last executing test programs: 2m48.598048048s ago: executing program 0 (id=424): ioprio_set$uid(0x3, 0x0, 0x2004) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) io_submit(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x42040000, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0xfffffffe, 0xfffffffc, 0x5639, 0xfffffff9}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40806685, 0x0) 2m45.473285427s ago: executing program 0 (id=518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)=0xffffffffffffff65) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @empty=0xcf050000}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 2m45.389820257s ago: executing program 0 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x42) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x88ff8000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180", @ANYRES64=r7], 0x44}}, 0x2400c044) (async) syz_pidfd_open(0x0, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) dup3(r2, r1, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.290269488s ago: executing program 0 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000140)="d4965549de2bdbabdc381a97864ada3d03b6fce9cfec4869eb891b55910625cb477330143c2a2eec3a51c3ed603ca57a7681d492abb4a5026c060738958d8a906d6ba9e44a73bdd024ea586a57c8e1e57bc960329b4711c4e2f7d44a55e7c9722b76deeed85c9680bba5d6571b079ed543fef594fb74d7d80feb38c76bff6745205ba66fa0eebc", &(0x7f0000000080)="b830da08219024fa9d498c6d38115e792b434a534428956c1792f6a521b8585c6dde2b4e3d5f91b06744b2b2ce2a2a84aeae4e13b083375c12c0916ef1b8a7cfc179fde529b62f8da4d65915970b75fbf0075769369b0759659d767d247565db"}}, &(0x7f0000bbdffc)) r0 = syz_clone(0x80082100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid_for_children\x00') futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r4, 0x8}, {r4, 0x88}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000240)=[{r4, 0x8}, {r4, 0x88}], 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000001100)={[0x1, 0x7, 0x80000000, 0x3, 0x9779, 0x1, 0xfffffffc, 0x7, 0x9, 0xe2, 0xacde, 0x5, 0x4, 0x1, 0x4, 0x8, 0x3, 0x6, 0x8, 0xfa8, 0x1, 0x0, 0xfff, 0xa8, 0x6, 0x1, 0x5, 0x40000000, 0x5, 0x800, 0x3ff, 0x6d1, 0x7, 0x5, 0x4, 0xfffffff8, 0x7fffffff, 0x7fffffff, 0x96e, 0x53, 0x4, 0xff, 0x87, 0x3, 0xef, 0x1a, 0x5, 0x9, 0x7, 0x7, 0xfffffff8, 0x5, 0x1, 0x10, 0x19e1, 0x3, 0xfffffffc, 0x7, 0x7, 0x3, 0x9d18, 0x7fffffff, 0x2, 0x3eef, 0x81, 0x3, 0xd, 0x800, 0x7000000, 0x6, 0x7, 0x101, 0x1, 0x5, 0x4, 0x7, 0x16, 0x0, 0x6, 0x7, 0x7, 0x80000000, 0x3, 0x7, 0xfffffff9, 0xfffffffe, 0x9, 0x5d, 0x9, 0x1, 0xe9, 0x0, 0xfff, 0x7, 0xe, 0x3ff, 0x1, 0x5, 0x3, 0xc59, 0xe, 0x5, 0x4a, 0xf0, 0x1, 0x81, 0xe, 0x8000, 0x8, 0x3, 0x3d1f, 0x7, 0x5, 0xa, 0x9, 0x80, 0x0, 0x81, 0x10, 0x3, 0x7, 0xc, 0x0, 0x1, 0x1ff, 0x6, 0x7, 0x9, 0x1, 0x6, 0x9, 0xf33d, 0x8, 0x80, 0x5, 0x3, 0x2, 0x0, 0x1, 0x3ff, 0x30, 0x0, 0x18, 0x1, 0xd, 0xfffffff9, 0x5, 0x1, 0xf8a, 0x7f, 0x8e, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0x1, 0x3, 0x7, 0x3, 0x27800000, 0x1ff, 0x4, 0x48, 0x99b, 0x8, 0x1, 0x2, 0x9, 0x5, 0x3, 0x8, 0xd7d, 0x3ff, 0xf, 0x6, 0xfffffffe, 0x8, 0xcef, 0xc, 0x4, 0x4, 0xf4, 0x9, 0x5, 0x101, 0x7389, 0x0, 0x7f, 0x5, 0x803, 0x5, 0x6, 0xcf8, 0x401, 0x96, 0x5, 0x8000, 0x8, 0x8, 0x8, 0x2, 0xfff, 0x7, 0x2, 0x8, 0x8a7, 0x0, 0xf480, 0x10001, 0x7, 0xfff, 0xd650, 0x200000, 0x3, 0x6b9, 0xe, 0x4, 0x5590, 0x6, 0x4, 0x8, 0x400, 0x6b7, 0x6, 0x2, 0x2, 0x10001, 0xc, 0xe, 0xffffffff, 0x400, 0xff, 0xfffffffd, 0x6, 0x8000, 0x23, 0x1, 0x6, 0x92, 0x4, 0x6, 0x7, 0x6, 0x6, 0xa9e, 0x61, 0x8, 0x8, 0x5, 0xfffffffe, 0x10, 0x2, 0x8, 0x5, 0x2, 0x6, 0x1f2, 0x400, 0x2, 0x2, 0x4, 0x4, 0x5, 0xf9, 0x2e8c, 0x3ff, 0x8, 0x10, 0x6c, 0x2, 0x513, 0xffffffff, 0x5, 0x9, 0x5e16, 0x5, 0x2, 0xb, 0x4, 0x4, 0x9, 0x10000, 0xe5, 0x6, 0x0, 0x1, 0x423, 0x5, 0x40, 0x9, 0xfffffffe, 0x8001, 0x1000, 0x0, 0x6, 0x7, 0x8, 0xc00, 0x6, 0x9, 0x1ff, 0x1410, 0xd7, 0xfffffff9, 0x7, 0xffff, 0x10, 0x1, 0x1, 0x4, 0x1, 0x3e000000, 0x1, 0xfffffffd, 0x4, 0x3ef, 0x2, 0x7, 0x2, 0x5, 0x80000001, 0x80000000, 0x1, 0x101, 0x3, 0x8000, 0x9, 0xff, 0xed2, 0x5, 0xd930, 0x2, 0x2, 0x1bc, 0x5, 0x5, 0x0, 0x5, 0x2, 0x4, 0x0, 0xa79, 0x5, 0x2, 0x3, 0x4, 0x10000, 0x8, 0xa, 0xf, 0x8, 0x8, 0x9, 0x9, 0x40, 0xc, 0x1, 0x2, 0x4, 0xefdb, 0xe4, 0xb38, 0x400, 0xc00, 0x8, 0x9, 0x4, 0x200, 0x261a9112, 0x401, 0x3, 0x8, 0xf32, 0xf, 0x4, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x1, 0x9, 0x4, 0x9, 0x8f21, 0x4, 0x59, 0x5, 0x7, 0x0, 0x10000, 0x9, 0x0, 0xd, 0x100, 0x6, 0x1, 0x9, 0x8001, 0xd, 0x55, 0x1, 0x9, 0x8, 0x40, 0x3b4c5288, 0xfffffffd, 0x0, 0x29d0, 0x3, 0x7, 0x8, 0xffffffd6, 0x4, 0x9, 0x40000000, 0xf, 0x5, 0x3, 0x80000001, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfb3b, 0x0, 0x200, 0xfffffff7, 0x2, 0x4, 0xf42, 0x6, 0xf2cc, 0x3, 0x81, 0x9, 0xb, 0xe10a, 0xd, 0x40, 0xfc, 0x0, 0x7, 0x3, 0x4, 0x3ff, 0xfffffffc, 0x1, 0x3, 0xfffffff8, 0x3, 0xfffffffb, 0x2, 0x4, 0x9, 0x5, 0x7, 0x40, 0x7f, 0x8, 0x0, 0x1000, 0x8001, 0xfffffffe, 0x0, 0x200, 0x0, 0x4, 0x8, 0x3, 0x3, 0x8, 0x1, 0x7, 0x7ff, 0x9b5, 0x3, 0x2, 0xfffffe00, 0x7, 0x3, 0x9, 0x8, 0x1, 0x100, 0xff, 0x7f, 0x8, 0x0, 0x6, 0x7fffffff, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0xb88, 0x3, 0x1, 0x1, 0x4, 0x9, 0x0, 0x7, 0x1ff, 0x1f57, 0xfc1, 0x5, 0x7, 0x1, 0x400000, 0x650, 0x7ba, 0x6, 0xc5, 0x9, 0xf, 0x7f, 0x0, 0x98d, 0xffff, 0x1, 0xffff, 0xffff, 0x0, 0x80000001, 0x7, 0x0, 0x6, 0x36, 0x8, 0x2, 0xa, 0x1, 0x6, 0xfffffffd, 0x800, 0xc6, 0xc4, 0x3, 0x0, 0x5, 0xd, 0x2, 0xfffffffc, 0x6, 0x4, 0x1, 0xffff, 0x6, 0x75, 0x6, 0x7, 0x47, 0x8, 0x9, 0x0, 0x5, 0x8, 0x8, 0x2, 0x7, 0x7ff, 0x8, 0x4da7, 0x1ff, 0x779, 0x8, 0x4, 0x81, 0x8, 0x7, 0xa4, 0x0, 0x0, 0x9, 0x5, 0x6, 0xb1f7, 0x800, 0x5, 0x9, 0x8, 0x100, 0x3, 0x4, 0xff, 0xffffffff, 0x532d, 0x36, 0x9, 0x6, 0xe7e5, 0x400, 0x8, 0x7, 0x7fff, 0x0, 0xf, 0x5, 0x7fff, 0x5, 0x1, 0xa88d, 0x7, 0xffff, 0x1a1, 0x8, 0x9, 0xb1, 0x7, 0x2, 0x8, 0x9, 0x2, 0xffffffc0, 0x4, 0x6, 0x3, 0x2, 0x6, 0x40, 0x3d2, 0x2, 0x282, 0x9, 0x6, 0x0, 0x6, 0x7, 0x200, 0x8, 0x8, 0x92, 0xfff, 0x3ff, 0x6, 0xfc22, 0xa41, 0xffff7fff, 0x3, 0x2, 0x4, 0x64400, 0xaaf, 0x3, 0x7, 0x6, 0x4, 0x10001, 0xda18, 0x1, 0x9, 0x4, 0x7, 0x2, 0x800, 0x2, 0x7, 0x200, 0x0, 0x5, 0x1, 0x8def, 0x40, 0x1, 0x6, 0x3, 0x8d, 0xffffffff, 0x2, 0xffff4331, 0x5, 0x4, 0x8, 0x80, 0x5, 0x9, 0x4, 0x6, 0x7, 0x9ce6, 0x80000001, 0x5, 0x3, 0x5, 0xcf0, 0x8, 0x7, 0xfffffffd, 0xf6, 0x8, 0x52d, 0x9, 0x38fa, 0x0, 0x8, 0x2, 0xa, 0x100, 0xa, 0x1, 0x7, 0x10000, 0x4, 0xe38, 0x1, 0xa1, 0x8, 0x1, 0x5, 0x1d6f, 0x80, 0x6, 0xd, 0x1, 0x70000000, 0x9fba, 0x81, 0x7f, 0x2, 0x3, 0x6, 0xfffffff8, 0xf, 0x40, 0x6, 0x4c8, 0x5, 0x7a6a, 0x81, 0x7, 0x2, 0x7, 0x9bc00, 0x100, 0x1, 0x9, 0x1, 0x70cd, 0x0, 0x1, 0x40, 0x4, 0x4, 0x2, 0x1, 0x1, 0x7, 0x7, 0x6, 0xcd2, 0xfffff18d, 0x1000, 0x6, 0x92, 0x0, 0xfffeffff, 0xbde8, 0x7f, 0x4, 0x8ae, 0xe7b0, 0x100, 0x1, 0x8000, 0x3, 0x401, 0x8001, 0x9, 0xfffffff9, 0xfffff801, 0x1, 0x21, 0xd, 0x6, 0xffffffc0, 0x3b, 0x3, 0x6, 0x4624, 0x9, 0x3, 0x3, 0x1ff, 0xb, 0x800, 0x7f, 0x6b69, 0x3, 0x3, 0xfffff001, 0x2d, 0xfff, 0x800, 0x6, 0xff, 0x0, 0x18b, 0x15, 0x5, 0x9, 0x0, 0x2, 0x0, 0x80, 0x10, 0x4, 0x1, 0xfffffffb, 0x5, 0x1000, 0xea6, 0x4, 0xe8b, 0x8, 0x8, 0x1, 0x7, 0x7d, 0x7, 0x1, 0x1, 0x4, 0x9, 0x4, 0xa, 0x5, 0x2, 0xa, 0xc41, 0x81, 0x80000000, 0x3ff, 0x4, 0x7f, 0x0, 0x4, 0x8, 0xe, 0x3, 0x7f, 0xffff, 0x51e1, 0x8001, 0x2, 0xf5, 0x7, 0x1, 0x4, 0x9, 0x6, 0x0, 0x9321, 0x7, 0xffff, 0xfffffffc, 0x9, 0x5, 0x7, 0x400, 0x8, 0x1000, 0x5, 0x7, 0x101, 0x0, 0x3, 0xdefd, 0x5, 0xb8, 0xffff, 0x2012, 0x5, 0x9, 0xb82, 0x9, 0x20d5d2ae, 0x5, 0x7, 0x5d, 0x2, 0x81, 0x0, 0x4, 0x80000001, 0x2, 0xbc9, 0x9, 0x101, 0x1, 0x6, 0x3, 0x6, 0x6, 0x1, 0x2d9f, 0x0, 0x81, 0x3, 0x4, 0x9, 0xffff, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x1000, 0x5, 0x7f8000, 0x800, 0xfffffff7, 0xdfe, 0x1, 0x1, 0xfffffff7, 0x5, 0xd, 0xa, 0x5f, 0x7, 0x7fff, 0x9, 0x6, 0x0, 0xfb, 0x5, 0x40, 0x2d471b3, 0x5, 0x4, 0x1ff, 0x7f, 0x10, 0x5, 0xe657, 0x4, 0x40, 0x5, 0x3ff, 0x6, 0xf59, 0xac2, 0xfffffce5, 0xc6, 0x1, 0xf30, 0x4, 0x80000000, 0x5, 0x4, 0xff, 0x100, 0x3, 0x400, 0x4fb7, 0x9, 0x5, 0x10001, 0x7, 0x7f, 0x0, 0x1, 0x5, 0x2, 0x80, 0x8, 0x774, 0x8001, 0x4, 0x66, 0x9, 0x4, 0x6, 0x5b, 0xffffffff, 0x3, 0x6, 0x40000000, 0xfffffe01, 0xffffffff, 0x4, 0x4, 0x6, 0x6, 0x92, 0x4, 0x8, 0xe4f, 0x66, 0x2123, 0x1, 0xf60, 0x10, 0x3, 0x7ff, 0x5, 0xd, 0x2, 0xf0, 0xe20, 0x7, 0x0, 0x5, 0x9, 0x5, 0x7, 0x3, 0xf48f, 0x0, 0x2, 0x6, 0x8, 0x3, 0xced9, 0xfffffffb, 0xf46d, 0x4, 0x6, 0x7]}) sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x5769ea24, @empty}}}, 0x80, 0x0}}], 0x1, 0x20000000) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) (async) setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000240)={0x0, 0x2000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r10 = syz_open_procfs(r0, &(0x7f0000000040)='net/arp\x00') sendfile(r10, r10, 0x0, 0x80000004) 2m44.486169372s ago: executing program 0 (id=550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160005000000"], 0x140}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4082, 0xff2}, {0x0}], 0x2) futex(&(0x7f0000000000), 0x100, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x2) 2m44.319338893s ago: executing program 0 (id=554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m35.052992928s ago: executing program 32 (id=554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m1.861380074s ago: executing program 3 (id=1287): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="840100001900010000000000ffffffffffffffff4d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db00000020010680190175800800e600", @ANYRES32=r1, @ANYBLOB="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176640025805d005b800400388031ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea051a00e88008009900", @ANYRES32=0x0, @ANYBLOB="8cda759849b5a66f654f3e332a3d0000000000000000"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000400)="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", 0x1f000) munmap(&(0x7f00001ab000/0x1000)=nil, 0x1000) 2m1.715186594s ago: executing program 3 (id=1288): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x2, 0x7b1500) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000180)=0x8000) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x40, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x58, 0x6, 0x3, 0xd, {0x7, 0x25, 0x1, 0x1, 0x5, 0xe919}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x58, 0x8, 0x8c, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6e}}}}}}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) splice(r0, &(0x7f0000000080)=0x40, r2, &(0x7f0000000100)=0x5, 0x769, 0x9) 2m1.146408107s ago: executing program 3 (id=1303): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1ffffe23, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x5f}]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000440)=@srh={0x75, 0x0, 0x4, 0x0, 0x8d, 0x50, 0x7}, 0x8) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x11001, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000001c0)="388703e35c4383036d33dadd2e144d8645ca8d1b230e105614396838da83c754887e100000000000000017d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7b770a79f74ba4b5c50ac82d0facf9e42074b5b6079206fb21e718080907964669be539791e3e98687ee05985b", 0xfffffffffffffcc1, 0x8840, 0x0, 0xffffffc9) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r6, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffd38, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000280)=0xffffffff, 0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x4) 2m1.144229978s ago: executing program 3 (id=1304): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xd) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xee26419a9aad5fbd, &(0x7f0000000280)=0xffffffff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff, 0x6, 0x0, 0x4, 0x5}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000540)={{r4}, "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"}) 2m0.626805801s ago: executing program 3 (id=1305): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r4 = getpid() (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x204, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x42) syz_genetlink_get_family_id$nfc(&(0x7f00000028c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c00), r5) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) capget(&(0x7f0000002580)={0x19980330, r4}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) r7 = syz_open_procfs(r4, &(0x7f00000003c0)='net/snmp\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) 2m0.478495281s ago: executing program 3 (id=1307): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xda900, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m44.518881685s ago: executing program 33 (id=1307): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xda900, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m33.994164177s ago: executing program 5 (id=1700): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{0xfe, 0x0, 0x6}, {0x202, 0x0, 0x7}, {0xbec, 0x0, 0x9}, {0x3ab, 0x0, 0x9}]}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x6) 1m33.854210748s ago: executing program 5 (id=1705): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_bond\x00', {0x4}, 0x3}) r0 = socket(0x10, 0x3, 0x0) (async) modify_ldt$write(0x2000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8995, &(0x7f0000000080)={'sit0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x118, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x64}]}, @CTA_TUPLE_MASTER={0xd8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xf}, @generic={0x94, 0x8, "b22ead432046"}]}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d80)}}, {{0x0, 0x0, 0x0}}], 0x6, 0x24004c41) ioctl$TCXONC(r1, 0x40045436, 0x2) r3 = signalfd4(r1, &(0x7f0000000100)={[0x6]}, 0x8, 0x800) dup3(r3, r1, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000240)) (async) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x3880063, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1]) 1m33.850741968s ago: executing program 5 (id=1706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000200d05013200000000000109b01dd57cce7267395b36e86d270224f600004060b10904000001030001000921010108"], 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write(r0, &(0x7f0000000480)="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", 0x14f) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000002440)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=""/60, 0x3c}, 0x8}, {{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/62, 0x3e}], 0x2}, 0x9}, {{&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000000a00)=""/173, 0xad}, {&(0x7f0000000180)=""/1, 0x1}], 0x3, &(0x7f0000000b40)=""/122, 0x7a}, 0xe53}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/13, 0xd}], 0x1}, 0xa0}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/177, 0xb1}, {&(0x7f0000000e00)=""/104, 0x68}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/49, 0x31}], 0x4}, 0xe9c}, {{&(0x7f0000001000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/178, 0xb2}, {&(0x7f0000001140)=""/187, 0xbb}, {&(0x7f0000001200)=""/59, 0x3b}, {&(0x7f0000001240)=""/240, 0xf0}, {&(0x7f0000001340)=""/234, 0xea}], 0x5}, 0x2}, {{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/105, 0x69}], 0x1, &(0x7f0000001680)=""/88, 0x58}, 0x6}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000018c0)=""/245, 0xf5}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000001b40)=""/73, 0x49}], 0x7, &(0x7f0000001c40)}, 0xfffffff8}, {{&(0x7f0000001c80)=@isdn, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002240)=""/41, 0x29}, 0x1}, {{&(0x7f0000002280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002300)=""/21, 0x15}], 0x1, &(0x7f0000002380)=""/130, 0x82}, 0x40}], 0xa, 0x40, &(0x7f00000026c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e29, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffc01}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="03d1b10c00b4", @ANYRES16=0x0, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000ac0)=0x0) ptrace(0x4207, r5) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000005500010200040000feffffff07"], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x400c080) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x20000000000004}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x20, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000740)={0x1c, 0x0, &(0x7f0000000700)=[@dead_binder_done, @increfs={0x40046304, 0x3}, @release={0x40046306, 0x3}], 0xca, 0x0, &(0x7f0000000900)="8801f050d9c450c3298a40b125cf35e7697eb8dedf6c6f862b872a9d7b4d452e7b1cf1f3753799bed8b9b60a10c7c61550c83627952f656121ed43c576185af61fccca8779ffb250a6ef5a65c8d5dd87901582dfb2b4d00466310c8597b563dd937250f61ad8190a6ac9e4f7857fa559bf2e08fde99dca0c2aaf7761acf024a7b73b537eb0254b6b1d8352e3de38fe349d8b6dad3ec25c782c6d94e4a7971bd9673b4b36f6e6ce07fd0479c5c274a02a21808b6a19113bc077f154327609f98e121ca4e938c45f2c0465"}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 1m30.614602117s ago: executing program 5 (id=1779): exit(0xfffffffffffffff7) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) getpid() unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigtimedwait(&(0x7f0000000140)={[0xba]}, 0x0, 0x0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001640)=""/65, 0x41}], 0x1, &(0x7f0000006b40)=""/137, 0x89}, 0x42}], 0x1, 0x20, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab113288, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 1m29.697926373s ago: executing program 5 (id=1797): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = memfd_secret(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) (async, rerun: 32) ftruncate(r1, 0x3) (async, rerun: 32) ftruncate(r1, 0x3) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf4, 0x2, 0x6, 0x205, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xda}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x86}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4b63}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xaa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1080}, 0x4000000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r3, 0x98b2f000) 1m29.649351693s ago: executing program 5 (id=1799): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r5, r3, 0x0, 0xffffffff) (async) 1m29.613806103s ago: executing program 34 (id=1799): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r5, r3, 0x0, 0xffffffff) (async) 25.837990168s ago: executing program 1 (id=2505): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) read(r0, &(0x7f0000000340)=""/116, 0x74) 25.752929259s ago: executing program 1 (id=2506): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x11, r2) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffffffff, 0x4, 0xb9e]}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x9, 0x4f, 0x9]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x972fbfd9d4a9de60}, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000480)=0xfffffbff, 0x4) sendfile(r0, r0, 0x0, 0x7ffff000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x14, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=', @ANYBLOB='1']) ioctl$TIOCNOTTY(r7, 0x5422) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace(0x11, r2) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffffffff, 0x4, 0xb9e]}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x9, 0x4f, 0x9]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x972fbfd9d4a9de60}, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000480)=0xfffffbff, 0x4) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) pipe2$9p(&(0x7f0000000000), 0x80000) (async) socket$inet(0x2, 0x2, 0x0) (async) fsetxattr$security_capability(r6, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x14, 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r7, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=', @ANYBLOB='1']) (async) ioctl$TIOCNOTTY(r7, 0x5422) (async) 25.679866269s ago: executing program 1 (id=2507): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x8000000000000000) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x550bed) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) read(r2, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000d2c610a808e0797d2174b8010000000100"]) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='$+L\x00') 25.619775249s ago: executing program 1 (id=2508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1a80, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0501c000080054"], 0xfdef) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x11) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="290000000400000000000000000000fd0000000000000000ffffff7f00000000010000180000000000"], 0x29) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x1100000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r5, @ANYBLOB="2c67726f75705f6908003932c2d768adcc1c11cfe340c327659e39559706e180f505bca37eb4336286ef9961bfd0fcf00781e0bbf26241079beedd0d5e091146611fdc0000000000000008f46b25c58b9eba417eb4619bc66b31c840b85565aaca147cdd0ea7bb0b46ddd32061db2add208b899f9b077ea420153f7c26a98482bf363be845042b3c10390125b42decaecef37f059ede81fdfcbc497ff97a9ad8481ae36511017fbfbe8036a62a8d87d6a9baaa736a016d7adb279e8423612b3512ebb508d8fb009e821d50a269908ce41343d3917e36561a0b", @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000001e00,blksize=0x0000000000000000,blksize=0x0000000000000c00,blksize=0x0000000000000200,allow_other,defcontext=user_u,fowner>', @ANYRESDEC=r5, @ANYBLOB=',measure,smackfsroot=,uid<', @ANYRESDEC=r5, @ANYBLOB=',fowner>', @ANYRESDEC=r5, @ANYBLOB=',fsmagic=0xfffffffffffffb7a,permit_directio,\x00']) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000700)="900000001d001f4d154a8173932784001400015cac1414bb0542d660b451a211cfd6113223743b8e0c6b9ccd49f008f37ac8d81a297e0099c5ac0000c5b028d0bf46d3230c6466fcb700caaf6c3efed495a4b56215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a656064126f6aea36e11ce97ad7d549144b04e3da4de1df32c173902006e9aa241731ae9e620bc335927c5ee4e9a8d70c1e001ae3fe2a877a8204c74c9e95c07c46e2158c1a4030ff29144e53168d08400ac164e", 0xcb, 0x18d4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r7, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000070009001d000000", 0x24) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x6000884c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xb1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') r9 = open(&(0x7f0000000480)='./bus\x00', 0x38000, 0x718bb647156ec31f) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x105081, 0x0) 22.273689729s ago: executing program 1 (id=2564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x10000, 0x7e, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}], 0x1}}], 0x1, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8fe69000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.19328452s ago: executing program 1 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x4000800) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000040)={0x1}) 22.11524809s ago: executing program 35 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x4000800) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000040)={0x1}) 11.343662323s ago: executing program 6 (id=2599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.734603402s ago: executing program 6 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setfsuid(0xee00) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 7.957893043s ago: executing program 4 (id=2603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 7.957310913s ago: executing program 2 (id=2604): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet6(0xa, 0x4, 0x6) (rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000100)={0x3, {{0xa, 0x4e24, 0x720, @private1, 0x2}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x6, @remote, 0x3}}, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6}}, {{0xa, 0x4e24, 0x10, @private1, 0x2}}, {{0xa, 0x4e24, 0x3, @remote, 0x64ac}}, {{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, {{0xa, 0x4e20, 0x7, @mcast2, 0x5}}, {{0xa, 0x4e24, 0x0, @mcast2, 0xb}}]}, 0x410) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0xb00, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x56, 0x11e, 0x7}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r5 = socket(0x28, 0xa, 0x2) (async, rerun: 32) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) close_range(r6, r0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet(0x2, 0xa, 0x401) (async) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000680)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) fcntl$lock(r7, 0x5, &(0x7f0000000740)={0x2, 0x4, 0x80000000, 0x2, r8}) r9 = getpid() ptrace(0x4208, r9) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$selinux_context(r10, &(0x7f00000007c0)='system_u:object_r:xen_device_t:s0\x00', 0x22) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x8010) (async) r12 = syz_open_dev$usbfs(&(0x7f0000000900), 0xdfdb, 0x2) ioctl$USBDEVFS_BULK(r12, 0xc0185502, &(0x7f00000009c0)={{{0x1}}, 0x61, 0x10001, &(0x7f0000000940)="4283cbf581766b8b9592ecf9f3430bdb12c57f85fba9c344529e03b6ed4844ba08696ea22616617aeb53eed555c62691dce40deb8f4b646081e4d307e48a8bdf3008ee0312c455f4813928e1d3eb4401a1600a63aa1f4539cc1259b4fb56123178"}) (async) socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) memfd_create(&(0x7f0000000a80)='TIPC\x00', 0x3) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f00000020c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002080)={&(0x7f0000000b40)={0x1520, r13, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x124, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x4, 0x0, {0xffff, 0x800, 0x0, 0x8, 0x0, 0x1, 0x1}, 0x400, 0x2a6d73ac, 0x3}}, @sec_chan_ofs={0x3e, 0x1}, @supported_rates={0x1, 0x4, [{0xc}, {0x6, 0x1}, {0x77e094c72f7a47c9, 0x1}, {0xb, 0x1}]}, @ht={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0x7f, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0xdc, 0x3}}, @random={0xbc, 0x1c, "62b8be743213b0dcac9bfa88fdf4089749f533c03397afec7c7e7272"}, @random={0xb, 0x59, "c3b77f51f3dd90691d9039c907337a4c460d894f1702a1ab1ecf654316a642c8a1913a40ae22738665e33138d99828a64c884f06762bded20fe588ce8e449dfc2f3a296d9ef8bfad284c9b8271f5974fdd1f685b16a4935fda"}, @supported_rates={0x1, 0x1, [{0xc}]}, @measure_req={0x26, 0x5e, {0x7, 0x7, 0x40, "c49461951b0c75c54bbd6129aa84e60f9d52fe499a932baad7539a00c02671978f56ced946c7c06b782efba98f849f848909e0d8d720f7e16fa282cc6c913a03f7dadd96e5c1eb89c3abf3ff69553a17445563a8c6e160a4e28912"}}, @challenge={0x10, 0x1, 0xe8}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xcb, 0xfc, "165012b571db7d17dbcf9c84d0cde70e06eede14ab7a16005aab8909742e3759892149e8ef22dda35ba60ccda64d4ec25637dc265a8ce7c4b79c7544fa8d0b3f3ab40d9d88143af015db56f8a17976f198e7ed250b41470777dae1994b5c1babb733a7f8b31e134c870308dfdbd497ed167f7eb13719856fc99ec79dc4b006341e448d12550a4879a6dea4e83cc94c5f0b5e1936d4dcf7ca13db757c0e5c54d331bd01064a808fdd9327243451fb4825dfb6a6a9b539acfce1b3bf257b483d4a27bdc865a6a946"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "96d0708d1d4af647"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x74, 0xfa, "f3e824c6066b48f329c3f0cb3625b1c0587ad165c04ee067d59546212c8e8ff966f8e9f5d80a661404d807bde387ccd9df7b7b892917ba7f1391aba9287a3d85076fc08fbe726960414b6b304325f7ca5c103102775341b53a210abb22dda74cd5ae22f26d9b8d945348d883027440ee"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xb8, 0xfc, "2a529d33e27622ff4adf516d0da2cce30c072736a51a0317ec48c9febd2525c5984e6d68735c42a03615a992a5fa1810f714bd6e5b90b3012917dee9f44a2b056bde994c0d3ba95b41dbfb4cb40ea5b4a9dd2338342de41c90756661b569d14d2a824e4d559e686362f8976424b4bdcb265db283d36cf80684f0d75742e9a90bbafff4714f59e84250a3e179e9f87d8f708375563d1cc70c888a590bd7abeafc7eb9a47beaa65d7db9d3dee0b55838664c01f8a9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x31}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_RRK={0x87, 0xfc, "ca205bad27893b2d21f875603b1ee251f22fafbb754f0f9a58b26a860b9ec9d09d82818ad6e79960beac49f7e1dfffe0d0a19b1db5d066630438ba330dac94ef526a9813c331407c488ef138ffa58adb7682d0043d9628701e953ce1ba48eed6cc64737488ee864a8ecee92965eeb11ed69f88235031c8cb0ce3a4eef13ef334e296c4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0xe9, 0xfa, "006ac0606010cb30e84bf86917796e41913d683b4102cdff8cb7eed32b965f02e965c4ff45a140962977407f2bce7b407fb3f66ac55e0da72336e00c637e57f6f854d263a241775c879d57e91cb17e4028a733225e6f4a259fe00a7a9a869e0631a075b073bfc10ec1f3e892fe2ee66b8a3f8a15796741550411f2be200a169064904f964c50429969ec9f242cea1876a3ef073547b4d0e93819401b51c0f65e2c7be882bfdc716b24c04ed0e89de3689c7b7a983159907abfb7cdc5b955bd698fefa08384c1ffeeb1ef32846bd6ce016e4d2d146e98a0c4604a7702c40411b373b04822aa"}, @NL80211_ATTR_FILS_ERP_RRK={0x41, 0xfc, "723e71b492178e413aa1808fa9c2d974b3440c8dff0e4beef39537a9fe9318c8cfb427c37fb2e477c88896b6e534ff3840321636946756d6b7a8a97629"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "3c591af95cd8bdb3fdd1492ba0585d14c3c66c841ed504116b49517e78bb08b033659badfdaf87da75a441a32ecd507d67e71276d1b670abc4e98d03420312feab53c4fcc6d363f7932e07c778d86a5570cf1595f98909eab69b3e4661959f99f40e0ef301d20ba28d5e607675297d37c1c461a06ec1dac39e7746b6d313fa32754e9792c7ea7b69f8bb0d1b2c21813522865be28454bc3d665a16033fc12f3c20dec53d172abeb1e2f864122a5166bdc8fdb029c37c2409f0532ee65615cb95a19435fe8630bc0a9fa02f13441d711f41552e344411a00484c864f6e72048345ef898210e2034117f37efcc186d5a8f9e4650b6210ef1f9b54b2215b9802e09e29b08dbdec43ef23744126b93dcb59b94dbe23e498ea188bfe075371cde4b92f7598a0d7b219b8b8384c742e13271e59533d05c0d5ec0530b5eef390c4546bebff8257ab113b83daa51a07bd66d9a710094b888fc0c74a48ebda54847a3a7e596ef820b00bee71792dad11f53c513f78fec63e057a31382fe15fcb86091dbfc77ea6b94c2cc3125e83e5750316d9a9838a6ee0d433ba93c77b9aff5ae2a4f67a1acc5e5f8fdbcfe936a6b08c15fcb46cd846e14d3637b014a4ce40336563b7f336cedb85f0a31f4f2296d6e02a7d5c1f4cd0f1d80450d2d76c4617de32cba5487ddd1a8cc756b317f437f32bca076059eeee838a492e133ff30272150834329900c947dcb90a691bd159699187e853fbd564b51fe88a532d853a74fddd14d692dab6a2478ea0f303282baeaeb61ebd99205a5790111594489169c8f11955935654818482496f47639405d28793f5c7d53264efb325abc2e67eb7f8f7f532bd6cb1b8e1560b9bf7175d7e845a0a4b86aab0274a0e004d05361e4584adb5b75475c2b9a618fdf7e892740b92a85b00f42e389613d4a3378f60e76429954436c45ecfda2b5e0a6333d6b7f8127cd1880bf37b642bf6f02e7729ad2b1cc9d61f9bf55db786fe7df060860abc25a2db48efd44940c5c793aced06b39e04082fcda4b0f8b60d707fcaf05e983df8d9f6562dcdbe3c055fd89b3d18b9647bff3ecdc97e3632bff626344c32b64435173b7400c26413657faef9997e5ecfcecafe31326d3f254d281ba9345d30766eb6c4ff08ebf5ce0ae3619ef94f89679a10a339649d12b27b4993522d97c78e2b4fd6c25f87bb6ff3a56168fa9c25b5616a8a8493e185b012dc0704cf4737a57126b34eec0b2ad59d7a402427f52eb0f0424ec37b0c43610f0c27c9053d728263a7c4c410a7b2c88a8bf50338ae71779c670cc6fce3b0804125003712348aff21907eeb46ddaa5859ec1544bc1fa10c7c8cb75fd16afb9c1437e571a7a4c6cf10491b15889acb8bbd013fb61051e5c6323ec09b006e7b029cf28ab5fb60ec28911ae1c9512f1fe98a313b13927bf98788db7eecd0389a1c9b853b988473cf79f091ebe32a91c5278ff63dd648e10106779a8ae37747814f996622be38bc0535bfe9484a507f4e310d5188ee80a0935854a1727a3786c9005ad24a14a6ed778c8364181383438b963cc477a68220aa39a33374096b5050f33cacafca84dbf59f56e952ee8069564ad00b665a324471aca34e4b99d1c6c1cd1d1c2b33374020cd5fa660fc5c9b56aaf11011cc1196a73b738cfd681a7539374ad3eb4c76cca453ff205cc49c2f58a03376c0d32d90ec73e716c33c4808968bae65881c6c199e256686d83dfa919235aa2474fab7b5ea5b6cc6006f9b5b546194bb091858945d787e8d3fb4c949048ed7403a1a16d2c515cde551b62811094b4794947eea4a641c046a537ae04bacc6138bb3a2c2219eec43d6b187e888495c25fde69e6c439d36b952e37ab7b09857073d030fb4fc5a193ddfa6ecfb59254bb17d1c794d18de9c224af7a037f5b2de60337d873d5051f37bc221e181c9764b8c6308b3e94864df50eea784dbdf63b672eba64938d39bb46a451a854bcf9e9372eba4aab762cae053784d4485d784ccb07eab2472c0b7baee02dfc5996f4dd1e484623f53e924d27b5a5f4cefd5d52cdcac3ce5e89c8205ce89a4f0a621ef6b7c3a8b901a55365daaaa65af3762de2405ee89a0119aca9e77a54a434a4df2a131d1fd7a282a384df3319a11174e13deed99be31b6ca0be9df7b443ca879c955b3e7874c4e91c1f6a64cc09883c26953376ce9509e9b46e0a8bbba34e5dbe7c0fdf90d5b5798f0bf255eec4a12a404065d55b406f05219df6579edf3d932b3355991e2fe70a124eb242f99081c1b42bf7cfc90aee536906767a127c7e8c2124e639bdc01fb0cda429567b55c7356e10631ca4941a4ea4eec79ebc21edc5d1f0d2c95a9eef54e094b9da29f7af499f09bf4fbda254b4acb1f81d5e284db4ed7dfaefa935211fa4d4b2f0616631925058a965c3af46ffe22d805ff63baad30d901d98c76b1b1de3be8ef1168255a0c7cbf76e294bdd48bf1e9abe6343765f93ffb403121c0e032681a34e8a1a6ee90e8f3b1439e0f10df55bbdaf0a9a48650755ea2c8d6250e6b2dfb1a3c3fe05bf11a0ccc84baa4dd3b05b90d697908912a5e17c8cf89456a2cb0bd7770f9b4d6881191e572e3b50141f45d7525ce77956705a8b1667e0c9b5dca885ca52ea73cedc19a7583ac09d135b6e2d075d5c12915668a44116b8af9594294c1cb2c1813859825da174e9e2389e91e1946ef9dd4cca307042868b5954220f84f5d5689df64a4164a2fa56edb5f57472b449f9ac429d5b2190165173e19d6ed5a89762a7a8e2d48031c81c0b263edb90d40e7a82c8f6081fd9f00243cc4cd73b6bd843f8a00f74bfd7fc5bf855d82962e0996a3e4e89fefab1b8d4c209f7c4551e93aba0efac5e079fb559481a7fd461d14ae4b163c72cd882382e1e845a1d1062a3d897a5b7d520aefbebec18060ec74cf2ce6124b6c86475824c50a1398b0536318b07b7f4e6406526f9ad024bb2862c1c43402c9294363d2ed1bdf498fe79f0f46e5c5a935f3326f9834d697379a03a0d1c71106337571fccffaaba33c6d3f911e69938278ade73d720a164039eb508c0001f40b46861ed772a63724390e7d0580f231e8c2f05cb82f5907bf1196622d513fbc9299fdb83d2e160ff04a8b76c45cabb616e952bea9b05a5dde714e9e82515efc8cdc80e3ef1e7ccd8ca68310b2ad6aff0d95a25c46e0b51e8bb1476f88cc508c991e13e1975ecafd9e992048cd749b4de58484db7540c896ebbefe2b446e0608e6da64eb0d4d679ecee31c4c3377b7601bc71929b317e2e01b2da7d069d4eaca436d46de7191608cfd694ffddce486e28f0ad378ec15f950fbfd349687aa8eb9ab7a9e9528135fcd383ef0010468b2d4ebbcda96f1e20deb35055ae838b3dd363b07e8bc0894969ff48251d643913dc83b03000a2ca1ad25b15c39d6a8a9bf83e1aa316d6072dc36d6fda16c4a30d69a059d3bf9029c73e82b71be343b8d166947818466dab4baa6d2476e4b90d48e1d8e2d1f816436ff5bc6e31b015c8575c11c913d742a34a9a390734319baaa64e484b2a6a8227d4206a69acfca00507227920499cab50c85f73f8400a4b6129bc530bf584386f62a1a54e5c474d86848c513a79d96409c7ee27dd90977916ee894263eed816cddffdb8c87f05d23db9446d0adb4b829d754b7bd9ee45554995efbc19f6ac6943126be1f9397598480d97f827eb5eef6284698cd414f2dc131b9898f8bf489eacc94f7ba8e5c04bf4f7eef47b944fe19e3da538d160b8515c23e38b38d12c87ab75626f0d107110329a38924c15a582ef1abc0be61afacef69153ed255a083dd0b5300e20f5063208e33afb348f10ee61e6bcd781310cd8b2142cf9f3ac3f3ff0f8b51ee7c4b1f1d67f5945103af1c415ed2a2883412ac1fb6290839ca886ae6244ae9ed8bc3cf29cc9e602b0ac18e1ac8b4664fb507c55af2825afa926141fa0e043508c5f62df5e5df3e6f3e7785619d062a54e05c88c1841e5fae76563746aaea5d63bc779bc8f06b7560b712ccafd9ab8c720fa8a2fa8edaa1ec72f9fb98eee5d078f4fe6d21b525e809d570f2155f3ec5574fdc54de2fcecef4175a3b2fcecf2257cb6c939bd74aa053e47701d7525b63ead6ca8f7c76bf8ab660d2f8160cd3e58134e6755a009c81a60a5b9469db44538040cee4058a1c3293f83a367e2852a7bdf2f827577e12b0a960ead8a73cc89b4fe21054dbe3532f6c9deff2f0f3f9a0c2d2fb497168677dc787f6dc8895af7fe430428ea05b202097510ddbbdfe7483fec20acb45df4a0aa27b37f8edb25b11d78ee81e0ff05693fd5703c41a9ea0efe7fdf94342715bd9ec8ef94c06a4b4e67c7701870274035d5b7ebfdbcc60f8cd0d6fe1a91e47453af0ebea706bf04e8ac0a6d622363dd4e028175f4549e1e0421731d9a8f37cb66cb6764daf082ed625547999a47fcd7a66a75228f7e84f6983ab1bb4b4cd16e4e26681ad9ac7aea13d0b51330df2746b60df3175d3dfd72dd7ebdb33fe6b10cd80286b190cdf6ac48174659a3b1ea8fc5e1100c0ffc5809953f7279a5364df099ea149e7205eb4c12ff90d10c96900f7924c9dfad5954c2483299be6cfa44ad2aae8a19c09e6cb4786c6de58111baf911b0aea506193eebc9050eb5145b843e444e1e1b93ccd69bf32e59e7efa245b0e1c60530f04f440b34d1137f2189c439019ecfe65e9e2865c1902f8bb84648530fb04b072f84b92069352c7962eeef8085450fa9b012aaf037101100c016f374f8ef58946c0a4b6da2c069475fffec49e0ffaf9a57a0dfe5820072f0724ab85d7b10f27c837bd1c63eefb4aa78f9a5efbd9951ee78a94fe69be6407a48638db769358ccc8f445b20c04f972fd0c0e5de9dc27e1fe15bd7b53afe7948e3e8d35b2b9f32266b1ebc53b3d8672d2cbf04490f6339202d64ef455f093c38c688333ae0db5fb7516ef2de718eb6590ac90a3a15b86c39fc227f0a01f69f42b634653d5890bbba9a206bab0c8cbad43a211a8313715667eba4cd8424ce11fcf56dfc486784d1c18276510117d25edc5c668471bb78d4b2ba631ccdbf32f218cce0bff72fca7ccf166dddc371eec0e423cecdc030882fb8cfb9deb01ead3a546368a1f18afb56ec6590faf22f2330bdb41d0a941f1fa2d723472ffd8b1bafea285f055689b66febdb008beee301e00624996075fc4400863ceec61f2d0660cd1aa03adac575854eaa3fb8dcb671e55a0b2cd8e06778f433d34e4843cdcbbcfa52339e34e01f3772748079dcd7ae1b14d81ab43a2692040c16ed0c1fa9fb7102752896aab48585c99fb15a877f11c5888498f6826148f53964cc5905ae27a2e6393110c14708d0c977f9955d89bea9de2867413e40de414c8790cdb3c352e65e8625b0df65247e656344ad63c39648b733435e96337b2244c76dc26400a7a36a72ec76fd968557810c0e26650059f05f13118de9a5bae33d6d8322562fded441f6dec7de71de2d36d10ea5a8b62c634fafe8a6e540a917e9b93b2ced21890a1f60facdec5a24509327675363cf9e9bd174ed9906f4599dce8a04654d7e138d984d6ded7026474b2f0bf50e3055597fc3bc0a21c01fd41f3661552ff0ecc771a571fea1d0d0bf0c603e1fbbeb0436131cf93e7d7e338fb98f135465fbdd499e8d5e9078304a180f8787e7b34a0e5ea5eafc1a1854440574fe72ee97f66ec08b0eeb115060b8ed15857ebfec1a54465672a61e10ad84c628b1254faecf5b02078cc7fcc36cde7205ad6b44e4818b2a80121d8a6ec0429e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9348}]]}, 0x1520}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x50, r13, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x7b}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xf}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0xe}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) 7.879247484s ago: executing program 6 (id=2605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(r1, r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.165841754s ago: executing program 4 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8008010) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) 6.165602784s ago: executing program 2 (id=2607): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x1, 0x112000, 0x1}) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000140)) (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r3, 0x0, 0xffffffff) 6.165382914s ago: executing program 6 (id=2608): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x10012, r1, 0xabae7000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000100)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0xb1851, r1, 0xac049000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="203d04690eef0a520e0763316707704da584f478f77fdd06bb094020a3985f9802f7d89812284af606b1661ac391ff80ed0baa2b4abc2478d505cf867c80770c70c1ec04d22c24d07ef679c2147c", @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYBLOB="e1293acf1c0c06f8a4d19a84dd1620", @ANYBLOB="37d973b115e6dae03f24265b056be621bb532ff035d247f33d4348014c62aec2974c9a8e09798bff6b71f295a6b5fdda7798cc030876e3d8a5f01172dc4cb3c1bd3c5f814dda48d98ab925cc3c8e7339fae83d47d979f8093c24957ffe6778aa4da41b141aee33fa016921c1f0996be7"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) modify_ldt$write(0x1, &(0x7f00000000c0)={0x2, 0x1000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r1, 0xd3c59000) 4.237615305s ago: executing program 4 (id=2609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syncfs(0xffffffffffffffff) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x101280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000007e00)) lseek(r1, 0xffffffffffff8001, 0x3) r5 = accept(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x238, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "447c19584d73db837500cf9a1eebba8b58609420534c5dd07380efc815b122d4a27956b770ae88cf68b636882fd984861f1aa26d9e9759bc8e99ac342110f019c58ae9699950b1e7b7538d49698159260732127795bdaecef1c4e3743b4dbd0d02b45a31be8440f2da26ef7973aa6f3ba605089975a136de1064d5454d3ef8c0a5e72bf9e2c8d1a6fc818a26acab93e912a7ebb5c118e306c6b8a68c4a001a3976261007f543f17f79795b5d7eb597a9b98bc116bd29a68bc87283092d1282128b8c0ea8bf0791177a31852272b86f6b2a41942409c483e07a86dcfa95eca5df56b63366a4279ffa02bfccc5c2d992"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xee, 0x8, "5c1fafbe25789bf9005c2fba56bc555149e218c8d236b6f63802e9d76b2b6843d207a085ca6240caa81b588505727d33021895c50b8029d6ff54376707db25b81de50768b62818fa05c909f38a9b3d7412443f7fffb8b5c39a07ab12b69849578a77bb928cbfc7fe1a08b0fae86f22a5e5533e03537333cfa7bf0dedec11a18fd423660507187481908cc234b6c9a96a65beec001e4d7651a624811c3b239abebe73649e3339877c7781010c8f6d7b5ab9142e5821b2cc2b8e7a18a909c73f638e01acbba4756fdb13d799c0371b7c92e6817170faf37ef1ed2e3c936ad0c727fde9869030002fa0f810"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x260}, 0x1, 0x0, 0x0, 0x4810}, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff8, 0x3, 0x2, 0x8, 0x2}) 4.237388385s ago: executing program 2 (id=2610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2b159a2a8d281ff7, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3c, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @exit_looper, @enter_looper, @release={0x40046306, 0x2}, @exit_looper, @register_looper, @free_buffer={0x40086303, r1}, @increfs], 0x45, 0x0, &(0x7f0000000200)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aad060022ca5137369a7e2fe0ad2f98758654852c22592fe87c68839e02d428fe352e4eb59cd76d75b41a410337"}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000540)=[@exit_looper], 0x0, 0x0, 0x0}) 4.236905205s ago: executing program 6 (id=2611): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r4, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ftruncate(r5, 0x2a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@mcast1, 0x0}, &(0x7f0000000340)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x40) splice(r0, &(0x7f0000000040)=0x4, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x7, 0x32e3650ef0a7d791) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e96af725f696e6f6465733d7439f887d45fb042b6ff77cb23b8ca3a9e61aec7817b11abe8f738b62fb171a13537a3a3c5a0c92cce948fc93bee00f89c24970e7ff99e236721cb467234781f2c1cd6c9c2b76e70e13625e0636986780ad36dcdbf5e139acd65fbd19b22"]) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 2.183417377s ago: executing program 4 (id=2612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, &(0x7f0000000000)={0x9, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, 0x0, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2.171396947s ago: executing program 2 (id=2613): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000000000000616161616161616161616161616161616161616161616161616161616161ffffffffffffff7f3131313131313131313131313131313131313131313131313131"], 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000840)=""/59, 0x3b) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) fallocate(r4, 0x1, 0x6, 0x100000001) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80104}, 0x40000) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x40) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) getpeername$tipc(r5, 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/158, 0x9e, 0xffffffffffffbf90) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x9, 0x28011, r8, 0xff7fa000) 2.167842768s ago: executing program 6 (id=2614): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x6, 0x9, 0x7, 0x35b}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = accept4$unix(r0, &(0x7f0000000140), &(0x7f0000000240)=0x6e, 0x800) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001900)=0x0) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r3, &(0x7f0000003a80)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000300)="13b8ddedcb6c1e306a0c0c64aea62d06ac9e04da8bd26a2081d07cdd0e62", 0x1e}, {&(0x7f0000000340)="43c85ed147fe217ade1320fb0cdd0939b755988c47a4ad8f2d4785651d0249af66a7c4f24bc1e21f5cd39529e890a3c0fb71f67e835f2456f821b2a939f38bd4ad90e2720f099353be26518f6dc187a5bc11cdfe77dd3d67bd79741f9a27b48dca890f54bd93bee9536db13e399fd56eaf9af741307296d10c0a8394742f353098b97d0f5ae6ae4fb0185e004aab2e1469de4544eb01f1b5e5ff2acd6f63e474e37426e41704b438f7019a46fb3e6ca6bcaabc3a", 0xb4}, {&(0x7f0000000440)="c8d2ba39e340ea0e7da5202e12f72e97b9a16bc9eaa9ccdd09eed503fcaad52e39f0cd793e088c4c9d9ae6b042e632b04e5cc605d44a3eb5c8f1fbbfb7ca48c6a83cb7e1a8744185c0ccf6d873fd2c3d7b2bb1315e3d7b8976d92e0fe7e8cee95b76924c897e6a202173f321ee70f517dacc22dc8e18affb072ed2330801fd1585d3e28d19a23a1296d63bb8e1fa3480e91effe6baf291f28a99e69e08", 0x9d}, {&(0x7f0000000580)="c5483d0ef3c77b41080d58cc67ded7420ca162dc0eaf3ea29a5d9f22bfb358aa40c7e8c3e13978f2900348032b418a86f3709875f42e14cc4d4549df2620fc2314d50f2ac5cce7409c346a4df54eb65ded862c1302e5fedc92f6332b7b58a5a55d04542c535daf1bc75a87384a3fbc6d60acc22b91df9e8e1bc012bf472c563c990313ae1ad2ee75ebedc03a78798f669f329bbd185396632b6572f4a0f1e3008eed5d76b8484696eda8c39b055ba6aa081497d6e7b84059b6dc4c809ddb9e5d204d3f5fbea3537a0b3310e1fd2a8fb67439e71d037e8afb51f1daefcdc1adadcf", 0xe1}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000500)="99f71ecba46be142a0f37be7fbfbbe49831d0fee", 0x14}, {&(0x7f0000000680)="46dd42caabf0704a2e53c1a0aa119b005fbe6e325f144a6dd2b02f1cffccc9", 0x1f}, {&(0x7f0000001740)="cb5a06a1f9b9ff269c20c99f3748e4d2dd60aaffceb16eca1fc37764ad55da43939d33cec3d7ef12d000fbdbe3778acbfff15ab659a80fc3b4652e7b985b43b7dc577084680b53585a1d0e20316033c336ea461f0bb412746ff7962c5f087820310e116f9299fd310dfddcd0d0e95540c28faf30ef67f466e431a14b9e5c6b33bed834b328641ef6a05fdc7e6661504e9840d303d9fae32b4ab508178f78de4f7c533c240e9291b97e52e866aa0bc3180afac69b43a3d12198607e29e2835c27925820e4854ae78268f413418e", 0xcd}, {&(0x7f00000006c0)="818fc511cc6edee87f23fa44b6d29cf9f5872736bfa8269b2f50e1f6ab34b82ba2b53d", 0x23}], 0x9, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x80}, 0x4) 2.165869817s ago: executing program 4 (id=2615): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) (async) r4 = getpid() read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) (async, rerun: 32) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = syz_pidfd_open(r4, 0x0) setns(r8, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 2.165660107s ago: executing program 2 (id=2616): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@enter_looper, @dead_binder_done], 0x5a, 0x0, &(0x7f0000000080)="e473394919cf3a32deca1a8911b8efe4e8717c69609f129d32669b57f7952052b29b125a2e025044fb3bbf8ab1590ef1db672cd3aea151a309f18de09833a8e099f6dbd489edcc629c65abdd9b3b6a7ac02d116563238c7688b2"}) 178.7µs ago: executing program 4 (id=2617): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd04c0000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xd04c0000) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setresgid(0xee00, 0x0, 0x0) (async) setresgid(0xee00, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) io_setup(0x10f5, &(0x7f0000000300)=0x0) io_getevents(r7, 0x6, 0x6, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x20}], 0x1, 0x0, 0x0, 0x0) sendfile(r1, r5, 0x0, 0xffffffff004) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x600000000000000) (async) close_range(r8, 0xffffffffffffffff, 0x600000000000000) 0s ago: executing program 2 (id=2618): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x31) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 20.339337][ T36] audit: type=1400 audit(1762304234.700:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.340513][ T282] cgroup: Unknown subsys name 'net' [ 20.362023][ T36] audit: type=1400 audit(1762304234.700:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.389525][ T36] audit: type=1400 audit(1762304234.730:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.389851][ T282] cgroup: Unknown subsys name 'devices' [ 20.532311][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.537954][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.710649][ T36] audit: type=1400 audit(1762304235.080:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.733836][ T36] audit: type=1400 audit(1762304235.080:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.758612][ T36] audit: type=1400 audit(1762304235.080:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.766960][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.790514][ T36] audit: type=1400 audit(1762304235.160:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.815944][ T36] audit: type=1400 audit(1762304235.160:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.846937][ T36] audit: type=1400 audit(1762304235.210:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.872720][ T36] audit: type=1400 audit(1762304235.210:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.872948][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.649819][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.656909][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.664345][ T291] bridge_slave_0: entered allmulticast mode [ 21.670680][ T291] bridge_slave_0: entered promiscuous mode [ 21.677083][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.684184][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.691269][ T291] bridge_slave_1: entered allmulticast mode [ 21.697569][ T291] bridge_slave_1: entered promiscuous mode [ 21.730316][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.737503][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.744631][ T290] bridge_slave_0: entered allmulticast mode [ 21.751035][ T290] bridge_slave_0: entered promiscuous mode [ 21.762973][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.770019][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.777160][ T290] bridge_slave_1: entered allmulticast mode [ 21.783377][ T290] bridge_slave_1: entered promiscuous mode [ 21.813773][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.820842][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.827887][ T292] bridge_slave_0: entered allmulticast mode [ 21.834235][ T292] bridge_slave_0: entered promiscuous mode [ 