last executing test programs: 4.883062621s ago: executing program 0 (id=1307): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a000000050201020000"], 0x20}}], 0x1, 0x4) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff807000000180000000400000008", 0x1d) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write(r4, &(0x7f0000000100), 0xfffffe5d) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="0adfc72e37", 0x5}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="580000000002010100000000000000000a00100704000180040003803c0002800c00028005000100000000002c00018014000300fe80000000000000000000000000003214000400ff020000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x2, @remote, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="99994486ba6de7bf1ea56e3161aefc0fbfd4e21ef5d031532b7236cb4a4f5844a83f371c34a37716066dd1edbc5d13e81a560da670", 0x35}, {&(0x7f00000000c0)="d62b3e792a815b1620e1307859be542a94", 0x11}], 0x2, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x2370}, 0x20000004) setsockopt(0xffffffffffffffff, 0x4, 0xfffffffb, 0x0, 0x0) r7 = socket(0x1, 0x80000, 0x101) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x81, 0x180, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x0, 0x8, 0x3, 0x1, 0x2, 0x1], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7a, 0x7, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x4, 0x0, {0x7, 0x25, 0x1, 0x3, 0x2, 0x7a9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x99, 0x2, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xe, 0x3, 0x0, {0x7, 0x25, 0x1, 0x80, 0x3, 0x5}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x23, &(0x7f0000000680)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x37, 0x59}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x1000, 0xf000, 0x0, [0xf, 0x0]}]}}) sendto$packet(r7, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) r8 = add_key(&(0x7f0000000d00)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) r9 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001e40)={0x1, 0x0, 0x1, 0x4, r9}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001f40)={0x10200, 0x3, 0xeeee8000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) add_key(0x0, 0x0, 0x0, 0x0, r8) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r6}}) 4.221730962s ago: executing program 3 (id=1316): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r2) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="9b6edb6e6b3d", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socket$inet6(0xa, 0x3, 0x7ff) sendfile(r6, r0, 0x0, 0x80000000) 4.189082182s ago: executing program 3 (id=1317): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b99010203010902"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = getpid() syz_open_procfs(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e1, 0x0, 0x1, @mcast1, @mcast2, {[@hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x134, 0xa, 0x4, 0x5, 0x33, 0x18, 0x3, [@loopback, @loopback, @private0, @loopback, @loopback]}, @hopopts={0xb3, 0x13, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0xae, 0x7b, "9c94549e878f1216c17c4cf9039930af56727033a7c5698c611298542feaf1e266fbdfdb02fe22e8d858ab57c7c1e116759951be26ce63e180b91692bfdec7ab42dc08f9cc911e9d4aafca328b08b5f33f0549e40c8ad49638292f3c0eec311e671a90b8d300523ecfdda90d223cffba55349710e80f3076a36e7c"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a7b7bb0faa0e55c71667c2db559cc4e3d9cf1faff99395ed6b589c8817d02dfc418f30a86847e7e66a207c98f445d1a31aee58cbb28d817dacd51e28a309a058f53135ee0bb9353b527460fca970e1ba5e0bbec8c4ac80fe5bbcfb8a3d84c993b85ed02e629"}}}, 0x217) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000280)={0x8, &(0x7f0000000980)=[{0x0, 0x9b, &(0x7f0000000100)="0966a7a4a0a1e9f11ca5696f54834166f6e6387f266c6d7c58c04bbf0c52042d6ce1c5d0b2c62c9e77a29b60f1f0e9177b628f5071087d9f275cfc183234cee78c7099f452611447769a4cedb9878f198716c98dc599c16d97a4a8eaa126edbad90207d1f69f7aa037bebe62018fafa0c251d5058211d4072c9d784ad73a3ef341cb0ff8fecec5d87a0ecc3000096a3cdd47ffa0846c93539aa6b9", 0x1, 0x1}, {0x8, 0xda, &(0x7f0000000300)="73947042b686714c8b0f2e9f9b113d41c82c8931640c0bbed49ac05c37dbdd31acdf834595d8ba95140459bb56d815c288722458bedacf3c88a7dccf915d4ff1eaacc89983ed5b8448b394dea7f64744bbdb2f3383ad82b3912f61eee52c5ae61a67b07c22f370fef3cd54187c4cb8d4b2618a2f4a029e24982b1935e55d1d37305ff6eb65e5a80e55af2740dcb5c276557a2d809b5f1906691b291641b0373886431fd3035cfc5fd69f23432a3e4c8c6fe3de47c4412cbc232767665332109fe580d02b832a8b08b8e9fa1826de6c328db36b52004de8b75862", 0x0, 0x1}, {0xfff, 0xc3, &(0x7f0000000400)="5ea290292d0b4d9f6be98e7f53ed4ca22b8c046c6eb0015722a54298f7c1eee7a60179c848ef5cb08e19a86e760f38da350fc2b8452556087bf631533f599281ff0633ef8811f6e06f10649f3fca24e256a6af3d48fcfc432f02ffdfe561b2b6c1ad425ab4cd3d6543f608b821a2c30ef86e4de5cc2a436198c4ddf4f26cf4ca61a84ffbafc133cbf2256b2dd71e902acf974df8c50c6d8c93c2ac09e34591dba466f56998e835d333228d5d0c5292436b8e603ebbbcdbc3c682db278c9f6c7fc5c58a", 0x0, 0x1}, {0x8, 0x0, &(0x7f00000001c0), 0x1, 0x1}, {0x0, 0xd3, &(0x7f0000000800)="d459ef0c51d96aaf27b79d8007927fa355697caf7708ca6b7b63531e07ba221b42f16cb4474327d0120bd53ddc16e792ddb8f200570d18860e10c330ad5610d6ee11fba84a69ee606887ddbf382a4a7f0b51516a7d74f8200ce162ad3b021c6095fbbcc1404c3e2858597a15ff20881b601d4d576340c436b836f04d695901a0055c2f18824dec0245a6b988b5ee250ff4ecb44394c850415f1f36b01612565ca76ea483b28fb3c92ba53fd9fcdb3306c9a3acba803130d9e603e559d66bea652b6662ff35b0c0152238f358e0166081b9c08e", 0x0, 0x1}, {0xffffffff, 0x36, &(0x7f0000000240)="6d57ed8d52ab20aba55b4871edb1de0bb771588fbd5aed1b961886f3b1224cdec090557f793300e324bb55dc38ba01fd610100aa8cdc", 0x0, 0x1}, {0x2, 0xac, &(0x7f0000000500)="2b9b8ba54ad9f61f9feecb8be6676afb505761acc0f52f571fe5af247e757ed9402163162d273b59199d04603364078647f3104deb969c80593908c2e072bc4ccfec049d22762640d9a90b97af490286fbeaa3430a6e28864aabcdab518c6662443b5cbb195a58c3ab9fc70f433cd3a8461f82d1a54bd69e0d9422b9a3002a776ee2eff53b685ed79d9ff7c30b2134c832d82f610ed11376d9074cfa4a55132f8cb223a2d3682d942e6541e4", 0x0, 0x1}, {0x4, 0x46, &(0x7f0000000900)="c877d5af2aa98798a0475c4c88234e3d28da4bb8eefafb1b5b668f1363121d0ce3d601825f54a7e5e1a385128673cf56c206223024df286a7b0cf1280f5b475f09b49443161a", 0x0, 0x1}]}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000000)=0xa, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 3.637909352s ago: executing program 3 (id=1319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat6\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000002340)=ANY=[@ANYBLOB="2d6e65745f7072696f202b72646d61202d667265657a6572202d706572665f6576656e74202d696f2002a520f317f2a8bb9b72a9193777cd22194134aadaf63a0f760e3092bbcb13806a271c405aa398d8ae77b0f3567933"], 0x29) (async) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x101000, 0xc2, 0x5}, 0x18) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000000)='geneve1\x00'}) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) (async) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x49c0) write$P9_RSTATFS(r5, &(0x7f00000003c0)={0x43, 0x9, 0x1, {0xd7e8, 0x6, 0xffffffff00000000, 0x5, 0x2c, 0xbd2, 0x8, 0x9, 0x100}}, 0x43) 3.472103104s ago: executing program 0 (id=1320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@generic={0x0, 0x101, 0x8}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c802010301020350050400100005000855cc097559f4100fb2c8c12a2f73e4eb3552e7dbfdad3cb28896af2775a04450c5026cf8baccd51488c16d272714544da3aa15984d7b4659cb209cb4d7df6c"], 0x0) r3 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101022, 0x1d1) fcntl$setown(r5, 0x8, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$getown(r4, 0x9) r6 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)="83d6f76094444dacc6821f4cef4ac30aee6c1903164ed4abba9601bd2956e71bb7ac19f3d51d330ffdef1c0c33d8bdb88bb101064948745dd46dcc9477ccd17d4b6d7bf17be73d0703cde0f3eaa27286533fde107cccdc44b3a8613c99e95169711238b05e05739fb98eb8f246d5ee109187c3377ceaf6a9ce1a2225ffc1aacb3ab9408bb3") syz_clone3(&(0x7f0000000bc0)={0x4089c00, &(0x7f00000003c0), 0x0, &(0x7f0000000440), {0x41}, &(0x7f0000000480)=""/231, 0xe7, &(0x7f0000000580)=""/227, &(0x7f0000000b80)}, 0x58) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) socket(0x8000000010, 0x2, 0x0) 2.788111595s ago: executing program 3 (id=1325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x2, 0x1, 0x0, 0x1, 0x66}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.725430366s ago: executing program 3 (id=1326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000006c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0xffffffff, 0x7, 0x8, 0x5, ' Vx', 0x2}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x50, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0x0, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xfffffffffffffffc, 0x181000) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000000)={0x0, 0x2, 0x11, 0xa, 0x2, 0x5, 0x5, 0xe8}) 2.724038696s ago: executing program 3 (id=1327): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r3, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0xffffff98}], 0x5}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000280)="93f1593f9cfa80912f5e6c9b82bc9f9bb08b1d9e5b7527ef0eb94b0f654c8f1cc0aec7c2658465ddd787e13d", 0x2c}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000480)="08dd11b9e3061b48a26590ea7fc50b9dbe78225bb2325e45d0e8566bbc51c4b6fc4c07b06b5386b4194d1489853ddc1d290bdb00f582192b76ffd4446251a39740fe810dc7ca913dbca0d3e4adf45ad2ec189ba4efa0f6fe0337636ceff622", 0x5f}, {&(0x7f0000000a00)="6164674952df00417cd1431f719a1dd686687cd605fe2de4beb966fcfd40e58b9adfc61aa3fe0af467cbd47eb9ce6e3ca21f306604a4a7e7906e880b898ed81d0537778151a3cfc11ae630c20c404f71cf0a6992267eb174f960241340143297fc88d413eb2a29859871037b0d0cd7b4fe4e5e88ca7d9f7ab84495e87b9f3530ff62fea608826358bdc575c5ae58aa39f89b9008f09dea06", 0x98}], 0x6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="11", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x404c881) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x80000000, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x100, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x2, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x8, 0x4, "9ecbb976"}, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = eventfd(0x2) fchmod(r9, 0xa0ffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00']) 1.631744044s ago: executing program 2 (id=1339): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x2f, @rand_addr=0x64010902, 0x4e20, 0x1, 'sed\x00', 0x25, 0xffffffff, 0xc}, 0x2c) r2 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) 1.579783835s ago: executing program 2 (id=1341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x901243, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000380)={0xb, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000807, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x13) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r12}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, r13, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x64}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 162.273748ms ago: executing program 0 (id=1351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xce) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) r4 = getgid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) dup(r5) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1010000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@fsname={'fsname', 0x3d, ',#'}}, {@seclabel}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, './binderfs/binder1\x00'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@measure}]}}) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x5, 0x0, 0x0, "dc87c42fabdda84f"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 160.807538ms ago: executing program 1 (id=1352): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000140)=0x5000) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r2) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000140)=0x5000) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) sendfile(r4, r0, 0x0, 0x80000000) (async) 158.941848ms ago: executing program 2 (id=1353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x265, 0x0, &(0x7f0000000600)="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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r1, &(0x7f0000000080)=""/87, 0x57) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r2}, @register_looper], 0x0, 0x0, 0x0}) 155.315828ms ago: executing program 2 (id=1354): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0xffffffffffffffc0, 0x7, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0x6, 