last executing test programs: 1m42.115912467s ago: executing program 0 (id=137): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.876424181s ago: executing program 0 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m39.815381072s ago: executing program 0 (id=164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x6, 0x4) 1m39.763124863s ago: executing program 0 (id=165): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000001340)={0x2, 0x1, 0x2, 0xa}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='fdinfo\x00') fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x0, 0x40, 0x3, r3}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000340)=[@rdmsr={0x32, 0x18, {0x9af}}, @wrmsr={0x1e, 0x20, {0x971, 0x9}}, @uexit={0x0, 0x18, 0x2000000}, @wrmsr={0x1e, 0x20, {0x391, 0x2}}, @code={0xa, 0x44, {"36f3470f0966b8d5000f00d066b8df008ee066ba610066edc4c14e5f1f6440af400f08400fc77866b9c70b00000f32430f01cb"}}, @code={0xa, 0x60, {"f3430fa6c00f01f06745a0070000000f09450f08c744240051000000c744240200880000ff2c24656666f3400f09cb470f01cbc74424000bd00000c744240200400000c7442406000000000f011424"}}, @rdmsr={0x32, 0x18, {0xda0}}, @code={0xa, 0x53, {"400f01cb66b839008ee065430f789f8f82b8462667450f01f8660f3830ee6765670fc72a66410f38814900b805000000b99c0800000f01d966b86f008ee80fc76e70"}}, @wrmsr={0x1e, 0x20, {0xb92, 0x8f}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff8}}, @wr_crn={0x46, 0x20, {0x4, 0x1f}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0xa, 0x66, {"b98e0400000f3240db83b6250000f3430f2c3f3665dd2500000000f3460f0948b8b83e0000000000000f23d00f21f835100000090f23f80f01cb643e65420f09b9aa0a0000b88421b242ba39aca61e0f30410f7937"}}, @code={0xa, 0x51, {"660f3840edc482cd0937c483016d7c5ba07b66b805018ec8400f01c2670f01c9c4c2cb8c5940c744240092000000c744240207000000ff2c2442d9e8450f01cf"}}, @rdmsr={0x32, 0x18, {0x660}}, @code={0xa, 0x6f, {"c744240016000000c744240252000000ff1c24480fc71d6166c156b8010000000f01d936a7c421abd035620000000fc79d00000000c42251bcb902000000410f01cf48b8cf000000000000000f23c80f21f835040070000f23f8670f01f8"}}, @wr_crn={0x46, 0x20, {0x8, 0x4c3}}, @wr_crn={0x46, 0x20, {0x0, 0x7fffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x9db, 0x7e}}], 0x395}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x404001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001140)=@buf={0x80, &(0x7f0000001240)="b70cf009fcf97a1199eff27fa6bc910658988eef4cc247bbbc1181b2294c66f270c0e222c278e4b8a4e35de88e92551a82630329d983d9aae4ddd3d9634886b34c88989780b2e1cf094a7fc6bd4d3c052ad1194f534cbf209440e65320c43c631c44830c0dbae16650b7566003a85bfff0e04c9dfa7d2ba10e5fa7da5b12c9bf"}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x400009, 0xfffffffffffffffd, 0x0, 0x2, 0x7, 0x4002004c3, 0x6, 0xffffffffffffffff, 0xc595, 0xfffffffffffffffc, 0x80000000000001, 0x8, 0xffffffffffffffff, 0x80000004000000, 0x8c], 0xeeee8000, 0x2010d3}) 1m39.762788533s ago: executing program 0 (id=166): truncate(&(0x7f0000000000)='./file0\x00', 0xde) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000021c0)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002380)=0x0) fstat(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000024c0), &(0x7f0000002500)=0x0, &(0x7f0000002540)) r4 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002740)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000002840)=0xe8) getgroups(0x6, &(0x7f0000002880)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) statx(0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00', 0x4000, 0x100, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000002d00)='./file0\x00', 0x2000, 0x1, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000004f80)=0x0, &(0x7f0000004fc0), &(0x7f0000005000)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, &(0x7f0000005180)={&(0x7f0000002040)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x5, 0x40000482, 0x6, 0x2, 0x40, 0x33, 0x0, 0x0, 0x2, 0x5}}, &(0x7f00000020c0)={0x18, 0x0, 0x1, {0x9}}, &(0x7f0000002100)={0x18, 0x0, 0x40, {0x5}}, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, 0x7, {0xffffffff}}, &(0x7f0000002180)={0x18, 0xfffffffffffffff5, 0x5, {0xf}}, &(0x7f0000002200)={0x28, 0xfffffffffffffff5, 0x29, {{0x2, 0x7f, 0x2, r0}}}, &(0x7f0000002240)={0x60, 0x0, 0xfffffffffffffffe, {{0xbb, 0x3, 0x8000, 0x58, 0x28, 0xffffffff, 0x4, 0x6}}}, &(0x7f00000022c0)={0x18, 0x0, 0x899, {0x80000000}}, &(0x7f0000002300)={0x12, 0x0, 0xfff, {'#\x00'}}, &(0x7f0000002340)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000002440)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, {0x2, 0x5, 0x3, 0xf, 0x6, 0xe, 0x7982, 0x6, 0x7, 0x2000, 0x3, r1, r2, 0x7, 0x6}}}, &(0x7f0000002580)={0x90, 0x0, 0x400, {0x1, 0x1, 0x0, 0x5, 0x1, 0x8, {0x4, 0x8000000000000001, 0x6, 0x0, 0x1e, 0x3, 0x3, 0xfffffff7, 0x5, 0x1000, 0xfffffffd, r3, r4, 0x6, 0x6026fe10}}}, &(0x7f0000002640)={0xd0, 0x0, 0x9, [{0x2, 0x10, 0x0, 0x2}, {0x1, 0x4, 0x8, 0x0, '[+/}$$/^'}, {0x4, 0x100000000, 0x2, 0x6, '#s'}, {0x0, 0xa, 0xb, 0x6, '+##\'--}#[+$'}, {0x5, 0x5, 0x8, 0x7, '-$.[+)(\\'}, {0x6, 0x4, 0x8, 0x2, '#{+-::-\x98'}]}, &(0x7f0000002ac0)={0x148, 0xffffffffffffffda, 0x0, [{{0x1, 0x3, 0x800000010000, 0x5, 0xdb, 0x1, {0x2, 0x0, 0x5, 0x0, 0x1c, 0x10, 0x4, 0x0, 0x2, 0xc000, 0xffffffc5, r6, r7, 0x401, 0xf}}, {0x6, 0x8000000000000000, 0x3, 0x4, ',\']'}}, {{0x1, 0x3, 0x4, 0x80000000, 0xfff, 0x35, {0x2, 0x1, 0x8000000000000001, 0x824, 0xfff, 0x0, 0x0, 0x1000, 0x9, 0x2000, 0xff, r8, r9, 0x1, 0x400}}, {0x1, 0x9, 0x0, 0xcb49}}]}, &(0x7f0000002e40)={0xa0, 0x0, 0x5, {{0x3, 0x1, 0x5f, 0x2, 0x1ff, 0x9, {0x5, 0x6, 0x0, 0xec, 0x8, 0x7, 0x2, 0x1, 0x589, 0x8000, 0x6, r10, r11, 0x7, 0x7}}, {0x0, 0x14}}}, &(0x7f0000002f00)={0x20, 0x0, 0x8, {0x7ff, 0x0, 0xbc5e, 0x995}}, &(0x7f0000005040)={0x130, 0xfffffffffffffffe, 0x10000, {0x4, 0x4, 0x0, '\x00', {0x80, 0x8000, 0x0, 0x5, r12, r13, 0xa000, '\x00', 0x4, 0x101, 0x80000000000, 0x2, {0x1, 0x1}, {0xb2, 0xf7da}, {0x7, 0x1}, {0x4, 0x8}, 0x0, 0x1, 0x5, 0x80}}}}) chdir(&(0x7f0000005240)='./file0\x00') r14 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12, 0x1010, r14, 0x20968000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r14, &(0x7f0000005340)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x1159, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xbf97ba76bfc9488e}, 0x8040800) timer_create(0x5, &(0x7f0000005540)={0x0, 0x10, 0x2, @thr={&(0x7f0000005380)="ccca3c12a2e8673684de6b6a4b8b3cd12cca5f04a4be69462143d1be902459181156ebf27fc9713e63632248edd7a0bd7a18b9a885682c4173a5b4b3ccf71bb237320222a3052d5b316d1b11b5a833b345587ce349a24186130943c4275fee742477d28d1c2751b6bc6df017e64d2aa64279913a7e0ab6f1639d6fcb235c8147cb412c7253317e78fe59a35f2848bbada08483afa10899f06d9b24b1b533602d642968c2574f147d04cb8e51b9", &(0x7f0000005440)="6267a1deeec536eac5250d8dce0ec0c27c0c542e60d60ec3a0655141103f59b50b431ca4e07cfecc22326f70c87019ba9122704e40997e234eabcf64671a7fa4458db5ccf59f24667aaef33b2a29e414eb9fe3bf29a3ac74efa7ccd1e2b680f46375810e21dbce584da651d69141e869e9bbd6c3ad3eccda4eefbfc12f49bd19cf277f96a6eeddae4fb2f9aa745ca38675573a7665e75e58f57cfb06807dee4bfa201f1ff59f36cfe08a52d0c58adb1a2acc443aeb9c3dddc50226fa29c4acc2d30120f9313da99f8d66727f963a73a019ca6ce7c0623262f13cb53a2f7ba7b6765ab0cc87d464463e41717431bc6087b24e0ff3"}}, &(0x7f0000005580)) r15 = openat(0xffffffffffffffff, &(0x7f00000055c0)='./file0\x00', 0x311002, 0x1d6) setsockopt$inet_mreqn(r15, 0x0, 0x24, &(0x7f0000005600)={@rand_addr=0x64010100, @loopback, r5}, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r15, &(0x7f0000005740)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005700)={&(0x7f0000005680)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getrusage(0xffffffffffffffff, &(0x7f0000005780)) mkdirat(0xffffffffffffff9c, &(0x7f0000005840)='./file0/file0\x00', 0x180) setsockopt$netlink_NETLINK_PKTINFO(r14, 0x10e, 0x3, &(0x7f0000005880)=0x3, 0x4) ioctl$AUTOFS_IOC_READY(r14, 0x9360, 0x8000) mount$9p_unix(&(0x7f00000058c0)='./file0/file0\x00', &(0x7f0000005900)='./file0\x00', &(0x7f0000005940), 0xa81000, &(0x7f0000005980)={'trans=unix,', {[], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x65, 0x34, 0x33, 0x39, 0x33, 0x63, 0x39], 0x2d, [0x61, 0x39, 0xb, 0x37], 0x2d, [0x0, 0x37, 0x36, 0x64], 0x2d, [0x34, 0x30, 0x61, 0x38], 0x2d, [0x39, 0x38, 0x61, 0x66, 0x30, 0x0, 0x37, 0x33]}}}, {@obj_user={'obj_user', 0x3d, 'pim6reg0\x00'}}, {@obj_user={'obj_user', 0x3d, '#\''}}, {@appraise}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '-$.[+)(\\'}}, {@hash}, {@euid_gt={'euid>', r12}}, {@subj_user={'subj_user', 0x3d, '-$.[+)(\\'}}]}}) mknodat(r15, &(0x7f0000005a40)='./file0\x00', 0x8402, 0x5) wait4(0x0, &(0x7f0000005a80), 0x20000000, &(0x7f0000005ac0)) 1m39.762185533s ago: executing program 0 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x214, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x735}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62e09f91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x48b9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb1e}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "9ba38bbc4e64e3046f57cc3874b29231c7fdc21670355dfa541f304ecbf6fac86bd7a5f538eb8a0310fc7a75c142bb6aa7f18277bbf610cfa2dd0ea2f3b7dbcf4db79efcf5988be568ef6174ef06ee5f0ce6e6eb902e4c33"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xaa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdb2}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x52fa45e70bd708d2}, 0x4008801) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0xb3de958f6f826e22, @host}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x36}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x43}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf1, 0x72}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x940) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) bind$netlink(r8, &(0x7f00000008c0)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000a40)={{0xa, 0x4e22, 0x9, @mcast2, 0x5}, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1, {[0x10000, 0x7f, 0xffff, 0xbe4, 0x5f1, 0x5, 0x0, 0x10001]}}, 0x5c) bind$netlink(r4, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd0, 0x2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_TUPLE={0xb4, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x20008040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000cc0)={0x7, 'bond_slave_0\x00', {0xc}, 0x8}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x1) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000e40)={0x3, 0x0, [{0xb86}, {0x80d, 0x0, 0x9146}, {0xbd6, 0x0, 0x8000}]}) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, &(0x7f0000000e80), &(0x7f0000000f00)=0x80) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000f40)=""/197, &(0x7f0000001040)=0xc5) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000001180)={@mcast1, 0x0}, &(0x7f00000011c0)=0x14) sendto$packet(r8, &(0x7f0000001080)="3dbf12f14928ab98a0107ff35a7928b817eb043bccba1090436ba0729e0c177b89060a25052694df995d184bd70db587f0d035d4403e2c7998db194c7e0d1aab9288131092491418891b6ff3c9be8db6cfac21f28293b07fc45b4bc51cff67e8035ec7f6dcb75a65a8b018f9e5df9c0197b60bc621888bcb2356d3bafa5e220d3c9ff941f2c0f6d4c0cffe0b15a151c15f672e42157a5aac8a2bd797ebbfd53624fa0d58584f84d597182a31be29c939c5d9c3ef8fe8bbe714377a7397e1b921bf6f25b4dce95ab1904373b3d6fc2677f0b6e51434ae0aa3a14254a6b3c67b67880a369441ecd6e7abdc69951b8cd335ade8209e", 0xf4, 0x20000080, &(0x7f0000001200)={0x11, 0xf6, r10, 0x1, 0x9}, 0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x74, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x74}}, 0x4000) 1m39.753520573s ago: executing program 32 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x214, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x735}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62e09f91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x48b9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb1e}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "9ba38bbc4e64e3046f57cc3874b29231c7fdc21670355dfa541f304ecbf6fac86bd7a5f538eb8a0310fc7a75c142bb6aa7f18277bbf610cfa2dd0ea2f3b7dbcf4db79efcf5988be568ef6174ef06ee5f0ce6e6eb902e4c33"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xaa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdb2}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x52fa45e70bd708d2}, 0x4008801) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0xb3de958f6f826e22, @host}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x36}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x43}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf1, 0x72}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x940) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) bind$netlink(r8, &(0x7f00000008c0)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000a40)={{0xa, 0x4e22, 0x9, @mcast2, 0x5}, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1, {[0x10000, 0x7f, 0xffff, 0xbe4, 0x5f1, 0x5, 0x0, 0x10001]}}, 0x5c) bind$netlink(r4, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd0, 0x2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_TUPLE={0xb4, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x20008040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000cc0)={0x7, 'bond_slave_0\x00', {0xc}, 0x8}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x1) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000e40)={0x3, 0x0, [{0xb86}, {0x80d, 0x0, 0x9146}, {0xbd6, 0x0, 0x8000}]}) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, &(0x7f0000000e80), &(0x7f0000000f00)=0x80) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000f40)=""/197, &(0x7f0000001040)=0xc5) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000001180)={@mcast1, 0x0}, &(0x7f00000011c0)=0x14) sendto$packet(r8, &(0x7f0000001080)="3dbf12f14928ab98a0107ff35a7928b817eb043bccba1090436ba0729e0c177b89060a25052694df995d184bd70db587f0d035d4403e2c7998db194c7e0d1aab9288131092491418891b6ff3c9be8db6cfac21f28293b07fc45b4bc51cff67e8035ec7f6dcb75a65a8b018f9e5df9c0197b60bc621888bcb2356d3bafa5e220d3c9ff941f2c0f6d4c0cffe0b15a151c15f672e42157a5aac8a2bd797ebbfd53624fa0d58584f84d597182a31be29c939c5d9c3ef8fe8bbe714377a7397e1b921bf6f25b4dce95ab1904373b3d6fc2677f0b6e51434ae0aa3a14254a6b3c67b67880a369441ecd6e7abdc69951b8cd335ade8209e", 0xf4, 0x20000080, &(0x7f0000001200)={0x11, 0xf6, r10, 0x1, 0x9}, 0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x74, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x74}}, 0x4000) 1m39.37441821s ago: executing program 1 (id=173): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendfile(r0, r0, 0x0, 0x7ffff000) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000), 0x0) 1m38.508558417s ago: executing program 1 (id=192): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r2, 0x4004480d, 0x0) (async) write$selinux_create(r2, &(0x7f0000000100)=@access={'system_u:object_r:ksm_device_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x42) 1m38.299203102s ago: executing program 1 (id=194): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) r0 = memfd_secret(0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r3, 0x8000000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x8000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 1m38.165531834s ago: executing program 1 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x10004, 0x4, 0xfff, 0x8e, 0x0, [{0x5, 0x6, 0xfc, '\x00', 0xc}, {0xa, 0x6, 0x0, '\x00', 0x1}, {0x5, 0x6, 0x3, '\x00', 0xc8}, {0x4, 0x3b, 0x1, '\x00', 0x4}, {0x0, 0xfa, 0x7f, '\x00', 0x14}, {0x5, 0xfc, 0x9, '\x00', 0x2c}, {0x7, 0x0, 0x2, '\x00', 0x86}, {0x13, 0xa7, 0x2, '\x00', 0x39}, {0xa, 0x3, 0x40}, {0x47, 0xf8, 0x9, '\x00', 0x8}, {0x7, 0x4, 0x8, '\x00', 0x2}, {0x7f, 0x93, 0x80, '\x00', 0x10}, {0xf7, 0x8, 0xd, '\x00', 0x82}, {0x6, 0xf, 0x2, '\x00', 0x1}, {0x7f, 0x9, 0x9a, '\x00', 0xc2}, {0x2, 0x2, 0x5, '\x00', 0x4}, {0x7, 0x7, 0xdf, '\x00', 0xd1}, {0xf, 0x5, 0x11, '\x00', 0x62}, {0x9, 0x4, 0x2, '\x00', 0x7}, {0x2, 0x4, 0x9, '\x00', 0x7}, {0xa, 0x8, 0xb0, '\x00', 0x8}, {0x2, 0x8, 0xec, '\x00', 0x6}, {0x2, 0x6, 0x4, '\x00', 0x2}, {0x80, 0x6, 0xe, '\x00', 0x9}]}}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x40000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000002c0)={0x250a, [0x10000, 0x7], 0x4}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40c30, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r10, 0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='net/ip6_flowlabel\x00') read$FUSE(r11, &(0x7f00000005c0)={0x2020}, 0x2020) 1m38.110730685s ago: executing program 1 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x20) (async, rerun: 32) mmap(&(0x7f00002a8000/0x4000)=nil, 0x4000, 0x10, 0x1010, r1, 0x3f92f000) (async, rerun: 32) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000140)={0x7d, 0xe3, 0x8f, 0x931, 0x7, 0x800, 0x4}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x1, &(0x7f0000000040)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x0, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async, rerun: 32) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000c00)=[@wr_crn={0x46, 0x20, {0x3, 0xed}}, @uexit={0x0, 0x18, 0xfffffffffffffffb}, @rdmsr={0x32, 0x18, {0x2be}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @uexit={0x0, 0x18, 0x5c0}, @rdmsr={0x32, 0x18, {0xbfc}}, @rdmsr={0x32, 0x18, {0xc0000082}}, @code={0xa, 0x50, {"674780a9d74b4f9db4b92e0800000f32640f3241c1a2a31700000c65640f01c5c4e2b147c12e660f22e166450f38823d008000002e66410fa36600490fc72b"}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x5b, {"f4b805000000b9780000000f01d966bad004b800800000efc4c17d51866d595e81450f062e0f01c5c44219df1b440fc779b8c744240011010000c7442402aa7e6b2aff1c24c4a279132a"}}, @cpuid={0x14, 0x18, {0x7, 0x63}}, @rdmsr={0x32, 0x18, {0x40000104}}, @code={0xa, 0x66, {"66bad104b87b400000efc461f8ae5b0066b88d000f00d8b8010000000f01d9c744240033000000c74424022c440000ff2c24b966020000b811000000ba000000000f30c423790942340f0f32c462d59a1e360f2192"}}, @wrmsr={0x1e, 0x20, {0x95e, 0x81}}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x32, 0x18, {0x909}}, @code={0xa, 0x6a, {"66baf80cb8e19b9b89ef66bafc0cb000ee450f01c53e262e65660fc7b50000c0fec443e16fc84b67660f38171a2e67450f01cfc4e2c905befcda4ada3e440f019a0d68000026f30fc73066baf80cb84c8b178bef66bafc0cec"}}, @uexit={0x0, 0x18, 0x80000000}, @wr_crn={0x46, 0x20, {0x4, 0xd}}, @rdmsr={0x32, 0x18, {0x127}}, @code={0xa, 0x55, {"66baf80cb8a376a989ef66bafc0cb052eec4637d1df0b73e65660f3a227c8774f80f09c4a271ae9ce50000000026450f2313660fc7320f0966baa100ec66400f38dd684b"}}, @code={0xa, 0x77, {"c744240031010000c74424022e000000ff2c243e4f9848b823b60000000000000f23c00f21f83501000b000f23f8b9800000c00f3235000400000f30470f01cb0f8200000000f36726430f237766bad104b068ee400f01cfb9800000c00f3235008000000f30"}}, @uexit={0x0, 0x18, 0x4811d6dd}, @wr_crn={0x46, 0x20, {0x8, 0x40002}}], 0x487}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4229d3e8a0088000067f30fc7b117a137bfc421f96e16670ff67512460f21cfc4411d57c5450f2082460f0766440fc731470f30", 0x34}], 0x1, 0x20, &(0x7f0000000140), 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.985640558s ago: executing program 1 (id=207): creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5}}, 0x30) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000000c0)={0x0, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x2, &(0x7f0000000e00)=[{0x80, 0x80, 0x4, 0x1}, {0x6, 0xfb}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a805001600080014"], 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x1c, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 1m37.930453148s ago: executing program 33 (id=207): creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5}}, 0x30) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000000c0)={0x0, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x2, &(0x7f0000000e00)=[{0x80, 0x80, 0x4, 0x1}, {0x6, 0xfb}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a805001600080014"], 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x1c, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 20.925112711s ago: executing program 4 (id=1701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000000)) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x5f20925c}, {0x6fd3, 0x3}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r4, &(0x7f0000000c40)=[{{&(0x7f0000007c00)={0xa, 0x4e24, 0xfffffffe, @local, 0x105}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x1, 0x20000084) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a000102054e1ad9a99926a03f000003c0179a2870000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000340)={0x0, 0xe7f6, 0x2000, 0x2, 0x175, 0x0, r2}, &(0x7f0000000080), &(0x7f00000003c0)) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x27}, @fda={0x66646185, 