21.843419][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.850483][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.857530][ T292] bridge_slave_1: entered allmulticast mode [ 21.863796][ T292] bridge_slave_1: entered promiscuous mode [ 21.892148][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.899205][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.906387][ T289] bridge_slave_0: entered allmulticast mode [ 21.912584][ T289] bridge_slave_0: entered promiscuous mode [ 21.926668][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.933764][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.940876][ T289] bridge_slave_1: entered allmulticast mode [ 21.947027][ T289] bridge_slave_1: entered promiscuous mode [ 22.068203][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.075293][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.082598][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.089617][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.107687][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.114812][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.122323][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.129593][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.142203][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.149253][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.156543][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.163600][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.177757][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.184846][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.192126][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.199153][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.231522][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.238801][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.246314][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.254371][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.261668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.268871][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.276258][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.283541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.292361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.299389][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.312314][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.319359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.345966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.353023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.360809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.367935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.375629][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.382679][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.390242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.397302][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.422937][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.430068][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.437956][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.445002][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.476525][ T291] veth0_vlan: entered promiscuous mode [ 22.485447][ T290] veth0_vlan: entered promiscuous mode [ 22.506187][ T290] veth1_macvtap: entered promiscuous mode [ 22.516452][ T291] veth1_macvtap: entered promiscuous mode [ 22.525650][ T292] veth0_vlan: entered promiscuous mode [ 22.547921][ T289] veth0_vlan: entered promiscuous mode [ 22.561835][ T292] veth1_macvtap: entered promiscuous mode [ 22.580143][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.610724][ T289] veth1_macvtap: entered promiscuous mode [ 22.637062][ T333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 22.644622][ T336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.739711][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.811287][ T352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 22.811342][ T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 22.954115][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 22.989443][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.007768][ T369] input: syz0 as /devices/virtual/input/input4 [ 23.086206][ T381] netlink: 'syz.3.15': attribute type 58 has an invalid length. [ 23.403599][ T392] rust_binder: Write failure EFAULT in pid:13 [ 23.410825][ T392] rust_binder: Write failure EFAULT in pid:13 [ 23.594219][ T403] overlay: ./file0 is not a directory [ 23.720384][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.872680][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 23.881878][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.900238][ T10] usb 1-1: Product: syz [ 23.908109][ T407] netlink: 'syz.3.24': attribute type 28 has an invalid length. [ 23.915997][ T10] usb 1-1: Manufacturer: syz [ 23.920651][ T10] usb 1-1: SerialNumber: syz [ 23.934724][ T410] overlay: Bad value for 'xino' [ 23.963720][ T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 23.964168][ T415] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 23.972662][ T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 24.088712][ T424] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.160083][ T430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.250362][ T331] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.413793][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 24.420805][ T331] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 24.430008][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.439416][ T331] usb 4-1: config 0 descriptor?? [ 24.536660][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:6f:95:db:c3:d4 [ 24.548723][ T10] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 24.557357][ T10] usb 1-1: USB disconnect, device number 2 [ 24.849694][ T331] kye 0003:0458:501B.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 24.862108][ T331] kye 0003:0458:501B.0001: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 24.874613][ T331] kye 0003:0458:501B.0001: tablet-enabling feature report not found [ 24.885976][ T331] kye 0003:0458:501B.0001: tablet enabling failed [ 25.051915][ T422] netlink: 25 bytes leftover after parsing attributes in process `syz.3.30'. [ 25.070261][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 25.070348][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 25.104998][ T440] rust_binder: Got transaction with invalid offset. [ 25.114294][ T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.125701][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 25.193541][ T446] rust_binder: Write failure EFAULT in pid:39 [ 25.370354][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.530345][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 25.536734][ T331] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 25.546103][ T331] usb 1-1: config 1 has no interface number 1 [ 25.552413][ T331] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 25.571511][ T331] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 25.600335][ T331] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 25.621710][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.630976][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.641487][ T331] usb 1-1: Product: syz [ 25.645679][ T331] usb 1-1: Manufacturer: syz [ 25.650864][ T331] usb 1-1: SerialNumber: syz [ 26.060721][ T331] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 26.266742][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 26.266759][ T36] audit: type=1400 audit(1762304240.630:187): avc: denied { setopt } for pid=451 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.560361][ T404] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.569721][ T36] audit: type=1400 audit(1762304240.930:188): avc: denied { setopt } for pid=458 comm="syz.2.42" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.595834][ T36] audit: type=1400 audit(1762304240.950:189): avc: denied { read } for pid=458 comm="syz.2.42" path="socket:[3648]" dev="sockfs" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.618973][ T36] audit: type=1400 audit(1762304240.970:190): avc: denied { ioctl } for pid=460 comm="syz.2.43" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.644962][ T36] audit: type=1400 audit(1762304240.980:191): avc: denied { read } for pid=460 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.721502][ T404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.731672][ T404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.740574][ T404] usb 2-1: config 1 has no interface number 0 [ 26.746773][ T404] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.761219][ T404] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.770723][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.778763][ T404] usb 2-1: Product: syz [ 26.783049][ T404] usb 2-1: Manufacturer: syz [ 26.787754][ T404] usb 2-1: SerialNumber: syz [ 26.794465][ T404] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 26.801927][ T404] cdc_ncm 2-1:1.1: bind() failure [ 26.996344][ T36] audit: type=1400 audit(1762304241.360:192): avc: denied { write } for pid=456 comm="syz.1.41" name="softnet_stat" dev="proc" ino=4026532553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.023959][ T450] usb 4-1: USB disconnect, device number 2 [ 27.058127][ T36] audit: type=1400 audit(1762304241.420:193): avc: denied { create } for pid=464 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.085013][ T331] usb 1-1: USB disconnect, device number 3 [ 27.091053][ T36] audit: type=1400 audit(1762304241.420:194): avc: denied { write } for pid=464 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.118376][ T36] audit: type=1400 audit(1762304241.420:195): avc: denied { setopt } for pid=464 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.139199][ T36] audit: type=1400 audit(1762304241.420:196): avc: denied { write } for pid=439 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.184189][ T31] usb 2-1: USB disconnect, device number 2 [ 27.445875][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.454396][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.463250][ T472] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 27.470357][ T450] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.477075][ T471] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 27.621675][ T450] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.631495][ T450] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.641589][ T450] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.657394][ T450] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 27.666495][ T450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.674544][ T450] usb 4-1: Product: syz [ 27.678842][ T450] usb 4-1: Manufacturer: syz [ 27.683548][ T450] usb 4-1: SerialNumber: syz [ 27.693558][ T450] hub 4-1:1.0: bad descriptor, ignoring hub [ 27.699553][ T450] hub 4-1:1.0: probe with driver hub failed with error -5 [ 27.753693][ T491] netlink: 'syz.0.55': attribute type 27 has an invalid length. [ 27.754019][ T492] __vm_enough_memory: pid: 492, comm: syz.1.54, bytes: 18014402804453376 not enough memory for the allocation [ 27.856045][ T502] kvm: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 27.864661][ T502] kvm: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 27.875184][ T502] kvm: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 27.886737][ T502] kvm: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 27.896173][ T502] kvm: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 27.905453][ T450] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 27.918696][ T502] kvm_intel: kvm [500]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 28.050675][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.114845][ T520] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 28.155371][ T526] rust_binder: Error while translating object. [ 28.155414][ T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.162143][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 28.211611][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.230872][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.240641][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.249677][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.257724][ T10] usb 1-1: SerialNumber: syz [ 28.466185][ T10] usb 1-1: 0:2 : does not exist [ 28.471681][ T10] usb 1-1: unit 5 not found! [ 28.478892][ T10] usb 1-1: USB disconnect, device number 4 [ 28.533568][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.690710][ T450] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 28.841764][ T450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.849832][ T450] usb 3-1: not running at top speed; connect to a high speed hub [ 28.858695][ T450] usb 3-1: config 39 has an invalid interface number: 132 but max is 3 [ 28.867010][ T450] usb 3-1: config 39 has an invalid interface descriptor of length 2, skipping [ 28.876007][ T450] usb 3-1: config 39 contains an unexpected descriptor of type 0x1, skipping [ 28.884808][ T450] usb 3-1: config 39 has an invalid interface number: 230 but max is 3 [ 28.893077][ T450] usb 3-1: config 39 has an invalid interface number: 160 but max is 3 [ 28.901340][ T450] usb 3-1: config 39 has no interface number 0 [ 28.907484][ T450] usb 3-1: config 39 has no interface number 1 [ 28.913655][ T450] usb 3-1: config 39 has no interface number 3 [ 28.919818][ T450] usb 3-1: config 39 interface 132 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 28.931386][ T450] usb 3-1: config 39 interface 132 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 28.931884][ T402] usb 4-1: USB disconnect, device number 3 [ 28.942467][ T450] usb 3-1: config 39 interface 132 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 28.950048][ T402] usblp0: removed [ 28.961649][ T450] usb 3-1: config 39 interface 230 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 28.976104][ T450] usb 3-1: config 39 interface 230 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 28.987207][ T450] usb 3-1: config 39 interface 230 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 28.998279][ T450] usb 3-1: config 39 interface 132 has no altsetting 0 [ 29.005151][ T450] usb 3-1: config 39 interface 230 has no altsetting 0 [ 29.012040][ T450] usb 3-1: config 39 interface 160 has no altsetting 0 [ 29.018886][ T450] usb 3-1: config 39 interface 2 has no altsetting 0 [ 29.031062][ T450] usb 3-1: string descriptor 0 read error: -22 [ 29.035026][ T544] syz.1.72 (544): attempted to duplicate a private mapping with mremap. This is not supported. [ 29.037291][ T450] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db70, bcdDevice=7a.7d [ 29.057137][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.066585][ T542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 29.282486][ T402] usb 3-1: USB disconnect, device number 2 [ 29.463393][ T555] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.76'. [ 29.473633][ T555] rust_binder: Error while translating object. [ 29.473663][ T555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.479817][ T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:43 [ 29.500698][ T557] rust_binder: Error while translating object. [ 29.509783][ T557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.516067][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:45 [ 29.612832][ T569] 9pnet_fd: Insufficient options for proto=fd [ 29.642924][ T573] fuse: Bad value for 'fd' [ 29.668521][ T576] overlayfs: failed to clone lowerpath [ 29.685510][ T579] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 29.799602][ T594] rust_binder: Error while translating object. [ 29.799654][ T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.805921][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:35 [ 29.816804][ T595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.090416][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.233626][ T612] rust_binder: Write failure EFAULT in pid:74 [ 30.240386][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 30.252598][ T9] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 30.262910][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 30.271966][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.283163][ T9] ftdi_sio 3-1:254.0: Ignoring interface reserved for JTAG [ 30.422642][ T623] netlink: 104 bytes leftover after parsing attributes in process `syz.1.97'. [ 30.486020][ T9] usb 3-1: USB disconnect, device number 3 [ 30.494529][ T629] process 'syz.2.98' launched './file0' with NULL argv: empty string added [ 30.578161][ T639] rust_binder: Error while translating object. [ 30.578188][ T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.584416][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54 [ 30.595161][ T640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.595604][ T641] rust_binder: Write failure EINVAL in pid:54 [ 31.170382][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.274343][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 31.274360][ T36] audit: type=1400 audit(1762304245.640:257): avc: denied { getattr } for pid=668 comm="syz.3.109" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.302951][ T36] audit: type=1400 audit(1762304245.640:258): avc: denied { write } for pid=668 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.425223][ T675] loop2: detected capacity change from 0 to 8388607 [ 31.436261][ T339] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 31.456113][ T450] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 31.500108][ T36] audit: type=1400 audit(1762304245.860:259): avc: denied { accept } for pid=676 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.500907][ T677] rust_binder: 83: no such ref 1 [ 31.519466][ T36] audit: type=1400 audit(1762304245.870:260): avc: denied { ioctl } for pid=676 comm="syz.3.113" path="socket:[5298]" dev="sockfs" ino=5298 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.524648][ T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 31.564610][ T36] audit: type=1326 audit(1762304245.930:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7d78f6c9 code=0x7fc00000 [ 31.596913][ T36] audit: type=1400 audit(1762304245.960:262): avc: denied { name_bind } for pid=679 comm="syz.3.114" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 31.631523][ T450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.642506][ T450] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 31.651697][ T450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.660795][ T450] usb 1-1: config 0 descriptor?? [ 31.666076][ T662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.681780][ T36] audit: type=1400 audit(1762304246.040:263): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.701612][ T36] audit: type=1400 audit(1762304246.070:264): avc: denied { ioctl } for pid=693 comm="syz.2.119" path="socket:[5359]" dev="sockfs" ino=5359 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.857824][ T704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 31.878195][ T706] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET) [ 31.913646][ T713] ======================================================= [ 31.913646][ T713] WARNING: The mand mount option has been deprecated and [ 31.913646][ T713] and is ignored by this kernel. Remove the mand [ 31.913646][ T713] option from the mount to silence this warning. [ 31.913646][ T713] ======================================================= [ 31.949815][ T36] audit: type=1400 audit(1762304246.320:265): avc: denied { mount } for pid=712 comm="syz.1.126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 31.973822][ T36] audit: type=1400 audit(1762304246.340:266): avc: denied { mount } for pid=718 comm="syz.1.127" name="/" dev="ramfs" ino=5415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.080720][ T740] netlink: 'syz.1.136': attribute type 12 has an invalid length. [ 32.081761][ T662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.100527][ T662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.117271][ T450] usbhid 1-1:0.0: can't add hid device: -71 [ 32.124961][ T450] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.139310][ T450] usb 1-1: USB disconnect, device number 5 [ 32.634307][ T763] capability: warning: `syz.0.144' uses deprecated v2 capabilities in a way that may be insecure [ 32.947064][ T781] fuse: Bad value for 'fd' [ 32.953309][ T782] fuse: Bad value for 'fd' [ 33.002966][ T785] SELinux: security_context_str_to_sid () failed with errno=-22 [ 33.156598][ T790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.156627][ T790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 33.273849][ T796] binder: Unknown parameter 'dont_measure' [ 33.289344][ T796] /dev/nbd0: Can't lookup blockdev [ 33.621765][ T804] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 33.654743][ T809] binder: Unknown parameter 'fscontext?}' [ 33.753535][ T817] incfs: Options parsing error. -22 [ 33.758902][ T817] incfs: mount failed -22 [ 33.820757][ T822] rust_binder: Error while translating object. [ 33.820816][ T822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.827017][ T822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 33.867151][ T833] rust_binder: Error while translating object. [ 33.871631][ T837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 33.882735][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:84 [ 33.887373][ T833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.912035][ T833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 33.936276][ T844] rust_binder: Write failure EINVAL in pid:123 [ 33.969013][ T845] overlayfs: failed to clone upperpath [ 33.981907][ T845] netlink: 'syz.1.170': attribute type 28 has an invalid length. [ 33.990000][ T845] fuse: Bad value for 'fd' [ 34.150378][ T402] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.311600][ T402] usb 1-1: config 1 has an invalid interface number: 239 but max is 0 [ 34.319823][ T402] usb 1-1: config 1 has no interface number 0 [ 34.325967][ T402] usb 1-1: config 1 interface 239 has no altsetting 0 [ 34.334194][ T402] usb 1-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 34.343280][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.350347][ T331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.351279][ T402] usb 1-1: Product: syz [ 34.362896][ T402] usb 1-1: Manufacturer: syz [ 34.367482][ T402] usb 1-1: SerialNumber: syz [ 34.503342][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.514292][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.524216][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.537303][ T331] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.546393][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.555526][ T331] usb 4-1: config 0 descriptor?? [ 34.575946][ T402] ums-sddr09 1-1:1.239: USB Mass Storage device detected [ 34.602847][ T402] usb 1-1: USB disconnect, device number 6 [ 34.966415][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 34.972645][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.981370][ T331] usb 4-1: USB disconnect, device number 4 [ 35.087986][ T864] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 35.096141][ T864] rust_binder: 88: no such ref 2 [ 35.101431][ T864] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 35.117945][ T866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 35.169475][ T871] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 35.199440][ T874] rust_binder: Failed copying remainder into alloc: EFAULT [ 35.199455][ T874] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 35.206870][ T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.215309][ T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:98 [ 35.234929][ T876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.244557][ T876] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 35.261471][ T878] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 35.434523][ T900] rust_binder: Error while translating object. [ 35.434555][ T900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.440866][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:111 [ 35.505426][ T912] netlink: 25 bytes leftover after parsing attributes in process `syz.1.196'. [ 35.524481][ T914] netlink: 'syz.1.196': attribute type 4 has an invalid length. [ 35.542636][ T920] netlink: 'syz.1.198': attribute type 27 has an invalid length. [ 35.603100][ T922] overlayfs: unescaped trailing colons in lowerdir mount option. [ 35.732265][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 35.750953][ T931] rust_binder: Error while translating object. [ 35.750974][ T931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 35.757274][ T931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:128 [ 35.801049][ T938] sit0: entered promiscuous mode [ 35.816238][ T938] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 35.824216][ T938] netlink: 1 bytes leftover after parsing attributes in process `syz.0.205'. [ 35.839955][ T938] devpts: called with bogus options [ 36.003559][ T942] kvm: emulating exchange as write [ 36.012700][ T942] rust_binder: Write failure EFAULT in pid:131 [ 36.092189][ T958] mmap: syz.1.212 (958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.114121][ T963] rust_binder: Error while translating object. [ 36.114167][ T963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.120829][ T964] rust_binder: Error while translating object. [ 36.131872][ T963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 36.138307][ T964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.147768][ T964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 36.159748][ T971] overlayfs: failed to clone upperpath [ 36.175656][ T973] rust_binder: Write failure EFAULT in pid:146 [ 36.180364][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.198198][ T975] rust_binder: Write failure EINVAL in pid:148 [ 36.296767][ T1001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 36.340351][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 36.348448][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.357353][ T9] usb 1-1: config 0 has no interface number 0 [ 36.363881][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 36.374184][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.383540][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.391612][ T9] usb 1-1: Product: syz [ 36.396492][ T9] usb 1-1: Manufacturer: syz [ 36.401649][ T9] usb 1-1: SerialNumber: syz [ 36.409335][ T9] usb 1-1: config 0 descriptor?? [ 36.418122][ T9] smsc75xx v1.0.0 [ 36.618293][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 36.629316][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 36.639170][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 36.649518][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 37.288167][ T1037] capability: warning: `syz.1.239' uses 32-bit capabilities (legacy support in use) [ 37.322785][ T450] usb 1-1: USB disconnect, device number 7 [ 37.412749][ T1046] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 37.429975][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 37.429991][ T36] audit: type=1400 audit(1762304251.790:289): avc: denied { remount } for pid=1047 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.482983][ T36] audit: type=1400 audit(1762304251.850:290): avc: denied { compute_member } for pid=1047 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.798506][ T36] audit: type=1326 audit(1762304252.160:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.2.