last executing test programs: 8m16.99234252s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv0\x00', 0x20}) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000"], 0xffe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1507000000ffff001000000800391d323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 8m1.582373709s ago: executing program 32 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv0\x00', 0x20}) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000"], 0xffe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1507000000ffff001000000800391d323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 7m51.269289354s ago: executing program 4 (id=335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x100000001, 0x4, 0x7, 0x6, 0x8, 0x5, 0x7, 0x1}, &(0x7f0000000040)={0x8, 0xc, 0xf0ac, 0x4c0, 0x1, 0x122bc5a2, 0x5, 0x3}, &(0x7f00000000c0)={0x2, 0x3, 0x8000000000000000, 0x6, 0x261a000, 0x3, 0xf, 0x7f}, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) 7m51.268781554s ago: executing program 4 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x203f03803c77e3f3, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1) (async, rerun: 64) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 7m51.255574434s ago: executing program 4 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 7m51.231066574s ago: executing program 4 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0), 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 7m51.134023035s ago: executing program 4 (id=342): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000200"], &(0x7f0000000bc0)=0x2a) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000240)=[{r3, 0x502}], 0x1, 0x7) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) (async) r7 = dup(r6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000240)="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") (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r9, &(0x7f00000042c0)={0x2020}, 0x2020) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) (async) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 7m51.012992396s ago: executing program 4 (id=347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1085458, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) io_setup(0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2, r4}]) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0xfffffffffffff000, 0x1000000}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer], 0x39, 0x0, &(0x7f0000000740)="ff9388205610ea21e0ee676b6be7e753dfed682c0b84a984e14a2f5daaca8b4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b237"}) 7m50.968392296s ago: executing program 33 (id=347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1085458, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) io_setup(0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2, r4}]) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0xfffffffffffff000, 0x1000000}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer], 0x39, 0x0, &(0x7f0000000740)="ff9388205610ea21e0ee676b6be7e753dfed682c0b84a984e14a2f5daaca8b4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b237"}) 7m24.965886043s ago: executing program 3 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 7m24.911289203s ago: executing program 3 (id=859): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x6, 0x80000000, 0x1, 0xa2b2}, 0x14) 7m24.895384213s ago: executing program 3 (id=860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000280)="26729a20d88e1a4984309dc4f649e6321423794a0e4afad847e7bc9c983694674785f6b9b0dcf545acbef01647565b8ab114b1ae1b4d3bda463393c79af870c85829620ef108f88cc3a89c00e538b9d5aeff382c30c8d96bf02cf63a32afec3e36ae6b3f37bb73146480145b34017caf73c9cd7e7e883ba1f35a21285469e1cb3c57551266ca9adf6e01475328662d6ffe429e42959107850bc931074ed46e53190ca695ebb501fda0cc621e0337ffda023e4cf5278b6acf3855b3d69cbde22b801132b3dcb9b479ad8fa9036ded44c76ae8731f9f") ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0xffffd5db, 0xfff, 0x3, 0x800}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x9, 0x2, 0x3, 0x2, 0xff}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 7m24.884154543s ago: executing program 3 (id=861): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c4196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000440), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 7m24.831037154s ago: executing program 3 (id=862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x18, 0x0}, 0x5b4}], 0x1, 0xc040) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001100)={0x0, 0x0, "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", "101e53276866051d79f6406a8414809f8fc1a9304b4b6f19be649db96ff038dc578f8db3a29d73f51fee20eac1b483332ac5cccd82a6644245f91edada40e9e383ad7e5a3aa8eebd4d9b92497ab5bfcf6d6848c0adb17298bc8f615a318c764eab7c7201179c54edfa9ec0f1bc837ed319aa682439323977eab9dcb41922f31fee3324f5e4552316cd7d2e8db31bbbf5fc57b0e75690665bace884efdda5476eca511c0274a5d671b80b3c7cc7a334e09a80ad8e3a10043e89e4e4734b8bec1a5c983611e7978d4e55e9a5bf5ec3db977cb5204362e775fd753b824bc1a9a5cc77dea59a3b59f374bd0f87d4ffb3c00c3d5fb791ad445eb3669372abd5962420de3a3689084a576787f5316e9ba0b8fcd608dc18674e20e2d3149164f6d2c121cad882ee4cfbecbc27940d5a848b91665fab36f47fc623143a6826d857bfe12f01892a12e4ce0ac2a2af281406824335bf4fc339b3379ed1417db7bce6c893a2d132c3f65b4debc74ec2ce5458217739d77b6ee421e9e9a4407405d4938531d716a1b117744ae6e6d0c81d1721d5ea7931f1d681447ea4cc2a6b56d6a0e95ad9e02fb25787fc28ecb961ea39caf517ffb13bf09dc5eff156cd153a275e55079cd515af87aea77d3eade4633e1ff615c65322eb66ab8f0d1865cbf9540cd2f70d8c987bb4a7fe73b630fab95694906ef1f223e2af0ae6c16057d5cb9919e92125a5f2bceccb4bca3778b038ddcb5548dd276fa7b174866ac63410cc076176e55faf600acfd51ce92265b7a8fd6219b6f53ce6e420cd1ad91ec7661df5db918af75bdd09d8187f8072b6f1fa1bc0eed2196467244045653e2bc44f82f30633a0545413772ba0b85517c781e83cd1676722647a620e42cb67aa2beb7b3e4590fdcfc9652f108294df0992615fc78816b85b9ce26e33bdd98d2ce0eea3f8580ab96e27af4c1029333bf167bdb5d18b5fb8c84229ef5f09f995e47c1abb1bc54044c27b233d08391adcebf48e07f7aadc2821473e3ae9b9e71e68f78a997d61121504f97717cfbbcea6da959458ac70c8c8f3643d7fd2450e59209eb5ea96fcdbff39430f265755e1587a6c9451923d4dc9bba65280f6fccf8a531b5c238369b76fa5755d818f4902d4bfafdacf2bca3d0d6115d0a36cb74b1a5f5de70269a607e52ed4e2801f7ac18e962d4e3a1ca99c9ec756126eb61d7732e706299cd0b1e40eb0539bf02c8b9dccc620f6bd1d94bf2f765c312bde7ac09b292c58e6df0f928832fbe669af092f888f3e394600c9d7f75d7b0059afd7a5a91972b939b7866a46b9e5c6f55202c89c2fdc0803a97a9c4078bdeae9ff48c7047c6f1f799c9a1e0289fa051f4badf5c1e3a64a6f143d3c7a1c3eea085ef223be1d60fa629a7ddbb43fc2f856af33a0ceef3014a2ba524b8c46f5cff85c4d609bd146ec6af895cba1a822169506ce6efa138189eeb58c13dbb07433aceb464637258fa7bbb0e844ea9fd156d92f9e790d38387f9a43797e7ec2c761c42c1f561a3a8ba92fdbfec24a9afa90844b6b2a014b5a163d96fa15f9d851b6918b063b22e66bf8e85305cac244b912fe3902e7aeab983e076825fac23620fb4d65b3f56301d6edfe1e93791edfd7670001fb64e301e0d45548f8c588c518df0736c9e24d50f55c2e219154ce523a84d9722e57185f0b6cd5faa55983ab210a073ab840f3607e5ffb09dc1af1958c35168ab89ddfcbfe585c4a03024167045d136217149feccf2288b5a53a0c43816dfb8af3d12d517ec0c1ebb135375021302c1489c0cdaeddd30dfbc50bbab3f642e0228f8951038efbbef5584e93e3d112769e006452772e3da5b3f5d0d556d4b13ce60623322bb3979e658c116531de0c3f9317bde205c2d1fcfb568f82783ade3180fac631b0cee4559fa3c6b5afd87963ca59c54aa00045ad3972f94e3de8770ee66c5eb68e7abd8b26a1cf8668963a09fa098c3bca07bbc27020959f3894a18a966787b513dca519c95ba1db33af7ad3b74c15c340e8e33dfc50def35ca798fe82f858797b9e3078d8be301b2565a83af6e9613f1f88a83c87deb30ad646113692d8840614573c7d90c90b914dc6b713904a54c60b24e4376bdc8b343c4d6d0c1c929fa4dd251522528c9c978744db1dd2309ceb9f0ab8774855f7ef1c1717832edc25efa9b6e17d87970684789ee04228ea9406c122079858145bd88ee9f15e2394c147f9c19e51e2f070ec1440dc102e0ac540922516311c414150272934bc7233e5ac121a658c4f47e2d57848323a7fe09597789d38ddeb6a456fd8c66d7f313854d8cc2aeffa394c4daac3709563542da4834535356d746b8b6f58bf706aa77416c4734aa2ff3cef9f58669958cdaaec82c240bd0b80178ba53cd5c334c63ee24e601e57257937114ab74413382304be1a3ee57487847ea28074d53763e23cde980cd75d90116281a1ea2ad29376e9873c86dc01565a110ae7eb68b5c7b90ff52e55a7df7a2d303165504d1c55a4d5ffe0ef99395437b4a65befd20b1d4e4b2a49fcf60ce0b21ca1d9a211261f523b6fd0866e08b2ea59a2899b11adb56afac6c96005197f529b5b56c2dcebfc54753833ad171c4a53f61dfdb46e823c6703ff3716bf52e701e251789172585648453200948ae62761525b0196ccba2855ca08329825745b2e363afe2941eb3c0c80968bcb0609cfa3f00922a47e75ac7c69785fd037dcd49bfa86d0bd4d65fe038164561c8745469d55cb71179245cad8c7701e32902513aa24de4155144f26fe1f042def6163045fec3160879fbc211f906374a9b8a2ffad254e29e90b10415eebc9196314931f0031f821d97ecb5c2ade713d4f62821a1fb6b2e51a9ae3887f0624b96f3e8a1d767e0e24c1f7e61ad79c2e795b8ec9b22cf5e5c280547b461338ad6968859f486791d0acb0e9225db12ac076e4ddaa8542b46534d762c8c045b54f8dd584ea50ea2f278f93104af819e615dc11d32c3e9de093b584f8499f0e98a0ead62178c92f57da4195a98adc84256a22a94b6b63aff858e07934acfc513f5f0ff3bb2d0cb44391128c12334960a042de848da45bb29360f637e55b85db862fb8f2f64d0ef0dd3bd7f8e78221713767106936edd296e537a0ea5fc58049b85d0796cfc802fe156a4d1a1b82cf583774dcf919505d3eab3adc23f8351f764d34e6badfee107418b1be81a87b7be8d3028e8dadb6925befd0508872d698071660347e0c6e0332ab5cefbbdecea9c7625585d7c763045587c8c669d4300a1f96b76c5ecf164d31cf755998b8b85d82f1d0b940c615b0abe932bad6827d994739664752e63305964c9b509c8c2982d03be3a434b5fe17801b9477ddaf65efce19c705764b2764f3443b8287901598eb38e19ce1e3012be6d1307d52bcc8dc18f4f6f091b2fd56bd5181f3f127ea16f71709bf150c3a7fa70f9a53ef780f87bf98d4f0f5a0d8f851cf911464b921c389dabd467845dd4ef14256cd4a513dca66a438fc9a4f5d4e25f2e7ce6ca4881a4b52eaf52d0a2bf7393913938f05588e4fefc23fe302e9f34d47cede5b99a5b189eead041e97b3890bfbe96e0be6a67ffd4d291e16d3f454e72761e8e3cd3cae60773593c4a31f192710edb1040a05cdc9cb8f44e63acbc2f187e74f6526f6509a820a602401cfc47380f95f65a8f916494c0b34cdd3e615e2a30a0b38a1dfa778b976b6aad50153bb4932b6eb8014a988f4f452e2bfd274968f40556fc3ca3d8cfc92229440fe545ad806bcd702d629d098a24a21802b69bdb67de06675197a06d96adacd3c37400a23855856bae830cb46a4de43ff5d25afce9f2d643a70296ed575e6c322df75d8e584160cae592f5b29c49467f10f0da5cb84eb77d42ec1f0d0c6e24706b30c477dd2610318a1da5aaa61ddb15b16e03aca4ca0a6c24fb82f91cd46cd885d9b87ae3e05c3b61f8037b8a69ffb6ba5a46747d3e2558e0817b7645e925403a58a391fc74b48a84d8567bd7fcb638da61e2e925e07cc86da5e043da8895e3798096e2b630b489b456c9ecf69c43f131244dd253e7a07e123e2e94bda98e184664205b3f4927e0f3ae6bed8edf4c318d833fe1738ee95ba29dc0bdd79cb1a46c328fc5e55aa2aa0cdead34368f0f1aa8e3024d0329e748f60591aa151e2103631d752ef715463e30f61b36c21bdc10141cd8da57422e5803cb86baeebd9934217de4043467dddc9293e4235daeb31eb86d2ba13680ba6214644673dc6a677691cf5dfd648d6a83fb046b6e6c05894455c715ec971c388ed2f99f1636976eaebdbbdf0d41e3b18b64a0f510482c2e7a580af6a18c2a2bfe47aa95af5fe1fe4d8b996e7bd151d3493596ebbef60f9e2b252ca7c21ee34f0d0c398d851b3add68f84df574226ed0d2515294dc67d8b8c472be6513d0abea5ed4cce5a4bd4875bf39c1d3fc6934a61ad602030136af16bd5d84e69679cd760bbbd9a5ef36cb198e2320044ebc83cf99a87f2a89b216006e509b4afe4aebbd020f1676cdea48df2c06e01b01d2f97476ea6a9a625d51fb6f64c147b5dfbaaf5428b871a2a23cb92c255fc16bf5c5fa2fa29c4ac5f01ce9866b7ad6e8099b640a807b53bd5586e2b303fe1abc0d03f0e7d4a17dc0987e826a3d2d9ac5db7af4cc2bab72020c18e94cb856694e322c77d701dfae09641ad7648108a8c9002827688e0b8e4c7ea45e5c71b5895ee2ece501814d5d21f8a6610f3e65f626ba98cf26255493e82d2a8ff96be99484e82f14d92aa1d423a2f6408ec6fbfaaa3e2cdb05ddd45bb1a0d4a14e9e2b2948f42cd75c46d848701eacff30197036413a9e9d869c518858ea6bff5115f126e30b2e480ae412558debfcf3f3f016092a3f395c3d3f98c3050247f979fef78e012eff656158d8f37d6a2e3a004054b26ef9736786b5090f481beb6a41d3851c770ef7ab930294960071fe6e46af654134faef119ccd635a1262a1b155b8eb30bc32ac4570d92dbf8a3c54919b96063b1dd5f45cf6ed665b82eec981e587b25c91db11a935b236e2441dd8290d599120c08060747b92888a9cc6fd5ef8d2651cdd30de04c9fc723eebfb31b306b9ad56cfdfad5f0975c7b1299c501d02de9c635ab4251cca3a90b2fffda66ed5c071d63b9120bde7c2b9c80acb01a50e3aa6093c8dffa84fa6c2f493dddf5ef94994ccb573201b2ef6dc87a8520cfa8ac977fc17930dd7c31d78108e688887147dcdc345c65a3b5444719760b8b955ec31e59a3b89000bad9fd4753addcb0c7c28541b5ead195e3a3e4e7da0b5efed73d214412ba39f9e3d98c80a35f72298c7d6ba1b86447503577ca883dccb8b8c9166a3a3fdc8ca78ca1be7fd0c38731011f103d97ba7ffbe54975ffb99d31b80a87bb1081e074a7b375"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x9, @broadcast=0xfffffffe}}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6c6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x8d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m24.830774684s ago: executing program 3 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 7m9.679056901s ago: executing program 34 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 22.323335937s ago: executing program 5 (id=9144): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 22.308480948s ago: executing program 5 (id=9146): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 21.383167844s ago: executing program 5 (id=9155): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x1) 21.380340934s ago: executing program 5 (id=9157): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f00000002c0)) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 21.334639494s ago: executing program 5 (id=9159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.042203925s ago: executing program 5 (id=9163): creat(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0xd, 0x1, 0x9, 0x9ab8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @initdev={0xac, 0x1e, 0x81, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private=0xa010102}}, 0x26) 9.163629052s ago: executing program 2 (id=9200): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000280)='proc\x00', 0x189, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) 9.111267342s ago: executing program 6 (id=9201): r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x2, 0x200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000a00)={0x9, 0x1e, 0x7ff, 0x5, "2ee113981d8f7d7863806268565f7b846b5b4c53c4e3827a726c07ba5cb67c99"}) 9.110138962s ago: executing program 0 (id=9202): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') lseek(r0, 0x96, 0x1) 7.522306702s ago: executing program 0 (id=9203): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xa4909000) 7.513848112s ago: executing program 2 (id=9204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.460977482s ago: executing program 6 (id=9205): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r2, &(0x7f0000000140)="8269b66f", 0x37, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) (async, rerun: 32) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000340)={0x579, 0x100}) (async) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="747bdb006f816335f431b245dc81dc2b"]}]}, 0x38}], 0x1}, 0xcc000) (async) write$P9_RSTATu(r3, &(0x7f00000002c0)={0x78, 0x7d, 0x2, {{0x0, 0x58, 0x4, 0x7fff, {0x0, 0x3, 0x5}, 0x90000000, 0x2, 0x5, 0x4dc0, 0xa, '/dev/fuse\x00', 0x5, 'fuse\x00', 0xb, './binderfs\x00', 0xb, './binderfs\x00'}, 0xb, './binderfs\x00', 0xee01, r4, r6}}, 