last executing test programs: 3m22.461162851s ago: executing program 3 (id=148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x5e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396a", 0x17}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="74eae251735bf963", 0x8}], 0x1, &(0x7f0000001c00)=ANY=[], 0xc0}}], 0x2, 0x8008801) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) readahead(r0, 0x7, 0xb) 3m21.916068114s ago: executing program 3 (id=162): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f00000002c0)={0xa, 0x0, [{0xd, 0x7, 0x0, 0x7, 0xffff6dc7, 0x101, 0x9}, {0x1, 0x1ff, 0x9, 0x2, 0x80000000, 0x6, 0xb}, {0x80000001, 0x78d, 0x0, 0xfffffffd, 0x6, 0x800, 0xb7e1}, {0x80000019, 0xb, 0x1, 0x9, 0x9, 0x2}, {0x1, 0x7, 0x9, 0x6, 0x7, 0x6, 0xb33}, {0x40000001, 0xae, 0x0, 0x2, 0x2974c2b7, 0xafc, 0x80000000}, {0x80000019, 0xa85, 0x4, 0x8000, 0x4, 0x2, 0x2}, {0x1, 0x1, 0x1, 0x9, 0x7ff, 0xfcd, 0x10}, {0x1, 0x901, 0x5, 0x4, 0x2, 0x100, 0x80000001}, {0x80000008, 0x0, 0x2, 0x6ae09a83, 0x7, 0x6, 0xff}]}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x240010, 0x0) 3m21.905459065s ago: executing program 3 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000)=0x40005, 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000200)=[@exit_looper, @dead_binder_done, @increfs_done], 0x1000, 0x0, &(0x7f0000000880)="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"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x1, 0x7fffffff}) r6 = accept$inet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200da0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) 3m18.409808797s ago: executing program 3 (id=211): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x18, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r3, 0x7) (async) accept4$unix(r3, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3m18.329423613s ago: executing program 3 (id=212): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0xc}, {0x6}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3m18.265997618s ago: executing program 3 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, 0xffffffffffffffff, 0xa0e51000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m18.220391942s ago: executing program 32 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, 0xffffffffffffffff, 0xa0e51000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m53.169641298s ago: executing program 2 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000210000100fdfafffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000df0b000000000000ffffff7f030000000b00000027bd7000fc3f00000a0000004400000000000000480003006c"], 0x138}}, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010728bd7000feffffff0c000000200001801400cb8a76657468305f746f5f59776e6400000008000300030000000800038004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x24000811) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r8, 0xd201}, {r6, 0x280}], 0x2, 0x5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f00000033c0)=@ethtool_eeprom={0xc, 0xffff, 0x10001}}) 2m52.325349096s ago: executing program 2 (id=880): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x800, 0x81, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0/file0\x00', 0x381000, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) nanosleep(&(0x7f0000000040), 0x0) 2m52.307869177s ago: executing program 2 (id=881): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x6400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffff000) 2m49.243885844s ago: executing program 2 (id=921): syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r0, 0x0, 0x0) (async) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x10, 0xa16c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, 0x1, 0x10, 0x1, 0xfffffffb}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r5, 0x20, 0x700, 0x3, 0x5, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x64, 0x0, 0x24, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@generic={0x7, 0xb, "11f8967181d283a066"}, @generic={0x44, 0x5, "e65eba"}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x9, [0x4]}, @ra={0x94, 0x4}, @generic={0x89, 0xb, "9e69768aaa90aada59"}, @rr={0x7, 0x2b, 0x44, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @multicast2, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}, @local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRES16=r4, @ANYRES16=0x0, @ANYRESOCT], 0xc0}, 0x1, 0x0, 0x0, 0x28040051}, 0x24040800) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x1e, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) setresuid(0x0, 0x0, 0x0) (async) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) statx(r4, &(0x7f0000000600)='./file1\x00', 0x6000, 0x100, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), 0x440e8, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=unix,access=any,mmap,debug=0x0000000000000007,euid>', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRESDEC=r10, @ANYBLOB="2c6673636f6e746578743d756e636f6e66696e65b7b919da93bd8c7b5f757365723d5c2c657569643c", @ANYRESDEC=r9, @ANYBLOB=',fowner=', @ANYRESDEC=r10, @ANYBLOB=',appraise_type=imasig,obj_role=veth1_to_hsr\x00,fsmagic=0x000000000000009e,\x00']) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fcdbdf250f0000400c00078008000200faffffffa5da2b9139d45a8dc62518f15c28cbb5fc8590939e278eed695bc5ed0a5910e25b7ccd6ba04cb52bbf87741f8407af0048daae1299adddbe10c914fd9169d4ee19192ff9e492910c9cb1da538f312f2790dc7303cbb495b39fd3132b17eb105b0e"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 2m49.243627484s ago: executing program 2 (id=922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x112, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x2800) mmap$usbmon(&(0x7f00001a5000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m49.110492405s ago: executing program 2 (id=923): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(r4, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1) (async) readv(r4, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="d527f652873eb25d3a71d0320d9e552f64bacf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784d"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="d527f652873eb25d3a71d0320d9e552f64bacf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784d"}) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.062137708s ago: executing program 33 (id=923): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) readv(r4, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1) (async) readv(r4, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="d527f652873eb25d3a71d0320d9e552f64bacf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784d"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="d527f652873eb25d3a71d0320d9e552f64bacf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784d"}) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.577418623s ago: executing program 1 (id=4322): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x3) ioctl$KDSETLED(r0, 0x4b32, 0xa) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000000c0)) r2 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000240)={0xfffffeff, 0x8, 0x8001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r4, 0x29, 0x45, 0x5, 0x10, 0x1, @private1, @private1, 0x20, 0x8, 0x800, 0xa9d}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000400)={0x760, r6, 0x101, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x18c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x1, 0x1, 0x5}, {0x8, 0x0, 0x5, 0x100}, {0x9, 0x7, 0xfb, 0x1}, {0x5, 0x3, 0x80, 0x6}, {0x6, 0x0, 0xff, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xab}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r3}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1, 0xc8, 0x5}, {0x4, 0x0, 0x6, 0x6}, {0xd9f, 0xd, 0x2, 0xca1}, {0x3, 0x0, 0x73, 0x9}, {0x8, 0x4e, 0xd, 0x500000}, {0x80, 0x1, 0xfa, 0xe6ea}, {0x5, 0x1, 0x80, 0xffffffff}, {0x40, 0x8, 0xff, 0x401}, {0x1, 0x5, 0xa2, 0x8000}, {0x4, 0x40, 0x3, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x82bd}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x760}, 0x1, 0x0, 0x0, 0x4000}, 0x41) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r7, 0x700, 0x8, 0x80000001, 0x4, {{0xb, 0x4, 0x2, 0x2f, 0x2c, 0x65, 0x0, 0x7, 0x29, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x2, [{@loopback, 0x2}]}, @timestamp={0x44, 0xc, 0x51, 0x0, 0xd, [0x7, 0xab]}]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x20, 0x21, 0xee, {0xee, 0xc, "8d6e779a8ee3291b4425b5fc3bf6c8a64a9976aab7ff4f0cba3587fa69cfe23b5defae56e9d97d678c66c2ee19f1b06e8f4456393e98d279bc8b55ab62ac7f4548683d0ff219483c75e4176f388745acc73cf075b941c5ec03fd6c9cf8c4a4f4365e6a9534a1d9995dbdc020ef3c22c38900fe017abd030ef7692ff303a81acd85f9dcfa86431b0680d4e688dfaea401bfbcfca8cd1f6db7e3d79bef6b0ef789fc2804749d72b0bc04137fbb0934a2d6fda8e0559c23845e54ce7630231fd921d8cf9b9fd312fea38dc4ece99719b2d0e17270769ded324255d6b63424b82f7e5437bb0edce33c284a2416a2"}}, &(0x7f0000000e00)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "c8252890340651d06fb5a0318615a654294638953820cfefaa212f95572e6c009d383a087642f310770167b82606dd4faf13b01710dafd728c2824eb5752a2789379196871ae2005099fbb34c4298437cdbe848b6686b4b138948d49c11a84a5989d994d1849e650e6c764e759561a8adfd7669908aa789b949244c455cd38d6cf31d7cf47239367c0a6af568f3c213b1ca51f6841117788f09d1ac64e868c94b28fded648b7657b6bbfa3fc17df77a966ce89a9150427776e2c2eae036aec54130a8de5c8d3"}}, &(0x7f0000000f00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xe, 0x4, "ded6e855", "bd13ffe9"}}, &(0x7f0000000f80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0x9, 0x6, 0x4, 0x7ff, 0x4}}}, &(0x7f0000001440)={0x84, &(0x7f0000001000)={0x20, 0xf, 0x4f, "936e8405e61f01ad8c85792d0db7f1f56a117d979f4d0e944ee0be6da45e91ce737e6984b932c01aefed23fd61ccb1e3a141d4c8d8f0ba2aa3efc1bf90e47865b940b86476f9b344f727f1428abe5a"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001100)={0x20, 0x0, 0x4}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x3d}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0xd2}, &(0x7f0000001200)={0x40, 0xb, 0x2, '-I'}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001280)={0x40, 0x13, 0x6, @random="87cb6e020824"}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001300)={0x40, 0x19, 0x2, "4bbf"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x66c}, &(0x7f0000001380)={0x40, 0x1c, 0x1}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x3}}) r9 = syz_usb_connect(0x4, 0x216, &(0x7f0000001500)={{0x12, 0x1, 0x201, 0x2c, 0x2a, 0x51, 0x40, 0x45e, 0x466, 0xb287, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x204, 0x2, 0x4, 0x40, 0x70, 0xb0, [{{0x9, 0x4, 0x4b, 0x7f, 0x1, 0x4c, 0xed, 0x27, 0xfc, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "1def07bf"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2f5, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x2}, @dmm={0x7, 0x24, 0x14, 0x4, 0x81dd}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x800, 0x0, 0x6d, 0x7, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x18a3}]}}]}}, {{0x9, 0x4, 0xbc, 0x0, 0x8, 0xff, 0xff, 0xff, 0x4, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0xd6, 0x4}]}], [{{0x9, 0x5, 0x4, 0x1, 0x250, 0x4, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x25, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x71, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xbd, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0xff, 0x6, [@generic={0x74, 0x31, "664a278a2913622adc1c952e3b831c84361192afe98ad8a898191a839eb3b0269bbe29d3ea048d450bb06e16af21083d9df41f077c607c92bd511246f15edc6cf8c3b2cfe92db3dda7ae35413b24a5331976caa5ad4bde5e3a083fdb70cf79e013be8032939cb2c9b3bb0505bc3f341cd824"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0xbc, 0x9, [@generic={0x94, 0xc, "7999eb5b4f5664ef064b7f3f05365ff5d23a1c320676fdce107ffdce293874a5b1634e2d3fade7f71f410584b610d254c6a84e9a95d55de7e87d407dc0bc12e04c2eef371e6632438467c0cce9aed662a8ef14d61d48933bb300a173d6ffb3baa7432cca6a08a608a4be16a854f02425a632e9bce3da824c7738ba006e3e6c73515297e2b30114fd64e6be9da4fdbe83ccdd"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x68, 0xa8, 0xc0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xf0, 0x0, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x1, 0x2, 0x1, 0x0, 0x9}, 0x23, &(0x7f0000001780)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "35ab0f28b41e972a6b58de2ee0375e85"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x8, 0x5}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0xc07}}, {0x5e, &(0x7f0000001840)=@string={0x5e, 0x3, "475ea309fd4438b519504d21cc9afb600b28b731215a8317e92a69257633b1c2d487b7c7e6377a4fc800674f7cfaf95e4299df0abfde1babeec2d6f455c23fdad19b3fde868946f42542a4618f2a7d0433e7dd0d354c000a0df94294"}}, {0xda, &(0x7f00000018c0)=@string={0xda, 0x3, "9b2c30353904e5e3a2332ff1dbb83e86ee9d6e384037e0beeb46206af3222a3327c3c66ec4b34bafa5e93da740c02aa2e800a1de15cf15da49445ef4a323b19ad600809ad7a4ea384877a2eb4c21ab53fcb2d72f787dacb368d24e437c7fe122fea7165b40c4865afa0aa3770147521bb96220fa09e5407905eeb38cc81fdbc6047bd49eb52c3b08efe65066b966ec80b88ec30ec58e3467730ba0387916b9e2caf2c3e72039e84b1f73ad7b24791a4d749b4ec72ea3772272fd2bcf6e43d2b5607a6724a473ac1bfa9c2b7d23db1a6f5f7985764bb314f8"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x457}}, {0x33, &(0x7f0000001a00)=@string={0x33, 0x3, "8cc326843953fe54565abc1e36564be84251bfe13a57a2a27f6191d889ec7e313bf5d46670199545f7ec5ac1c5d52f9779"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x457}}, {0x97, &(0x7f0000001a80)=@string={0x97, 0x3, "79c49f3cad910f57bf0ee074347e317bda6b30ffa66b89e9d322fb877a0d151b8ab74c3160b00c083a01782ed9dba25acbfb1a4713255deea621803ede8cc983e149be52c88fa1555c4583adeccf16863c51d782b198e8c2e62e88f53e63a52018e3a5c77a35231aa2de156fb280faf850f39c4086946aa7ffef021a635476436ac68c23992088116d7f5cc4003eb8ba0f9a9d4638"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$printer(r9, &(0x7f0000001d40)={0x14, &(0x7f0000001c40)={0x40, 0x23, 0x49, {0x49, 0xa, "cf00a1de632ef4ca8ccdec4e4732be2a74052e120d03e2c7bf8397dc6bbb9e500350a030746680092231b6f254cca38e5ca42972301755029da98b4c4e041af070f3f0a02d2bd3"}}, &(0x7f0000001cc0)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "162eea8802bfae1d638d7287aab74e406fc6823f7bcc2ea27873bdfe7e47701a169e298b63f75425d09cab0bd042aa67705d69efacbcb277aab5345064478d1a3d8602833bd31e37"}}}, &(0x7f0000001fc0)={0x34, &(0x7f0000001d80)={0x40, 0x17, 0x21, "12bbba5f9988444065feda959326419933ef80795f7c0aaa745e57869a7a389a27"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e00)={0x0, 0x8, 0x1}, &(0x7f0000001e40)={0x20, 0x0, 0xcd, {0xcb, "b9f7deee9b73a437178715047fa3da3a63daf662908b72df1f4bf8b78aea2b102dd38cfc378e7cbf44dfd70dcf9a9086ffbde5267f1ddf5669287e965952a0d214beb42da6820abacf07a28a03746dc71a5b5595cb73f063804d47a6a2faef05c30ef1d8a98b1f62d315f49e128db4efadcf51a597aa32a37638f8537bf27b3c626d1fc00f70fe8949710d0e118ada06839fea2c413ea8e1e6233cc58b23db7a3b6ddddce02a7a2b7f0b0a979f50f228e0b952114407f2f6f313946949aab50b922b1d434f34a1b382a03d"}}, &(0x7f0000001f40)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000001f80)={0x20, 0x0, 0x1, 0xfa}}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000002000)) syz_usb_control_io$hid(r9, &(0x7f0000002200)={0x24, &(0x7f0000002040)={0x0, 0x8, 0xd5, {0xd5, 0x5, "a8a0cecb5c51aaeab5bbb85c7475bb26ffe1b9c62c5dd7ac4fdd3a6fc1a154fd0d9818df4459c94e0e112d572da2be3c578fceeaa5defd0a24e45a8b8c4221756ec253520eb6042042c3904f39afa179058ed11b919ebf5b58978a83085fb426ffbfef447cc9007347d1572385a3cba83e9367305d4d2632d259f801128965b3d4014b3d034c82ef033b8a5735c05540cfb54f0cb2b1f82f240667657e00a8802a73decbdb9e524261349d5c35fd5f6343de4ecc0a2c82289a098fa07f5fe26e639b26ff82cc4a6f231d99596c0c54906c37a2"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000002180)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x1, "5ad688a9"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "dba1ea94"}, @global=@item_4={0x3, 0x1, 0x7, "662d64c2"}]}}, &(0x7f00000021c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1428, 0x4, 0x1, {0x22, 0xfff}}}}, &(0x7f00000023c0)={0x2c, &(0x7f0000002240)={0x20, 0x9, 0x42, "3fd5186d94d5618f72936a5e7b4a31fd5177c57ada18643e2e45543ff1ab11f42f4bce38b6d67bc0e99f5210edc3d179008fef061537fa93726538c593251584cc44"}, &(0x7f00000022c0)={0x0, 0xa, 0x1}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000002340)={0x20, 0x1, 0x7, "f9bd0a92f9bfc4"}, &(0x7f0000002380)={0x20, 0x3, 0x1, 0x7}}) fchmod(r2, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000002400)) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000002440)="6b72bb4242a39161ae4dc6815a54285b869693467d37b6b223677c5f87df09244e3ce224a3263486588ea843f88ae57a45ee03f9ce3b772183ec800ef3e8576f379ef30f61628d3d3d879ffac096a0b4c3008ff6dbb766bb476a6a6e5c2b85acf07d0ffdfa99b17c87ec8ff001e9feaa79abd5da38b6f5ecdf8765505872931a333929d89bdce807327dd64f8d1f642e260e061e09e9a07e2809a77877d0bef7386bf0311c9ac70ea11d5e43d9b8cfcaf506af3803128ef1286cb34f62a01f5179a6f925bff75135c88a0c44419b39c9587fb2614921a3d503aa0a8f1561", 0xde, 0x4000050, &(0x7f0000002540)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0xc00000}, 0x1c) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r11, &(0x7f00000025c0), 0x2, 0x0) 1.223870932s ago: executing program 0 (id=4331): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) connect$inet(r6, &(0x7f0000000040)={0x27, 0x4e20, @rand_addr=0x64010100}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf251b0000000700210061610000c944abd01cd9fa53d9a10bf450018a5bd89a1f91d651f2867720a0ceb7ce0c3fd0602f601d3fd3953cefe8c487253fd2d0acca12127e85f1e9c69bee59fd8bed0d32ebedc2f4379565c22edc75ffa74dbb4e50e1810acb75ab81a63eeaac51a81d4c4c4f3ecd2edf4430e38b5581a65225c1c8b733ba8199256b2f00"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02022dbd7000fedbdf25250000000c00990089000000480000000a00060050505050505000000800350000c39677a334ac8c453dcbbaf9a1f100000008002600f8160000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8050) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0xfffffd6f) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x44da2000) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000001180)=""/4096) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000009b000040"]) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.223689572s ago: executing program 0 (id=4332): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x2007) sendfile(r0, r0, 0x0, 0x7ffff000) 1.203666603s ago: executing program 0 (id=4333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clock_adjtime(0x1, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x1, 0x0, 0xfffffffffffffffd, 0xf7fffffffffffffd, 0x4, 0x10001, 0xffd, 0x8, 0x2, 0x3, 0x0, 0x3}) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x178, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x97, 0xec, 0x20, 0x9}, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) capset(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(0x0, 0x2, 0x400) ioctl$EVIOCGNAME(r6, 0x80404506, 0x0) r7 = socket$inet(0x2, 0xa, 0xff) setsockopt$sock_int(r7, 0x1, 0x2, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000040)={r8, r9+60000000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.011616618s ago: executing program 1 (id=4342): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="f333e3", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 931.833865ms ago: executing program 1 (id=4344): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', '+!