last executing test programs: 5.17534115s ago: executing program 0 (id=1526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/217) 5.17366836s ago: executing program 0 (id=1527): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0x9, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 5.17320429s ago: executing program 0 (id=1528): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002640)=""/262, 0x106}], 0x2, 0xb, 0x9af) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x2, 0x1, 0x5, 0x1, 0xd}, 0x1, 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c7f00000000720300"]) r2 = socket(0x1d, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4089, 0xff9}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) recvmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r4, 0x45809000) ioctl$BLKRRPART(r4, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x86) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2161099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) getrandom(&(0x7f0000000780)=""/276, 0xfffffffffffffe02, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) 5.16667586s ago: executing program 0 (id=1529): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x8) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x432402, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0xe, &(0x7f00000001c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415602}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) clock_getres(0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 3.267005794s ago: executing program 2 (id=1569): connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) waitid(0x2, 0xffffffffffffffff, 0x0, 0x1, 0x0) (async) waitid(0x2, 0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4040) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x8810, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) (async) ptrace$cont(0x20, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000040)={0x2c, 0xfb, 0x5}) 3.155982593s ago: executing program 2 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2a82, 0x0) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='virtiofs\x00', 0x200000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="a25e517a0ba797cd4905002bf3c4d9fbff027d4d71ae79b9390c9c641b60bef8d680d9", 0x23}], 0x1, 0x0, 0x0, 0x44000}}], 0x1, 0x0) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) r8 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r8, 0xffff, 0x800, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1f, 0x0, &(0x7f0000000140)) fsmount(r1, 0x1, 0xface9d914b6e01a3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.154498234s ago: executing program 2 (id=1574): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x689d}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8040) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0xa4002, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4004011) (async) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r1, 0x4f840225e5d55976, r3, &(0x7f0000000340)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) process_madvise(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)="98d137ce5dccf55884ba5491d51983f3767c08c849cdef398ad9b727e178b45a037d8a3fa488c7a0838a0aff79370ed5f8ad960f8188fb49f977d10c5886f3a6015ae05d81f903b2cd973996552d9182afb389f4e72da2202ae2d7de6d4b68067b0063f9c331eca8a52871559ab7e0f05b6b1d041463584ad36ca7f3006b790bf8b83ae5c0f055ff310fac220e8b4982e56b03c0255fafa789b0ddf47d6db488ebb96456839d6c75861aeb0845848242ec87b4b45e69b677f4b6", 0xba}], 0x1, 0x9, 0x0) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async, rerun: 32) fsetxattr$security_selinux(r1, &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x2) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4f5}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2554}, {0x6, 0x11, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x78}}, 0x24008081) (async) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44010) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000dc0)) (async) ftruncate(r1, 0x1e94) setreuid(r4, r3) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80200010}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.153355554s ago: executing program 2 (id=1575): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@private=0xa010101, 0x4e22, 0xfffe, 0xffff, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xefdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x4) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/67, 0x43}, 0x42) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 2.591603389s ago: executing program 2 (id=1576): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) sendto$packet(r1, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r5, 0x0, 0x700) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="6d61783d30ef303737371ebe69d949225ad9b3bc00cdc6b588bd7e715a5f576e0b380485d4b831d999cfacaaa1d613f87ec55127bdfa04cba1aaded927969c275d7dc9ae3a79bffdaff4828f995a4b74493f0e550ebed1d139e26007cbdaf5f36a4d80de50f5f85fa30364c0b54efb64abb743d0a00eaf4de15d527338baba116af4fe9ce0d4"]) execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000002300)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000200)='\'\x00']}, &(0x7f0000002580)={[&(0x7f0000002340)='%^.,\x00', &(0x7f0000002380)='binder\x00', &(0x7f00000023c0)='binder\x00', &(0x7f0000002400)='-@@\x00', &(0x7f0000002440)='./binderfs\x00', &(0x7f0000002480)='\x00', &(0x7f00000024c0)='max', &(0x7f0000002500)='binder\x00', &(0x7f0000002540)='binder\x00']}, 0x1000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) (async) sendto$packet(r1, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) (async) write$rfkill(r5, 0x0, 0x700) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="6d61783d30ef303737371ebe69d949225ad9b3bc00cdc6b588bd7e715a5f576e0b380485d4b831d999cfacaaa1d613f87ec55127bdfa04cba1aaded927969c275d7dc9ae3a79bffdaff4828f995a4b74493f0e550ebed1d139e26007cbdaf5f36a4d80de50f5f85fa30364c0b54efb64abb743d0a00eaf4de15d527338baba116af4fe9ce0d4"]) (async) execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000002300)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000200)='\'\x00']}, &(0x7f0000002580)={[&(0x7f0000002340)='%^.,\x00', &(0x7f0000002380)='binder\x00', &(0x7f00000023c0)='binder\x00', &(0x7f0000002400)='-@@\x00', &(0x7f0000002440)='./binderfs\x00', &(0x7f0000002480)='\x00', &(0x7f00000024c0)='max', &(0x7f0000002500)='binder\x00', &(0x7f0000002540)='binder\x00']}, 0x1000) (async) 2.574665861s ago: executing program 2 (id=1577): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x702, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f00000000c0), 0x4) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x5, 0xc, {0xc, 0xf, "54b24f90fa1a9f306bae"}}, 0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="0000100000000400e300"/24], 0x18}}, 0x0) madvise(&(0x7f0000578000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.150786695s ago: executing program 0 (id=1585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x508, 0x7fff, 0x7, 0x1}, 0x100004a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x8, 0x0, 0x0, 0x4000000, 0x5, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0x1, 0x1, 0x3f, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffff7, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x1d, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x80000001, 0x0, 0x15960318, 0x0, 0x0, 0xb, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x800000, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) close_range(r2, 0xffffffffffffffff, 0x0) 2.141966056s ago: executing program 0 (id=1586): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000040)=0x888b, 0x4) (async) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) read$FUSE(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) io_submit(0x0, 0xfffffffffffffca5, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ac2d8c20520c6128370101020301090224000100000000090489010287702a0009050c10200008040409050801000008020783a581e0849c0ee5d0589927a2a2a04d1e3591a425a5b77c0e88cc5833c999baecfb558aacc5cd1ede02f9b8705998e7418952773ceb598df4c5be47abc6ea47a547b7f90e1c72"], 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) 1.904878415s ago: executing program 1 (id=1590): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1000, 0x7, 0xfffffffffffffffb, 0x100000000000000, 0xfffffffffffffffe}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r3, &(0x7f0000000240)="bab18203fe70f41c3fa74428a9aa5dfd860cbc47fddd43f6aa41c352dde54d52d0f8423706989cdffb9a1380798e0e603f5fb600000000", 0x37) r4 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2000040000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@remote, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}}, 0x48014) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r6, 0x40045436, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x2, 0xfffff000, 0x2b, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x7800, 0x47, 0x3ff, 0xffff}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8992, &(0x7f00000002c0)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.395021877s ago: executing program 1 (id=1593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x58, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x1c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0x5, 0x6, 0x1ff}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000000)='ext4\x00', 0x0) 978.96924ms ago: executing program 3 (id=1596): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 883.380118ms ago: executing program 1 (id=1597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x21c140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 875.291148ms ago: executing program 1 (id=1598): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000905820494502a00"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x100000000, 0x40}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, 0x0, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 315.249914ms ago: executing program 1 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x3a6c, &(0x7f0000000000)={0x0, 0x2904, 0x10, 0x0, 0x107}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 64) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="004e588c05006dfacdf3be159c43", @ANYRES16=r1, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008801) (rerun: 64) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1}, 0xe) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) 163.748526ms ago: executing program 3 (id=1600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) (async) r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_usb_connect$cdc_ncm(0x2, 0x178, &(0x7f0000000080)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x166, 0x2, 0x1, 0x5, 0x0, 0x2f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2f30}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xff0d, 0x5}, {0x6, 0x24, 0x1a, 0x4, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xf9, 0xb, 0x5, 0xac}, @mdlm_detail={0x103, 0x24, 0x13, 0x2, "5fcb738b3aba21964701c6ceddddc76c11a6bc9d8f1bff16561e63418599374d993a13072e6e9961747efead1ea643b157be4af9e7f5111633f529577d4434fd05ca3a5fcd98fc4f505ded7f78425fba0c72a061ad38f98ad20a74f014291eda8740aa3d977d5751bc8c561dad87b83a3d629f38c6ad3dee3250a72b999e4f73015a241a0986ee2bae0a4c3d0126d791e8ddbec556c4e0203cd5c62228e93274de2daf3a80602e1530bf9f55f0ea500afb510677e1c774221d3389598f8bffe8548d9e0da492871a0378133e1dd2f834cf2b8367352cd7cc638041535821bc038d72d9f1a0f5d641869ddaef4d6a76e85262a165a86f04c5257d2218e4cf96"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x1, 0x4c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x68, 0x7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x97, 0xec, 0x20, 0x9}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x0, 0x0}, {0x2, &(0x7f0000000480)=@string={0x2}}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) sendfile(r5, r3, 0x0, 0x7ffff000) (async) prctl$PR_MCE_KILL_GET(0x3d) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250100000004000180100002800c0001800800010003000080"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async) sendfile(r1, r1, &(0x7f00000000c0)=0xffff, 