } for pid=7094 comm="syz.0.2267" path="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.593112][ T7100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.601730][ T7100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.695915][ T36] audit: type=1400 audit(2000000006.140:37146): avc: denied { setattr } for pid=7101 comm="syz.2.2269" name="" dev="pipefs" ino=34866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 170.753661][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 170.765074][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 171.121165][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2282'. [ 171.170465][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 171.183653][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.195168][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.206524][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.217904][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.229270][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 171.240680][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.253541][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 171.265326][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 171.276675][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 171.287974][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 171.301669][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 171.323399][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 171.343316][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 171.357985][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 171.371058][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 171.383078][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 171.395288][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 171.416998][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 171.433428][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 171.444986][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 171.456420][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 171.473079][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 171.490901][ T45] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, e2:96:e9:b5:af:b5 [ 171.508574][ T45] usb 5-1: USB disconnect, device number 3 [ 171.529454][ T36] audit: type=1400 audit(2000000006.960:37147): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 171.554244][ T45] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 171.577214][ T36] audit: type=1400 audit(2000000006.960:37148): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.613039][ T36] audit: type=1400 audit(2000000006.960:37149): avc: denied { read } for pid=148 comm="dhcpcd" name="n19" dev="tmpfs" ino=3734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.635915][ T36] audit: type=1400 audit(2000000006.960:37150): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=3734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.679375][ T36] audit: type=1400 audit(2000000006.960:37151): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=3734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.743193][ T7189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2295'. [ 171.966930][ T7213] wg0: entered allmulticast mode [ 172.033874][ T7220] overlayfs: failed to clone upperpath [ 172.039752][ T7197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.078255][ T7224] netlink: 'syz.3.2304': attribute type 16 has an invalid length. [ 172.092687][ T7224] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 172.100717][ T7224] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.2304'. [ 172.251512][ T7247] overlayfs: failed to clone upperpath [ 172.276462][ T7249] overlayfs: failed to clone upperpath [ 172.284097][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.524164][ T7255] __vm_enough_memory: pid: 7255, comm: syz.2.2315, bytes: 21200527478784 not enough memory for the allocation [ 172.861436][ T7264] fuse: Bad value for 'fd' [ 173.298662][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 173.298680][ T36] audit: type=1400 audit(2000000008.740:37167): avc: denied { create } for pid=7308 comm="syz.2.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.635839][ T7375] overlayfs: failed to clone upperpath [ 174.654607][ T7375] overlayfs: failed to clone upperpath [ 174.816199][ T7384] rust_binder: Error while translating object. [ 174.816253][ T7384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.816395][ T36] audit: type=1400 audit(2000000010.260:37168): avc: denied { read } for pid=94 comm="acpid" name="event5" dev="devtmpfs" ino=681 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 174.822714][ T7384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 174.843828][ T36] audit: type=1400 audit(2000000010.260:37169): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=681 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 174.898292][ T36] audit: type=1400 audit(2000000010.260:37170): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=681 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 174.927008][ T36] audit: type=1400 audit(2000000010.340:37171): avc: denied { load_policy } for pid=7392 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.991604][ T7397] rust_binder: Error while translating object. [ 174.991719][ T7397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 174.998025][ T7397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 175.107374][ T36] audit: type=1400 audit(2000000010.550:37172): avc: denied { getopt } for pid=7403 comm="syz.4.