@/\x00'}, &(0x7f0000000280)='\x00', 0x1, 0x2) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0015f9f40700090400810000008001400000000000", 0x1c) openat(r0, &(0x7f0000000000)='./file0\x00', 0x8000, 0x2) getdents64(r0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0x5000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x6000, 0x0, 0x3, 0x8, 0x7c, 0xfc, 0x7f, 0xfd, 0x7, 0x7, 0x0, 0xff}, {0xffff1000, 0x2000, 0xc, 0x0, 0x7, 0x4, 0x10, 0x0, 0x2b, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0x4, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xf000, 0x10, 0x6, 0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0xffff1000, 0x4, 0xe, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0xeeee8000}, {0xeeee0000}, 0xfdfcffdb, 0x0, 0x0, 0x2c, 0xb, 0x12000, 0x2000, [0x0, 0x0, 0x2, 0xc85f]}) (async) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)={0x3000, 0xeeee8000, 0x6, 0xc, 0x4}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) (async) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x11, 0x25, &(0x7f0000000440)={@rand_addr=0x64010102, @loopback, @rand_addr=0x64010102}, 0xc) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x20010, 0xffffffffffffffff, 0x0) (async) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$getflags(r7, 0x40a) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1000}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000100)}, 0x400}], 0xb, 0x0, 0x0}) 874.27431ms ago: executing program 4 (id=4347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x67e, 0x2, 0x8, 0xffffffffffffffff, 0x225d7e34df9dea0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1281, 0x8000000002}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0x3, 0x4, 0x40000000, 0xa82, 0xb, "e0995c822ce21a012394b4520447bb24098abb"}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x1}, @dead_binder_done, @increfs, @increfs, @clear_death, @acquire_done={0x40106309, 0x3}], 0x15, 0x0, &(0x7f00000000c0)="22fca00f60393ff863a6dc1fa5d4940f99ead4d3b5"}) 815.972924ms ago: executing program 4 (id=4348): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x2, 0x1, 0x5, 0x10, 0x3}, 0x20) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='silent'}]}) 813.381014ms ago: executing program 4 (id=4349): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffffffffffff}}]}}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 813.143544ms ago: executing program 1 (id=4350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) setresgid(0xee00, 0x0, 0x0) prlimit64(r1, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) (async) setresgid(0xee00, 0x0, 0x0) (async) prlimit64(r1, 0x9, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) (async) 801.640385ms ago: executing program 4 (id=4351): r0 = fsopen(&(0x7f0000000140)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x4, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x402400) (async) syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x402400) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0) ioctl$TCSETS2(r8, 0x402c542b, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x44da2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x44da2000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r10, 0x112, 0xc, 0x0, 0xffb5) 794.247206ms ago: executing program 1 (id=4352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x7fff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, 0x0, 0x0, 0xffffffffffffff30}]) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000140)=0x277, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1380, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = epoll_create1(0x80000) epoll_pwait2(r7, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40000) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0x100000000, 0x1, 0x10}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 685.188854ms ago: executing program 4 (id=4354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6d43, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x124, 0x1, 0xa, 0xe73625164d1c5f53, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x102, 0x6, "56f88181f9e00b3011a1313dc44f3ee5a0205130ca0efb7350023c88f9c5c6bd214ac43828f1d3b53a0606fbfb4c6497b0eb5a6b38092fead204f7b6bbde44a9280a6ba441683be1255945dbf078c1820ede849d5f16115e3eb53c941e4fbc76b6150ee96d730a3906e65ae4a9a3410ac7dc821fac805c0588141723c8f248f5fddd9266c3cd977ba94ec0b50c6ea5c27e3a1fe03a77bb42c0d9f929c102b8616723a1a4c0df309a704c976e1f72e9f964cbf3c5cd039ab260e675a09bbbb156041a703ea2214ffad152c16fefbce58d5304cdd6a8de23931955a78532f5dc9129f5c0820f881b41f09f1fe93d8f792fe0e18fa9869e6e15a22b08c56113"}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000000000000000700000adc61ad9ddad0fb92354be5ca733c04233097ccb097dbe9ef7693debbd7d805287c0b23c40e7370a5fa1e6a9e81fae1bcfeb4d463c5be91b333f708244ccfc3efcb31bf32e47aed05a82abba6b09a38be1a9e543b632c67e095d1b57335f9d175ee09dacb7e8d9096c2d2d5"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000004c0)={0x3, 'syzkaller1\x00', {0xbd5}, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 684.496524ms ago: executing program 4 (id=4356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6, 0x6}, 0x1}], 0x1, 0x40000002, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000180)="bd271d2244eb5cb0ee3982c32db2adbeff5be1a648e25db17fca65d38382d7378583410fa12cffbfe17d8d4e92fcfed5f85169025c40e82a74684b69d41c160a7035cba1bfa544effdfebaf94a8d40f6f5eb143850bc26544181f45c68b4a4c71aced7853d234aa250ce7fdc5e3593d1c61350efd3aa8d1664f27aa1a23de9a2231ec083ee8b82fed97420e7a02880b90887ecc88755a0b4eb7298dc8ca31447e0aa240932b0ec4ac267340317", 0xad}, {&(0x7f0000000240)="52a60b251d79205ac8fa35cc44ba531da53141e522905604728bbdbea989c415b607fc82c9546adb110b7a06938f9562dee40e5aaa9ace71fc3b03a8f70b1801fed80f", 0x43}, {&(0x7f00000002c0)="c806c1ae8d89074ccdb38225646656f848bb53c1a36a53bba8ef9d42102a28c2858d7f206908ca7349e503750f33a81c842bf7fb694b332890e9f6d4138c332880864a679fd6157efc6c854744dda70e640d8d6cdd21d99bfa550943fe4451e5003fee6b974be7aea0e768724e68cd994d0bc0139615c09043e83151863d805d82795aab5b2c70c1ba9c1aa70a2db09811f4468ccc1976fa509b208823f00a246436867a5790db9ff8a1ad2e6a2a3908cef5421d88d6dd59b2212dae5d970b37bd2bf4b6a5fdce6e16b13bd0649bf1849ceca8c10d53009473ad11181baded", 0xdf}, {&(0x7f0000001400)="d8b0633289c85817b0604871359b2a88e1e5365d89679d328114a15f43b189acff694747a1d16b67082e0663901f0314f9c4ce4b96eb22b93a7592904e0199e4808baf49e49b776d222bca33d4211eebfbe558535b8a74f5a134fb35da16906d43bb6e4ed4427eeb71d1235ff538c326b79f7bf1497875fbcf9d86dd190fdad838bfa376c3dc48b77c2666432fad96ef78712fc4fd956d9f434a19974b2a4accd525e7", 0xa3}, {&(0x7f00000014c0)="c7c96b7360286a7f1c63f6e7f9ee296e97b3ed83a9676d99c2855c91f5a1358c05c1d1eb29e3954f1461354074a21e1b96ed8cc167bae6605d0f76367af08a8121ccef04349bbb55d90efa749203336140dcc48bc037467e9a00de2262b091ea3697cbd19c0a3970da0718f897045b0a81619e9d28cfc6d64f15fa79c2c3009eae7edca61dd41030fb4b13336c5ed6b814bd0d135423dc", 0x97}], 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="900000000000000000000000070000008665000000000507703e4959d2050e873ffd30f775ecece3f0ed53070f8ca94764665aec447cc3803c880211833d162cf8203404ddd562ca2d9adc07038d0009e279f938477a700202000981be9e7fff9350060a6c25da1cfb3260510209ce3c30e10f05cf440c3f330000000000008000830f610a010101ac1414aaffffffff1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0a010101e00400000000000000000000000000000000afc56d95cc000007000000019404964e08df925aebdfcd38c0b5c1f55c381c3152a89d0c27744e6875ba57e2877cd059f499e469f1d41f98e1daf78b2291382bb61d1c2d2e280857130627a60b07e7e077233455289c63a347dd46"], 0xc8}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001700)="46eaca28e56b1f817d547b2b3cc44bd1f3f04f98e111141a49f50578417d4946c3a9a8c2f3360b67fd9fe9980f4e3526979f5a79bb29dad9848cfb818f68f1ae1bc6fa71a82a8753bd156b277bdb86f7dc2d52b81e2386f8af6f2ac397e79415a1ecbd97c342ec26eb696b69e2192152f4fe95116e2a2ac218c21dad37678650b8056d8f49755091a2109d4b0d41fa0ed07d651d7ad58d8b73da9facbe", 0x9d}, {&(0x7f00000017c0)="df43f0604be835a843a5a4e9ccdc7b444495041ee13cb5a2f9214d76e2562aeabcb0649f90f8e6d6340f68a28e46bfc8b11f7272ad5089c40e3e7ab515ed6435ce683b8b76dfe6c8bd1ecb13351318eed2a6c1f769bb97903adc3575e3753499dec35cd4732d0b7e03467207cce7c9fd35fe347eade6f7246214", 0x7a}, {&(0x7f0000001840)="c29ea70de51b5555f48143b8a505a51caae53e5935e2bf1b8db8acf68cb835b408a2faeb884c4e2a8b7d5d5b04c7497a8e09260a2e2ff8cb5939c022d06f505ff0f9979be75b788a11053e2ed934e51f7d65acf2db2dbb5b03b0119b86c776f1122042a59fe577004173f84a277d0125d56efb04ba3e7fac0653a4ba13a991dd95da923f216dc44925637ce744e55221c350ee95e5fa94a4f2eb75113d3b7d7a8ede8c0cc59b53af405e703f257e62d40c6d276b5e40b3b9d100196ea048ec60c7e168b89020268d7d4b91421d9f5ea5fb7a0c9621b7b0662348ae207d28e0cb2c092dfa7beb87149569c8ea0f79", 0xee}], 0x3}}, {{&(0x7f0000001980)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000019c0)="bc16f93f04d9fd315e0fd2c0b3fe9926fbe979ef1d07c7896eeff463325cd91dfb6a1671166f", 0x26}, {&(0x7f0000001a00)="91da1da92c96eb075bf16d403f0433f3e5e399663415f957d52b4f10d4571463eadab7159efbac14aac2ec88eb7f3c899e2b4e333352756268c328569b9d20f1666badb1851fd6c42639b8e20019a0a0db1bf78445a80c6a16838ac2ff2ce6aa345911ba253a256d638cb7c091da8ce7cf1d12eb12077d39b5d8f1db527cbed79118d6df7ca61e979be1d28aa2d60a7ed90276325cd2b5ca5b5c262dd8ee89280962a2290ceb562d5bd5b2e61eae9afb1b09bf6ce2ca5d9ff2765950878202999bcc8c54c566f4bc46", 0xc9}, {&(0x7f0000001b00)="fe99ccc4ca3762e937865cff8dcb8e6100713623ba409f0ec2c0406c7bdfaa5e764baa82e8d3e1ff2eb3ae135f1e475858933e6854b8b282fe700f301358e918d767b957612114f9dfa17a603bf4d0319c137861ff64e6dfd93ce1e020d2604d455305fb5b0f3dcb2369ea6fb352d0d1a340d5310be1e4f439d86f2048a71c5e395ab9adaa13623a69bad3df662124402e4f442c1e3876fb4c8e229a743c8eb8f1f7f740e3f57be12a759a1666fb289f1b09649dec0e4bec20f726fa9e62cbcd080dd8", 0xc3}, {&(0x7f0000001c00)="b45da6f39831b8de86726f19d64cf1d24c9eaf5ef78b395661e06b589a8f7bae1db6d39dc9eb08ed14d354e2f7c05f97f1035234ec21efe10c3f4b1b27f58410ddc98f42e0839ad37c135f52490d223a768867995a686db537eda1b32a0723d3af3f57ae20074ee4973b7f9cd828ce7915ff9e8c59aa8e6cb5690f09f961b103d830aade3b3b3a415264035f7c4ec1290b247388055b32ed90a2d6c6e7e1ccfebd0492", 0xa3}, {&(0x7f0000001cc0)="d95fd63a4b76b114cd1bc33c644964d3e9a26fd7992dafc4256f1440ce56d3d937babd8caed5244a88c8bc8ed154c22ed1d46164456243290fb89eab1045e5f7c6c34c6310065be21b9a0b19dcd78944d85383131e579203c83b417e3e955a8ebdc6b9676b29ff3e2d35543a7c7cb8bf6a70c0878b10bab167e8579147bbc90d0fc318600c5203cfe98c6842f0f80b2c77c0aea5aee0cac7de7183030bcf6da1fae1bc5fbc0af2b80e5bf05a70adda7c646d5d1fe969d0230f996dd35a1d64b5c593e30fdb2bdb346ac6fdbb2baddb7bdc00cab5e91a98f3318de6f7cafc2c4b21e8bc3ceb11a2952d3d579d969f9a82ab880451fed02346", 0xf8}], 0x5, &(0x7f0000001e40)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x47, [@broadcast, @broadcast]}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0x2, [0x9, 0x5, 0x2, 0x730e, 0xa5, 0xfffffffa]}, @end, @cipso={0x86, 0x33, 0x0, [{0x0, 0x7, "c4428df698"}, {0x0, 0x8, "1191b61502b6"}, {0x0, 0x9, "3d97a8252754f4"}, {0x2, 0x10, "adb6a335da25f2c224d7aa528f70"}, {0x0, 0x5, "b1efd6"}]}]}}}], 0x70}}], 0x3, 0x840) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x80000) getsockopt$inet6_int(r4, 0x29, 0x50, &(0x7f0000000100), &(0x7f0000000140)=0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x315000}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000140)="0439d36b4a6732373be889add73917ae293122c9fff2841459a3b0414211a97a0ed47f40a7914d75bfa531d47d3de597644f7cc409f3f640f8af7c24c76b3eb8f2", 0x41) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000080)={0x3000, 0x100000}) 681.981685ms ago: executing program 5 (id=4357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x28012, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, &(0x7f00000004c0), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x28012, r2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, &(0x7f00000004c0), 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) 616.01496ms ago: executing program 5 (id=4358): open(0x0, 0x15b341, 0xfe) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close_range(r3, 0xffffffffffffffff, 0x0) 615.81334ms ago: executing program 0 (id=4359): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a4400004000001020d00000524590000002459ff889278fdda0d000000010100040e44241ae42912090581c0ca0402f4060904010000020d0000090401016e3808500009058202ff0302900c090503020002dc0903"], 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a4400004000001020d00000524590000002459ff889278fdda0d000000010100040e44241ae42912090581c0ca0402f4060904010000020d0000090401016e3808500009058202ff0302900c090503020002dc0903"], 0x0) (async) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) (async) 590.830682ms ago: executing program 1 (id=4360): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000008) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000008) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) (async) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="29082dbd7045dde44b8a10be09000a00040077706162e7388f9c656e190b"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48942, 0x10c) fstatfs(r1, &(0x7f0000000200)=""/149) socket$inet6(0xa, 0x1, 0x5) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 547.815116ms ago: executing program 5 (id=4361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket(0x9, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 490.35498ms ago: executing program 5 (id=4362): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYRES32=0x0, @ANYBLOB="0400e5"], 0x1c}], 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314d70, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x6, "ce24c2868c94390abc572cd8d06ad5"}, 0x11, 0x3) 490.037981ms ago: executing program 5 (id=4363): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendto$inet6(r2, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 484.812991ms ago: executing program 5 (id=4364): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000000bf40), 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r2}) r3 = socket(0xf, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) (async) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x50010, r0, 0x45809000) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') (async) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) listen(r5, 0x23e) (async) listen(r5, 0x23e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) io_setup(0xe4, &(0x7f0000000000)) (async) io_setup(0xe4, &(0x7f0000000000)) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x0) (async) fcntl$setpipe(r7, 0x407, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r8, 0x0) read$FUSE(r6, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x28, 0xd1a2, 0x0, 0x1, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x3}}, 0x50) io_setup(0x7, &(0x7f0000000140)) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x2) (async) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) 55.517386ms ago: executing program 0 (id=4365): unshare(0x4000400) r0 = timerfd_create(0x9, 0x80000) (async) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000140)={0x8, 0x8, 0x3e, 0x0, 0x0, 0xae04}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000002900)=0x659c, 0x4) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x2c020400) (async) connect$bt_l2cap(r3, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x3}, 0xe) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=4366): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$cgroup(0x0, 0x0, 0x0, 0x10084, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) lsetxattr$security_capability(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0x9, 0x80}]}, 0xc, 0x2) kernel console output (not intermixed with test programs): 96.351637][ T4623] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1482'. [ 96.356627][ T1078] syzkaller0: tun_net_xmit 48 [ 96.361598][ T4622] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1482'. [ 96.370797][ T4617] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 96.376720][ T4623] 9pnet_fd: Insufficient options for proto=fd [ 96.384243][ T397] syzkaller0: tun_net_xmit 76 [ 96.390437][ T4617] syzkaller0: Linktype set failed because interface is up [ 96.408919][ T4617] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 96.408940][ T4617] rust_binder: Error while translating object. [ 96.418288][ T4617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.425101][ T4617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 96.429698][ T4627] tipc: Started in network mode [ 96.448546][ T4627] tipc: Node identity 8f, cluster identity 6 [ 96.454328][ T397] syzkaller0: tun_net_xmit 76 [ 96.454670][ T4627] tipc: Node number set to 143 [ 96.464018][ T4627] tipc: Cannot configure node identity twice [ 96.563859][ T4644] kvm: pic: level sensitive irq not supported [ 96.563925][ T4644] kvm: pic: non byte read [ 96.574845][ T4644] kvm: pic: level sensitive irq not supported [ 96.574911][ T4644] kvm: pic: non byte read [ 96.585769][ T4644] kvm: pic: level sensitive irq not supported [ 96.585847][ T4644] kvm: pic: non byte read [ 96.602222][ T4644] kvm: pic: level sensitive irq not supported [ 96.602295][ T4644] kvm: pic: non byte read [ 96.613591][ T4644] kvm: pic: level sensitive irq not supported [ 96.613659][ T4644] kvm: pic: non byte read [ 96.624982][ T4644] kvm: pic: level sensitive irq not supported [ 96.625051][ T4644] kvm: pic: non byte read [ 96.636497][ T4644] kvm: pic: level sensitive irq not supported [ 96.636569][ T4644] kvm: pic: non byte read [ 96.647808][ T4644] kvm: pic: level sensitive irq not supported [ 96.647872][ T4644] kvm: pic: non byte read [ 96.663009][ T4644] kvm: pic: level sensitive irq not supported [ 96.663078][ T4644] kvm: pic: non byte read [ 96.693904][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1491'. [ 96.855938][ T4692] tipc: Enabling of bearer rejected, failed to enable media [ 97.516285][ T4696] netlink: 'syz.1.1504': attribute type 25 has an invalid length. [ 97.534930][ T36] audit: type=1326 audit(2016777495.248:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.1.1504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7264d8ebe9 code=0x0 [ 97.633215][ T4700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.700952][ T4705] 9pnet_fd: Insufficient options for proto=fd [ 97.774298][ T36] audit: type=1400 audit(2016777495.463:415): avc: denied { append } for pid=4711 comm="syz.5.1510" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.942572][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 97.942592][ T36] audit: type=1400 audit(2016777495.622:417): avc: denied { ioctl } for pid=4721 comm="syz.4.1513" path="socket:[19879]" dev="sockfs" ino=19879 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.990443][ T4758] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 98.000689][ T4759] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 98.046492][ T4771] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 98.084965][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 98.165259][ T691] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 98.325665][ T691] usb 6-1: Using ep0 maxpacket: 16 [ 98.331913][ T691] usb 6-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 98.343230][ T691] usb 6-1: config 0 interface 0 has no altsetting 0 [ 98.349867][ T691] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 98.358913][ T691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.367553][ T691] usb 6-1: config 0 descriptor?? [ 98.670498][ T4797] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 98.809700][ T691] dragonrise 0003:0079:0011.0008: hidraw0: USB HID vf1.50 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 99.074487][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.083096][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.092946][ T691] usb 6-1: USB disconnect, device number 13 [ 99.640864][ T4869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.642314][ T36] audit: type=1400 audit(2016777497.221:418): avc: denied { map } for pid=4868 comm="syz.5.1543" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=20045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 99.870497][ T4886] fuseblk: Bad value for 'source' [ 99.965917][ T36] audit: type=1400 audit(2016777497.520:419): avc: denied { mount } for pid=4909 comm="syz.0.1560" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.968282][ T4910] overlayfs: failed to clone lowerpath [ 100.002206][ T4910] 9pnet_fd: Insufficient options for proto=fd [ 100.170903][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 100.202938][ T36] audit: type=1400 audit(2016777497.735:420): avc: denied { accept } for pid=4960 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.352288][ T4747] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.896445][ T4989] overlayfs: failed to clone lowerpath [ 102.019700][ T5031] 9p: Unknown access argument : -22 [ 102.105184][ T5043] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 102.113252][ T5043] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 102.497472][ T5051] overlayfs: failed to clone upperpath [ 102.539062][ T513] Bluetooth: hci0: command 0x1003 tx timeout [ 102.539192][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.109223][ T4748] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.209694][ T5087] overlay: Unknown parameter 'subj_role' [ 103.237683][ T5091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1629'. [ 103.845187][ T36] audit: type=1326 audit(2016777501.148:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7264d8ebe9 code=0x0 [ 104.488235][ T36] audit: type=1326 audit(2016777501.747:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f844e78ebe9 code=0x0 [ 104.701802][ T5144] tipc: Started in network mode [ 104.706847][ T5144] tipc: Node identity ac14140f, cluster identity 4711 [ 104.713852][ T5144] tipc: New replicast peer: 255.255.255.255 [ 104.720026][ T5144] tipc: Enabled bearer , priority 10 [ 104.726515][ T5144] tipc: Enabling of bearer rejected, already enabled [ 104.734224][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 104.743252][ T5145] tipc: Disabling bearer [ 104.748635][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 104.758187][ T5144] tipc: New replicast peer: 255.255.255.255 [ 104.764309][ T5144] tipc: Enabled bearer , priority 10 [ 104.986456][ T5193] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 105.276653][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.276668][ T513] Bluetooth: hci0: command 0x1003 tx timeout [ 105.300816][ T5200] rust_binder: Write failure EFAULT in pid:316 [ 105.333115][ T36] audit: type=1400 audit(2016777502.532:423): avc: denied { associate } for pid=5206 comm="syz.5.1667" name="cgroup.kill" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.446003][ T36] audit: type=1400 audit(2016777502.635:424): avc: denied { read write } for pid=5219 comm="syz.5.1670" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.470693][ T36] audit: type=1400 audit(2016777502.635:425): avc: denied { open } for pid=5219 comm="syz.5.1670" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.928984][ T45] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 105.971792][ T64] tipc: Node number set to 2886997007 [ 105.995701][ T5269] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 106.004435][ T5270] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 106.007170][ T36] audit: type=1400 audit(2016777503.168:426): avc: denied { getopt } for pid=5271 comm="syz.1.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.012466][ T5269] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 106.085385][ T5287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 106.100090][ T45] usb 6-1: device descriptor read/64, error -71 [ 106.118464][ T5293] /dev/loop1: Can't lookup blockdev [ 106.124571][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 106.205012][ T5306] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 106.215075][ T5306] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 106.254595][ T5311] overlayfs: failed to clone upperpath [ 106.330136][ T5323] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1710'. [ 106.356732][ T45] usb 6-1: device descriptor read/64, error -71 [ 106.482918][ T36] audit: type=1400 audit(2016777503.608:427): avc: denied { bind } for pid=5360 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.613357][ T45] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 106.752375][ T45] usb 6-1: device descriptor read/64, error -71 [ 106.922183][ T36] audit: type=1400 audit(2016777504.019:428): avc: denied { write } for pid=5362 comm="syz.1.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.019727][ T45] usb 6-1: device descriptor read/64, error -71 [ 107.137480][ T45] usb usb6-port1: attempt power cycle [ 107.232069][ T5392] netlink: 'syz.4.1736': attribute type 30 has an invalid length. [ 107.500931][ T45] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 107.534816][ T45] usb 6-1: device descriptor read/8, error -71 [ 107.683741][ T45] usb 6-1: device descriptor read/8, error -71 [ 107.939393][ T45] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 107.961848][ T45] usb 6-1: device descriptor read/8, error -71 [ 108.101308][ T45] usb 6-1: device descriptor read/8, error -71 [ 108.202242][ T36] audit: type=1400 audit(2016777505.216:429): avc: denied { nlmsg_tty_audit } for pid=5451 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 108.223641][ T45] usb usb6-port1: unable to enumerate USB device [ 109.350973][ T395] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 109.512551][ T395] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 109.520807][ T395] usb 6-1: config 0 has no interface number 1 [ 109.527089][ T395] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 109.537042][ T395] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.548970][ T395] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 109.558314][ T395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.564347][ T5502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1778'. [ 109.566448][ T395] usb 6-1: SerialNumber: syz [ 109.580812][ T395] usb 6-1: config 0 descriptor?? [ 109.586828][ T395] usb 6-1: Found UVC 0.00 device (0002:0000) [ 109.593794][ T395] usb 6-1: No valid video chain found. [ 109.800633][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.809234][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.818211][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.826721][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.834902][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.843491][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.851563][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.860195][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.868553][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.877044][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.929798][ T395] usb 6-1: USB disconnect, device number 18 [ 109.957077][ T5511] __vm_enough_memory: 24 callbacks suppressed [ 109.957094][ T5511] __vm_enough_memory: pid: 5511, comm: syz.5.1780, bytes: 18014402804453376 not enough memory for the allocation [ 110.002350][ T5516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.002516][ T5516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.009172][ T5516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 110.291329][ T5545] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1794'. [ 110.452877][ T5559] overlayfs: failed to clone upperpath [ 110.465311][ T36] audit: type=1400 audit(2016777507.339:430): avc: denied { map } for pid=5563 comm="syz.1.1801" path="socket:[22238]" dev="sockfs" ino=22238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.539786][ T5575] 9pnet_fd: Insufficient options for proto=fd [ 110.630753][ T5585] netlink: 'syz.5.1810': attribute type 4 has an invalid length. [ 110.638615][ T36] audit: type=1400 audit(2016777507.489:431): avc: denied { map } for pid=5568 comm="syz.1.1803" path="socket:[23067]" dev="sockfs" ino=23067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.860294][ T5616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1289 sclass=netlink_route_socket pid=5616 comm=syz.0.1820 [ 111.335910][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1830'. [ 111.345845][ T5645] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1830'. [ 112.394843][ T5679] tmpfs: Unknown parameter 'h1+L' [ 112.693512][ T36] audit: type=1326 audit(2016777509.415:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x0 [ 112.824635][ T36] audit: type=1400 audit(2016777509.536:433): avc: denied { setopt } for pid=5717 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.064024][ T5735] overlayfs: failed to clone upperpath [ 113.641602][ T36] audit: type=1400 audit(2016777510.303:435): avc: denied { map } for pid=5747 comm="syz.4.1866" path="socket:[22403]" dev="sockfs" ino=22403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 113.676482][ T36] audit: type=1400 audit(2016777510.303:434): avc: denied { map } for pid=5747 comm="syz.4.1866" path="socket:[22403]" dev="sockfs" ino=22403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 114.156071][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 114.828396][ T5817] fuse: Bad value for 'fd' [ 114.870486][ T5825] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1892'. [ 115.029036][ T36] audit: type=1107 audit(2016777511.594:436): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 115.097595][ T5884] x_tables: unsorted underflow at hook 4 [ 115.103561][ T5886] netlink: 'syz.5.1915': attribute type 1 has an invalid length. [ 115.111453][ T5886] netlink: 'syz.5.1915': attribute type 2 has an invalid length. [ 115.119993][ T5888] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 115.128813][ T5888] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 115.243111][ T36] audit: type=1326 audit(2016777511.799:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.4.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 115.266647][ T36] audit: type=1326 audit(2016777511.809:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.4.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 115.291462][ T36] audit: type=1326 audit(2016777511.809:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.4.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 115.341274][ T5923] netlink: 'syz.4.1927': attribute type 3 has an invalid length. [ 115.349311][ T5923] netlink: 944 bytes leftover after parsing attributes in process `syz.4.1927'. [ 115.369931][ T5926] 9pnet: Could not find request transport: f [ 115.791751][ T5933] fuse: Bad value for 'fd' [ 115.796725][ T5933] raw_sendmsg: syz.5.1931 forgot to set AF_INET. Fix it! [ 115.839338][ T5937] fuseblk: Unknown parameter 'rootde' [ 115.846413][ T5937] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 116.415209][ T5962] overlayfs: failed to clone upperpath [ 116.830548][ T5968] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 116.941374][ T5970] netlink: 'syz.1.1945': attribute type 15 has an invalid length. [ 117.260314][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1949'. [ 117.270350][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 117.270366][ T36] audit: type=1400 audit(2016777513.698:464): avc: denied { create } for pid=5979 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.893253][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1965'. [ 118.126247][ T6053] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 118.135506][ T6053] overlayfs: missing 'lowerdir' [ 118.205644][ T6064] overlayfs: missing 'lowerdir' [ 118.411171][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 118.586808][ T36] audit: type=1326 audit(2016777514.923:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.2005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7264d8ebe9 code=0x0 [ 118.609680][ T36] audit: type=1326 audit(2016777514.923:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.2005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7264d8ebe9 code=0x0 [ 119.065290][ T6175] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47670 sclass=netlink_xfrm_socket pid=6175 comm=syz.5.2016 [ 119.219679][ T6182] /dev/loop0: Can't lookup blockdev [ 119.273297][ T6189] overlayfs: failed to clone upperpath [ 119.335337][ T6206] overlayfs: failed to clone upperpath [ 119.357373][ T6213] tipc: Started in network mode [ 119.362437][ T6213] tipc: Node identity ac14140f, cluster identity 4711 [ 119.369604][ T6213] tipc: New replicast peer: 255.255.255.255 [ 119.376061][ T6213] tipc: Enabled bearer , priority 10 [ 119.411979][ T6224] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2034'. [ 119.421199][ T6224] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2034'. [ 119.430797][ T6224] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2034'. [ 120.040765][ T36] audit: type=1400 audit(2016777516.288:467): avc: denied { accept } for pid=6256 comm="syz.5.2047" path="socket:[23987]" dev="sockfs" ino=23987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.142771][ T36] audit: type=1400 audit(2016777516.391:468): avc: denied { setattr } for pid=6274 comm="syz.5.2054" name="" dev="pipefs" ino=24009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.444504][ T6292] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2061'. [ 120.454559][ T6292] overlayfs: failed to clone upperpath [ 120.492987][ T36] audit: type=1400 audit(2016777516.709:469): avc: denied { setattr } for pid=6301 comm="syz.0.2064" name="PPPOL2TP" dev="sockfs" ino=24085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.579450][ T397] tipc: Node number set to 2886997007 [ 120.753532][ T36] audit: type=1400 audit(2016777516.952:470): avc: denied { accept } for pid=6308 comm="syz.5.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.850769][ T6331] netlink: 'syz.1.2075': attribute type 25 has an invalid length. [ 120.870414][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 120.879640][ T6332] netlink: 'syz.5.2067': attribute type 3 has an invalid length. [ 123.034673][ T36] audit: type=1400 audit(2016777519.084:471): avc: denied { execheap } for pid=6415 comm="syz.5.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.066986][ T6419] virtiofs: Unknown parameter 'always' [ 123.326813][ T6421] /dev/loop0: Can't lookup blockdev [ 123.677193][ T6456] overlayfs: failed to clone upperpath [ 123.724157][ T6471] overlayfs: failed to clone upperpath [ 123.738137][ T6475] /dev/loop0: Can't lookup blockdev [ 123.815531][ T6478] overlayfs: failed to clone upperpath [ 123.953818][ T6490] overlay: Unknown parameter 'measure' [ 123.986466][ T6496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2136'. [ 123.996914][ T6496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2136'. [ 124.804173][ T6542] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2151'. [ 125.099047][ T36] audit: type=1400 audit(2016777521.020:472): avc: denied { create } for pid=6563 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.119382][ T36] audit: type=1400 audit(2016777521.029:473): avc: denied { getopt } for pid=6563 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.140262][ T36] audit: type=1400 audit(2016777521.029:474): avc: denied { write } for pid=6563 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.323758][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.331012][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.338421][ T6573] bridge_slave_0: entered allmulticast mode [ 125.344849][ T6573] bridge_slave_0: entered promiscuous mode [ 125.356529][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.363848][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.371083][ T6573] bridge_slave_1: entered allmulticast mode [ 125.377552][ T6573] bridge_slave_1: entered promiscuous mode [ 125.384986][ T4748] bridge_slave_1: left allmulticast mode [ 125.396398][ T4748] bridge_slave_1: left promiscuous mode [ 125.402132][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.417381][ T6578] overlayfs: failed to clone upperpath [ 125.422763][ T4748] bridge_slave_0: left allmulticast mode [ 125.428755][ T4748] bridge_slave_0: left promiscuous mode [ 125.434632][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.472365][ T4748] bridge0 (unregistering): left allmulticast mode [ 125.611596][ T4748] veth1_macvtap: left promiscuous mode [ 125.617392][ T4748] veth0_vlan: left promiscuous mode [ 125.686853][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.694060][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.694493][ T36] audit: type=1326 audit(2016777521.562:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.701539][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.725153][ T36] audit: type=1326 audit(2016777521.562:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.731780][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.755377][ T36] audit: type=1326 audit(2016777521.562:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.786398][ T36] audit: type=1326 audit(2016777521.562:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.810422][ T36] audit: type=1326 audit(2016777521.562:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.833943][ T36] audit: type=1326 audit(2016777521.562:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 125.878655][ T6573] veth0_vlan: entered promiscuous mode [ 125.889007][ T6573] veth1_macvtap: entered promiscuous mode [ 126.565606][ T6634] netlink: 'syz.4.2182': attribute type 15 has an invalid length. [ 126.573663][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 126.583583][ T6634] overlayfs: failed to clone upperpath [ 126.811416][ T395] rust_binder: 6602: removing orphan mapping 0:24 [ 127.873220][ T6693] rust_binder: Error while translating object. [ 127.873270][ T6693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.883879][ T6693] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 127.893407][ T6693] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:19 [ 127.910437][ T45] rust_binder: 6692: removing orphan mapping 0:24 [ 127.942500][ T6721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6721 comm=syz.1.2212 [ 127.976080][ T6725] overlayfs: failed to clone upperpath [ 128.112883][ T6757] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2224'. [ 128.275258][ T6763] 9pnet_fd: Insufficient options for proto=fd [ 128.302401][ T6765] overlayfs: failed to resolve './cgroup': -2 [ 128.621112][ T6795] netlink: 'syz.5.2237': attribute type 4 has an invalid length. [ 128.641957][ T6795] netlink: 'syz.5.2237': attribute type 4 has an invalid length. [ 128.666066][ T6796] netlink: 'syz.5.2237': attribute type 4 has an invalid length. [ 128.863269][ T6811] netlink: 'syz.1.2243': attribute type 20 has an invalid length. [ 128.889955][ T6818] netlink: 'syz.5.2245': attribute type 4 has an invalid length. [ 128.950213][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'. [ 128.976872][ T6835] rust_binder: Write failure EFAULT in pid:43 [ 128.976974][ T6835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.983278][ T6835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 129.016990][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 129.017013][ T36] audit: type=1400 audit(2016777524.673:626): avc: denied { write } for pid=6837 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.197332][ T6849] 9pnet_fd: Insufficient options for proto=fd [ 129.203699][ T6850] 9pnet_fd: Insufficient options for proto=fd [ 129.231319][ T6852] rust_binder: Fixups oob 164 166 363 196 [ 129.231347][ T6852] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 129.237282][ T6852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.246191][ T6852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 129.307956][ T36] audit: type=1400 audit(2016777524.954:627): avc: denied { execute } for pid=6859 comm="syz.1.2258" path="/sys/power/disk" dev="sysfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 129.410257][ T6831] fuse: Bad value for 'fd' [ 129.562504][ T395] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.723990][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.735210][ T395] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 129.744588][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.755092][ T395] usb 2-1: config 0 descriptor?? [ 130.194303][ T395] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 130.407854][ T36] audit: type=1326 audit(2016777525.982:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7fc00000 [ 130.435757][ T395] usb 2-1: USB disconnect, device number 8 [ 130.512920][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 130.674163][ T36] audit: type=1400 audit(2016777526.225:629): avc: denied { create } for pid=6893 comm="syz.0.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.876362][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 131.006975][ T6919] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.015024][ T6919] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 131.023547][ T6919] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.031536][ T6919] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 131.870827][ T6931] fuse: Unknown parameter 'dont_hash' [ 132.196988][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2296'. [ 132.213057][ T6967] incfs: Backing dir is not set, filesystem can't be mounted. [ 132.224539][ T6967] incfs: mount failed -2 [ 132.232172][ T6974] netlink: 'syz.0.2299': attribute type 3 has an invalid length. [ 132.265483][ T6982] syz.0.2303 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.364964][ T6989] futex_wake_op: syz.0.2306 tries to shift op by -1; fix this program [ 132.561111][ T6991] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2307'. [ 132.658120][ T6996] rust_binder: Error while translating object. [ 132.658151][ T6996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.664607][ T6996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 132.923247][ T7016] netlink: 'syz.5.2315': attribute type 29 has an invalid length. [ 132.940631][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2315'. [ 132.989585][ T36] audit: type=1400 audit(2016777528.394:630): avc: denied { unmount } for pid=6573 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 133.210392][ T7034] x_tables: duplicate entry at hook 2 [ 133.217708][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 133.455534][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.615917][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 133.622484][ T45] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.633665][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.640338][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 133.651052][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.671258][ T45] usb 2-1: config 0 descriptor?? [ 133.691769][ T7069] netlink: 'syz.5.2338': attribute type 46 has an invalid length. [ 133.701560][ T7070] overlayfs: failed to clone upperpath [ 133.729961][ T7075] overlayfs: failed to clone upperpath [ 133.744107][ T7082] !@: renamed from xfrm0 (while UP) [ 133.841582][ T36] audit: type=1400 audit(2016777529.199:631): avc: denied { listen } for pid=7088 comm="syz.4.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.890899][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 133.894477][ T45] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 133.906809][ T45] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 133.913608][ T45] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 133.920434][ T45] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 133.927283][ T45] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 133.934705][ T45] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 134.106641][ T7031] rust_binder: Write failure EFAULT in pid:115 [ 134.107659][ T397] usb 2-1: USB disconnect, device number 9 [ 134.198996][ T7110] netlink: 'syz.0.2353': attribute type 25 has an invalid length. [ 134.218347][ T7112] netlink: 'syz.0.2354': attribute type 4 has an invalid length. [ 134.227784][ T7112] netlink: 'syz.0.2354': attribute type 4 has an invalid length. [ 134.246828][ T7114] 9pnet_fd: Insufficient options for proto=fd [ 134.263590][ T36] audit: type=1400 audit(2016777529.582:632): avc: denied { lock } for pid=7115 comm="syz.0.2356" path="socket:[27705]" dev="sockfs" ino=27705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.317587][ T36] audit: type=1400 audit(2016777529.638:633): avc: denied { accept } for pid=7123 comm="syz.5.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.385534][ T7137] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 134.410293][ T7140] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.483405][ T7150] fuse: Unknown parameter 'f' [ 134.514485][ T7156] tc_dump_action: action bad kind [ 134.602167][ T7168] tipc: Enabling of bearer rejected, failed to enable media [ 134.696873][ T7174] overlayfs: conflicting lowerdir path [ 134.702845][ T7174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2381'. [ 134.734132][ T7177] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.742208][ T7177] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 134.750975][ T7177] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.759098][ T7177] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 134.799728][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 134.809083][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 134.843066][ T7186] rust_binder: Error in use_page_slow: ESRCH [ 134.843088][ T7186] rust_binder: use_range failure ESRCH [ 134.849216][ T7186] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 134.854724][ T7186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 134.862804][ T7186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:134 [ 135.690808][ T397] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.861944][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 135.871065][ T397] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.887352][ T397] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 135.896796][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.905240][ T397] usb 2-1: Product: ࠚ [ 135.909793][ T397] usb 2-1: Manufacturer: 婝䯫壡쮼渝 [ 135.915673][ T397] usb 2-1: SerialNumber: syz [ 136.158397][ T7244] overlayfs: failed to clone upperpath [ 136.684223][ T397] usbhid 2-1:1.0: can't add hid device: -71 [ 136.689515][ T7287] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.690325][ T397] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 136.690707][ T7287] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.785376][ T397] usb 2-1: USB disconnect, device number 10 [ 136.820015][ T4746] tipc: Subscription rejected, illegal request [ 136.958443][ T7310] __nla_validate_parse: 1 callbacks suppressed [ 136.958462][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2427'. [ 137.233839][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.240898][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.247996][ T7334] bridge_slave_0: entered allmulticast mode [ 137.254384][ T7334] bridge_slave_0: entered promiscuous mode [ 137.260669][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.267935][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.275289][ T7334] bridge_slave_1: entered allmulticast mode [ 137.281592][ T7334] bridge_slave_1: entered promiscuous mode [ 137.354943][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.362060][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.369556][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.376730][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.396216][ T4748] bridge_slave_1: left allmulticast mode [ 137.402033][ T4748] bridge_slave_1: left promiscuous mode [ 137.407680][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.416278][ T4748] bridge_slave_0: left allmulticast mode [ 137.421945][ T4748] bridge_slave_0: left promiscuous mode [ 137.427783][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.504977][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.515694][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.533021][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.540201][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.550969][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.558063][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.566317][ T4748] tipc: Left network mode [ 137.571972][ T4748] veth1_macvtap: left promiscuous mode [ 137.577791][ T4748] veth0_vlan: left promiscuous mode [ 137.630258][ T7334] veth0_vlan: entered promiscuous mode [ 137.640746][ T7334] veth1_macvtap: entered promiscuous mode [ 137.837589][ T36] audit: type=1326 audit(2016777532.929:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.863191][ T36] audit: type=1326 audit(2016777532.929:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.871543][ T7385] netlink: 'syz.1.2447': attribute type 28 has an invalid length. [ 137.887633][ T36] audit: type=1326 audit(2016777532.929:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.918831][ T36] audit: type=1326 audit(2016777532.929:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.943103][ T36] audit: type=1326 audit(2016777532.929:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.966974][ T36] audit: type=1326 audit(2016777532.929:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 137.991124][ T36] audit: type=1326 audit(2016777532.939:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 138.014475][ T36] audit: type=1326 audit(2016777532.939:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 138.038159][ T36] audit: type=1326 audit(2016777532.939:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 138.062581][ T36] audit: type=1326 audit(2016777532.939:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7377 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f345858ebe9 code=0x7ffc0000 [ 138.077933][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 138.174206][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.317155][ T7419] netlink: 'syz.0.2458': attribute type 27 has an invalid length. [ 138.343246][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 138.354290][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.363052][ T7425] futex_wake_op: syz.4.2461 tries to shift op by -1; fix this program [ 138.364375][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 138.386534][ T31] usb 2-1: config 0 has no interface number 0 [ 138.393961][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 138.408559][ T7429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7429 comm=syz.5.2463 [ 138.421064][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 138.433726][ T31] usb 2-1: string descriptor 0 read error: -22 [ 138.442134][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 138.454034][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 138.476579][ T31] usb 2-1: config 0 descriptor?? [ 138.499200][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input11 [ 138.603915][ T7438] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2465'. [ 138.613963][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.621085][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.628275][ T7433] bridge_slave_0: entered allmulticast mode [ 138.634901][ T7433] bridge_slave_0: entered promiscuous mode [ 138.641432][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.648799][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.655968][ T7433] bridge_slave_1: entered allmulticast mode [ 138.662481][ T7433] bridge_slave_1: entered promiscuous mode [ 138.684634][ T7440] rust_binder: Error in use_page_slow: ESRCH [ 138.684655][ T7440] rust_binder: use_range failure ESRCH [ 138.687283][ T7441] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 138.691100][ T7440] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 138.696516][ T7441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 138.704606][ T7440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 138.712485][ T7441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:19 [ 138.732006][ T7440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:19 [ 138.742126][ T31] usb 2-1: USB disconnect, device number 11 [ 138.789038][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.796127][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.803454][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.810488][ T7433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.831626][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.841227][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.851433][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.858632][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.867060][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 138.875817][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.883091][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.929008][ T7433] veth0_vlan: entered promiscuous mode [ 138.940646][ T7433] veth1_macvtap: entered promiscuous mode [ 139.068426][ T7480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.117195][ T7488] overlayfs: failed to clone upperpath [ 139.130605][ T7489] netlink: 'syz.4.2476': attribute type 39 has an invalid length. [ 139.306306][ T7501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 139.306334][ T7501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:176 [ 139.364170][ T7503] tmpfs: Bad value for 'nr_inodes' [ 139.397830][ T7508] rust_binder: Write failure EFAULT in pid:181 [ 139.418968][ T7510] fuse: Bad value for 'user_id' [ 139.430264][ T7510] fuse: Bad value for 'user_id' [ 139.669451][ T395] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.722877][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.829815][ T395] usb 5-1: Using ep0 maxpacket: 16 [ 139.836117][ T395] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.855768][ T395] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.872623][ T395] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 139.881883][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.893085][ T395] usb 5-1: config 0 descriptor?? [ 139.906211][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.919472][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.929309][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.937527][ T45] usb 2-1: Product: syz [ 139.959661][ T45] usb 2-1: Manufacturer: syz [ 139.964447][ T45] usb 2-1: SerialNumber: syz [ 140.615328][ T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 140.623577][ T45] cdc_ncm 2-1:1.0: bind() failure [ 140.629479][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 140.636337][ T45] cdc_ncm 2-1:1.1: bind() failure [ 140.643157][ T45] usb 2-1: USB disconnect, device number 12 [ 140.930949][ T7530] bpf: Bad value for 'uid' [ 140.930974][ T7529] bpf: Bad value for 'uid' [ 141.044276][ T7560] netlink: 'syz.0.2505': attribute type 16 has an invalid length. [ 141.052258][ T7560] netlink: 'syz.0.2505': attribute type 25 has an invalid length. [ 141.060249][ T7560] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.2505'. [ 141.423435][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.574772][ T4748] bridge_slave_1: left allmulticast mode [ 141.580514][ T4748] bridge_slave_1: left promiscuous mode [ 141.586259][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.586296][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 141.598571][ T4748] bridge_slave_0: left allmulticast mode [ 141.599855][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.604434][ T4748] bridge_slave_0: left promiscuous mode [ 141.612820][ T45] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 141.622935][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.633905][ T45] usb 2-1: config 0 has no interface number 0 [ 141.640766][ T45] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 141.651914][ T45] usb 2-1: config 0 interface 88 has no altsetting 0 [ 141.666634][ T45] usb 2-1: string descriptor 0 read error: -22 [ 141.672978][ T45] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 141.684210][ T45] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 141.693195][ T45] usb 2-1: config 0 descriptor?? [ 141.699848][ T45] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input13 [ 141.731859][ T7577] devpts: called with bogus options [ 141.778043][ T4748] tipc: Disabling bearer [ 141.783391][ T4748] tipc: Left network mode [ 141.788714][ T4748] veth1_macvtap: left promiscuous mode [ 141.794251][ T4748] veth0_vlan: left promiscuous mode [ 141.800412][ T7583] overlayfs: conflicting options: userxattr,metacopy=on [ 141.914452][ T45] usb 2-1: USB disconnect, device number 13 [ 142.481223][ T7604] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 142.492971][ T45] usb 5-1: USB disconnect, device number 2 [ 142.606198][ T7611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.615343][ T7611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.148071][ T7643] 9pnet_fd: p9_fd_create_unix (7643): problem connecting socket: ./file0: -111 [ 143.221104][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2537'. [ 143.269586][ T7665] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2542'. [ 143.279305][ T7665] gretap0: entered promiscuous mode [ 143.293217][ T7665] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2542'. [ 143.302679][ T7665] 0{X: renamed from gretap0 [ 143.316960][ T7665] 0{X: left promiscuous mode [ 143.322030][ T7665] 0{X: entered allmulticast mode [ 143.335584][ T7665] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 143.586121][ T7696] 9pnet_fd: Insufficient options for proto=fd [ 143.612359][ T7699] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2553'. [ 144.217289][ T7716] overlayfs: failed to resolve './file1': -2 [ 144.224554][ T7717] overlayfs: failed to resolve './file1': -2 [ 144.440496][ T7746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2566'. [ 144.451159][ T7746] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 144.792530][ T7771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7771 comm=syz.4.2574 [ 144.837669][ T7775] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2575'. [ 144.864051][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 145.104432][ T36] kauditd_printk_skb: 179 callbacks suppressed [ 145.104451][ T36] audit: type=1400 audit(2016777539.727:823): avc: denied { listen } for pid=7792 comm="syz.5.