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 37.822568][ T36] audit: type=1400 audit(1762304252.190:292): avc: denied { bind } for pid=1053 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.868324][ T1071] Zero length message leads to an empty skb [ 38.394732][ T36] audit: type=1400 audit(1762304252.760:293): avc: denied { map } for pid=1085 comm="syz.3.255" path="socket:[7343]" dev="sockfs" ino=7343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 38.473872][ T1099] netlink: 'syz.3.258': attribute type 4 has an invalid length. [ 38.481623][ T1099] netlink: 'syz.3.258': attribute type 5 has an invalid length. [ 38.489256][ T1099] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.258'. [ 38.499092][ T1099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1099 comm=syz.3.258 [ 38.532046][ T1103] overlay: ./file0 is not a directory [ 38.690543][ T36] audit: type=1400 audit(1762304253.060:294): avc: denied { setopt } for pid=1105 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.709827][ T36] audit: type=1400 audit(1762304253.060:295): avc: denied { create } for pid=1105 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 39.020370][ T450] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.170361][ T450] usb 1-1: Using ep0 maxpacket: 16 [ 39.176663][ T450] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.187643][ T450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.194296][ T450] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 39.203717][ T450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.212548][ T450] usb 1-1: config 0 descriptor?? [ 39.475104][ T36] audit: type=1400 audit(1762304253.840:296): avc: denied { watch } for pid=1108 comm="syz.0.262" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 39.498503][ T450] usbhid 1-1:0.0: can't add hid device: -71 [ 39.504578][ T450] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.513552][ T450] usb 1-1: USB disconnect, device number 8 [ 39.744814][ T1156] cgroup: Name too long [ 39.758026][ T1161] fuse: Bad value for 'fd' [ 39.769805][ T1163] binder: Bad value for 'defcontext' [ 39.929356][ T36] audit: type=1400 audit(1762304254.290:297): avc: denied { create } for pid=1172 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 39.997335][ T36] audit: type=1400 audit(1762304254.360:298): avc: denied { read } for pid=1176 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.049223][ T1185] netlink: 312 bytes leftover after parsing attributes in process `syz.3.291'. [ 40.386318][ T1241] netlink: 316 bytes leftover after parsing attributes in process `syz.2.310'. [ 40.395674][ T1241] netlink: 316 bytes leftover after parsing attributes in process `syz.2.310'. [ 40.486581][ T1253] netlink: 'syz.2.315': attribute type 12 has an invalid length. [ 40.716738][ T1278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 40.798418][ T1290] tipc: Enabling not permitted [ 40.809716][ T1290] tipc: Enabling of bearer rejected, failed to enable media [ 40.858993][ T1302] netlink: 'syz.2.330': attribute type 3 has an invalid length. [ 40.866693][ T1302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 40.873695][ T1294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 40.884554][ T1304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 40.926561][ T1315] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.023001][ T1327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 41.023044][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:179 [ 41.043474][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.669974][ T329] tipc: Subscription rejected, illegal request [ 42.034212][ T1409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 42.043934][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 42.163911][ T1419] overlayfs: failed to clone upperpath [ 42.169886][ T1418] overlayfs: failed to clone upperpath [ 42.571036][ T1431] netlink: 120 bytes leftover after parsing attributes in process `syz.2.374'. [ 42.580061][ T1431] netlink: 96 bytes leftover after parsing attributes in process `syz.2.374'. [ 42.606865][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 42.606882][ T36] audit: type=1400 audit(1762304256.973:313): avc: denied { write } for pid=1435 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.090404][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 43.090437][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.144881][ T1439] fuse: Bad value for 'fd' [ 43.625799][ T36] audit: type=1400 audit(1762304257.993:314): avc: denied { read } for pid=1447 comm="syz.0.380" path="socket:[8005]" dev="sockfs" ino=8005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.677395][ T36] audit: type=1400 audit(1762304258.043:315): avc: denied { setattr } for pid=1447 comm="syz.0.380" name="NETLINK" dev="sockfs" ino=8505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.700846][ T36] audit: type=1400 audit(1762304258.043:316): avc: denied { watch } for pid=1447 comm="syz.0.380" path="/66/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.737069][ T36] audit: type=1400 audit(1762304258.103:317): avc: denied { shutdown } for pid=1450 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.822821][ T36] audit: type=1400 audit(1762304258.193:318): avc: denied { read } for pid=1453 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.825373][ T1455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 43.842175][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.851391][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.857823][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.864290][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.870739][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.877153][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.883591][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.890022][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.896477][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.902925][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.909332][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.915767][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.922212][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.928626][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.935077][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.941580][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.948017][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.954462][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.960910][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.967323][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.973983][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.980446][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.986905][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.993429][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.999843][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.006296][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.012740][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.019156][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.025981][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.032450][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.038870][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.045315][ T1454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.090735][ T1465] rust_binder: Write failure EFAULT in pid:202 [ 44.870803][ T36] audit: type=1400 audit(1762304259.243:319): avc: denied { getopt } for pid=1503 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.897295][ T36] audit: type=1400 audit(1762304259.243:320): avc: denied { ioctl } for pid=1503 comm="syz.1.399" path="socket:[8086]" dev="sockfs" ino=8086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.007065][ T1508] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 45.220923][ T1510] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 45.891434][ T36] audit: type=1400 audit(1762304260.263:321): avc: denied { mounton } for pid=1555 comm="syz.0.419" path="/74/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.935565][ T36] audit: type=1400 audit(1762304260.303:322): avc: denied { getopt } for pid=1559 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.348296][ T1604] overlayfs: failed to clone upperpath [ 46.374697][ T1609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.441'. [ 46.391784][ T1613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 46.400765][ T1614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 46.817340][ T1630] x_tables: duplicate underflow at hook 2 [ 46.935857][ T1640] 9pnet_fd: Insufficient options for proto=fd [ 47.068933][ T1649] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 47.097419][ T1656] overlayfs: failed to clone lowerpath [ 47.690776][ T1689] netlink: 'syz.3.470': attribute type 11 has an invalid length. [ 48.059476][ T1717] veth0_virt_wifi: mtu less than device minimum [ 48.059479][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.059491][ T36] audit: type=1400 audit(1762304262.423:327): avc: denied { ioctl } for pid=1716 comm="syz.2.479" path="socket:[9435]" dev="sockfs" ino=9435 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.065835][ T1718] veth0_virt_wifi: mtu less than device minimum [ 48.103388][ T36] audit: type=1400 audit(1762304262.473:328): avc: denied { shutdown } for pid=1716 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.379335][ T36] audit: type=1400 audit(1762304262.743:329): avc: denied { create } for pid=1734 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.424517][ T36] audit: type=1326 audit(2000000000.010:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.3.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a0658f6c9 code=0x0 [ 48.462199][ T1751] netlink: 'syz.1.489': attribute type 4 has an invalid length. [ 48.526257][ T36] audit: type=1400 audit(2000000000.110:331): avc: denied { name_bind } for pid=1744 comm="syz.3.487" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.663545][ T36] audit: type=1400 audit(2000000000.250:332): avc: denied { execute } for pid=1800 comm="syz.2.505" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.899705][ T1807] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 48.907739][ T1810] fuse: Bad value for 'fd' [ 48.922006][ T1810] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 48.935631][ T1810] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.070480][ T1823] cgroup: fork rejected by pids controller in /syz1 [ 49.216073][ T1874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 49.316638][ T36] audit: type=1400 audit(2000000000.900:333): avc: denied { mount } for pid=1889 comm="syz.3.526" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.790996][ T1921] /dev/rnullb0: Can't lookup blockdev [ 49.982033][ T1935] netlink: 188 bytes leftover after parsing attributes in process `syz.2.542'. [ 49.997671][ T36] audit: type=1400 audit(2000000001.580:334): avc: denied { load_policy } for pid=1934 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.002905][ T1935] SELinux: failed to load policy [ 50.041289][ T1940] binder: Unknown parameter '¾£¸éßCý\ü}^? ´¡®Öo1—´¸z|{òXZÜvÙú' [ 50.075936][ T1950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.549'. [ 50.084913][ T1950] netlink: 43 bytes leftover after parsing attributes in process `syz.2.549'. [ 50.093825][ T1950] netlink: 'syz.2.549': attribute type 5 has an invalid length. [ 50.101615][ T1950] netlink: 43 bytes leftover after parsing attributes in process `syz.2.549'. [ 50.136736][ T1957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 50.145822][ T1956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 50.261677][ T329] bridge_slave_1: left allmulticast mode [ 50.267371][ T329] bridge_slave_1: left promiscuous mode [ 50.276223][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.284340][ T329] bridge_slave_0: left allmulticast mode [ 50.290002][ T329] bridge_slave_0: left promiscuous mode [ 50.295832][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.383447][ T1978] overlayfs: failed to clone upperpath [ 50.390344][ T36] audit: type=1400 audit(2000000001.970:335): avc: denied { mounton } for pid=1979 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.420034][ T329] veth1_macvtap: left promiscuous mode [ 50.425826][ T329] veth0_vlan: left promiscuous mode [ 50.485305][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.492410][ T1979] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.499447][ T1979] bridge_slave_0: entered allmulticast mode [ 50.505788][ T1979] bridge_slave_0: entered promiscuous mode [ 50.512377][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.519500][ T1979] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.526629][ T1979] bridge_slave_1: entered allmulticast mode [ 50.532998][ T1979] bridge_slave_1: entered promiscuous mode [ 50.573803][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.580914][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.588169][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.595226][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.613543][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.621074][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.631494][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.638544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.648065][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.655135][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.684847][ T1979] veth0_vlan: entered promiscuous mode [ 50.695128][ T1979] veth1_macvtap: entered promiscuous mode [ 59.577475][ T2007] /dev/nbd3: Can't lookup blockdev [ 59.800348][ T435] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.960337][ T435] usb 5-1: Using ep0 maxpacket: 32 [ 59.970393][ T435] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 59.983602][ T435] usb 5-1: config 1 has no interface number 0 [ 59.999894][ T435] usb 5-1: config 1 interface 232 has no altsetting 0 [ 60.011376][ T435] usb 5-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5 [ 60.021609][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.039783][ T435] usb 5-1: Product: syz [ 60.046213][ T435] usb 5-1: Manufacturer: syz [ 60.053111][ T435] usb 5-1: SerialNumber: syz [ 60.272577][ T2002] rust_binder: Error while translating object. [ 60.272609][ T2002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.279045][ T2002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:7 [ 60.290497][ T435] usb 5-1: Found UVC 0.00 device syz (174f:8a34) [ 60.309342][ T435] usb 5-1: No valid video chain found. [ 60.316764][ T435] usb 5-1: USB disconnect, device number 2 [ 60.562213][ T2065] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 60.574350][ T36] audit: type=1400 audit(2000000012.126:336): avc: denied { relabelto } for pid=2064 comm="syz.1.587" name="file0" dev="ramfs" ino=9888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 60.601968][ T36] audit: type=1400 audit(2000000012.126:337): avc: denied { associate } for pid=2064 comm="syz.1.587" name="file0" dev="ramfs" ino=9888 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 60.699885][ T36] audit: type=1400 audit(2000000012.248:338): avc: denied { wake_alarm } for pid=2069 comm="syz.3.588" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.754542][ T36] audit: type=1400 audit(2000000012.295:339): avc: denied { create } for pid=2069 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.852584][ T2074] rust_binder: Error while translating object. [ 60.852613][ T2074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.858792][ T2074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 60.890369][ T2076] fuse: Bad value for 'group_id' [ 60.905579][ T2080] overlayfs: missing 'lowerdir' [ 60.916060][ T2076] fuse: Bad value for 'group_id' [ 60.926188][ T2080] overlayfs: failed to resolve './file1': -2 [ 60.926505][ T2076] fuse: Bad value for 'group_id' [ 60.937443][ T2076] fuse: Bad value for 'group_id' [ 60.943711][ T2076] fuse: Bad value for 'group_id' [ 60.953295][ T2076] fuse: Bad value for 'group_id' [ 60.970169][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 61.638340][ T36] audit: type=1400 audit(2000000013.130:340): avc: denied { write } for pid=2103 comm="syz.4.600" name="fib_triestat" dev="proc" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.650464][ T2104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2104 comm=syz.4.600 [ 61.666208][ T36] audit: type=1400 audit(2000000013.130:341): avc: denied { setattr } for pid=2106 comm="syz.3.601" name="RAW" dev="sockfs" ino=11016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.696815][ T36] audit: type=1400 audit(2000000013.158:342): avc: denied { ioctl } for pid=2109 comm="syz.3.602" path="socket:[11851]" dev="sockfs" ino=11851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.780920][ T36] audit: type=1400 audit(2000000013.271:343): avc: denied { setopt } for pid=2112 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.800735][ T36] audit: type=1400 audit(2000000013.271:344): avc: denied { write } for pid=2112 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.820885][ T36] audit: type=1400 audit(2000000013.271:345): avc: denied { read } for pid=2112 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.872754][ T2131] tipc: Started in network mode [ 61.879097][ T2131] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 61.888295][ T2131] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 61.896693][ T2131] tipc: Enabled bearer , priority 10 [ 62.000754][ T2157] fuse: Unknown parameter 'gr_aN딵woup_if' [ 62.020396][ T2166] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60442 sclass=netlink_xfrm_socket pid=2166 comm=syz.4.620 [ 62.101959][ T2179] netlink: 'syz.4.623': attribute type 9 has an invalid length. [ 62.109704][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 62.385861][ T2209] devpts: called with bogus options [ 62.418319][ T65] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 62.575901][ T2233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 62.579620][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.592799][ T65] usb 5-1: not running at top speed; connect to a high speed hub [ 62.601310][ T65] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 62.611429][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.622018][ T65] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.631099][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.639120][ T65] usb 5-1: Product: syz [ 62.643319][ T65] usb 5-1: Manufacturer: syz [ 62.647895][ T65] usb 5-1: SerialNumber: syz [ 62.868302][ T2183] rust_binder: Failed to allocate buffer. len:12216, is_oneway:false [ 62.869391][ T65] usb 5-1: 0:2 : does not exist [ 62.884332][ T65] usb 5-1: USB disconnect, device number 3 [ 62.893198][ T2005] udevd[2005]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.100391][ T31] tipc: Node number set to 1 [ 63.514831][ T2265] rust_binder: Error while translating object. [ 63.514861][ T2265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.521211][ T2265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 63.759828][ T2302] netlink: 'syz.3.668': attribute type 6 has an invalid length. [ 63.784677][ T2302] fuse: Bad value for 'user_id' [ 63.789585][ T2302] fuse: Bad value for 'user_id' [ 63.893880][ T2323] overlayfs: failed to clone upperpath [ 63.900710][ T2323] incfs: Error accessing: ./file0. [ 63.905834][ T2323] incfs: mount failed -20 [ 64.515930][ T2351] rust_binder: Error while translating object. [ 64.515974][ T2351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.522259][ T2351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 64.550592][ T2353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 64.559817][ T2353] rust_binder: 2353 RLIMIT_NICE not set [ 64.909036][ T2367] netlink: 116 bytes leftover after parsing attributes in process `syz.1.693'. [ 65.276758][ T2384] tmpfs: Unknown parameter 'hugeÌ' [ 65.488785][ T2388] cgroup: name respecified [ 65.993698][ T2446] !@ÿ: renamed from xfrm0 (while UP) [ 66.363245][ T2457] binder: Bad value for 'stats' [ 66.377632][ T2459] fuse: Bad value for 'fd' [ 66.383199][ T2459] netlink: 'syz.2.725': attribute type 58 has an invalid length. [ 66.391700][ T2459] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 66.616270][ T2483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 66.671559][ T2492] overlayfs: failed to clone upperpath [ 66.694306][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 66.694322][ T36] audit: type=1400 audit(2000000017.874:370): avc: denied { create } for pid=2493 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.171746][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.332646][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.344226][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.355426][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 67.365177][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.378070][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.387130][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.395902][ T31] usb 5-1: config 0 descriptor?? [ 67.425251][ T2540] fuse: Unknown parameter 'ff' [ 67.623030][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 67.628783][ T2555] raw_sendmsg: syz.4.761 forgot to set AF_INET. Fix it! [ 67.629100][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.638767][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 67.659091][ T31] usb 5-1: USB disconnect, device number 4 [ 67.761600][ T36] audit: type=1400 audit(2000000018.868:371): avc: denied { read } for pid=2570 comm="syz.4.767" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.845907][ T36] audit: type=1400 audit(2000000018.868:372): avc: denied { open } for pid=2570 comm="syz.4.767" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.878693][ T2582] rust_binder: Write failure EINVAL in pid:123 [ 67.930377][ T2592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 67.955470][ T2596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 67.971203][ T2600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 68.013838][ T2613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=2613 comm=syz.1.777 [ 68.078224][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.682164][ T2676] syzkaller0: entered promiscuous mode [ 68.687927][ T2675] syzkaller0: entered allmulticast mode [ 68.699900][ T2675] syzkaller0: left allmulticast mode [ 68.705297][ T2675] syzkaller0: left promiscuous mode [ 69.021760][ T36] audit: type=1326 audit(2000000020.060:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2704 comm="syz.3.