0x1, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/173, 0xad, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 20.914117422s ago: executing program 4 (id=1702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)) 20.885063192s ago: executing program 4 (id=1703): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) pwrite64(r0, 0x0, 0x0, 0x7) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 20.884220593s ago: executing program 4 (id=1704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 20.839160273s ago: executing program 4 (id=1705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xdc, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xdc9}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xdc}}, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 20.784693014s ago: executing program 4 (id=1706): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 9.102872382s ago: executing program 5 (id=1743): r0 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r1, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x8000000) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r2, 0x5bc7000) (async) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0xccd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x81}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x30, 0xc, 0x8, 0x4}, 0x77, &(0x7f0000000100)={0x5, 0xf, 0x77, 0x2, [@generic={0x67, 0x10, 0x4, "3d50b9dfcb960d36c6843745ec8f5e81f587011f9f27e2017c3aeb21febf57c193745272fbb1d89a0dbc9b3250c5a6cb47f130698a16082153c136d8fd11e09943900a46a654f4503a176caf84d1507829acf67df62ce8adb0ed9a8059823b6214ecc062"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x89, 0x2, 0xd, 0x1}]}, 0x3, [{0x6f, &(0x7f0000000180)=@string={0x6f, 0x3, "601e93d37ff8aaf872acfc47a1d3acae20c8f2cdd2e9f9a6bc92a65f322fca7276b29d709ad95fb42d1766bd80f27e42a59ec47feda19aa58f698a19f02bf733411fcfb62ba93b4468924004b190276b336f6bf7ef06dde72442490e2cd0aa388abfc23f72b9e94087c9b48a3e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2401}}, {0xfe, &(0x7f0000000280)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f00000003c0)={0x20, 0x8, 0xf7, {0xf7, 0x23, "4948b1c61a0d184241a3592a6461f7d6a93812dd6598a7cd222a795977b6345ee0c33ba3449ea3ff1c948e4dda18d744d246891db290c9b729f85512a5b0756b7b3a7a868af50795d5c0ea9fb0eb1ca8022105b928fef2341ae595f3c2feea660bbb0aa5bfbc92a116828ea1a3ae183295d3e9541aef3c4335bbbbd68f63fdab438b3c0884b5e78e842616477954a4257153815ac2b060cf5e9f34b1331232fcd0acf263edb839504dfabe619e460bbe4bbb26a30faed1d3bdd78f9f382b9a27f7d8978ebe934d7d2863016533788512b9785fbad7d59f5096c0c6464595adaaae9b6890035c429b73b404fb511b8d78451af48e41"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000500)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, '^5]h'}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xeff}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x9e29d37acd490fc8, 0x17, 0x32, "c8e3ae2464bdaa60e58dadd0cfc7cc180d9c5749fdbc8710e6661b079af2cbfdc67850df17a4d4ddffca3dde042362e1cb11"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0xb2, "4e1e85d8d3150684d8df146563e24c98206bec0efd03968d5f9fd4019f73de58df645bcbca368395f8d8af45f5e3d8cd26d19ce660946e498772940178c203b2a5121cce674e8aad7955e39be02f47aae55d896caceefd7ad296485b3ecec02655f33ebcdae9542a228be29a965dfcbcc6c8df92edbf46bee18fc78f0176a45f4f956fdda6e4a07319660fbd005317e8f223a6e65e68d3649e2f4a7cff23f35a5a7527be4f3aad2d869333de1b3f8cef7314"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x4}}) 9.102485062s ago: executing program 3 (id=1745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @flat=@handle={0x73682a85, 0x180a, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) readahead(r1, 0xfffffffffffffffd, 0x0) 7.451167384s ago: executing program 5 (id=1746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}}, 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rt_sigpending(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000050, &(0x7f0000000680)=ANY=[@ANYBLOB="66643df0284cdda3fd9077c6bae7bc", @ANYRESOCT=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000008f", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,\x00']) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) listen(r5, 0x3) syz_clone3(&(0x7f00000004c0)={0x26224600, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)=0x0, {0x1b}, &(0x7f0000000940)=""/144, 0x90, &(0x7f00000003c0)=""/9, &(0x7f0000000400)=[r4, r4, r4, r4, r4, r4, r4, r4, r4], 0x9}, 0x58) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x1, &(0x7f0000000540)=""/163) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 7.451038635s ago: executing program 2 (id=1747): mount$bind(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200), 0x4000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 7.450723215s ago: executing program 3 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) waitid(0x0, r1, 0x0, 0x8, 0x0) socket(0x18, 0x6, 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1aa}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(r0) (async) waitid(0x0, r1, 0x0, 0x8, 0x0) (async) socket(0x18, 0x6, 0x6) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) ppoll(&(0x7f0000000100)=[{r0, 0x1aa}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) (async) 5.781403697s ago: executing program 5 (id=1749): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(0x0, 0x1a1342, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 5.781111807s ago: executing program 2 (id=1750): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="74617267f0861bf9bb17f2563a303a352e3000"], 0x13) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffea5, 0x1, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}]}, 0x12) recvmmsg(r6, 0x0, 0x0, 0x40000002, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28028bc9a8e7bf0923894f1b0042b7b6b700fc907320216a158b0582cbeccaf7961a50e10e8e59432d33d78adce28c20c078b0fa2f2816380e7282839a6a9ecf2256e98688f161f9b96288033c6a5f4aeccba1f5b71a969eb6603070de106679e4550408911f94f8de6710d17e323557069b655ba259", @ANYRES16=r7, @ANYBLOB="010000000000000000000300000014000180100001006574683a6970366772653000"], 0x28}}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000002f00)=""/4119, 0x1017}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x800}], 0x7, 0x40000100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r5, r8, r5]}}], 0x40, 0x4000801}, 0xd0) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 5.780409807s ago: executing program 3 (id=1751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40046305, 0x5}], 0x0, 0x0, 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x80, 0x180000) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004080) 3.969064863s ago: executing program 5 (id=1752): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300080b000000ff0e000000000000010009000000000002000600ff00000002"], 0x58}, 0x1, 0x7}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='read_timeout_ms=040000000006']) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 3.968853793s ago: executing program 2 (id=1753): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x1}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x3, 0x80}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000100)='rootfs\x00', 0x200000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDENABIO(r6, 0x4b36) 3.965837773s ago: executing program 3 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x87) fchdir(r3) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040884}, 0x10000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) r4 = getpgrp(0xffffffffffffffff) waitid(0x1, r4, &(0x7f00000000c0), 0x2, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x5}}]}) 2.03048082s ago: executing program 5 (id=1755): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fcntl$setpipe(r4, 0x407, 0x0) fcntl$setpipe(r4, 0x407, 0x10ae) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x180002) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) 2.029972981s ago: executing program 2 (id=1756): prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x80000}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) mkdirat(0xffffffffffffff9c, 0x0, 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[]) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x1010c0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) getsockopt(0xffffffffffffffff, 0x200, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) 2.02973365s ago: executing program 3 (id=1757): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) fchdir(r0) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x400, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 3.44161ms ago: executing program 5 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x2) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x32, 0xffffffffffffffff, 0x6931b000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4c8c0, &(0x7f0000000340), 0x10) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x220000, &(0x7f0000000500)={[{@size={'size', 0x3d, [0x67, 0x60, 0x6d, 0x32, 0x0, 0x32, 0x33, 0x25, 0x33, 0x70]}}, {@huge_advise}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65, 0x35, 0x36, 0x37, 0x39, 0x65, 0x37, 0x32, 0x74]}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x32]}}, {@grpquota}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0xe}}, {@obj_role={'obj_role', 0x3d, 'lowerdir'}}]}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000009080)=[{{0x0, 0x54, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4075, 0xfeb}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.13427ms ago: executing program 2 (id=1759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x4, 0x11, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r5, 0x2000001, 0x810, r3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 2.38927ms ago: executing program 3 (id=1760): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 0s ago: executing program 2 (id=1761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010005bd7000fbdbdaf431087f"], 0x14}, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 24.492178][ T36] audit: type=1400 audit(1757722952.390:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.493222][ T282] cgroup: Unknown subsys name 'net' [ 24.514845][ T36] audit: type=1400 audit(1757722952.400:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.542322][ T36] audit: type=1400 audit(1757722952.420:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.542575][ T282] cgroup: Unknown subsys name 'devices' [ 24.704215][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.709889][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.883322][ T36] audit: type=1400 audit(1757722952.790:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.907055][ T36] audit: type=1400 audit(1757722952.790:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.931789][ T36] audit: type=1400 audit(1757722952.790:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.960742][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.969553][ T36] audit: type=1400 audit(1757722952.870:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.995150][ T36] audit: type=1400 audit(1757722952.870:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.045234][ T36] audit: type=1400 audit(1757722952.950:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.070879][ T36] audit: type=1400 audit(1757722952.950:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.070932][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.923778][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.930852][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.938030][ T290] bridge_slave_0: entered allmulticast mode [ 25.944410][ T290] bridge_slave_0: entered promiscuous mode [ 25.957604][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964684][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.971796][ T290] bridge_slave_1: entered allmulticast mode [ 25.977999][ T290] bridge_slave_1: entered promiscuous mode [ 25.999747][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.006830][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.013964][ T289] bridge_slave_0: entered allmulticast mode [ 26.020139][ T289] bridge_slave_0: entered promiscuous mode [ 26.031425][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.038529][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.045637][ T289] bridge_slave_1: entered allmulticast mode [ 26.051800][ T289] bridge_slave_1: entered promiscuous mode [ 26.106357][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.113541][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.120594][ T291] bridge_slave_0: entered allmulticast mode [ 26.127004][ T291] bridge_slave_0: entered promiscuous mode [ 26.137249][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.144343][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.151428][ T292] bridge_slave_0: entered allmulticast mode [ 26.157652][ T292] bridge_slave_0: entered promiscuous mode [ 26.163917][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.171016][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.178194][ T292] bridge_slave_1: entered allmulticast mode [ 26.184614][ T292] bridge_slave_1: entered promiscuous mode [ 26.194139][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.201294][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.208492][ T291] bridge_slave_1: entered allmulticast mode [ 26.214865][ T291] bridge_slave_1: entered promiscuous mode [ 26.361260][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.368349][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.375793][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.383052][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.405736][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.412838][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.420130][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.427288][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.436727][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.443916][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.451295][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.458342][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.466675][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473749][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.481020][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.488061][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.525981][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.533385][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.540620][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.547959][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.555246][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.562594][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.569783][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.577146][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.600626][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.607721][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.617827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.624897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.636284][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.643478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.657059][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.664135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.683495][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.690559][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.698223][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.705279][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.723489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.731054][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.738857][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.745917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.786804][ T291] veth0_vlan: entered promiscuous mode [ 26.796376][ T290] veth0_vlan: entered promiscuous mode [ 26.809876][ T292] veth0_vlan: entered promiscuous mode [ 26.836410][ T290] veth1_macvtap: entered promiscuous mode [ 26.843480][ T289] veth0_vlan: entered promiscuous mode [ 26.850306][ T291] veth1_macvtap: entered promiscuous mode [ 26.864979][ T292] veth1_macvtap: entered promiscuous mode [ 26.896157][ T289] veth1_macvtap: entered promiscuous mode [ 26.914696][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.986153][ T337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.991098][ T342] fuse: Unknown parameter 'eoup_id' [ 27.004399][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.022258][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.022290][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.022948][ T336] rust_binder: Error while translating object. [ 27.033403][ T342] ======================================================= [ 27.033403][ T342] WARNING: The mand mount option has been deprecated and [ 27.033403][ T342] and is ignored by this kernel. Remove the mand [ 27.033403][ T342] option from the mount to silence this warning. [ 27.033403][ T342] ======================================================= [ 27.044629][ T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.059527][ T342] overlay: ./file0 is not a directory [ 27.084692][ T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.098466][ T345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.144148][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.150697][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 27.195421][ T340] rust_binder: Error while translating object. [ 27.206000][ T340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.212951][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.294906][ T367] rust_binder: inc_ref_done called when no active inc_refs [ 27.317801][ T369] PM: Enabling pm_trace changes system date and time during resume. [ 27.317801][ T369] PM: Correct system time has to be restored manually after resume. [ 27.382453][ T331] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.533193][ T331] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 27.541441][ T331] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 27.551606][ T331] usb 3-1: config 8 has no interface number 0 [ 27.557772][ T331] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 27.567890][ T331] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 27.582691][ T331] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 27.591735][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.599847][ T331] usb 3-1: Product: syz [ 27.604074][ T331] usb 3-1: Manufacturer: syz [ 27.608658][ T331] usb 3-1: SerialNumber: syz [ 27.817841][ T331] usb 3-1: USB disconnect, device number 2 [ 27.943205][ T373] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 27.989235][ T379] rust_binder: Error while translating object. [ 27.989271][ T379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.995633][ T379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 28.022203][ T381] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 28.072569][ T388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.204956][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.358361][ T46] tipc: Subscription rejected, illegal request [ 28.362176][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 28.373498][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 28.392150][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.404593][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 28.418034][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 28.427433][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.441480][ T31] usb 4-1: config 0 descriptor?? [ 28.455931][ T411] rust_binder: Error while translating object. [ 28.455983][ T411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.462306][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 28.838511][ T417] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 28.852346][ T31] uclogic 0003:28BD:0055.0001: interface is invalid, ignoring [ 29.377583][ T433] 9pnet_virtio: no channels available for device /dev/sg0 [ 29.385582][ T433] netlink: 5 bytes leftover after parsing attributes in process `syz.2.31'. [ 29.394654][ T433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 29.507591][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 29.507626][ T36] audit: type=1400 audit(1757722957.410:186): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.515887][ T446] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 