0x78) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r10, r12, r7) (async) r13 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r13, 0x1e67b000) (async) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0x0, r9, {0x1, 0x1, 0x1, 0xfffffffffffffff8, 0x3, 0x8000, {0x6, 0x5, 0x1, 0xff, 0xe000000000, 0x45f, 0x7fffffff, 0x8, 0xd37c, 0x8000, 0x0, r12, r14, 0x465, 0x2}}}, 0x90) 5.784504953s ago: executing program 0 (id=9206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 5.780093424s ago: executing program 2 (id=9207): io_setup(0x4f4f, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x4000, 0x80a0000, 0x6}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adb41456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e259ce021216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d744bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf40334f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e1549d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4061d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001080)={0x0, 0x0, @pic={0x8, 0x0, 0x7, 0x0, 0x8, 0x20, 0x8, 0x6, 0x5, 0x8, 0x62, 0x9, 0x57, 0x8, 0xd, 0x4}}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000015c0)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=r6, @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESOCT=r7, @ANYRES64=r1, @ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRESHEX=r0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.779272064s ago: executing program 6 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x40048c67) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r3, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002"], 0x23c}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r3}) chdir(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd(0x40048c67) (async) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r3, 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002"], 0x23c}}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r3}) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 3.923073995s ago: executing program 0 (id=9209): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000040000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a0000000000000000000000050000000500000008002300ff", @ANYRES8=r2], 0x100}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r4, 0xca639000) 3.912067235s ago: executing program 2 (id=9210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x20000001, 0x71}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xee01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'veth1\x00', 0x500}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth1\x00', 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x9e, 0x8, 0x0, 0x2}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.911197525s ago: executing program 6 (id=9211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 2.049292357s ago: executing program 0 (id=9212): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3d) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x11, 0x0, 0x4}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) 2.044760017s ago: executing program 2 (id=9213): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040)='securityfs\x00', 0x11189, 0x0) (async) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x542f, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 1.991957728s ago: executing program 6 (id=9214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xf) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x98, 0x5, 0x7ff, 0xfffffff0, 0xb, "7e578fcccb5a2e21558a3600474f3c4e7947f4"}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0x1, "663655d281e014e0c2b2ac4e5e40332ebbc60af8e0102af37bf3755bb436d53b44ebddd9084c131923977999967447025df89fe619d167d29b48079a0197083022b799fb777b60fb7feed21bd0b9b5eee18f730ded4d4cdfe3d9d961e1a62eed066489cf7a51565d0de5039debee55e32d2936f58eab174d60be1cf622988dd0e0fa3ab5c95325a1510bd9532f74550b18233816d61146553054e40dbef5aaa7dd0e8fe49b54391c72c8404b07cbf36ed0e5312ce812c8000257fa6da5e8ce62594f59912c60f65342508ddbb36ea8cd7b4d42b7414c2929dae8a3b6d45b67ec2dda3bf4e12dcd4288e59d4364fe56552d8a127439a37c2b5e73abc71690decbbc91e191be874ff1ca053100c6725e0a70f6712130d30710faceaed5f954cd43d1fd9da848c677ab39251ab77e924751adff182eeae489f1c4901dca3032722188f88e780b04eb8f26a5e20429d3141562312db9fc0a0944d8c0aca170954347e5652e0bda9a5c387ee5b17419c67c03267e29f574446a245e6b2240d8b75effa82fa64b71cd137f3679e3bbb4a6291492583f86245b7fd8fb500694fed664ababd5013afa08ab002cc1c72678877836fb4606a974e3e6e8116f27c0c47165710c66fb35b79f4dd84cb18f54187f2d67e94b26d68608de49eeb6dcbee1f2e01600cf50c0f0ca08d319bf0e34af0267a2bd60bd43b97e7030a837816491a709e6"}) (async) ioctl$TCSBRK(r1, 0x5409, 0x907) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)={{0x108, 0xb6, 0x1, 0x11c, 0x194, 0x5, 0x3d, 0x6}, "de7bfa90641a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x926) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000c40)) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6b, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x1b, 0x1, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0xd, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x7}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x201, 0xb, 0x2, 0xff, 0xff, 0x8}, 0x116, &(0x7f0000000d00)={0x5, 0xf, 0x116, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "cc2a59aa44b04c445897f39be3f8e983"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cc710141267de40c467b8299ee7537df"}, @generic={0x6f, 0x10, 0x4, "2cb7aa50b89ded8bcf70839e1913e9c0483c89f01c2b0b0b2b4adba0665cd59633d1ab721250bbb105880545655227c2a7f5f8383d7d4a0dfa1f2fec8a27f2b2458c5e651470bcd83482a021e59aa55a085faee795fbab98a7d592b1c6fd46aabff7f33fafc007324116cc79"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "86c022c40868c754aa413db867d2397e"}, @ptm_cap={0x3}, @generic={0x63, 0x10, 0x3, "6edd6c90fbaaac6929bd88e47e65748a7a3c7048ab9cfcc47a8ac565ef9f5ff155e4ca0c19fcc2408ecc57f44f232779245c5716bae166a1aa244ba984a5805c5c07e297e2a8cf3b73e02f7d374cfaf0234554a290a58bb7f6b93c7edcac5220"}]}, 0x3, [{0x6f, &(0x7f0000000e40)=@string={0x6f, 0x3, "2140c76b406bbeda8dd70c3824c6a8ea82399b0d65db219515d4fd428d1f98c05088eeae7c997957b7d9221d6f4aa42cae7de84ec5a9bb0c499dde3a28dada91776e341beb46ac2b2e04f3b976de8a1e168b232c62cefb00e25ba03bb4c8c9af10e9ffe133a9c1cb67ef0e877d"}}, {0xd3, &(0x7f0000000ec0)=@string={0xd3, 0x3, "ac45c9a604b30ae819cc19ffdcdcb9e8ec8cecbb5b1dabf51caf3ebca26d13a9bff01ea11c852b2978d4c442975ce21ef183a87d60add6c0b4ce7e4f81308e09990a7845c216bcaa59b5f0252a71099aa054f5bd1223f3ab7863aa0b0485c81045d800aba6f8a317613b5f77192f62860dba57aca9a2a94c72ed32a9baa7de1dc7b22afb26170d11521d99efedca212a2aa137f2847d72aac25f3258614e2890649c514b10586d70f67fbe25ca16b64ca63a8a37118551eaddde0975c31c91fb896d1580b3b9b27fb5a6ee48c9f4e9dcfb"}}, {0xf1, &(0x7f0000000fc0)=@string={0xf1, 0x3, "459f043220676aacf0b55cadf7008ced87d3a913103a34f87779944d6af66faef519226607cdf35e19824dfe74ce51b647dadf51af56c407fe6b2bc3b8711481a41966beafffeaaa4fef0aa49d9274c1a082fd1cdf5634b5daaa90f3cceb3ed1080f521c2b1a50a1fc7153dbcab72a1e829370650fd6ddfe69c68ab531b24ed873ddb9f10475e7186a20caa2d3960c898c4611851a98963244c87d9706fac5b30ebff7c2a37917dfeb68e17ff10918b672d168c0e1cb9f39b6518a87f16fb3dfa47d819ccc590a3898671eeea42bfd58741dd19b1744fd657a4bead1f268a9405f7c95ea1bdb153b84f81ded515ed6"}}]}) syz_usb_ep_write(r2, 0x10, 0xb5, &(0x7f0000001100)="37fd4d45feeb05ad70d9eb43ea599a7493f27b7e6494f2f224dd686100a211f52418386b4bc715aab54c3500dde2f9b32f5bcfd191430bed20a894ed8b1f6a0a3badf167cb0effb3016f1fa06833ace813117d1acf8eedb745f9d7dac53bc65e3ebf89d821edce86f1d55534bfd4f135b3202fba39d2ea6bf358dfe31a500d5a52bcfd61ebeaea827eed8ce42bfe2173d07ed7b602e25cf6850a0351c4d2530d578f8ef129348162c1c4d73b0445ee876db5a7174a") (async) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000015c0)={0x3, 0x0, 0x4, 0x18, 0x1ea, &(0x7f00000011c0)}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001600)={0x100000, 0xf473, 0x2, 0x5, 0xb, "fd07788be29cc079e3a093ebc38c1262f9745c"}) (async) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000001640)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000019c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f00000016c0)={0x2ac, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x25, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x32, 0x1, "a4217d8eb459f0b7e894520fa8aa55f836606f9220d8ac6384ca7a9873553e4c775ff496e1972b0a4dab38683ea0"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "5172c14b3dfc9c9d0ccf200eb3a9c6c93b32d4b193e29729e42b4192595b1b491ba585f5ada1b4dcf7aae9045091ab329d4217f88c16aed6e15359f4791f5a315463e6d7860de614e5241c528ded59fd98950e1c2fb69652741d474e0fa5a75540daac740bee9c0dd6db09f1ebca665da5b0cddc558d4bab2297be98521d61da3980496072e0ad8089f6e15eb4794af3a27d8b191c56e4754a7e8215d818d98d992424130171742a726941c83c7419a8dacc95559a44fc130568fa1fa4a8414d21270589ad830fb11cf14c90747880b57522b1152bfecf7e51f1c6962c90262bfe8d4533a2412ec6a39a25d35dca5261b7fd400e"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "8daa973e759f4b2ecd2ce830a5ec97996f7b2121ba4015f906aed75c66a6d9b9c088d9c2a879caab52751ac68f7f3cf5a85c62e848d38e147d5fbbe967121bb734c2253d60322373974cb76107e48a0183132d4c0ac525ad43c9f1d71b4166a2217d3e77d8db7c8521f2482dd70923f3f5fd51f1029dda4bdefe38dd41a965656afa1a204bc91e698708e09b"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "e2315699a7bf665ad533ea08e4b1654c2340abd02be1aed8e9e516d00a4ab4b4e07468b0c52616a98f44a57c9d57cb7fe98894aedd20efddd8c8d08dd6d8060ac1871f1e1e6abaf9ce4c8d148861ef5308005a1d75ef0652a816c15b91b4ea3af2388d7ef608561e41aec5f3dc6f7e25ce340a06b20f330abe8c5a520231f0d66f4f7681c9bf9fcc437d5e45da512d51d10350a40b3e185fb8f5775a1f2be765a957505cd3ba623a0a6dd5372992eedfbcd17b69ab3b77012a3581db685a03ab2219d342ca4f7ee5f7f0c94584349161c380415c37"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000001a00)={0xd, 0x1, 0x8}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000001a40)={0x6, 0x1, 0x0, [{0xe885, 0xcac5, 0xb, 0x10, 0xff, 0xe, 0x3, '\x00', 0x4}]}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001ac0)=0x3, 0x4) (async) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000001b00)={0x10, 0x40, 0x8, 0x0, 0x9, "c94ce5c114f6cf834eea18ee047c393479d14e", 0x184f, 0xd7}) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000001b40)="9ddc61dff4afb3827ec056553e96d0dd2c354ee0d1") setrlimit(0xf, &(0x7f0000001b80)={0xab78, 0x1}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$TIOCNOTTY(r1, 0x5422) (async) fcntl$setlease(r4, 0x400, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000001c40)="0b67895a7ee24feab55d25a5f4696fd2ffd9d6b7e0c2a262d7951a05a4e7b3dedfe5f68ccc636b53897ebc091706c3a161c484b1c971b5e3e379241fde4adaf208bf5d9656", 0x45, 0x0, &(0x7f0000001d00)=@xdp={0x2c, 0x3, 0x0, 0x3}, 0x80) 33.01758ms ago: executing program 0 (id=9215): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) fadvise64(r0, 0x81, 0x9, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 28.79503ms ago: executing program 2 (id=9216): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) futex(0x0, 0x85, 0x2, 0x0, 0x0, 0xc5fffffd) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x444083, 0x0) lseek(r5, 0x4, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r6, 0x8000451a, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 0s ago: executing program 6 (id=9217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c0108"], 0x1d8}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x10000, &(0x7f0000000000)=0x0) eventfd(0x10000) io_submit(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x5, 0x0, 0x4}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r2, 0x66960000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x6, 0x3}}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66ed64660f3809fe0f01c3", 0x34}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): "devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.138315][T10922] __vm_enough_memory: pid: 10922, comm: syz.5.3625, bytes: 18014402804453376 not enough memory for the allocation [ 204.243273][T10935] netlink: 'syz.5.3628': attribute type 12 has an invalid length. [ 204.254147][T10936] rust_binder: Write failure EFAULT in pid:564 [ 204.344048][T10940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.350588][T10940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 204.368455][T10940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:567 [ 204.543271][ T36] audit: type=1326 audit(2000000078.000:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.5.3636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 204.753649][ T36] audit: type=1400 audit(2000000078.220:1153): avc: denied { write } for pid=10952 comm="syz.5.3636" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.914880][ T36] audit: type=1400 audit(2000000078.380:1154): avc: denied { sqpoll } for pid=10974 comm="syz.0.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 204.938245][T10975] netlink: 'syz.0.3644': attribute type 3 has an invalid length. [ 204.949942][T10975] netlink: 944 bytes leftover after parsing attributes in process `syz.0.3644'. [ 205.903293][ T331] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 206.054354][ T331] usb 6-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 206.065499][ T331] usb 6-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 206.078591][ T331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 206.086774][ T331] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 1.00 [ 206.095876][ T331] usb 6-1: New USB device strings: Mfr=192, Product=32, SerialNumber=130 [ 206.104402][ T331] usb 6-1: Product: syz [ 206.108565][ T331] usb 6-1: Manufacturer: syz [ 206.113167][ T331] usb 6-1: SerialNumber: syz [ 206.118717][ T331] usb 6-1: config 0 descriptor?? [ 206.125632][T11031] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 206.141687][T11042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3664'. [ 206.534910][T11031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.537904][ T331] usbhid 6-1:0.0: can't add hid device: -71 [ 206.550376][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 206.559126][ T331] usb 6-1: USB disconnect, device number 20 [ 206.677798][T11046] netlink: 'syz.0.3666': attribute type 4 has an invalid length. [ 206.685646][T11046] netlink: 'syz.0.3666': attribute type 6 has an invalid length. [ 206.693474][T11046] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3666'. [ 206.738072][ T36] audit: type=1400 audit(2000000080.200:1155): avc: denied { create } for pid=11055 comm="syz.0.