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.137471][ T36] audit: type=1400 audit(2000000010.550:37173): avc: denied { ioctl } for pid=7403 comm="syz.4.2369" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 175.166503][ T36] audit: type=1400 audit(2000000010.610:37174): avc: denied { map } for pid=7409 comm="syz.4.2371" path="socket:[39727]" dev="sockfs" ino=39727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.191221][ T36] audit: type=1400 audit(2000000010.610:37175): avc: denied { read } for pid=7409 comm="syz.4.2371" path="socket:[39727]" dev="sockfs" ino=39727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.222569][ T36] audit: type=1326 audit(2000000010.660:37176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.4.2372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c32f8ebe9 code=0x0 [ 175.276028][ T7414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.303221][ T7418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.309992][ T7418] rust_binder: Error in use_page_slow: ESRCH [ 175.316807][ T7418] rust_binder: use_range failure ESRCH [ 175.322875][ T7418] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 175.328388][ T7418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.336357][ T7418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 175.346555][ T7418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.027998][ T7456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=7456 comm=syz.2.2386 [ 176.047157][ T7456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7456 comm=syz.2.2386 [ 176.266959][ T7475] batadv_slave_1: entered promiscuous mode [ 176.325339][ T7474] batadv_slave_1: left promiscuous mode [ 176.841518][ T7500] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 176.849338][ T7500] netlink: 'syz.0.2401': attribute type 2 has an invalid length. [ 177.263070][ T45] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 177.391892][ T7516] fuse: Bad value for 'rootmode' [ 177.418623][ T45] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 177.427569][ T45] usb 5-1: config 0 has no interface number 0 [ 177.434780][ T45] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 177.445798][ T45] usb 5-1: config 0 interface 214 has no altsetting 0 [ 177.454330][ T45] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 177.463674][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.471820][ T45] usb 5-1: Product: syz [ 177.476102][ T45] usb 5-1: Manufacturer: syz [ 177.480727][ T45] usb 5-1: SerialNumber: syz [ 177.487221][ T45] usb 5-1: config 0 descriptor?? [ 177.492821][ T7505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.641650][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 177.737841][ T7505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.191347][ T7548] overlayfs: failed to clone upperpath [ 178.263924][ T7560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.272901][ T7560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.336361][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 178.336374][ T36] audit: type=1326 audit(2000000013.780:37180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.3.2420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 178.366105][ T36] audit: type=1326 audit(2000000013.790:37181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.3.2420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa978ebe9 code=0x0 [ 178.842890][ T7571] sit0: entered promiscuous mode [ 178.851722][ T7571] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 178.863409][ T7571] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2423'. [ 179.049463][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.058163][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.073702][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 179.084851][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 179.095730][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 179.106851][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 179.117950][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.129024][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.140479][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.151630][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.162876][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 179.174096][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.186250][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 