0x1}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ax25={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @null, @bcast, @null, @default]}, 0x80, 0x0}}], 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="5801000010003306000000e600000000fe000000000000800000bbac1e0001030000e0fc4954000000000000000000ffff07ff000000000a000000390000000000000000a481ad9605ec0f461f19a2ed95655a9072989567fb05f57271e47b4e5f5f462b8f301be0ee2824e1d74b28da86eba68a0497a1bfd1c044794f7add28", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = signalfd(r0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8) preadv2(r6, &(0x7f0000001000)=[{&(0x7f0000001180)=""/4106, 0x100a}], 0x1, 0x3, 0x10001, 0x18) 154.978168ms ago: executing program 1 (id=1355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x52, 0x0, 0x0}) 83.319259ms ago: executing program 2 (id=1356): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="857846a6d7bcb43f859847bdcfabf578722072451119b9845ef091ed897a05b7bfd3a9244798824c0658eb2710cc9e0c571c64815355307ba71d531b2ea7c5cf991ce8bf58728256edd0abfe27a11c10"}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x1400, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff3f, 0x0, &(0x7f0000000480)="2d04290bc51619ec4ecc68288ad1cf84920dcf4365a8057e7a1483878267b2a602ee71b27c8ea9c733a86b7d7695ab6661b7e8a8d116919de9b94dc2b69f5dca6200a56aa6104f340b8991d14f01de7a0ddb02aed93e14f350a06407aed335558bacaef6fbd01387918b1aef90b65ed738fd238d93147188f7f71eaea286ef00"/144}) (rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, 0x0}}], 0x0, 0x0, 0x0}) 82.852539ms ago: executing program 1 (id=1357): write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="2a0000007aa611c4a414062e53050400000000000000000000000000000000000000070000aac500000017b07212ca6d456b2188fe2c260a2d13e0f062284401e9c5d94a475e2426053030b4e12b969b5ff90e21976220c0c41f9cd5fe71986637070177d1fb247b1c0e847d4670de38cdb49093307a9894b306431d1fd82497aae76d4e644da24a26c409892c04ad304be21bb9f8ff488790298642f9a83da9d92fd2e401e7ad7c10b816812a192e207f253532a091633d614771edbf2b5cbb9323a127e91d14106af94785f7aeb83d7bb7e2f6242f09fb63a5cd3ac2a2d3bd15"], 0x2a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x705, 0x3fdfff, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x4001) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r8, 0x4140aecd, &(0x7f00000001c0)={{0xf000, 0x5000, 0x8, 0x0, 0x0, 0x4, 0x4, 0x99, 0x4, 0xfa, 0x3, 0xb}, {0x1000, 0x4, 0x9, 0xf, 0x10, 0x7, 0x8, 0x5, 0x3, 0x5, 0x3d, 0xe}, {0xf000, 0xdddd0000, 0x8, 0x9, 0x4, 0x7f, 0x26, 0x0, 0x4, 0x0, 0x6, 0xf7}, {0x8080000, 0x0, 0xa, 0x4, 0x6, 0x8, 0x8, 0xc, 0x9, 0x0, 0x0, 0x6}, {0x2, 0x8000000, 0x10, 0x9, 0xc, 0x9, 0xfa, 0x1, 0x9, 0x1, 0x85, 0x80}, {0xdddd0000, 0x4, 0x10, 0x2, 0xfd, 0x2, 0x60, 0x4, 0x6, 0x1, 0x1, 0xb4}, {0x1, 0x1, 0x0, 0x9, 0x1, 0xff, 0x3, 0xe0, 0x5, 0xf8, 0x6, 0x76}, {0xf000, 0x2000, 0xf, 0x3, 0x7, 0x5, 0x0, 0xa, 0xff, 0x8, 0xd, 0x8}, {0xeeef0000, 0x1}, {0x4000, 0x4}, 0x80010000, 0x0, 0xeeee0000, 0x200, 0x0, 0x1801, 0xe6e6d000, 0x0, [0xffff, 0xc40, 0x401, 0x8]}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="287900000306010300000000000000000700000105000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000428bd7000fcdbdf250300000005000500060a00000500030004000000050005003c00238905000200b9000000"], 0x34}}, 0x1004) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r11, r10, 0x0) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x1002}, 0x0, 0x0, 0x0, 0x0}, 0x58) 82.293309ms ago: executing program 0 (id=1358): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xfffb, 0x3}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) r1 = socket(0x1e, 0x4, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138) close(0xffffffffffffffff) dup(0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x7a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c14"]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1, 0x7, 0xdf8a, 0x1, 0xffff8000, 0x4, 0x401}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528c53e34926d5617cfc48db3f9fa3d019da4e1d3901086a2af9dd65b3b29302000184c589f887fdf844", 0x3d}], 0x1}}], 0x1, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0x4}}, "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", "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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) 81.549789ms ago: executing program 1 (id=1359): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0xfb, 0x0, [0x3, 0xff, 0x7, 0x4, 0x8f0], [0x4, 0x7, 0x6, 0x1, 0x1, 0x1, 0x3, 0x800, 0xc, 0x9, 0x7ff, 0x2, 0x3, 0x4, 0x6, 0x6, 0x9, 0x7f, 0x4, 0x5, 0x5, 0x401, 0x10000, 0xe, 0xd8b, 0x9, 0xffffffffffffffff, 0x6, 0x9, 0x37, 0x3, 0xffffffffffffffff, 0xffffffffffff8e90, 0x3, 0x6, 0x5, 0x297ffd, 0xffffffffffffff9b, 0x0, 0xffffffff, 0x7, 0x9, 0x0, 0x8, 0x7fff, 0x8, 0x5, 0xfffffffffffffffd, 0x0, 0x80000001, 0x0, 0x6, 0x7fffffffffffffff, 0x5, 0x81, 0x6, 0x9, 0x7, 0xc, 0x467c, 0x255, 0x7, 0x9, 0x9, 0x3, 0x1, 0x9, 0x400000000000000, 0x30ee, 0x2, 0x3fd, 0xfffffffffffffff7, 0x6, 0x0, 0x400, 0x0, 0x483, 0x9, 0x6, 0x2, 0x3, 0x7fff, 0x7, 0x4, 0x99, 0x8001, 0xc, 0x7, 0x5, 0xffff, 0x9, 0xfb, 0x27, 0x1000, 0x0, 0x1, 0x2189, 0x400, 0xaa87, 0x101, 0x6, 0x9, 0x3, 0x4, 0x0, 0x5, 0x3e, 0x1, 0x3ff, 0x100000001, 0x4, 0x6, 0x4, 0x800, 0x5, 0x6, 0x2, 0x9, 0x7, 0xffffffffffffff59, 0x5]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000640)={r1, 0x22, 0x3, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0, 0x29}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xdc}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) 59.873839ms ago: executing program 0 (id=1360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000002b80)={0x28, 0x0, 0x2710, @hyper}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x161000, 0x0) unshare(0x28020600) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(r6, 0x40187014, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYBLOB="d3854f82720f728c21a09937b4ed420949d003a733e5612ff2bfd0ecc46cc0bdf8f07bde7dd9029cbf0729881ed68c81c1ececb39eb66e714a533be41c47294d3ed1d64c6d390ccfd3b507682759a869daf5d56008342b9f50f30ce063002f152920ee1b095cebac1e3211313b4ef460266e5537024dfb2d61745ca9a580a28ac89bbcfcd4ea1aad576ca511c52ee84b7065b4ee0dce2f", @ANYRES16=r2, @ANYRESDEC=r0]) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r4, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000002c40)=""/130, 0x82}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000200)=""/62, 0x3e}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8c0}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}], 0x7, 0x40000000, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r9, r9, 0x0) clock_gettime(0x0, &(0x7f0000002b00)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002a40)=[{{&(0x7f0000000540)=@l2, 0x80, &(0x7f0000001f00)=[{&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/140, 0xffffffffffffffe2}, {&(0x7f0000000900)=""/54, 0x36}, {&(0x7f0000001b40)=""/207, 0xcf}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/150, 0x96}, {&(0x7f0000001d40)=""/100, 0x64}, {&(0x7f0000001dc0)=""/76, 0x4c}, {&(0x7f0000001e40)=""/147, 0x93}], 0x9, &(0x7f0000001fc0)=""/230, 0xe6}, 0x8}, {{&(0x7f00000020c0)=@tipc=@id, 0x80, &(0x7f0000002600)=[{&(0x7f0000002140)=""/23, 0x17}, {&(0x7f0000002180)=""/139, 0x8b}, {&(0x7f0000002240)=""/210, 0xd2}, {&(0x7f0000002340)=""/64, 0x40}, {&(0x7f0000002380)=""/24, 0x18}, {&(0x7f00000023c0)=""/240, 0xf0}, {&(0x7f00000024c0)=""/32, 0x20}, {&(0x7f0000002500)=""/102, 0x66}, {&(0x7f0000002580)=""/83, 0x53}], 0x9, &(0x7f00000026c0)=""/36, 0x24}, 0x2}, {{&(0x7f0000002700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002900), 0x0, &(0x7f0000002940)=""/222, 0xde}, 0x2baa}], 0x3, 0x40010103, &(0x7f0000002b40)={r10, r11+60000000}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 55.468999ms ago: executing program 2 (id=1361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x4e24, 0x20006de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2, 0x80000}}}, 0x108) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202", @ANYRES32], 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000500)=""/23, 0x20000, 0x1000, 0x7, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_elf32(r6, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xf7, 0x4d, 0x40, 0x8000000000000000, 0x3, 0x3, 0xffffff80, 0x1d, 0x38, 0x392, 0x6, 0x590b, 0x20, 0x2, 0x1ff, 0x4, 0x8f8}, [{0x7, 0x1, 0xa, 0x2, 0x1, 0x3, 0x10, 0x10}, {0x5, 0x1, 0x9, 0x6, 0x6, 0x200, 0x80000000, 0x40}]}, 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x7c, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x3}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@flat=@handle={0x73682a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x1, 0x1, 0x1a}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @increfs, @acquire_done={0x40106309, 0x1}, @enter_looper], 0x0, 0x0, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x101ff, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0xc8, r8, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x62b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20008150) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='$@!#\x00', 0xfffffffffffffffe) syz_usb_ep_read(r2, 0x8, 0x2a, &(0x7f0000000080)=""/42) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x68, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 1.52367ms ago: executing program 0 (id=1362): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e22, 0x6, @mcast1, 0x3ff}, {0xa, 0x4e24, 0x7f, @empty, 0x5}, 0x1, {[0x10, 0x8, 0xfffffffe, 0x5, 0x2, 0x5, 0x46b53469, 0x3]}}, 0x5c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='stack\x00') r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40), 0x40000a5, 0x0) write$P9_RREAD(r3, &(0x7f0000000140)={0x96, 0x75, 0x1, {0x8b, "a7e887fee79b3c63eaa8b914d184db59282d5715665f948a9d70bf28953425cd6e3eedec99efceba6742c214c52b92cc3386a3ada50815a0a81b84299430e7ff5f7d57cc6160daddc23dc04e009f39cdda70bfc57bd4fc7b2e5abd4033c97811b244122dbe8e1722e08547c3129caef98c55099faa851d3669507306287e3e767d9f817a3c464224db3686"}}, 0x96) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) 259.69µs ago: executing program 1 (id=1363): socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, 0x0, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (rerun: 32) r0 = socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r1, 0x0, 0x1000, 0x10, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82741, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7efb9688f007b7f00000000", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000140)=""/149, 0x95}], 0x6}, 0xe}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0080) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x3a) (async) capset(0x0, 0x0) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='vcan0\x00') (async) getsockopt$MRT6(r7, 0x3a, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000200)=0x8) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c744240012940e15c744240210000000c7442406000000000f0114240f22e49ac1b6eb9336001400c4c10f2a12670fae8a010066ba6100b000eef30f0158c5eafcaa00002d01360f19b20f000000", 0x4e}], 0x1, 0x49, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 0s ago: executing program 1 (id=1364): open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x52) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000003c0)=""/135, 0x87}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/24, 0x18}], 0x7, &(0x7f0000000840)=""/156, 0x9c}, 0x9}], 0x1, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffdb3, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 24.979833][ T36] audit: type=1400 audit(1753676141.180:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.981313][ T281] cgroup: Unknown subsys name 'net' [ 25.002595][ T36] audit: type=1400 audit(1753676141.180:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.029895][ T36] audit: type=1400 audit(1753676141.210:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.030121][ T281] cgroup: Unknown subsys name 'devices' [ 25.214425][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.220059][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.376877][ T36] audit: type=1400 audit(1753676141.580:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.400513][ T36] audit: type=1400 audit(1753676141.580:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.411153][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.425582][ T36] audit: type=1400 audit(1753676141.580:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.457212][ T36] audit: type=1400 