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 207.025834][T11094] netlink: 'syz.2.3683': attribute type 2 has an invalid length. [ 207.057821][T11098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.073684][T11099] overlayfs: failed to clone upperpath [ 207.323329][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 207.410404][ T36] audit: type=1400 audit(2000000080.870:1156): avc: denied { lock } for pid=11115 comm="syz.6.3689" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.455233][T11120] binder: Unknown parameter 'contextÌðÔð[7’' [ 207.473308][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 207.484461][ T9] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 207.499125][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 207.508249][ T9] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 207.516488][ T9] usb 6-1: Product: syz [ 207.520675][ T9] usb 6-1: Manufacturer: syz [ 207.525335][ T9] usb 6-1: SerialNumber: syz [ 207.530798][ T9] usb 6-1: config 0 descriptor?? [ 207.675884][T11137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11137 comm=syz.2.3698 [ 207.688772][T11138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11138 comm=syz.2.3698 [ 207.741702][T11109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.741883][T11109] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 207.748641][T11109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 207.756823][T11109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:586 [ 207.789867][ T9] usb 6-1: USB disconnect, device number 21 [ 208.532606][T11171] overlayfs: failed to clone upperpath [ 208.605229][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 217.662779][T11218] fuse: Unknown parameter 'g5%¬«?Zt|u6roup_id' [ 217.696239][T11229] virtiofs: Unknown parameter 'always' [ 217.722689][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3737'. [ 217.797476][T11251] overlayfs: failed to clone upperpath [ 217.797949][T11250] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3742'. [ 217.904221][T11262] virtiofs: Unknown parameter 'always' [ 218.207065][T11270] netlink: 'syz.0.3749': attribute type 16 has an invalid length. [ 218.215000][T11270] netlink: 'syz.0.3749': attribute type 3 has an invalid length. [ 218.222772][T11270] netlink: 64054 bytes leftover after parsing attributes in process `syz.0.3749'. [ 218.232925][T11270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11270 comm=syz.0.3749 [ 218.461582][T11279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11279 comm=syz.2.3753 [ 218.529983][T11297] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3759'. [ 218.553538][T11299] x_tables: unsorted entry at hook 2 [ 218.675520][ T36] audit: type=1400 audit(2000000092.140:1157): avc: denied { mounton } for pid=11294 comm="syz.6.3758" path="/45/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 218.675690][T11295] incfs: Can't find or create .index dir in ./file0 [ 218.726450][T11303] incfs: Can't find or create .index dir in ./file0 [ 218.740808][T11303] incfs: mount failed -1 [ 218.743329][T11295] incfs: mount failed -1 [ 218.905061][ T36] audit: type=1326 audit(2000000092.370:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 218.942382][ T36] audit: type=1326 audit(2000000092.390:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 218.966535][ T36] audit: type=1326 audit(2000000092.390:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.015134][ T36] audit: type=1326 audit(2000000092.390:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.039196][ T36] audit: type=1326 audit(2000000092.390:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.067118][ T36] audit: type=1326 audit(2000000092.390:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.092291][ T36] audit: type=1326 audit(2000000092.390:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.116769][ T36] audit: type=1326 audit(2000000092.390:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.140661][ T36] audit: type=1326 audit(2000000092.390:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.6.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7ffc0000 [ 219.169624][T11330] incfs: mount failed -22 [ 219.177270][ T330] bridge_slave_1: left allmulticast mode [ 219.183005][ T330] bridge_slave_1: left promiscuous mode [ 219.195280][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.214705][ T330] bridge_slave_0: left allmulticast mode [ 219.220579][ T330] bridge_slave_0: left promiscuous mode [ 219.226588][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.380722][ T330] veth1_macvtap: left promiscuous mode [ 219.383599][T11337] 9pnet_fd: Insufficient options for proto=fd [ 219.401743][ T330] veth0_vlan: left promiscuous mode [ 219.584366][T11349] tipc: Started in network mode [ 219.589281][T11349] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 219.599609][T11349] tipc: Enabling of bearer rejected, failed to enable media [ 228.047175][T11365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 228.051525][T11365] rust_binder: 11365 RLIMIT_NICE not set [ 228.079817][T11361] virtiofs: Unknown parameter 'always' [ 228.308522][T11391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3792'. [ 228.710734][T11413] virtiofs: Unknown parameter 'always' [ 229.092846][T11433] overlayfs: missing 'lowerdir' [ 229.120341][T11436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 229.120367][T11436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:155 [ 229.210183][T11440] virtiofs: Unknown parameter 'always' [ 229.557050][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3815'. [ 229.673911][T11470] fuse: Invalid gid '00000000000037777777777' [ 229.794312][T11494] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3833'. [ 229.907235][T11623] macsec0: entered promiscuous mode [ 229.912630][T11623] macsec0: entered allmulticast mode [ 229.918407][T11623] veth1_macvtap: entered allmulticast mode [ 229.924341][T11623] macsec0: left promiscuous mode [ 229.929335][T11623] macsec0: left allmulticast mode [ 229.934387][T11623] veth1_macvtap: left allmulticast mode [ 230.238452][T11706] overlayfs: failed to clone upperpath [ 230.267160][T11710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=11710 comm=syz.5.3847 [ 230.292476][T11708] virtiofs: Unknown parameter 'always' [ 230.318835][T11717] new mount options do not match the existing superblock, will be ignored [ 230.853319][T11732] 9pnet_fd: Insufficient options for proto=fd [ 230.886967][T11734] virtiofs: Unknown parameter 'always' [ 230.915234][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2049 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 230.928988][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 230.944667][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 230.957990][ T36] kauditd_printk_skb: 476 callbacks suppressed [ 230.958008][ T36] audit: type=1400 audit(2000000104.410:1643): avc: denied { audit_write } for pid=11741 comm="syz.5.3861" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.970110][T11740] fuse: Bad value for 'fd' [ 230.995474][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 231.008536][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 231.022401][T11737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11737 comm=syz.0.3859 [ 231.026540][T11747] cgroup: Name too long [ 231.040932][T11747] netlink: 'syz.6.3863': attribute type 4 has an invalid length. [ 231.051133][T11747] netlink: 'syz.6.3863': attribute type 4 has an invalid length. [ 231.121433][T11757] virtiofs: Unknown parameter 'always' [ 231.252943][T11775] 9pnet_fd: Insufficient options for proto=fd [ 231.508641][T11777] virtiofs: Unknown parameter 'always' [ 231.786643][T11790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=11790 comm=syz.6.3882 [ 232.113605][T11797] virtiofs: Unknown parameter 'always' [ 232.145403][T11805] netlink: 'syz.5.3889': attribute type 2 has an invalid length. [ 232.219476][T11808] netlink: 'syz.5.3890': attribute type 4 has an invalid length. [ 232.227560][T11808] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3890'. [ 232.339538][ T36] audit: type=1400 audit(2000000105.800:1644): avc: denied { create } for pid=11816 comm="syz.6.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 232.424192][T11827] virtiofs: Unknown parameter 'always' [ 233.220982][T11853] virtiofs: Unknown parameter 'always' [ 233.417092][T11875] virtiofs: Unknown parameter 'always' [ 234.054548][T11903] virtiofs: Unknown parameter 'always' [ 234.072606][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3926'. [ 234.081676][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3926'. [ 234.479415][T11931] virtiofs: Unknown parameter 'always' [ 234.675839][ T36] audit: type=1326 audit(2000000115.136:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.0.3937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e078f6c9 code=0x0 [ 235.081995][T11957] virtiofs: Unknown parameter 'always' [ 235.126151][ T36] audit: type=1400 audit(2000000115.586:1646): avc: denied { create } for pid=11966 comm="syz.2.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 235.196075][T11978] netlink: 'syz.5.3952': attribute type 8 has an invalid length. [ 235.282408][T11980] virtiofs: Unknown parameter 'always' [ 235.413246][T11982] netlink: 'syz.6.3954': attribute type 12 has an invalid length. [ 235.498371][T12009] virtiofs: Unknown parameter 'always' [ 235.610716][T12034] virtiofs: Unknown parameter 'always' [ 236.011453][ T36] audit: type=1400 audit(2000000116.466:1647): avc: denied { create } for pid=12051 comm="syz.5.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 236.112441][T12063] virtiofs: Unknown parameter 'always' [ 236.451905][T12092] virtiofs: Unknown parameter 'always' [ 236.556014][ T36] audit: type=1326 audit(2000000117.016:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.5.3995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 236.641408][T12111] netlink: 'syz.0.3998': attribute type 27 has an invalid length. [ 237.205749][T12117] virtiofs: Unknown parameter 'always' [ 237.412556][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.419995][T12119] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.427243][T12119] bridge_slave_0: entered allmulticast mode [ 237.433946][T12119] bridge_slave_0: entered promiscuous mode [ 237.441643][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.449010][T12119] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.456227][T12119] bridge_slave_1: entered allmulticast mode [ 237.462889][T12119] bridge_slave_1: entered promiscuous mode [ 237.539261][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.546406][T12119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.553747][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.560803][T12119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.591352][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.599925][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.612433][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.619652][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.628735][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.635842][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.671179][T12119] veth0_vlan: entered promiscuous mode [ 237.688611][T12119] veth1_macvtap: entered promiscuous mode [ 237.758565][ T36] audit: type=1400 audit(2000000118.216:1649): avc: denied { mounton } for pid=12137 comm="syz.0.4005" path="/1/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 237.801329][T12148] __vm_enough_memory: pid: 12148, comm: syz.0.4006, bytes: 18014402804453376 not enough memory for the allocation [ 237.906357][T12164] virtiofs: Unknown parameter 'always' [ 238.057700][T12197] virtiofs: Unknown parameter 'always' [ 238.644973][T12222] virtiofs: Unknown parameter 'always' [ 238.684275][ T36] audit: type=1326 audit(2000000119.146:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.6.4037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x0 [ 238.772038][T12245] overlayfs: failed to clone upperpath [ 238.961680][T12248] virtiofs: Unknown parameter 'always' [ 239.576759][T12271] virtiofs: Unknown parameter 'always' [ 239.657026][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4062'. [ 239.677582][T12295] 9pnet_fd: Insufficient options for proto=fd [ 239.715095][T12297] virtiofs: Unknown parameter 'always' [ 240.136177][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4070'. [ 240.202515][T12318] virtiofs: Unknown parameter 'always' [ 240.599999][T12343] fuse: Bad value for 'fd' [ 240.637241][T12343] virtiofs: Unknown parameter 'always' [ 240.652756][T12347] 9pnet_fd: Insufficient options for proto=fd [ 240.718717][T12354] netlink: 'syz.6.4084': attribute type 4 has an invalid length. [ 240.733350][T12354] netlink: 3649 bytes leftover after parsing attributes in process `syz.6.4084'. [ 240.847879][T12369] vlan1: entered promiscuous mode [ 240.853069][T12369] vlan1: entered allmulticast mode [ 240.858323][T12369] veth0_vlan: entered allmulticast mode [ 241.202637][T12372] fuse: Bad value for 'fd' [ 241.222508][T12372] virtiofs: Unknown parameter 'always' [ 241.255302][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4096'. [ 241.266400][ T36] audit: type=1400 audit(2000000121.726:1651): avc: denied { setattr } for pid=12375 comm="syz.0.4096" name="" dev="pipefs" ino=46230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 241.311938][T12380] futex_wake_op: syz.0.4098 tries to shift op by 144; fix this program [ 241.344961][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 241.379207][T12390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4102'. [ 241.402302][T12393] fuse: Bad value for 'fd' [ 241.422021][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4101'. [ 241.433125][T12393] virtiofs: Unknown parameter 'always' [ 241.597760][T12417] virtiofs: Unknown parameter 'always' [ 242.265387][T12448] syzkaller0: entered allmulticast mode [ 242.271059][T12448] syzkaller0: entered promiscuous mode [ 242.283902][T12450] syzkaller0: left promiscuous mode [ 242.289254][T12450] syzkaller0: left allmulticast mode [ 242.348039][T12459] virtiofs: Unknown parameter 'always' [ 242.378627][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4126'. [ 242.433508][T12468] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4128'. [ 242.442501][T12468] tipc: Invalid UDP bearer configuration [ 242.442525][T12468] tipc: Enabling of bearer rejected, failed to enable media [ 242.568487][T12485] virtiofs: Unknown parameter 'always' [ 242.641801][T12505] netlink: 360 bytes leftover after parsing attributes in process `syz.6.4143'. [ 242.713626][T12519] virtiofs: Unknown parameter 'always' [ 243.245371][T12552] virtiofs: Unknown parameter 'always' [ 243.923938][T12580] virtiofs: Unknown parameter 'always' [ 244.320284][T12612] virtiofs: Unknown parameter 'always' [ 244.341787][T12614] xt_NFQUEUE: number of total queues is 0 [ 244.511567][T12636] : renamed from bond_slave_0 [ 244.557722][T12645] fuse: Bad value for 'rootmode' [ 244.585642][ T36] audit: type=1400 audit(2000000125.046:1652): avc: denied { module_load } for pid=12651 comm="syz.6.4192" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=46002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 244.688265][ T36] audit: type=1400 audit(2000000125.146:1653): avc: denied { listen } for pid=12659 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 244.707824][ T330] tipc: Subscription rejected, illegal request [ 245.346047][T12697] netlink: 'syz.2.4208': attribute type 27 has an invalid length. [ 245.366507][T12697] vlan1: left promiscuous mode [ 245.371375][T12697] vlan1: left allmulticast mode [ 245.376356][T12697] veth0_vlan: left allmulticast mode [ 246.144058][ T36] audit: type=1400 audit(2000000126.606:1654): avc: denied { create } for pid=12736 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 246.145759][T12738] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4219'. [ 246.186750][ T36] audit: type=1400 audit(2000000126.646:1655): avc: denied { setattr } for pid=12739 comm="syz.5.4221" name="RAWv6" dev="sockfs" ino=46769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.270498][ T36] audit: type=1400 audit(2000000127.726:1656): avc: denied { mount } for pid=12776 comm="syz.2.4236" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 247.490565][T12796] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14107 sclass=netlink_xfrm_socket pid=12796 comm=syz.5.4243 [ 247.518735][T12802] 9pnet_fd: Insufficient options for proto=fd [ 247.525431][T12805] 9pnet_fd: Insufficient options for proto=fd [ 247.886445][T12858] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4264'. [ 247.896033][T12858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1305 sclass=netlink_route_socket pid=12858 comm=syz.2.4264 [ 247.912025][ T36] audit: type=1326 audit(2000000128.376:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 247.959918][ T36] audit: type=1326 audit(2000000128.376:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 248.008457][ T36] audit: type=1326 audit(2000000128.376:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 248.032063][ T36] audit: type=1326 audit(2000000128.376:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 248.055499][ T36] audit: type=1326 audit(2000000128.466:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 248.079091][ T36] audit: type=1326 audit(2000000128.466:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.2.