0x4) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x1e600, 0x0) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r7, 0xb42, 0x80000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0xc0046209, 0x0) 128.109339ms ago: executing program 1 (id=1601): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) exit(0xffff) fchdir(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x1, 0xe6, 0x9, 0x1, "4fe6be", 0x0, [0x7, 0x7, 0x10000, 0x1, 0x3, 0xfff, 0x3]}}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 43.869456ms ago: executing program 3 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 43.325926ms ago: executing program 3 (id=1603): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) syz_open_procfs(0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000140)={r7, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r8, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) unshare(0x20000000) r9 = socket(0x2, 0x3, 0x0) recvmmsg(r2, &(0x7f00000098c0)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000000940)=""/69, 0x45}], 0x5}, 0x3}, {{&(0x7f00000005c0)=@ax25={{0x3, @rose}, [@remote, @null, @default, @null, @default, @bcast, @null]}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000001780)=""/155, 0x9b}, {&(0x7f0000001840)=""/195, 0xc3}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000001940)=""/240, 0xf0}], 0x6, &(0x7f0000001ac0)=""/105, 0x69}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/91, 0x5b}, {&(0x7f0000001bc0)}], 0x2}, 0xa}, {{&(0x7f0000001c40)=@caif=@dbg, 0x80, &(0x7f0000001ec0)}, 0xffff8000}, {{&(0x7f0000001f40)=@generic, 0x80, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/86, 0x56}], 0x1, &(0x7f0000002080)=""/81, 0x51}, 0x97}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000009c0)=""/226, 0xe2}], 0x1, &(0x7f0000002240)=""/206, 0xce}, 0x400}, {{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000002340)=""/174, 0xae}, {&(0x7f0000002400)=""/114, 0x72}, {&(0x7f0000002480)=""/101, 0x65}, {&(0x7f0000002500)=""/140, 0x8c}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000008740)=""/251, 0xfb}, {&(0x7f00000025c0)=""/41, 0x29}], 0x7, &(0x7f00000088c0)=""/4087, 0xff7}, 0x5}], 0x7, 0x60, &(0x7f0000000040)) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x380, 0x4, 0x1, 0x1, 0x10}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000000)={0x7, 'wlan0\x00', {0x10001}, 0x9}) 24.202438ms ago: executing program 3 (id=1604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4}}, 0x26) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 0s ago: executing program 3 (id=1605): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYBLOB="4b1fc94f747c168906000000100726797cc9a1cdcd16ac619dd0db5e07f74070bd0bedc93e7c", @ANYBLOB="2c726f6fcb97c3078e746df46f64653d303030303030303030303030483030352e9a1dd82b9bacc46e30f8b0223a34b2d8301ad3303130303034302c757365", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESDEC=r4]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x40806685, 0x0) syz_io_uring_setup(0x4506, &(0x7f0000000240)={0x0, 0x500a, 0x132d8, 0x100002, 0xef}, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 21.141363][ T36] audit: type=1400 audit(1756574769.030:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.142464][ T281] cgroup: Unknown subsys name 'net' [ 21.164236][ T36] audit: type=1400 audit(1756574769.030:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.191561][ T36] audit: type=1400 audit(1756574769.060:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.191774][ T281] cgroup: Unknown subsys name 'devices' [ 21.299631][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.305282][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.477390][ T36] audit: type=1400 audit(1756574769.360:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.500612][ T36] audit: type=1400 audit(1756574769.370:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.516947][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.525582][ T36] audit: type=1400 audit(1756574769.370:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.557276][ T36] audit: type=1400 audit(1756574769.430:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.563918][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.582727][ T36] audit: type=1400 audit(1756574769.430:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.617305][ T36] audit: type=1400 audit(1756574769.450:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.642992][ T36] audit: type=1400 audit(1756574769.450:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.447879][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.454943][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.462147][ T288] bridge_slave_0: entered allmulticast mode [ 22.468476][ T288] bridge_slave_0: entered promiscuous mode [ 22.481492][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.488566][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.495683][ T288] bridge_slave_1: entered allmulticast mode [ 22.501924][ T288] bridge_slave_1: entered promiscuous mode [ 22.535924][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.543139][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.550263][ T291] bridge_slave_0: entered allmulticast mode [ 22.556430][ T291] bridge_slave_0: entered promiscuous mode [ 22.571099][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.578212][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.585394][ T291] bridge_slave_1: entered allmulticast mode [ 22.591658][ T291] bridge_slave_1: entered promiscuous mode [ 22.599464][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.606513][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.613593][ T289] bridge_slave_0: entered allmulticast mode [ 22.619887][ T289] bridge_slave_0: entered promiscuous mode [ 22.626211][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.633317][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.640407][ T289] bridge_slave_1: entered allmulticast mode [ 22.646809][ T289] bridge_slave_1: entered promiscuous mode [ 22.677773][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.684814][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.692096][ T290] bridge_slave_0: entered allmulticast mode [ 22.698312][ T290] bridge_slave_0: entered promiscuous mode [ 22.715009][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.722114][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.729241][ T290] bridge_slave_1: entered allmulticast mode [ 22.735416][ T290] bridge_slave_1: entered promiscuous mode [ 22.872640][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.879744][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.887116][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.894167][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.910433][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.917605][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.924872][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.931925][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.957589][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.964653][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.971968][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.979125][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.993845][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.000919][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.008564][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.015591][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.052333][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.059694][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.067070][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.074377][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.082105][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.089382][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.096567][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.103869][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.115781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.122858][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.139924][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.146971][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.154535][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.161581][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.169849][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.176958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.200320][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.207501][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.217231][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.224336][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.236308][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.243398][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.261837][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.268929][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.311418][ T288] veth0_vlan: entered promiscuous mode [ 23.321041][ T289] veth0_vlan: entered promiscuous mode [ 23.345431][ T288] veth1_macvtap: entered promiscuous mode [ 23.355193][ T291] veth0_vlan: entered promiscuous mode [ 23.366239][ T290] veth0_vlan: entered promiscuous mode [ 23.376005][ T289] veth1_macvtap: entered promiscuous mode [ 23.400359][ T291] veth1_macvtap: entered promiscuous mode [ 23.413374][ T290] veth1_macvtap: entered promiscuous mode [ 23.446370][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.531099][ T339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=339 comm=syz.3.4 [ 23.551006][ T339] overlayfs: failed to resolve './file1': -2 [ 23.581459][ T348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.666102][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.748250][ T62] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.827489][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.897650][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 23.904852][ T360] process 'syz.3.10' launched './file1' with NULL argv: empty string added [ 23.908507][ T62] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 23.925667][ T62] usb 1-1: config 0 has no interface number 0 [ 23.937128][ T62] usb 1-1: config 0 interface 184 has no altsetting 0 [ 23.952442][ T62] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 23.965586][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.980423][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.997647][ T62] usb 1-1: Product: syz [ 24.001876][ T62] usb 1-1: Manufacturer: syz [ 24.006493][ T62] usb 1-1: SerialNumber: syz [ 24.011573][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 24.029480][ T62] usb 1-1: config 0 descriptor?? [ 24.037533][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.048054][ T62] smsc75xx v1.0.0 [ 24.057777][ T9] usb 2-1: config 0 descriptor?? [ 24.099246][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.248600][ T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 24.260892][ T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 24.272698][ T330] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 24.282319][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.290842][ T330] usb 3-1: Product: syz [ 24.295096][ T330] usb 3-1: Manufacturer: syz [ 24.300082][ T330] usb 3-1: SerialNumber: syz [ 24.308808][ T330] usb 3-1: config 0 descriptor?? [ 24.314777][ T356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 24.324155][ T356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 24.474015][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 24.487546][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 24.500902][ T9] usb 2-1: USB disconnect, device number 2 [ 24.537651][ T353] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 24.545047][ T353] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 24.647147][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 24.658107][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.888922][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 24.900066][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 24.910038][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 