179.197554][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 179.208626][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 179.219873][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 179.231175][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 179.242586][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 179.254048][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 179.266560][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.278099][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.289600][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.291663][ T7584] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 179.300607][ T36] audit: type=1400 audit(2000000014.730:37182): avc: denied { mounton } for pid=7582 comm="syz.3.2428" path="/file0" dev="ramfs" ino=40971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 179.335261][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 179.338825][ T7584] incfs: Backing dir is not set, filesystem can't be mounted. [ 179.346900][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.354846][ T7584] incfs: mount failed -2 [ 179.366053][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.381062][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 179.394622][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 179.407645][ T45] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 179.423354][ T45] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 86:4d:28:59:70:9f [ 179.445710][ T45] usb 5-1: USB disconnect, device number 5 [ 179.458235][ T45] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 179.599436][ T7631] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 179.609402][ T36] audit: type=1400 audit(2000000015.050:37183): avc: denied { relabelto } for pid=7630 comm="syz.4.2440" name="cgroup" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 179.648686][ T7631] rust_binder: Fixups oob 164 166 363 196 [ 179.648715][ T7631] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 179.650255][ T36] audit: type=1400 audit(2000000015.050:37184): avc: denied { associate } for pid=7630 comm="syz.4.2440" name="cgroup" dev="tmpfs" ino=134 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 179.658508][ T7631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.664198][ T36] audit: type=1400 audit(2000000015.080:37185): avc: granted { setsecparam } for pid=7630 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 179.711693][ T7631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 179.821601][ T36] audit: type=1400 audit(2000000015.260:37186): avc: denied { unlink } for pid=6786 comm="syz-executor" name="cgroup" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 179.832432][ T7648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.969013][ T7651] overlayfs: failed to clone upperpath [ 179.985843][ T36] audit: type=1400 audit(2000000015.430:37187): avc: denied { associate } for pid=7650 comm="syz.0.2442" name="cpu.stat" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 180.068470][ T7663] veth1_vlan: entered promiscuous mode [ 180.139516][ T7675] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 180.148097][ T7675] rust_binder: Write failure EINVAL in pid:80 [ 180.245725][ T7687] rust_binder: 86: no such ref 2 [ 180.371822][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 180.386906][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 180.410030][ T7715] overlayfs: failed to clone upperpath [ 180.664878][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 180.673882][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 180.873904][ T7742] overlayfs: failed to clone lowerpath [ 180.881159][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 181.345649][ T7808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2495'. [ 181.730043][ T7826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.731338][ T7826] netlink: 'syz.4.2500': attribute type 4 has an invalid length. [ 182.179337][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.186784][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.194060][ T7848] bridge_slave_0: entered allmulticast mode [ 182.200579][ T7848] bridge_slave_0: entered promiscuous mode [ 182.208340][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.215524][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.222708][ T7848] bridge_slave_1: entered allmulticast mode [ 182.229161][ T7848] bridge_slave_1: entered promiscuous mode [ 182.240392][ T46] bridge_slave_1: left allmulticast mode [ 182.246248][ T46] bridge_slave_1: left promiscuous mode [ 182.251922][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.259822][ T46] bridge_slave_0: left allmulticast mode [ 182.265599][ T46] bridge_slave_0: left promiscuous mode [ 182.271521][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.297037][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.305897][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.312275][ T46] bridge0 (unregistering): left allmulticast mode [ 182.427248][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 182.453620][ T46] veth1_macvtap: left promiscuous mode [ 182.459495][ T46] veth0_vlan: left promiscuous mode [ 182.464146][ T7872] fuse: Unknown parameter 'grouží›\p_id' [ 182.471913][ T36] audit: type=1326 audit(2000000017.910:37188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7871 comm="syz.2.2516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a64b8ebe9 code=0x0 [ 182.564738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.571842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.581612][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.588779][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.613533][ T7848] veth0_vlan: entered promiscuous mode [ 182.624455][ T7848] veth1_macvtap: entered promiscuous mode [ 182.697134][ T7889] futex_wake_op: syz.3.2519 tries to shift op by 32; fix this program [ 182.703080][ T604] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.722587][ T7891] tipc: Started in network mode [ 182.728471][ T7891] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 182.737447][ T7891] tipc: Enabling of bearer rejected, failed to enable media [ 182.863061][ T604] usb 5-1: Using ep0 maxpacket: 16 [ 182.871431][ T604] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.888126][ T604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.899335][ T604] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.909152][ T604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.923797][ T604] usb 5-1: Product: syz [ 182.930366][ T604] usb 5-1: Manufacturer: syz [ 182.938803][ T604] usb 5-1: SerialNumber: syz [ 182.948616][ T7913] overlayfs: failed to resolve './file1': -2 [ 183.149514][ T604] usb 5-1: 0:2 : does not exist [ 183.156565][ T604] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 183.168147][ T604] usb 5-1: USB disconnect, device number 6 [ 183.400815][ T36] audit: type=1400 audit(2000000018.840:37189): avc: denied { listen } for pid=7922 comm="syz.3.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.426882][ T7927] overlayfs: conflicting options: userxattr,metacopy=on [ 183.703617][ T7946] netlink: 'syz.4.2539': attribute type 27 has an invalid length. [ 183.752051][ T7946] tc_dump_action: action bad kind [ 184.286029][ T7984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7984 comm=syz.4.2557 [ 184.342635][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 184.586599][ T8014] overlayfs: empty lowerdir [ 184.591258][ T8013] overlayfs: empty lowerdir [ 184.966141][ T8047] overlayfs: failed to clone lowerpath [ 184.972867][ T8047] overlayfs: failed to clone lowerpath [ 185.376206][ T8084] netlink: 'syz.2.2592': attribute type 4 has an invalid length. [ 185.809625][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.816906][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.824190][ T8095] bridge_slave_0: entered allmulticast mode [ 185.830389][ T8095] bridge_slave_0: entered promiscuous mode [ 185.837564][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.844754][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.851908][ T8095] bridge_slave_1: entered allmulticast mode [ 185.858254][ T8095] bridge_slave_1: entered promiscuous mode [ 185.867939][ T46] bridge_slave_1: left allmulticast mode [ 185.873865][ T46] bridge_slave_1: left promiscuous mode [ 185.879868][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.887985][ T46] bridge_slave_0: left allmulticast mode [ 185.893737][ T46] bridge_slave_0: left promiscuous mode [ 185.899514][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.993334][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.000580][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.008110][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.015327][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.025753][ T46] tipc: Disabling bearer [ 186.031587][ T46] tipc: Left network mode [ 186.044639][ T46] veth1_macvtap: left promiscuous mode [ 186.050150][ T46] veth0_vlan: left promiscuous mode [ 186.066739][ T8106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2597'. [ 186.177585][ T8095] veth0_vlan: entered promiscuous mode [ 186.194825][ T8095] veth1_macvtap: entered promiscuous mode [ 186.260979][ T8132] ------------[ cut here ]------------ [ 186.266602][ T8132] WARNING: CPU: 0 PID: 8132 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 186.276159][ T8132] Modules linked in: [ 186.280254][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.0.2596 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 186.291945][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 186.302077][ T8132] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 186.308146][ T8132] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b1 25 ee 05 00 0f 85 be 00 00 00 c6 05 a4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 