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 248.231986][T12864] fuse: Bad value for 'fd' [ 248.252373][ T36] audit: type=1326 audit(2000000128.706:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.5.4267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 248.564206][T12876] netlink: 'syz.6.4272': attribute type 32 has an invalid length. [ 248.621244][T12878] virtiofs: Unknown parameter 'always' [ 248.622425][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4275'. [ 248.636259][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4275'. [ 248.722885][T12895] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4279'. [ 248.745916][ T36] audit: type=1400 audit(2000000129.206:1664): avc: denied { shutdown } for pid=12896 comm="syz.6.4280" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.123638][T12909] virtiofs: Unknown parameter 'always' [ 249.368558][T12941] virtiofs: Unknown parameter 'always' [ 250.023011][T12982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12982 comm=syz.2.4309 [ 250.265049][ T36] audit: type=1400 audit(2000000130.726:1665): avc: denied { mounton } for pid=12992 comm="syz.5.4314" path="/" dev="configfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.484046][T13024] devpts: called with bogus options [ 250.545877][T13028] overlayfs: failed to clone lowerpath [ 250.784932][T13053] overlayfs: failed to clone upperpath [ 251.180828][T13077] netlink: 'syz.0.4345': attribute type 1 has an invalid length. [ 251.188770][T13077] netlink: 'syz.0.4345': attribute type 2 has an invalid length. [ 251.189759][T13073] virtiofs: Unknown parameter 'always' [ 251.305306][T13096] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4351'. [ 251.340317][T13102] tmpfs: Bad value for 'huge' [ 251.383415][T13102] virtiofs: Unknown parameter 'always' [ 251.413191][T13114] 9pnet_fd: Insufficient options for proto=fd [ 251.479079][T13124] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4359'. [ 252.114340][T13173] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4382'. [ 252.123413][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4382'. [ 252.728799][T13230] tipc: Enabling of bearer rejected, failed to enable media [ 253.040512][T13263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=13263 comm=syz.0.4414 [ 253.585942][T13289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13289 comm=syz.6.4424 [ 253.774809][T13299] overlayfs: failed to clone upperpath [ 253.825508][T13302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=13302 comm=syz.2.4430 [ 254.003149][T13324] sit0: entered promiscuous mode [ 254.012314][T13324] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 254.020165][T13324] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4437'. [ 254.088601][T13339] sock: sock_timestamping_bind_phc: sock not bind to device [ 254.136834][T13344] netlink: 'syz.2.4445': attribute type 46 has an invalid length. [ 254.340911][T13378] overlayfs: failed to clone lowerpath [ 254.347277][T13378] overlayfs: failed to clone lowerpath [ 254.378664][T13385] netlink: 'syz.5.4460': attribute type 4 has an invalid length. [ 254.422184][ T36] audit: type=1326 audit(2016777579.879:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.5.4463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 254.743761][T13413] tmpfs: Bad value for 'huge' [ 254.775558][T13413] virtiofs: Unknown parameter 'always' [ 255.032381][T13430] 9pnet_fd: Insufficient options for proto=fd [ 255.079386][T13437] tmpfs: Bad value for 'huge' [ 255.099066][T13437] virtiofs: Unknown parameter 'always' [ 255.208062][T13458] netlink: 'syz.6.4486': attribute type 6 has an invalid length. [ 255.212821][T13461] tmpfs: Bad value for 'huge' [ 255.219457][T13460] netlink: 'syz.6.4486': attribute type 4 has an invalid length. [ 255.229015][T13460] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4486'. [ 255.265175][T13461] virtiofs: Unknown parameter 'always' [ 255.307925][T13467] x_tables: duplicate underflow at hook 1 [ 255.510891][T13489] tmpfs: Bad value for 'huge' [ 255.531768][T13489] virtiofs: Unknown parameter 'always' [ 255.722390][T13512] tmpfs: Bad value for 'huge' [ 255.743248][T13512] virtiofs: Unknown parameter 'always' [ 256.174164][T13543] virtiofs: Unknown parameter 'always' [ 256.326286][T13574] virtiofs: Unknown parameter 'always' [ 256.372292][ T36] audit: type=1400 audit(2016777581.829:1667): avc: denied { write } for pid=13581 comm="syz.2.4529" name="/" dev="configfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.414334][ T36] audit: type=1400 audit(2016777581.829:1668): avc: denied { add_name } for pid=13581 comm="syz.2.4529" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.452547][ T36] audit: type=1400 audit(2016777581.829:1669): avc: denied { create } for pid=13581 comm="syz.2.4529" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 256.590072][T13604] virtiofs: Unknown parameter 'always' [ 256.621171][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4538'. [ 256.647930][T13608] netlink: 'syz.2.4539': attribute type 12 has an invalid length. [ 256.656575][T13608] netlink: 'syz.2.4539': attribute type 4 has an invalid length. [ 256.665431][T13608] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.4539'. [ 256.817439][T13630] netlink: 'syz.5.4545': attribute type 32 has an invalid length. [ 256.949416][T13635] virtiofs: Unknown parameter 'always' [ 257.280904][T13661] virtiofs: Unknown parameter 'always' [ 257.306935][ T36] audit: type=1326 audit(2016777582.769:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13663 comm="syz.2.4557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f03f8f6c9 code=0x0 [ 257.791187][T13680] overlayfs: failed to clone upperpath [ 258.102410][T13687] virtiofs: Unknown parameter 'always' [ 258.678126][T13712] fuse: Bad value for 'fd' [ 258.698015][T13712] virtiofs: Unknown parameter 'always' [ 258.826441][T13743] fuse: Bad value for 'fd' [ 258.846647][T13743] virtiofs: Unknown parameter 'always' [ 258.864913][T13746] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4585'. [ 258.985988][T13762] netlink: 'syz.5.4590': attribute type 25 has an invalid length. [ 259.224649][ T36] audit: type=1326 audit(2016777584.689:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.5.4591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 259.473899][T13773] fuse: Bad value for 'fd' [ 259.496228][T13773] virtiofs: Unknown parameter 'always' [ 259.529616][T13777] 9pnet_fd: Insufficient options for proto=fd [ 259.608697][T13785] netlink: 'syz.6.4599': attribute type 1 has an invalid length. [ 259.616976][T13785] netlink: 'syz.6.4599': attribute type 3 has an invalid length. [ 259.625053][T13785] netlink: 296 bytes leftover after parsing attributes in process `syz.6.4599'. [ 259.675804][T13796] fuse: Bad value for 'fd' [ 259.733854][T13800] virtiofs: Unknown parameter 'always' [ 259.884677][T13812] 9pnet_fd: p9_fd_create_tcp (13812): problem binding to privport [ 260.039010][T13834] overlay: Unknown parameter '/' [ 260.046371][T13830] virtiofs: Unknown parameter 'always' [ 260.053619][T13834] overlay: Bad value for 'metacopy' [ 260.343373][T13860] VFS: Mount too revealing [ 260.475322][T13868] virtiofs: Unknown parameter 'always' [ 260.919304][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 260.929653][T13882] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4631'. [ 260.938925][T13882] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4631'. [ 261.013320][T13890] virtiofs: Unknown parameter 'always' [ 261.042988][T13894] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4637'. [ 261.062028][ T36] audit: type=1326 audit(2016777586.519:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13895 comm="syz.2.4638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x0 [ 261.146534][T13910] 9pnet_fd: Insufficient options for proto=fd [ 261.690709][ T36] audit: type=1400 audit(2016777587.149:1673): avc: denied { execute } for pid=13940 comm="syz.6.4652" path="/memory.events.local" dev="ramfs" ino=49541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 261.912688][T13944] /dev/loop0: Can't lookup blockdev [ 261.971691][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 262.069573][T13956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7131 sclass=netlink_route_socket pid=13956 comm=syz.0.4659 [ 262.229037][T13967] virtiofs: Unknown parameter 'always' [ 262.759534][T13993] virtiofs: Unknown parameter 'always' [ 263.111402][T14015] virtiofs: Unknown parameter 'always' [ 264.186082][T14078] tipc: Enabled bearer , priority 0 [ 264.764755][T14099] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 264.774760][ T36] audit: type=1400 audit(2016777590.239:1674): avc: denied { relabelto } for pid=14098 comm="syz.6.4712" name="file0" dev="tmpfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 264.801756][ T36] audit: type=1400 audit(2016777590.239:1675): avc: denied { associate } for pid=14098 comm="syz.6.4712" name="file0" dev="tmpfs" ino=1540 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 264.923488][T14101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4713'. [ 265.303292][ T331] tipc: Node number set to 4278321153 [ 265.315219][T14110] 9pnet_fd: Insufficient options for proto=fd [ 265.648334][T14123] netlink: 'syz.6.4721': attribute type 1 has an invalid length. [ 265.719566][ T36] audit: type=1326 audit(2016777591.179:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14137 comm="syz.6.4726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x0 [ 266.710560][ T36] audit: type=1326 audit(2016777592.169:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.5.4736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96cc18f6c9 code=0x0 [ 267.067946][T14187] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4742'. [ 267.216079][T14199] netlink: 'syz.0.4740': attribute type 1 has an invalid length. [ 267.254074][T14207] overlayfs: failed to clone upperpath [ 267.309543][T14226] fuse: Unknown parameter 'grou00000000000000000000' [ 267.352826][T14229] overlayfs: failed to clone upperpath [ 267.365495][T14226] virtiofs: Unknown parameter 'always' [ 267.669191][T14265] fuse: Unknown parameter 'grou00000000000000000000' [ 267.742121][T14265] virtiofs: Unknown parameter 'always' [ 267.843682][T14270] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 267.863454][T14270] netlink: 'syz.5.4770': attribute type 19 has an invalid length. [ 268.068212][T14287] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4775'. [ 268.298166][T14289] netlink: 'syz.0.4776': attribute type 27 has an invalid length. [ 268.311673][T14289] sit0: left promiscuous mode [ 268.319165][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.326342][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.371467][T14293] fuse: Unknown parameter 'grou00000000000000000000' [ 268.400134][T14293] virtiofs: Unknown parameter 'always' [ 268.520729][T14318] fuse: Unknown parameter 'group_i00000000000000000000' [ 268.545179][T14318] virtiofs: Unknown parameter 'always' [ 268.627301][T14332] 9pnet: Could not find request transport:  [ 268.659054][T14345] fuse: Unknown parameter 'group_i00000000000000000000' [ 268.685351][T14345] virtiofs: Unknown parameter 'always' [ 269.252970][T14353] overlayfs: failed to clone lowerpath [ 269.291235][ T36] audit: type=1326 audit(2016777594.749:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.320216][ T36] audit: type=1326 audit(2016777594.749:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.331825][T14369] fuse: Unknown parameter 'group_i00000000000000000000' [ 269.344400][ T36] audit: type=1326 audit(2016777594.769:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f03f8df10 code=0x7ffc0000 [ 269.377261][ T36] audit: type=1326 audit(2016777594.769:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.378522][T14369] virtiofs: Unknown parameter 'always' [ 269.401174][ T36] audit: type=1326 audit(2016777594.769:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.430833][ T36] audit: type=1326 audit(2016777594.769:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f03f8f2cb code=0x7ffc0000 [ 269.454460][T14371] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4808'. [ 269.454695][ T36] audit: type=1326 audit(2016777594.769:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.471789][T14371] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.489552][ T36] audit: type=1326 audit(2016777594.769:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x7ffc0000 [ 269.519626][ T36] audit: type=1326 audit(2016777594.769:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14361 comm="syz.2.