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.051677][ T7837] tipc: Trying to set illegal importance in message [ 147.273679][ T395] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 147.396748][ T7919] tipc: Started in network mode [ 147.401710][ T7919] tipc: Node identity ac14140f, cluster identity 4711 [ 147.408683][ T7919] tipc: New replicast peer: 255.255.255.255 [ 147.414829][ T7919] tipc: Enabled bearer , priority 10 [ 147.423419][ T395] usb 2-1: device descriptor read/64, error -71 [ 147.429820][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 147.439445][ T7919] tipc: Disabling bearer [ 147.445959][ T7919] overlay: filesystem on ./bus is read-only [ 147.592207][ T36] audit: type=1400 audit(2016777542.045:824): avc: denied { mount } for pid=7925 comm="syz.0.2626" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 147.680132][ T395] usb 2-1: device descriptor read/64, error -71 [ 147.936776][ T395] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 148.075821][ T395] usb 2-1: device descriptor read/64, error -71 [ 148.163216][ T36] audit: type=1326 audit(2016777542.588:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.0.2633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fdcf8ebe9 code=0x0 [ 148.332564][ T395] usb 2-1: device descriptor read/64, error -71 [ 148.450272][ T395] usb usb2-port1: attempt power cycle [ 148.813786][ T395] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 148.836329][ T395] usb 2-1: device descriptor read/8, error -71 [ 148.975371][ T395] usb 2-1: device descriptor read/8, error -71 [ 149.075143][ T36] audit: type=1326 audit(2016777543.439:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.103336][ T36] audit: type=1326 audit(2016777543.439:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.127977][ T36] audit: type=1326 audit(2016777543.439:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.161452][ T36] audit: type=1326 audit(2016777543.439:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.185400][ T36] audit: type=1326 audit(2016777543.439:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.209433][ T36] audit: type=1326 audit(2016777543.439:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.233383][ T36] audit: type=1326 audit(2016777543.439:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x7ffc0000 [ 149.257115][ T395] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 149.265346][ T7975] overlayfs: failed to clone upperpath [ 149.285428][ T395] usb 2-1: device descriptor read/8, error -71 [ 149.424643][ T395] usb 2-1: device descriptor read/8, error -71 [ 149.541921][ T395] usb usb2-port1: unable to enumerate USB device [ 149.920693][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'. [ 149.938750][ T8006] x_tables: duplicate underflow at hook 1 [ 149.981618][ T8014] fuse: Bad value for 'group_id' [ 149.986623][ T8014] fuse: Bad value for 'group_id' [ 151.405934][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 151.405955][ T36] audit: type=1400 audit(2016777545.617:845): avc: denied { accept } for pid=8090 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.457999][ T8102] netlink: 'syz.5.2691': attribute type 5 has an invalid length. [ 151.473488][ T8102] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2691'. [ 151.497804][ T8106] overlayfs: failed to clone upperpath [ 151.521838][ T8108] overlayfs: failed to clone upperpath [ 151.548356][ T8111] 9pnet_fd: Insufficient options for proto=fd [ 151.607092][ T8126] incfs: Error accessing: ./file0. [ 151.612262][ T8126] incfs: mount failed -20 [ 151.617312][ T8126] veth0: entered promiscuous mode [ 151.623088][ T8125] veth0: left promiscuous mode [ 151.818187][ T8128] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 152.219939][ T8169] binder: Bad value for 'defcontext' [ 152.293247][ T8184] netlink: 'syz.1.2721': attribute type 4 has an invalid length. [ 152.674769][ T691] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.835189][ T691] usb 2-1: Using ep0 maxpacket: 32 [ 152.841702][ T691] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.850128][ T691] usb 2-1: config 0 has no interface number 0 [ 152.856373][ T691] usb 2-1: config 0 interface 184 has no altsetting 0 [ 152.864731][ T691] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.873991][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.882007][ T691] usb 2-1: Product: syz [ 152.886270][ T691] usb 2-1: Manufacturer: syz [ 152.890978][ T691] usb 2-1: SerialNumber: syz [ 152.896199][ T691] usb 2-1: config 0 descriptor?? [ 152.901939][ T691] smsc75xx v1.0.0 [ 153.362253][ T36] audit: type=1400 audit(2016777547.450:846): avc: denied { getattr } for pid=8201 comm="syz.5.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.446612][ T36] audit: type=1400 audit(2016777547.525:847): avc: denied { create } for pid=8218 comm="syz.0.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 153.608628][ T8244] /dev/loop0: Can't lookup blockdev [ 154.258218][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 154.269255][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.280110][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 154.291022][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 154.301463][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 154.312291][ T691] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 154.321864][ T691] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 154.334286][ T691] usb 2-1: USB disconnect, device number 18 [ 155.131769][ T36] audit: type=1400 audit(2016777549.095:848): avc: denied { name_bind } for pid=8283 comm="syz.5.2757" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 155.325414][ T8332] /dev/loop0: Can't lookup blockdev [ 155.332042][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2772'. [ 155.799517][ T8346] rust_binder: Fixups oob 164 168 363 196 [ 155.799563][ T8346] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 155.805522][ T8346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.813965][ T8346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 155.825129][ T8347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.953170][ T8361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.959999][ T8361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.966436][ T8361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 156.110571][ T8376] rust_binder: Error while translating object. [ 156.119982][ T8376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 156.126229][ T8376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 156.147653][ T8378] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 156.271866][ T8381] loop7: detected capacity change from 16384 to 16383 [ 156.594367][ T8386] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2791'. [ 156.608505][ T36] audit: type=1326 audit(2016777550.479:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.5.2792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a4018ebe9 code=0x0 [ 156.670856][ T8394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 156.697108][ T8404] overlayfs: empty lowerdir [ 156.802420][ T8409] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 156.840823][ T36] audit: type=1326 audit(2016777550.694:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcf8ebe9 code=0x7fc00000 [ 156.888559][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 156.903987][ T8413] 9pnet_fd: Insufficient options for proto=fd [ 157.042628][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2807'. [ 157.055039][ T8434] overlayfs: failed to clone upperpath [ 157.088355][ T8445] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2811'. [ 157.098099][ T8445] netlink: 'syz.5.2811': attribute type 4 has an invalid length. [ 157.106164][ T8445] netlink: 'syz.5.2811': attribute type 4 has an invalid length. [ 157.460771][ T8458] fuse: Unknown parameter 'group_(7 y1(37id' [ 157.468336][ T8458] /dev/loop0: Can't lookup blockdev [ 157.474630][ T8458] fuse: Unknown parameter 'group_(7 y1(37id' [ 157.593710][ T8474] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 157.717084][ T8482] netlink: 'syz.1.2823': attribute type 4 has an invalid length. [ 157.725133][ T8482] netlink: 'syz.1.2823': attribute type 4 has an invalid length. [ 157.967875][ T8489] overlayfs: failed to clone upperpath [ 158.547708][ T8504] overlayfs: failed to clone lowerpath [ 158.547708][ T8505] overlayfs: failed to clone lowerpath [ 158.559851][ T8505] No source specified [ 158.559851][ T8506] No source specified [ 159.104661][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2861'. [ 159.460189][ T8602] bridge0: entered allmulticast mode [ 159.466953][ T36] audit: type=1400 audit(2016777553.153:851): avc: denied { mount } for pid=8601 comm="syz.4.2863" name="/" dev="pstore" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 159.840528][ T424] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.000976][ T424] usb 2-1: Using ep0 maxpacket: 16 [ 160.007370][ T424] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 160.016321][ T424] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.026494][ T424] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.036814][ T424] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.046018][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.054164][ T424] usb 2-1: Product: syz [ 160.058399][ T424] usb 2-1: Manufacturer: syz [ 160.063032][ T424] usb 2-1: SerialNumber: syz [ 160.503671][ T424] usb 2-1: 0:2 : does not exist [ 160.566353][ T36] audit: type=1400 audit(2016777554.172:852): avc: denied { mounton } for pid=8641 comm="syz.4.2879" path="/93/file0" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.566492][ T8642] /dev/loop0: Can't lookup blockdev [ 161.394637][ T691] usb 2-1: USB disconnect, device number 19 [ 161.436106][ T8667] overlayfs: failed to clone upperpath [ 161.472112][ T36] audit: type=1400 audit(2016777555.023:853): avc: denied { execute } for pid=8673 comm="syz.0.2891" path="/dev/rnullb0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.992187][ T8680] rust_binder: Write failure EFAULT in pid:325 [ 162.107996][ T8685] 9pnet_fd: Insufficient options for proto=fd [ 162.121529][ T8685] rust_binder: Error while translating object. [ 162.121555][ T8685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.128004][ T8685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330 [ 162.165241][ T8687] rust_binder: Write failure EFAULT in pid:332 [ 162.445312][ T8716] netlink: 'syz.0.2908': attribute type 3 has an invalid length. [ 162.459624][ T8716] netlink: 944 bytes leftover after parsing attributes in process `syz.0.2908'. [ 162.901811][ T8750] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 162.901839][ T8750] rust_binder: Error while translating object. [ 162.914799][ T8750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.921348][ T8750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 163.198833][ T691] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 163.380620][ T691] usb 2-1: Using ep0 maxpacket: 8 [ 163.387753][ T691] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.401070][ T691] usb 2-1: config 1 interface 0 has no altsetting 0 [ 163.409612][ T691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.419337][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.427568][ T691] usb 2-1: Product: Э [ 163.431850][ T691] usb 2-1: Manufacturer: 〉 [ 163.436726][ T691] usb 2-1: SerialNumber: syz [ 163.507259][ T36] audit: type=1400 audit(2016777556.931:854): avc: denied { mounton } for pid=8771 comm="syz.4.2929" path="/111/file0" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.538165][ T8778] netlink: 'syz.4.2931': attribute type 10 has an invalid length. [ 163.547434][ T8778] 9pnet_fd: Insufficient options for proto=fd [ 163.669384][ T36] audit: type=1400 audit(2016777557.080:855): avc: denied { checkpoint_restore } for pid=8758 comm="syz.1.2923" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.715017][ T691] usb 2-1: USB disconnect, device number 20 [ 163.909326][ T36] audit: type=1400 audit(2016777557.305:856): avc: denied { read write } for pid=8837 comm="syz.1.2949" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.934211][ T36] audit: type=1400 audit(2016777557.305:857): avc: denied { open } for pid=8837 comm="syz.1.2949" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.182781][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 164.343197][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 164.349662][ T45] usb 2-1: config index 0 descriptor too short (expected 25953, got 27) [ 164.358084][ T45] usb 2-1: config 9 has an invalid interface number: 144 but max is 0 [ 164.366328][ T45] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 164.376433][ T45] usb 2-1: config 9 has no interface number 0 [ 164.382517][ T45] usb 2-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.395646][ T45] usb 2-1: config 9 interface 144 has no altsetting 0 [ 164.403901][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 164.412982][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.421097][ T45] usb 2-1: Product: syz [ 164.425253][ T45] usb 2-1: Manufacturer: syz [ 164.429871][ T45] usb 2-1: SerialNumber: syz [ 164.435987][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 164.511865][ T36] audit: type=1400 audit(2016777557.866:858): avc: denied { relabelfrom } for pid=8862 comm="syz.5.2958" name="NETLINK" dev="sockfs" ino=34922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 164.511890][ T8863] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 164.546177][ T36] audit: type=1400 audit(2016777557.866:859): avc: denied { relabelto } for pid=8862 comm="syz.5.2958" name="NETLINK" dev="sockfs" ino=34922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 164.662804][ T45] r8152 2-1:9.144: Expected endpoints are not found [ 164.673857][ T45] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 164.774600][ T36] audit: type=1326 audit(2016777558.118:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8866 comm="syz.4.2960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x0 [ 165.179657][ T8878] cgroup: Invalid name [ 165.204772][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2966'. [ 165.310967][ T36] audit: type=1326 audit(2016777558.614:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8891 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe438ebe9 code=0x7fc00000 [ 166.341283][ T8901] cgroup: subsys name conflicts with all [ 166.474358][ T8915] netlink: 'syz.5.2979': attribute type 4 has an invalid length. [ 166.483017][ T8915] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2979'. [ 166.517766][ T36] audit: type=1400 audit(2016777559.745:862): avc: denied { setattr } for pid=8924 comm="syz.5.2981" name="UDPLITEv6" dev="sockfs" ino=34050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.557211][ T8927] overlayfs: failed to clone upperpath [ 166.810427][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'. [ 166.830210][ T8943] bridge_slave_1: left allmulticast mode [ 166.841701][ T8943] bridge_slave_1: left promiscuous mode [ 166.880116][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.920233][ T8943] bridge_slave_0: left allmulticast mode [ 166.942099][ T8943] bridge_slave_0: left promiscuous mode [ 166.963872][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.005093][ T8950] overlayfs: failed to clone lowerpath [ 167.048424][ T8951] overlayfs: failed to clone upperpath [ 167.135144][ T8957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8957 comm=syz.5.2993 [ 167.181717][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2993'. [ 167.226459][ T36] audit: type=1400 audit(2016777560.409:863): avc: denied { map } for pid=8956 comm="syz.5.2993" path="pipe:[34066]" dev="pipefs" ino=34066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.599194][ T9002] 9pnet_fd: Insufficient options for proto=fd [ 168.607169][ T9003] 9pnet_fd: Insufficient options for proto=fd [ 168.651119][ T9006] binder: Bad value for 'stats' [ 169.691027][ T9014] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 169.731254][ T9016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 170.030886][ T9053] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3024'. [ 