29.538906][ T36] audit: type=1400 audit(1757722957.420:187): avc: denied { read } for pid=444 comm="syz.2.35" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.540782][ T445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 29.561264][ T36] audit: type=1400 audit(1757722957.420:188): avc: denied { open } for pid=444 comm="syz.2.35" path="net:[4026532464]" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.570737][ T447] netlink: 'syz.2.35': attribute type 13 has an invalid length. [ 29.593179][ T36] audit: type=1400 audit(1757722957.440:189): avc: denied { write } for pid=444 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.619948][ T36] audit: type=1400 audit(1757722957.510:190): avc: denied { setopt } for pid=444 comm="syz.2.35" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.646006][ T36] audit: type=1400 audit(1757722957.510:191): avc: denied { map } for pid=444 comm="syz.2.35" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.668896][ T36] audit: type=1400 audit(1757722957.550:192): avc: denied { setattr } for pid=448 comm="syz.2.36" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.693513][ T36] audit: type=1400 audit(1757722957.550:193): avc: denied { write } for pid=448 comm="syz.2.36" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.714074][ T36] audit: type=1400 audit(1757722957.550:194): avc: denied { unmount } for pid=448 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.733686][ T36] audit: type=1400 audit(1757722957.550:195): avc: denied { create } for pid=448 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 29.936187][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.982172][ T477] netlink: 'syz.2.45': attribute type 12 has an invalid length. [ 30.003968][ T482] rust_binder: Write failure EFAULT in pid:33 [ 30.034901][ T487] rust_binder: Error while translating object. [ 30.041181][ T487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.047883][ T487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:35 [ 30.082181][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.141085][ T497] Zero length message leads to an empty skb [ 30.332130][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.412116][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.562105][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 30.569070][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 30.577895][ T9] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 30.582118][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.586826][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 30.604784][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.615281][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.624390][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.632488][ T9] usb 2-1: Product: syz [ 30.636661][ T9] usb 2-1: Manufacturer: syz [ 30.641242][ T9] usb 2-1: SerialNumber: syz [ 30.722164][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.962134][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.026574][ T45] usb 4-1: USB disconnect, device number 2 [ 31.054466][ T9] usb 2-1: 0:2 : does not exist [ 31.061375][ T9] usb 2-1: USB disconnect, device number 2 [ 31.072304][ T31] usb usb1-port1: attempt power cycle [ 31.076562][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.422205][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.443286][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.573262][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.812145][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.833195][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.963306][ T31] usb 1-1: device descriptor read/8, error -71 [ 32.072264][ T31] usb usb1-port1: unable to enumerate USB device [ 32.097154][ T542] capability: warning: `syz.2.67' uses 32-bit capabilities (legacy support in use) [ 32.112161][ T544] can: request_module (can-proto-0) failed. [ 32.478612][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.486143][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.493601][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.501027][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.508510][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.515961][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.523820][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.531396][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.539060][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.546547][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.554029][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.561437][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.568882][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.576288][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.583743][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.591139][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.598594][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 32.606877][ T9] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 32.686494][ T566] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 32.722127][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.784231][ T579] can: request_module (can-proto-0) failed. [ 32.806721][ T582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.882089][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 32.891593][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.902006][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 32.919185][ T45] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 32.928615][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.936881][ T45] usb 2-1: Product: syz [ 32.941248][ T45] usb 2-1: Manufacturer: syz [ 32.946615][ T45] usb 2-1: SerialNumber: syz [ 32.958682][ T45] usb 2-1: config 0 descriptor?? [ 33.003326][ T603] netlink: 'syz.0.88': attribute type 27 has an invalid length. [ 33.064505][ T609] can: request_module (can-proto-0) failed. [ 33.157920][ T619] input: syz0 as /devices/virtual/input/input4 [ 33.732732][ T630] input: syz1 as /devices/virtual/input/input5 [ 33.753127][ T630] rust_binder: Write failure EFAULT in pid:40 [ 33.872327][ T641] can: request_module (can-proto-0) failed. [ 34.132139][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.272110][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 34.283187][ T45] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 34.291899][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.302115][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 34.311130][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.325248][ T45] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 34.334383][ T45] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 34.342524][ T45] usb 4-1: Product: syz [ 34.346771][ T45] usb 4-1: Manufacturer: syz [ 34.353250][ T45] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 34.423653][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 34.432270][ T31] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 1592, setting to 64 [ 34.443202][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.451365][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.460463][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.468521][ T31] usb 1-1: Product: 斍⽺꯻໎뇙㩇ꎲ瀵貮汁ￕ쇾퉝㐰႕턷齥㊛帕햬熪ᅛ➧ [ 34.478448][ T31] usb 1-1: Manufacturer: ခ [ 34.483088][ T31] usb 1-1: SerialNumber: 䇼Â灯㵪磴喀랾㒣세ߦ［ﱙ拣ꂦ喻 [ 34.493324][ T657] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.552983][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 34.553001][ T36] audit: type=1400 audit(1757722962.460:243): avc: denied { getopt } for pid=643 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.579480][ T645] rust_binder: Error while translating object. [ 34.580919][ T645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.587443][ T645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 34.588119][ T36] audit: type=1400 audit(1757722962.490:244): avc: denied { map } for pid=643 comm="syz.3.101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.630151][ T36] audit: type=1400 audit(1757722962.510:245): avc: denied { read write } for pid=643 comm="syz.3.101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.673627][ T45] usb 4-1: USB disconnect, device number 3 [ 35.005875][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 10 proto 1 vid 0x0525 pid 0xA4A8 [ 35.018027][ T31] usb 1-1: USB disconnect, device number 6 [ 35.025435][ T31] usblp0: removed [ 35.189699][ T673] can: request_module (can-proto-0) failed. [ 35.245106][ T677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.296980][ T678] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 35.304049][ T36] audit: type=1400 audit(1757722963.210:246): avc: denied { read } for pid=676 comm="syz.3.111" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.335173][ T36] audit: type=1400 audit(1757722963.210:247): avc: denied { open } for pid=676 comm="syz.3.111" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.358941][ T36] audit: type=1400 audit(1757722963.210:248): avc: denied { ioctl } for pid=676 comm="syz.3.111" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.488954][ T9] usb 2-1: USB disconnect, device number 3 [ 35.544580][ T36] audit: type=1400 audit(1757722963.440:249): avc: denied { getopt } for pid=683 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.572624][ T36] audit: type=1400 audit(1757722963.470:250): avc: denied { connect } for pid=685 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.600876][ T36] audit: type=1400 audit(1757722963.470:251): avc: denied { append } for pid=687 comm="syz.1.115" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.625441][ T36] audit: type=1400 audit(1757722963.470:252): avc: denied { ioctl } for pid=685 comm="syz.2.116" path="socket:[5002]" dev="sockfs" ino=5002 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.661701][ T694] can: request_module (can-proto-0) failed. [ 35.709382][ T699] fuse: Bad value for 'fd' [ 35.730630][ T705] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 35.825914][ T710] fuse: Bad value for 'fd' [ 35.957537][ T720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=720 comm=syz.2.128 [ 36.002774][ T730] 9pnet_fd: Insufficient options for proto=fd [ 36.131795][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 36.131831][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:60 [ 36.133025][ T745] Invalid ELF header magic: != ELF [ 36.195305][ T753] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 36.195587][ T751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.217360][ T751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.422138][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.512108][ T377] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.572137][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 36.578674][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.589875][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.602937][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.611965][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.620632][ T31] usb 1-1: config 0 descriptor?? [ 36.662170][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.682109][ T377] usb 2-1: Using ep0 maxpacket: 8 [ 36.688418][ T377] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.697533][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.706261][ T377] usb 2-1: config 0 descriptor?? [ 36.813229][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 36.824813][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 36.835795][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 36.845883][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.859365][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.864925][ T768] mmap: syz.2.143 (768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.869087][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.889882][ T45] usb 4-1: config 0 descriptor?? [ 36.912356][ T377] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 37.048248][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 37.056506][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6 [ 37.069973][ T31] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 37.301672][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.315892][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.324322][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.331733][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.339186][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.346715][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.354350][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.361928][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.369388][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.376809][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.384304][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.391705][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.399115][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.406749][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.414416][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 37.422138][ T45] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 37.431239][ T45] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 37.447451][ T45] usb 4-1: USB disconnect, device number 4 [ 37.742133][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.798196][ T789] overlay: ./file0 is not a directory [ 37.876177][ T751] overlayfs: missing 'lowerdir' [ 37.893327][ T45] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.902536][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.916087][ T9] usb 1-1: USB disconnect, device number 7 [ 37.925460][ T45] usb 4-1: config 0 descriptor?? [ 37.925882][ T802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 38.033650][ T819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.155'. [ 38.055719][ T821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.156'. [ 38.068703][ T821] overlayfs: failed to clone upperpath [ 38.176329][ T45] usb 4-1: Cannot read MAC address [ 38.182677][ T45] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 38.199406][ T45] usb 4-1: USB disconnect, device number 5 [ 38.315596][ T377] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 38.326134][ T377] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 38.337590][ T377] asix 2-1:0.0: probe with driver asix failed with error -71 [ 38.345871][ T377] usb 2-1: USB disconnect, device number 4 [ 38.474888][ T844] rust_binder: 843 RLIMIT_NICE not set [ 38.478295][ T9] rust_binder: 842: removing orphan mapping 0:4248 [ 38.615667][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.622778][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.629978][ T851] bridge_slave_0: entered allmulticast mode [ 38.636352][ T851] bridge_slave_0: entered promiscuous mode [ 38.643069][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.650320][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.657577][ T851] bridge_slave_1: entered allmulticast mode [ 38.664561][ T851] bridge_slave_1: entered promiscuous mode [ 38.670691][ T330] bridge_slave_1: left allmulticast mode [ 38.676402][ T330] bridge_slave_1: left promiscuous mode [ 38.682881][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.693147][ T330] bridge_slave_0: left allmulticast mode [ 38.698644][ T856] random: crng reseeded on system resumption [ 38.698850][ T330] bridge_slave_0: left promiscuous mode [ 38.712236][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.754233][ T861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.823797][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.837343][ T851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.844732][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.851798][ T851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.863330][ T330] veth1_macvtap: left promiscuous mode [ 38.869018][ T330] veth0_vlan: left promiscuous mode [ 38.905180][ T870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 38.905218][ T870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:63 [ 38.925847][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.945815][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.955970][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.963060][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.972289][ T861] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 38.981110][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.996203][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.027232][ T851] veth0_vlan: entered promiscuous mode [ 39.041389][ T851] veth1_macvtap: entered promiscuous mode [ 39.118098][ T883] rust_binder: Write failure EFAULT in pid:9 [ 39.118545][ T884] binder: Unknown parameter 'fscontext?}' [ 39.415433][ T905] netlink: 37 bytes leftover after parsing attributes in process `syz.4.181'. [ 39.450439][ T911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=911 comm=syz.4.182 [ 39.800568][ T62] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 39.823835][ T62] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.979478][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 39.979496][ T36] audit: type=1400 audit(1757722967.880:315): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.104735][ T36] audit: type=1400 audit(1757722968.010:316): avc: denied { ioctl } for pid=964 comm="syz.1.199" path="socket:[6914]" dev="sockfs" ino=6914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.142809][ T36] audit: type=1400 audit(1757722968.040:317): avc: denied { remount } for pid=964 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.184809][ T971] rust_binder: Write failure EFAULT in pid:108 [ 40.211553][ T36] audit: type=1400 audit(1757722968.110:318): avc: denied { getopt } for pid=974 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.246957][ T977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.247457][ T977] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 40.284546][ T984] rust_binder: Error while translating object. [ 40.292948][ T984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.299696][ T984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 40.376107][ T987] can0: slcan on ttyS3. [ 40.402198][ T36] audit: type=1400 audit(1757722968.290:319): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.444584][ T36] audit: type=1400 audit(1757722968.300:320): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.492093][ T36] audit: type=1400 audit(1757722968.300:321): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.530483][ T36] audit: type=1400 audit(1757722968.300:322): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.593261][ T36] audit: type=1400 audit(1757722968.300:323): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.618418][ T36] audit: type=1400 audit(1757722968.350:324): avc: denied { read } for pid=990 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.664556][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.687169][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.694720][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.702286][ T995] bridge_slave_0: entered allmulticast mode [ 40.715385][ T995] bridge_slave_0: entered promiscuous mode [ 40.722558][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.729642][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.737057][ T995] bridge_slave_1: entered allmulticast mode [ 40.743754][ T995] bridge_slave_1: entered promiscuous mode [ 40.822112][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 40.828394][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.840645][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 40.852405][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.859551][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.866892][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.873965][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.883257][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.892607][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.894101][ T1034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 40.900622][ T45] usb 4-1: Product: syz [ 40.900642][ T45] usb 4-1: Manufacturer: syz [ 40.918782][ T45] usb 4-1: SerialNumber: syz [ 40.923533][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.933309][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.940758][ T45] usb 4-1: config 0 descriptor?? [ 40.952407][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.959481][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.969537][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.976625][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.007966][ T1046] exFAT-fs (rnullb0): invalid boot record signature [ 41.017278][ T995] veth0_vlan: entered promiscuous mode [ 41.027472][ T1046] exFAT-fs (rnullb0): failed to read boot sector [ 41.033076][ T995] veth1_macvtap: entered promiscuous mode [ 41.033869][ T1046] exFAT-fs (rnullb0): failed to recognize exfat type [ 41.074720][ T1054] rust_binder: 1054 RLIMIT_NICE not set [ 41.123582][ T62] rust_binder: 1050: removing orphan mapping 0:1048 [ 41.151006][ T9] usb 4-1: USB disconnect, device number 6 [ 41.193711][ T987] can0 (unregistered): slcan off ttyS3. [ 41.372108][ T62] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 41.512090][ T62] usb 6-1: device descriptor read/64, error -71 [ 41.563504][ T1089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.563539][ T1089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:65 [ 41.572566][ T1091] overlayfs: failed to clone upperpath [ 41.739281][ T1108] can: request_module (can-proto-0) failed. [ 41.752220][ T62] usb 6-1: device descriptor read/64, error -71 [ 42.002107][ T62] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 42.132111][ T62] usb 6-1: device descriptor read/64, error -71 [ 42.322874][ T1139] can: request_module (can-proto-0) failed. [ 42.383352][ T62] usb 6-1: device descriptor read/64, error -71 [ 42.492180][ T62] usb usb6-port1: attempt power cycle [ 42.603400][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.603434][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 42.777952][ T1166] can: request_module (can-proto-0) failed. [ 42.832166][ T62] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 42.853203][ T62] usb 6-1: device descriptor read/8, error -71 [ 42.870806][ T1169] rust_binder: Write failure EFAULT in pid:145 [ 42.992494][ T62] usb 6-1: device descriptor read/8, error -71 [ 43.252274][ T62] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 43.283275][ T62] usb 6-1: device descriptor read/8, error -71 [ 43.413252][ T62] usb 6-1: device descriptor read/8, error -71 [ 43.532735][ T62] usb usb6-port1: unable to enumerate USB device [ 43.921892][ T1198] can: request_module (can-proto-0) failed. [ 43.995195][ T1201] rust_binder: Failed to allocate buffer. len:1072, is_oneway:true [ 44.029276][ T1204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.047905][ T1204] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 44.121738][ T1206] rust_binder: Error while translating object. [ 44.139024][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.155454][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 44.309614][ T1222] can: request_module (can-proto-0) failed. [ 44.416599][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.443611][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.782089][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.939917][ T1233] can0: slcan on ttyS3. [ 44.973592][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.994050][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.022107][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.052187][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.061261][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.096525][ T9] usb 5-1: config 0 descriptor?? [ 45.223448][ T45] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 45.392243][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 45.398716][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.412315][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 45.433054][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.451959][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.460215][ T45] usb 6-1: Product: syz [ 45.482113][ T45] usb 6-1: Manufacturer: syz [ 45.486793][ T45] usb 6-1: SerialNumber: syz [ 45.507195][ T45] usb 6-1: config 0 descriptor?? [ 45.515754][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 45.546127][ T9] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 45.570935][ T9] usb 5-1: USB disconnect, device number 2 [ 45.605224][ T1278] fido_id[1278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 45.712121][ T1284] can: request_module (can-proto-0) failed. [ 46.106517][ T1304] can0 (unregistered): slcan off ttyS3. [ 46.218808][ T1317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.219937][ T1317] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 46.276746][ T1327] binder: Bad value for 'stats' [ 46.332234][ T1333] can: request_module (can-proto-0) failed. [ 46.471073][ T1352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.473376][ T1352] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 46.692090][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.842092][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 46.864965][ T45] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 46.878891][ T45] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 46.899254][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 46.923762][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 46.942078][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 46.954434][ T45] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 46.963584][ T45] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 46.971590][ T45] usb 4-1: Product: syz [ 46.976753][ T45] usb 4-1: Manufacturer: syz [ 46.985018][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 46.992069][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 46.998142][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 47.003655][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.004145][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 47.015399][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 47.034351][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 47.047846][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.063870][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.073213][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.081230][ T9] usb 5-1: Product: syz [ 47.088222][ T1375] can: request_module (can-proto-0) failed. [ 47.092334][ T9] usb 5-1: Manufacturer: syz [ 47.102118][ T9] usb 5-1: SerialNumber: syz [ 47.203834][ T45] usb 4-1: USB disconnect, device number 7 [ 47.253492][ T1384] binder: Bad value for 'max' [ 47.312579][ T1362] rust_binder: Read failure Err(EFAULT) in pid:130 [ 47.355597][ T9] usb 5-1: 0:2 : does not exist [ 47.369889][ T9] usb 5-1: USB disconnect, device number 3 [ 47.378044][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.434997][ T45] usb 6-1: USB disconnect, device number 6 [ 47.451002][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 47.451018][ T36] audit: type=1400 audit(1757722975.350:351): avc: denied { create } for pid=1387 comm="syz.5.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 47.494611][ T36] audit: type=1400 audit(1757722975.400:352): avc: denied { bind } for pid=1394 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.574137][ T1397] fuse: Bad value for 'fd' [ 47.596555][ T1400] can: request_module (can-proto-0) failed. [ 47.808194][ T36] audit: type=1400 audit(1757722975.710:353): avc: denied { ioctl } for pid=1404 comm="syz.2.306" path="socket:[8814]" dev="sockfs" ino=8814 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.853153][ T515] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.862342][ T515] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.946494][ T1415] overlayfs: failed to clone upperpath [ 47.954002][ T36] audit: type=1400 audit(1757722975.860:354): avc: denied { write } for pid=1414 comm="syz.2.309" name="file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.013273][ T36] audit: type=1400 audit(1757722975.860:355): avc: denied { open } for pid=1414 comm="syz.2.309" path="/138/bus/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.043115][ T36] audit: type=1400 audit(1757722975.890:356): avc: denied { ioctl } for pid=1414 comm="syz.2.309" path="/138/bus/file0" dev="tmpfs" ino=776 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.836199][ T36] audit: type=1400 audit(1757722976.740:357): avc: denied { append } for pid=1458 comm="syz.5.323" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.896367][ T1467] can: request_module (can-proto-0) failed. [ 48.961849][ T36] audit: type=1400 audit(1757722976.860:358): avc: denied { shutdown } for pid=1473 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.981922][ T36] audit: type=1400 audit(1757722976.860:359): avc: denied { setopt } for pid=1473 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.987500][ T1472] overlayfs: missing 'lowerdir' [ 49.008558][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.016954][ T1478] incfs: mount failed -22 [ 49.017663][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.026172][ T1478] incfs: mount failed -22 [ 49.034466][ T1478] incfs: mount failed -22 [ 49.038951][ T1478] incfs: mount failed -22 [ 49.044332][ T1478] incfs: mount failed -22 [ 49.052317][ T1478] incfs: mount failed -22 [ 49.056953][ T1478] incfs: mount failed -22 [ 49.061456][ T1478] incfs: mount failed -22 [ 49.066314][ T1478] incfs: mount failed -22 [ 49.070858][ T1478] incfs: mount failed -22 [ 49.075582][ T1478] incfs: mount failed -22 [ 49.075825][ T36] audit: type=1400 audit(1757722976.970:360): avc: denied { append } for pid=1476 comm="syz.4.330" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.080137][ T1478] incfs: mount failed -22 [ 49.105235][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 49.108125][ T1478] incfs: mount failed -22 [ 49.120143][ T1478] incfs: mount failed -22 [ 49.124627][ T1478] incfs: mount failed -22 [ 49.212468][ T1495] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 49.611491][ T1500] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 9 [ 49.619820][ T1500] rust_binder: 45: no such ref 1 [ 49.624988][ T1500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 49.632101][ T1500] rust_binder: 45: no such ref 1 [ 49.637232][ T1500] rust_binder: Write failure EINVAL in pid:45 [ 49.783477][ T1518] rust_binder: 60: no such ref 0 [ 49.795156][ T1518] rust_binder: 60: no such ref 0 [ 49.886445][ T1527] rust_binder: Error while translating object. [ 49.886496][ T1527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.892973][ T1527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 50.042178][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.077355][ T1542] syz.5.347 (1542): attempted to duplicate a private mapping with mremap. This is not supported. [ 50.094150][ T1545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.094509][ T1545] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 50.225562][ T1553] rust_binder: Write failure EFAULT in pid:187 [ 50.242149][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.310027][ T332] kernel read not supported for file inotify (pid: 332 comm: kworker/0:3) [ 50.413252][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 50.421612][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.433680][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.444935][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 50.456394][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.469645][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.478877][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.488277][ T9] usb 5-1: config 0 descriptor?? [ 50.493688][ T1540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 50.562139][ T332] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 50.592112][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.713135][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.724100][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.733879][ T332] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.742965][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.751947][ T332] usb 6-1: config 0 descriptor?? [ 50.755723][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 50.767165][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.782079][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.791308][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.799369][ T45] usb 4-1: Product: syz [ 50.803578][ T45] usb 4-1: Manufacturer: syz [ 50.808198][ T45] usb 4-1: SerialNumber: syz [ 50.904519][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 50.913235][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 50.922329][ T9] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 51.018032][ T1562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.026656][ T1562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.036770][ T45] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 51.043696][ T45] cdc_ncm 4-1:1.0: bind() failure [ 51.050765][ T45] usb 4-1: USB disconnect, device number 8 [ 51.164084][ T1540] rust_binder: Read failure Err(EFAULT) in pid:152 [ 51.559434][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.574811][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.687705][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.687888][ T1573] rust_binder: Error while translating object. [ 51.694483][ T1573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 51.700725][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 51.715198][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 51.736311][ T1576] netlink: 'syz.4.362': attribute type 13 has an invalid length. [ 51.783401][ T31] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 51.791424][ T31] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 51.801725][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.809358][ T1584] fido_id[1584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.962287][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 51.963167][ T1591] pim6reg1: entered promiscuous mode [ 51.968613][ T45] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 51.973044][ T1591] pim6reg1: entered allmulticast mode [ 51.981584][ T45] usb 4-1: config 0 has no interface number 0 [ 51.988175][ T332] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0009/input/input10 [ 52.000673][ T45] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 52.005541][ T332] uclogic 0003:256C:006D.0009: input,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 52.023569][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.035357][ T45] usb 4-1: Product: syz [ 52.040947][ T45] usb 4-1: Manufacturer: syz [ 52.045831][ T45] usb 4-1: SerialNumber: syz [ 52.051009][ T45] usb 4-1: config 0 descriptor?? [ 52.142630][ T1596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1596 comm=syz.4.368 [ 52.168153][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.169272][ T1599] rust_binder: Error while translating object. [ 52.175857][ T1599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 52.182123][ T1599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 52.191562][ T1599] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.200120][ T515] usb 6-1: USB disconnect, device number 8 [ 52.200972][ T1599] rust_binder: Read failure Err(EFAULT) in pid:182 [ 52.262203][ T45] usb 4-1: USB disconnect, device number 9 [ 52.352136][ T332] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 52.508868][ T1606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.511926][ T1606] can: request_module (can-proto-0) failed. [ 52.835312][ T1617] veth0_virt_wifi: entered allmulticast mode [ 52.916273][ T1617] veth0_virt_wifi: left allmulticast mode [ 52.975538][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 52.975557][ T36] audit: type=1400 audit(1757722980.880:368): avc: denied { ioctl } for pid=1626 comm="syz.3.377" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.035320][ T1629] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 53.052458][ T1624] binder: Unknown parameter 'defcontext01777777777777777777777' [ 53.065473][ T36] audit: type=1400 audit(1757722980.960:369): avc: denied { remount } for pid=1623 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.086626][ T1632] overlayfs: missing 'lowerdir' [ 53.180626][ T1635] fuse: Bad value for 'fd' [ 53.189193][ T1640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.241115][ T1641] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.241143][ T1641] rust_binder: Read failure Err(EFAULT) in pid:94 [ 53.280771][ T1658] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 53.356113][ T1640] cgroup: fork rejected by pids controller in /syz5 [ 53.537341][ T1692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.588947][ T1694] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 53.597221][ T1695] rust_binder: 1693 RLIMIT_NICE not set [ 53.607268][ T1693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.613527][ T1693] rust_binder: Error while translating object. [ 53.630305][ T1693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 53.636710][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:130 [ 53.650358][ T1693] rust_binder: 130: no such ref 3 [ 53.664625][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 53.670774][ T31] rust_binder: 1691: removing orphan mapping 0:4248 [ 53.770834][ T36] audit: type=1400 audit(1757722981.670:370): avc: denied { read } for pid=1712 comm="syz.4.394" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.794058][ T36] audit: type=1400 audit(1757722981.670:371): avc: denied { open } for pid=1712 comm="syz.4.394" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.795259][ T1713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.823360][ T36] audit: type=1400 audit(1757722981.730:372): avc: denied { lock } for pid=1712 comm="syz.4.394" path="socket:[11761]" dev="sockfs" ino=11761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 53.893159][ T1723] overlayfs: missing 'lowerdir' [ 53.921005][ T1721] kvm: user requested TSC rate below hardware speed [ 53.928454][ T1721] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 53.937115][ T1721] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 54.008847][ T1725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.017486][ T1725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.028746][ T1725] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 54.028772][ T1725] rust_binder: Error while translating object. [ 54.039553][ T1725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.046377][ T1725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 54.410086][ T36] audit: type=1400 audit(1757722982.310:373): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.513409][ T1746] rust_binder: 1746 RLIMIT_NICE not set [ 54.514083][ T1746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 54.530412][ T1746] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 54.540307][ T1746] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:140 [ 54.568713][ T31] rust_binder: 1745: removing orphan mapping 0:1048 [ 54.617965][ T1760] cgroup: Bad value for 'name' [ 54.623686][ T1760] rust_binder: Write failure EFAULT in pid:144 [ 54.647368][ T1767] rust_binder: Error in use_page_slow: ESRCH [ 54.647387][ T1767] rust_binder: use_range failure ESRCH [ 54.659036][ T1767] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 54.659101][ T1767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.667511][ T1767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:232 [ 55.365476][ T1814] 9pnet_fd: Insufficient options for proto=fd [ 55.493463][ T1824] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.772118][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.923290][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.939746][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.951632][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.967135][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.976549][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.990512][ T9] usb 4-1: config 0 descriptor?? [ 56.198821][ T9] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 56.218396][ T9] plantronics 0003:047F:FFFF.000B: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 56.242516][ T9] usb 4-1: USB disconnect, device number 10 [ 56.264602][ T1839] fido_id[1839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 57.162864][ T1854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.170882][ T36] audit: type=1400 audit(1757722985.070:374): avc: denied { watch } for pid=1853 comm="syz.3.441" path="/82/file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.216035][ T1859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.301168][ T1863] netlink: 64 bytes leftover after parsing attributes in process `syz.4.443'. [ 57.317642][ T1864] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 57.358001][ T1870] binder: Bad value for 'max' [ 57.385961][ T1872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.395403][ T1873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.396194][ T1872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.413711][ T1873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.532112][ T332] usb 5-1: device descriptor read/64, error -110 [ 57.675784][ T1878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.684994][ T1878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.772093][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.012089][ T332] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 58.152108][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.259537][ T1883] can: request_module (can-proto-0) failed. [ 58.402107][ T332] usb 5-1: device descriptor read/64, error -32 [ 58.593720][ T332] raw-gadget.0 gadget.4: failed to queue resume event [ 58.652109][ T332] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 58.682258][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.689533][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.696859][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.704049][ T332] usb 5-1: device descriptor read/8, error -32 [ 58.756292][ T1962] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 58.795612][ T1962] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=65537 (262148 ns) > initial count (28 ns). Using initial count to start timer. [ 58.842372][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.849676][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.857057][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 58.864315][ T332] usb 5-1: device descriptor read/8, error -32 [ 58.972129][ T332] raw-gadget.0 gadget.4: failed to queue suspend event [ 58.979304][ T332] raw-gadget.0 gadget.4: failed to queue reset event [ 59.055998][ T1970] fuse: Bad value for 'fd' [ 59.062777][ T332] raw-gadget.0 gadget.4: failed to queue resume event [ 59.112233][ T1977] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 59.132092][ T332] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 59.152247][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.159586][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.167353][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.174558][ T332] usb 5-1: device descriptor read/8, error -32 [ 59.201807][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.210995][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.220824][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.229983][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.240034][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.248801][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.302280][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.309812][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.317162][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.324290][ T332] usb 5-1: device descriptor read/8, error -32 [ 59.432159][ T332] raw-gadget.0 gadget.4: failed to queue suspend event [ 59.439240][ T1551] usb 5-1: USB disconnect, device number 4 [ 59.447699][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 59.522139][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 59.582097][ T1551] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.589947][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.597268][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.606916][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.614065][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 59.663488][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.663522][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.670075][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.670074][ T2014] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 59.670100][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.691080][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 59.691151][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.704397][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.710824][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.717323][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.723818][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.730230][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.736754][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.743201][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.749613][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.756072][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.762087][ T1551] usb 5-1: device descriptor read/64, error -32 [ 59.762778][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.775642][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.782450][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.789123][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.797162][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.803853][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.810324][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.816992][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.823588][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.830023][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.836652][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.843203][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.849628][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.856062][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.862726][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.869452][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.875931][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.882255][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.882629][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.889241][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.895856][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.902738][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 59.909280][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.915897][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 59.922714][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.935839][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.943907][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.950611][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.958183][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.964723][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.971276][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.977860][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.984530][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.990992][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.997633][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.002094][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 60.004317][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.026085][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.032664][ T2023] can: request_module (can-proto-0) failed. [ 60.048415][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.048442][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.055050][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.061497][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.078987][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.082077][ T1551] usb 5-1: device descriptor read/64, error -32 [ 60.085719][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.097573][ T2032] overlayfs: failed to clone upperpath [ 60.098792][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.110423][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.117683][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.124208][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.132017][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.138505][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.145005][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.151432][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.157939][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.164737][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.171312][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.178065][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.208941][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.218543][ T1551] raw-gadget.0 gadget.4: failed to queue suspend event [ 60.232185][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.232213][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.241369][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 60.254997][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.255026][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.261761][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.268679][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.274958][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.281521][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.288365][ T2045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.296395][ T2047] fuse: Bad value for 'fd' [ 60.330569][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 60.349860][ T36] audit: type=1400 audit(1757722988.250:375): avc: denied { write } for pid=2050 comm="syz.3.485" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.374897][ T36] audit: type=1400 audit(1757722988.280:376): avc: denied { mount } for pid=2051 comm="syz.5.486" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 60.400615][ T2058] syzkaller0: entered allmulticast mode [ 60.402104][ T1551] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.407082][ T2059] syzkaller0: entered promiscuous mode [ 60.423238][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.430635][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.440766][ T2058] syzkaller0 (unregistering): left promiscuous mode [ 60.445241][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.449671][ T2058] syzkaller0 (unregistering): left allmulticast mode [ 60.454629][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 60.486046][ T36] audit: type=1400 audit(1757722988.390:377): avc: denied { append } for pid=2069 comm="syz.3.491" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.532161][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 60.556273][ T36] audit: type=1400 audit(1757722988.460:378): avc: denied { setattr } for pid=2073 comm="syz.5.492" name="AF_VSOCK" dev="sockfs" ino=13663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.592206][ T1551] usb 5-1: device descriptor read/64, error -32 [ 60.618954][ T36] audit: type=1326 audit(1757722988.520:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714738eba9 code=0x7fc00000 [ 60.713626][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.721175][ T2092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.729798][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.743687][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 60.750837][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 60.773532][ T2099] rust_binder: 287: no such ref 0 [ 60.826841][ T2099] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 60.832093][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 60.834204][ T2099] rust_binder: Write failure EINVAL in pid:287 [ 60.843222][ T2099] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 60.856650][ T2099] rust_binder: Write failure EINVAL in pid:287 [ 60.896497][ T2102] input: syz1 as /devices/virtual/input/input12 [ 60.909060][ T1551] usb 5-1: device descriptor read/64, error -32 [ 60.975174][ T2114] rust_binder: Write failure EFAULT in pid:294 [ 61.013589][ T2117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 61.019811][ T2117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:262 [ 61.032142][ T1551] raw-gadget.0 gadget.4: failed to queue suspend event [ 61.052542][ T1551] usb usb5-port1: attempt power cycle [ 61.057969][ T1551] raw-gadget.0 gadget.4: failed to queue disconnect event [ 61.060270][ T2120] rust_binder: 2120 RLIMIT_NICE not set [ 61.065443][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 61.081204][ T31] rust_binder: 2119: removing orphan mapping 0:1168 [ 61.099831][ T36] audit: type=1400 audit(1757722989.000:380): avc: denied { name_bind } for pid=2123 comm="syz.4.509" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.142153][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 61.150469][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 61.172097][ T2126] loop4: detected capacity change from 0 to 8388608 [ 61.209480][ T2128] can: request_module (can-proto-0) failed. [ 61.330325][ T2141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.354393][ T2141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.365718][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 61.393209][ T36] audit: type=1326 audit(1757722989.300:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2143 comm="syz.2.515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cd058eba9 code=0x0 [ 61.432091][ T1551] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.462267][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.469577][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.477048][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.484372][ T1551] usb 5-1: device descriptor read/8, error -32 [ 61.612230][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.619508][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.626929][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.634134][ T1551] usb 5-1: device descriptor read/8, error -32 [ 61.729759][ T2151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 61.742230][ T1551] raw-gadget.0 gadget.4: failed to queue suspend event [ 61.754708][ T1551] raw-gadget.0 gadget.4: failed to queue reset event [ 61.782875][ T36] audit: type=1400 audit(1757722989.690:382): avc: denied { accept } for pid=2156 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.832106][ T1551] raw-gadget.0 gadget.4: failed to queue resume event [ 61.892112][ T1551] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.922666][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.930134][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.937468][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 61.954661][ T1551] usb 5-1: device descriptor read/8, error -32 [ 62.102303][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 62.109585][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 62.116988][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 62.124434][ T1551] usb 5-1: device descriptor read/8, error -32 [ 62.210370][ T2194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 62.212233][ T2194] rust_binder: Read failure Err(EAGAIN) in pid:290 [ 62.221929][ T2194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 62.232116][ T1551] raw-gadget.0 gadget.4: failed to queue suspend event [ 62.255302][ T36] audit: type=1400 audit(1757722990.150:383): avc: denied { getopt } for pid=2197 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.275262][ T1551] usb usb5-port1: unable to enumerate USB device [ 62.413810][ T2209] rust_binder: Write failure EFAULT in pid:298 [ 62.425745][ T2212] netlink: 72 bytes leftover after parsing attributes in process `syz.4.537'. [ 62.454623][ T2214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.455098][ T2214] rust_binder: 303: no such ref 3 [ 62.467383][ T2214] rust_binder: Write failure EINVAL in pid:303 [ 62.534897][ T2220] incfs_lookup_dentry err:-13 [ 62.546015][ T2220] incfs: Can't find or create .index dir in ./bus [ 62.552547][ T2220] incfs: mount failed -13 [ 62.593174][ T2222] sock: sock_timestamping_bind_phc: sock not bind to device [ 62.629369][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.545'. [ 62.712491][ T2241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.721375][ T2241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.932136][ T1827] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 63.083285][ T1827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.094270][ T1827] usb 4-1: too many endpoints for config 1 interface 1 altsetting 126: 79, using maximum allowed: 30 [ 63.105198][ T1827] usb 4-1: config 1 interface 1 altsetting 126 has 2 endpoint descriptors, different from the interface descriptor's value: 79 [ 63.118450][ T1827] usb 4-1: config 1 interface 1 has no altsetting 1 [ 63.126594][ T1827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.135838][ T1827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.143881][ T1827] usb 4-1: Product: syz [ 63.148188][ T1827] usb 4-1: Manufacturer: syz [ 63.152840][ T1827] usb 4-1: SerialNumber: syz [ 63.159733][ T1827] usb 4-1: selecting invalid altsetting 1 [ 63.174509][ T36] audit: type=1400 audit(1757722991.080:384): avc: denied { read } for pid=2254 comm="syz.5.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.200968][ T2258] overlayfs: failed to clone upperpath [ 63.259415][ T2272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.268375][ T2272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.559168][ T1827] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 63.567014][ T1827] cdc_ncm 4-1:1.0: bind() failure [ 63.575144][ T1827] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 63.582465][ T1827] cdc_ncm 4-1:1.1: bind() failure [ 63.806350][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.815698][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.245689][ T2310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.572'. [ 64.262442][ T2314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.262658][ T2314] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 64.280926][ T1551] usb 4-1: USB disconnect, device number 11 [ 64.297908][ T2321] /dev/md0: Can't lookup blockdev [ 64.420301][ T2328] rust_binder: Error while translating object. [ 64.420336][ T2328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.426701][ T2328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 64.437302][ T2329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.622711][ T2337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.630515][ T2337] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 64.690179][ T2337] rust_binder: Read failure Err(EAGAIN) in pid:336 [ 64.734215][ T2348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.742305][ T2348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.749145][ T2347] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 64.756733][ T2347] usb usb8: usbfs: process 2347 (syz.3.585) did not claim interface 0 before use [ 64.812104][ T2352] can: request_module (can-proto-0) failed. [ 64.832173][ T2361] overlayfs: failed to clone upperpath [ 64.834411][ T2362] overlayfs: failed to clone upperpath [ 64.881796][ T2359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.889021][ T2359] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 64.999749][ T2390] can: request_module (can-proto-0) failed. [ 65.036381][ T1913] tipc: Subscription rejected, illegal request [ 65.146333][ T2409] process 'syz.4.606' launched './file0' with NULL argv: empty string added [ 65.266513][ T62] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 65.287255][ T2438] incfs: Options parsing error. -22 [ 65.289134][ T62] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.302137][ T2438] incfs: mount failed -22 [ 65.307642][ T2438] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 65.340018][ T2446] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 65.353834][ T2448] veth0: entered promiscuous mode [ 65.364394][ T2448] veth0: left promiscuous mode [ 65.390189][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 65.390208][ T36] audit: type=1400 audit(1757722993.290:398): avc: denied { ioctl } for pid=2451 comm="syz.2.621" path="socket:[13238]" dev="sockfs" ino=13238 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.840646][ T36] audit: type=1400 audit(1757722993.740:399): avc: denied { unlink } for pid=995 comm="syz-executor" name="file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 66.092256][ T2469] rust_binder: Got transaction with invalid offset. [ 66.092305][ T2469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.098989][ T2469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 66.158689][ T2478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.174916][ T36] audit: type=1400 audit(1757722994.080:400): avc: denied { append } for pid=2470 comm="syz.3.628" name="file0" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.177115][ T2478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.366814][ T36] audit: type=1400 audit(1757722994.270:401): avc: denied { create } for pid=2497 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.418854][ T36] audit: type=1400 audit(1757722994.320:402): avc: denied { search } for pid=2508 comm="syz.5.642" name="/" dev="configfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.441089][ T36] audit: type=1400 audit(1757722994.350:403): avc: denied { read } for pid=2508 comm="syz.5.642" name="/" dev="configfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.468986][ T36] audit: type=1400 audit(1757722994.350:404): avc: denied { open } for pid=2508 comm="syz.5.642" path="/" dev="configfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.494638][ T36] audit: type=1400 audit(1757722994.400:405): avc: denied { mounton } for pid=2489 comm="syz.3.636" path="/proc/364/task" dev="proc" ino=13283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 66.732520][ T36] audit: type=1400 audit(1757722994.640:406): avc: denied { getopt } for pid=2522 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.786775][ T2525] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 66.786802][ T2525] rust_binder: Error while translating object. [ 66.795749][ T2525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.802351][ T2525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 66.825223][ T2532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.885771][ T2535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 67.372096][ T45] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 67.533158][ T45] usb 4-1: No LPM exit latency info found, disabling LPM. [ 67.541335][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.550368][ T45] usb 4-1: config 1 has no interface number 1 [ 67.556507][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 67.569329][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 67.582124][ T45] usb 4-1: string descriptor 0 read error: -22 [ 67.588377][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.597537][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.607343][ T45] usb 4-1: low speed audio streaming not supported [ 67.815027][ T2544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.823730][ T2544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.833141][ T62] usb 4-1: USB disconnect, device number 12 [ 68.156077][ T2566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.661'. [ 68.695982][ T2584] fuse: Bad value for 'fd' [ 69.208244][ T36] audit: type=1400 audit(1757722997.110:407): avc: denied { getattr } for pid=2607 comm="syz.3.676" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.239593][ T2608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.239830][ T2608] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 69.255074][ T2608] rust_binder: Read failure Err(EAGAIN) in pid:388 [ 69.272461][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 69.560548][ T2641] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 69.577922][ T2641] netlink: 160 bytes leftover after parsing attributes in process `syz.5.688'. [ 69.588185][ T2651] fuse: Unknown parameter 'group' [ 69.666367][ T2668] fuse: Bad value for 'rootmode' [ 69.666907][ T2666] rust_binder: Write failure EFAULT in pid:395 [ 69.718889][ T2687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.776265][ T2702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.798314][ T2702] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 69.864075][ T2718] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 69.881151][ T2717] tipc: Enabling of bearer rejected, failed to enable media [ 69.978704][ T2732] 9pnet_fd: Insufficient options for proto=fd [ 70.013940][ T2736] futex_wake_op: syz.5.721 tries to shift op by 32; fix this program [ 70.042315][ T2740] cgroup: none used incorrectly [ 70.081408][ T2747] can: request_module (can-proto-0) failed. [ 70.507387][ T2758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.508412][ T2758] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 70.522544][ T2758] rust_binder: Write failure EINVAL in pid:380 [ 70.533298][ T2761] rust_binder: Error while translating object. [ 70.539514][ T2761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 70.545953][ T2761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:383 [ 70.566708][ T2763] binder: Unknown parameter '0x0000000000000004' [ 70.607267][ T2768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.616400][ T2768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.634860][ T2768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.646635][ T2768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.654453][ T2774] can: request_module (can-proto-0) failed. [ 70.958764][ T2794] tmpfs: Unknown parameter '0x0000000000000003000000000000000000030177777777777777777777700000000000000000003' [ 70.977771][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 70.977788][ T36] audit: type=1326 audit(1757722998.880:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd058eba9 code=0x7fc00000 [ 71.291716][ T2804] can: request_module (can-proto-0) failed. [ 71.378778][ T2808] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.744' sets config #-1 [ 71.432840][ T2811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.433135][ T2811] rust_binder: 405: no such ref 0 [ 71.445608][ T36] audit: type=1400 audit(1757722999.350:415): avc: denied { create } for pid=2810 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 71.446546][ T2811] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.478363][ T2811] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.535077][ T2828] /dev/loop0: Can't lookup blockdev [ 71.554998][ T2831] /dev/loop0: Can't lookup blockdev [ 71.586687][ T2835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.587049][ T2835] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 71.645538][ T2837] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 71.788540][ T36] audit: type=1400 audit(1757722999.690:416): avc: denied { bind } for pid=2839 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.050374][ T2861] overlay: Unknown parameter 'func' [ 72.176183][ T36] audit: type=1400 audit(1757723000.080:417): avc: denied { map } for pid=2867 comm="syz.2.766" path="socket:[17557]" dev="sockfs" ino=17557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 72.226356][ T36] audit: type=1400 audit(1757723000.130:418): avc: denied { relabelfrom } for pid=2871 comm="syz.2.768" name="NETLINK" dev="sockfs" ino=17569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.274332][ T36] audit: type=1400 audit(1757723000.130:419): avc: denied { relabelto } for pid=2871 comm="syz.2.768" name="NETLINK" dev="sockfs" ino=17569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 72.322936][ T36] audit: type=1400 audit(1757723000.130:420): avc: denied { relabelto } for pid=2871 comm="syz.2.768" name="NETLINK" dev="sockfs" ino=17569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 72.370737][ T36] audit: type=1400 audit(1757723000.130:421): avc: denied { ioctl } for pid=2871 comm="syz.2.768" path="socket:[17569]" dev="sockfs" ino=17569 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 72.479265][ T36] audit: type=1400 audit(1757723000.380:422): avc: denied { read write } for pid=2886 comm="syz.3.774" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.512073][ T36] audit: type=1400 audit(1757723000.380:423): avc: denied { open } for pid=2886 comm="syz.3.774" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.600572][ T2902] /dev/rnullb0: Can't open blockdev [ 72.638361][ T2907] rust_binder: Write failure EFAULT in pid:449 [ 72.639819][ T2907] rust_binder: Write failure EFAULT in pid:449 [ 72.657892][ T2914] TCP: TCP_TX_DELAY enabled [ 72.982092][ T515] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 73.132078][ T515] usb 4-1: Using ep0 maxpacket: 32 [ 73.138361][ T515] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 73.146623][ T515] usb 4-1: config 0 has no interface number 0 [ 73.152858][ T515] usb 4-1: config 0 interface 196 altsetting 1 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 73.164678][ T515] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.174624][ T515] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.184536][ T515] usb 4-1: config 0 interface 196 has no altsetting 0 [ 73.192950][ T515] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 73.202164][ T515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.210145][ T515] usb 4-1: Product: syz [ 73.214335][ T515] usb 4-1: Manufacturer: syz [ 73.218955][ T515] usb 4-1: SerialNumber: syz [ 73.224187][ T515] usb 4-1: config 0 descriptor?? [ 73.289335][ T2933] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 73.351392][ T2947] binder: Unknown parameter 'fscontext?}' [ 73.443433][ T515] ipheth 4-1:0.196: Unable to find endpoints [ 73.457468][ T515] usb 4-1: USB disconnect, device number 13 [ 73.523584][ T2961] overlayfs: conflicting lowerdir path [ 73.603828][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.612510][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.655894][ T2948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49885 sclass=netlink_route_socket pid=2948 comm=syz.2.793 [ 74.033501][ T2965] tipc: Started in network mode [ 74.038485][ T2965] tipc: Node identity 8ae9d6f40535, cluster identity 4711 [ 74.045752][ T2965] tipc: Enabled bearer , priority 0 [ 74.052961][ T2965] +: renamed from syzkaller0 [ 74.058307][ T2965] tipc: Disabling bearer [ 74.099951][ T2965] input: syz1 as /devices/virtual/input/input14 [ 74.135330][ T2967] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 74.135352][ T2967] rust_binder: Error in use_page_slow: EFAULT [ 74.146137][ T2967] rust_binder: use_range failure EFAULT [ 74.152313][ T2967] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 74.157954][ T2967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.166021][ T2967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:438 [ 74.189905][ T2969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.200581][ T2969] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 74.653377][ T2977] fuse: Unknown parameter 'ff' [ 74.692913][ T2985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.695749][ T2988] netlink: 84 bytes leftover after parsing attributes in process `syz.2.806'. [ 74.697749][ T2986] rust_binder: 440: no such ref 0 [ 74.782471][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 74.973956][ T3028] can: request_module (can-proto-0) failed. [ 75.000139][ T3035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3035 comm=syz.2.822 [ 75.000139][ T3034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3034 comm=syz.2.822 [ 75.168621][ T3055] can: request_module (can-proto-0) failed. [ 75.215081][ T3068] overlay: ./bus is not a directory [ 75.250438][ T3077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3077 comm=syz.5.838 [ 75.367504][ T3104] cannot load conntrack support for proto=3 [ 75.554689][ T3134] input: syz0 as /devices/virtual/input/input15 [ 75.572288][ T3134] SELinux: security_context_str_to_sid (sytem_uй :ߊA &^%KQzj8TBAdWq$he/F(=) failed with errno=-22 [ 75.581351][ T3143] /dev/loop0: Can't lookup blockdev [ 75.629546][ T3149] fuse: Bad value for 'rootmode' [ 75.732245][ T3152] tmpfs: Unknown parameter '017777777777777777777770xffffffffffffffff0xffffffffffffffff' [ 75.793279][ T3156] rust_binder: 3156 RLIMIT_NICE not set [ 75.793690][ T3156] rust_binder: 461: no such ref 2147483650 [ 75.829691][ T3160] netlink: 'syz.3.868': attribute type 7 has an invalid length. [ 75.898970][ T1827] rust_binder: 3155: removing orphan mapping 0:1048 [ 75.937200][ T3170] /dev/rnullb0: Can't open blockdev [ 75.964182][ T3172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.964221][ T3172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 76.401909][ T3207] overlayfs: failed to resolve './file1': -2 [ 76.417929][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 76.417946][ T36] audit: type=1400 audit(1757723004.320:435): avc: denied { setattr } for pid=3206 comm="syz.2.885" name="" dev="pipefs" ino=17284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.757373][ T36] audit: type=1400 audit(1757723004.660:436): avc: denied { execute } for pid=3217 comm="syz.3.890" name="file0" dev="ramfs" ino=17317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 76.779740][ T36] audit: type=1400 audit(1757723004.660:437): avc: denied { execute_no_trans } for pid=3217 comm="syz.3.890" path="/file0" dev="ramfs" ino=17317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 76.845710][ T3221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.845907][ T3221] rust_binder: Error while translating object. [ 76.852732][ T3221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 76.858925][ T3221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:498 [ 76.885395][ T3224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.895035][ T3224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.895048][ T3225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.895079][ T3225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 76.901575][ T3224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 76.956814][ T3227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.970342][ T36] audit: type=1400 audit(1757723004.870:438): avc: denied { create } for pid=3226 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.970504][ T3228] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 77.020039][ T3235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=3235 comm=syz.3.895 [ 77.020236][ T3234] rust_binder: 481: no such ref 3 [ 77.029121][ T3235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 77.040858][ T3234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 77.046391][ T3235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:508 [ 77.085239][ T3234] rust_binder: Error while translating object. [ 77.094656][ T3234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.100919][ T3234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 77.190032][ T3250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.902'. [ 77.263147][ T3260] can: request_module (can-proto-0) failed. [ 77.935431][ T36] audit: type=1326 audit(1757723005.840:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 77.995035][ T36] audit: type=1326 audit(1757723005.840:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 78.046353][ T36] audit: type=1326 audit(1757723005.840:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 78.070052][ T36] audit: type=1326 audit(1757723005.840:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 78.093531][ T36] audit: type=1326 audit(1757723005.840:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 78.117229][ T36] audit: type=1326 audit(1757723005.840:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.5.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6618eba9 code=0x7fc00000 [ 78.158878][ T3298] rust_binder: Write failure EFAULT in pid:512 [ 78.174545][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.183792][ T3303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.190361][ T3303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:492 [ 78.213432][ T3310] /dev/rnullb0: Can't open blockdev [ 78.288076][ T3324] can: request_module (can-proto-0) failed. [ 78.412093][ T62] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 78.494487][ T3354] can: request_module (can-proto-0) failed. [ 78.506966][ T3354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.517873][ T3354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.572098][ T62] usb 4-1: Using ep0 maxpacket: 16 [ 78.587479][ T62] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.600304][ T62] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.617390][ T62] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 78.626757][ T62] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 78.635582][ T62] usb 4-1: Product: syz [ 78.639836][ T62] usb 4-1: Manufacturer: syz [ 78.650850][ T62] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 78.852670][ T3305] rust_binder: Write failure EFAULT in pid:516 [ 78.853386][ T1827] usb 4-1: USB disconnect, device number 14 [ 78.894533][ T3373] netlink: 104 bytes leftover after parsing attributes in process `syz.5.941'. [ 79.219751][ T3375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.284999][ T3389] usb usb8: usbfs: process 3389 (syz.4.946) did not claim interface 0 before use [ 79.432099][ T3406] can: request_module (can-proto-0) failed. [ 79.529163][ T3423] rust_binder: Got transaction with invalid offset. [ 79.529211][ T3423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.536388][ T3423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 79.869029][ T3448] rust_binder: Write failure EFAULT in pid:531 [ 80.214232][ T3478] overlayfs: failed to clone upperpath [ 80.422786][ T62] rust_binder: 3491: removing orphan mapping 0:24 [ 80.690705][ T3502] usb usb9: usbfs: process 3502 (syz.3.984) did not claim interface 0 before use [ 80.847055][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 81.182922][ T3516] netlink: 104 bytes leftover after parsing attributes in process `syz.4.989'. [ 81.432254][ T3518] syz.3.990: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 81.447047][ T3518] CPU: 1 UID: 0 PID: 3518 Comm: syz.3.990 Not tainted syzkaller #0 368e5ea6f09f38000db57a3375c4613503dfaac0 [ 81.447078][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.447088][ T3518] Call Trace: [ 81.447095][ T3518] [ 81.447102][ T3518] __dump_stack+0x21/0x30 [ 81.447131][ T3518] dump_stack_lvl+0x10c/0x190 [ 81.447153][ T3518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.447177][ T3518] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 81.447199][ T3518] dump_stack+0x19/0x20 [ 81.447213][ T3518] warn_alloc+0x1bc/0x2a0 [ 81.447228][ T3518] ? stack_depot_save_flags+0x38/0x800 [ 81.447240][ T3518] ? __cfi_warn_alloc+0x10/0x10 [ 81.447254][ T3518] ? kasan_save_track+0x4f/0x80 [ 81.447265][ T3518] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 81.447281][ T3518] ? xskq_create+0x68/0x2a0 [ 81.447292][ T3518] ? xsk_init_queue+0xb6/0x120 [ 81.447303][ T3518] ? xsk_setsockopt+0x43f/0x6f0 [ 81.447314][ T3518] ? do_sock_setsockopt+0x26d/0x400 [ 81.447326][ T3518] ? __x64_sys_setsockopt+0x1b8/0x250 [ 81.447337][ T3518] ? x64_sys_call+0x2adc/0x2ee0 [ 81.447353][ T3518] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.447368][ T3518] __vmalloc_node_range_noprof+0x135/0x1420 [ 81.447385][ T3518] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 81.447400][ T3518] ? avc_has_perm+0x144/0x220 [ 81.447415][ T3518] ? kasan_save_alloc_info+0x40/0x50 [ 81.447429][ T3518] ? __kasan_kmalloc+0x96/0xb0 [ 81.447440][ T3518] vmalloc_user_noprof+0x77/0x90 [ 81.447454][ T3518] ? xskq_create+0xdb/0x2a0 [ 81.447466][ T3518] xskq_create+0xdb/0x2a0 [ 81.447477][ T3518] xsk_init_queue+0xb6/0x120 [ 81.447488][ T3518] xsk_setsockopt+0x43f/0x6f0 [ 81.447506][ T3518] ? __cfi_xsk_setsockopt+0x10/0x10 [ 81.447517][ T3518] ? do_futex+0x309/0x500 [ 81.447529][ T3518] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 81.447544][ T3518] ? security_socket_setsockopt+0x33/0xd0 [ 81.447555][ T3518] ? __cfi_xsk_setsockopt+0x10/0x10 [ 81.447567][ T3518] do_sock_setsockopt+0x26d/0x400 [ 81.447587][ T3518] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 81.447609][ T3518] __x64_sys_setsockopt+0x1b8/0x250 [ 81.447629][ T3518] x64_sys_call+0x2adc/0x2ee0 [ 81.447652][ T3518] do_syscall_64+0x58/0xf0 [ 81.447668][ T3518] ? clear_bhb_loop+0x50/0xa0 [ 81.447682][ T3518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.447695][ T3518] RIP: 0033:0x7f714738eba9 [ 81.447706][ T3518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.447716][ T3518] RSP: 002b:00007f714825c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.447730][ T3518] RAX: ffffffffffffffda RBX: 00007f71475d5fa0 RCX: 00007f714738eba9 [ 81.447742][ T3518] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 81.447753][ T3518] RBP: 00007f7147411e19 R08: 0000000000000004 R09: 0000000000000000 [ 81.447764][ T3518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.447775][ T3518] R13: 00007f71475d6038 R14: 00007f71475d5fa0 R15: 00007ffff9695b68 [ 81.447789][ T3518] [ 81.447798][ T3518] Mem-Info: [ 81.483925][ T3519] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 81.484777][ T3518] active_anon:26932 inactive_anon:51 isolated_anon:0 [ 81.484777][ T3518] active_file:23062 inactive_file:4989 isolated_file:0 [ 81.484777][ T3518] unevictable:0 dirty:167 