24.920378][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 24.929896][ T62] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 24.953942][ T330] Error reading MAC address [ 25.022859][ T378] loop7: detected capacity change from 0 to 7 [ 25.073919][ T60] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 25.080795][ T382] bridge0: entered allmulticast mode [ 25.083200][ T60] Buffer I/O error on dev loop7, logical block 0, async page read [ 25.089446][ T382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 25.097003][ T378] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 25.105646][ T382] bridge_slave_1: left allmulticast mode [ 25.114352][ T378] Buffer I/O error on dev loop7, logical block 0, async page read [ 25.120493][ T382] bridge_slave_1: left promiscuous mode [ 25.133404][ T378] loop7: unable to read partition table [ 25.134161][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.139202][ T378] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 25.159950][ T382] bridge_slave_0: left allmulticast mode [ 25.170205][ T382] bridge_slave_0: left promiscuous mode [ 25.176138][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.190296][ T382] bridge0 (unregistering): left allmulticast mode [ 25.803946][ T410] 9pnet_fd: Insufficient options for proto=fd [ 26.107509][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.249923][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 26.249944][ T36] audit: type=1400 audit(1756574774.140:159): avc: denied { write } for pid=415 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.287514][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 26.294087][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.304366][ T330] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 26.313529][ T330] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 26.316137][ T36] audit: type=1400 audit(1756574774.200:160): avc: denied { map } for pid=415 comm="syz.1.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.324495][ T330] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.348560][ T36] audit: type=1400 audit(1756574774.200:161): avc: denied { read write } for pid=415 comm="syz.1.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.358289][ T330] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.382810][ T36] audit: type=1400 audit(1756574774.280:162): avc: denied { read } for pid=415 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.393183][ T330] usb 4-1: config 1 interface 1 has no altsetting 0 [ 26.394645][ T330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.427932][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.433431][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 26.436148][ T330] usb 4-1: Product: syz [ 26.449534][ T330] usb 4-1: Manufacturer: syz [ 26.454217][ T330] usb 4-1: SerialNumber: syz [ 26.523954][ T31] usb 1-1: USB disconnect, device number 2 [ 26.543076][ T420] bridge0: port 3(syz_tun) entered blocking state [ 26.549628][ T420] bridge0: port 3(syz_tun) entered disabled state [ 26.556118][ T420] syz_tun: entered allmulticast mode [ 26.562104][ T420] syz_tun: entered promiscuous mode [ 26.567622][ T420] bridge0: port 3(syz_tun) entered blocking state [ 26.574074][ T420] bridge0: port 3(syz_tun) entered forwarding state [ 26.610767][ T428] fuse: Unknown parameter 'rootmVode' [ 26.633103][ T430] incfs: Error accessing: /dev/rnullb0. [ 26.638879][ T430] incfs: mount failed -20 [ 26.660834][ T36] audit: type=1400 audit(1756574774.550:163): avc: denied { read } for pid=431 comm="syz.0.32" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.664315][ T45] usb 3-1: USB disconnect, device number 2 [ 26.692502][ T36] audit: type=1400 audit(1756574774.550:164): avc: denied { open } for pid=431 comm="syz.0.32" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.729655][ T36] audit: type=1400 audit(1756574774.580:165): avc: denied { create } for pid=431 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.734773][ T330] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 26.757820][ T330] usb 4-1: 2:1 : format type 9 is not supported yet [ 26.772600][ T330] usb 4-1: USB disconnect, device number 2 [ 26.792498][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.861240][ T36] audit: type=1400 audit(1756574774.750:166): avc: denied { write } for pid=437 comm="syz.2.34" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.882744][ T36] audit: type=1400 audit(1756574774.750:167): avc: denied { remove_name } for pid=437 comm="syz.2.34" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.905785][ T36] audit: type=1400 audit(1756574774.750:168): avc: denied { unlink } for pid=437 comm="syz.2.34" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.957472][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.108565][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.118782][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.127735][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.142316][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.151485][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.159564][ T10] usb 1-1: Product: syz [ 27.163851][ T10] usb 1-1: Manufacturer: syz [ 27.168485][ T10] usb 1-1: SerialNumber: syz [ 27.175079][ T10] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 27.182053][ T10] cdc_mbim 1-1:1.0: bind() failure [ 27.201118][ T330] rust_binder: 415: removing orphan mapping 0:24 [ 27.234244][ T445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36'. [ 27.256153][ T449] rust_binder: Error while translating object. [ 27.256185][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.264915][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:53 [ 27.357227][ T457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.366618][ T457] rust_binder: Error in use_page_slow: ESRCH [ 27.373093][ T457] rust_binder: use_range failure ESRCH [ 27.379733][ T457] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 27.380009][ T436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 27.385221][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.385244][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:57 [ 27.412077][ T458] rust_binder: Write failure EFAULT in pid:19 [ 27.413168][ T457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.421744][ T10] usb 1-1: USB disconnect, device number 3 [ 27.483626][ T471] mmap: syz.3.43 (471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.533162][ T476] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.541616][ T476] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 27.550318][ T476] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.558330][ T476] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 27.558589][ T477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=477 comm=syz.3.45 [ 27.640976][ T482] rust_binder: Write failure EFAULT in pid:74 [ 27.641838][ T482] incfs: ino conflict with backing FS 1 [ 27.696943][ T484] exFAT-fs (rnullb0): invalid boot record signature [ 27.703747][ T484] exFAT-fs (rnullb0): failed to read boot sector [ 27.710154][ T484] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.780760][ T488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.804102][ T489] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 27.881586][ T497] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.987841][ T508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 28.023178][ T515] fuse: Bad value for 'fd' [ 28.068357][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.150069][ T525] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 28.227467][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 28.233816][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.244056][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.253914][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 28.267081][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.273721][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 28.282830][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.291441][ T10] usb 4-1: config 0 descriptor?? [ 28.699500][ T10] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 28.707509][ T10] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 28.715361][ T10] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 28.723257][ T10] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 28.731168][ T10] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 28.740054][ T10] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 28.752165][ T10] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 28.900979][ C0] hid-thrustmaster 0003:044F:B65D.0001: Unknown packet type 0x0, unable to proceed further with wheel init [ 29.104284][ T491] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 29.154917][ T537] rust_binder: Error in use_page_slow: ESRCH [ 29.154937][ T537] rust_binder: use_range failure ESRCH [ 29.161016][ T537] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 29.166525][ T537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.174744][ T537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 29.586369][ T549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.768198][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.794472][ T557] netlink: 8568 bytes leftover after parsing attributes in process `syz.1.72'. [ 29.958605][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.977038][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.993815][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 30.011712][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.028652][ T9] usb 3-1: config 0 descriptor?? [ 30.794157][ T330] usb 4-1: USB disconnect, device number 3 [ 31.190976][ T608] netlink: 92 bytes leftover after parsing attributes in process `syz.1.87'. [ 31.217857][ T608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.87'. [ 31.257442][ T36] kauditd_printk_skb: 16084 callbacks suppressed [ 31.257460][ T36] audit: type=1326 audit(1756574779.140:16253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.291566][ T36] audit: type=1326 audit(1756574779.170:16254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.316392][ T36] audit: type=1326 audit(1756574779.180:16255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.341356][ T36] audit: type=1326 audit(1756574779.180:16256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.365156][ T36] audit: type=1326 audit(1756574779.180:16257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.388303][ T36] audit: type=1326 audit(1756574779.180:16258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.411410][ T36] audit: type=1326 audit(1756574779.180:16259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.436863][ T36] audit: type=1326 audit(1756574779.180:16260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.460592][ T36] audit: type=1326 audit(1756574779.180:16261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.484016][ T36] audit: type=1326 audit(1756574779.180:16262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x50000 [ 31.749269][ T619] syz.1.91 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.218540][ T634] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 32.282027][ T645] overlay: ./file0 is not a directory [ 32.289564][ T645] rust_binder: 634 RLIMIT_NICE not set [ 32.297914][ T45] rust_binder: 633: removing orphan mapping 0:4256 [ 32.315368][ T650] __vm_enough_memory: pid: 650, comm: syz.0.101, bytes: 18014402804453376 not enough memory for the allocation [ 32.316138][ T647] ======================================================= [ 32.316138][ T647] WARNING: The mand mount option has been deprecated and [ 32.316138][ T647] and is ignored by this kernel. Remove the mand [ 32.316138][ T647] option from the mount to silence this warning. [ 32.316138][ T647] ======================================================= [ 32.405242][ T660] netlink: 7 bytes leftover after parsing attributes in process `syz.3.104'. [ 32.416496][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 32.450836][ T667] Zero length message leads to an empty skb [ 32.536151][ T679] fuseblk: Bad value for 'blksize' [ 32.600107][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 