audit(1753676141.650:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.471344][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.482701][ T36] audit: type=1400 audit(1753676141.650:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.516993][ T36] audit: type=1400 audit(1753676141.680:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.542613][ T36] audit: type=1400 audit(1753676141.680:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.865126][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.872220][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.879316][ T289] bridge_slave_0: entered allmulticast mode [ 26.885746][ T289] bridge_slave_0: entered promiscuous mode [ 26.901688][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.908884][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.916031][ T289] bridge_slave_1: entered allmulticast mode [ 26.922349][ T289] bridge_slave_1: entered promiscuous mode [ 26.932313][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.939367][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.946596][ T288] bridge_slave_0: entered allmulticast mode [ 26.953024][ T288] bridge_slave_0: entered promiscuous mode [ 26.968484][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.975599][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.982898][ T288] bridge_slave_1: entered allmulticast mode [ 26.989139][ T288] bridge_slave_1: entered promiscuous mode [ 27.046838][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.053957][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.061055][ T290] bridge_slave_0: entered allmulticast mode [ 27.067539][ T290] bridge_slave_0: entered promiscuous mode [ 27.079945][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.087096][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.094265][ T290] bridge_slave_1: entered allmulticast mode [ 27.100529][ T290] bridge_slave_1: entered promiscuous mode [ 27.163849][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.170929][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.178448][ T291] bridge_slave_0: entered allmulticast mode [ 27.184811][ T291] bridge_slave_0: entered promiscuous mode [ 27.191195][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.198278][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.205372][ T291] bridge_slave_1: entered allmulticast mode [ 27.211712][ T291] bridge_slave_1: entered promiscuous mode [ 27.298061][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.305156][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.312485][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.319547][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.329614][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.336682][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.343996][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.351025][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.408192][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.415269][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.422608][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.429628][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.449651][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.457368][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.464944][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.472897][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.480071][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.487612][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.504388][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.511433][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.519202][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.526252][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.548025][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.555098][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.562753][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.569787][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.617262][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.624355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.635417][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.642487][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.650486][ T288] veth0_vlan: entered promiscuous mode [ 27.667968][ T288] veth1_macvtap: entered promiscuous mode [ 27.704161][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.711229][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.725102][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.732189][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.746080][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.768712][ T289] veth0_vlan: entered promiscuous mode [ 27.792286][ T291] veth0_vlan: entered promiscuous mode [ 27.820294][ T289] veth1_macvtap: entered promiscuous mode [ 27.834901][ T291] veth1_macvtap: entered promiscuous mode [ 27.841232][ T290] veth0_vlan: entered promiscuous mode [ 27.878455][ T290] veth1_macvtap: entered promiscuous mode [ 27.896368][ T337] rust_binder: Write failure EFAULT in pid:6 [ 27.949760][ T345] binder: Unknown parameter 'fscontext?}' [ 27.991418][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.026190][ T351] KVM: debugfs: duplicate directory 351-5 [ 28.172122][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.204527][ T367] ======================================================= [ 28.204527][ T367] WARNING: The mand mount option has been deprecated and [ 28.204527][ T367] and is ignored by this kernel. Remove the mand [ 28.204527][ T367] option from the mount to silence this warning. [ 28.204527][ T367] ======================================================= [ 28.242295][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.249883][ T61] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.253532][ T367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.285079][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 28.332198][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 28.347572][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.358306][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 28.373369][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.382626][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.390636][ T45] usb 1-1: SerialNumber: syz [ 28.397454][ T45] usb 1-1: bad CDC descriptors [ 28.422136][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 28.428746][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.438843][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.449369][ T61] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 28.458622][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 28.472226][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.481092][ T61] usb 2-1: config 0 descriptor?? [ 28.486174][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.495567][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.504503][ T10] usb 3-1: SerialNumber: syz [ 28.513272][ T10] usb 3-1: bad CDC descriptors [ 28.562072][ T355] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.600335][ T10] usb 1-1: USB disconnect, device number 2 [ 28.711541][ T353] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.713269][ T355] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.737461][ T355] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.747499][ T355] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.755555][ T45] usb 3-1: USB disconnect, device number 2 [ 28.758890][ T355] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 28.765157][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.791117][ T355] usb 4-1: config 0 descriptor?? [ 28.907012][ T61] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 28.998965][ T376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.007812][ T376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.106763][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.106800][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 29.117950][ T61] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 29.139087][ T61] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 29.148036][ T61] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 29.156061][ T61] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 29.159420][ T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 29.163822][ T383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.174673][ T61] usb 2-1: USB disconnect, device number 2 [ 29.203132][ T388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.417817][ T355] usb 4-1: string descriptor 0 read error: -22 [ 29.620425][ T355] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input5 [ 29.633743][ T355] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input6 [ 29.649251][ T355] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input7 [ 29.668938][ T355] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input8 [ 29.682107][ T45] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.700951][ T355] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 29.737905][ T426] rust_binder: 424 RLIMIT_NICE not set [ 29.741536][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.747183][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 29.772062][ T61] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.822115][ T45] usb 3-1: device descriptor read/64, error -71 [ 29.830244][ T376] cannot load conntrack support for proto=3 [ 29.837710][ T376] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 29.838367][ T31] usb 4-1: USB disconnect, device number 2 [ 29.943411][ T61] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.962402][ T61] usb 1-1: config 1 interface 0 has no altsetting 0 [ 29.973092][ T61] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 29.982445][ T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.990502][ T61] usb 1-1: Product: syz [ 29.994892][ T61] usb 1-1: Manufacturer: syz [ 29.999517][ T61] usb 1-1: SerialNumber: syz [ 30.071802][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 30.071821][ T36] audit: type=1400 audit(1753676146.270:171): avc: denied { write } for pid=432 comm="syz.1.31" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.072131][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.079551][ T36] audit: type=1400 audit(1753676146.280:172): avc: denied { write } for pid=432 comm="syz.1.31" name="anycast6" dev="proc" ino=4026532431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.107647][ T434] veth0_to_hsr: entered allmulticast mode [ 30.141019][ T434] veth0_to_hsr: left allmulticast mode [ 30.147718][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 30.215786][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.234186][ T419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.242845][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.250747][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.250906][ T419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.261013][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.284785][ T61] usb 1-1: USB disconnect, device number 3 [ 30.295827][ T36] audit: type=1400 audit(1753676146.500:173): avc: denied { create } for pid=437 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 30.316403][ T36] audit: type=1400 audit(1753676146.530:174): avc: denied { getopt } for pid=437 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 30.336179][ T45] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 30.343972][ T36] audit: type=1400 audit(1753676146.530:175): avc: denied { read write } for pid=437 comm="syz.0.32" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.377187][ T36] audit: type=1400 audit(1753676146.530:176): avc: denied { open } for pid=437 comm="syz.0.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.407709][ T36] audit: type=1400 audit(1753676146.530:177): avc: denied { ioctl } for pid=437 comm="syz.0.