170.050120][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 170.075726][ T9057] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 170.084977][ T9058] sit0: entered promiscuous mode [ 170.086343][ T9057] devpts: called with bogus options [ 170.091212][ T9058] netlink: 'syz.4.3026': attribute type 1 has an invalid length. [ 170.103344][ T9058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3026'. [ 170.203463][ T9062] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 170.203514][ T9062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 170.213006][ T9062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:410 [ 170.223078][ T9062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.176242][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 171.264591][ T9129] /dev/loop0: Can't lookup blockdev [ 171.434096][ T691] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.594560][ T691] usb 2-1: Using ep0 maxpacket: 8 [ 171.600920][ T691] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.609458][ T691] usb 2-1: config 179 has no interface number 0 [ 171.615915][ T691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.627070][ T691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 171.639317][ T691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.650763][ T691] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.661082][ T691] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.674962][ T691] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 171.684430][ T691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.695676][ T9126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.706052][ T691] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 171.721175][ T9142] fuseblk: Bad value for 'fd' [ 171.767517][ T9158] fuse: Unknown parameter '000000000000000000060xffffffffffffffff' [ 171.834195][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3064'. [ 171.854666][ T9175] @: renamed from vlan0 (while UP) [ 171.970518][ T64] usb 2-1: USB disconnect, device number 22 [ 172.286551][ T9206] x_tables: duplicate entry at hook 1 [ 172.286571][ T9207] x_tables: duplicate entry at hook 1 [ 172.368481][ T9210] cgroup: fork rejected by pids controller in /syz0 [ 172.641015][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'. [ 173.223206][ T9302] 9pnet_fd: Insufficient options for proto=fd [ 173.246826][ T9307] netlink: 'syz.5.3084': attribute type 4 has an invalid length. [ 173.256078][ T9307] netlink: 'syz.5.3084': attribute type 4 has an invalid length. [ 173.315978][ T9330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9330 comm=syz.4.3091 [ 173.335918][ T9334] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3093'. [ 173.557543][ T9383] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3109'. [ 173.679332][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 173.679403][ T36] audit: type=1400 audit(2033555011.440:866): avc: denied { search } for pid=9414 comm="syz.1.3117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.708603][ T36] audit: type=1400 audit(2033555011.440:867): avc: denied { read } for pid=9414 comm="syz.1.3117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.735817][ T36] audit: type=1400 audit(2033555011.440:868): avc: denied { watch } for pid=9414 comm="syz.1.3117" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.837977][ T9432] overlayfs: failed to clone upperpath [ 174.216768][ T36] audit: type=1400 audit(2033555011.945:869): avc: denied { write } for pid=9456 comm="syz.1.3132" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.240469][ T36] audit: type=1400 audit(2033555011.945:870): avc: denied { open } for pid=9456 comm="syz.1.3132" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.471012][ T9491] fuseblk: Unknown parameter 'Ud' [ 174.503385][ T36] audit: type=1400 audit(2033555012.207:871): avc: denied { create } for pid=9493 comm="syz.5.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 174.531633][ T36] audit: type=1326 audit(2033555012.235:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.5.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4018ebe9 code=0x7ffc0000 [ 174.533902][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3147'. [ 174.555104][ T36] audit: type=1326 audit(2033555012.235:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.5.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4018ebe9 code=0x7ffc0000 [ 174.572035][ T9499] overlayfs: failed to clone upperpath [ 174.588317][ T36] audit: type=1326 audit(2033555012.235:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.5.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a4018ebe9 code=0x7ffc0000 [ 174.616783][ T36] audit: type=1326 audit(2033555012.235:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.5.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4018ebe9 code=0x7ffc0000 [ 174.640344][ T691] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 174.792388][ T691] usb 2-1: device descriptor read/64, error -71 [ 174.832861][ T9514] /dev/loop0: Can't lookup blockdev [ 174.833284][ T9515] /dev/loop0: Can't lookup blockdev [ 175.049131][ T691] usb 2-1: device descriptor read/64, error -71 [ 175.305792][ T691] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 175.324684][ T9536] TCP: out of memory -- consider tuning tcp_mem [ 175.430347][ T9544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9544 comm=syz.0.3167 [ 175.442990][ T9544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9544 comm=syz.0.3167 [ 175.466174][ T691] usb 2-1: device descriptor read/64, error -71 [ 175.722902][ T691] usb 2-1: device descriptor read/64, error -71 [ 175.840661][ T691] usb usb2-port1: attempt power cycle [ 176.204154][ T691] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 176.226640][ T691] usb 2-1: device descriptor read/8, error -71 [ 176.365667][ T691] usb 2-1: device descriptor read/8, error -71 [ 176.621293][ T691] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 176.643784][ T691] usb 2-1: device descriptor read/8, error -71 [ 176.783046][ T691] usb 2-1: device descriptor read/8, error -71 [ 176.899481][ T691] usb usb2-port1: unable to enumerate USB device [ 182.191835][ T9557] 9pnet_fd: Insufficient options for proto=fd [ 182.199023][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3173'. [ 182.215455][ T9566] overlayfs: failed to resolve './file2': -2 [ 182.269489][ T9579] __vm_enough_memory: pid: 9579, comm: syz.1.3181, bytes: 18014402804453376 not enough memory for the allocation [ 182.340023][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 182.340043][ T36] audit: type=1400 audit(2033555019.537:926): avc: denied { read } for pid=9591 comm="syz.1.3185" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.340964][ T9592] rust_binder: Error while translating object. [ 182.348620][ T36] audit: type=1400 audit(2033555019.537:927): avc: denied { ioctl } for pid=9591 comm="syz.1.3185" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.392701][ T9592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 182.406029][ T9592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:480 [ 182.443075][ T9609] overlayfs: unescaped trailing colons in lowerdir mount option. [ 182.471778][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 182.485781][ T36] audit: type=1400 audit(2033555019.678:928): avc: denied { relabelfrom } for pid=9614 comm="syz.5.3193" name="NETLINK" dev="sockfs" ino=37071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.489973][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 182.519231][ T36] audit: type=1400 audit(2033555019.678:929): avc: denied { relabelto } for pid=9614 comm="syz.5.3193" name="NETLINK" dev="sockfs" ino=37071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 182.530405][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 182.564858][ T9628] netlink: 'syz.0.3197': attribute type 16 has an invalid length. [ 182.572944][ T9628] netlink: 'syz.0.3197': attribute type 3 has an invalid length. [ 182.580737][ T9628] netlink: 64058 bytes leftover after parsing attributes in process `syz.0.3197'. [ 182.758018][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3202'. [ 182.769636][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3202'. [ 182.795603][ T36] audit: type=1400 audit(2033555019.968:930): avc: denied { setattr } for pid=9650 comm="syz.1.3204" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.830955][ T9659] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 183.001324][ T9677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 183.275745][ T9698] input: syz1 as /devices/virtual/input/input14 [ 183.451014][ T9715] 9pnet_fd: Insufficient options for proto=fd [ 183.482185][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3220'. [ 183.527084][ T9723] netlink: 'syz.0.3222': attribute type 4 has an invalid length. [ 183.625353][ T9733] overlayfs: failed to clone upperpath [ 183.631907][ T9732] fusectl: Unknown parameter 'gid' [ 183.632890][ T9733] overlayfs: failed to clone upperpath [ 183.692179][ T9742] netlink: 'syz.0.3229': attribute type 27 has an invalid length. [ 183.701315][ T9742] fuseblk: Unknown parameter 's{;9rʿlfW{M>6JNȓ?\Dhl>^Oc#7K@' [ 184.036178][ T9793] rust_binder: 538: no such ref 0 [ 184.311109][ T691] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 184.472887][ T691] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 184.483217][ T691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.492122][ T691] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.506582][ T691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.507774][ T9833] tipc: MTU too low for tipc bearer [ 184.516098][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.525055][ T9834] tipc: MTU too low for tipc bearer [ 184.537610][ T691] usb 2-1: Product: syz [ 184.543519][ T691] usb 2-1: Manufacturer: syz [ 184.553450][ T691] usb 2-1: SerialNumber: syz [ 184.565004][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 184.627940][ T9855] 9pnet_fd: Insufficient options for proto=fd [ 184.662261][ T9864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3271'. [ 184.780022][ T9795] tipc: Enabling not permitted [ 184.785679][ T9795] tipc: Enabling of bearer rejected, failed to enable media [ 184.796104][ T691] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 184.802946][ T691] cdc_ncm 2-1:1.0: bind() failure [ 184.809199][ T691] usb 2-1: USB disconnect, device number 27 [ 185.242538][ T9885] netlink: 'syz.5.3279': attribute type 4 has an invalid length. [ 185.265962][ T9885] netlink: 'syz.5.3279': attribute type 4 has an invalid length. [ 185.276303][ T9887] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 185.411222][ T9909] veth0_to_team: entered promiscuous mode [ 185.417904][ T9909] veth0_to_team: entered allmulticast mode [ 185.597027][ T9927] 9pnet_fd: Insufficient options for proto=fd [ 192.962419][ T9934] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 192.970876][ T9934] __nla_validate_parse: 2 callbacks suppressed [ 192.970896][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3295'. [ 192.971410][ T9942] netlink: 'syz.4.3299': attribute type 3 has an invalid length. [ 192.977790][ T9934] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 192.992091][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 193.293830][ T9978] netlink: 'syz.4.3310': attribute type 4 has an invalid length. [ 193.303623][ T9978] netlink: 'syz.4.3310': attribute type 4 has an invalid length. [ 193.565858][T10005] __vm_enough_memory: pid: 10005, comm: syz.1.3320, bytes: 18014402804453376 not enough memory for the allocation [ 193.648733][T10015] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 193.648756][T10015] rust_binder: Error while translating object. [ 193.661025][T10015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.667223][T10015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:553 [ 194.239950][ T36] audit: type=1400 audit(2033555030.664:931): avc: denied { create } for pid=10042 comm="syz.1.3332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 194.269487][ T36] audit: type=1400 audit(2033555030.664:932): avc: denied { setopt } for pid=10042 comm="syz.1.3332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 194.289686][ T36] audit: type=1400 audit(2033555030.664:933): avc: denied { connect } for pid=10042 comm="syz.1.3332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 194.310062][ T36] audit: type=1400 audit(2033555030.664:934): avc: denied { name_connect } for pid=10042 comm="syz.1.3332" dest=20000 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 195.952085][T10112] netlink: 'syz.4.3357': attribute type 12 has an invalid length. [ 195.970637][T10114] netlink: 'syz.4.3358': attribute type 4 has an invalid length. [ 195.979951][T10114] netlink: 'syz.4.3358': attribute type 4 has an invalid length. [ 196.058507][T10118] overlayfs: failed to clone upperpath [ 196.302501][T10123] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 196.315585][T10123] rust_binder: 580: no such ref 0 [ 196.322970][T10131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=10131 comm=syz.0.3363 [ 196.324189][T10123] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 196.406319][T10146] binder: Bad value for 'max' [ 196.443921][T10158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10158 comm=syz.0.3373 [ 196.521231][ T36] audit: type=1400 audit(2033555032.796:935): avc: denied { write } for pid=10176 comm="syz.0.3379" name="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.696204][ T691] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 196.835165][ T691] usb 2-1: device descriptor read/64, error -71 [ 197.091830][ T691] usb 2-1: device descriptor read/64, error -71 [ 197.117873][T10205] tipc: Trying to set illegal importance in message [ 197.201172][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.208353][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.215975][T10206] bridge_slave_0: entered allmulticast mode [ 197.222821][T10206] bridge_slave_0: entered promiscuous mode [ 197.229376][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.236670][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.244040][T10206] bridge_slave_1: entered allmulticast mode [ 197.250438][T10206] bridge_slave_1: entered promiscuous mode [ 197.293520][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.300898][T10206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.308250][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.315421][T10206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.335008][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.342552][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.359852][ T691] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 197.369704][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.376787][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.387193][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.394288][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.405140][ T4745] tipc: Disabling bearer [ 197.410545][ T4745] tipc: Left network mode [ 197.416663][ T4745] veth1_macvtap: left promiscuous mode [ 197.422395][ T4745] veth0_vlan: left promiscuous mode [ 197.468785][T10206] veth0_vlan: entered promiscuous mode [ 197.480075][T10206] veth1_macvtap: entered promiscuous mode [ 197.498915][ T691] usb 2-1: device descriptor read/64, error -71 [ 197.755032][ T691] usb 2-1: device descriptor read/64, error -71 [ 197.872726][ T691] usb usb2-port1: attempt power cycle [ 198.155030][T10265] overlayfs: failed to clone upperpath [ 198.236271][ T691] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 198.258836][ T691] usb 2-1: device descriptor read/8, error -71 [ 198.397755][ T691] usb 2-1: device descriptor read/8, error -71 [ 198.576092][T10281] overlayfs: missing 'workdir' [ 198.576126][T10280] overlayfs: missing 'workdir' [ 198.628849][T10295] /dev/sr0: Can't lookup blockdev [ 198.645341][T10297] /dev/loop0: Can't lookup blockdev [ 198.653346][ T691] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 198.675849][ T691] usb 2-1: device descriptor read/8, error -71 [ 198.815238][ T691] usb 2-1: device descriptor read/8, error -71 [ 198.837537][ T36] audit: type=1400 audit(2033555034.965:936): avc: denied { setattr } for pid=10309 comm="syz.5.3420" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 198.931577][ T691] usb usb2-port1: unable to enumerate USB device [ 199.142382][ T36] audit: type=1400 audit(2033555035.245:937): avc: denied { execmem } for pid=10317 comm="syz.4.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 199.229776][T10332] incfs_lookup_dentry err:-13 [ 199.234729][T10332] incfs: Can't find or create .index dir in ./bus [ 199.241318][T10332] incfs: mount failed -13 [ 199.401066][T10339] netlink: 'syz.4.3430': attribute type 4 has an invalid length. [ 199.410160][T10339] netlink: 'syz.4.3430': attribute type 4 has an invalid length. [ 199.527605][T10378] netlink: 'syz.4.3439': attribute type 6 has an invalid length. [ 199.535477][T10378] netlink: 'syz.4.3439': attribute type 4 has an invalid length. [ 199.543291][T10378] netlink: 'syz.4.3439': attribute type 6 has an invalid length. [ 199.551042][T10378] netlink: 'syz.4.3439': attribute type 13 has an invalid length. [ 199.560664][T10378] netlink: 'syz.4.3439': attribute type 15 has an invalid length. [ 199.569557][T10378] netlink: 'syz.4.3439': attribute type 19 has an invalid length. [ 199.577605][T10378] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.3439'. [ 199.753354][T10400] overlay: ./file0 is not a directory [ 200.107945][ T424] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 200.193445][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 200.246985][ T424] usb 2-1: device descriptor read/64, error -71 [ 200.327923][ T36] audit: type=1400 audit(2033555036.358:938): avc: denied { execute } for pid=10414 comm="syz.0.3452" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=39965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.375261][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 200.381481][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.390138][ T9] usb 6-1: config 179 has no interface number 0 [ 200.396430][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 200.408094][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 200.420262][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.431814][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.445246][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 200.452134][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 200.461190][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.472763][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input15 [ 200.503761][ T424] usb 2-1: device descriptor read/64, error -71 [ 200.525157][ T94] input input15: unable to receive magic message: -110 [ 200.532772][ T94] input input15: unable to receive magic message: -32 [ 200.540510][ T94] input input15: unable to receive magic message: -32 [ 200.760286][ T424] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 200.899382][ T424] usb 2-1: device descriptor read/64, error -71 [ 201.156033][ T424] usb 2-1: device descriptor read/64, error -71 [ 201.273785][ T424] usb usb2-port1: attempt power cycle [ 201.415541][ T36] audit: type=1326 audit(2033555037.377:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.4.