writeback:0 [ 81.484777][ T3518] slab_reclaimable:6687 slab_unreclaimable:71569 [ 81.484777][ T3518] mapped:24484 shmem:19428 pagetables:1415 [ 81.484777][ T3518] sec_pagetables:0 bounce:0 [ 81.484777][ T3518] kernel_misc_reclaimable:0 [ 81.484777][ T3518] free:1498013 free_pcp:2774 free_cma:0 [ 81.805107][ T3518] Node 0 active_anon:107528kB inactive_anon:204kB active_file:92248kB inactive_file:19956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97936kB dirty:668kB writeback:0kB shmem:77712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:8168kB pagetables:5560kB sec_pagetables:0kB all_unreclaimable? no [ 81.846320][ T3518] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB [ 81.870508][ T3529] can: request_module (can-proto-0) failed. [ 81.876560][ T3518] lowmem_reserve[]: 0 3921 3921 [ 81.887367][ T3518] Normal free:3029928kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108028kB inactive_anon:204kB active_file:92248kB inactive_file:19956kB unevictable:0kB writepending:668kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5496kB local_pcp:1916kB free_cma:0kB [ 81.920933][ T3518] lowmem_reserve[]: 0 0 0 [ 81.925369][ T3518] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 81.942667][ T3518] Normal: 1*4kB (M) 40*8kB (UME) 513*16kB (UME) 407*32kB (UME) 559*64kB (UME) 56*128kB (UME) 4*256kB (UE) 4*512kB (ME) 41*1024kB (UME) 19*2048kB (UM) 702*4096kB (UME) = 3023860kB [ 81.960927][ T3518] 49462 total pagecache pages [ 81.965906][ T3518] 37 pages in swap cache [ 81.970167][ T3518] Free swap = 123768kB [ 81.974531][ T3518] Total swap = 124996kB [ 81.978858][ T3518] 2097051 pages RAM [ 81.982722][ T3518] 0 pages HighMem/MovableOnly [ 81.987593][ T3518] 351533 pages reserved [ 81.992015][ T3518] 0 pages cma reserved [ 81.998163][ T3518] Memory allocations: [ 82.002205][ T3518] 0 B 0 init/main.c:1370 func:do_initcalls [ 82.009623][ T3518] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 82.010009][ T3527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57739 sclass=netlink_xfrm_socket pid=3527 comm=syz.4.994 [ 82.017912][ T3518] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 82.040498][ T3518] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 82.050601][ T3518] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 82.058692][ T3518] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 82.067568][ T3518] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 82.078181][ T3546] fuse: Bad value for 'user_id' [ 82.080635][ T3518] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 82.083399][ T3546] fuse: Bad value for 'user_id' [ 82.091097][ T3518] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 82.091121][ T3518] 0 B 0 init/initramfs.c:101 func:find_link [ 82.092486][ T3548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.338383][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.353859][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.562749][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.571342][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.579995][ T3561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.613329][ T3565] can: request_module (can-proto-0) failed. [ 82.960084][ T3569] fuse: Bad value for 'group_id' [ 82.965273][ T3569] fuse: Bad value for 'group_id' [ 83.001133][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 83.001151][ T36] audit: type=1400 audit(1757723010.900:474): avc: denied { mount } for pid=3570 comm="syz.5.1009" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.062061][ T36] audit: type=1400 audit(1757723010.960:475): avc: denied { write } for pid=3583 comm="syz.5.1013" dev="sockfs" ino=19338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.114397][ T36] audit: type=1400 audit(1757723010.960:476): avc: denied { setattr } for pid=3583 comm="syz.5.1013" name="XDP" dev="sockfs" ino=19338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.137494][ T36] audit: type=1400 audit(1757723011.020:477): avc: denied { mounton } for pid=3586 comm="syz.4.1015" path="/187/file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 83.235097][ T3603] netlink: 'syz.5.1020': attribute type 46 has an invalid length. [ 83.262531][ T3605] incfs_lookup_dentry err:-13 [ 83.267654][ T3605] incfs: Can't find or create .index dir in ./bus [ 83.274430][ T3605] incfs: mount failed -13 [ 83.621330][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3612 comm=syz.2.1023 [ 83.682529][ T3618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 83.710204][ T3620] overlayfs: failed to clone lowerpath [ 84.036490][ T3637] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1033'. [ 84.037451][ T36] audit: type=1400 audit(1757723011.940:478): avc: denied { lock } for pid=3636 comm="syz.3.1032" path="socket:[20555]" dev="sockfs" ino=20555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.046163][ T3637] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1033'. [ 84.281568][ T3658] can: request_module (can-proto-0) failed. [ 84.316661][ T36] audit: type=1400 audit(1757723012.220:479): avc: denied { accept } for pid=3667 comm="syz.5.1043" path="socket:[20609]" dev="sockfs" ino=20609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.362098][ T515] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 84.512116][ T515] usb 4-1: Using ep0 maxpacket: 32 [ 84.518463][ T515] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 84.526688][ T515] usb 4-1: config 0 has no interface number 0 [ 84.532898][ T515] usb 4-1: config 0 interface 214 has no altsetting 0 [ 84.541077][ T515] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 84.550164][ T515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.558192][ T515] usb 4-1: Product: syz [ 84.562381][ T515] usb 4-1: Manufacturer: syz [ 84.566968][ T515] usb 4-1: SerialNumber: syz [ 84.572195][ T515] usb 4-1: config 0 descriptor?? [ 84.579821][ T515] ax88179_178a 4-1:0.214: probe with driver ax88179_178a failed with error -22 [ 84.851673][ T3689] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 84.851874][ T3690] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 84.867748][ T3689] syz.2.1050 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.907168][ T3694] can: request_module (can-proto-0) failed. [ 85.131139][ T3704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.139860][ T3704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.168891][ T36] audit: type=1400 audit(1757723014.070:480): avc: denied { listen } for pid=3722 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.188579][ T36] audit: type=1400 audit(1757723014.070:481): avc: denied { accept } for pid=3722 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.262548][ T3728] can: request_module (can-proto-0) failed. [ 86.270941][ T36] audit: type=1400 audit(1757723014.170:482): avc: denied { relabelfrom } for pid=3727 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.290952][ T36] audit: type=1400 audit(1757723014.170:483): avc: denied { relabelto } for pid=3727 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 87.113805][ T515] usb 4-1: USB disconnect, device number 15 [ 87.190909][ T3756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.191014][ T3756] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 87.221794][ T3761] rust_binder: Error while translating object. [ 87.229799][ T3761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.236181][ T3761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:582 [ 87.246158][ T3761] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.255444][ T3761] rust_binder: Read failure Err(EFAULT) in pid:582 [ 87.277697][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.293626][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.303512][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.314374][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.324524][ T3763] 9pnet_fd: Insufficient options for proto=fd [ 87.737793][ T3793] can: request_module (can-proto-0) failed. [ 87.752303][ T3793] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1085'. [ 87.900975][ T3816] overlayfs: failed to clone upperpath [ 87.988226][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.013060][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.041827][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.063840][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.064939][ T3831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 88.083375][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.088119][ T3831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:577 [ 88.102110][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.130161][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.153623][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.172137][ T3828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1095'. [ 88.286427][ T3838] /dev/rnullb0: Can't open blockdev [ 88.344914][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 88.344936][ T36] audit: type=1400 audit(1757723016.240:488): avc: denied { create } for pid=3843 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.392783][ T3854] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 88.392813][ T3854] rust_binder: Error while translating object. [ 88.412075][ T3856] binder: Bad value for 'max' [ 88.432368][ T3854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.432495][ T3854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587 [ 88.522120][ T3860] rust_binder: Write failure EFAULT in pid:602 [ 88.594291][ T36] audit: type=1400 audit(1757723016.500:489): avc: denied { map } for pid=3862 comm="syz.3.1109" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.672976][ T3866] can: request_module (can-proto-0) failed. [ 88.964757][ T3880] /dev/rnullb0: Can't open blockdev [ 89.208165][ T3889] rust_binder: Write failure EFAULT in pid:607 [ 89.514779][ T3901] netlink: 'syz.5.1123': attribute type 11 has an invalid length. [ 89.737829][ T36] audit: type=1400 audit(2000000000.160:490): avc: denied { write } for pid=3921 comm="syz.3.1133" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 89.767724][ T3925] /dev/rnullb0: Can't open blockdev [ 89.870858][ T3935] rust_binder: Write failure EFAULT in pid:600 [ 89.972516][ T3938] overlayfs: missing 'lowerdir' [ 90.032150][ T62] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 90.074527][ T3955] can: request_module (can-proto-0) failed. [ 90.162662][ T3986] can: request_module (can-proto-0) failed. [ 90.183288][ T62] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 90.191870][ T62] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 90.201314][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.210736][ T62] usb 4-1: config 0 descriptor?? [ 90.220295][ T62] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 90.271902][ T3993] 9pnet_fd: Insufficient options for proto=fd [ 90.421776][ T45] usb 4-1: USB disconnect, device number 16 [ 90.955277][ T4004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.959580][ T4004] kvm: user requested TSC rate below hardware speed [ 90.974030][ T4004] rust_binder: Error while translating object. [ 90.974061][ T4004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 90.980625][ T4004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:610 [ 91.044787][ T4010] overlayfs: failed to resolve './file0': -2 [ 91.073298][ T4012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.073632][ T4012] rust_binder: 614: no such ref 3 [ 91.086638][ T4012] tipc: Started in network mode [ 91.091542][ T4012] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 91.099382][ T36] audit: type=1400 audit(2000000001.510:491): avc: denied { create } for pid=4013 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.100951][ T4012] tipc: Enabled bearer , priority 10 [ 91.126688][ T36] audit: type=1400 audit(2000000001.550:492): avc: denied { remount } for pid=4013 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.155870][ T4012] rust_binder: Write failure EINVAL in pid:614 [ 91.157376][ T36] audit: type=1400 audit(2000000001.550:493): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.191332][ T1913] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.263892][ T4026] fuse: Unknown parameter 'f' [ 91.334680][ T4028] veth0_virt_wifi: entered allmulticast mode [ 91.341150][ T4027] veth0_virt_wifi: left allmulticast mode [ 91.363213][ T36] audit: type=1400 audit(2000000001.790:494): avc: denied { read } for pid=4031 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.502221][ T4052] netlink: 'syz.5.1179': attribute type 4 has an invalid length. [ 91.521335][ T4054] netlink: 'syz.5.1180': attribute type 14 has an invalid length. [ 91.685456][ T4086] can: request_module (can-proto-0) failed. [ 91.706042][ T36] audit: type=1400 audit(2000000002.130:495): avc: denied { create } for pid=4090 comm="syz.2.1193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.711627][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4093 comm=syz.3.1194 [ 91.738382][ T36] audit: type=1400 audit(2000000002.150:496): avc: denied { read } for pid=4090 comm="syz.2.1193" name="file0" dev="tmpfs" ino=2340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.762364][ T36] audit: type=1400 audit(2000000002.150:497): avc: denied { open } for pid=4090 comm="syz.2.1193" path="/428/file0" dev="tmpfs" ino=2340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.212130][ T332] tipc: Node number set to 4269801494 [ 92.297674][ T4106] sit0: entered promiscuous mode [ 92.653880][ T4122] rust_binder: Error while translating object. [ 92.653956][ T4122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.660178][ T4122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:637 [ 93.002085][ T515] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 93.162213][ T515] usb 4-1: device descriptor read/64, error -71 [ 93.242112][ T1420] Bluetooth: hci0: command 0x1003 tx timeout [ 93.242138][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.342905][ T4172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.364510][ T4172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.402089][ T515] usb 4-1: device descriptor read/64, error -71 [ 93.568281][ T36] kauditd_printk_skb: 7746 callbacks suppressed [ 93.568300][ T36] audit: type=1326 audit(2000000003.990:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.4.1223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effdc78eba9 code=0x0 [ 93.662104][ T515] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 93.792143][ T515] usb 4-1: device descriptor read/64, error -71 [ 93.981206][ T4221] overlayfs: failed to clone upperpath [ 94.035532][ T515] usb 4-1: device descriptor read/64, error -71 [ 94.060044][ T4237] cgroup: fork rejected by pids controller in /syz2 [ 94.158294][ T515] usb usb4-port1: attempt power cycle [ 94.344761][ T4286] fuse: Bad value for 'fd' [ 94.413728][ T36] audit: type=1400 audit(2000000004.840:8245): avc: denied { write } for pid=4289 comm="syz.4.1252" path="socket:[23618]" dev="sockfs" ino=23618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.458833][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.467838][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.522155][ T515] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 94.544247][ T515] usb 4-1: device descriptor read/8, error -71 [ 94.673417][ T515] usb 4-1: device descriptor read/8, error -71 [ 94.932064][ T515] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 94.962829][ T515] usb 4-1: device descriptor read/8, error -71 [ 95.093577][ T515] usb 4-1: device descriptor read/8, error -71 [ 95.212198][ T515] usb usb4-port1: unable to enumerate USB device [ 95.272893][ T4294] __nla_validate_parse: 29 callbacks suppressed [ 95.272919][ T4294] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1254'. [ 95.784535][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.798680][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.810692][ T4301] netlink: 'syz.3.1256': attribute type 13 has an invalid length. [ 95.820105][ T36] audit: type=1400 audit(2000000006.240:8246): avc: denied { accept } for pid=4302 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.852202][ T4301] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1256'. [ 95.861366][ T4306] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1256'. [ 95.880978][ T4308] overlayfs: failed to clone upperpath [ 95.891377][ T36] audit: type=1326 audit(2000000006.310:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd058eba9 code=0x7fc00000 [ 95.946976][ T36] audit: type=1326 audit(2000000006.310:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6cd058eba9 code=0x7fc00000 [ 96.182162][ T515] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 96.332091][ T515] usb 4-1: device descriptor read/64, error -71 [ 96.582088][ T515] usb 4-1: device descriptor read/64, error -71 [ 96.803598][ T4363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4363 comm=syz.5.1280 [ 96.833180][ T515] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 96.860179][ T4365] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1281'. [ 96.903189][ T4365] overlayfs: failed to clone upperpath [ 96.982072][ T515] usb 4-1: device descriptor read/64, error -71 [ 97.222082][ T515] usb 4-1: device descriptor read/64, error -71 [ 97.332227][ T515] usb usb4-port1: attempt power cycle [ 97.559920][ T36] audit: type=1400 audit(2000000007.980:8249): avc: denied { map } for pid=4383 comm="syz.5.1289" path="socket:[23821]" dev="sockfs" ino=23821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.623914][ T36] audit: type=1400 audit(2000000008.050:8250): avc: denied { lock } for pid=4389 comm="syz.4.1291" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.654154][ T4395] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.668731][ T4395] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.684440][ T4395] netlink: 393 bytes leftover after parsing attributes in process `syz.4.1293'. [ 97.692303][ T515] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 97.693751][ T4394] netlink: 393 bytes leftover after parsing attributes in process `syz.4.1293'. [ 97.713095][ T515] usb 4-1: device descriptor read/8, error -71 [ 97.797043][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 97.843132][ T515] usb 4-1: device descriptor read/8, error -71 [ 97.902614][ T36] audit: type=1400 audit(2000000008.330:8251): avc: denied { execute } for pid=4411 comm="syz.4.1299" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.965815][ T4421] binder: Unknown parameter 'sta|s' [ 98.082136][ T515] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 98.103155][ T515] usb 4-1: device descriptor read/8, error -71 [ 98.233173][ T515] usb 4-1: device descriptor read/8, error -71 [ 98.342156][ T515] usb usb4-port1: unable to enumerate USB device [ 98.860870][ T4430] rust_binder: 4427 RLIMIT_NICE not set [ 99.227019][ T4447] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 99.242510][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 99.392087][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 99.398383][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.408576][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.417579][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 99.426726][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.435358][ T45] usb 4-1: config 0 descriptor?? [ 99.646217][ T45] usb 4-1: USB disconnect, device number 25 [ 99.724229][ T4464] rust_binder: Error while translating object. [ 99.724278][ T4464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.730621][ T4464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 99.840027][ T36] audit: type=1400 audit(2000000010.260:8252): avc: denied { read } for pid=4476 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.128750][ T4488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4488 comm=syz.2.1324 [ 100.927034][ T4520] rust_binder: Error while translating object. [ 100.927080][ T4520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.938900][ T4520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:699 [ 100.985180][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 101.005079][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1339'. [ 101.042775][ T36] audit: type=1400 audit(2000000011.470:8253): avc: denied { lock } for pid=4543 comm="syz.5.1340" path="socket:[23513]" dev="sockfs" ino=23513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 101.075054][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.084758][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.252283][ T36] audit: type=1400 