186.315151][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2610'. [ 186.327930][ T8132] RSP: 0018:ffffc9000faf75a0 EFLAGS: 00010246 [ 186.343320][ T8132] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 186.351413][ T8132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000faf7658 [ 186.359522][ T8132] RBP: ffffc9000faf76c8 R08: ffffc9000faf7657 R09: 0000000000000000 [ 186.367683][ T8132] R10: ffffc9000faf7640 R11: fffff52001f5eecb R12: ffffc9000faf75e0 [ 186.375722][ T8132] R13: dffffc0000000000 R14: 1ffff92001f5eeb8 R15: 0000000000000000 [ 186.383872][ T8132] FS: 00007f603b3d46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 186.392838][ T8132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.399527][ T8132] CR2: 000020000000f000 CR3: 0000000139d58000 CR4: 00000000003526b0 [ 186.407655][ T8132] DR0: 0000000000000006 DR1: 0000000000000004 DR2: 0000000000006d33 [ 186.415811][ T8132] DR3: 0000000000000404 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 186.423883][ T8132] Call Trace: [ 186.427193][ T8132] [ 186.430155][ T8132] ? do_syscall_64+0x58/0xf0 [ 186.434927][ T8132] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.441048][ T8132] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 186.446873][ T8132] ? hashtab_init+0xdb/0x1f0 [ 186.451486][ T8132] ___kmalloc_large_node+0x9c/0x1d0 [ 186.456740][ T8132] ? hashtab_init+0xdb/0x1f0 [ 186.461345][ T8132] __kmalloc_large_node_noprof+0x1e/0xe0 [ 186.467052][ T8132] ? hashtab_init+0xdb/0x1f0 [ 186.471716][ T8132] __kmalloc_noprof+0x26d/0x450 [ 186.476785][ T8132] hashtab_init+0xdb/0x1f0 [ 186.481260][ T8132] ? common_read+0x16d/0x480 [ 186.485912][ T8132] symtab_init+0x44/0x70 [ 186.490176][ T8132] common_read+0x1de/0x480 [ 186.494630][ T8132] ? __cfi_common_read+0x10/0x10 [ 186.499592][ T8132] ? hashtab_init+0x105/0x1f0 [ 186.504316][ T8132] policydb_read+0xaab/0x28c0 [ 186.509106][ T8132] ? kasan_save_alloc_info+0x40/0x50 [ 186.514423][ T8132] ? __cfi_policydb_read+0x10/0x10 [ 186.519654][ T8132] ? security_load_policy+0x128/0x12f0 [ 186.525190][ T8132] security_load_policy+0x162/0x12f0 [ 186.530575][ T8132] ? irqentry_exit+0x4a/0x60 [ 186.535202][ T8132] ? exc_page_fault+0x66/0xc0 [ 186.539915][ T8132] ? asm_exc_page_fault+0x2b/0x30 [ 186.544987][ T8132] ? __cfi_security_load_policy+0x10/0x10 [ 186.550816][ T8132] ? rep_movs_alternative+0x4a/0xa0 [ 186.556148][ T8132] sel_write_load+0x298/0x5e0 [ 186.560844][ T8132] ? futex_wait+0x29a/0x7a0 [ 186.565439][ T8132] ? __cfi_sel_write_load+0x10/0x10 [ 186.570667][ T8132] ? __cfi_futex_wait+0x10/0x10 [ 186.575566][ T8132] ? bpf_lsm_file_permission+0xd/0x20 [ 186.580960][ T8132] ? __cfi_sel_write_load+0x10/0x10 [ 186.586208][ T8132] vfs_write+0x3c0/0xe80 [ 186.590468][ T8132] ? __cfi_vfs_write+0x10/0x10 [ 186.595361][ T8132] ? __kasan_check_write+0x18/0x20 [ 186.600590][ T8132] ? mutex_lock+0x92/0x1c0 [ 186.603071][ T1612] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 186.605084][ T8132] ? __cfi_mutex_lock+0x10/0x10 [ 186.617482][ T8132] ? __fget_files+0x2c5/0x340 [ 186.622188][ T8132] ksys_write+0x141/0x250 [ 186.626568][ T8132] ? xfd_validate_state+0x68/0x150 [ 186.631690][ T8132] ? __cfi_ksys_write+0x10/0x10 [ 186.636581][ T8132] ? __kasan_check_write+0x18/0x20 [ 186.641725][ T8132] ? fpregs_restore_userregs+0x11d/0x260 [ 186.647419][ T8132] __x64_sys_write+0x7f/0x90 [ 186.652067][ T8132] x64_sys_call+0x271c/0x2ee0 [ 186.656791][ T8132] do_syscall_64+0x58/0xf0 [ 186.661234][ T8132] ? clear_bhb_loop+0x50/0xa0 [ 186.666003][ T8132] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.671927][ T8132] RIP: 0033:0x7f603a58ebe9 [ 186.676414][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.696318][ T8132] RSP: 002b:00007f603b3d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.704805][ T8132] RAX: ffffffffffffffda RBX: 00007f603a7b5fa0 RCX: 00007f603a58ebe9 [ 186.712915][ T8132] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000005 [ 186.720951][ T8132] RBP: 00007f603a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 186.729117][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.737221][ T8132] R13: 00007f603a7b6038 R14: 00007f603a7b5fa0 R15: 00007fffa781ce48 [ 186.745276][ T8132] [ 186.748402][ T8132] ---[ end trace 0000000000000000 ]--- [ 186.756130][ T8132] SELinux: failed to load policy [ 186.785600][ T1612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.795779][ T1612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.804735][ T1612] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.819163][ T1612] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.828661][ T1612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.836684][ T1612] usb 1-1: Product: syz [ 186.840859][ T1612] usb 1-1: Manufacturer: syz [ 186.845978][ T1612] usb 1-1: SerialNumber: syz [ 186.851967][ T1612] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 186.859693][ T1612] cdc_mbim 1-1:1.0: bind() failure [ 187.057265][ T9] usb 1-1: USB disconnect, device number 35