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x7ff00000 [ 201.637316][ T424] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 201.659883][ T424] usb 2-1: device descriptor read/8, error -71 [ 201.799148][ T424] usb 2-1: device descriptor read/8, error -71 [ 202.014158][T10502] $: renamed from bridge_slave_0 (while UP) [ 202.065161][ T424] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 202.088416][ T36] audit: type=1400 audit(2033555038.004:940): avc: denied { create } for pid=10503 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.088681][T10504] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3481'. [ 202.108920][ T36] audit: type=1400 audit(2033555038.004:941): avc: denied { write } for pid=10503 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.119081][ T424] usb 2-1: device descriptor read/8, error -71 [ 202.138569][ T36] audit: type=1400 audit(2033555038.004:942): avc: denied { nlmsg_write } for pid=10503 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.281403][ T424] usb 2-1: device descriptor read/8, error -71 [ 202.318505][T10533] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 202.327581][T10533] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 202.361434][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 202.407413][ T424] usb usb2-port1: unable to enumerate USB device [ 203.100066][ T45] usb 6-1: USB disconnect, device number 19 [ 203.100212][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.115378][ T45] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 203.136345][T10593] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 203.136375][T10593] rust_binder: Error while translating object. [ 203.154803][T10593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.162863][T10593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:607 [ 203.197205][T10605] rust_binder: Write failure EFAULT in pid:609 [ 203.200406][T10607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3517'. [ 203.218759][T10608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10608 comm=syz.5.3513 [ 203.226081][T10607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3517'. [ 203.370468][T10629] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.398929][ T36] audit: type=1400 audit(2033555039.229:943): avc: denied { nlmsg_read } for pid=10631 comm="syz.1.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.419901][T10632] netlink: 393 bytes leftover after parsing attributes in process `syz.1.3523'. [ 203.430340][ T36] audit: type=1326 audit(2033555039.257:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.1.3523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe438ebe9 code=0x0 [ 203.605267][ T45] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 203.769511][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.780682][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.790750][ T45] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 203.800072][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.808942][ T45] usb 6-1: config 0 descriptor?? [ 204.032541][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 204.038579][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 204.047330][ T45] usb 6-1: USB disconnect, device number 20 [ 204.302385][T10663] cgroup2: Unknown parameter 'net_cls' [ 204.390592][ T36] audit: type=1326 audit(2033555040.154:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.3536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbe438ebe9 code=0x0 [ 204.439239][T10675] netlink: 'syz.4.3538': attribute type 4 has an invalid length. [ 204.447275][T10675] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3538'. [ 204.634016][T10678] rust_binder: 47: no such ref 2 [ 204.639277][T10678] rust_binder: 47: no such ref 2 [ 204.644591][T10678] rust_binder: 47: no such ref 2 [ 204.895666][T10687] netlink: 'syz.0.3543': attribute type 16 has an invalid length. [ 204.903628][T10687] netlink: 'syz.0.3543': attribute type 3 has an invalid length. [ 204.911437][T10687] netlink: 64054 bytes leftover after parsing attributes in process `syz.0.3543'. [ 205.263567][T10710] securityfs: Unknown parameter 'pT )++' [ 205.452789][T10716] netlink: 'syz.5.3554': attribute type 5 has an invalid length. [ 205.460714][T10716] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3554'. [ 205.504351][T10718] fuse: Unknown parameter '/d' [ 205.530333][ T395] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 205.649648][ T36] audit: type=1400 audit(2033555041.332:946): avc: denied { execute_no_trans } for pid=10733 comm="syz.4.3561" path="/326/file1" dev="tmpfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.703279][ T395] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 205.722872][ T36] audit: type=1400 audit(2033555041.398:947): avc: denied { unmount } for pid=10206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.725866][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.752700][ T36] audit: type=1400 audit(2033555041.435:948): avc: denied { append } for pid=10740 comm="syz.5.3564" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 205.789737][ T395] usb 2-1: config 0 descriptor?? [ 205.834099][T10764] rust_binder: Write failure EFAULT in pid:67 [ 206.227240][T10775] fuse: Bad value for 'fd' [ 206.455655][ T36] audit: type=1400 audit(2033555042.090:949): avc: denied { create } for pid=10790 comm="syz.0.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 206.483893][T10793] overlayfs: failed to clone upperpath [ 206.880238][ T395] usb 2-1: Cannot set autoneg [ 206.888654][ T395] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 206.912587][ T395] usb 2-1: USB disconnect, device number 37 [ 207.040837][T10850] binder: Unknown parameter '' [ 207.453577][T10877] binder: Bad value for 'max' [ 207.506499][T10883] SELinux: security_context_str_to_sid () failed with errno=-22 [ 207.580261][T10885] rust_binder: Write failure EINVAL in pid:658 [ 207.594545][ T424] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 207.663305][T10889] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 207.672290][T10889] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 207.776368][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 207.782791][ T424] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.791234][ T424] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 207.800613][ T424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.808706][ T424] usb 6-1: Product: syz [ 207.812901][ T424] usb 6-1: Manufacturer: syz [ 207.817527][ T424] usb 6-1: SerialNumber: syz [ 207.823137][ T424] usb 6-1: config 0 descriptor?? [ 207.898133][T10897] overlayfs: failed to clone upperpath [ 207.904785][T10897] netlink: 'syz.0.3620': attribute type 15 has an invalid length. [ 207.937244][ T691] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 208.097225][ T691] usb 2-1: Using ep0 maxpacket: 32 [ 208.100399][ T424] usb 6-1: USB disconnect, device number 21 [ 208.104118][ T691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.120197][ T691] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 208.129355][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.137394][ T691] usb 2-1: Product: syz [ 208.141675][ T691] usb 2-1: Manufacturer: syz [ 208.146275][ T691] usb 2-1: SerialNumber: syz [ 208.151594][ T691] usb 2-1: config 0 descriptor?? [ 208.158063][ T691] cdc_ether 2-1:0.0: skipping garbage [ 208.163718][ T691] usb 2-1: bad CDC descriptors [ 208.168654][ T691] usb 2-1: unsupported MDLM descriptors [ 208.372524][ T424] usb 2-1: USB disconnect, device number 38 [ 208.378363][T10889] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 208.555286][ T36] audit: type=1400 audit(2033555044.044:950): avc: denied { listen } for pid=10951 comm="syz.4.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 208.666581][T10972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.666614][T10972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 208.672043][T10973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.685300][T10973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 208.702880][T10974] 9pnet_fd: Insufficient options for proto=fd [ 208.749631][ T424] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 208.911609][ T424] usb 2-1: Using ep0 maxpacket: 32 [ 208.918074][ T424] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.929305][ T424] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.942515][ T424] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.951768][ T424] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 208.960652][ T424] usb 2-1: Product: syz [ 208.965000][ T424] usb 2-1: Manufacturer: syz [ 208.972885][ T424] hub 2-1:4.0: USB hub found [ 208.974243][ T691] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 209.147159][ T691] usb 6-1: config 7 has an invalid interface number: 43 but max is 0 [ 209.155347][ T691] usb 6-1: config 7 has no interface number 0 [ 209.161547][ T691] usb 6-1: config 7 interface 43 has no altsetting 0 [ 209.170043][ T691] usb 6-1: New USB device found, idVendor=8e38, idProduct=74d6, bcdDevice=d6.6c [ 209.179188][ T691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.185627][ T424] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 209.187185][ T691] usb 6-1: Product: syz [ 209.187204][ T691] usb 6-1: Manufacturer: syz [ 209.203852][ T691] usb 6-1: SerialNumber: syz [ 209.425418][ T691] usb-storage 6-1:7.43: USB Mass Storage device detected [ 209.449479][ T691] usb 6-1: USB disconnect, device number 22 [ 209.519703][ T424] usb 2-1: USB disconnect, device number 39 [ 209.978415][T11045] /dev/loop0: Can't lookup blockdev [ 210.125676][T11065] overlayfs: overlapping lowerdir path [ 210.161189][T11069] futex_wake_op: syz.1.3677 tries to shift op by -1; fix this program [ 210.173628][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3676'. [ 210.210751][ T36] audit: type=1400 audit(2033555045.596:951): avc: denied { bind } for pid=11075 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.268791][ T36] audit: type=1400 audit(2033555045.643:952): avc: denied { accept } for pid=11075 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.324352][ T36] audit: type=1400 audit(2033555045.708:953): avc: denied { connect } for pid=11079 comm="syz.5.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.633419][T11102] overlayfs: failed to clone lowerpath [ 211.095864][T11129] netlink: 'syz.1.3694': attribute type 15 has an invalid length. [ 211.117909][T11132] fuseblk: Unknown parameter ''Yr*owx%L#ʜP~ ș@t [ jAB.AI|X$0x0000000000000004' [ 211.161014][ T36] audit: type=1400 audit(2033555046.484:954): avc: denied { setopt } for pid=11136 comm="syz.1.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.161603][T11137] tmpfs: Unknown parameter 'mg]l' [ 211.504214][ T36] audit: type=1400 audit(2033555046.802:955): avc: denied { create } for pid=11151 comm="syz.4.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 211.553579][T11159] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 211.561897][T11159] rust_binder: Write failure EINVAL in pid:144 [ 211.621114][T11162] tc_dump_action: action bad kind [ 211.636527][ T424] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 211.658252][T11164] rust_binder: Error while translating object. [ 211.658290][T11164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 211.665305][T11164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 211.692257][ T36] audit: type=1400 audit(2033555046.989:956): avc: denied { write } for pid=11167 comm="syz.5.3708" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.731490][ T36] audit: type=1400 audit(2033555046.989:957): avc: denied { remove_name } for pid=11167 comm="syz.5.3708" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.756043][ T36] audit: type=1400 audit(2033555046.989:958): avc: denied { unlink } for pid=11167 comm="syz.5.3708" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.840222][T11189] netlink: 'syz.5.3714': attribute type 27 has an invalid length. [ 211.848382][T11191] netlink: 'syz.0.3715': attribute type 20 has an invalid length. [ 211.849310][ T424] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.872493][ T424] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.899977][ T424] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.901944][T11196] rust_binder: Error while translating object. [ 211.909285][T11196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 211.916474][T11196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:162 [ 211.918059][ T424] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 211.969424][T11202] fuse: Unknown parameter '' [ 211.973532][ T424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.992303][ T424] usb 2-1: config 0 descriptor?? [ 212.106179][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3724'. [ 213.482218][T11253] kvm: kvm [11252]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000013) = 0x0 [ 213.797406][ T36] audit: type=1400 audit(2033555048.943:959): avc: denied { execmod } for pid=11296 comm="syz.0.3757" path="/selinux/policy" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.864312][T11306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11306 comm=syz.0.3760 [ 214.360836][T11336] overlayfs: failed to clone upperpath [ 214.369796][ T36] audit: type=1400 audit(2033555049.485:960): avc: denied { lock } for pid=11335 comm="syz.5.3772" path="socket:[43227]" dev="sockfs" ino=43227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 214.414229][ T36] audit: type=1326 audit(2033555049.523:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.5.3773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735ef8ebe9 code=0x0 [ 214.531076][T11350] tmpfs: Unknown parameter 'hugelways' [ 214.645537][ T424] usbhid 2-1:0.0: can't add hid device: -71 [ 214.651900][ T424] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.664036][ T424] usb 2-1: USB disconnect, device number 40 [ 214.760549][T11364] fuse: Unknown parameter 'Allow_other$' [ 214.767184][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'. [ 214.847918][ T36] audit: type=1400 audit(2033555049.934:962): avc: denied { write } for pid=11371 comm="syz.1.3786" name="nf_conntrack_expect" dev="proc" ino=4026532339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 215.145295][ T64] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 215.322244][T11388] fuse: Bad value for 'user_id' [ 215.327205][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 215.327828][T11388] fuse: Bad value for 'user_id' [ 215.333682][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.348435][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.358313][ T64] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 215.367959][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.376981][ T64] usb 2-1: config 0 descriptor?? [ 215.563633][T11428] overlayfs: failed to clone upperpath [ 215.563914][T11429] overlayfs: failed to clone upperpath [ 215.892939][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 215.899708][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.911828][ T64] usb 2-1: USB disconnect, device number 41 [ 215.951718][T11447] 9pnet_fd: Insufficient options for proto=fd [ 216.292180][T11480] netlink: 'syz.4.3817': attribute type 20 has an invalid length. [ 216.351643][T11494] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3821'. [ 216.362370][T11493] rust_binder: Error while translating object. [ 216.362426][T11493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 216.368866][T11493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:741 [ 216.400153][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3824'. [ 216.425294][T11507] overlay: Unknown parameter 'smackfstransmute' [ 216.502205][T11530] tipc: Enabled bearer , priority 10 [ 216.503379][ T64] rust_binder: 11506: removing orphan mapping 0:8 [ 216.575882][ T36] audit: type=1326 audit(2033555051.542:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f735ef8ebe9 code=0x7fc00000 [ 216.605991][T11549] overlayfs: failed to clone upperpath [ 216.781833][ T395] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 216.943461][ T395] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 216.951910][ T395] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 216.961261][ T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.970520][ T395] usb 2-1: config 0 descriptor?? [ 216.976579][ T395] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 217.075912][T11571] overlayfs: failed to resolve './file1': -2 [ 217.144897][T11580] overlayfs: failed to clone upperpath [ 217.194653][T11532] rust_binder: Error while translating object. [ 217.194683][T11532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 217.200981][T11532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:750 [ 217.212386][ T64] usb 2-1: USB disconnect, device number 42 [ 217.498871][T11588] netlink: 'syz.5.3855': attribute type 13 has an invalid length. [ 217.525648][T11592] 9pnet_fd: Insufficient options for proto=fd [ 217.555157][ T36] audit: type=1400 audit(2033555052.468:964): avc: denied { ioctl } for pid=11597 comm="syz.5.3859" path="socket:[44465]" dev="sockfs" ino=44465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.701446][ T395] tipc: Node number set to 2886997007 [ 217.767190][ T36] audit: type=1400 audit(2033555052.664:965): avc: denied { append } for pid=11621 comm="syz.5.3867" name="file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.773006][T11623] netlink: 'syz.4.3868': attribute type 4 has an invalid length. [ 217.800410][T11628] netlink: 'syz.4.3868': attribute type 4 has an invalid length. [ 217.901725][T11651] rust_binder: Error in use_page_slow: ESRCH [ 217.901745][T11651] rust_binder: use_range failure ESRCH [ 217.908714][T11651] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 217.914307][T11651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 217.923009][T11651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:762 [ 217.949905][T11659] overlayfs: failed to clone upperpath [ 218.204141][ T395] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 218.343180][ T395] usb 2-1: device descriptor read/64, error -71 [ 218.381718][T11691] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3892'. [ 