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0658f6c9 code=0x0 [ 69.044480][ T36] audit: type=1326 audit(2000000020.060:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2704 comm="syz.3.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0658f6c9 code=0x0 [ 69.887414][ T2737] netlink: 488 bytes leftover after parsing attributes in process `syz.2.822'. [ 70.164420][ T36] audit: type=1400 audit(2000000021.129:375): avc: denied { remount } for pid=2760 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 70.273434][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 70.273434][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.840156][ T36] audit: type=1400 audit(2000000021.767:376): avc: denied { getopt } for pid=2788 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.864897][ T2791] futex_wake_op: syz.3.842 tries to shift op by 32; fix this program [ 70.877273][ T2791] bridge0: port 3(macsec0) entered blocking state [ 70.884097][ T2791] bridge0: port 3(macsec0) entered disabled state [ 70.890575][ T2791] macsec0: entered allmulticast mode [ 70.895957][ T2791] veth1_macvtap: entered allmulticast mode [ 70.902065][ T2791] macsec0: entered promiscuous mode [ 70.907520][ T2791] bridge0: port 3(macsec0) entered blocking state [ 70.913972][ T2791] bridge0: port 3(macsec0) entered forwarding state [ 70.930091][ T2793] rust_binder: Write failure EINVAL in pid:133 [ 70.973445][ T36] audit: type=1400 audit(2000000021.889:377): avc: denied { getopt } for pid=2804 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.010924][ T2811] wg0: entered allmulticast mode [ 71.148386][ T2826] input: syz0 as /devices/virtual/input/input8 [ 71.155145][ T36] audit: type=1400 audit(2000000022.058:378): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.177450][ T36] audit: type=1400 audit(2000000022.058:379): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.269773][ T2829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 71.595128][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.696710][ T2858] fuse: Unknown parameter 'fÞ³0x0000000000000006' [ 71.721821][ T2861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2861 comm=syz.1.866 [ 71.764290][ T2867] overlayfs: failed to clone upperpath [ 71.765633][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 71.776068][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.787737][ T65] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 71.796798][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.805082][ T65] usb 5-1: Product: syz [ 71.810590][ T65] usb 5-1: Manufacturer: syz [ 71.815233][ T65] usb 5-1: SerialNumber: syz [ 71.820653][ T65] usb 5-1: config 0 descriptor?? [ 71.827823][ T65] usb 5-1: bad CDC descriptors [ 71.833131][ T65] usb 5-1: unsupported MDLM descriptors [ 71.885422][ T2878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.872'. [ 71.895990][ T2878] netlink: 35 bytes leftover after parsing attributes in process `syz.1.872'. [ 72.048523][ T65] usb 5-1: USB disconnect, device number 5 [ 72.203936][ T2891] tmpfs: Bad value for 'size' [ 72.223328][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 72.223343][ T36] audit: type=1400 audit(2000000023.053:382): avc: denied { create } for pid=2896 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.267318][ T2909] netlink: 'syz.3.880': attribute type 28 has an invalid length. [ 72.287390][ T36] audit: type=1400 audit(2000000023.118:383): avc: denied { nlmsg_tty_audit } for pid=2912 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 72.334053][ T2917] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 72.334148][ T2918] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 72.345852][ T2917] overlayfs: missing 'lowerdir' [ 72.357614][ T2918] overlayfs: missing 'lowerdir' [ 72.490809][ T2945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.891'. [ 72.596130][ T2947] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 72.606121][ T36] audit: type=1400 audit(2000000023.428:384): avc: denied { relabelto } for pid=2946 comm="syz.4.892" name="file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 72.615058][ T2947] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 72.632817][ T2947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 72.632969][ T36] audit: type=1400 audit(2000000023.428:385): avc: denied { associate } for pid=2946 comm="syz.4.892" name="file0" dev="tmpfs" ino=261 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 72.640808][ T2947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:150 [ 72.677933][ T36] audit: type=1400 audit(2000000023.465:386): avc: denied { execute } for pid=2948 comm="syz.4.893" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.783427][ T2966] rust_binder: Error while translating object. [ 72.783456][ T2966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.789747][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 72.817513][ T36] audit: type=1400 audit(2000000023.616:387): avc: denied { nlmsg_read } for pid=2968 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.103879][ T36] audit: type=1400 audit(2000000023.888:388): avc: denied { map } for pid=2982 comm="syz.3.902" path="socket:[13955]" dev="sockfs" ino=13955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.166436][ T36] audit: type=1400 audit(2000000023.944:389): avc: denied { mount } for pid=2988 comm="syz.2.905" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.187405][ T2991] rust_binder: Error while translating object. [ 73.188950][ T2991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 73.189050][ T36] audit: type=1400 audit(2000000023.944:390): avc: denied { search } for pid=2988 comm="syz.2.905" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.195610][ T2991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:178 [ 73.204638][ T36] audit: type=1400 audit(2000000023.944:391): avc: denied { read } for pid=2988 comm="syz.2.905" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.264931][ T2995] rust_binder: Error while translating object. [ 73.264964][ T2995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.271219][ T2995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:180 [ 73.545660][ T402] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.717227][ T402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.725620][ T402] usb 5-1: config 0 has no interface number 0 [ 73.732133][ T402] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.743084][ T402] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.752870][ T402] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 73.762086][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.771441][ T402] usb 5-1: config 0 descriptor?? [ 74.207483][ T402] prodikeys 0003:041E:2801.0002: item fetching failed at offset 3/7 [ 74.215956][ T402] prodikeys 0003:041E:2801.0002: hid parse failed [ 74.222707][ T402] prodikeys 0003:041E:2801.0002: probe with driver prodikeys failed with error -22 [ 74.440066][ T402] usb 5-1: USB disconnect, device number 6 [ 74.922380][ T3042] /dev/loop0: Can't lookup blockdev [ 75.293661][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.454746][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.465909][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.475769][ T65] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 75.484873][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.493397][ T65] usb 5-1: config 0 descriptor?? [ 75.644233][ T3048] overlayfs: failed to clone upperpath [ 75.764799][ T3054] fuseblk: Bad value for 'source' [ 75.770777][ T3054] overlayfs: conflicting options: nfs_export=on,index=off [ 75.928018][ T65] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 75.935096][ T65] lenovo 0003:17EF:6047.0003: item fetching failed at offset 3/5 [ 75.942940][ T65] lenovo 0003:17EF:6047.0003: hid_parse failed [ 75.949157][ T65] lenovo 0003:17EF:6047.0003: probe with driver lenovo failed with error -22 [ 76.146343][ T3046] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 76.146944][ T402] usb 5-1: USB disconnect, device number 7 [ 76.692285][ T3110] netlink: 'syz.4.939': attribute type 27 has an invalid length. [ 76.715580][ T3110] rust_binder: Write failure EINVAL in pid:188 [ 76.716253][ T3110] 9pnet_fd: Insufficient options for proto=fd [ 76.729314][ T3110] overlayfs: overlapping lowerdir path [ 76.848242][ T3119] FAT-fs (rnullb0): bogus number of reserved sectors [ 76.855113][ T3119] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 77.025738][ T3136] tipc: Enabling of bearer rejected, media not registered [ 77.139736][ T3162] netlink: 'syz.3.959': attribute type 13 has an invalid length. [ 77.201777][ T3174] netlink: 'syz.3.965': attribute type 4 has an invalid length. [ 77.209600][ T3174] netlink: 17 bytes leftover after parsing attributes in process `syz.3.965'. [ 77.220650][ T3174] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 77.228918][ T3174] netlink: 'syz.3.965': attribute type 2 has an invalid length. [ 77.376023][ T3230] veth1: entered allmulticast mode [ 77.381674][ T3229] veth1: left allmulticast mode [ 78.890386][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.897461][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.904515][ T3454] bridge_slave_0: entered allmulticast mode [ 78.910871][ T3454] bridge_slave_0: entered promiscuous mode [ 78.917329][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.924408][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.931516][ T3454] bridge_slave_1: entered allmulticast mode [ 78.937666][ T3454] bridge_slave_1: entered promiscuous mode [ 79.029689][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.036832][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.047070][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.054487][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.125234][ T3454] veth0_vlan: entered promiscuous mode [ 79.136264][ T3475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1021'. [ 79.145509][ T3475] tipc: Invalid UDP bearer configuration [ 79.145533][ T3475] tipc: Enabling of bearer rejected, failed to enable media [ 79.166092][ T3454] veth1_macvtap: entered promiscuous mode [ 79.197340][ T3487] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1025'. [ 79.217780][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 79.217796][ T36] audit: type=1400 audit(2000000029.629:396): avc: denied { map } for pid=3484 comm="syz.2.1024" path="socket:[16458]" dev="sockfs" ino=16458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.250975][ T3489] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 79.259502][ T3489] rust_binder: Write failure EINVAL in pid:2 [ 79.290905][ T3497] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1028'. [ 79.406951][ T3514] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 79.668386][ T3526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=3526 comm=syz.4.1038 [ 79.694333][ T3528] netlink: 'syz.4.1039': attribute type 4 has an invalid length. [ 79.905521][ T36] audit: type=1400 audit(2000000030.267:397): avc: denied { accept } for pid=3537 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.914579][ T3538] netlink: 'syz.1.1042': attribute type 6 has an invalid length. [ 79.933207][ T3538] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.968991][ T3544] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 79.976826][ T3544] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1045'. [ 79.988915][ T3545] overlayfs: failed to clone upperpath [ 79.998144][ T3548] /dev/loop0: Can't lookup blockdev [ 80.018667][ T36] audit: type=1400 audit(2000000030.380:398): avc: denied { create } for pid=3555 comm="syz.2.1048" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.355165][ T3583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 80.453537][ T330] bridge_slave_1: left allmulticast mode [ 80.468272][ T330] bridge_slave_1: left promiscuous mode [ 80.473952][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.481339][ T330] bridge_slave_0: left allmulticast mode [ 80.487195][ T330] bridge_slave_0: left promiscuous mode [ 80.492812][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.582503][ T330] veth1_macvtap: left promiscuous mode [ 80.588053][ T330] veth0_vlan: left promiscuous mode [ 80.652414][ T3594] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 80.660229][ T3594] netlink: 'syz.1.1062': attribute type 2 has an invalid length. [ 80.690255][ T3599] fuse: Unknown parameter '+Ñ‚‡¦¢âQ©Þ¥è }J(Ê GA­-vÇ×nµfЩÙ|űüõa0x000000000000000301777777777777777777777q}B¸AW‰¥¾Î‡ýõMbIŸ·4t°:ë/hA`£z [ 80.690255][ T3599] uë?Bÿ]Äô"Ê<Êð“¨i?˜jèÙƒ ÑD/É÷gtýð¸HBâ3¡ ¨ðvà"•uºªU°kÊâ œ_9ÛýLá½Û‚ßÇì˜qw' [ 80.993701][ T3639] netlink: 'syz.2.1080': attribute type 4 has an invalid length. [ 81.026577][ T3623] netlink: 'syz.3.1073': attribute type 2 has an invalid length. [ 81.266187][ T3666] tipc: Enabling of bearer rejected, failed to enable media [ 81.399784][ T36] audit: type=1400 audit(2000000031.665:399): avc: denied { read } for pid=3672 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 81.519502][ T3676] netlink: 'syz.3.1093': attribute type 27 has an invalid length. [ 81.644650][ T3683] tipc: Enabling of bearer rejected, media not registered [ 83.679867][ T3704] fuse: Bad value for 'fd' [ 83.685921][ T3704] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 83.695851][ T36] audit: type=1400 audit(2000000033.823:400): avc: denied { validate_trans } for pid=3703 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.788163][ T3711] overlayfs: missing 'lowerdir' [ 83.794440][ T3711] loop2: detected capacity change from 0 to 8388607 [ 83.802514][ T36] audit: type=1400 audit(2000000033.926:401): avc: denied { nlmsg_write } for pid=3710 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.804891][ T3699] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 83.838058][ T36] audit: type=1400 audit(2000000033.945:402): avc: denied { audit_write } for pid=3710 comm="syz.4.1106" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.860520][ T36] audit: type=1107 audit(2000000033.945:403): pid=3710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 84.015774][ T3752] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.1119'. [ 84.460212][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.620039][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 84.626281][ T31] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 84.634445][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.644635][ T31] usb 5-1: config 0 has no interface number 0 [ 84.652079][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 84.661164][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.669219][ T31] usb 5-1: Product: syz [ 84.673410][ T31] usb 5-1: Manufacturer: syz [ 84.678012][ T31] usb 5-1: SerialNumber: syz [ 84.684297][ T31] usb 5-1: config 0 descriptor?? [ 84.704942][ T3773] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1126'. [ 84.739487][ T36] audit: type=1326 audit(2000000034.808:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3777 comm="syz.3.1127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0658f6c9 code=0x0 [ 84.822601][ T3801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 84.936215][ T36] audit: type=1400 audit(2000000034.987:405): avc: denied { lock } for pid=3805 comm="syz.2.1138" path="socket:[17435]" dev="sockfs" ino=17435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 85.637603][ T3827] overlayfs: failed to resolve './file0': -2 [ 85.644627][ T36] audit: type=1400 audit(2000000035.653:406): avc: denied { create } for pid=3826 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.690548][ T3834] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 85.707684][ T36] audit: type=1400 audit(2000000035.718:407): avc: denied { lock } for pid=3835 comm="syz.1.1149" path="socket:[17278]" dev="sockfs" ino=17278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.797075][ T330] tipc: Subscription rejected, illegal request [ 86.448826][ T36] audit: type=1400 audit(2000000036.403:408): avc: denied { create } for pid=3866 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.588708][ T3890] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 86.598176][ T3890] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 86.642116][ T3904] incfs: mount failed -22 [ 86.646585][ T36] audit: type=1400 audit(2000000036.591:409): avc: denied { mounton } for pid=3903 comm="syz.2.1174" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.691876][ T3912] overlayfs: failed to clone upperpath [ 86.698254][ T36] audit: type=1400 audit(2000000036.638:410): avc: denied { link } for pid=3911 comm="syz.3.1178" name="file1" dev="tmpfs" ino=2005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.707560][ T3916] tipc: Started in network mode [ 86.720801][ T3912] can: request_module (can-proto-6) failed. [ 86.725942][ T3916] tipc: Node identity ce8d72a48ed9, cluster identity 1 [ 86.738612][ T3916] tipc: Enabled bearer , priority 0 [ 86.848406][ T3941] cgroup: fork rejected by pids controller in /syz2 [ 86.904352][ T36] audit: type=1400 audit(2000000036.835:411): avc: denied { ioctl } for pid=4081 comm="syz.3.1193" path="socket:[17592]" dev="sockfs" ino=17592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.056045][ T36] audit: type=1326 audit(2000000036.976:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.1199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0658f6c9 code=0x0 [ 87.526655][ T402] usb 5-1: USB disconnect, device number 8 [ 87.541716][ T4208] fuse: Bad value for 'rootmode' [ 87.934885][ T402] tipc: Node number set to 1079276196 [ 87.951902][ T4228] overlay: Unknown parameter 'fowner>00000000000000000000' [ 87.994982][ T36] audit: type=1326 audit(2000000037.857:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.1210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f78b8f6c9 code=0x0 [ 88.158143][ T4247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 88.798265][ T331] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 88.958988][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.967062][ T331] usb 5-1: not running at top speed; connect to a high speed hub [ 88.975709][ T331] usb 5-1: config 9 has an invalid interface number: 49 but max is 0 [ 88.983877][ T331] usb 5-1: config 9 has no interface number 0 [ 88.989947][ T331] usb 5-1: config 9 interface 49 has no altsetting 0 [ 88.998465][ T331] usb 5-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 89.007577][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.015682][ T331] usb 5-1: Product: syz [ 89.019836][ T331] usb 5-1: Manufacturer: syz [ 89.024461][ T331] usb 5-1: SerialNumber: syz [ 89.281746][ T331] usb-storage 5-1:9.49: USB Mass Storage device detected [ 89.289574][ T331] usb-storage 5-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 89.332884][ T331] usb 5-1: USB disconnect, device number 9 [ 90.087982][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 90.253889][ T4354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=4354 comm=syz.1.1250 [ 90.266692][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 90.273552][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.284035][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.285467][ T4356] cannot load conntrack support for proto=3 [ 90.294902][ T65] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.308311][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.316514][ T65] usb 5-1: Product: syz [ 90.320733][ T65] usb 5-1: Manufacturer: syz [ 90.325611][ T65] usb 5-1: SerialNumber: syz [ 90.546586][ T65] usb 5-1: 0:2 : does not exist [ 90.554063][ T65] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 90.566572][ T65] usb 5-1: USB disconnect, device number 10 [ 90.577460][ T3699] udevd[3699]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.726108][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 90.779402][ T4371] overlayfs: failed to clone upperpath [ 90.794144][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 91.183982][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 91.184000][ T36] audit: type=1400 audit(2000000040.850:418): avc: denied { create } for pid=4384 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.091162][ T36] audit: type=1400 audit(2000000041.695:419): avc: denied { create } for pid=4408 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 92.127995][ T4411] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1270'. [ 92.307893][ T330] bridge_slave_1: left allmulticast mode [ 92.313662][ T330] bridge_slave_1: left promiscuous mode [ 92.319551][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.327752][ T330] bridge_slave_0: left allmulticast mode [ 92.333446][ T330] bridge_slave_0: left promiscuous mode [ 92.339430][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.403871][ T4424] fuse: Unknown parameter ' ¨¹”þQ [ 92.403871][ T4424] p´ÇÙÈd„©€' [ 92.447633][ T330] veth1_macvtap: left promiscuous mode [ 92.453334][ T330] veth0_vlan: left promiscuous mode [ 92.531812][ T4428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1276'. [ 92.541574][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.548616][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.555756][ T4426] bridge_slave_0: entered allmulticast mode [ 92.562963][ T4426] bridge_slave_0: entered promiscuous mode [ 92.569555][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.576839][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.584076][ T4426] bridge_slave_1: entered allmulticast mode [ 92.590269][ T4426] bridge_slave_1: entered promiscuous mode [ 92.666431][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.673542][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.680879][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.687917][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.719437][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.726872][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.739107][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.746328][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.755508][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.762592][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.799869][ T4426] veth0_vlan: entered promiscuous mode [ 92.812835][ T4426] veth1_macvtap: entered promiscuous mode [ 92.889822][ T36] audit: type=1400 audit(2000000042.445:420): avc: denied { read } for pid=4483 comm="syz.4.1291" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.914493][ T36] audit: type=1400 audit(2000000042.445:421): avc: denied { open } for pid=4483 comm="syz.4.1291" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.927688][ T4487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.939123][ T4487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.939677][ T36] audit: type=1400 audit(2000000042.464:422): avc: denied { ioctl } for pid=4483 comm="syz.4.1291" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.965041][ T4491] exFAT-fs (rnullb0): invalid boot record signature [ 92.985047][ T4491] exFAT-fs (rnullb0): failed to read boot sector [ 92.991689][ T4491] exFAT-fs (rnullb0): failed to recognize exfat type [ 93.196725][ T36] audit: type=1326 audit(2000000042.736:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4499 comm="syz.2.1297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 93.284487][ T4509] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 94.542988][ T36] audit: type=1400 audit(2000000043.993:424): avc: denied { create } for pid=4529 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 94.770203][ T36] audit: type=1400 audit(2000000179.221:425): avc: denied { sqpoll } for pid=4544 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.425583][ T36] audit: type=1400 audit(2000000180.769:426): avc: denied { create } for pid=4573 comm="syz.2.