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f03f8f2cb code=0x7ffc0000 [ 269.577733][T14391] netlink: 'syz.6.4816': attribute type 27 has an invalid length. [ 269.596373][T14395] fuse: Unknown parameter 'group_id00000000000000000000' [ 269.629523][T14395] virtiofs: Unknown parameter 'always' [ 269.831368][T14426] fuse: Unknown parameter 'group_id00000000000000000000' [ 269.853161][T14426] virtiofs: Unknown parameter 'always' [ 269.997545][T14441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4832'. [ 270.006599][T14441] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4832'. [ 270.015839][T14441] netlink: 'syz.2.4832': attribute type 6 has an invalid length. [ 270.023782][T14441] netlink: 'syz.2.4832': attribute type 5 has an invalid length. [ 270.031548][T14441] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4832'. [ 270.341224][ T330] tipc: Subscription rejected, illegal request [ 270.385600][T14507] overlayfs: failed to clone lowerpath [ 270.506742][T14510] tmpfs: Invalid uid '0x00000000ffffffff' [ 270.558230][T14528] 9pnet_fd: Insufficient options for proto=fd [ 270.730092][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4868'. [ 271.001927][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4878'. [ 271.561156][T14592] fuse: Bad value for 'user_id' [ 271.566106][T14592] fuse: Bad value for 'user_id' [ 271.585446][T14592] virtiofs: Unknown parameter 'always' [ 271.714763][T14619] fuse: Bad value for 'fd' [ 271.736650][T14619] virtiofs: Unknown parameter 'always' [ 271.901205][T14645] fuse: Bad value for 'fd' [ 271.939152][T14645] virtiofs: Unknown parameter 'always' [ 272.605590][T14669] fuse: Bad value for 'fd' [ 272.626572][T14669] virtiofs: Unknown parameter 'always' [ 281.864631][T14692] overlayfs: failed to clone lowerpath [ 281.867799][T14696] fuse: Bad value for 'fd' [ 281.874778][T14693] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 281.874918][T14694] overlayfs: failed to clone lowerpath [ 281.913180][T14701] /dev/loop0: Can't lookup blockdev [ 281.922731][T14696] virtiofs: Unknown parameter 'always' [ 281.998791][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 282.056863][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'. [ 282.066604][T14742] fuse: Bad value for 'fd' [ 282.097983][T14742] virtiofs: Unknown parameter 'always' [ 282.300050][T14769] fuse: Bad value for 'fd' [ 282.320291][T14769] virtiofs: Unknown parameter 'always' [ 282.546056][T14779] overlayfs: failed to clone upperpath [ 282.677234][T14791] netlink: 'syz.5.4965': attribute type 12 has an invalid length. [ 282.702286][T14795] fuse: Invalid rootmode [ 282.728983][T14795] virtiofs: Unknown parameter 'always' [ 282.851580][T14827] fuse: Invalid rootmode [ 282.880886][T14827] virtiofs: Unknown parameter 'always' [ 282.938122][T14843] batadv_slave_0: mtu less than device minimum [ 282.944764][T14846] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4985'. [ 282.997644][T14854] 9pnet_fd: Insufficient options for proto=fd [ 283.019069][T14856] fuse: Invalid rootmode [ 283.052350][T14856] virtiofs: Unknown parameter 'always' [ 283.080432][T14858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38947 sclass=netlink_route_socket pid=14858 comm=syz.0.4991 [ 283.133886][T14866] netlink: 'syz.0.4994': attribute type 12 has an invalid length. [ 283.182944][T14876] fuse: Bad value for 'rootmode' [ 283.222560][T14876] virtiofs: Unknown parameter 'always' [ 283.446036][T14906] fuse: Bad value for 'rootmode' [ 283.498241][T14906] virtiofs: Unknown parameter 'always' [ 283.535989][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 283.536010][ T36] audit: type=1326 audit(2016777608.999:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.2.5013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f03f8f6c9 code=0x0 [ 283.628877][T14917] netlink: 'syz.5.5015': attribute type 11 has an invalid length. [ 283.637701][T14917] netlink: 'syz.5.5015': attribute type 2 has an invalid length. [ 283.651634][T14917] tmpfs: Bad value for 'huge' [ 284.161000][T14938] fuse: Unknown parameter 'use00000000000000000000' [ 284.182284][T14938] virtiofs: Unknown parameter 'always' [ 284.267228][T14951] fuse: Bad value for 'fd' [ 284.352808][T14961] fuse: Unknown parameter 'use00000000000000000000' [ 284.378251][T14961] virtiofs: Unknown parameter 'always' [ 284.419076][T14972] incfs: Options parsing error. -22 [ 284.424843][T14972] incfs: mount failed -22 [ 285.025892][T15014] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5052'. [ 285.068773][T15027] x_tables: duplicate underflow at hook 1 [ 285.289585][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'. [ 285.337310][T15038] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.344688][T15038] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.351790][T15038] bridge_slave_0: entered allmulticast mode [ 285.358505][T15038] bridge_slave_0: entered promiscuous mode [ 285.365324][T15038] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.372532][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.379892][T15038] bridge_slave_1: entered allmulticast mode [ 285.386490][T15038] bridge_slave_1: entered promiscuous mode [ 285.463515][T15038] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.470629][T15038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.477969][T15038] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.485038][T15038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.541406][T15038] veth0_vlan: entered promiscuous mode [ 285.558290][T15038] veth1_macvtap: entered promiscuous mode [ 285.614067][ T36] audit: type=1400 audit(2016777611.079:1710): avc: denied { execute } for pid=15062 comm="syz.2.5067" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.666485][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5068'. [ 285.705068][ T330] bridge_slave_1: left allmulticast mode [ 285.710835][ T330] bridge_slave_1: left promiscuous mode [ 285.720284][T15070] netlink: 'syz.5.5070': attribute type 3 has an invalid length. [ 285.728192][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.736257][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5070'. [ 285.746219][ T330] bridge_slave_0: left allmulticast mode [ 285.752302][ T330] bridge_slave_0: left promiscuous mode [ 285.760697][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.875834][ T330] tipc: Left network mode [ 286.089801][T15107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 286.089840][T15107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 286.119841][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5082'. [ 286.170432][T15110] netlink: 'syz.5.5082': attribute type 4 has an invalid length. [ 286.178508][T15110] netlink: 'syz.5.5082': attribute type 6 has an invalid length. [ 286.186618][T15110] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5082'. [ 286.872714][T15170] netlink: 'syz.0.5107': attribute type 19 has an invalid length. [ 286.925034][T15185] EXT4-fs: dax option not supported [ 286.979620][T15201] overlay: ./file0 is not a directory [ 286.993332][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 286.993739][T15201] overlay: ./file0 is not a directory [ 287.003546][T15203] netlink: 'syz.6.5119': attribute type 10 has an invalid length. [ 287.071333][T15222] overlayfs: failed to clone upperpath [ 287.126489][T15227] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5128'. [ 287.138999][T15227] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5128'. [ 287.143351][ T10] usb 3-1: device descriptor read/64, error -71 [ 287.148176][T15227] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 287.173401][T15227] tipc: Enabling of bearer rejected, failed to enable media [ 287.339918][T15272] 8021q: VLANs not supported on gre0 [ 287.345381][ T36] audit: type=1400 audit(2016777612.809:1711): avc: denied { ioctl } for pid=15273 comm="syz.6.5145" path="socket:[53682]" dev="sockfs" ino=53682 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 287.399929][ T36] audit: type=1400 audit(2016777612.859:1712): avc: denied { relabelfrom } for pid=15283 comm="syz.0.5150" name="" dev="pipefs" ino=54604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 287.433949][ T10] usb 3-1: device descriptor read/64, error -71 [ 287.471498][T15305] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5157'. [ 287.676833][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 287.689065][ T36] audit: type=1326 audit(2016777613.149:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.6.5165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f2c3d98f6c9 code=0x0 [ 287.813574][ T10] usb 3-1: device descriptor read/64, error -71 [ 287.979657][T15350] netlink: 'syz.5.5172': attribute type 2 has an invalid length. [ 288.053298][ T10] usb 3-1: device descriptor read/64, error -71 [ 288.163343][ T10] usb usb3-port1: attempt power cycle [ 288.174687][T15363] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5176'. [ 288.503260][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 288.544291][ T10] usb 3-1: device descriptor read/8, error -71 [ 288.674327][ T10] usb 3-1: device descriptor read/8, error -71 [ 288.913245][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 288.934287][ T10] usb 3-1: device descriptor read/8, error -71 [ 289.064393][ T10] usb 3-1: device descriptor read/8, error -71 [ 289.173360][ T10] usb usb3-port1: unable to enumerate USB device [ 289.771666][T15392] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0 [ 289.771694][T15392] rust_binder: Error while translating object. [ 289.780520][T15392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.786898][T15392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 290.544867][T15435] fuse: Unknown parameter 'fd00000000000000000003' [ 290.575232][T15435] virtiofs: Unknown parameter 'always' [ 290.741690][T15454] /dev/loop0: Can't lookup blockdev [ 290.778287][T15454] netlink: 'syz.0.5208': attribute type 25 has an invalid length. [ 290.825231][T15461] fuse: Unknown parameter 'fd00000000000000000003' [ 290.849839][T15461] virtiofs: Unknown parameter 'always' [ 290.875394][T15465] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5212'. [ 291.020845][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5218'. [ 291.088675][T15489] virtiofs: Unknown parameter 'always' [ 291.127608][T15494] netlink: 'syz.5.5222': attribute type 12 has an invalid length. [ 291.169323][T15500] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5225'. [ 291.576020][T15514] virtiofs: Unknown parameter 'always' [ 291.601475][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5230'. [ 291.941261][T15537] virtiofs: Unknown parameter 'always' [ 292.179235][T15561] overlayfs: missing 'lowerdir' [ 292.323427][T15601] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 292.332976][ T36] audit: type=1400 audit(2016777617.789:1714): avc: denied { relabelfrom } for pid=15600 comm="syz.0.5259" name="NETLINK" dev="sockfs" ino=54191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.357997][ T36] audit: type=1400 audit(2016777617.819:1715): avc: denied { relabelto } for pid=15600 comm="syz.0.5259" name="NETLINK" dev="sockfs" ino=54191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon="system_u:object_r:qemu_device_t:s0" [ 292.409964][ T36] audit: type=1400 audit(2016777617.869:1716): avc: denied { setattr } for pid=15600 comm="syz.0.5259" name="NETLINK" dev="sockfs" ino=54191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.988698][T15641] overlayfs: missing 'lowerdir' [ 294.053397][T15652] netlink: 'syz.6.5278': attribute type 4 has an invalid length. [ 294.061304][T15652] netlink: 3581 bytes leftover after parsing attributes in process `syz.6.5278'. [ 294.081848][T15654] ³cóŽm: renamed from syz_tun (while UP) [ 295.013815][T15717] netlink: 'syz.2.5299': attribute type 6 has an invalid length. [ 295.470082][ T36] audit: type=1326 audit(2016777620.929:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.6.5290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x7fc00000 [ 295.897072][T15776] 9pnet_fd: Insufficient options for proto=fd [ 295.917827][T15778] incfs: Backing dir is not set, filesystem can't be mounted. [ 295.925470][T15778] incfs: mount failed -2 [ 296.263177][T15785] overlayfs: conflicting options: userxattr,verity=require [ 296.892833][T15838] netlink: 'syz.2.5340': attribute type 4 has an invalid length. [ 296.903011][T15838] netlink: 'syz.2.5340': attribute type 4 has an invalid length. [ 297.172791][T15873] overlayfs: failed to clone upperpath [ 297.424421][T15897] 9pnet_fd: Insufficient options for proto=fd [ 297.539479][T15911] veth0_virt_wifi: mtu less than device minimum [ 298.409350][T15949] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.423266][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.436332][T15949] bridge_slave_0: entered allmulticast mode [ 298.442927][T15949] bridge_slave_0: entered promiscuous mode [ 298.463478][T15949] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.470544][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.487958][T15949] bridge_slave_1: entered allmulticast mode [ 298.498508][T15949] bridge_slave_1: entered promiscuous mode [ 298.581435][T15965] /dev/loop0: Can't lookup blockdev [ 298.652760][ T36] audit: type=1400 audit(2016777624.109:1718): avc: denied { create } for pid=15974 comm="syz.0.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 298.663951][T15949] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.680675][T15949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.688009][T15949] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.695102][T15949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.718449][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.727099][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.738157][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.745265][ T7054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.755417][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.762469][ T7054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.789534][T15949] veth0_vlan: entered promiscuous mode [ 298.801000][T15949] veth1_macvtap: entered promiscuous mode [ 299.193272][ T418] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 299.333304][ T418] usb 6-1: device descriptor read/64, error -71 [ 299.353034][T16014] virtiofs: Unknown parameter 'always' [ 299.573259][ T418] usb 6-1: device descriptor read/64, error -71 [ 299.813266][ T418] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 299.943252][ T418] usb 6-1: device descriptor read/64, error -71 [ 299.993601][T16040] virtiofs: Unknown parameter 'always' [ 300.120866][ T36] audit: type=1400 audit(2016777625.579:1719): avc: denied { view } for pid=16050 comm="syz.2.5411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 300.183424][ T418] usb 6-1: device descriptor read/64, error -71 [ 300.209739][T16063] virtiofs: Unknown parameter 'always' [ 300.223789][T16064] netlink: 'syz.2.5414': attribute type 4 has an invalid length. [ 300.235254][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 300.295789][ T418] usb usb6-port1: attempt power cycle [ 300.310988][T16074] overlayfs: failed to clone upperpath [ 300.317783][ T36] audit: type=1400 audit(2016777625.779:1720): avc: denied { link } for pid=16073 comm="syz.0.5421" name="file1" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.333798][T16076] netlink: 'syz.2.5422': attribute type 28 has an invalid length. [ 300.394218][T16085] virtiofs: Unknown parameter 'always' [ 300.481071][T16096] sit0: entered promiscuous mode [ 300.486252][T16096] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 