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.546446][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.574346][ T447] overlayfs: overlapping lowerdir path [ 30.585730][ T36] audit: type=1400 audit(1753676146.790:178): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.692079][ T431] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.792475][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.842062][ T431] usb 4-1: Using ep0 maxpacket: 32 [ 30.848419][ T431] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.857093][ T431] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.866405][ T431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.876256][ T36] audit: type=1400 audit(1753676147.090:179): avc: denied { setopt } for pid=452 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.879503][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 30.907735][ T45] usb usb3-port1: attempt power cycle [ 30.913599][ T431] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 30.923768][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.931370][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 30.941575][ T431] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 30.951682][ T431] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.965139][ T431] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 30.974371][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.987420][ T431] usb 4-1: config 0 descriptor?? [ 30.994394][ T443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.003332][ T431] usblp0: Disabling reads from problematic bidirectional printer [ 31.010036][ T455] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 31.011122][ T36] audit: type=1400 audit(1753676147.210:180): avc: denied { getopt } for pid=454 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.092146][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.204080][ T443] rust_binder: Write failure EINVAL in pid:28 [ 31.205409][ T431] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 31.225084][ T431] usb 4-1: USB disconnect, device number 3 [ 31.233068][ T431] usblp0: removed [ 31.252099][ T45] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 31.273130][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.334896][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 31.343820][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 31.352069][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.370713][ T477] Zero length message leads to an empty skb [ 31.403649][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.602182][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.642110][ T45] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 31.663176][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.734115][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.742728][ T61] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 31.793451][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.833157][ T431] rust_binder: 502: removing orphan mapping 0:1048 [ 31.849179][ T506] binder: Unknown parameter '(' [ 31.902164][ T45] usb usb3-port1: unable to enumerate USB device [ 31.903226][ T61] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 31.919710][ T61] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 31.929600][ T61] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 31.938684][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.982091][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.092214][ T31] usb usb1-port1: attempt power cycle [ 32.149483][ T492] input: syz1 as /devices/virtual/input/input13 [ 32.164274][ T61] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 32.174491][ T61] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input12 [ 32.189799][ T61] usb 2-1: USB disconnect, device number 3 [ 32.432131][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.453199][ T31] usb 1-1: device descriptor read/8, error -71 [ 32.583174][ T31] usb 1-1: device descriptor read/8, error -71 [ 32.692457][ T532] rust_binder: Read failure Err(EAGAIN) in pid:34 [ 33.352218][ T543] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 33.631031][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.649070][ T556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.702070][ T61] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.902092][ T61] usb 3-1: Using ep0 maxpacket: 16 [ 33.908466][ T61] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.919471][ T61] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.929682][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.945314][ T61] usb 3-1: SerialNumber: syz [ 33.956666][ T61] hub 3-1:1.0: bad descriptor, ignoring hub [ 33.972461][ T61] hub 3-1:1.0: probe with driver hub failed with error -5 [ 34.052095][ T31] usb 1-1: device not accepting address 7, error -71 [ 34.059043][ T31] usb usb1-port1: unable to enumerate USB device [ 34.202154][ T431] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.297372][ T581] rust_binder: 579 RLIMIT_NICE not set [ 34.311455][ T31] rust_binder: 578: removing orphan mapping 0:4248 [ 34.362179][ T431] usb 2-1: Using ep0 maxpacket: 16 [ 34.369273][ T431] usb 2-1: config 5 has an invalid interface number: 27 but max is 1 [ 34.377428][ T431] usb 2-1: config 5 has an invalid interface number: 19 but max is 1 [ 34.385630][ T431] usb 2-1: config 5 has no interface number 0 [ 34.391727][ T431] usb 2-1: config 5 has no interface number 1 [ 34.397869][ T431] usb 2-1: config 5 interface 27 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 8 [ 34.407642][ T431] usb 2-1: config 5 interface 27 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 34.418452][ T431] usb 2-1: config 5 interface 27 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 34.422081][ T61] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 34.429293][ T431] usb 2-1: config 5 interface 27 altsetting 4 endpoint 0x8D has invalid maxpacket 1088, setting to 64 [ 34.437790][ T61] usb 3-1: device reset changed ep0 maxpacket size! [ 34.447924][ T431] usb 2-1: config 5 interface 27 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 34.447968][ T431] usb 2-1: config 5 interface 19 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 34.455294][ T61] usb 3-1: USB disconnect, device number 7 [ 34.465363][ T431] usb 2-1: config 5 interface 19 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 34.493067][ T431] usb 2-1: config 5 interface 19 altsetting 16 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 34.500291][ T585] fuse: Unknown parameter 'root00000000000040000' [ 34.504980][ T431] usb 2-1: config 5 interface 19 altsetting 16 endpoint 0x85 has an invalid bInterval 239, changing to 11 [ 34.522985][ T431] usb 2-1: config 5 interface 19 altsetting 16 endpoint 0x85 has invalid maxpacket 42519, setting to 1024 [ 34.534411][ T431] usb 2-1: config 5 interface 19 altsetting 16 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 34.547570][ T431] usb 2-1: config 5 interface 27 has no altsetting 0 [ 34.554318][ T431] usb 2-1: config 5 interface 19 has no altsetting 0 [ 34.562902][ T431] usb 2-1: New USB device found, idVendor=0409, idProduct=0040, bcdDevice=27.c9 [ 34.571953][ T431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.580202][ T431] usb 2-1: Product: 钑嵿詝끦ᙯ⇆⃴鿫埧⋭ጪ笴까ヸ㩹鿳ﬕ郲틷㪀恬뉠綵䍰숑ꯜ宐緍뎽탉噽峱ᵙ詹歎乽沦糍箦⦖왼甩渫郣ᬯ㚣댺橖㧴龜៭跪䈧⸼㚖欕ュウ䥉ṝ╀喭겺蘆潰⠴郸뾕䬶㾓埫偗䆁뎞任䵪蝵秘ⶶ鵍憟눢佡㽾菂䗷ኧ駹⻔ [ 34.610398][ T431] usb 2-1: Manufacturer: Ђ [ 34.615198][ T431] usb 2-1: SerialNumber: 䣸␓갢䧉쿁䉷¦㼳繁ꔃ乏벙홬騸좐軐鑜듍ﳡ爛ⴍᘔ蓩뫝뗒Ⰳ쟑话ꄥ㺨桺脰뇴咹(輛逓꓇芰橺벦熢䷎䜫薓뀟壓寃 [ 34.639172][ T567] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.646624][ T567] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.782150][ T61] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.853489][ T590] rust_binder: 79: no such ref 3 [ 34.858504][ T590] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 34.860093][ T431] usb-storage 2-1:5.27: USB Mass Storage device detected [ 34.873800][ T431] usb-storage 2-1:5.27: Quirks match for vid 0409 pid 0040: 1 [ 34.892105][ T377] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.932623][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 34.938192][ T596] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 34.939889][ T61] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.957056][ T61] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 34.967428][ T61] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.981081][ T61] usb 3-1: config 1 interface 0 has no altsetting 0 [ 34.989403][ T61] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.998774][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.006991][ T61] usb 3-1: Product: syz [ 35.011264][ T61] usb 3-1: Manufacturer: syz [ 35.016113][ T61] usb 3-1: SerialNumber: syz [ 35.026457][ T551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.042059][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 35.048791][ T377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.066339][ T567] rust_binder: Write failure EFAULT in pid:67 [ 35.067121][ T431] usb-storage 2-1:5.19: USB Mass Storage device detected [ 35.068422][ T377] usb 1-1: config 128 has an invalid interface number: 26 but max is 1 [ 35.083468][ T431] usb-storage 2-1:5.19: Quirks match for vid 0409 pid 0040: 1 [ 35.091743][ T377] usb 1-1: config 128 has an invalid interface number: 250 but max is 1 [ 35.105166][ T377] usb 1-1: config 128 has no interface number 0 [ 35.111504][ T377] usb 1-1: config 128 has no interface number 1 [ 35.117990][ T377] usb 1-1: config 128 interface 26 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 35.130477][ T377] usb 1-1: config 128 interface 250 altsetting 198 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 35.141841][ T377] usb 1-1: config 128 interface 26 has no altsetting 0 [ 35.149337][ T377] usb 1-1: config 128 interface 250 has no altsetting 0 [ 35.159547][ T431] usb 2-1: USB disconnect, device number 4 [ 35.160072][ T377] usb 1-1: Dual-Role OTG device on HNP port [ 35.183086][ T377] usb 1-1: New USB device found, idVendor=0846, idProduct=4260, bcdDevice=5f.c2 [ 35.192786][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.201222][ T377] usb 1-1: Product: syz [ 35.205611][ T377] usb 1-1: Manufacturer: syz [ 35.218687][ T377] usb 1-1: SerialNumber: syz [ 35.223942][ T607] rust_binder: Write failure EINVAL in pid:92 [ 35.237687][ T61] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 35.259636][ T61] usb 3-1: USB disconnect, device number 8 [ 35.267448][ T61] usblp0: removed [ 35.386801][ T611] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.386827][ T611] rust_binder: Read failure Err(EFAULT) in pid:94 [ 35.426543][ T587] binder: Unknown parameter '!H @' [ 35.442458][ T377] usb 1-1: USB disconnect, device number 8 [ 35.776270][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 35.776289][ T36] audit: type=1400 audit(1753676151.980:230): avc: denied { write } for pid=617 comm="syz.2.88" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.063524][ T624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.063590][ T625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.135225][ T624] rust_binder: Got transaction with invalid offset. [ 36.141886][ T624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.149793][ T624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 36.214440][ T36] audit: type=1400 audit(1753676152.420:231): avc: denied { map } for pid=630 comm="syz.3.93" path="socket:[5390]" dev="sockfs" ino=5390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.282050][ T638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.95'. [ 36.294205][ T36] audit: type=1400 audit(1753676152.420:232): avc: denied { read } for pid=630 comm="syz.3.93" path="socket:[5390]" dev="sockfs" ino=5390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.317307][ T36] audit: type=1400 audit(1753676152.420:233): avc: denied { create } for pid=630 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 36.336811][ T638] binder: Unknown parameter 'defcontext01777777777777777777777' [ 36.344546][ T36] audit: type=1400 audit(1753676152.550:234): avc: denied { remount } for pid=637 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.379019][ T640] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.391843][ T36] audit: type=1400 audit(1753676152.590:235): avc: denied { mount } for pid=639 comm="syz.0.97" name="/" dev="ramfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.451084][ T36] audit: type=1400 audit(1753676152.650:236): avc: denied { block_suspend } for pid=639 comm="syz.0.97" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.522103][ T61] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.553575][ T649] netlink: 220 bytes leftover after parsing attributes in process `syz.2.101'. [ 36.569442][ T36] audit: type=1400 audit(1753676152.770:237): avc: denied { read } for pid=648 comm="syz.2.101" path="socket:[5024]" dev="sockfs" ino=5024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.593672][ T649] loop4: detected capacity change from 0 to 8388608 [ 36.602674][ T36] audit: type=1400 audit(1753676152.810:238): avc: denied { mounton } for pid=648 comm="syz.2.101" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 36.672064][ T61] usb 4-1: Using ep0 maxpacket: 16 [ 36.679575][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.689011][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.698429][ T61] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.712534][ T61] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 36.720163][ T61] usb 4-1: can't read configurations, error -71 [ 36.742101][ T377] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.752175][ T45] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 36.859842][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.863313][ T654] 9pnet_fd: Insufficient options for proto=fd [ 36.892103][ T377] usb 2-1: Using ep0 maxpacket: 16 [ 36.898375][ T377] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 36.909633][ T377] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 36.919630][ T377] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 36.923253][ T45] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 36.933877][ T377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.941195][ T45] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 36.950589][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.958280][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 36.966647][ T377] usb 2-1: SerialNumber: syz [ 36.975170][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 36.986469][ T645] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.990572][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 37.007642][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 37.017429][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 37.035493][ T45] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 37.044660][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.052704][ T45] usb 1-1: Manufacturer: и [ 37.057992][ T45] usb 1-1: config 0 descriptor?? [ 37.063829][ T45] hub 1-1:0.0: bad descriptor, ignoring hub [ 37.069770][ T45] hub 1-1:0.0: probe with driver hub failed with error -5 [ 37.077840][ T45] input: и as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 37.202354][ T377] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 37.207148][ T645] fuse: Bad value for 'user_id' [ 37.213768][ T377] usb 2-1: USB disconnect, device number 5 [ 37.216199][ T645] fuse: Bad value for 'user_id' [ 37.230661][ T36] audit: type=1400 audit(1753676153.430:239): avc: denied { bind } for pid=644 comm="syz.1.99" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.265087][ T659] capability: warning: `syz.3.104' uses 32-bit capabilities (legacy support in use) [ 37.271203][ T10] usb 1-1: USB disconnect, device number 9 [ 37.418059][ T665] rust_binder: Error while translating object. [ 37.418085][ T665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.424316][ T665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 37.435047][ T666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.457220][ T670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 37.472472][ T670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 38.112106][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 38.148696][ T61] hid-generic 1002:0000:0000.0003: unknown main item tag 0x0 [ 38.156185][ T61] hid-generic 1002:0000:0000.0003: collection stack underflow [ 38.163702][ T61] hid-generic 1002:0000:0000.0003: item 0 0 0 12 parsing failed [ 38.171487][ T61] hid-generic 1002:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 38.242061][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.399550][ T701] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET) [ 38.449856][ T710] rust_binder: 131: no such ref 4294967294 [ 38.456877][ T710] serio: Serial port ptm1 [ 38.482053][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.722065][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 38.852068][ T10] usb 1-1: device descriptor read/64, error -71 [ 38.912075][ T656] Bluetooth: hci0: command 0x1003 tx timeout [ 38.912075][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.037691][ T716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.037716][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 39.092098][ T10] usb 1-1: device descriptor read/64, error -71 [ 39.212171][ T10] usb usb1-port1: attempt power cycle [ 39.552142][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 39.573215][ T10] usb 1-1: device descriptor read/8, error -71 [ 39.632130][ T61] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.703116][ T10] usb 1-1: device descriptor read/8, error -71 [ 39.762102][ T61] usb 4-1: device descriptor read/64, error -71 [ 39.882983][ T735] rust_binder: Error while translating object. [ 39.883019][ T735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.889212][ T735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:99 [ 39.910141][ T737] binder: Unknown parameter 'smackfsroot' [ 39.942280][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 39.962074][ T741] binder: Unknown parameter '' [ 39.963207][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.002067][ T61] usb 4-1: device descriptor read/64, error -71 [ 40.082105][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.109973][ T10] usb 1-1: device descriptor read/8, error -71 [ 40.118228][ T764] binder: Unknown parameter 'stats' [ 40.212093][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.227861][ T10] usb usb1-port1: unable to enumerate USB device [ 40.242076][ T61] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.382071][ T61] usb 4-1: device descriptor read/64, error -71 [ 40.472114][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.622096][ T61] usb 4-1: device descriptor read/64, error -71 [ 40.722056][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.752157][ T61] usb usb4-port1: attempt power cycle [ 40.862084][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.999989][ T772] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.000352][ T772] rust_binder: Got transaction with invalid offset. [ 41.012079][ T772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.018725][ T772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 41.041643][ T774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.062036][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 41.062058][ T36] audit: type=1400 audit(1753676157.250:261): avc: denied { setopt } for pid=773 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.092086][ T61] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.102184][ T45] usb 3-1: device descriptor read/64, error -71 [ 41.108638][ T36] audit: type=1400 audit(1753676157.310:262): avc: denied { getopt } for pid=773 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.123154][ T61] usb 4-1: device descriptor read/8, error -71 [ 41.127872][ T774] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 165) [ 41.134048][ T774] rust_binder: Error while translating object. [ 41.144675][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.150874][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 41.163580][ T36] audit: type=1400 audit(1753676157.370:263): avc: denied { mounton } for pid=773 comm="syz.0.139" path="/26/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 41.172148][ T774] fuse: Bad value for 'fd' [ 41.242169][ T45] usb usb3-port1: attempt power cycle [ 41.264317][ T61] usb 4-1: device descriptor read/8, error -71 [ 41.338569][ T36] audit: type=1400 audit(1753676157.540:264): avc: denied { remount } for pid=779 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.378080][ T785] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585) [ 41.378107][ T785] rust_binder: Error while translating object. [ 41.390377][ T785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.396597][ T785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 41.502135][ T61] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.518527][ T796] /dev/rnullb0: Can't open blockdev [ 41.533074][ T61] usb 4-1: device descriptor read/8, error -71 [ 41.537983][ T798] rust_binder: 136: no such ref 0 [ 41.544832][ T798] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 41.552543][ T798] rust_binder: 136: no such ref 0 [ 41.584147][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 41.594883][ T36] audit: type=1400 audit(1753676157.800:265): avc: denied { create } for pid=802 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 41.615083][ T36] audit: type=1400 audit(1753676157.800:266): avc: denied { read } for pid=802 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.634465][ T36] audit: type=1400 audit(1753676157.800:267): avc: denied { shutdown } for pid=802 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.661493][ T451] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 41.669510][ T36] audit: type=1400 audit(1753676157.800:268): avc: denied { setopt } for pid=802 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 41.690380][ T45] usb 3-1: device descriptor read/8, error -71 [ 41.703414][ T61] usb 4-1: device descriptor read/8, error -71 [ 41.812604][ T61] usb usb4-port1: unable to enumerate USB device [ 41.823106][ T45] usb 3-1: device descriptor read/8, error -71 [ 41.832081][ T451] usb 1-1: Using ep0 maxpacket: 32 [ 41.842841][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.853776][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.863923][ T451] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.875391][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.884408][ T451] usb 1-1: config 0 descriptor?? [ 41.890372][ T451] hub 1-1:0.0: USB hub found [ 42.062067][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.083216][ T36] audit: type=1400 audit(1753676158.290:269): avc: denied { write } for pid=822 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.102629][ T451] hub 1-1:0.0: 1 port detected [ 42.107672][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.243201][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.305844][ T36] audit: type=1400 audit(1753676158.510:270): avc: denied { create } for pid=788 comm="syz.0.144" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.326760][ T451] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 42.334573][ T451] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 42.343360][ T451] usbhid 1-1:0.0: can't add hid device: -71 [ 42.349309][ T451] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.357300][ T45] usb usb3-port1: unable to enumerate USB device [ 42.382393][ T451] usb 1-1: USB disconnect, device number 14 [ 42.477306][ T828] kvm: pic: non byte write [ 42.676982][ T835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.696596][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 42.709499][ T842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 42.747950][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.769628][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.782291][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.794983][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.807489][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.819962][ T846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=846 comm=syz.3.161 [ 42.868634][ T849] binder: Unknown parameter 'fiscontegt' [ 42.966147][ T870] netlink: 168 bytes leftover after parsing attributes in process `syz.3.168'. [ 43.232130][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 43.292083][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 43.393284][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.403172][ T10] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 43.412236][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.421277][ T10] usb 4-1: config 0 descriptor?? [ 43.452062][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 43.458459][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 43.469789][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.478894][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.486931][ T31] usb 1-1: Product: ь [ 43.491027][ T31] usb 1-1: Manufacturer: Д [ 43.495573][ T31] usb 1-1: SerialNumber: ࠇ [ 43.762783][ T886] rust_binder: Got transaction with invalid offset. [ 43.762848][ T886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.769509][ T886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 43.902400][ T877] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 44.030603][ T875] /dev/rnullb0: Can't open blockdev [ 44.039125][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 44.048010][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.057269][ T10] usb 4-1: USB disconnect, device number 10 [ 44.078319][ T906] incfs: Options parsing error. -22 [ 44.083683][ T906] incfs: mount failed -22 [ 44.578806][ T31] cdc_ncm 1-1:1.0: bind() failure [ 44.594760][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 44.610825][ T31] cdc_ncm 1-1:1.1: bind() failure [ 44.622650][ T31] usb 1-1: USB disconnect, device number 15 [ 44.820363][ T965] bpf: Bad value for 'mode' [ 44.822538][ T963] 9pnet_fd: Insufficient options for proto=fd [ 44.852832][ T970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 45.122079][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 45.272053][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 45.278349][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.288640][ T31] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=f2.b0 [ 45.297842][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.306518][ T31] usb 1-1: config 0 descriptor?? [ 45.312352][ T31] usb 1-1: bad CDC descriptors [ 45.513442][ T977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.514631][ T451] usb 1-1: USB disconnect, device number 16 [ 45.825895][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.825932][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 45.969743][ T1027] rust_binder: 1014 RLIMIT_NICE not set [ 45.980223][ T1014] rust_binder: Write failure EINVAL in pid:211 [ 45.992843][ T10] rust_binder: 1013: removing orphan mapping 0:4240 [ 46.008214][ T1031] netlink: 'syz.1.220': attribute type 27 has an invalid length. [ 46.042580][ T1033] UHID_CREATE from different security context by process 214 (syz.3.221), this is not allowed. [ 46.048674][ T1037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.053007][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.066891][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.069627][ T1037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.074314][ T1037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 46.095493][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 46.095511][ T36] audit: type=1400 audit(1753676162.300:291): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.298929][ T1041] 9pnet_fd: Insufficient options for proto=fd [ 46.307917][ T1054] rust_binder: Error while translating object. [ 46.307951][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 46.317212][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:222 [ 46.328403][ T1056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 46.371208][ T1062] loop7: detected capacity change from 0 to 7 [ 46.378220][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.387425][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.395408][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.404600][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.412600][ T1062] loop7: unable to read partition table [ 46.418299][ T1062] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.420291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.440947][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.449148][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.458343][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.466459][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.475659][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.483968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.493136][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.501595][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.510777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.566792][ T1075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 46.622245][ T377] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.631644][ T1079] mmap: syz.1.236 (1079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.670963][ T36] audit: type=1400 audit(1753676162.870:292): avc: denied { setopt } for pid=1082 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.682092][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 46.782062][ T377] usb 4-1: Using ep0 maxpacket: 16 [ 46.789381][ T377] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.800486][ T377] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.809609][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.817912][ T377] usb 4-1: SerialNumber: syz [ 46.832059][ T10] usb 1-1: device descriptor read/64, error -71 [ 46.839374][ T377] hub 4-1:1.0: bad descriptor, ignoring hub [ 46.845501][ T377] hub 4-1:1.0: probe with driver hub failed with error -5 [ 47.072101][ T10] usb 1-1: device descriptor read/64, error -71 [ 47.089183][ T1104] rust_binder: Read failure Err(EFAULT) in pid:102 [ 47.208143][ T1110] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 47.223524][ T36] audit: type=1404 audit(1753676163.430:293): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 47.239370][ T36] audit: type=1400 audit(1753676163.440:294): avc: denied { write } for pid=1109 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 47.275644][ T36] audit: type=1400 audit(1753676163.440:295): avc: denied { bind } for pid=1109 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 47.295363][ T36] audit: type=1400 audit(1753676163.440:296): avc: denied { read } for pid=1109 comm="syz.2.246" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 47.316407][ T377] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 47.324253][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 47.324407][ T36] audit: type=1400 audit(1753676163.440:297): avc: denied { write } for pid=1109 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 47.351285][ T36] audit: type=1400 audit(1753676163.440:298): avc: denied { connect } for pid=1109 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 47.370647][ T36] audit: type=1400 audit(1753676163.440:299): avc: denied { read write } for pid=1109 comm="syz.2.246" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 47.395204][ T36] audit: type=1400 audit(1753676163.440:300): avc: denied { create } for pid=1109 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 47.895570][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 48.122884][ T377] usb 4-1: USB disconnect, device number 11 [ 48.517280][ T1184] sit0: entered promiscuous mode [ 48.529524][ T1184] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 48.542052][ T1184] netlink: 1 bytes leftover after parsing attributes in process `syz.0.273'. [ 48.587172][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 48.596340][ T1193] erspan0: default FDB implementation only supports local addresses [ 48.758602][ T1226] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 48.766383][ T1226] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 49.605395][ T1267] netlink: 2885 bytes leftover after parsing attributes in process `syz.0.303'. [ 50.145768][ T1308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 50.969449][ T1323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 51.016491][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.119251][ T36] kauditd_printk_skb: 432 callbacks suppressed [ 51.119270][ T36] audit: type=1400 audit(1753676167.320:733): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.149617][ T36] audit: type=1400 audit(1753676167.330:734): avc: denied { mounton } for pid=1336 comm="syz.3.329" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 51.173506][ T36] audit: type=1400 audit(1753676167.330:735): avc: denied { read } for pid=1336 comm="syz.3.329" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 51.194912][ T36] audit: type=1400 audit(1753676167.330:736): avc: denied { read write } for pid=1336 comm="syz.3.329" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 51.218485][ T36] audit: type=1400 audit(1753676167.340:737): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.242504][ T36] audit: type=1400 audit(1753676167.410:738): avc: denied { mount } for pid=1338 comm="syz.3.330" name="/" dev="ramfs" ino=9677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 51.264570][ T36] audit: type=1400 audit(1753676167.450:739): avc: denied { create } for pid=1338 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 51.285127][ T36] audit: type=1400 audit(1753676167.450:740): avc: denied { read } for pid=1338 comm="syz.3.330" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 51.307677][ T36] audit: type=1400 audit(1753676167.450:741): avc: denied { create } for pid=1338 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 51.328017][ T36] audit: type=1400 audit(1753676167.450:742): avc: denied { create } for pid=1338 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 52.594103][ T1379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 53.072117][ T656] Bluetooth: hci0: command 0x1003 tx timeout [ 53.072134][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.286794][ T1442] netlink: 'syz.2.367': attribute type 4 has an invalid length. [ 54.295591][ T1443] netlink: 'syz.2.367': attribute type 4 has an invalid length. [ 54.370468][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 55.089499][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.389'. [ 55.236787][ T1547] TCP: TCP_TX_DELAY enabled [ 55.243160][ T1547] syz.2.404 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.304164][ T1560] netlink: 'syz.2.409': attribute type 11 has an invalid length. [ 55.312325][ T1560] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.409'. [ 56.123390][ T36] kauditd_printk_skb: 745 callbacks suppressed [ 56.123408][ T36] audit: type=1400 audit(1753676172.330:1298): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.156621][ T36] audit: type=1400 audit(1753676172.330:1299): avc: denied { create } for pid=1577 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 56.176152][ T36] audit: type=1400 audit(1753676172.330:1300): avc: denied { create } for pid=1577 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 56.279895][ T36] audit: type=1400 audit(1753676172.480:1301): avc: denied { read write } for pid=1580 comm="syz.3.416" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 56.303058][ T36] audit: type=1400 audit(1753676172.480:1302): avc: denied { write } for pid=1580 comm="syz.3.416" name="tcp6" dev="proc" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 56.331565][ T36] audit: type=1400 audit(1753676172.480:1303): avc: denied { name_bind } for pid=1580 comm="syz.3.416" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 56.353323][ T36] audit: type=1400 audit(1753676172.480:1304): avc: denied { name_bind } for pid=1580 comm="syz.3.416" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 56.390469][ T36] audit: type=1400 audit(1753676172.590:1305): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.414684][ T36] audit: type=1400 audit(1753676172.600:1306): avc: denied { read } for pid=1585 comm="syz.3.417" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 56.437404][ T36] audit: type=1400 audit(1753676172.600:1307): avc: denied { create } for pid=1585 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 56.895517][ T1620] netlink: 'syz.0.429': attribute type 3 has an invalid length. [ 57.324176][ T1643] netlink: 'syz.1.437': attribute type 27 has an invalid length. [ 57.332265][ T1643] lo: entered promiscuous mode [ 57.337115][ T1643] lo: entered allmulticast mode [ 57.347046][ T1643] tunl0: entered promiscuous mode [ 57.352332][ T1643] tunl0: entered allmulticast mode [ 57.358055][ T1643] gre0: entered promiscuous mode [ 57.363109][ T1643] gre0: entered allmulticast mode [ 57.369338][ T1643] gretap0: entered promiscuous mode [ 57.374654][ T1643] gretap0: entered allmulticast mode [ 57.380529][ T1643] erspan0: entered promiscuous mode [ 57.386194][ T1643] erspan0: entered allmulticast mode [ 57.394862][ T1643] ip_vti0: entered promiscuous mode [ 57.400082][ T1643] ip_vti0: entered allmulticast mode [ 57.406327][ T1643] ip6_vti0: entered promiscuous mode [ 57.411768][ T1643] ip6_vti0: entered allmulticast mode [ 57.428166][ T1643] sit0: entered promiscuous mode [ 57.449745][ T1643] sit0: entered allmulticast mode [ 57.460643][ T1643] ip6tnl0: entered promiscuous mode [ 57.466166][ T1643] ip6tnl0: entered allmulticast mode [ 57.472615][ T1643] ip6gre0: entered promiscuous mode [ 57.477882][ T1643] ip6gre0: entered allmulticast mode [ 57.484074][ T1643] syz_tun: entered promiscuous mode [ 57.489604][ T1643] syz_tun: entered allmulticast mode [ 57.495823][ T1643] ip6gretap0: entered promiscuous mode [ 57.501566][ T1643] ip6gretap0: entered allmulticast mode [ 57.508455][ T1643] bridge0: entered promiscuous mode [ 57.513762][ T1643] bridge0: entered allmulticast mode [ 57.519835][ T1643] dummy0: entered promiscuous mode [ 57.525154][ T1643] dummy0: entered allmulticast mode [ 57.531088][ T1643] veth0: entered promiscuous mode [ 57.536215][ T1643] veth0: entered allmulticast mode [ 57.541915][ T1643] veth1: entered promiscuous mode [ 57.547437][ T1643] veth1: entered