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 96.528970][ T4587] overlayfs: failed to clone upperpath [ 96.542183][ T36] audit: type=1400 audit(2000000180.872:427): avc: denied { map } for pid=4586 comm="syz.1.1322" path="socket:[19701]" dev="sockfs" ino=19701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.611096][ T36] audit: type=1400 audit(2000000180.872:428): avc: denied { read accept } for pid=4586 comm="syz.1.1322" path="socket:[19701]" dev="sockfs" ino=19701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.652403][ T36] audit: type=1400 audit(2000000180.966:429): avc: denied { getopt } for pid=4599 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.673847][ T36] audit: type=1326 audit(2000000180.994:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.2.1328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 96.727004][ T4611] 9pnet_fd: Insufficient options for proto=fd [ 96.754549][ T4616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'. [ 97.663080][ T4642] 9pnet_fd: Insufficient options for proto=fd [ 97.677617][ T4644] overlayfs: failed to clone lowerpath [ 97.684029][ T4644] overlayfs: failed to clone lowerpath [ 97.690549][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'. [ 97.915225][ T36] audit: type=1400 audit(2000000182.167:431): avc: denied { getopt } for pid=4653 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.956696][ T4656] netlink: 'syz.4.1345': attribute type 4 has an invalid length. [ 97.964572][ T4656] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1345'. [ 97.990348][ T36] audit: type=1326 audit(2000000182.233:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.4.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x0 [ 98.044888][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 98.489799][ T4694] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 99.953129][ T36] audit: type=1400 audit(2000000184.081:433): avc: denied { map } for pid=4716 comm="syz.2.1369" path="socket:[19415]" dev="sockfs" ino=19415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.827047][ T4741] tipc: Enabling of bearer rejected, failed to enable media [ 100.964263][ T36] audit: type=1400 audit(2000000185.028:434): avc: denied { mounton } for pid=4762 comm="syz.4.1383" path="/43/file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.141505][ T36] audit: type=1326 audit(2000000185.197:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.1.1386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x0 [ 101.376398][ T4796] overlayfs: failed to clone upperpath [ 102.726648][ T4872] netlink: 'syz.2.1408': attribute type 1 has an invalid length. [ 102.745242][ T4872] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 103.008049][ T36] audit: type=1400 audit(2000000186.942:436): avc: denied { setopt } for pid=4885 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.421173][ T4898] netlink: 'syz.2.1417': attribute type 5 has an invalid length. [ 103.429062][ T4898] netlink: 'syz.2.1417': attribute type 5 has an invalid length. [ 103.437138][ T4898] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1417'. [ 103.593358][ T4912] 9pnet_fd: Insufficient options for proto=fd [ 104.452072][ T5083] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 104.677928][ T36] audit: type=1400 audit(2000000188.509:437): avc: denied { create } for pid=5100 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.232118][ T5151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.239401][ T5151] IPv6: NLM_F_CREATE should be set when creating new route [ 106.246659][ T5151] IPv6: NLM_F_CREATE should be set when creating new route [ 106.322048][ T5154] netlink: 4784 bytes leftover after parsing attributes in process `syz.2.1457'. [ 106.389949][ T5166] bridge0: port 3(erspan0) entered blocking state [ 106.396664][ T5166] bridge0: port 3(erspan0) entered disabled state [ 106.403339][ T5166] erspan0: entered allmulticast mode [ 106.410158][ T5166] erspan0: entered promiscuous mode [ 106.415591][ T5166] bridge0: port 3(erspan0) entered blocking state [ 106.422095][ T5166] bridge0: port 3(erspan0) entered forwarding state [ 107.053749][ T5181] overlay: ./file0 is not a directory [ 107.661053][ T5199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=5199 comm=syz.2.1472 [ 108.256488][ T36] audit: type=1400 audit(2000000191.868:438): avc: denied { map } for pid=5212 comm="syz.2.1476" path="socket:[20427]" dev="sockfs" ino=20427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.261983][ T5213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=5213 comm=syz.2.1476 [ 108.301607][ T36] audit: type=1400 audit(2000000191.868:439): avc: denied { read } for pid=5212 comm="syz.2.1476" path="socket:[20427]" dev="sockfs" ino=20427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.817312][ T5257] overlayfs: failed to clone upperpath [ 109.048329][ T5288] netlink: 'syz.1.1499': attribute type 4 has an invalid length. [ 110.287090][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.294164][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.301515][ T5308] bridge_slave_0: entered allmulticast mode [ 110.308058][ T5308] bridge_slave_0: entered promiscuous mode [ 110.314543][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.321827][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.335601][ T5308] bridge_slave_1: entered allmulticast mode [ 110.342132][ T5308] bridge_slave_1: entered promiscuous mode [ 110.392032][ T4566] macsec0: left allmulticast mode [ 110.397334][ T4566] veth1_macvtap: left allmulticast mode [ 110.402923][ T4566] macsec0: left promiscuous mode [ 110.408332][ T4566] bridge0: port 3(macsec0) entered disabled state [ 110.415721][ T4566] bridge_slave_1: left allmulticast mode [ 110.421492][ T4566] bridge_slave_1: left promiscuous mode [ 110.427477][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.435356][ T4566] bridge_slave_0: left allmulticast mode [ 110.441618][ T4566] bridge_slave_0: left promiscuous mode [ 110.447386][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.563692][ T4566] tipc: Disabling bearer [ 110.569326][ T4566] tipc: Left network mode [ 110.587909][ T4566] veth1_macvtap: left promiscuous mode [ 110.593405][ T36] audit: type=1400 audit(2000000194.054:440): avc: denied { create } for pid=5322 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.613038][ T4566] veth0_vlan: left promiscuous mode [ 110.618973][ T36] audit: type=1326 audit(2000000194.091:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f142238f6c9 code=0x0 [ 110.699998][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.707114][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.714429][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.721462][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.754514][ T5344] fuse: Unknown parameter '' [ 110.774712][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.784882][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.791976][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.817339][ T5356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1520'. [ 110.822620][ T5308] veth0_vlan: entered promiscuous mode [ 110.832690][ T5354] tipc: Can't bind to reserved service type 1 [ 110.839248][ T5308] veth1_macvtap: entered promiscuous mode [ 110.863654][ T5360] sit0: entered promiscuous mode [ 110.870153][ T5360] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1521'. [ 110.881696][ T5361] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1521'. [ 110.993195][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.000514][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.015261][ T5374] bridge0: entered allmulticast mode [ 111.938485][ T5410] 9pnet_fd: Insufficient options for proto=fd [ 111.954726][ T5412] futex_wake_op: syz.5.1537 tries to shift op by 144; fix this program [ 111.965843][ T36] audit: type=1400 audit(2000000195.349:442): avc: denied { view } for pid=5411 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.004798][ T5414] usb usb7: usbfs: process 5414 (syz.5.1538) did not claim interface 0 before use [ 112.016125][ T4566] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.299735][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 112.473860][ T36] audit: type=1400 audit(2000000195.827:443): avc: denied { name_bind } for pid=5429 comm="syz.1.1543" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 112.521947][ T5435] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 112.530057][ T5435] netlink: 'syz.1.1545': attribute type 3 has an invalid length. [ 112.539398][ T5435] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1545'. [ 112.710472][ T36] audit: type=1326 audit(2000000196.043:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.1.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x0 [ 113.228801][ T36] audit: type=1400 audit(2000000196.540:445): avc: denied { relabelfrom } for pid=5460 comm="syz.4.1555" name="NETLINK" dev="sockfs" ino=21348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.253815][ T36] audit: type=1400 audit(2000000196.540:446): avc: denied { relabelto } for pid=5460 comm="syz.4.1555" name="NETLINK" dev="sockfs" ino=21348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 113.632642][ T5468] netlink: 'syz.1.1557': attribute type 27 has an invalid length. [ 113.928922][ T36] audit: type=1326 audit(2000000197.187:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5479 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x7fc00000 [ 114.187293][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.187426][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 114.218772][ T5491] netlink: 'syz.5.1566': attribute type 6 has an invalid length. [ 114.229605][ T5491] netlink: 'syz.5.1566': attribute type 2 has an invalid length. [ 114.237430][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1566'. [ 114.268947][ T4551] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.394851][ T5526] overlayfs: failed to clone upperpath [ 114.855079][ T5537] netlink: 'syz.4.1579': attribute type 4 has an invalid length. [ 114.862867][ T5537] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1579'. [ 115.164086][ T5563] netlink: 'syz.1.1590': attribute type 12 has an invalid length. [ 115.552132][ T5576] overlayfs: failed to clone upperpath [ 115.558776][ T5576] overlayfs: failed to clone upperpath [ 116.115127][ T5583] overlayfs: failed to clone upperpath [ 116.404304][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.956247][ T5594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.956282][ T5594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 116.956358][ T5595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.974782][ T5595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 117.055855][ T5597] syz.5.1602 (5597): /proc/5596/oom_adj is deprecated, please use /proc/5596/oom_score_adj instead. [ 117.081676][ T5597] rust_binder: 18: no such ref 3 [ 117.093226][ T5597] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 117.104953][ T5597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 117.121990][ T5618] __vm_enough_memory: pid: 5618, comm: syz.5.1610, bytes: 18014402804453376 not enough memory for the allocation [ 117.143839][ T5618] __vm_enough_memory: pid: 5618, comm: syz.5.1610, bytes: 18014402804453376 not enough memory for the allocation [ 117.448914][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.608747][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 117.614955][ T65] usb 6-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 117.625181][ T65] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.634172][ T65] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 117.643248][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.652089][ T65] usb 6-1: config 0 descriptor?? [ 117.803532][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 117.968532][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 118.409418][ T331] usb 6-1: USB disconnect, device number 2 [ 118.727899][ T331] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.817156][ T5703] syz.1.1643 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.887850][ T331] usb 6-1: Using ep0 maxpacket: 32 [ 118.894638][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.907193][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.917419][ T331] usb 6-1: New USB device found, idVendor=066d, idProduct=0000, bcdDevice= 0.00 [ 118.926740][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.938391][ T331] usb 6-1: config 0 descriptor?? [ 119.039022][ T5733] overlayfs: failed to clone upperpath [ 119.199708][ T5744] overlayfs: failed to clone upperpath [ 119.208607][ T5744] fuse: Unknown parameter '0xffffffffffffffff00000000000000000004' [ 119.601378][ T36] audit: type=1400 audit(2000000202.507:448): avc: denied { create } for pid=5695 comm="syz.5.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.605455][ T5697] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 119.629296][ T5697] rust_binder: Write failure EINVAL in pid:28 [ 119.659092][ T331] usbhid 6-1:0.0: can't add hid device: -71 [ 119.671206][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.680539][ T331] usb 6-1: USB disconnect, device number 3 [ 119.830622][ T5775] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 119.838735][ T5775] netlink: 944 bytes leftover after parsing attributes in process `syz.1.1670'. [ 120.205744][ T36] audit: type=1326 audit(2000000203.079:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.245511][ T36] audit: type=1326 audit(2000000203.079:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.273279][ T5819] netlink: 8568 bytes leftover after parsing attributes in process `syz.2.1685'. [ 120.281208][ T36] audit: type=1326 audit(2000000203.079:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.306376][ T36] audit: type=1326 audit(2000000203.079:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.330013][ T36] audit: type=1326 audit(2000000203.079:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.358380][ T5823] netlink: 'syz.1.1687': attribute type 16 has an invalid length. [ 120.359943][ T36] audit: type=1326 audit(2000000203.079:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.367950][ T5823] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1687'. [ 120.395847][ T36] audit: type=1400 audit(2000000203.079:451): avc: denied { create } for pid=5806 comm="syz.2.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.421380][ T36] audit: type=1326 audit(2000000203.079:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.421650][ T5810] __vm_enough_memory: pid: 5810, comm: syz.5.1683, bytes: 18014402804453376 not enough memory for the allocation [ 120.451798][ T36] audit: type=1326 audit(2000000203.079:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238f6c9 code=0x7ffc0000 [ 120.721412][ T5870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5870 comm=syz.5.1705 [ 121.009271][ T65] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 121.170278][ T65] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 121.177873][ T65] usb 6-1: can't read configurations, error -61 [ 121.291936][ T5893] x_tables: duplicate underflow at hook 2 [ 121.318027][ T65] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 121.435761][ T5912] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1721'. [ 121.480221][ T65] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 121.487980][ T65] usb 6-1: can't read configurations, error -61 [ 121.495259][ T65] usb usb6-port1: attempt power cycle [ 121.861628][ T65] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 121.887994][ T65] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 121.902004][ T65] usb 6-1: can't read configurations, error -61 [ 121.902453][ T5948] fuse: Unknown parameter 'r†otmode' [ 121.914318][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 121.957901][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 122.042790][ T65] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 122.065808][ T65] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 122.073391][ T65] usb 6-1: can't read configurations, error -61 [ 122.079942][ T65] usb usb6-port1: unable to enumerate USB device [ 122.474699][ T5978] netlink: 'syz.4.1749': attribute type 11 has an invalid length. [ 122.687231][ T6010] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 123.290254][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 124.015518][ T6065] 9pnet_fd: Insufficient options for proto=fd [ 124.325949][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 124.996075][ T4566] bridge_slave_1: left allmulticast mode [ 125.001930][ T4566] bridge_slave_1: left promiscuous mode [ 125.007940][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.015613][ T4566] bridge_slave_0: left allmulticast mode [ 125.021601][ T4566] bridge_slave_0: left promiscuous mode [ 125.027646][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.118333][ T4566] veth1_macvtap: left promiscuous mode [ 125.124008][ T4566] veth0_vlan: left promiscuous mode [ 125.170824][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.177918][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.185025][ T6129] bridge_slave_0: entered allmulticast mode [ 125.191378][ T6129] bridge_slave_0: entered promiscuous mode [ 125.197757][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.204818][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.211949][ T6129] bridge_slave_1: entered allmulticast mode [ 125.218377][ T6129] bridge_slave_1: entered promiscuous mode [ 125.260125][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.267194][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.274477][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.281531][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.300194][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.307650][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.317116][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.324155][ T4551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.333889][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.340965][ T4551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.363321][ T6129] veth0_vlan: entered promiscuous mode [ 125.373554][ T6129] veth1_macvtap: entered promiscuous mode [ 125.510033][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 125.510050][ T36] audit: type=1400 audit(2000000208.061:513): avc: denied { create } for pid=6146 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.692084][ T6152] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 125.700054][ T6152] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1806'. [ 125.709979][ T6152] netlink: 'syz.2.1806': attribute type 6 has an invalid length. [ 125.718018][ T6152] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 125.726064][ T6152] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1806'. [ 125.737649][ T6152] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 125.745512][ T6152] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1806'. [ 126.806999][ T6194] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1821'. [ 126.816487][ T6194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1821'. [ 126.959315][ T6216] overlayfs: failed to clone lowerpath [ 126.965509][ T6216] overlayfs: failed to clone lowerpath [ 127.065274][ T6235] netlink: 'syz.4.1837': attribute type 12 has an invalid length. [ 127.073222][ T6236] netlink: 'syz.4.1837': attribute type 12 has an invalid length. [ 127.298514][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.306006][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.313365][ T6253] bridge_slave_0: entered allmulticast mode [ 127.320103][ T6253] bridge_slave_0: entered promiscuous mode [ 127.326904][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.335239][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.342647][ T6253] bridge_slave_1: entered allmulticast mode [ 127.348996][ T6253] bridge_slave_1: entered promiscuous mode [ 127.417358][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.424449][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.431777][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.438828][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.465656][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.473370][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.484162][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.491242][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.500899][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.507943][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.544925][ T6253] veth0_vlan: entered promiscuous mode [ 127.556712][ T6253] veth1_macvtap: entered promiscuous mode [ 127.585901][ T6268] rust_binder: 2: no such ref 3 [ 127.590791][ T6268] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 127.598131][ T6268] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 127.605365][ T6268] rust_binder: Write failure EFAULT in pid:2 [ 127.887228][ T36] audit: type=1400 audit(2000000210.285:514): avc: denied { map } for pid=6332 comm="syz.2.1866" path="socket:[24240]" dev="sockfs" ino=24240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.948175][ T36] audit: type=1400 audit(2000000210.350:515): avc: denied { write } for pid=6343 comm="syz.1.1870" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 127.948270][ T6344] random: crng reseeded on system resumption [ 127.971493][ T36] audit: type=1400 audit(2000000210.350:516): avc: denied { open } for pid=6343 comm="syz.1.1870" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.001101][ T36] audit: type=1400 audit(2000000210.388:517): avc: denied { ioctl } for pid=6343 comm="syz.1.1870" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.054138][ T6351] input: syz0 as /devices/virtual/input/input11 [ 128.342350][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 128.503076][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.514419][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 128.523621][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.532356][ T31] usb 2-1: config 0 descriptor?? [ 128.971937][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 128.978912][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.987990][ T31] usb 2-1: USB disconnect, device number 3 [ 128.992713][ T6366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 128.993999][ T6366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:45 [ 129.021656][ T36] audit: type=1400 audit(2000000211.345:518): avc: denied { connect } for pid=6367 comm="syz.1.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.397322][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.557140][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 129.568719][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.580010][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.596848][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.625147][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 129.636433][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.648090][ T31] usb 2-1: config 0 descriptor?? [ 130.092369][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0004/input/input12 [ 130.105152][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0004/input/input13 [ 130.124611][ T31] kye 0003:0458:5011.0004: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 130.335706][ T36] audit: type=1400 audit(2000000212.583:519): avc: denied { create } for pid=6402 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.355535][ T36] audit: type=1400 audit(2000000212.583:520): avc: denied { execute } for pid=6402 comm="syz.2.1889" path="/dev/rnullb0" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.485719][ T6413] rust_binder: 21: no such ref 3 [ 130.490778][ T6413] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 130.497898][ T6413] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 130.505049][ T6413] rust_binder: 21: no such ref 0 [ 130.523472][ T36] audit: type=1400 audit(2000000212.752:521): avc: denied { read write } for pid=6415 comm="syz.6.1892" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.546618][ T36] audit: type=1400 audit(2000000212.752:522): avc: denied { open } for pid=6415 comm="syz.6.1892" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.198690][ C1] kye 0003:0458:5011.0004: usb_submit_urb(ctrl) failed: -1 [ 131.207035][ T6459] 9pnet_fd: Insufficient options for proto=fd [ 131.277828][ T6465] overlayfs: unescaped trailing colons in lowerdir mount option. [ 132.008351][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1913'. [ 132.023481][ T65] usb 2-1: USB disconnect, device number 4 [ 132.036923][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 132.043885][ T6487] rust_binder: Got transaction with invalid offset. [ 132.045908][ T6487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.046076][ T6485] erspan0: default FDB implementation only supports local addresses [ 132.058176][ T6487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 132.095329][ T6495] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 132.095619][ T6491] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1918'. [ 132.104440][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 132.104452][ T36] audit: type=1400 audit(2000000214.235:524): avc: denied { relabelfrom } for pid=6493 comm="syz.2.1919" name="NETLINK" dev="sockfs" ino=24445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 132.114546][ T6491] z00ªX¹¦: renamed from gretap0 (while UP) [ 132.124106][ T36] audit: type=1400 audit(2000000214.263:525): avc: denied { relabelto } for pid=6493 comm="syz.2.1919" name="NETLINK" dev="sockfs" ino=24445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 132.188488][ T6491] z00ªX¹¦: entered allmulticast mode [ 132.194295][ T6492] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1918'. [ 132.203306][ T6492] z01ªX¹¦: renamed from z00ªX¹¦ (while UP) [ 132.261922][ T36] audit: type=1400 audit(2000000214.385:526): avc: denied { mounton } for pid=6503 comm="syz.1.1921" path="/21/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.344996][ T36] audit: type=1400 audit(2000000214.469:527): avc: denied { getopt } for pid=6505 comm="syz.1.