300.494174][T16096] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5430'. [ 300.554828][T16097] netlink: 'syz.0.5430': attribute type 8 has an invalid length. [ 300.562629][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 300.633245][ T418] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 300.654251][ T418] usb 6-1: device descriptor read/8, error -71 [ 300.784301][ T418] usb 6-1: device descriptor read/8, error -71 [ 301.033236][ T418] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 301.054236][ T418] usb 6-1: device descriptor read/8, error -71 [ 301.184376][ T418] usb 6-1: device descriptor read/8, error -71 [ 301.249428][T16112] virtiofs: Unknown parameter 'always' [ 301.298459][ T418] usb usb6-port1: unable to enumerate USB device [ 301.426957][T16131] virtiofs: Unknown parameter 'always' [ 301.988961][T16146] overlayfs: missing 'lowerdir' [ 302.006178][ T36] audit: type=1400 audit(2016777627.469:1721): avc: denied { getopt } for pid=16149 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.007407][T16150] tmpfs: Bad value for 'nr_blocks' [ 302.031590][T16151] tmpfs: Bad value for 'nr_blocks' [ 302.204257][T16179] rust_binder: Write failure EFAULT in pid:26 [ 302.219982][T16183] binder: Binderfs stats mode cannot be changed during a remount [ 302.339642][T16191] rust_binder: Write failure EFAULT in pid:36 [ 302.440660][T16208] kvm: kvm [16207]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d) [ 302.462935][T16208] rust_binder: Write failure EFAULT in pid:42 [ 302.466046][T16208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 302.488760][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5472'. [ 302.670377][T16240] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 302.784169][T16242] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5480'. [ 302.850331][T16251] netlink: 'syz.0.5484': attribute type 11 has an invalid length. [ 302.970902][T16276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5493'. [ 303.439212][T16339] rust_binder: Error in use_page_slow: ESRCH [ 303.439245][T16339] rust_binder: use_range failure ESRCH [ 303.445484][T16339] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 303.451072][T16339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 303.459338][T16339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 303.547100][T16361] overlayfs: failed to clone lowerpath [ 303.550959][T16360] overlayfs: failed to clone lowerpath [ 304.210646][T16382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.211416][T16382] rust_binder: Error in use_page_slow: ESRCH [ 304.217884][T16382] rust_binder: use_range failure ESRCH [ 304.223980][T16382] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 304.229453][T16382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 304.237464][T16382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 304.272587][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5526'. [ 304.273935][T16391] veth0_to_team: mtu greater than device maximum [ 304.282421][T16389] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 304.381328][T16411] netlink: 'syz.0.5535': attribute type 1 has an invalid length. [ 304.563274][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 304.713246][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 304.719519][ T10] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.730490][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.737234][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 304.746311][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.755279][ T10] usb 6-1: config 0 descriptor?? [ 304.962622][T16397] rust_binder: Read failure Err(EAGAIN) in pid:73 [ 304.963979][ T36] audit: type=1400 audit(2016777630.429:1722): avc: denied { ioctl } for pid=16396 comm="syz.5.5529" path="/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.999643][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 305.006961][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 305.018291][ T10] usb 6-1: USB disconnect, device number 26 [ 305.063852][T16467] virtiofs: Unknown parameter 'always' [ 305.231295][T16488] sock: sock_set_timeout: `syz.0.5563' (pid 16488) tries to set negative timeout [ 305.266932][T16490] virtiofs: Unknown parameter 'always' [ 305.457021][T16513] virtiofs: Unknown parameter 'always' [ 305.555292][T16525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.556050][T16524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.613328][T16539] rust_binder: Write failure EFAULT in pid:84 [ 305.653899][ T36] audit: type=1400 audit(2016777631.109:1723): avc: denied { create } for pid=16542 comm="syz.5.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 305.684966][T16545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16545 comm=syz.0.5582 [ 305.698766][T16541] virtiofs: Unknown parameter 'always' [ 305.739587][T16550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.741331][T16550] rust_binder: Error in use_page_slow: ESRCH [ 305.747947][T16550] rust_binder: use_range failure ESRCH [ 305.754044][T16550] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 305.759631][T16550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 305.769639][T16550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:90 [ 305.785930][T16555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5588'. [ 305.862827][T16566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.863778][T16566] rust_binder: Error in use_page_slow: ESRCH [ 305.870453][T16566] rust_binder: use_range failure ESRCH [ 305.877648][T16566] rust_binder: Failed to allocate buffer. len:168, is_oneway:true [ 305.883268][T16566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 305.891392][T16566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:95 [ 306.001300][T16571] virtiofs: Unknown parameter 'always' [ 306.034289][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5594'. [ 306.529099][T16600] netlink: 'syz.0.5606': attribute type 1 has an invalid length. [ 306.536935][T16600] netlink: 'syz.0.5606': attribute type 2 has an invalid length. [ 306.551409][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5606'. [ 306.575677][T16605] cgroup: Unknown subsys name 'measure' [ 307.515196][T16679] netlink: 'syz.5.5631': attribute type 30 has an invalid length. [ 307.697990][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 307.717083][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 307.737121][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 307.937926][T16709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16709 comm=syz.6.5643 [ 308.055989][T16717] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5647'. [ 308.117635][T16719] virtiofs: Unknown parameter 'always' [ 308.323988][T16750] overlayfs: failed to clone upperpath [ 308.341018][T16748] virtiofs: Unknown parameter 'always' [ 308.349943][T16752] 9pnet_fd: Insufficient options for proto=fd [ 308.489002][T16777] virtiofs: Unknown parameter 'always' [ 308.521286][T16781] netlink: 'syz.5.5673': attribute type 12 has an invalid length. [ 308.876322][T16794] 9pnet_fd: Insufficient options for proto=fd [ 309.289301][ T36] audit: type=1400 audit(2016777634.749:1724): avc: denied { execute } for pid=16799 comm="syz.0.5679" path="/cpuacct.usage_percpu" dev="rootfs" ino=58844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 309.469764][T16809] virtiofs: Unknown parameter 'always' [ 309.622694][T16836] fuse: Bad value for 'group_id' [ 309.639973][T16836] fuse: Bad value for 'group_id' [ 309.713310][ T36] audit: type=1326 audit(2016777635.169:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.0.5695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42bd98f6c9 code=0x0 [ 309.976511][T16856] virtiofs: Unknown parameter 'always' [ 309.987534][ T36] audit: type=1326 audit(2016777635.449:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.6.5699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x0 [ 310.314188][T16886] virtiofs: Unknown parameter 'always' [ 310.841256][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5717'. [ 310.885425][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5719'. [ 310.894478][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5719'. [ 310.913400][T16913] netlink: 1323 bytes leftover after parsing attributes in process `syz.6.5718'. [ 311.581936][ T36] audit: type=1326 audit(2016777637.039:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16974 comm="syz.5.5737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974158f6c9 code=0x0 [ 311.605069][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5738'. [ 312.762809][T17022] overlayfs: failed to clone upperpath [ 312.826093][T17027] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5750'. [ 312.872090][T17032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=17032 comm=syz.0.5755 [ 312.909090][ T36] audit: type=1400 audit(2016777638.369:1728): avc: denied { nlmsg_tty_audit } for pid=17042 comm="syz.0.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 312.928861][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5757'. [ 312.939566][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5757'. [ 312.968708][T17049] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5761'. [ 313.007418][T17062] @: renamed from vlan0 (while UP) [ 313.449951][T17090] overlayfs: missing 'lowerdir' [ 313.914033][ T36] audit: type=1326 audit(2016777639.379:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17125 comm="syz.6.5789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98f6c9 code=0x0 [ 314.007845][ T36] audit: type=1326 audit(2016777639.469:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17133 comm="syz.0.5792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42bd98f6c9 code=0x0 [ 314.257633][T17162] fuse: Bad value for 'user_id' [ 314.262581][T17162] fuse: Bad value for 'user_id' [ 314.734107][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5816'. [ 314.744864][T17196] 9pnet_fd: Insufficient options for proto=fd [ 314.771678][T17205] fuse: Unknown parameter 'tmpfs' [ 315.011704][T17226] overlayfs: failed to clone lowerpath [ 315.017886][T17226] overlayfs: failed to clone lowerpath [ 315.900134][T17294] tipc: Enabling of bearer rejected, failed to enable media [ 316.243551][T17331] __nla_validate_parse: 1 callbacks suppressed [ 316.243578][T17331] netlink: 51 bytes leftover after parsing attributes in process `syz.6.5866'. [ 316.278776][ T36] audit: type=1400 audit(2000000001.480:1731): avc: denied { write } for pid=331 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60478 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 316.494154][T17373] syzkaller0: entered allmulticast mode [ 316.499912][T17373] syzkaller0: entered promiscuous mode [ 316.506758][T17373] syzkaller0 (unregistering): left promiscuous mode [ 316.513480][T17373] syzkaller0 (unregistering): left allmulticast mode [ 317.540580][T17430] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5899'. [ 317.602800][T17442] tmpfs: Unknown parameter 'hge' [ 318.701362][T17508] xt_NFQUEUE: number of total queues is 0 [ 318.745695][T17531] netlink: 'syz.5.5935': attribute type 27 has an invalid length. [ 319.424225][T17547] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5941'. [ 319.474985][T17549] fuse: Unknown parameter '0000000000000000000000300000000000000000003' [ 319.647346][T17564] 9pnet_fd: Insufficient options for proto=fd [ 319.800452][T17576] netlink: 8568 bytes leftover after parsing attributes in process `syz.6.5954'. [ 319.876742][T17584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17584 comm=syz.6.5958 [ 319.890801][T17584] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5958'. [ 320.185821][T17606] tipc: Enabling of bearer rejected, failed to enable media [ 320.227602][T17617] fuse: Bad value for 'fd' [ 320.250287][T17622] overlay: Unknown parameter 'dont_measure' [ 320.419648][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5979'. [ 320.432787][T17649] overlayfs: failed to clone upperpath [ 320.509013][ T36] audit: type=1326 audit(2000000005.710:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.5984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42bd98f6c9 code=0x0 [ 320.791941][T17686] tipc: Started in network mode [ 320.796983][T17686] tipc: Node identity 4ef57dec99bc, cluster identity 4711 [ 320.804332][T17686] tipc: Enabled bearer , priority 10 [ 321.050164][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.057510][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.065145][T17702] bridge_slave_0: entered allmulticast mode [ 321.071670][T17702] bridge_slave_0: entered promiscuous mode [ 321.078647][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.086070][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.093408][T17702] bridge_slave_1: entered allmulticast mode [ 321.099904][T17702] bridge_slave_1: entered promiscuous mode [ 321.163787][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.170884][T17702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.178231][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.185332][T17702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.211469][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.218869][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.229635][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.236717][ T7056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.246455][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.253542][ T7054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.282463][T17702] veth0_vlan: entered promiscuous mode [ 321.294843][T17702] veth1_macvtap: entered promiscuous mode [ 321.888320][ T36] audit: type=1400 audit(2000000007.090:1733): avc: denied { accept } for pid=17760 comm="syz.5.6015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.924382][T17765] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.933797][ T331] tipc: Node number set to 3611917804 [ 321.944141][T17765] overlayfs: failed to set xattr on upper [ 321.949909][T17765] overlayfs: ...falling back to uuid=null. [ 321.999544][T17771] overlayfs: failed to clone lowerpath [ 322.008496][T17774] overlayfs: failed to clone lowerpath [ 322.065634][ T36] audit: type=1400 audit(2000000007.270:1734): avc: denied { append } for pid=17783 comm="syz.0.6025" name="file0" dev="tmpfs" ino=3041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.109237][T17789] rust_binder: Error while translating object. [ 322.109304][T17789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.116557][T17789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 322.177452][T17808] rust_binder: Write failure EFAULT in pid:14 [ 322.289877][T17816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.385032][ T36] audit: type=1400 audit(2000000007.580:1735): avc: denied { read } for pid=17830 comm="syz.6.6039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 322.939455][T17858] batadv_slave_1: entered promiscuous mode [ 322.951064][T17858] batadv_slave_1: left promiscuous mode [ 322.972926][T17861] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6047'. [ 323.053542][T17867] fuse: Bad value for 'fd' [ 323.366868][T17931] netlink: 'syz.2.6076': attribute type 27 has an invalid length. [ 323.441981][T17944] fuse: Bad value for 'fd' [ 323.492299][ T36] audit: type=1400 audit(2000000008.690:1736): avc: denied { getattr } for pid=17956 comm="syz.2.6085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 323.527476][T17960] overlayfs: failed to clone lowerpath [ 323.561451][T17968] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6088'. [ 323.757345][T17989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6094'. [ 323.872903][T17998] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.198159][T18016] fuse: Invalid gid '00000000000037777777777' [ 324.260434][ T36] audit: type=1326 audit(2000000009.460:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.6.6108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x0 [ 324.283591][ T36] audit: type=1326 audit(2000000009.460:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.6.6108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=14 compat=0 ip=0x7f5344f46b97 code=0x0 [ 324.385315][ T36] audit: type=1326 audit(2000000009.590:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.2.