32.606419][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.628045][ T9] usb 3-1: USB disconnect, device number 3 [ 32.745663][ T711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=711 comm=syz.2.123 [ 32.947458][ T349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.042010][ T724] netlink: 104 bytes leftover after parsing attributes in process `syz.3.128'. [ 33.087460][ T349] usb 1-1: device descriptor read/64, error -71 [ 33.159033][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 33.159971][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.237552][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.327555][ T349] usb 1-1: device descriptor read/64, error -71 [ 33.387465][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 33.395164][ T330] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 33.404308][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.412383][ T330] usb 3-1: Product: syz [ 33.416563][ T330] usb 3-1: Manufacturer: syz [ 33.421169][ T330] usb 3-1: SerialNumber: syz [ 33.426325][ T330] usb 3-1: config 0 descriptor?? [ 33.432230][ T330] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 33.440016][ T330] usb 3-1: Detected FT4233HP [ 33.567491][ T349] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.633697][ T722] binder: Unknown parameter '01777777777777777777777' [ 33.642661][ T330] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 33.650570][ T330] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 33.658317][ T330] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 33.667666][ T330] usb 3-1: USB disconnect, device number 4 [ 33.674498][ T330] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.684138][ T330] ftdi_sio 3-1:0.0: device disconnected [ 33.707463][ T349] usb 1-1: device descriptor read/64, error -71 [ 33.947535][ T349] usb 1-1: device descriptor read/64, error -71 [ 34.057608][ T349] usb usb1-port1: attempt power cycle [ 34.243800][ T746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.243826][ T746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 34.397558][ T349] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.432035][ T349] usb 1-1: device descriptor read/8, error -71 [ 34.559456][ T769] overlayfs: failed to clone upperpath [ 34.578638][ T349] usb 1-1: device descriptor read/8, error -71 [ 34.677547][ T771] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 34.818152][ T349] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.858697][ T349] usb 1-1: device descriptor read/8, error -71 [ 34.947485][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.988721][ T349] usb 1-1: device descriptor read/8, error -71 [ 35.097486][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 35.097587][ T349] usb usb1-port1: unable to enumerate USB device [ 35.103996][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.117343][ T45] usb 3-1: config 0 has no interface number 0 [ 35.123558][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 35.131675][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.140870][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.148888][ T45] usb 3-1: Product: syz [ 35.153051][ T45] usb 3-1: Manufacturer: syz [ 35.157667][ T45] usb 3-1: SerialNumber: syz [ 35.162826][ T45] usb 3-1: config 0 descriptor?? [ 35.168818][ T45] smsc75xx v1.0.0 [ 35.217505][ T730] Bluetooth: hci0: command 0x1003 tx timeout [ 35.223568][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.568805][ T777] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 35.576999][ T777] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.145'. [ 35.577347][ T801] overlayfs: failed to clone upperpath [ 35.797323][ T777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.808877][ T777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.826543][ T824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.835010][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 35.836205][ T824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.845942][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 35.863303][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 35.873649][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 35.885625][ T45] usb 3-1: USB disconnect, device number 5 [ 36.349399][ T36] kauditd_printk_skb: 3783 callbacks suppressed [ 36.349430][ T36] audit: type=1400 audit(1756574784.240:20046): avc: denied { create } for pid=845 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.375785][ T36] audit: type=1400 audit(1756574784.240:20047): avc: denied { connect } for pid=845 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.395745][ T36] audit: type=1400 audit(1756574784.240:20048): avc: denied { getopt } for pid=845 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.408834][ T852] rust_binder: Write failure EFAULT in pid:127 [ 36.467828][ T36] audit: type=1400 audit(1756574784.360:20049): avc: denied { setopt } for pid=858 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.519614][ T36] audit: type=1400 audit(1756574784.410:20050): avc: denied { map } for pid=860 comm="syz.2.170" path="pipe:[6579]" dev="pipefs" ino=6579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 36.519827][ T864] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 36.542442][ T865] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 36.587203][ T36] audit: type=1400 audit(1756574784.470:20051): avc: denied { create } for pid=871 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.607962][ T36] audit: type=1400 audit(1756574784.480:20052): avc: denied { getopt } for pid=871 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.628425][ T36] audit: type=1400 audit(1756574784.480:20053): avc: denied { ioctl } for pid=871 comm="syz.2.173" path="socket:[6097]" dev="sockfs" ino=6097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.647532][ T349] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.653940][ T36] audit: type=1326 audit(1756574784.480:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=871 comm="syz.2.173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff47838ebe9 code=0x0 [ 36.807463][ T349] usb 4-1: Using ep0 maxpacket: 8 [ 36.814795][ T349] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.824118][ T349] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 36.832622][ T890] cgroup2: Unknown parameter 'net_cls' [ 36.833496][ T349] usb 4-1: config 0 has no interface number 0 [ 36.852315][ T36] audit: type=1400 audit(1756574784.740:20055): avc: denied { bind } for pid=889 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.857478][ T349] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 36.887439][ T349] usb 4-1: config 0 interface 88 has no altsetting 0 [ 36.906594][ T349] usb 4-1: string descriptor 0 read error: -22 [ 36.913043][ T349] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 36.932441][ T349] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 36.948283][ T349] usb 4-1: config 0 descriptor?? [ 36.958467][ T349] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input5 [ 37.242509][ T908] rust_binder: Error while translating object. [ 37.242572][ T908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.257616][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 37.316550][ T912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.338269][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 37.368630][ T349] usb 4-1: USB disconnect, device number 4 [ 37.684620][ T927] kvm: pic: non byte write [ 37.735892][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 38.167520][ T349] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.327481][ T349] usb 4-1: Using ep0 maxpacket: 16 [ 38.335072][ T349] usb 4-1: config 1 interface 0 has no altsetting 0 [ 38.344275][ T349] usb 4-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 38.355260][ T349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.363460][ T349] usb 4-1: Product: 쮿偑愿讉儘对왹䖜韴䔵뮋㷾⸚꽻奂ᯗɤ땿ᖺ傕睃⣽鋚鲍䫔ᚃ샄憭⽾뢺긧覊䢫癕ᓗ痎Ԟ஬㯮 [ 38.379923][ T349] usb 4-1: Manufacturer: 뚠泭ꤪ凤쐪씞랗跥쬱겊⣦톺⇖ [ 38.388364][ T349] usb 4-1: SerialNumber: ㋪펕拲꒓倢蛗맜麽ꨮㄝ仅鵁ꔊ拼芨憽쿒ฝ襅냨倠㌤ꔦ놭Ꙅ덒쭍ꭐ銞깃尥罄謠번믴㊤ᥫ汹⠟ᯤ蔚㖩쩀啂飩通龁睾巔↻騛鸁灟㝤ꤛڱ崱㥔抰喬ુ꺾ᢧ鞹睨⟮셇ᠩ蓳ױ銊禞ᤆ⮎琦喉埸㮬٧餞밾䃾注㡚접䘤燃⵳飱㽺鉻㰖韲鴠㍬靏豎먘ự⤅ [ 38.388976][ T935] rust_binder: Error while translating object. [ 38.422434][ T942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 38.431788][ T935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.440960][ T935] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 38.450493][ T935] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:91 [ 38.468830][ T10] rust_binder: 934: removing orphan mapping 0:24 [ 38.529495][ T949] capability: warning: `syz.2.198' uses 32-bit capabilities (legacy support in use) [ 38.556929][ T951] /dev/rnullb0: Can't open blockdev [ 38.631558][ T349] usbhid 4-1:1.0: can't add hid device: -71 [ 38.637637][ T349] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 38.657954][ T349] usb 4-1: USB disconnect, device number 5 [ 38.676506][ T965] fuse: Bad value for 'fd' [ 38.723351][ T974] fuse: Unknown parameter '00000000000000000000004' [ 39.377527][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.480004][ T1000] 9pnet_fd: Insufficient options for proto=fd [ 39.527550][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 39.540228][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.558112][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.570142][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.579600][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.589511][ T31] usb 4-1: Product: syz [ 39.593826][ T31] usb 4-1: Manufacturer: syz [ 39.599056][ T31] usb 4-1: SerialNumber: syz [ 39.624909][ T1019] tipc: Started in network mode [ 39.629858][ T1019] tipc: Node identity 8f, cluster identity 6 [ 39.635951][ T1019] tipc: Node number set to 143 [ 39.640875][ T1019] tipc: Cannot configure node identity twice [ 39.809874][ T31] usb 4-1: 0:2 : does not exist [ 39.818942][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 39.840488][ T31] usb 4-1: USB disconnect, device number 6 [ 39.859439][ T1038] rust_binder: Failed to allocate buffer. len:3485616195723097056, is_oneway:false [ 39.859470][ T1038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.861829][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.869475][ T1039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.897535][ T1038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:141 [ 39.899574][ T1042] rust_binder: Error while translating object. [ 39.915028][ T1042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.921491][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 40.816878][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 40.817468][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.870206][ T1109] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.987486][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 40.994139][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.002692][ T31] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 41.011117][ T31] usb 4-1: config 0 has no interface number 0 [ 41.017240][ T31] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 41.028273][ T31] usb 4-1: config 0 interface 88 has no altsetting 0 [ 41.037012][ T31] usb 4-1: string descriptor 0 read error: -22 [ 41.043317][ T31] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 41.052386][ T31] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 41.061309][ T31] usb 4-1: config 0 descriptor?? [ 41.067979][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 41.271123][ T45] usb 4-1: USB disconnect, device number 7 [ 41.430895][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 41.430914][ T36] audit: type=1400 audit(1756574789.320:20091): avc: denied { getopt } for pid=1129 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.448011][ T1130] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 41.468432][ T1130] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 41.478551][ T36] audit: type=1400 audit(1756574789.370:20092): avc: denied { create } for pid=1129 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 41.498913][ T36] audit: type=1400 audit(1756574789.380:20093): avc: denied { getopt } for pid=1132 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.522190][ T1135] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 41.577464][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.727506][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 41.733744][ T45] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 41.742988][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.751699][ T45] usb 4-1: config 0 descriptor?? [ 41.757815][ T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 41.958725][ T45] usb 4-1: Detected FT232A [ 41.963644][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 41.973111][ T45] usb 4-1: USB disconnect, device number 8 [ 41.979624][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 41.989939][ T45] ftdi_sio 4-1:0.0: device disconnected [ 42.283655][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 42.293791][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 42.303990][ T1145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1145 comm=syz.0.267 [ 42.394709][ T36] audit: type=1400 audit(1756574790.280:20094): avc: denied { ioctl } for pid=1165 comm="syz.0.274" path="socket:[8311]" dev="sockfs" ino=8311 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.435289][ T1170] overlayfs: failed to clone upperpath [ 42.483285][ T1178] binder: Bad value for 'max' [ 42.606827][ T1186] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 42.613966][ T1188] rust_binder: 162: no such ref 2 [ 42.619231][ T1188] rust_binder: 162: no such ref 1 [ 42.937043][ T1204] overlayfs: failed to resolve './file1': -2 [ 42.987463][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.138580][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.149621][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.159412][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.168496][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.177103][ T31] usb 4-1: config 0 descriptor?? [ 43.392132][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 43.403728][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.414965][ T31] usb 4-1: USB disconnect, device number 9 [ 43.503558][ T36] audit: type=1400 audit(1756574791.390:20095): avc: denied { nlmsg_read } for pid=1238 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.543291][ T1241] netlink: 280 bytes leftover after parsing attributes in process `syz.2.298'. [ 43.584817][ T36] audit: type=1400 audit(1756574791.470:20096): avc: denied { write } for pid=1245 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 43.669836][ T1268] overlayfs: failed to clone upperpath [ 43.786430][ T36] audit: type=1400 audit(1756574791.670:20097): avc: denied { listen } for pid=1312 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.811117][ T36] audit: type=1400 audit(1756574791.690:20098): avc: denied { accept } for pid=1312 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.977542][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.128711][ T45] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 44.139058][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.148736][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 44.158147][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.166159][ T45] usb 4-1: SerialNumber: syz [ 44.378554][ T45] usb 4-1: 0:2 : does not exist [ 44.385441][ T45] usb 4-1: unit 255 not found! [ 44.393465][ T45] usb 4-1: USB disconnect, device number 10 [ 44.402012][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.828634][ T1350] 9pnet_fd: Insufficient options for proto=fd [ 44.918028][ T36] audit: type=1400 audit(1756574792.800:20099): avc: denied { execute } for pid=1357 comm="syz.3.337" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.956605][ T1373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.956655][ T1373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 44.975928][ T1376] overlayfs: failed to clone upperpath [ 44.991046][ T36] audit: type=1400 audit(1756574792.870:20100): avc: denied { ioctl } for pid=1368 comm="syz.3.343" path="socket:[8523]" dev="sockfs" ino=8523 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.115733][ T1395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.350'. [ 45.802397][ T1418] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 45.820345][ T1421] 9pnet_fd: Insufficient options for proto=fd [ 45.897882][ T1427] /dev/loop0: Can't lookup blockdev [ 45.919349][ T330] rust_binder: 0: removing orphan mapping 0:24 [ 45.925712][ T1429] fuse: Bad value for 'fd' [ 46.088683][ T1438] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1438 comm=syz.3.367 [ 46.437499][ T36] kauditd_printk_skb: 10334 callbacks suppressed [ 46.437518][ T36] audit: type=1326 audit(1756574794.330:30435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.499986][ T1454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.506546][ T1454] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 46.515772][ T36] audit: type=1326 audit(1756574794.360:30436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.536319][ T1454] audit: backlog limit exceeded [ 46.559483][ T36] audit: type=1326 audit(1756574794.360:30437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.627444][ T36] audit: type=1326 audit(1756574794.360:30438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.657703][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.677446][ T36] audit: type=1326 audit(1756574794.360:30439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.737452][ T36] audit: type=1326 audit(1756574794.360:30440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.777465][ T36] audit: type=1326 audit(1756574794.360:30441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa2358d69f code=0x50000 [ 46.847485][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 46.868328][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 46.887435][ T45] usb 4-1: config 1 has no interface number 1 [ 46.905328][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.917743][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.935915][ T45] usb 4-1: Product: syz [ 46.940322][ T45] usb 4-1: Manufacturer: syz [ 46.944937][ T45] usb 4-1: SerialNumber: syz [ 46.979268][ T1469] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 47.233568][ T45] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 47.234770][ T1471] x_tables: unsorted underflow at hook 4 [ 47.241552][ T45] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 47.257034][ T45] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 47.278476][ T45] usb 4-1: USB disconnect, device number 11 [ 47.301736][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.389054][ T1478] fuse: Bad value for 'fd' [ 47.836023][ T1490] rust_binder: 222: no such ref 0 [ 47.848001][ T1490] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 47.856191][ T1490] rust_binder: Write failure EINVAL in pid:222 [ 47.950861][ T1494] 9pnet_fd: Insufficient options for proto=fd [ 47.989111][ T1497] overlayfs: failed to clone upperpath [ 48.305793][ T1512] 9pnet: Could not find request transport: f7Qdno=0x000000000000000d [ 48.703116][ T1524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.399'. [ 48.767785][ T1538] >: renamed from veth0_vlan (while UP) [ 70.861705][ T1552] binder: Bad value for 'max' [ 70.916443][ T36] kauditd_printk_skb: 13046 callbacks suppressed [ 70.916463][ T36] audit: type=1400 audit(1756574818.800:43488): avc: denied { mount } for pid=1564 comm="syz.0.414" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.957327][ T1569] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.969036][ T1569] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 70.981112][ T1569] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.057510][ T1583] syz.1.422: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 71.072368][ T1583] CPU: 1 UID: 0 PID: 1583 Comm: syz.1.422 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 71.072398][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 71.072409][ T1583] Call Trace: [ 71.072416][ T1583] [ 71.072423][ T1583] __dump_stack+0x21/0x30 [ 71.072456][ T1583] dump_stack_lvl+0x10c/0x190 [ 71.072482][ T1583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.072506][ T1583] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 71.072535][ T1583] dump_stack+0x19/0x20 [ 71.072562][ T1583] warn_alloc+0x1bc/0x2a0 [ 71.072588][ T1583] ? stack_depot_save_flags+0x38/0x800 [ 71.072610][ T1583] ? __cfi_warn_alloc+0x10/0x10 [ 71.072663][ T1583] ? kasan_save_track+0x4f/0x80 [ 71.072682][ T1583] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 71.072713][ T1583] ? xskq_create+0x68/0x2a0 [ 71.072731][ T1583] ? xsk_init_queue+0xb6/0x120 [ 71.072761][ T1583] ? xsk_setsockopt+0x43f/0x6f0 [ 71.072795][ T1583] ? do_sock_setsockopt+0x26d/0x400 [ 71.072824][ T1583] ? __x64_sys_setsockopt+0x1b8/0x250 [ 71.072853][ T1583] ? x64_sys_call+0x2adc/0x2ee0 [ 71.072881][ T1583] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.072905][ T1583] __vmalloc_node_range_noprof+0x135/0x1420 [ 71.072935][ T1583] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 71.072962][ T1583] ? avc_has_perm+0x144/0x220 [ 71.072990][ T1583] ? kasan_save_alloc_info+0x40/0x50 [ 71.073016][ T1583] ? __kasan_kmalloc+0x96/0xb0 [ 71.073038][ T1583] vmalloc_user_noprof+0x77/0x90 [ 71.073063][ T1583] ? xskq_create+0xdb/0x2a0 [ 71.073081][ T1583] xskq_create+0xdb/0x2a0 [ 71.073101][ T1583] xsk_init_queue+0xb6/0x120 [ 71.073129][ T1583] xsk_setsockopt+0x43f/0x6f0 [ 71.073158][ T1583] ? __cfi_xsk_setsockopt+0x10/0x10 [ 71.073187][ T1583] ? do_futex+0x309/0x500 [ 71.073210][ T1583] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 71.073237][ T1583] ? security_socket_setsockopt+0x33/0xd0 [ 71.073258][ T1583] ? __cfi_xsk_setsockopt+0x10/0x10 [ 71.073288][ T1583] do_sock_setsockopt+0x26d/0x400 [ 71.073319][ T1583] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 71.073351][ T1583] __x64_sys_setsockopt+0x1b8/0x250 [ 71.073380][ T1583] x64_sys_call+0x2adc/0x2ee0 [ 71.073407][ T1583] do_syscall_64+0x58/0xf0 [ 71.073433][ T1583] ? clear_bhb_loop+0x50/0xa0 [ 71.073456][ T1583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.073478][ T1583] RIP: 0033:0x7faa2358ebe9 [ 71.073496][ T1583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.073513][ T1583] RSP: 002b:00007faa24472038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.073536][ T1583] RAX: ffffffffffffffda RBX: 00007faa237c5fa0 RCX: 00007faa2358ebe9 [ 71.073552][ T1583] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 71.073565][ T1583] RBP: 00007faa23611e19 R08: 0000000000000004 R09: 0000000000000000 [ 71.073579][ T1583] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.073592][ T1583] R13: 00007faa237c6038 R14: 00007faa237c5fa0 R15: 00007fffbd14a828 [ 71.073609][ T1583] [ 71.073645][ T1583] Mem-Info: [ 71.174792][ T1599] raw_sendmsg: syz.0.426 forgot to set AF_INET. Fix it! [ 71.176208][ T1583] active_anon:4947 inactive_anon:1 isolated_anon:0 [ 71.176208][ T1583] active_file:9667 inactive_file:12471 isolated_file:0 [ 71.176208][ T1583] unevictable:0 dirty:42 writeback:0 [ 71.176208][ T1583] slab_reclaimable:3841 slab_unreclaimable:72593 [ 71.176208][ T1583] mapped:23662 shmem:165 pagetables:875 [ 71.176208][ T1583] sec_pagetables:0 bounce:0 [ 71.176208][ T1583] kernel_misc_reclaimable:0 [ 71.176208][ T1583] free:1524840 free_pcp:4968 free_cma:0 [ 71.436334][ T1583] Node 0 active_anon:60688kB inactive_anon:4kB active_file:42368kB inactive_file:49884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134348kB dirty:168kB writeback:0kB shmem:41560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5272kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no [ 71.470389][ T1583] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:0kB free_cma:0kB [ 71.503476][ T1583] lowmem_reserve[]: 0 3921 3921 [ 71.509826][ T1583] Normal free:3101148kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65788kB inactive_anon:4kB active_file:42368kB inactive_file:49884kB unevictable:0kB writepending:168kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2428kB local_pcp:0kB free_cma:0kB [ 71.558321][ T1583] lowmem_reserve[]: 0 0 0 [ 71.562732][ T1583] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 71.600398][ T1583] Normal: 766*4kB (UE) 687*8kB (UE) 675*16kB (UME) 151*32kB (UE) 59*64kB (UE) 59*128kB (UE) 10*256kB (UME) 5*512kB (UME) 1*1024kB (E) 6*2048kB (UME) 740*4096kB (M) = 3084992kB [ 71.602740][ T1620] overlayfs: failed to clone upperpath [ 71.624014][ T1583] 36950 total pagecache pages [ 71.629172][ T1583] 1 pages in swap cache [ 71.633484][ T1583] Free swap = 124736kB [ 71.639672][ T1583] Total swap = 124996kB [ 71.643893][ T1583] 2097051 pages RAM [ 71.647756][ T1583] 0 pages HighMem/MovableOnly [ 71.652576][ T1583] 351531 pages reserved [ 71.656750][ T1583] 0 pages cma reserved [ 71.663384][ T1583] Memory allocations: [ 71.669037][ T1583] 0 B 0 init/main.c:1370 func:do_initcalls [ 71.672273][ T36] audit: type=1400 audit(1756574819.560:43489): avc: denied { mount } for pid=1623 comm="syz.0.434" name="/" dev="configfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.677668][ T1583] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 71.730701][ T36] audit: type=1400 audit(1756574819.590:43490): avc: denied { search } for pid=1623 comm="syz.0.434" name="/" dev="configfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.767432][ T1583] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 71.771765][ T36] audit: type=1400 audit(1756574819.590:43491): avc: denied { read } for pid=1623 comm="syz.0.434" name="/" dev="configfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.795514][ T1583] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 71.800345][ T36] audit: type=1400 audit(1756574819.590:43492): avc: denied { open } for pid=1623 comm="syz.0.434" path="/" dev="configfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.828203][ T36] audit: type=1400 audit(1756574819.600:43493): avc: denied { setattr } for pid=1623 comm="syz.0.434" name="/" dev="configfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.843130][ T1583] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 71.877434][ T1583] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 71.897186][ T1583] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 71.905529][ T1583] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 71.917468][ T1583] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 71.933644][ T1583] 0 B 0 init/initramfs.c:101 func:find_link [ 71.949026][ T1648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1648 comm=syz.3.440 [ 71.970769][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 72.100104][ T36] audit: type=1400 audit(1756574819.990:43494): avc: denied { read write } for pid=1672 comm="syz.3.450" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.100466][ T1675] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 72.124848][ T36] audit: type=1400 audit(1756574819.990:43495): avc: denied { open } for pid=1672 comm="syz.3.450" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.148142][ T1675] rust_binder: 258: no such ref 0 [ 72.158733][ T36] audit: type=1400 audit(1756574820.030:43496): avc: denied { relabelto } for pid=1672 comm="syz.3.450" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 72.190427][ T36] audit: type=1400 audit(1756574820.030:43497): avc: denied { associate } for pid=1672 comm="syz.3.450" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 72.292114][ T1678] fuse: Bad value for 'rootmode' [ 72.298471][ T1678] 9pnet_fd: Insufficient options for proto=fd [ 72.318069][ T1685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.454'. [ 72.649468][ T1698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.656749][ T1698] IPv6: NLM_F_CREATE should be set when creating new route [ 72.664031][ T1698] IPv6: NLM_F_CREATE should be set when creating new route [ 72.845208][ T1711] netlink: 72 bytes leftover after parsing attributes in process `syz.1.464'. [ 72.854302][ T1712] netlink: 292 bytes leftover after parsing attributes in process `syz.1.464'. [ 72.889562][ T1718] overlayfs: failed to clone upperpath [ 73.175720][ T1737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:268 [ 73.185949][ T1737] input: syz1 as /devices/virtual/input/input7 [ 73.220503][ T1743] netlink: 'syz.0.476': attribute type 30 has an invalid length. [ 73.678611][ T1775] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.687616][ T1775] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.165271][ T1817] fuseblk: Bad value for 'blksize' [ 74.240854][ T1840] overlayfs: failed to clone upperpath [ 74.670990][ T1858] overlayfs: failed to clone upperpath [ 74.697197][ T1862] /dev/rnullb0: Can't lookup blockdev [ 74.722289][ T1866] /dev/loop0: Can't lookup blockdev [ 74.769074][ T1880] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 75.150532][ T1895] rust_binder: Write failure EINVAL in pid:293 [ 75.173827][ T1900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 75.235654][ T1901] overlayfs: missing 'workdir' [ 75.298376][ T1908] /dev/loop0: Can't lookup blockdev [ 75.298483][ T1909] /dev/loop0: Can't lookup blockdev [ 76.055645][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 76.055663][ T36] audit: type=1400 audit(1756574823.940:43512): avc: denied { create } for pid=1936 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.089328][ T36] audit: type=1400 audit(1756574823.980:43513): avc: denied { setattr } for pid=1936 comm="syz.3.545" path="socket:[10506]" dev="sockfs" ino=10506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.114268][ T36] audit: type=1400 audit(1756574823.980:43514): avc: denied { setopt } for pid=1936 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.179406][ T36] audit: type=1400 audit(1756574824.070:43515): avc: denied { map } for pid=1940 comm="syz.3.547" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.562372][ T1971] mmap: syz.1.556 (1971): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 76.617100][ T1980] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 76.617127][ T1980] rust_binder: Error while translating object. [ 76.639497][ T1980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.645738][ T1980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 76.700690][ T1987] cgroup2: Unknown parameter 'net_cls' [ 77.565630][ T2013] fuseblk: Unknown parameter '001#00' [ 77.572040][ T36] audit: type=1326 audit(1756574825.470:43516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2012 comm="syz.3.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa8b98ebe9 code=0x0 [ 78.112762][ T2028] fuse: Bad value for 'fd' [ 78.126812][ T2030] overlayfs: failed to clone upperpath [ 78.146078][ T36] audit: type=1400 audit(1756574826.030:43517): avc: denied { accept } for pid=2031 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.302563][ T2055] netlink: 260 bytes leftover after parsing attributes in process `syz.0.584'. [ 78.312312][ T2061] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 78.319611][ T36] audit: type=1400 audit(1756574826.210:43518): avc: denied { setopt } for pid=2057 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.323489][ T2063] overlayfs: failed to clone upperpath [ 78.342831][ T36] audit: type=1400 audit(1756574826.230:43519): avc: denied { bind } for pid=2057 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.365668][ T36] audit: type=1400 audit(1756574826.230:43520): avc: denied { name_bind } for pid=2057 comm="syz.2.585" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.386672][ T36] audit: type=1400 audit(1756574826.230:43521): avc: denied { node_bind } for pid=2057 comm="syz.2.585" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 78.826807][ T2094] fuseblk: Bad value for 'fd' [ 78.908543][ T2115] fuse: Unknown parameter 'gro' [ 79.081218][ T2128] /dev/rnullb0: Can't lookup blockdev [ 79.116163][ T2134] batadv_slave_0: entered promiscuous mode [ 79.122973][ T2134] batadv_slave_0: left promiscuous mode [ 79.130501][ T2134] overlayfs: failed to clone upperpath [ 79.130542][ T2135] overlayfs: failed to clone upperpath [ 79.331255][ T2152] random: crng reseeded on system resumption [ 79.478927][ T2160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 79.552258][ T2169] /dev/rnullb0: Can't open blockdev [ 80.478045][ T2221] tipc: Started in network mode [ 80.483025][ T2221] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 80.492079][ T2221] tipc: Enabling of bearer rejected, failed to enable media [ 80.543525][ T2223] __vm_enough_memory: pid: 2223, comm: syz.3.646, bytes: 18014402804453376 not enough memory for the allocation [ 81.063432][ T2247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=2247 comm=syz.0.652 [ 81.087504][ T2247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=2247 comm=syz.0.652 [ 81.143427][ T2263] No source specified [ 81.223695][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 81.223715][ T36] audit: type=1400 audit(1756574829.110:43536): avc: denied { create } for pid=2275 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.612022][ T2315] 9pnet_fd: Insufficient options for proto=fd [ 82.604741][ T36] audit: type=1400 audit(1756574830.490:43537): avc: denied { mount } for pid=2340 comm="syz.3.684" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.640818][ T2345] overlayfs: failed to clone lowerpath [ 83.158193][ T2364] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.692'. [ 83.197711][ T2364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37732 sclass=netlink_route_socket pid=2364 comm=syz.0.692 [ 83.318357][ T36] audit: type=1400 audit(1756574831.200:43538): avc: denied { bind } for pid=2377 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.387695][ T2384] /dev/rnullb0: Can't lookup blockdev [ 83.435731][ T2391] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 83.450298][ T36] audit: type=1400 audit(1756574831.340:43539): avc: denied { getopt } for pid=2390 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.595204][ T36] audit: type=1400 audit(1756574831.480:43540): avc: denied { setopt } for pid=2402 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.627438][ T36] audit: type=1400 audit(1756574831.510:43541): avc: denied { read } for pid=2402 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.719083][ T2419] overlayfs: failed to clone upperpath [ 83.907310][ T2429] overlayfs: failed to clone upperpath [ 84.103597][ T2448] netlink: 'syz.0.717': attribute type 16 has an invalid length. [ 84.137465][ T36] audit: type=1326 audit(1756574832.020:43542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2449 comm="syz.2.718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff47838ebe9 code=0x0 [ 84.456145][ T2481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 84.958835][ T2496] tipc: New replicast peer: 0.0.0.0 [ 84.977997][ T2496] tipc: Enabled bearer , priority 10 [ 84.998345][ T2496] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 85.015654][ T2496] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 85.023957][ T2503] netlink: 140 bytes leftover after parsing attributes in process `syz.0.740'. [ 85.040281][ T2503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.740'. [ 85.056246][ T2503] 9pnet_fd: Insufficient options for proto=fd [ 85.111125][ T2526] netlink: 'syz.0.748': attribute type 27 has an invalid length. [ 85.119916][ T2527] 8021q: VLANs not supported on lo [ 85.136796][ T36] audit: type=1400 audit(1756574833.020:43543): avc: denied { accept } for pid=2531 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.142661][ T2535] overlayfs: failed to clone upperpath [ 86.107444][ T10] tipc: Node number set to 1593835521 [ 86.156244][ T2597] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 86.626953][ T36] audit: type=1400 audit(1756574834.510:43544): avc: denied { bind } for pid=2606 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.629054][ T2608] 9pnet_fd: p9_fd_create_tcp (2608): problem connecting socket to 127.0.0.1 [ 86.698026][ T2618] netlink: 'syz.2.778': attribute type 4 has an invalid length. [ 86.731479][ T36] audit: type=1400 audit(1756574834.620:43545): avc: denied { getopt } for pid=2629 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.870214][ T36] audit: type=1400 audit(1756574834.760:43546): avc: denied { mount } for pid=2638 comm="syz.3.786" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 86.870552][ T2639] overlayfs: failed to clone lowerpath [ 87.446729][ T36] audit: type=1400 