218.390957][T11690] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3892'. [ 218.599845][ T395] usb 2-1: device descriptor read/64, error -71 [ 218.856545][ T395] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 218.995566][ T395] usb 2-1: device descriptor read/64, error -71 [ 219.252264][ T395] usb 2-1: device descriptor read/64, error -71 [ 219.310762][T11737] fuse: Bad value for 'group_id' [ 219.315961][T11737] fuse: Bad value for 'group_id' [ 219.332255][T11739] /dev/loop0: Can't lookup blockdev [ 219.354732][T11743] netlink: 'syz.0.3911': attribute type 4 has an invalid length. [ 219.363696][T11743] netlink: 'syz.0.3911': attribute type 17 has an invalid length. [ 219.372060][ T395] usb usb2-port1: attempt power cycle [ 219.527126][T11750] netlink: 'syz.5.3913': attribute type 16 has an invalid length. [ 219.535064][T11750] netlink: 'syz.5.3913': attribute type 3 has an invalid length. [ 219.543005][T11750] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3913'. [ 219.653267][T11760] netlink: 'syz.5.3917': attribute type 15 has an invalid length. [ 219.661166][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3917'. [ 219.683014][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3918'. [ 219.733541][ T395] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 219.755281][T11769] overlayfs: missing 'workdir' [ 219.756158][ T395] usb 2-1: device descriptor read/8, error -71 [ 219.906250][ T395] usb 2-1: device descriptor read/8, error -71 [ 220.161360][ T395] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 220.184853][ T395] usb 2-1: device descriptor read/8, error -71 [ 220.333600][ T395] usb 2-1: device descriptor read/8, error -71 [ 220.450224][ T395] usb usb2-port1: unable to enumerate USB device [ 220.966091][T11798] bridge0: port 3(ip6gretap0) entered blocking state [ 220.973293][T11798] bridge0: port 3(ip6gretap0) entered disabled state [ 220.980514][T11798] ip6gretap0: entered allmulticast mode [ 220.986785][T11798] ip6gretap0: entered promiscuous mode [ 220.992466][T11798] bridge0: port 3(ip6gretap0) entered blocking state [ 220.999219][T11798] bridge0: port 3(ip6gretap0) entered forwarding state [ 221.175997][T11817] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 221.270045][T11828] netlink: 'syz.1.3942': attribute type 4 has an invalid length. [ 221.285934][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 221.308516][T11830] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 221.400421][T11844] rust_binder: Error in use_page_slow: ESRCH [ 221.408641][T11844] rust_binder: use_range failure ESRCH [ 221.415182][T11844] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 221.420884][T11844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 221.428993][T11844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:791 [ 222.157307][T11866] overlayfs: failed to clone upperpath [ 222.535924][ T36] audit: type=1400 audit(2033555057.127:966): avc: denied { listen } for pid=11884 comm="syz.1.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 222.695761][T11906] bridge0: port 3(ip6gretap0) entered blocking state [ 222.702733][T11906] bridge0: port 3(ip6gretap0) entered disabled state [ 222.709758][T11906] ip6gretap0: entered allmulticast mode [ 222.716055][T11906] ip6gretap0: entered promiscuous mode [ 222.722030][T11906] bridge0: port 3(ip6gretap0) entered blocking state [ 222.729211][T11906] bridge0: port 3(ip6gretap0) entered forwarding state [ 222.827055][T11920] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 222.836286][T11920] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 222.845302][T11920] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 222.887033][ T36] audit: type=1400 audit(2033555057.445:967): avc: denied { mounton } for pid=11926 comm="syz.1.3980" path="/newroot/264/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 223.737283][T11947] 9pnet_fd: Insufficient options for proto=fd [ 223.755927][ T424] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 223.817927][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 223.895630][T11973] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3995'. [ 223.905167][T11951] netlink: 'syz.5.3988': attribute type 16 has an invalid length. [ 223.915355][ T424] usb 2-1: Using ep0 maxpacket: 8 [ 223.915387][T11973] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3995'. [ 223.926631][ T424] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.945799][ T424] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 223.955676][ T424] usb 2-1: config 0 has no interface number 0 [ 223.965811][ T424] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 223.977091][ T424] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 224.005238][ T424] usb 2-1: config 0 interface 88 has no altsetting 0 [ 224.014216][ T424] usb 2-1: string descriptor 0 read error: -22 [ 224.024929][ T424] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 224.034430][ T424] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 224.043445][ T424] usb 2-1: config 0 descriptor?? [ 224.050235][ T424] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input17 [ 224.050447][T11995] overlayfs: failed to clone upperpath [ 224.091001][T10163] udevd[10163]: Error opening device "/dev/input/event3": Input/output error [ 224.100155][T10163] udevd[10163]: Unable to EVIOCGABS device "/dev/input/event3" [ 224.107841][T10163] udevd[10163]: Unable to EVIOCGABS device "/dev/input/event3" [ 224.180431][T12007] netlink: 'syz.0.4005': attribute type 16 has an invalid length. [ 224.197986][T12010] netlink: 'syz.0.4006': attribute type 4 has an invalid length. [ 224.267076][T12012] netlink: 'syz.0.4006': attribute type 4 has an invalid length. [ 224.275387][ T424] usb 2-1: USB disconnect, device number 47 [ 225.050404][T12068] netlink: 'syz.4.4025': attribute type 4 has an invalid length. [ 225.070305][T12068] netlink: 'syz.4.4025': attribute type 4 has an invalid length. [ 225.103755][T12072] overlayfs: failed to clone upperpath [ 225.133772][ T36] audit: type=1400 audit(2033555059.548:968): avc: denied { lock } for pid=12073 comm="syz.0.4029" path="socket:[44957]" dev="sockfs" ino=44957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 225.168968][T12076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:837 [ 225.173612][T12082] overlayfs: failed to clone upperpath [ 225.267096][T12098] Invalid ELF header len 1 [ 225.331431][T12098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:839 [ 225.798162][T12100] netlink: 'syz.0.4038': attribute type 4 has an invalid length. [ 226.098662][ T424] rust_binder: 12084: removing orphan mapping 0:24 [ 226.121213][T12181] binder: Unknown parameter '0x0000000000000003' [ 226.146415][ T36] audit: type=1400 audit(2033555060.493:969): avc: denied { accept } for pid=12184 comm="syz.1.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 226.177889][T12190] rust_binder: Error while translating object. [ 226.177928][T12190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 226.184226][T12190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:846 [ 226.204321][T12192] fuseblk: Bad value for 'fd' [ 226.313118][T12200] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 226.320526][T12200] rust_binder: 856: no such ref 2097152 [ 226.557308][ T36] audit: type=1326 audit(2033555060.885:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.4.4086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x0 [ 226.580428][ T36] audit: type=1326 audit(2033555060.885:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.4.4086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b7058ebe9 code=0x0 [ 227.141967][T12253] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 227.216868][T12259] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 227.217766][ T36] audit: type=1400 audit(2033555061.493:972): avc: denied { load_policy } for pid=12258 comm="syz.1.4101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.226780][T12259] SELinux: failed to load policy [ 227.260471][ T36] audit: type=1326 audit(2033555061.540:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.1.4101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe438ebe9 code=0x0 [ 227.261424][T12261] overlayfs: failed to clone upperpath [ 227.498925][T12280] overlayfs: conflicting options: userxattr,verity=require [ 227.507535][T12280] overlayfs: conflicting options: userxattr,verity=require [ 227.699401][T12304] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 227.860373][T12311] tipc: Enabling of bearer rejected, failed to enable media [ 228.016920][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4132'. [ 228.026032][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4132'. [ 228.236512][T12358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.237572][T12358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.244396][T12358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:868 [ 228.275533][T12363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.286807][T12363] rust_binder: Error in use_page_slow: ESRCH [ 228.293610][T12363] rust_binder: use_range failure ESRCH [ 228.299856][T12363] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 228.305771][T12363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 228.313983][T12363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:871 [ 228.324107][T12363] rust_binder: 871: no such ref 1 [ 228.336438][T12374] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4144'. [ 228.338710][T12363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:871 [ 228.740244][ T36] audit: type=1400 audit(2033555062.924:974): avc: denied { accept } for pid=12397 comm="syz.5.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.552138][T12424] incfs: Error accessing: ./file0. [ 229.557464][T12424] incfs: mount failed -20 [ 229.600897][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4167'. [ 229.682905][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4172'. [ 229.770730][T12456] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4174'. [ 229.837944][ T36] audit: type=1400 audit(2033555063.943:975): avc: denied { read } for pid=94 comm="acpid" name="mouse1" dev="devtmpfs" ino=637 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 229.859925][ T36] audit: type=1400 audit(2033555063.943:976): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=637 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 229.882823][ T36] audit: type=1400 audit(2033555063.943:977): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=637 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.068239][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4189'. [ 230.270668][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 230.355080][T12522] fuse: Bad value for 'user_id' [ 230.360021][T12522] fuse: Bad value for 'user_id' [ 230.399167][T12535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4200'. [ 230.511201][T12548] overlayfs: failed to clone upperpath [ 230.576654][T12561] veth0: entered promiscuous mode [ 230.583288][T12561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4211'. [ 230.583294][T12562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4211'. [ 230.602489][T12560] veth0: left promiscuous mode [ 230.786605][T12585] overlayfs: failed to clone upperpath [ 230.808930][T12590] fuseblk: Unknown parameter '' [ 230.855929][ T36] audit: type=1326 audit(2033555064.896:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.0.4227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fdcf8ebe9 code=0x0 [ 230.878914][T12608] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4229'. [ 230.958734][T12622] netlink: 'syz.4.4233': attribute type 4 has an invalid length. [ 230.970380][T12621] netlink: 'syz.4.4233': attribute type 4 has an invalid length. [ 230.978709][T12622] netlink: 'syz.4.4233': attribute type 4 has an invalid length. [ 230.987672][T12624] netlink: 'syz.4.4233': attribute type 4 has an invalid length. [ 231.764571][T12642] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4240'. [ 231.773941][ T36] audit: type=1400 audit(2033555065.757:979): avc: denied { read } for pid=12641 comm="syz.0.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.829590][T12660] netlink: 'syz.5.4246': attribute type 4 has an invalid length. [ 231.841554][T12660] netlink: 'syz.5.4246': attribute type 4 has an invalid length. [ 233.020496][T12694] rust_binder: Write failure EFAULT in pid:903 [ 233.156354][ T36] audit: type=1400 audit(2033555067.056:980): avc: denied { setattr } for pid=12709 comm="syz.0.4265" path="socket:[46982]" dev="sockfs" ino=46982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.206860][T12718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.308016][T12740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 233.314498][T12740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:912 [ 233.334936][ T4745] tipc: Subscription rejected, illegal request [ 233.335325][T12742] __vm_enough_memory: pid: 12742, comm: syz.1.4279, bytes: 18014402804453376 not enough memory for the allocation [ 233.615916][ T31] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 233.755001][ T31] usb 2-1: device descriptor read/64, error -71 [ 234.011638][ T31] usb 2-1: device descriptor read/64, error -71 [ 234.268300][ T31] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 234.407347][ T31] usb 2-1: device descriptor read/64, error -71 [ 234.664017][ T31] usb 2-1: device descriptor read/64, error -71 [ 234.753884][T12759] cgroup: subsys name conflicts with all [ 234.781827][ T31] usb usb2-port1: attempt power cycle [ 234.853292][T12768] overlayfs: failed to resolve './file0': -2 [ 235.154225][T12775] overlayfs: failed to clone upperpath [ 235.155994][ T31] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 235.189240][ T31] usb 2-1: device descriptor read/8, error -71 [ 235.219545][T12779] __nla_validate_parse: 3 callbacks suppressed [ 235.219566][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.234844][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.243872][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.253020][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.262215][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.271385][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.281154][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.290383][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.299413][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.308435][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4291'. [ 235.342039][ T31] usb 2-1: device descriptor read/8, error -71 [ 235.605316][ T31] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 235.628212][ T31] usb 2-1: device descriptor read/8, error -71 [ 235.719048][ T36] audit: type=1400 audit(2033555069.450:981): avc: denied { read } for pid=12826 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.766117][ T36] audit: type=1400 audit(2033555069.497:982): avc: denied { ioctl } for pid=12741 comm="syz.1.4279" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.792809][ T31] usb 2-1: device descriptor read/8, error -71 [ 235.921207][ T36] audit: type=1400 audit(2033555069.637:983): avc: denied { sys_ptrace } for pid=12826 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 [ 235.921936][ T31] usb usb2-port1: unable to enumerate USB device Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 236.306389][ T36] audit: type=1400 audit(2033555069.992:984): avc: denied { search } for pid=12909 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 236.461360][ T36] audit: type=1400 audit(2033555070.142:985): avc: denied { read write } for pid=12943 comm="ip" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 236.495911][ T36] audit: type=1400 audit(2033555070.179:986): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.533985][ T36] audit: type=1400 audit(2033555070.179:987): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 236.596145][T12955] 9pnet_fd: Insufficient options for proto=fd [ 236.596908][ T36] audit: type=1400 audit(2033555070.179:988): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 Stopping iptables: [ 236.665359][ T36] audit: type=1400 audit(2033555070.235:989): avc: denied { unlink } for pid=148 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 236.682772][T12970] rust_binder: BINDER_SET_CONTEXT_MGR already set Stopping system message bus: [ 236.689822][T12970] rust_binder: Write failure EFAULT in pid:918 [ 236.707671][ T36] audit: type=1400 audit(2033555070.319:990): avc: denied { read write } for pid=12964 comm="iptables" path="/dev/console" dev="rootfs" ino=97 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 done Stopping klogd: OK Stopping acpid: [ 236.989894][T13004] overlayfs: failed to clone upperpath [ 237.186114][T13031] incfs: Error accessing: ./file0/file1. [ 237.191980][T13031] incfs: mount failed -2 [ 237.315253][T13048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=13048 comm=syz.5.4343 [ 237.329117][T13046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=13046 comm=syz.5.4343 [ 237.353836][T13046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=13046 comm=syz.5.4343 [ 237.358304][T13048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=13048 comm=syz.5.4343 [ 237.387662][T13049] rust_binder: 928: no such ref 1 [ 237.393060][T13049] rust_binder: Write failure EFAULT in pid:928 [ 237.455626][T13065] fuse: Bad value for 'max_read' [ 237.667116][T13102] overlayfs: failed to clone upperpath [ 237.678976][T13102] overlayfs: failed to clone upperpath [ 237.768918][T13116] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.777793][T13116] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 237.786908][T13116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.0.103 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 239.969661][ T4748] ip6gretap0: left allmulticast mode [ 239.975011][ T4748] ip6gretap0: left promiscuous mode [ 239.980319][ T4748] bridge0: port 3(ip6gretap0) entered disabled state [ 239.987294][ T4748] bridge_slave_1: left allmulticast mode [ 239.992982][ T4748] bridge_slave_1: left promiscuous mode [ 239.998685][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.006092][ T4748] bridge_slave_0: left allmulticast mode [ 240.011879][ T4748] bridge_slave_0: left promiscuous mode [ 240.017536][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.163964][ T4748] veth1_macvtap: left promiscuous mode [ 240.169485][ T4748] veth0_vlan: left promiscuous mode [ 240.537198][T13132] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 240.543731][T13132] ACPI: PM: Preparing to enter system sleep state S5 [ 240.550708][T13132] kvm: exiting hardware virtualization [ 240.556226][T13132] reboot: Power down serialport: VM disconnected.