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e758f6c9 code=0x7ffc0000 [ 324.385862][T18041] netlink: 316 bytes leftover after parsing attributes in process `syz.2.6110'. [ 324.422220][T18041] netlink: 316 bytes leftover after parsing attributes in process `syz.2.6110'. [ 324.438112][ T36] audit: type=1326 audit(2000000009.590:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.2.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e758f6c9 code=0x7ffc0000 [ 324.461782][ T36] audit: type=1326 audit(2000000009.590:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.2.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e758f6c9 code=0x7ffc0000 [ 324.485398][ T36] audit: type=1326 audit(2000000009.590:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18040 comm="syz.2.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e758f6c9 code=0x7ffc0000 [ 325.933106][T18071] fuse: Bad value for 'fd' [ 326.768649][T18105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65525 sclass=netlink_tcpdiag_socket pid=18105 comm=syz.0.6133 [ 327.377494][T18160] overlayfs: missing 'lowerdir' [ 327.387942][T18160] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6151'. [ 327.413743][T18163] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 327.422954][T18163] overlayfs: missing 'lowerdir' [ 327.470207][T18167] netlink: 'syz.0.6145': attribute type 13 has an invalid length. [ 327.658461][T18183] overlayfs: failed to clone upperpath [ 327.894804][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 327.894823][ T36] audit: type=1326 audit(2000000013.100:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.2.6166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28e758f6c9 code=0x0 [ 327.923988][ T36] audit: type=1326 audit(2000000013.120:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.5.6167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974158f6c9 code=0x0 [ 328.217414][T18252] bpf: Bad value for 'mode' [ 328.288729][T18258] fuse: Unknown parameter 'ä%0xffffffffffffffff' [ 328.296128][T18258] devpts: called with bogus options [ 328.332258][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6186'. [ 328.875941][T18329] overlay: Bad value for 'xino' [ 329.774108][T18404] netlink: 'syz.5.6235': attribute type 4 has an invalid length. [ 329.795185][T18408] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6236'. [ 330.243052][T18424] netlink: 'syz.2.6242': attribute type 27 has an invalid length. [ 330.398355][ T36] audit: type=1400 audit(2000000015.600:1831): avc: denied { lock } for pid=18430 comm="syz.0.6244" path="socket:[63032]" dev="sockfs" ino=63032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.417535][T18433] netlink: 'syz.6.6245': attribute type 11 has an invalid length. [ 330.464035][T18442] overlayfs: failed to clone upperpath [ 330.489787][T18448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18448 comm=syz.6.6252 [ 330.767505][T18470] 9pnet_fd: Insufficient options for proto=fd [ 330.778527][T18467] 9pnet: Could not find request transport: xen [ 331.380295][T18506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=18506 comm=syz.6.6270 [ 331.394027][T18506] 9pnet_fd: p9_fd_create_tcp (18506): problem connecting socket to 127.0.0.1 [ 331.416442][T18511] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 331.427319][T18511] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6271'. [ 331.847924][ T36] audit: type=1400 audit(2000000017.050:1832): avc: denied { mounton } for pid=18526 comm="syz.2.6277" path="/file1/file0" dev="rootfs" ino=61120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 331.871799][T18528] overlay: ./file1/file0 is not a directory [ 332.559481][T18540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6282'. [ 333.191963][T18576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6294'. [ 333.529450][T18603] 9pnet_fd: Insufficient options for proto=fd [ 333.761618][T18617] netlink: 'syz.2.6307': attribute type 39 has an invalid length. [ 333.771496][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6307'. [ 334.679304][T18664] tmpfs: Unknown parameter 'noswÐ ¨çíÂÒnever' [ 335.181818][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6328'. [ 335.191357][T18674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18674 comm=syz.6.6328 [ 335.278311][T18678] overlayfs: missing 'lowerdir' [ 335.402619][T18700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=18700 comm=syz.2.6338 [ 335.729209][T18709] netlink: 679 bytes leftover after parsing attributes in process `syz.6.6341'. [ 335.739192][T18709] netlink: 679 bytes leftover after parsing attributes in process `syz.6.6341'. [ 336.058854][T18731] overlayfs: failed to clone lowerpath [ 336.829766][T18775] /dev/loop0: Can't lookup blockdev [ 337.025295][T18782] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.032432][T18782] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.039651][T18782] bridge_slave_0: entered allmulticast mode [ 337.045980][T18782] bridge_slave_0: entered promiscuous mode [ 337.052990][T18782] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.060249][T18782] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.067773][T18782] bridge_slave_1: entered allmulticast mode [ 337.074348][T18782] bridge_slave_1: entered promiscuous mode [ 337.129408][T18782] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.136495][T18782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.143810][T18782] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.150859][T18782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.175525][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.182870][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.191909][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.199002][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.209173][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.216244][ T7054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.243223][T18782] veth0_vlan: entered promiscuous mode [ 337.255765][T18782] veth1_macvtap: entered promiscuous mode [ 337.303756][T18816] rust_binder: inc_ref_done called when no active inc_refs [ 337.347449][T18822] overlayfs: regular lower layers cannot follow data lower layers [ 337.388145][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6379'. [ 337.411954][ T36] audit: type=1400 audit(2000000000.970:1833): avc: denied { read } for pid=18825 comm="syz.0.6380" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.468194][ T36] audit: type=1400 audit(2000000000.970:1834): avc: denied { open } for pid=18825 comm="syz.0.6380" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.527860][T18831] netlink: 'syz.0.6381': attribute type 27 has an invalid length. [ 337.588790][T18832] rust_binder: Got transaction with invalid offset. [ 337.588823][T18832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.595526][T18832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 337.649167][T18834] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6382'. [ 337.699006][T18838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.736258][ T36] audit: type=1400 audit(2000000001.300:1835): avc: denied { mount } for pid=18841 comm="syz.2.6386" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 337.936734][T18863] netlink: 'syz.5.6394': attribute type 27 has an invalid length. [ 337.967541][ T36] audit: type=1326 audit(2000000001.530:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18868 comm="syz.5.6396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974158f6c9 code=0x0 [ 338.033726][T18877] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6398'. [ 338.686367][T18924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6416'. [ 339.453260][ T36] audit: type=1326 audit(2000000003.010:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.476777][ T36] audit: type=1326 audit(2000000003.010:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.501619][ T36] audit: type=1326 audit(2000000003.010:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.525097][ T36] audit: type=1326 audit(2000000003.010:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.548385][ T36] audit: type=1326 audit(2000000003.010:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.572844][ T36] audit: type=1326 audit(2000000003.010:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.0.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x50000 [ 339.942083][T19014] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.6447'. [ 340.335281][T19044] netlink: 'syz.6.6461': attribute type 11 has an invalid length. [ 340.393437][T19052] overlayfs: conflicting options: userxattr,verity=require [ 341.503882][T19107] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 341.511037][T19107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 343.844171][T19199] overlay: Unknown parameter '/' [ 343.846530][T19200] overlayfs: missing 'lowerdir' [ 345.585069][T19276] 9pnet_fd: Insufficient options for proto=fd [ 345.606471][T19278] overlayfs: failed to resolve './file2': -2 [ 345.823838][T19313] rust_binder: 74: no such ref 2 [ 345.958838][ T36] kauditd_printk_skb: 4757 callbacks suppressed [ 345.958857][ T36] audit: type=1400 audit(2000000009.522:6600): avc: denied { unmount } for pid=18782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 346.031579][T19327] devtmpfs: Unknown parameter 'SÌù0ëCôt'<]K›ªYöId›hèÎLêÓ3ÌêJYŽ…ý1 ûlÓcôµq' [ 346.146892][T19336] tipc: Started in network mode [ 346.151853][T19336] tipc: Node identity ac14142f, cluster identity 4711 [ 346.158900][T19336] tipc: New replicast peer: 0.0.0.0 [ 346.164563][T19336] tipc: Enabled bearer , priority 10 [ 346.189982][T19336] 9p: Unknown uid 00000000004294967295 [ 346.261975][T19354] rust_binder: 93: no such ref 6 [ 346.288335][T19361] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 346.295640][T19361] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 346.304630][T19359] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.400340][T19388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=19388 comm=syz.6.6577 [ 346.415392][T19388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19388 comm=syz.6.6577 [ 346.444303][T19388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=19388 comm=syz.6.6577 [ 346.461435][T19396] rust_binder: Failed copying remainder into alloc: EFAULT [ 346.461458][T19396] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 346.469004][T19396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 346.477353][T19396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:108 [ 346.516120][T19398] binder: Bad value for 'defcontext' [ 346.551299][T19402] overlayfs: missing 'lowerdir' [ 346.792838][T19413] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=19413 comm=syz.2.6585 [ 347.004018][T19423] fuse: Bad value for 'fd' [ 347.283238][ T63] tipc: Node number set to 2886997039 [ 348.708031][T19535] fuseblk: Unknown parameter 'rootmodn¢e ' [ 349.157245][ T36] audit: type=1400 audit(2000000012.722:6601): avc: denied { search } for pid=19552 comm="syz.2.6635" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 349.194730][ T36] audit: type=1400 audit(2000000012.742:6602): avc: denied { write } for pid=19552 comm="syz.2.6635" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 349.379920][ T36] audit: type=1326 audit(2000000012.942:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19583 comm="syz.6.6648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x0 [ 349.974821][T19609] fuse: Bad value for 'user_id' [ 349.979717][T19609] fuse: Bad value for 'user_id' [ 350.435337][T19650] 9pnet_fd: Insufficient options for proto=fd [ 350.689649][ T36] audit: type=1400 audit(2000000014.252:6604): avc: denied { setattr } for pid=19657 comm="syz.5.6675" name="PPTP" dev="sockfs" ino=66014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.725380][T19660] fuse: Bad value for 'user_id' [ 350.730377][T19660] fuse: Bad value for 'user_id' [ 350.771373][T19664] overlayfs: failed to clone upperpath [ 351.951576][ T36] audit: type=1326 audit(2000000015.512:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19728 comm="syz.0.6700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 351.974315][T19731] netlink: 'syz.5.6701': attribute type 1 has an invalid length. [ 351.982380][T19731] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6701'. [ 352.345012][T19739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6705'. [ 352.395832][ T7056] veth1_macvtap: left promiscuous mode [ 352.401415][ T7056] veth0_vlan: left promiscuous mode [ 352.806497][T19759] overlayfs: empty lowerdir [ 353.304183][ T36] audit: type=1326 audit(2000000016.872:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.6.