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.626876][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.786728][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 132.793068][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 132.804096][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.817085][ T65] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 132.826375][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.834972][ T65] usb 2-1: config 0 descriptor?? [ 132.840735][ T65] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 133.054305][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.062878][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.075097][ T65] usb 2-1: USB disconnect, device number 5 [ 133.333905][ T36] audit: type=1326 audit(2000000215.398:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.1928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 133.993522][ T6537] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1933'. [ 134.019355][ T6541] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 134.031969][ T6543] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 134.280107][ T6566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.280139][ T6566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 134.290204][ T6566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.299797][ T6566] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 134.993688][ T6600] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 135.006010][ T6601] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 135.022518][ T6600] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 135.062000][ T6605] rust_binder: 100: no such ref 3 [ 135.078009][ T6605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 135.085473][ T6605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 135.092718][ T6605] rust_binder: Write failure EFAULT in pid:100 [ 135.157482][ T6607] devtmpfs: Unknown parameter 'fuse' [ 135.305667][ T6609] devtmpfs: Unknown parameter 'fuse' [ 135.469181][ T6626] rust_binder: Error while translating object. [ 135.469218][ T6626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.475543][ T6626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 135.502136][ T6634] rust_binder: Error while translating object. [ 135.512052][ T6634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 135.518354][ T6634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 135.746783][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1981'. [ 136.102075][ T36] audit: type=1400 audit(2000000218.011:529): avc: denied { shutdown } for pid=6704 comm="syz.1.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.151231][ T36] audit: type=1400 audit(2000000218.049:530): avc: denied { execmod } for pid=6710 comm="syz.1.1994" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.194456][ T6715] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 136.194474][ T6715] rust_binder: Error while translating object. [ 136.203384][ T6715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.209643][ T6715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 136.229354][ T36] audit: type=1400 audit(2000000218.114:531): avc: denied { ioctl } for pid=6716 comm="syz.1.1997" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 136.238847][ T6717] fuse: Bad value for 'group_id' [ 136.268573][ T6717] fuse: Bad value for 'group_id' [ 136.276933][ T6717] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 136.311547][ T6719] kvm: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 136.320119][ T6719] kvm: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 136.330693][ T6719] kvm: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 136.342747][ T6719] kvm: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 136.351327][ T6719] kvm: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 136.362262][ T6719] kvm_intel: kvm [6718]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 136.730468][ T450] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.879687][ T450] usb 2-1: device descriptor read/64, error -71 [ 137.135495][ T450] usb 2-1: device descriptor read/64, error -71 [ 137.391328][ T450] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.529890][ T450] usb 2-1: device descriptor read/64, error -71 [ 137.544793][ T6755] __vm_enough_memory: pid: 6755, comm: syz.6.2010, bytes: 18014402804453376 not enough memory for the allocation [ 137.567204][ T6760] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2011'. [ 137.762446][ T6774] rust_binder: 71: no such ref 0 [ 137.785695][ T450] usb 2-1: device descriptor read/64, error -71 [ 137.835508][ T6779] binder: Unknown parameter 'defcontext01777777777777777777777' [ 137.889434][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.889469][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 137.903008][ T450] usb usb2-port1: attempt power cycle [ 138.077122][ T6798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.077236][ T6797] rust_binder: Error in use_page_slow: ESRCH [ 138.083759][ T6797] rust_binder: use_range failure ESRCH [ 138.089875][ T6797] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 138.095389][ T6797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 138.103278][ T6797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91 [ 138.170963][ T36] audit: type=1400 audit(2000000219.944:532): avc: denied { read } for pid=6801 comm="syz.6.2027" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.232528][ T6812] netlink: 'syz.6.2031': attribute type 19 has an invalid length. [ 138.240494][ T6812] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2031'. [ 138.286662][ T450] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.309071][ T450] usb 2-1: device descriptor read/8, error -71 [ 138.377195][ T6819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.377469][ T6819] rust_binder: Write failure EINVAL in pid:109 [ 138.398202][ T6821] netlink: 'syz.6.2035': attribute type 28 has an invalid length. [ 138.419423][ T6826] netlink: 'syz.2.2036': attribute type 29 has an invalid length. [ 138.427649][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 138.447566][ T450] usb 2-1: device descriptor read/8, error -71 [ 138.489594][ T6840] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.499380][ T6840] IPv6: A: Disabled Multicast RS [ 138.606599][ T36] audit: type=1400 audit(2000000220.348:533): avc: denied { bind } for pid=6855 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.653526][ T6865] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2049'. [ 138.674243][ T6865] x_tables: unsorted entry at hook 2 [ 138.712976][ T450] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.726294][ T6881] overlayfs: missing 'lowerdir' [ 138.731753][ T6881] fuse: Invalid gid '00000000000037777777777' [ 138.735303][ T450] usb 2-1: device descriptor read/8, error -71 [ 138.841593][ T6886] /dev/nbd6: Can't lookup blockdev [ 138.874558][ T450] usb 2-1: device descriptor read/8, error -71 [ 138.992583][ T450] usb usb2-port1: unable to enumerate USB device [ 138.995331][ T6914] 9pnet_fd: Insufficient options for proto=fd [ 139.089494][ T6922] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2071'. [ 139.099350][ T6922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.147340][ T6930] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 139.331849][ T36] audit: type=1326 audit(2000000221.033:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x0 [ 139.696703][ T6943] rust_binder: 140: no such ref 2 [ 139.701865][ T6943] rust_binder: Write failure EINVAL in pid:140 [ 139.711737][ T6945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 139.717984][ T6945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:142 [ 139.727906][ T6946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.754480][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 139.883115][ T6956] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 140.084775][ T6969] 9pnet_fd: Insufficient options for proto=fd [ 140.091645][ T6969] 9pnet_fd: Insufficient options for proto=fd [ 140.239048][ T65] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 140.398268][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.409299][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.419075][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.428214][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.436769][ T65] usb 2-1: config 0 descriptor?? [ 140.442590][ T65] hub 2-1:0.0: USB hub found [ 140.655831][ T65] hub 2-1:0.0: 7 ports detected [ 140.660985][ T65] hub 2-1:0.0: insufficient power available to use all downstream ports [ 140.869839][ T6963] mmap: syz.1.2085 (6963): VmData 29073408 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 140.884539][ T6963] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 140.884555][ T6963] rust_binder: Error while translating object. [ 140.893300][ T6963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.899533][ T6963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 140.909971][ T65] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 140.925559][ T65] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 140.934168][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 140.940099][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.962474][ T65] usb 2-1: USB disconnect, device number 10 [ 161.400637][ T6989] rust_binder: Error while translating object. [ 161.400677][ T6989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.409166][ T6989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 161.415114][ T36] audit: type=1400 audit(2000000241.749:535): avc: denied { mount } for pid=6983 comm="syz.4.2094" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 161.453699][ T6984] 9pnet_fd: Insufficient options for proto=fd [ 161.485302][ T36] audit: type=1400 audit(2000000241.814:536): avc: denied { create } for pid=6999 comm="syz.1.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.597458][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 161.608650][ T7021] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 161.646378][ T7029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.051370][ T450] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.178592][ T7067] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2119'. [ 162.226094][ T450] usb 2-1: Using ep0 maxpacket: 32 [ 162.232457][ T450] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 162.241451][ T450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.251825][ T450] usb 2-1: config 0 has no interface number 0 [ 162.257937][ T450] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.270797][ T450] usb 2-1: config 0 interface 2 has no altsetting 0 [ 162.278713][ T450] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 162.287804][ T450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.294969][ T7080] overlayfs: failed to clone lowerpath [ 162.295969][ T450] usb 2-1: Product: syz [ 162.305608][ T450] usb 2-1: Manufacturer: syz [ 162.310220][ T450] usb 2-1: SerialNumber: syz [ 162.315645][ T450] usb 2-1: config 0 descriptor?? [ 162.337950][ T7088] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 162.463916][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 162.536676][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.545139][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.545310][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.554858][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.571494][ T450] usb 2-1: invalid MIDI in EP 0 [ 162.579845][ T450] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 162.595325][ T450] usb 2-1: USB disconnect, device number 11 [ 162.598610][ T7045] udevd[7045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.160889][ T7102] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 163.183453][ T7104] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 163.455775][ T7123] sit0: entered promiscuous mode [ 163.461716][ T7123] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 163.469505][ T7123] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2137'. [ 163.480663][ T7123] 8021q: VLANs not supported on ip6tnl0 [ 163.633049][ T65] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 163.794053][ T65] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.805266][ T65] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 163.816253][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.822853][ T65] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 163.831970][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.840560][ T65] usb 2-1: config 0 descriptor?? [ 163.845837][ T7121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.031643][ T7127] 9pnet_fd: Insufficient options for proto=fd [ 164.071870][ T7114] bridge_slave_1: left allmulticast mode [ 164.077574][ T7114] bridge_slave_1: left promiscuous mode [ 164.083345][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.090857][ T7114] bridge_slave_0: left allmulticast mode [ 164.096635][ T7114] bridge_slave_0: left promiscuous mode [ 164.102429][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.243109][ T7114] veth1_macvtap: left promiscuous mode [ 164.248634][ T7114] veth0_vlan: left promiscuous mode [ 164.341815][ T65] gt683r_led 0003:1770:FF00.0005: hidraw0: USB HID v0.08 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 164.555544][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.564082][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.573852][ T7132] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2136'. [ 164.988323][ T36] audit: type=1326 audit(2000000245.108:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.6.2142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ccb8f6c9 code=0x0 [ 165.102981][ T7149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.103204][ T7151] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 165.110044][ T7151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 165.117843][ T7151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:152 [ 165.153197][ T7156] __vm_enough_memory: pid: 7156, comm: syz.6.2147, bytes: 18014402804453376 not enough memory for the allocation [ 165.187109][ T7163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.704460][ T7171] overlayfs: failed to clone upperpath [ 165.762754][ T7177] overlayfs: failed to resolve './file0': -2 [ 165.800860][ T7191] cgroup: Unknown subsys name 'measure' [ 166.259561][ T7197] netlink: 'syz.2.2161': attribute type 4 has an invalid length. [ 166.582640][ T9] usb 2-1: USB disconnect, device number 12 [ 166.590947][ T65] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19 [ 166.958565][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.130236][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.141412][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 167.150472][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.159117][ T9] usb 2-1: config 0 descriptor?? [ 167.179403][ T7249] devpts: called with bogus options [ 167.186715][ T7249] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 167.227293][ T7253] 9pnet_fd: Insufficient options for proto=fd [ 167.234153][ T36] audit: type=1326 audit(2000000247.209:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.2178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 167.327636][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 167.378038][ T7280] cgroup: Invalid name [ 167.384053][ T7280] bpf: Bad value for 'gid' [ 167.421454][ T7284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7284 comm=syz.4.2188 [ 167.434454][ T7284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2188'. [ 167.597181][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 167.606718][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input15 [ 167.675078][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 168.029289][ T7237] netlink: 'syz.1.2172': attribute type 4 has an invalid length. [ 168.040479][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.049155][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.057682][ T9] usb 2-1: USB disconnect, device number 13 [ 168.153560][ T7304] overlay: ./file0 is not a directory [ 168.409328][ T7308] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2197'. [ 168.429029][ T7311] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.534062][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 168.554592][ T7317] x_tables: unsorted underflow at hook 4 [ 168.560573][ T7317] x_tables: unsorted underflow at hook 4 [ 168.566330][ T7317] x_tables: unsorted underflow at hook 4 [ 168.572365][ T7317] x_tables: unsorted underflow at hook 4 [ 168.578051][ T7317] x_tables: unsorted underflow at hook 4 [ 168.583956][ T7317] x_tables: unsorted underflow at hook 4 [ 168.589708][ T7317] x_tables: unsorted underflow at hook 4 [ 168.595598][ T7317] x_tables: unsorted underflow at hook 4 [ 168.601355][ T7317] x_tables: unsorted underflow at hook 4 [ 168.613885][ T7322] rust_binder: 216: no such ref 0 [ 168.614669][ T7317] x_tables: unsorted underflow at hook 4 [ 168.619263][ T7322] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 168.632044][ T7322] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 168.930422][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.090330][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 169.096480][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.107387][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.117186][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 169.126239][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.134733][ T9] usb 2-1: config 0 descriptor?? [ 169.569482][ T9] wacom 0003:056A:00FB.0007: hidraw0: USB HID v0.00 Device [HID 056a:00fb] on usb-dummy_hcd.1-1/input0 [ 169.782103][ T7333] rust_binder: Write failure EFAULT in pid:225 [ 169.782429][ T9] usb 2-1: USB disconnect, device number 14 [ 170.330245][ T7377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.392231][ T7387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.392258][ T7387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 170.678488][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 170.848992][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 170.855410][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.865548][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 170.879384][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.888480][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.896513][ T9] usb 2-1: SerialNumber: syz [ 170.903269][ T9] usb 2-1: bad CDC descriptors [ 171.116688][ T9] usb 2-1: USB disconnect, device number 15 [ 171.673172][ T7402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.733935][ T7409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.780329][ T36] audit: type=1400 audit(2000000251.478:539): avc: denied { append } for pid=7417 comm="syz.6.2235" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.786672][ T7419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.804091][ T7418] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 171.810564][ T7418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 171.818519][ T7418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 171.936187][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 172.006802][ T7422] __vm_enough_memory: pid: 7422, comm: syz.6.2236, bytes: 18014402804453376 not enough memory for the allocation [ 172.106733][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 172.113347][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.121814][ T9] usb 2-1: config 9 has an invalid interface number: 63 but max is 1 [ 172.129928][ T9] usb 2-1: config 9 has an invalid interface number: 159 but max is 1 [ 172.138099][ T9] usb 2-1: config 9 has no interface number 0 [ 172.144203][ T9] usb 2-1: config 9 has no interface number 1 [ 172.150405][ T9] usb 2-1: config 9 interface 63 has no altsetting 0 [ 172.158588][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 172.167696][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.175760][ T9] usb 2-1: Product: syz [ 172.179902][ T9] usb 2-1: Manufacturer: syz [ 172.184590][ T9] usb 2-1: SerialNumber: syz [ 172.409555][ T9] usb 2-1: USB disconnect, device number 16 [ 172.417714][ T6995] udevd[6995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.470624][ T7434] TCP: TCP_TX_DELAY enabled [ 172.501688][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 173.144736][ T7465] rust_binder: Write failure EFAULT in pid:253 [ 173.179922][ T7477] 9pnet_fd: Insufficient options for proto=fd [ 173.183361][ T7478] 9pnet_fd: Insufficient options for proto=fd [ 173.238092][ T7492] binder: Bad value for 'max' [ 173.250860][ T7494] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2261'. [ 173.277715][ T7503] 9pnet_fd: Insufficient options for proto=fd [ 173.492356][ T65] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 173.653347][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.659967][ T65] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 173.669092][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.677969][ T65] usb 2-1: config 0 descriptor?? [ 173.901714][ T7580] fuse: Unknown parameter '' [ 174.113616][ T65] kye 0003:0458:501B.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 174.127827][ T65] kye 0003:0458:501B.0008: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 174.139063][ T65] kye 0003:0458:501B.0008: tablet-enabling feature report not found [ 174.147108][ T65] kye 0003:0458:501B.0008: tablet enabling failed [ 174.327611][ T7492] netlink: 'syz.1.2259': attribute type 46 has an invalid length. [ 174.338272][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.347253][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.356093][ T435] usb 2-1: USB disconnect, device number 17 [ 175.155638][ T7604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.156836][ T7604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7604 comm=syz.6.2297 [ 175.176018][ T435] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 175.176920][ T7604] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 175.183695][ T7604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 175.191809][ T7604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:198 [ 175.336337][ T435] usb 2-1: Using ep0 maxpacket: 32 [ 175.351713][ T435] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 175.360163][ T435] usb 2-1: config 0 has no interface number 0 [ 175.368769][ T435] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 175.377824][ T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.385924][ T435] usb 2-1: Product: syz [ 175.390106][ T435] usb 2-1: Manufacturer: syz [ 175.394683][ T435] usb 2-1: SerialNumber: syz [ 175.399847][ T435] usb 2-1: config 0 descriptor?? [ 175.405797][ T435] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 175.413976][ T435] usb 2-1: Detected SIO [ 175.418611][ T435] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 175.433443][ T36] audit: type=1326 audit(2000000255.904:540): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.2.2301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d7d78f6c9 code=0x0 [ 175.624741][ T7602] __vm_enough_memory: pid: 7602, comm: syz.1.2296, bytes: 18014402804453376 not enough memory for the allocation [ 175.834593][ T435] usb 2-1: USB disconnect, device number 18 [ 175.841216][ T435] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 175.851197][ T435] ftdi_sio 2-1:0.217: device disconnected [ 176.110797][ T36] audit: type=1326 audit(2000000256.533:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.6.