allmulticast mode [ 57.553653][ T1643] wg0: entered promiscuous mode [ 57.558957][ T1643] wg0: entered allmulticast mode [ 57.565665][ T1643] wg1: entered promiscuous mode [ 57.570637][ T1643] wg1: entered allmulticast mode [ 57.576735][ T1643] wg2: entered promiscuous mode [ 57.582702][ T1643] wg2: entered allmulticast mode [ 57.588294][ T1643] veth0_to_bridge: entered promiscuous mode [ 57.594239][ T1643] veth0_to_bridge: entered allmulticast mode [ 57.600903][ T1643] veth1_to_bridge: entered promiscuous mode [ 57.606883][ T1643] veth1_to_bridge: entered allmulticast mode [ 57.613628][ T1643] veth0_to_bond: entered promiscuous mode [ 57.619358][ T1643] veth0_to_bond: entered allmulticast mode [ 57.625796][ T1643] bond_slave_0: entered promiscuous mode [ 57.631439][ T1643] bond_slave_0: entered allmulticast mode [ 57.637467][ T1643] veth1_to_bond: entered promiscuous mode [ 57.643244][ T1643] veth1_to_bond: entered allmulticast mode [ 57.649603][ T1643] bond_slave_1: entered promiscuous mode [ 57.655277][ T1643] bond_slave_1: entered allmulticast mode [ 57.661258][ T1643] veth0_to_team: entered promiscuous mode [ 57.667056][ T1643] veth0_to_team: entered allmulticast mode [ 57.673478][ T1643] team_slave_0: entered promiscuous mode [ 57.679122][ T1643] team_slave_0: entered allmulticast mode [ 57.685260][ T1643] veth1_to_team: entered promiscuous mode [ 57.691004][ T1643] veth1_to_team: entered allmulticast mode [ 57.697407][ T1643] team_slave_1: entered promiscuous mode [ 57.703110][ T1643] team_slave_1: entered allmulticast mode [ 57.709219][ T1643] veth0_to_batadv: entered promiscuous mode [ 57.715140][ T1643] veth0_to_batadv: entered allmulticast mode [ 57.721558][ T1643] batadv_slave_0: entered promiscuous mode [ 57.727448][ T1643] batadv_slave_0: entered allmulticast mode [ 57.733792][ T1643] veth1_to_batadv: entered promiscuous mode [ 57.739696][ T1643] veth1_to_batadv: entered allmulticast mode [ 57.746253][ T1643] batadv_slave_1: entered promiscuous mode [ 57.752104][ T1643] batadv_slave_1: entered allmulticast mode [ 57.758406][ T1643] veth0_to_hsr: entered promiscuous mode [ 57.764131][ T1643] veth0_to_hsr: entered allmulticast mode [ 57.770308][ T1643] hsr_slave_0: entered promiscuous mode [ 57.775895][ T1643] hsr_slave_0: entered allmulticast mode [ 57.781778][ T1643] veth1_to_hsr: entered promiscuous mode [ 57.787492][ T1643] veth1_to_hsr: entered allmulticast mode [ 57.793696][ T1643] hsr_slave_1: entered promiscuous mode [ 57.799254][ T1643] hsr_slave_1: entered allmulticast mode [ 57.805262][ T1643] veth1_virt_wifi: entered promiscuous mode [ 57.811196][ T1643] veth1_virt_wifi: entered allmulticast mode [ 57.817763][ T1643] veth0_virt_wifi: entered promiscuous mode [ 57.823699][ T1643] veth0_virt_wifi: entered allmulticast mode [ 57.830021][ T1643] veth1_vlan: entered promiscuous mode [ 57.835571][ T1643] veth1_vlan: entered allmulticast mode [ 57.841643][ T1643] veth0_vlan: left promiscuous mode [ 57.846914][ T1643] veth0_vlan: entered promiscuous mode [ 57.852438][ T1643] veth0_vlan: entered allmulticast mode [ 57.859129][ T1643] vlan0: entered promiscuous mode [ 57.864306][ T1643] vlan0: entered allmulticast mode [ 57.869665][ T1643] vlan1: entered promiscuous mode [ 57.875723][ T1643] vlan1: entered allmulticast mode [ 57.881075][ T1643] veth1_macvtap: left promiscuous mode [ 57.886601][ T1643] veth1_macvtap: entered promiscuous mode [ 57.892386][ T1643] veth1_macvtap: entered allmulticast mode [ 57.898739][ T1643] veth0_macvtap: entered promiscuous mode [ 57.904527][ T1643] veth0_macvtap: entered allmulticast mode [ 57.910738][ T1643] macsec0: entered promiscuous mode [ 57.916062][ T1643] macsec0: entered allmulticast mode [ 57.921723][ T1643] syztnl2: entered promiscuous mode [ 57.927047][ T1643] syztnl2: entered allmulticast mode [ 57.936222][ T1643] wlan1: entered promiscuous mode [ 57.941260][ T1643] wlan1: entered allmulticast mode [ 57.947710][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.954891][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.973531][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.980654][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.418913][ T1692] netlink: 'syz.0.456': attribute type 6 has an invalid length. [ 58.426709][ T1692] netlink: 'syz.0.456': attribute type 4 has an invalid length. [ 58.434435][ T1692] netlink: 'syz.0.456': attribute type 6 has an invalid length. [ 58.442211][ T1692] netlink: 'syz.0.456': attribute type 13 has an invalid length. [ 58.449970][ T1692] netlink: 'syz.0.456': attribute type 15 has an invalid length. [ 58.457802][ T1692] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.456'. [ 59.176233][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.558676][ T1777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1777 comm=syz.0.485 [ 61.232061][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.232099][ T656] Bluetooth: hci0: command 0x1003 tx timeout [ 61.251220][ T36] kauditd_printk_skb: 563 callbacks suppressed [ 61.251238][ T36] audit: type=1400 audit(1753676177.460:1871): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.281623][ T36] audit: type=1400 audit(1753676177.460:1872): avc: denied { read write } for pid=1875 comm="syz.3.522" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.304815][ T36] audit: type=1400 audit(1753676177.460:1873): avc: denied { create } for pid=1875 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 61.325231][ T36] audit: type=1400 audit(1753676177.520:1874): avc: denied { create } for pid=1875 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 61.344913][ T36] audit: type=1400 audit(1753676177.520:1875): avc: denied { read } for pid=1875 comm="syz.3.522" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 61.365997][ T36] audit: type=1400 audit(1753676177.520:1876): avc: denied { read } for pid=1875 comm="syz.3.522" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 61.387111][ T36] audit: type=1400 audit(1753676177.520:1877): avc: denied { read write } for pid=1875 comm="syz.3.522" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.410720][ T36] audit: type=1400 audit(1753676177.520:1878): avc: denied { read write } for pid=1875 comm="syz.3.522" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.434160][ T36] audit: type=1400 audit(1753676177.610:1879): avc: denied { create } for pid=1881 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 61.453140][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 61.458143][ T36] audit: type=1400 audit(1753676177.610:1880): avc: denied { create } for pid=1881 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 63.041198][ T1997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1997 comm=syz.3.567 [ 65.545895][ T2130] netlink: 188 bytes leftover after parsing attributes in process `syz.1.613'. [ 65.593153][ T2140] netlink: 5 bytes leftover after parsing attributes in process `syz.2.617'. [ 66.313429][ T36] kauditd_printk_skb: 374 callbacks suppressed [ 66.313448][ T36] audit: type=1400 audit(1753676182.520:2255): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.344133][ T36] audit: type=1400 audit(1753676182.520:2256): avc: denied { read } for pid=2179 comm="syz.2.630" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 66.372048][ T36] audit: type=1400 audit(1753676182.530:2257): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.397996][ T36] audit: type=1400 audit(1753676182.540:2258): avc: denied { read write } for pid=2181 comm="syz.2.631" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 66.421511][ T36] audit: type=1400 audit(1753676182.550:2259): avc: denied { create } for pid=2181 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 66.444656][ T36] audit: type=1400 audit(1753676182.550:2260): avc: denied { create } for pid=2181 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 66.465700][ T36] audit: type=1400 audit(1753676182.550:2261): avc: denied { name_bind } for pid=2181 comm="syz.2.631" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 66.487427][ T36] audit: type=1400 audit(1753676182.560:2262): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.511524][ T36] audit: type=1400 audit(1753676182.560:2263): avc: denied { read write } for pid=2184 comm="syz.2.632" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 66.534942][ T36] audit: type=1400 audit(1753676182.560:2264): avc: denied { read } for pid=2184 comm="syz.2.632" dev="nsfs" ino=4026532529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 67.475232][ T2278] syz.2.666(2278): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 67.931576][ T2331] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 68.234108][ T2341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 69.168302][ T2406] can0: slcan on ptm0. [ 69.219218][ T2406] can0 (unregistered): slcan off ptm0. [ 69.739164][ T2432] validate_nla: 1 callbacks suppressed [ 69.739184][ T2432] netlink: 'syz.1.723': attribute type 12 has an invalid length. [ 71.322035][ T36] kauditd_printk_skb: 18858 callbacks suppressed [ 71.322056][ T36] audit: type=1400 audit(1753676187.520:20808): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.327802][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.334952][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.349600][ T148] audit: audit_lost=170 audit_rate_limit=0 audit_backlog_limit=64 [ 71.349620][ T148] audit: backlog limit exceeded [ 71.357503][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.362831][ T36] audit: type=1400 audit(1753676187.520:20809): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.370654][ T290] audit: audit_lost=171 audit_rate_limit=0 audit_backlog_limit=64 [ 71.378140][ T291] audit: audit_lost=172 audit_rate_limit=0 audit_backlog_limit=64 [ 71.382335][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.154452][ T2678] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.380103][ T2705] x_tables: duplicate underflow at hook 1 [ 73.612738][ T2722] sit0: left allmulticast mode [ 73.629109][ T2722] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 73.648565][ T2722] netlink: 1 bytes leftover after parsing attributes in process `syz.1.826'. [ 73.845026][ T753] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.680939][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.693904][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.709229][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.717728][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.725469][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.740604][ T2803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 75.541033][ T2840] netlink: 'syz.3.866': attribute type 21 has an invalid length. [ 75.561092][ T2840] netlink: 388 bytes leftover after parsing attributes in process `syz.3.866'. [ 75.732428][ T2849] netlink: 'syz.0.869': attribute type 46 has an invalid length. [ 75.872050][ T656] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.332118][ T36] kauditd_printk_skb: 34476 callbacks suppressed [ 76.332145][ T36] audit: type=1400 audit(1753676192.540:54682): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.347298][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.363655][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.373691][ T288] audit: audit_lost=374 audit_rate_limit=0 audit_backlog_limit=64 [ 76.381543][ T288] audit: backlog limit exceeded [ 76.386643][ T36] audit: type=1400 audit(1753676192.540:54683): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.396491][ T148] audit: audit_lost=375 audit_rate_limit=0 audit_backlog_limit=64 [ 76.426903][ T2896] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.434159][ T2897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.436870][ T2896] audit: audit_lost=376 audit_rate_limit=0 audit_backlog_limit=64 [ 76.668569][ T2922] netlink: 'syz.3.893': attribute type 6 has an invalid length. [ 76.695517][ T2922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2922 comm=syz.3.893 [ 78.221749][ T3048] netlink: 'syz.0.933': attribute type 25 has an invalid length. [ 78.426620][ T3080] netlink: 'syz.0.944': attribute type 4 has an invalid length. [ 79.292233][ T3124] netlink: 'syz.2.960': attribute type 33 has an invalid length. [ 79.300549][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 79.315284][ T3124] netlink: 'syz.2.960': attribute type 33 has an invalid length. [ 79.323687][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 80.529415][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 80.748718][ T3241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 80.772112][ T3241] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.793855][ T3241] bridge_slave_1 (unregistering): left allmulticast mode [ 80.827438][ T3241] bridge_slave_1 (unregistering): left promiscuous mode [ 80.842995][ T3241] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.990333][ T3257] netlink: 'syz.1.1007': attribute type 4 has an invalid length. [ 81.342032][ T36] kauditd_printk_skb: 37617 callbacks suppressed [ 81.342051][ T36] audit: type=1400 audit(1753676197.540:92282): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.356934][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.369877][ T36] audit: type=1400 audit(1753676197.540:92283): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.376179][ T148] audit: audit_lost=383 audit_rate_limit=0 audit_backlog_limit=64 [ 81.397456][ T36] audit: type=1400 audit(1753676197.540:92284): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.413297][ T148] audit: backlog limit exceeded [ 81.431442][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.433555][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.437993][ T148] audit: audit_lost=384 audit_rate_limit=0 audit_backlog_limit=64 [ 81.446750][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.771459][ T3292] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1019'. [ 81.828403][ T3298] netlink: 'syz.2.1021': attribute type 11 has an invalid length. [ 81.884712][ T3304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1024'. [ 83.653975][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.660755][ T759] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.119553][ T3453] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1074'. [ 85.712040][ T3485] Bluetooth: hci0: command 0x1003 tx timeout [ 85.712057][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.360589][ T36] kauditd_printk_skb: 38030 callbacks suppressed [ 86.360608][ T36] audit: type=1400 audit(1753676202.557:129572): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.406935][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.423337][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.424509][ T148] audit: audit_lost=633 audit_rate_limit=0 audit_backlog_limit=64 [ 86.429889][ T291] audit: audit_lost=634 audit_rate_limit=0 audit_backlog_limit=64 [ 86.429907][ T291] audit: backlog limit exceeded [ 86.432408][ T656] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 86.437838][ T36] audit: type=1400 audit(1753676202.567:129573): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.484305][ T148] audit: backlog limit exceeded [ 86.489464][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.496146][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.660309][ T3581] sit0: entered promiscuous mode [ 86.690845][ T3581] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 86.708773][ T3581] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1122'. [ 87.113405][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.120653][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.147650][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.158656][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.166241][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.174060][ T3603] Dead loop on virtual device ip6_vti0, fix it urgently! [ 87.187276][ T759] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.734684][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 89.225268][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'. [ 89.232622][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 89.240281][ T656] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.604207][ T3734] can0: slcan on ttyS3. [ 89.642520][ T3734] can0 (unregistered): slcan off ttyS3. [ 90.235348][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 90.616757][ T3827] netlink: 'syz.1.1210': attribute type 16 has an invalid length. [ 90.635488][ T3827] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1210'. [ 91.362033][ T36] kauditd_printk_skb: 32802 callbacks suppressed [ 91.362053][ T36] audit: type=1400 audit(1753676207.567:158976): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.370900][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.396432][ T148] audit: audit_lost=1769 audit_rate_limit=0 audit_backlog_limit=64 [ 91.404573][ T148] audit: backlog limit exceeded [ 91.409495][ T36] audit: type=1400 audit(1753676207.577:158977): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.430883][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.437576][ T148] audit: audit_lost=1770 audit_rate_limit=0 audit_backlog_limit=64 [ 91.445581][ T148] audit: backlog limit exceeded [ 91.451035][ T36] audit: type=1400 audit(1753676207.577:158978): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.472406][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.660362][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 92.303300][ T3919] netlink: 'syz.3.1240': attribute type 4 has an invalid length. [ 92.322427][ T3919] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1240'. [ 93.160746][ T3963] netlink: 'syz.1.1257': attribute type 12 has an invalid length. [ 93.299451][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 93.898343][ T4029] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 93.906220][ T4029] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1279'. [ 94.750908][ T4098] netlink: 'syz.2.1305': attribute type 12 has an invalid length. [ 95.029926][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.036518][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.372102][ T36] kauditd_printk_skb: 39688 callbacks suppressed [ 96.372123][ T36] audit: type=1400 audit(1753676212.577:197978): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.380809][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.400063][ T36] audit: type=1400 audit(1753676212.587:197979): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.413170][ T148] audit: audit_lost=2001 audit_rate_limit=0 audit_backlog_limit=64 [ 96.427658][ T36] audit: type=1400 audit(1753676212.587:197980): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.435690][ T148] audit: backlog limit exceeded [ 96.461791][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.463936][ T36] audit: type=1400 audit(1753676212.587:197981): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.468377][ T148] audit: audit_lost=2002 audit_rate_limit=0 audit_backlog_limit=64 [ 96.489757][ T36] audit: type=1400 audit(1753676212.587:197982): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.072175][ T656] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.331337][ T4179] cgroup: fork rejected by pids controller in /syz2 [ 97.366333][ T4202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4202 comm=syz.2.1334 [ 97.968628][ T4213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1338'. [ 99.915387][ T4159] TCP: out of memory -- consider tuning tcp_mem [ 99.922663][ T4159] ------------[ cut here ]------------ [ 99.928177][ T4159] WARNING: CPU: 1 PID: 4159 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 99.937719][ T4159] Modules linked in: [ 99.941664][ T4159] CPU: 1 UID: 0 PID: 4159 Comm: syz.3.1327 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 99.955320][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.965467][ T4159] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 99.971443][ T4159] Code: a3 e8 e3 39 c8 fc 0f 0b e9 53 fe ff ff e8 d7 39 c8 fc 0f 0b e9 92 fe ff ff e8 cb 39 c8 fc 0f 0b e9 c4 fe ff ff e8 bf 39 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 99.991296][ T4159] RSP: 0018:ffffc9000e09f7e8 EFLAGS: 00010293 [ 99.997432][ T4159] RAX: ffffffff84bd9131 RBX: 0000000080003000 RCX: ffff88810d26df00 [ 100.005456][ T4159] RDX: 0000000000000000 RSI: 0000000080003000 RDI: 0000000000000000 [ 100.013652][ T4159] RBP: ffffc9000e09f830 R08: ffff888134f0db7f R09: 1ffff110269e1b6f [ 100.021659][ T4159] R10: dffffc0000000000 R11: ffffed10269e1b70 R12: ffff888134f0da00 [ 100.029712][ T4159] R13: ffff888134f0da00 R14: ffff888134f0db64 R15: 1ffff110269e1b42 [ 100.037741][ T4159] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 100.046727][ T4159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.053369][ T4159] CR2: 00007ffdec066e98 CR3: 0000000123798000 CR4: 00000000003526b0 [ 100.061381][ T4159] Call Trace: [ 100.064852][ T4159] [ 100.068069][ T4159] ? __cfi_inet_sock_destruct+0x10/0x10 [ 100.073841][ T4159] __sk_destruct+0x6b/0x6a0 [ 100.078389][ T4159] ? __sk_free+0x304/0x410 [ 100.082880][ T4159] __sk_free+0x313/0x410 [ 100.087161][ T4159] sk_free+0x58/0xb0 [ 100.091094][ T4159] tcp_close+0xc4/0x120 [ 100.095305][ T4159] inet_release+0x1b4/0x2c0 [ 100.099854][ T4159] sock_close+0xdd/0x280 [ 100.104142][ T4159] ? __cfi_sock_close+0x10/0x10 [ 100.109032][ T4159] __fput+0x1fe/0xa00 [ 100.113082][ T4159] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 100.118669][ T4159] ____fput+0x20/0x30 [ 100.122709][ T4159] task_work_run+0x1e0/0x250 [ 100.127343][ T4159] ? __cfi_task_work_run+0x10/0x10 [ 100.132518][ T4159] ? __kasan_check_write+0x18/0x20 [ 100.137672][ T4159] do_exit+0x9bc/0x2630 [ 100.141863][ T4159] ? __cfi_do_exit+0x10/0x10 [ 100.146540][ T4159] ? __kasan_check_write+0x18/0x20 [ 100.151689][ T4159] ? _raw_spin_lock_irq+0x8d/0x120 [ 100.156862][ T4159] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 100.162477][ T4159] do_group_exit+0x22a/0x300 [ 100.167101][ T4159] ? __kasan_check_write+0x18/0x20 [ 100.172308][ T4159] get_signal+0x139d/0x14f0 [ 100.176850][ T4159] arch_do_signal_or_restart+0x96/0x720 [ 100.182494][ T4159] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 100.188695][ T4159] ? __kasan_check_write+0x18/0x20 [ 100.193967][ T4159] syscall_exit_to_user_mode+0x58/0xb0 [ 100.199461][ T4159] do_syscall_64+0x64/0xf0 [ 100.203954][ T4159] ? clear_bhb_loop+0x50/0xa0 [ 100.208674][ T4159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.214630][ T4159] RIP: 0033:0x7fa73bd8e9a9 [ 100.219088][ T4159] Code: Unable to access opcode bytes at 0x7fa73bd8e97f. [ 100.226153][ T4159] RSP: 002b:00007fa73ccaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.234639][ T4159] RAX: 0000000000000001 RBX: 00007fa73bfb5fa0 RCX: 00007fa73bd8e9a9 [ 100.242685][ T4159] RDX: 0000000000000004 RSI: 0000200000000f40 RDI: 0000000000000006 [ 100.250690][ T4159] RBP: 00007fa73be10d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.258730][ T4159] R10: 000000000404c881 R11: 0000000000000246 R12: 0000000000000000 [ 100.266752][ T4159] R13: 0000000000000000 R14: 00007fa73bfb5fa0 R15: 00007ffc4eaf2be8 [ 100.274790][ T4159] [ 100.277837][ T4159] ---[ end trace 0000000000000000 ]--- [ 101.382047][ T36] kauditd_printk_skb: 47269 callbacks suppressed [ 101.382068][ T36] audit: type=1400 audit(1753676217.587:242407): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.390246][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.410054][ T36] audit: type=1400 audit(1753676217.597:242408): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.416504][ T148] audit: audit_lost=2951 audit_rate_limit=0 audit_backlog_limit=64 [ 101.437692][ T36] audit: type=1400 audit(1753676217.597:242409): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.445525][ T148] audit: backlog limit exceeded [ 101.466571][ T36] audit: type=1400 audit(1753676217.597:242410): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.472171][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.492452][ T36] audit: type=1400 audit(1753676217.597:242411): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.499019][ T148] audit: audit_lost=2952 audit_rate_limit=0 audit_backlog_limit=64 [ 106.392043][ T36] kauditd_printk_skb: 51345 callbacks suppressed [ 106.392094][ T36] audit: type=1400 audit(1753676222.597:293570): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.400380][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.419760][ T36] audit: type=1400 audit(1753676222.607:293571): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.426566][ T148] audit: audit_lost=3015 audit_rate_limit=0 audit_backlog_limit=64 [ 106.447404][ T36] audit: type=1400 audit(1753676222.607:293572): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.455495][ T148] audit: backlog limit exceeded [ 106.476413][ T36] audit: type=1400 audit(1753676222.607:293573): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.481959][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.502425][ T36] audit: type=1400 audit(1753676222.607:293574): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.508873][ T148] audit: audit_lost=3016 audit_rate_limit=0 audit_backlog_limit=64