audit(1756574835.330:43547): avc: denied { execheap } for pid=2664 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.493604][ T2679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 87.497092][ T2681] netlink: 'syz.1.801': attribute type 27 has an invalid length. [ 87.794922][ T36] audit: type=1400 audit(1756574835.680:43548): avc: denied { ioctl } for pid=2703 comm="syz.2.809" path="socket:[12105]" dev="sockfs" ino=12105 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.886453][ T2716] 9pnet_fd: Insufficient options for proto=fd [ 88.070226][ T2726] fuse: Bad value for 'fd' [ 88.211950][ T36] audit: type=1326 audit(1756574836.100:43549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.1.824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2358ebe9 code=0x0 [ 88.286230][ T36] audit: type=1400 audit(1756574836.170:43550): avc: denied { mounton } for pid=2754 comm="syz.1.824" path="/254/file0" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.454905][ T2768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.828'. [ 88.503641][ T2784] overlayfs: failed to clone upperpath [ 88.548630][ T2792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 88.590024][ T2799] overlayfs: failed to clone upperpath [ 88.610290][ T36] audit: type=1400 audit(1756574836.500:43551): avc: denied { create } for pid=2800 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.507415][ T2840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 89.584948][ T2847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 90.084086][ T2870] overlayfs: failed to clone upperpath [ 90.237191][ T36] audit: type=1400 audit(1756574838.120:43552): avc: denied { map } for pid=2885 comm="syz.3.868" path="socket:[12256]" dev="sockfs" ino=12256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.419428][ T2911] netlink: 'syz.3.878': attribute type 10 has an invalid length. [ 90.448101][ T2915] fuseblk: Unknown parameter 'euid' [ 90.473048][ T2920] netlink: 'syz.3.882': attribute type 16 has an invalid length. [ 90.572788][ T36] audit: type=1400 audit(1756574838.460:43553): avc: denied { read } for pid=2940 comm="syz.0.890" path="socket:[12947]" dev="sockfs" ino=12947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.604218][ T2942] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2835 sclass=netlink_xfrm_socket pid=2942 comm=syz.3.889 [ 90.826544][ T2945] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 4294967272. macoff=96 [ 91.975763][ T3002] /dev/rnullb0: Can't lookup blockdev [ 92.001177][ T3008] can: request_module (can-proto-0) failed. [ 92.042725][ T3016] overlayfs: failed to clone upperpath [ 92.577070][ T3043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 92.598547][ T3048] syz.3.925 uses obsolete (PF_INET,SOCK_PACKET) [ 92.741483][ T3070] netlink: 'syz.3.933': attribute type 29 has an invalid length. [ 92.749400][ T3070] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.933'. [ 92.973010][ T3119] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 93.141905][ T3129] overlayfs: failed to clone upperpath [ 93.784992][ T3171] overlayfs: failed to clone lowerpath [ 93.791593][ T3171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 93.862666][ T3175] overlayfs: failed to clone upperpath [ 94.384341][ T3189] overlayfs: failed to clone upperpath [ 94.651881][ T36] audit: type=1400 audit(1756574842.540:43554): avc: denied { getopt } for pid=3205 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.874198][ T3211] 9pnet_fd: Insufficient options for proto=fd [ 94.905938][ T3217] 9pnet_fd: Insufficient options for proto=fd [ 94.953808][ T3227] overlayfs: failed to clone upperpath [ 95.087250][ T36] audit: type=1326 audit(1756574842.970:43555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.1.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa2358ebe9 code=0x0 [ 95.201617][ T36] audit: type=1400 audit(1756574843.090:43556): avc: denied { create } for pid=3246 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 95.229543][ T3249] /dev/loop0: Can't lookup blockdev [ 95.235100][ T3249] /dev/loop0: Can't lookup blockdev [ 95.365724][ T3273] overlayfs: failed to clone upperpath [ 95.391169][ T3277] /dev/rnullb0: Can't lookup blockdev [ 95.401893][ T3278] tipc: Trying to set illegal importance in message [ 95.452513][ T36] audit: type=1400 audit(1756574843.340:43557): avc: denied { create } for pid=3289 comm="syz.0.1016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 96.053898][ T3355] fuseblk: Bad value for 'blksize' [ 96.084026][ T3358] bridge0: port 4(erspan0) entered blocking state [ 96.097443][ T3358] bridge0: port 4(erspan0) entered disabled state [ 96.109960][ T3358] erspan0: entered allmulticast mode [ 96.120398][ T3358] erspan0: entered promiscuous mode [ 96.128153][ T3358] bridge0: port 4(erspan0) entered blocking state [ 96.134629][ T3358] bridge0: port 4(erspan0) entered forwarding state [ 96.333426][ T3380] /dev/rnullb0: Can't lookup blockdev [ 96.505366][ T3387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 97.007577][ T36] audit: type=1400 audit(1756574844.900:43558): avc: denied { audit_write } for pid=3404 comm="syz.2.1055" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.028880][ T36] audit: type=1107 audit(1756574844.900:43559): pid=3404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.112022][ T3422] 9pnet_fd: Insufficient options for proto=fd [ 97.218276][ T3426] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1061'. [ 97.297686][ T36] audit: type=1400 audit(1756574845.190:43560): avc: denied { create } for pid=3427 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 97.598174][ T3456] 9pnet_fd: Insufficient options for proto=fd [ 97.753848][ T3467] overlayfs: failed to clone upperpath [ 97.893034][ T3485] syz.2.1080(3485): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 98.068459][ T3502] 9pnet_fd: p9_fd_create_tcp (3502): problem connecting socket to 127.0.0.1 [ 98.111323][ T3510] overlayfs: failed to clone upperpath [ 98.140894][ T36] audit: type=1400 audit(1756574846.030:43561): avc: denied { read } for pid=3517 comm="syz.0.1090" name="file2" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.202796][ T3531] ./cgroup: Can't lookup blockdev [ 98.347208][ T3543] /dev/rnullb0: Can't lookup blockdev [ 98.633748][ T3567] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1105'. [ 98.683961][ T3559] /dev/rnullb0: Can't lookup blockdev [ 98.825802][ T3576] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 98.845101][ T3576] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 99.349666][ T3614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1121'. [ 99.461058][ T3637] incfs: Error accessing: ./file0/file0. [ 99.466990][ T3637] incfs: mount failed -20 [ 99.545040][ T3656] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1136'. [ 99.689907][ T3674] overlayfs: failed to clone upperpath [ 100.477097][ T3736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=3736 comm=syz.1.1164 [ 100.503426][ T3741] fuse: Unknown parameter 'f'6x' [ 100.573266][ T36] audit: type=1400 audit(1756574848.460:43562): avc: denied { create } for pid=3748 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.068213][ T3761] overlayfs: failed to clone lowerpath [ 101.189363][ T3782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 101.223582][ T3788] fuseblk: Unknown parameter '>70dGm00000000000000000004' [ 101.233163][ T36] audit: type=1400 audit(1756574849.130:43563): avc: denied { create } for pid=3786 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.299461][ T3793] netlink: 'syz.0.1187': attribute type 4 has an invalid length. [ 101.410705][ T3810] /dev/rnullb0: Can't lookup blockdev [ 101.605142][ T3818] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1195'. [ 101.795743][ T3860] netlink: 'syz.2.1209': attribute type 6 has an invalid length. [ 101.862357][ T3878] overlayfs: failed to clone upperpath [ 102.419963][ T3899] overlayfs: failed to clone upperpath [ 102.426409][ T36] audit: type=1400 audit(1756574850.310:43564): avc: denied { ioctl } for pid=3898 comm="syz.2.1222" path="socket:[15581]" dev="sockfs" ino=15581 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.541130][ T36] audit: type=1400 audit(1756574850.430:43565): avc: denied { create } for pid=3910 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 103.052253][ T3926] 9pnet_fd: Insufficient options for proto=fd [ 103.171168][ T3943] netlink: 'syz.3.1241': attribute type 4 has an invalid length. [ 103.183214][ T3944] netlink: 'syz.3.1241': attribute type 4 has an invalid length. [ 103.196528][ T36] audit: type=1400 audit(1756574851.090:43566): avc: denied { create } for pid=3942 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.228508][ T3953] /dev/loop0: Can't lookup blockdev [ 103.244842][ T3955] fuse: Unknown parameter ' [ 103.244842][ T3955] тq+' [ 103.263639][ T3951] syz.0.1244: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 103.278673][ T3951] CPU: 1 UID: 0 PID: 3951 Comm: syz.0.1244 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 103.278708][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 103.278721][ T3951] Call Trace: [ 103.278728][ T3951] [ 103.278736][ T3951] __dump_stack+0x21/0x30 [ 103.278766][ T3951] dump_stack_lvl+0x10c/0x190 [ 103.278794][ T3951] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.278822][ T3951] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 103.278851][ T3951] dump_stack+0x19/0x20 [ 103.278875][ T3951] warn_alloc+0x1bc/0x2a0 [ 103.278899][ T3951] ? stack_depot_save_flags+0x38/0x800 [ 103.278919][ T3951] ? __cfi_warn_alloc+0x10/0x10 [ 103.278942][ T3951] ? kasan_save_track+0x4f/0x80 [ 103.278961][ T3951] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 103.278988][ T3951] ? xskq_create+0x68/0x2a0 [ 103.279006][ T3951] ? xsk_init_queue+0xb6/0x120 [ 103.279032][ T3951] ? xsk_setsockopt+0x43f/0x6f0 [ 103.279058][ T3951] ? do_sock_setsockopt+0x26d/0x400 [ 103.279086][ T3951] ? __x64_sys_setsockopt+0x1b8/0x250 [ 103.279115][ T3951] ? x64_sys_call+0x2adc/0x2ee0 [ 103.279143][ T3951] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.279165][ T3951] __vmalloc_node_range_noprof+0x135/0x1420 [ 103.279196][ T3951] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 103.279223][ T3951] ? avc_has_perm+0x144/0x220 [ 103.279250][ T3951] ? kasan_save_alloc_info+0x40/0x50 [ 103.279275][ T3951] ? __kasan_kmalloc+0x96/0xb0 [ 103.279296][ T3951] vmalloc_user_noprof+0x77/0x90 [ 103.279320][ T3951] ? xskq_create+0xdb/0x2a0 [ 103.279339][ T3951] xskq_create+0xdb/0x2a0 [ 103.279357][ T3951] xsk_init_queue+0xb6/0x120 [ 103.279386][ T3951] xsk_setsockopt+0x43f/0x6f0 [ 103.279412][ T3951] ? __cfi_xsk_setsockopt+0x10/0x10 [ 103.279439][ T3951] ? do_futex+0x356/0x500 [ 103.279460][ T3951] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 103.279484][ T3951] ? security_socket_setsockopt+0x33/0xd0 [ 103.279504][ T3951] ? __cfi_xsk_setsockopt+0x10/0x10 [ 103.279532][ T3951] do_sock_setsockopt+0x26d/0x400 [ 103.279575][ T3951] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 103.279607][ T3951] __x64_sys_setsockopt+0x1b8/0x250 [ 103.279639][ T3951] x64_sys_call+0x2adc/0x2ee0 [ 103.279667][ T3951] do_syscall_64+0x58/0xf0 [ 103.279693][ T3951] ? clear_bhb_loop+0x50/0xa0 [ 103.279715][ T3951] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.279736][ T3951] RIP: 0033:0x7fa21418ebe9 [ 103.279756][ T3951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.279774][ T3951] RSP: 002b:00007fa214f3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.279797][ T3951] RAX: ffffffffffffffda RBX: 00007fa2143c5fa0 RCX: 00007fa21418ebe9 [ 103.279813][ T3951] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 103.279827][ T3951] RBP: 00007fa214211e19 R08: 0000000000000004 R09: 0000000000000000 [ 103.279840][ T3951] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.279854][ T3951] R13: 00007fa2143c6038 R14: 00007fa2143c5fa0 R15: 00007ffeecfc0e18 [ 103.279872][ T3951] [ 103.279880][ T3951] Mem-Info: [ 103.541285][ T36] audit: type=1400 audit(1756575107.430:43567): avc: denied { map } for pid=3963 comm="syz.1.1249" path="socket:[15643]" dev="sockfs" ino=15643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.555263][ T3951] active_anon:5549 inactive_anon:7 isolated_anon:0 [ 103.555263][ T3951] active_file:8548 inactive_file:14540 isolated_file:0 [ 103.555263][ T3951] unevictable:0 dirty:51 writeback:0 [ 103.555263][ T3951] slab_reclaimable:6575 slab_unreclaimable:70218 [ 103.555263][ T3951] mapped:23660 shmem:206 pagetables:1221 [ 103.555263][ T3951] sec_pagetables:0 bounce:0 [ 103.555263][ T3951] kernel_misc_reclaimable:0 [ 103.555263][ T3951] free:1525096 free_pcp:2757 free_cma:0 [ 103.574158][ T36] audit: type=1400 audit(1756575107.430:43568): avc: denied { accept } for pid=3963 comm="syz.1.1249" path="socket:[15643]" dev="sockfs" ino=15643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 103.579415][ T3951] Node 0 active_anon:22096kB inactive_anon:28kB active_file:34192kB inactive_file:58160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94640kB dirty:204kB writeback:0kB shmem:824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5756kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no [ 103.678248][ T3980] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 103.681284][ T3951] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:0kB free_cma:0kB [ 103.757925][ T3951] lowmem_reserve[]: 0 3921 3921 [ 103.762947][ T3951] Normal free:3140032kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22208kB inactive_anon:28kB active_file:34192kB inactive_file:58160kB unevictable:0kB writepending:204kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3976kB local_pcp:924kB free_cma:0kB [ 103.803864][ T3951] lowmem_reserve[]: 0 0 0 [ 103.814409][ T3951] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 103.837440][ T3951] Normal: 39*4kB (ME) 700*8kB (UME) 580*16kB (UME) 649*32kB (UME) 608*64kB (UME) 213*128kB (UME) 83*256kB (UME) 55*512kB (UME) 36*1024kB (ME) 30*2048kB (UME) 706*4096kB (UM) = 3141468kB [ 103.865685][ T3951] 23371 total pagecache pages [ 103.871861][ T3951] 88 pages in swap cache [ 103.879258][ T3951] Free swap = 123500kB [ 103.887437][ T3951] Total swap = 124996kB [ 103.893332][ T3951] 2097051 pages RAM [ 103.902774][ T3951] 0 pages HighMem/MovableOnly [ 103.915000][ T3951] 351531 pages reserved [ 103.919956][ T3951] 0 pages cma reserved [ 103.927184][ T3951] Memory allocations: [ 103.931557][ T3951] 0 B 0 init/main.c:1370 func:do_initcalls [ 103.939381][ T3951] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 103.950135][ T3951] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 103.958708][ T3951] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 103.967054][ T3951] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 103.976405][ T3951] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 103.985292][ T3951] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 103.993468][ T3951] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 104.001485][ T3951] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 104.009518][ T3951] 0 B 0 init/initramfs.c:101 func:find_link [ 104.046720][ T4049] 9pnet_fd: Insufficient options for proto=fd [ 104.081209][ T4058] overlayfs: failed to resolve './file0': -2 [ 104.100828][ T4060] batadv_slave_1: entered promiscuous mode [ 104.109179][ T4059] batadv_slave_1: left promiscuous mode [ 104.483061][ T36] audit: type=1400 audit(1756575108.370:43569): avc: denied { name_bind } for pid=4079 comm="syz.2.1289" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 104.574676][ T36] audit: type=1400 audit(1756575108.460:43570): avc: denied { mount } for pid=4085 comm="syz.3.1291" name="/" dev="pstore" ino=2637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 104.790228][ T4106] /dev/rnullb0: Can't lookup blockdev [ 104.931496][ T4136] 9pnet_fd: Insufficient options for proto=fd [ 105.362704][ T4168] 9pnet_fd: Insufficient options for proto=fd [ 105.644750][ T4187] fuse: Bad value for 'fd' [ 106.675313][ T4232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4232 comm=syz.2.1340 [ 106.769922][ T36] audit: type=1400 audit(1756575110.660:43571): avc: denied { ioctl } for pid=4242 comm="syz.3.1345" path="socket:[16521]" dev="sockfs" ino=16521 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.800986][ T4247] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 106.974703][ T4297] netlink: 'syz.3.1363': attribute type 11 has an invalid length. [ 107.291581][ T36] audit: type=1400 audit(1756575111.180:43572): avc: denied { accept } for pid=4345 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.463437][ T36] audit: type=1400 audit(1756575111.350:43573): avc: denied { setopt } for pid=4366 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.490368][ T36] audit: type=1400 audit(1756575111.380:43574): avc: denied { read } for pid=4366 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.541146][ T4374] overlayfs: failed to clone upperpath [ 108.193497][ T4417] overlayfs: failed to resolve './file0': -2 [ 108.212856][ T4421] $: renamed from bridge_slave_0 (while UP) [ 108.265706][ T4433] cgroup: Bad value for 'name' [ 108.314087][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 108.323857][ T4439] netlink: 'syz.0.1415': attribute type 4 has an invalid length. [ 108.333028][ T4439] netlink: 'syz.0.1415': attribute type 4 has an invalid length. [ 108.419939][ T4447] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1418'. [ 108.430114][ T4447] sock: sock_timestamping_bind_phc: sock not bind to device [ 109.436754][ T4518] overlayfs: missing 'lowerdir' [ 109.450695][ T36] audit: type=1400 audit(1756575113.340:43575): avc: denied { sqpoll } for pid=4522 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.927563][ T4588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1466'. [ 110.257822][ T36] audit: type=1326 audit(1756575114.150:43576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.1469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2358ebe9 code=0x0 [ 110.590447][ T4610] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 110.598248][ T4610] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1475'. [ 110.616949][ T4612] cgroup: noprefix used incorrectly [ 111.258825][ T4653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1491'. [ 111.268023][ T4653] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1491'. [ 111.276974][ T4653] netlink: 'syz.3.1491': attribute type 6 has an invalid length. [ 111.284824][ T4653] netlink: 'syz.3.1491': attribute type 5 has an invalid length. [ 111.292604][ T4653] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1491'. [ 111.302632][ T4653] 9pnet_fd: Insufficient options for proto=fd [ 111.874130][ T4679] netlink: 'syz.2.1499': attribute type 4 has an invalid length. [ 111.882317][ T4679] netlink: 'syz.2.1499': attribute type 4 has an invalid length. [ 112.109933][ T4705] overlayfs: failed to clone upperpath [ 112.230258][ T4714] cgroup: fork rejected by pids controller in /syz3 [ 112.306838][ T4852] overlayfs: lower data-only dirs require metacopy support. [ 112.314472][ T4853] overlayfs: lower data-only dirs require metacopy support. [ 112.612056][ T4879] fuse: Unknown parameter 'al' [ 112.617341][ T4879] can: request_module (can-proto-0) failed. [ 112.640933][ T36] audit: type=1326 audit(1756575116.530:43577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.0.1529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa21418ebe9 code=0x0 [ 112.860133][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 112.882826][ T36] audit: type=1400 audit(1756575116.770:43578): avc: denied { search } for pid=4888 comm="syz.2.1532" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.917078][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 112.926092][ T4891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1533'. [ 113.088840][ T4913] netlink: 'syz.3.1541': attribute type 4 has an invalid length. [ 113.105288][ T4913] netlink: 'syz.3.1541': attribute type 4 has an invalid length. [ 113.447461][ T4945] fuse: Bad value for 'rootmode' [ 113.570757][ T36] audit: type=1326 audit(1756575117.460:43579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2358ebe9 code=0x7fc00000 [ 114.307559][ T36] audit: type=1326 audit(1756575118.200:43580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa2352adb9 code=0x7fc00000 [ 114.331386][ T36] audit: type=1326 audit(1756575118.200:43581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faa2352ae7f code=0x7fc00000 [ 114.346608][ T4959] 9pnet_fd: Insufficient options for proto=fd [ 114.355420][ T36] audit: type=1326 audit(1756575118.200:43582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa2358ebe9 code=0x7fc00000 [ 114.449786][ T36] audit: type=1400 audit(1756575118.340:43583): avc: denied { create } for pid=4981 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.662252][ T36] audit: type=1326 audit(1756575119.550:43584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.0.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21418ebe9 code=0x0 [ 117.647823][ T36] audit: type=1326 audit(1756575121.540:43585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5101 comm="syz.3.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa8b98ebe9 code=0x0 [ 117.730312][ T36] audit: type=1400 audit(1756575121.620:43586): avc: denied { ioctl } for pid=5110 comm="syz.3.1603" path="socket:[17835]" dev="sockfs" ino=17835 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.813673][ T5119] fuse: Bad value for 'fd' [ 117.847306][ T5122] fuse: Unknown parameter 'ȇ iE$TRB>(HbSF79rY%!綫iaqkY' [ 117.902809][ T5126] /dev/loop0: Can't lookup blockdev [ 117.909495][ T5126] __nla_validate_parse: 1 callbacks suppressed [ 117.909514][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 123.540688][ T36] audit: type=1400 audit(1756575127.430:43587): avc: denied { read } for pid=5138 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 123.773498][ T36] audit: type=1400 audit(1756575127.660:43588): avc: denied { search } for pid=5150 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 123.841916][ T36] audit: type=1400 audit(1756575127.730:43589): avc: denied { read write } for pid=5157 comm="ip" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 123.877271][ T36] audit: type=1400 audit(1756575127.760:43590): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.899424][ T36] audit: type=1400 audit(1756575127.760:43591): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.922153][ T36] audit: type=1400 audit(1756575127.760:43592): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 123.944500][ T36] audit: type=1400 audit(1756575127.790:43593): avc: denied { unlink } for pid=148 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping iptables: [ 123.977540][ T36] audit: type=1400 audit(1756575127.870:43594): avc: denied { read write } for pid=5164 comm="iptables" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 124.001577][ T36] audit: type=1400 audit(1756575127.870:43595): avc: denied { search } for pid=5164 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.024814][ T36] audit: type=1400 audit(1756575127.870:43596): avc: denied { write } for pid=5164 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.90 closed by remote host. [ 125.675561][ T4118] bridge0: port 3(syz_tun) entered disabled state [ 125.686027][ T4118] syz_tun (unregistering): left allmulticast mode [ 125.692559][ T4118] syz_tun (unregistering): left promiscuous mode [ 125.699093][ T4118] bridge0: port 3(syz_tun) entered disabled state [ 125.817175][ T46] bridge_slave_1: left allmulticast mode [ 125.822949][ T46] bridge_slave_1: left promiscuous mode [ 125.828867][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.836695][ T46] $: left allmulticast mode [ 125.841772][ T46] $: left promiscuous mode [ 125.846723][ T46] bridge0: port 1($) entered disabled state [ 126.009190][ T46] tipc: Disabling bearer [ 126.014481][ T46] tipc: Left network mode [ 126.020087][ T46] veth1_macvtap: left promiscuous mode [ 126.025612][ T46] >: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 127.542059][ T5185] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 127.548916][ T5185] ACPI: PM: Preparing to enter system sleep state S5 [ 127.555788][ T5185] kvm: exiting hardware virtualization [ 127.561325][ T5185] reboot: Power down serialport: VM disconnected.