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ccb8f6c9 code=0x7fc00000 [ 176.266032][ T7115] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.330187][ T7665] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2314'. [ 177.361583][ T36] audit: type=1326 audit(2000000257.715:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.4.2316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f9258f6c9 code=0x0 [ 178.289227][ T7679] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 178.298868][ T36] audit: type=1400 audit(2000000258.588:543): avc: denied { relabelto } for pid=7678 comm="syz.4.2320" name="file0" dev="tmpfs" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 178.326157][ T36] audit: type=1400 audit(2000000258.588:544): avc: denied { associate } for pid=7678 comm="syz.4.2320" name="file0" dev="tmpfs" ino=1974 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 178.353923][ T36] audit: type=1326 audit(2000000258.597:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x7ffc0000 [ 178.377523][ T36] audit: type=1326 audit(2000000258.597:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f9258f6c9 code=0x7ffc0000 [ 178.401879][ T36] audit: type=1326 audit(2000000258.597:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x7ffc0000 [ 178.426977][ T36] audit: type=1326 audit(2000000258.597:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2f9258f6c9 code=0x7ffc0000 [ 178.450290][ T36] audit: type=1326 audit(2000000258.597:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9258f6c9 code=0x7ffc0000 [ 178.480623][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 178.482794][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.513318][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 179.291413][ T435] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 179.379433][ T7777] binder: Bad value for 'max' [ 179.392862][ T7782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7782 comm=syz.4.2354 [ 179.427899][ T7790] 9pnet_fd: p9_fd_create_tcp (7790): problem connecting socket to 127.0.0.1 [ 179.427899][ T7789] 9pnet_fd: p9_fd_create_tcp (7789): problem connecting socket to 127.0.0.1 [ 179.462306][ T435] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 179.470438][ T435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.480585][ T435] usb 2-1: config 1 has no interface number 0 [ 179.488471][ T435] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 179.498832][ T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.507381][ T435] usb 2-1: Product: syz [ 179.507744][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2360'. [ 179.514510][ T435] usb 2-1: Manufacturer: syz [ 179.525065][ T435] usb 2-1: SerialNumber: syz [ 179.531025][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2360'. [ 179.763774][ T435] usb 2-1: USB disconnect, device number 19 [ 180.853052][ T7884] rust_binder: Error while translating object. [ 180.853103][ T7884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 180.859378][ T7884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281 [ 181.155967][ T65] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 181.327572][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.338500][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.348451][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 181.357481][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.366090][ T65] usb 2-1: config 0 descriptor?? [ 181.689562][ T7891] overlayfs: failed to clone lowerpath [ 181.696357][ T7891] overlayfs: failed to clone lowerpath [ 181.794252][ T7900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.806998][ T65] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 181.893779][ T7907] overlayfs: failed to clone lowerpath [ 181.900671][ T7907] overlayfs: failed to clone lowerpath [ 182.246888][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.257049][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.266202][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 182.266217][ T36] audit: type=1400 audit(2000000262.312:599): avc: denied { execute_no_trans } for pid=7886 comm="syz.1.2391" path="/92/file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.381318][ T36] audit: type=1400 audit(2000000262.415:600): avc: denied { map } for pid=7886 comm="syz.1.2391" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.721613][ T7961] fuse: Invalid rootmode [ 182.871506][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.878649][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.886466][ T7963] bridge_slave_0: entered allmulticast mode [ 182.892741][ T7963] bridge_slave_0: entered promiscuous mode [ 182.899266][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.906360][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.913427][ T7963] bridge_slave_1: entered allmulticast mode [ 182.919719][ T7963] bridge_slave_1: entered promiscuous mode [ 182.971041][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.978112][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.985406][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.992452][ T7963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.016397][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.023739][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.033297][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.040379][ T7115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.050154][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.057232][ T7114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.083524][ T7963] veth0_vlan: entered promiscuous mode [ 183.094473][ T7963] veth1_macvtap: entered promiscuous mode [ 183.237893][ T7991] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 183.245395][ T7991] rust_binder: Write failure EINVAL in pid:19 [ 183.522191][ T435] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.705010][ T435] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.718129][ T435] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.727483][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.736414][ T435] usb 3-1: config 0 descriptor?? [ 183.995265][ T7994] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 128) [ 183.995292][ T7994] rust_binder: Error while translating object. [ 184.006186][ T7994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.012414][ T7994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 184.022761][ T435] usb 3-1: USB disconnect, device number 4 [ 184.174273][ T65] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 184.181887][ T65] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 184.189153][ T65] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 184.200083][ T65] usb 2-1: USB disconnect, device number 20 [ 184.206633][ T36] audit: type=1400 audit(2000000264.132:601): avc: denied { watch watch_reads } for pid=8014 comm="syz.1.2434" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 184.258566][ T8017] netlink: 'syz.4.2435': attribute type 28 has an invalid length. [ 184.354064][ T8027] rust_binder: 8026 RLIMIT_NICE not set [ 184.582280][ T36] audit: type=1400 audit(2000000264.489:602): avc: denied { append } for pid=8041 comm="syz.2.2445" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.612726][ T8043] input: syz1 as /devices/virtual/input/input19 [ 184.653860][ T36] audit: type=1400 audit(2000000264.555:603): avc: denied { map } for pid=8048 comm="syz.1.2446" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.691278][ T8052] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 184.698816][ T8052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 184.727492][ T8054] kvm: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 184.745156][ T8054] kvm: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 184.756539][ T8054] kvm: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 184.769074][ T8054] kvm: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 184.778429][ T8054] kvm: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 184.782950][ T8071] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 184.789739][ T8054] kvm_intel: kvm [8053]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 184.853248][ T8077] netlink: 'syz.4.2451': attribute type 4 has an invalid length. [ 184.861238][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 184.874211][ T8077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2451'. [ 184.943197][ T8079] loop2: detected capacity change from 0 to 8388607 [ 184.954504][ T6995] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 185.118189][ T8103] netlink: 'syz.2.2458': attribute type 58 has an invalid length. [ 185.126810][ T8103] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 185.456030][ T8117] fuse: Bad value for 'fd' [ 186.016406][ T8122] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 186.102408][ T8148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.102556][ T8148] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 186.108957][ T8149] rust_binder: Error while translating object. [ 186.109249][ T8148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 186.117314][ T8149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 186.123616][ T8148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:236 [ 186.139858][ T8149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 186.188077][ T8160] FAT-fs (rnullb0): bogus number of reserved sectors [ 186.203933][ T36] audit: type=1400 audit(2000000266.009:604): avc: denied { connect } for pid=8161 comm="syz.6.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.225656][ T8160] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 186.242608][ T8167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.273984][ T36] audit: type=1400 audit(2000000266.074:605): avc: denied { setattr } for pid=8172 comm="syz.1.2483" name="NETLINK" dev="sockfs" ino=31961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.300606][ T8180] rust_binder: Write failure EINVAL in pid:346 [ 186.517313][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.559930][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 186.608209][ T8185] overlayfs: failed to clone lowerpath [ 186.625227][ T8185] netlink: 'syz.4.2486': attribute type 4 has an invalid length. [ 186.632979][ T8185] netlink: 'syz.4.2486': attribute type 6 has an invalid length. [ 186.640856][ T8185] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2486'. [ 186.659399][ T8187] 9pnet_fd: Insufficient options for proto=fd [ 186.683906][ T36] audit: type=1400 audit(2000000266.459:606): avc: denied { read } for pid=8193 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.687834][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 186.709039][ T65] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.720188][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.727179][ T65] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.736488][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.741110][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 186.745302][ T65] usb 3-1: config 0 descriptor?? [ 186.755609][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.763904][ T31] usb 2-1: config 0 has no interface number 0 [ 186.769996][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 186.778641][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.787818][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.795840][ T31] usb 2-1: Product: syz [ 186.800014][ T31] usb 2-1: Manufacturer: syz [ 186.804606][ T31] usb 2-1: SerialNumber: syz [ 186.809979][ T31] usb 2-1: config 0 descriptor?? [ 186.815920][ T31] smsc75xx v1.0.0 [ 187.103293][ T8203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.105036][ T8203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 187.111626][ T8203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247 [ 187.243764][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 187.264643][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.313925][ T8210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.508654][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 187.521748][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 187.532393][ T65] usb 3-1: USB disconnect, device number 5 [ 187.539549][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 187.559020][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 187.569270][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 187.596589][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 187.610831][ T31] usb 2-1: USB disconnect, device number 21 [ 187.706505][ T8232] devpts: called with bogus options [ 188.030837][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.191822][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.202808][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.212565][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.225547][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.234609][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.243090][ T65] usb 3-1: config 0 descriptor?? [ 188.678784][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.691438][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.704054][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.713667][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.721113][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.728572][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.737117][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.744575][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.752243][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.759943][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.767392][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.774815][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.782315][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.789788][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.797170][ T65] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.805229][ T65] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 188.814188][ T65] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.931983][ T36] audit: type=1400 audit(2000000268.570:607): avc: denied { mounton } for pid=8256 comm="syz.1.2508" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 188.937026][ T8257] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2508'. [ 188.959837][ T65] usb 3-1: USB disconnect, device number 6 [ 189.076962][ T8257] overlay: ./file0 is not a directory [ 189.581523][ T8265] rust_binder: 68: no such ref 16777219 [ 189.587228][ T8265] rust_binder: inc_ref_done called when no active inc_refs [ 189.587245][ T8265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.601589][ T8265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 189.632410][ T8274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.642513][ T8274] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 189.649001][ T8274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 189.657240][ T8274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:77 [ 189.667003][ T8274] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 189.683341][ T8274] rust_binder: Read failure Err(EAGAIN) in pid:77 [ 190.011688][ T8289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=8289 comm=syz.4.2517 [ 190.710041][ T8299] __vm_enough_memory: pid: 8299, comm: syz.2.2521, bytes: 18014402804453376 not enough memory for the allocation [ 190.742754][ T8301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.755285][ T8301] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 190.761904][ T8301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 190.769996][ T8301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:87 [ 190.845644][ T36] audit: type=1326 audit(2000000270.362:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3b8f6c9 code=0x7fc00000 [ 191.250640][ T8352] netlink: 'syz.4.2540': attribute type 27 has an invalid length. [ 191.263373][ T8352] sit0: left promiscuous mode [ 191.270143][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.277488][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.499663][ T36] audit: type=1404 audit(2000000270.981:609): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 191.515843][ T36] audit: type=1400 audit(2000000270.991:610): avc: denied { load_policy } for pid=8387 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 191.536567][ T36] audit: type=1400 audit(2000000270.991:611): avc: denied { create } for pid=8387 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.557597][ T36] audit: type=1400 audit(2000000270.991:612): avc: denied { create } for pid=8387 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.578579][ T36] audit: type=1400 audit(2000000271.019:613): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.603057][ T36] audit: type=1400 audit(2000000271.019:614): avc: denied { mounton } for pid=8392 comm="syz.2.2555" path="/34/file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 191.625547][ T36] audit: type=1400 audit(2000000271.019:615): avc: denied { read write } for pid=8392 comm="syz.2.2555" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 191.649525][ T36] audit: type=1400 audit(2000000271.019:616): avc: denied { read write } for pid=8392 comm="syz.2.2555" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 192.382571][ T7114] bridge_slave_1: left allmulticast mode [ 192.388260][ T7114] bridge_slave_1: left promiscuous mode [ 192.401432][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.415489][ T7114] bridge_slave_0: left allmulticast mode [ 192.421162][ T7114] bridge_slave_0: left promiscuous mode [ 192.429051][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.574067][ T7114] veth1_macvtap: left promiscuous mode [ 192.579802][ T7114] veth0_vlan: left promiscuous mode [ 194.690717][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 194.690734][ T36] audit: type=1400 audit(2000000273.974:659): avc: denied { read write } for pid=6129 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.913933][ T36] audit: type=1400 audit(2000000274.181:660): avc: denied { execmem } for pid=8450 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 194.936669][ T36] audit: type=1400 audit(2000000274.199:661): avc: denied { mounton } for pid=8453 comm="syz.6.2579" path="/94" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 194.958632][ T36] audit: type=1400 audit(2000000274.199:662): avc: denied { read } for pid=8452 comm="syz.2.2578" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 194.981359][ T36] audit: type=1400 audit(2000000274.199:663): avc: denied { read } for pid=8453 comm="syz.6.2579" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 195.002415][ T36] audit: type=1400 audit(2000000274.199:664): avc: denied { read } for pid=8453 comm="syz.6.2579" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 195.024952][ T36] audit: type=1400 audit(2000000274.209:665): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.057792][ T36] audit: type=1400 audit(2000000274.321:666): avc: denied { read } for pid=8453 comm="syz.6.2579" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 195.081251][ T36] audit: type=1400 audit(2000000274.321:667): avc: denied { read } for pid=8453 comm="syz.6.2579" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 195.796791][ T36] audit: type=1400 audit(2000000275.006:668): avc: denied { execmem } for pid=8459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 200.325194][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 200.325211][ T36] audit: type=1400 audit(2000000279.256:710): avc: denied { execmem } for pid=8493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 200.351811][ T36] audit: type=1400 audit(2000000279.256:711): avc: denied { mounton } for pid=8495 comm="syz.2.2592" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 200.377175][ T36] audit: type=1400 audit(2000000279.312:712): avc: denied { create } for pid=8496 comm="syz.6.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 200.398859][ T36] audit: type=1400 audit(2000000279.312:713): avc: denied { read } for pid=8496 comm="syz.6.2593" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 200.421610][ T36] audit: type=1400 audit(2000000279.312:714): avc: denied { create } for pid=8496 comm="syz.6.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 200.441255][ T36] audit: type=1400 audit(2000000279.312:715): avc: denied { read } for pid=8496 comm="syz.6.2593" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 200.463900][ T36] audit: type=1400 audit(2000000279.312:716): avc: denied { create } for pid=8494 comm="syz.4.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 200.483526][ T36] audit: type=1400 audit(2000000279.331:717): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.507685][ T36] audit: type=1400 audit(2000000279.331:718): avc: denied { read write } for pid=6129 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 201.748060][ T36] audit: type=1400 audit(2000000280.588:719): avc: denied { execmem } for pid=8502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 203.271237][ T8518] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 203.279032][ T8518] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2598'. [ 203.288525][ T8518] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 203.296395][ T8518] netlink: 'syz.2.2598': attribute type 2 has an invalid length. [ 206.578441][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 206.578459][ T36] audit: type=1400 audit(2000000285.129:749): avc: denied { execmem } for pid=8529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 206.587493][ T8534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.608125][ T36] audit: type=1400 audit(2000000285.129:750): avc: denied { create } for pid=8531 comm="syz.2.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 206.617626][ T8534] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 206.632119][ T8536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.638415][ T8535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.644757][ T36] audit: type=1400 audit(2000000285.129:751): avc: denied { create } for pid=8531 comm="syz.2.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.651334][ T8534] audit: backlog limit exceeded [ 206.671900][ T8536] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 206.676646][ T8535] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 212.392329][ T36] kauditd_printk_skb: 189 callbacks suppressed [ 212.392345][ T36] audit: type=1400 audit(2000000290.580:939): avc: denied { execmem } for pid=8557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 212.421829][ T36] audit: type=1400 audit(2000000290.590:940): avc: denied { read append } for pid=8559 comm="syz.2.2613" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 212.445243][ T36] audit: type=1400 audit(2000000290.590:941): avc: denied { read write } for pid=8559 comm="syz.2.2613" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 212.468363][ T36] audit: type=1400 audit(2000000290.590:942): avc: denied { read write } for pid=8559 comm="syz.2.2613" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 212.491490][ T36] audit: type=1400 audit(2000000290.590:943): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.515574][ T36] audit: type=1400 audit(2000000290.608:944): avc: denied { mounton } for pid=8564 comm="syz.4.2615" path="/496/file0" dev="tmpfs" ino=2813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 212.538100][ T36] audit: type=1400 audit(2000000290.608:945): avc: denied { read } for pid=8560 comm="syz.6.2614" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 212.560611][ T36] audit: type=1400 audit(2000000290.608:946): avc: denied { mounton } for pid=8564 comm="syz.4.2615" path="/file0" dev="rootfs" ino=7916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=0 [ 212.583091][ T36] audit: type=1400 audit(2000000290.608:947): avc: denied { create } for pid=8560 comm="syz.6.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 212.602470][ T36] audit: type=1400 audit(2000000290.608:948): avc: denied { read write } for pid=8560 comm="syz.6.2614" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 214.804718][ T13] bridge_slave_1: left allmulticast mode [ 214.810472][ T13] bridge_slave_1: left promiscuous mode [ 214.816131][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.823702][ T13] bridge_slave_0: left allmulticast mode [ 214.829476][ T13] bridge_slave_0: left promiscuous mode [ 214.835061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.968122][ T13] veth1_macvtap: left promiscuous mode [ 214.973653][ T13] veth0_vlan: left promiscuous mode [ 215.296895][ T13] bridge_slave_1: left allmulticast mode [ 215.302547][ T13] bridge_slave_1: left promiscuous mode [ 215.308217][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.315678][ T13] bridge_slave_0: left allmulticast mode [ 215.321484][ T13] bridge_slave_0: left promiscuous mode [ 215.327087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.458274][ T13] veth1_macvtap: left promiscuous mode [ 215.463800][ T13] veth0_vlan: left promiscuous mode