audit(2000000012.680:8254): avc: denied { append } for pid=4600 comm="syz.3.1358" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.275485][ T36] audit: type=1400 audit(2000000012.680:8255): avc: denied { getopt } for pid=4600 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.512515][ T36] audit: type=1400 audit(2000000012.940:8256): avc: denied { append } for pid=4602 comm="syz.3.1359" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.965008][ T4624] pim6reg1: entered promiscuous mode [ 102.970409][ T4624] pim6reg1: entered allmulticast mode [ 103.235255][ T4634] rust_binder: Got transaction with invalid offset. [ 103.235290][ T4634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.241993][ T4634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:730 [ 103.262087][ T4636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:732 [ 103.762076][ T331] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 103.923603][ T331] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.935468][ T331] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.946480][ T331] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.957832][ T331] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.967453][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.976728][ T4651] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.056064][ T36] audit: type=1400 audit(2000000014.480:8257): avc: denied { getopt } for pid=4658 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.140377][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 104.207883][ T4693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1388'. [ 104.222684][ T4692] overlayfs: failed to clone upperpath [ 104.269920][ T4693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.278608][ T4693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.399812][ T4651] netlink: 'syz.3.1375': attribute type 4 has an invalid length. [ 104.410121][ T4651] netlink: 'syz.3.1375': attribute type 4 has an invalid length. [ 104.825954][ T4708] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 104.849074][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.857785][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.866520][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.875059][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.883190][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.891724][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.899942][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.908511][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.916676][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.925286][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.934444][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.943057][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.978216][ T331] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 104.986102][ T331] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input17 [ 105.004352][ T331] usb 4-1: USB disconnect, device number 26 [ 105.010427][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 105.071999][ T4729] binder: Bad value for 'max' [ 105.132085][ T36] audit: type=1400 audit(2000000015.550:8258): avc: denied { mounton } for pid=4741 comm="syz.4.1406" path="/259/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 105.179875][ T4752] overlayfs: failed to clone lowerpath [ 105.188375][ T36] audit: type=1326 audit(2000000015.610:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.215607][ T36] audit: type=1326 audit(2000000015.610:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.239516][ T36] audit: type=1326 audit(2000000015.610:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.267117][ T36] audit: type=1326 audit(2000000015.610:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.291749][ T36] audit: type=1326 audit(2000000015.610:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.315623][ T36] audit: type=1326 audit(2000000015.610:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.339398][ T36] audit: type=1326 audit(2000000015.610:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.361869][ T4791] fuseblk: Bad value for 'group_id' [ 105.368995][ T36] audit: type=1326 audit(2000000015.610:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.369593][ T4791] fuseblk: Bad value for 'group_id' [ 105.392756][ T36] audit: type=1326 audit(2000000015.610:8267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cd058eba9 code=0x7ffc0000 [ 105.411293][ T4798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.425294][ T4787] overlayfs: failed to clone upperpath [ 105.434453][ T4798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.831391][ T4718] 9pnet_fd: p9_fd_create_tcp (4718): problem connecting socket to 127.0.0.1 [ 106.129628][ T4815] 9pnet_fd: Insufficient options for proto=fd [ 106.151027][ T4818] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1430'. [ 106.160648][ T4817] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1430'. [ 106.160688][ T4818] 9pnet_fd: Insufficient options for proto=fd [ 106.173822][ T4817] 9pnet_fd: Insufficient options for proto=fd [ 106.192072][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 106.343864][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 106.352718][ T45] usb 4-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.367017][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 106.375339][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.384712][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.393649][ T45] usb 4-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈻㞐鎙೾덵 [ 106.402742][ T45] usb 4-1: SerialNumber: syz [ 106.546906][ T4848] kvm: kvm [4847]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 106.555859][ T4848] kvm: kvm [4847]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 106.618519][ T45] cdc_ether 4-1:1.0: skipping garbage [ 106.626219][ T45] cdc_ether 4-1:1.0: skipping garbage [ 106.631815][ T45] cdc_ether 4-1:1.0: skipping garbage [ 106.640618][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 106.653923][ T45] usb 4-1: USB disconnect, device number 27 [ 106.689804][ T4863] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1443'. [ 106.705037][ T4863] can0: slcan on ttyS3. [ 106.711859][ T4863] fuse: Unknown parameter '' [ 107.203781][ T4888] overlayfs: failed to clone upperpath [ 107.264256][ T4863] can0 (unregistered): slcan off ttyS3. [ 107.334936][ T4913] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 107.334966][ T4913] rust_binder: Error while translating object. [ 107.347332][ T4913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.353734][ T4913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:803 [ 107.363800][ T4918] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 108.128492][ T4931] binder: Unknown parameter 'defcontext01777777777777777777777' [ 108.187494][ T4943] overlayfs: failed to clone lowerpath [ 108.510431][ T45] kernel write not supported for file /syz1 (pid: 45 comm: kworker/1:1) [ 108.703201][ T4985] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1475'. [ 109.070074][ T5016] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 109.650813][ T5056] veth0_virt_wifi: entered allmulticast mode [ 109.663898][ T5055] veth0_virt_wifi: left allmulticast mode [ 110.075523][ T5101] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1512'. [ 110.403058][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 110.403076][ T36] audit: type=1400 audit(2000000021.830:8317): avc: denied { sys_module } for pid=5106 comm="syz.3.1515" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.559753][ T36] audit: type=1400 audit(2000000021.980:8318): avc: denied { ioctl } for pid=5116 comm="syz.4.1519" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.711285][ T5142] can0: slcan on ptm0. [ 110.728889][ T5150] __vm_enough_memory: pid: 5150, comm: syz.4.1526, bytes: 18014402804453376 not enough memory for the allocation [ 110.826748][ T5139] can0 (unregistered): slcan off ptm0. [ 111.099155][ T5229] sit0: entered promiscuous mode [ 111.108488][ T5229] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 111.116645][ T5229] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1549'. [ 111.128579][ T5229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.152813][ T5235] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1551'. [ 111.953103][ T36] audit: type=1400 audit(2000000023.380:8319): avc: denied { associate } for pid=5253 comm="syz.4.1558" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.246727][ T36] audit: type=1400 audit(2000000023.670:8320): avc: denied { create } for pid=5260 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 112.307146][ T5270] 9pnet_fd: Insufficient options for proto=fd [ 112.766655][ T5284] rust_binder: 5283 RLIMIT_NICE not set [ 112.766877][ T5284] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 112.779926][ T5284] rust_binder: Write failure EINVAL in pid:875 [ 113.530491][ T5288] netlink: 'syz.5.1570': attribute type 4 has an invalid length. [ 113.546185][ T5289] netlink: 'syz.5.1570': attribute type 4 has an invalid length. [ 113.554211][ T5288] netlink: 'syz.5.1570': attribute type 4 has an invalid length. [ 113.571241][ T36] audit: type=1404 audit(2000000024.990:8321): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 113.594001][ T36] audit: type=1400 audit(2000000025.020:8322): avc: denied { read write } for pid=851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.626650][ T36] audit: type=1400 audit(2000000025.020:8323): avc: denied { read write } for pid=5297 comm="syz.4.1573" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 113.650865][ T36] audit: type=1400 audit(2000000025.030:8324): avc: denied { read write } for pid=851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.676183][ T36] audit: type=1400 audit(2000000025.040:8325): avc: denied { read } for pid=5301 comm="syz.4.1575" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 113.699481][ T36] audit: type=1400 audit(2000000025.040:8326): avc: denied { read write } for pid=5301 comm="syz.4.1575" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 113.830940][ T5331] netlink: 'syz.4.1587': attribute type 4 has an invalid length. [ 113.841061][ T5331] netlink: 'syz.4.1587': attribute type 4 has an invalid length. [ 114.051722][ T5365] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1599'. [ 114.683377][ T5404] binfmt_misc: register: failed to install interpreter file ./file0 [ 115.457992][ T36] kauditd_printk_skb: 264 callbacks suppressed [ 115.458010][ T36] audit: type=1400 audit(2000000026.880:8591): avc: denied { read write } for pid=851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.488438][ T36] audit: type=1400 audit(2000000026.890:8592): avc: denied { read } for pid=5444 comm="syz.4.1626" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 115.511237][ T36] audit: type=1400 audit(2000000026.890:8593): avc: denied { read write } for pid=851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.535307][ T36] audit: type=1400 audit(2000000026.900:8594): avc: denied { read } for pid=5447 comm="syz.4.1627" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 115.558117][ T36] audit: type=1400 audit(2000000026.900:8595): avc: denied { read write } for pid=851 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.582197][ T36] audit: type=1400 audit(2000000026.910:8596): avc: denied { create } for pid=5449 comm="syz.4.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.602838][ T36] audit: type=1400 audit(2000000026.910:8597): avc: denied { create } for pid=5449 comm="syz.4.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.623501][ T36] audit: type=1400 audit(2000000026.910:8598): avc: denied { create } for pid=5449 comm="syz.4.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.644056][ T36] audit: type=1400 audit(2000000026.910:8599): avc: denied { read } for pid=5449 comm="syz.4.1628" dev="nsfs" ino=4026532830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 115.665579][ T36] audit: type=1400 audit(2000000026.910:8600): avc: denied { create } for pid=5449 comm="syz.4.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.732071][ T5465] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1634'. [ 115.753838][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 115.986552][ T5515] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1652'. [ 116.456070][ T5555] netlink: 'syz.5.1665': attribute type 13 has an invalid length. [ 116.556977][ T5582] netlink: 'syz.5.1675': attribute type 16 has an invalid length. [ 116.564951][ T5582] netlink: 'syz.5.1675': attribute type 3 has an invalid length. [ 116.572760][ T5582] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.1675'. [ 116.779952][ T5599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1681'. [ 117.307637][ T5646] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1698'. [ 117.421936][ T1564] raw-gadget.0 gadget.4: failed to queue disconnect event [ 118.029692][ T5675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=5675 comm=syz.3.1709 [ 120.631529][ T36] kauditd_printk_skb: 197 callbacks suppressed [ 120.631547][ T36] audit: type=1400 audit(2000000032.050:8798): avc: denied { execmem } for pid=5701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 120.663523][ T36] audit: type=1400 audit(2000000032.060:8799): avc: denied { create } for pid=5704 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 120.683372][ T36] audit: type=1400 audit(2000000032.060:8800): avc: denied { sys_module } for pid=5704 comm="syz.3.1721" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 120.704535][ T36] audit: type=1400 audit(2000000032.060:8801): avc: denied { mounton } for pid=5704 comm="syz.3.1721" path="/279" dev="tmpfs" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 120.726762][ T36] audit: type=1400 audit(2000000032.080:8802): avc: denied { mounton } for pid=5702 comm="syz.5.1719" path="/448/file0" dev="tmpfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 121.573449][ T36] audit: type=1400 audit(2000000033.000:8803): avc: denied { execmem } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 121.593976][ T36] audit: type=1400 audit(2000000033.000:8804): avc: denied { mounton } for pid=5715 comm="syz.2.1723" path="/579/bus" dev="tmpfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 121.616574][ T36] audit: type=1400 audit(2000000033.000:8805): avc: denied { create } for pid=5718 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 122.586512][ T36] audit: type=1400 audit(2000000034.010:8806): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.606900][ T36] audit: type=1400 audit(2000000034.010:8807): avc: denied { execute } for pid=5723 comm="syz.3.1727" path="/dev/rnullb0" dev="tmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 126.238703][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 126.238723][ T36] audit: type=1400 audit(2000000037.660:8889): avc: denied { execmem } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 126.275783][ T36] audit: type=1400 audit(2000000037.660:8890): avc: denied { execute } for pid=5751 comm="syz.2.1735" path="/583/cpu.stat" dev="tmpfs" ino=3175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 126.299106][ T36] audit: type=1400 audit(2000000037.660:8891): avc: denied { create } for pid=5749 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 126.318850][ T36] audit: type=1400 audit(2000000037.660:8892): avc: denied { create } for pid=5750 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 126.338366][ T36] audit: type=1400 audit(2000000037.660:8893): avc: denied { create } for pid=5750 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 126.358150][ T36] audit: type=1400 audit(2000000037.690:8894): avc: denied { name_bind } for pid=5749 comm="syz.5.1734" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 126.429218][ T36] audit: type=1400 audit(2000000037.850:8895): avc: denied { create } for pid=5749 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 126.449769][ T36] audit: type=1400 audit(2000000037.850:8896): avc: denied { create } for pid=5749 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 126.470232][ T36] audit: type=1400 audit(2000000037.870:8897): avc: denied { mounton } for pid=5751 comm="syz.2.1735" path="/583/file0" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 127.682645][ T36] audit: type=1400 audit(2000000039.110:8898): avc: denied { execmem } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 132.521077][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 132.521098][ T36] audit: type=1400 audit(2000000043.940:8913): avc: denied { execmem } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 132.546818][ T36] audit: type=1400 audit(2000000043.960:8914): avc: denied { mounton } for pid=5805 comm="syz.5.1749" path="/457" dev="tmpfs" ino=2501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 132.568912][ T36] audit: type=1400 audit(2000000043.960:8915): avc: denied { create } for pid=5806 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.589458][ T36] audit: type=1400 audit(2000000043.960:8916): avc: denied { create } for pid=5806 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.609915][ T36] audit: type=1400 audit(2000000044.020:8917): avc: denied { create } for pid=5806 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 134.331646][ T36] audit: type=1400 audit(2000000045.750:8918): avc: denied { execmem } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 134.363215][ T36] audit: type=1400 audit(2000000045.760:8919): avc: denied { create } for pid=5813 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 134.364604][ T5818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5818 comm=syz.3.1754 [ 134.383001][ T36] audit: type=1400 audit(2000000045.760:8920): avc: denied { execmem } for pid=5813 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 134.414645][ T36] audit: type=1400 audit(2000000045.780:8921): avc: denied { create } for pid=5815 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 134.435399][ T36] audit: type=1400 audit(2000000045.790:8922): avc: denied { mount } for pid=5815 comm="syz.3.1754" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=0 [ 138.287497][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 138.287518][ T36] audit: type=1400 audit(2000000049.710:8931): avc: denied { execmem } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 138.301835][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.313532][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.319997][ T5835] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 138.329137][ T5831] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 138.334657][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.341819][ T36] audit: type=1400 audit(2000000049.720:8932): avc: denied { create } for pid=5834 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 138.349171][ T5835] audit: backlog limit exceeded [ 138.368851][ T5831] audit: backlog limit exceeded [ 138.372539][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.188673][ T1913] bridge_slave_1: left allmulticast mode [ 139.194383][ T1913] bridge_slave_1: left promiscuous mode [ 139.200072][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.207665][ T1913] bridge_slave_0: left allmulticast mode [ 139.213405][ T1913] bridge_slave_0: left promiscuous mode [ 139.219231][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.363478][ T1913] tipc: Left network mode [ 139.368868][ T1913] veth1_macvtap: left promiscuous mode [ 139.374430][ T1913] veth0_vlan: left promiscuous mode [ 139.634090][ T1913] bridge_slave_1: left allmulticast mode [ 139.639804][ T1913] bridge_slave_1: left promiscuous mode [ 139.645476][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.653064][ T1913] bridge_slave_0: left allmulticast mode [ 139.658703][ T1913] bridge_slave_0: left promiscuous mode [ 139.664409][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.814789][ T1913] veth1_macvtap: left promiscuous mode [ 139.820303][ T1913] veth0_vlan: left promiscuous mode [ 147.484568][ T1923] bridge_slave_1: left allmulticast mode [ 147.490228][ T1923] bridge_slave_1: left promiscuous mode [ 147.495888][ T1923] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.503292][ T1923] bridge_slave_0: left allmulticast mode [ 147.508953][ T1923] bridge_slave_0: left promiscuous mode [ 147.514864][ T1923] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.624152][ T1923] veth1_macvtap: left promiscuous mode [ 147.629780][ T1923] veth0_vlan: left promiscuous mode