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x7fc00000 [ 353.469306][T19795] overlayfs: failed to clone lowerpath [ 353.476477][T19795] netlink: 'syz.6.6724': attribute type 12 has an invalid length. [ 353.521043][T19805] 9pnet_fd: Insufficient options for proto=fd [ 353.568564][T19821] tmpfs: Unknown parameter '' [ 353.590835][T19831] tmpfs: Unknown parameter '01777777777777777777777' [ 353.599008][T19833] tipc: MTU too low for tipc bearer [ 353.604925][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6737'. [ 353.649218][ T36] audit: type=1326 audit(2000000017.212:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19843 comm="syz.6.6742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x0 [ 353.723406][T19864] netlink: 'syz.0.6748': attribute type 10 has an invalid length. [ 353.731306][T19864] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6748'. [ 353.740967][T19864] bridge_slave_1: left promiscuous mode [ 353.746841][T19864] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.837246][T19876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6752'. [ 354.130901][T19911] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6761'. [ 354.377163][T19930] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19930 comm=syz.0.6770 [ 354.410881][ T36] audit: type=1326 audit(2000000017.972:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19934 comm="syz.0.6772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 354.506499][T19937] netlink: 'syz.6.6773': attribute type 1 has an invalid length. [ 354.539339][T19943] /dev/loop0: Can't lookup blockdev [ 354.651280][T19952] tipc: Started in network mode [ 354.656291][T19952] tipc: Node identity fc01, cluster identity 4711 [ 354.662824][T19952] tipc: Enabling of bearer rejected, failed to enable media [ 355.445944][T20009] 9pnet_fd: Insufficient options for proto=fd [ 355.608358][T20022] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6803'. [ 355.776602][T20038] netlink: 'syz.2.6809': attribute type 39 has an invalid length. [ 356.888933][T20053] netlink: 'syz.2.6816': attribute type 10 has an invalid length. [ 357.484037][T20082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6829'. [ 357.770276][ T36] audit: type=1400 audit(2000000021.332:6609): avc: denied { setattr } for pid=20093 comm="syz.6.6834" path="socket:[66512]" dev="sockfs" ino=66512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.089185][T20141] netlink: 'syz.6.6847': attribute type 4 has an invalid length. [ 358.524142][ T36] audit: type=1400 audit(2000000022.092:6610): avc: denied { map } for pid=20180 comm="syz.2.6861" path="socket:[67620]" dev="sockfs" ino=67620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 358.637334][T20201] overlayfs: failed to clone upperpath [ 358.761245][T20214] fuse: Bad value for 'fd' [ 358.872971][T20213] 9pnet_fd: Insufficient options for proto=fd [ 359.010077][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 359.066072][T20238] overlayfs: missing 'lowerdir' [ 359.187590][T20250] netlink: 'syz.2.6880': attribute type 1 has an invalid length. [ 359.218155][T20250] overlay: ./file0 is not a directory [ 359.223740][ T36] audit: type=1400 audit(2000000022.782:6611): avc: denied { map } for pid=20249 comm="syz.2.6880" path="/469/file0" dev="tmpfs" ino=2544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 359.293251][ T36] audit: type=1400 audit(2000000022.822:6612): avc: denied { watch watch_reads } for pid=20251 comm="syz.5.6881" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 359.493456][T20281] SELinux: Context syste is not valid (left unmapped). [ 359.500475][ T36] audit: type=1400 audit(2000000023.062:6613): avc: denied { relabelfrom } for pid=20280 comm="syz.5.6891" name="NETLINK" dev="sockfs" ino=68693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 359.555348][ T36] audit: type=1400 audit(2000000023.102:6614): avc: denied { relabelto } for pid=20280 comm="syz.5.6891" name="NETLINK" dev="sockfs" ino=68693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_tcpdiag_socket permissive=1 trawcon="syste" [ 359.591837][T20284] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6892'. [ 359.696195][T20295] overlayfs: failed to clone upperpath [ 359.702295][T20293] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 359.712682][ T36] audit: type=1400 audit(2000000023.272:6615): avc: denied { relabelto } for pid=20292 comm="syz.5.6896" name="file0" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 359.740294][ T36] audit: type=1400 audit(2000000023.272:6616): avc: denied { associate } for pid=20292 comm="syz.5.6896" name="file0" dev="tmpfs" ino=1976 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 359.943684][T20311] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 360.494332][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6912'. [ 360.516342][T20340] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 360.525339][T20340] overlayfs: missing 'lowerdir' [ 361.673981][ T36] audit: type=1326 audit(2000000025.242:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20382 comm="syz.0.6927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x7ffc0000 [ 361.700768][ T36] audit: type=1326 audit(2000000025.242:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20382 comm="syz.0.6927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x7ffc0000 [ 361.727578][T20387] overlayfs: failed to clone lowerpath [ 361.998530][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6936'. [ 362.008018][T20413] erspan0: entered promiscuous mode [ 362.076201][T20426] 9pnet_fd: Insufficient options for proto=fd [ 362.474947][T20428] batadv_slave_0: entered promiscuous mode [ 362.482002][T20427] batadv_slave_0: left promiscuous mode [ 362.886999][T20454] overlayfs: lower data-only dirs require metacopy support. [ 362.996201][T20476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=20476 comm=syz.5.6958 [ 363.016226][T20476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=20476 comm=syz.5.6958 [ 363.582769][ T36] kauditd_printk_skb: 700 callbacks suppressed [ 363.582789][ T36] audit: type=1326 audit(2000000027.142:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20545 comm="syz.2.6983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28e758f6c9 code=0x0 [ 363.676637][T20562] syz.0.6988(20562): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 363.690139][T20564] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6989'. [ 363.699513][T20564] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6989'. [ 363.708716][T20564] netlink: 'syz.5.6989': attribute type 6 has an invalid length. [ 363.716984][T20564] netlink: 'syz.5.6989': attribute type 5 has an invalid length. [ 363.724772][T20564] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6989'. [ 363.734052][T20564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6989'. [ 363.828068][ T36] audit: type=1326 audit(2000000027.392:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20586 comm="syz.5.6998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974158f6c9 code=0x0 [ 364.668829][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7015'. [ 364.687935][T20632] binder: Unknown parameter '' [ 364.746742][T20645] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7018'. [ 364.758268][T20645] netlink: 'syz.6.7018': attribute type 6 has an invalid length. [ 364.766094][T20645] netlink: 'syz.6.7018': attribute type 5 has an invalid length. [ 364.774006][T20645] netlink: 'syz.6.7018': attribute type 4 has an invalid length. [ 364.892420][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7023'. [ 365.288078][T20671] 9pnet_fd: Insufficient options for proto=fd [ 365.305840][ T36] audit: type=1400 audit(2000000028.872:7321): avc: denied { nlmsg_read } for pid=20674 comm="syz.0.7031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 365.800712][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7039'. [ 365.810288][T20695] 9pnet_fd: Insufficient options for proto=fd [ 365.829837][T20697] /dev/loop0: Can't lookup blockdev [ 365.930552][T20709] overlayfs: failed to clone lowerpath [ 366.605519][T20759] can: request_module (can-proto-0) failed. [ 366.615642][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7062'. [ 366.821956][T20803] fuse: Unknown parameter 'fd@H3¾¡h“åÇkÁ‚µ<0x0000000000000003' [ 366.842933][T20808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7075'. [ 367.393297][T20826] /dev/loop0: Can't lookup blockdev [ 368.095901][T20902] netlink: 'syz.2.7109': attribute type 1 has an invalid length. [ 368.131719][T20908] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2011039721/2011039723 [ 368.141500][T20908] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2011039721/2011039723 [ 368.150797][T20908] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2011039721/2011039723 [ 368.340726][T20932] netlink: 'syz.6.7122': attribute type 4 has an invalid length. [ 369.125657][T21007] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7147'. [ 369.552565][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.558581][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.564562][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.570467][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.576588][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.582489][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.588479][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.594490][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.600393][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.606369][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.612271][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.618228][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.624202][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.630150][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.636203][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.642229][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.648202][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.654238][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.660134][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.666093][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.672006][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.677997][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.684210][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.690122][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.696083][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.701994][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.708122][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.714314][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.720216][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.726191][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.732130][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.738119][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.744097][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.750070][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.756084][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.762029][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.768008][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.774865][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.781006][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.787787][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.793821][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.799777][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.809211][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.815496][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.821648][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.827924][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.834202][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.840267][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.846593][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.852656][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.858995][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.865711][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.875592][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.883780][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.891473][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.897774][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.903958][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.910170][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.916445][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.922546][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.928833][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.935112][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.941170][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.947651][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.953870][T21018] 9pnet: Unknown protocol version 9p2000.6 [ 369.995408][ T36] audit: type=1400 audit(2000000033.566:7322): avc: denied { append } for pid=21034 comm="syz.2.7156" name="file0" dev="tmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 371.539386][T21085] fuseblk: Unknown parameter 'userÅid' [ 371.709108][T21090] 9pnet_fd: Insufficient options for proto=fd [ 371.976883][T21096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7178'. [ 371.987969][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7178'. [ 372.236338][T21119] overlayfs: failed to resolve './file2': -2 [ 372.979116][T21165] fuse: Unknown parameter '18446744073709551615' [ 373.049511][T21171] netlink: 'syz.2.7202': attribute type 27 has an invalid length. [ 373.215686][T21200] fuse: Bad value for 'user_id' [ 373.220618][T21200] fuse: Bad value for 'user_id' [ 373.626973][T21259] 9pnet_fd: Insufficient options for proto=fd [ 374.013745][T21283] netlink: 'syz.0.7237': attribute type 2 has an invalid length. [ 374.022090][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7237'. [ 375.126005][ T330] tipc: Subscription rejected, illegal request [ 375.884781][T21403] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 376.365148][T21450] fuseblk: Unknown parameter 'rootm000000°0010000' [ 376.760091][T21509] overlayfs: failed to clone upperpath [ 377.111371][T21577] netlink: 5308 bytes leftover after parsing attributes in process `syz.6.7337'. [ 377.913909][T21606] cgroup2: Unknown parameter 'memo2y_nts<' [ 378.213767][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7354'. [ 378.224841][ T36] audit: type=1326 audit(2000000041.796:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21627 comm="syz.5.7355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f974158f6c9 code=0x0 [ 378.440391][T21640] incfs: Options parsing error. -22 [ 378.445722][T21640] incfs: mount failed -22 [ 378.624850][T21645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7361'. [ 378.966717][ T36] audit: type=1326 audit(2000000042.536:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21652 comm="syz.0.7365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 379.079570][T21658] netlink: 'syz.5.7367': attribute type 4 has an invalid length. [ 379.087570][T21658] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7367'. [ 379.277101][T21684] fuse: Bad value for 'user_id' [ 379.282099][T21684] fuse: Bad value for 'user_id' [ 379.421756][T21695] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7381'. [ 379.430897][T21695] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.092637][T21762] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 380.101234][T21763] netlink: 'syz.0.7405': attribute type 12 has an invalid length. [ 380.243534][T21780] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7412'. [ 380.856117][T21830] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.883186][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.910726][T21830] bridge_slave_0: entered allmulticast mode [ 380.921292][T21830] bridge_slave_0: entered promiscuous mode [ 380.944042][T21830] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.962039][T21830] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.999958][T21830] bridge_slave_1: entered allmulticast mode [ 381.008918][T21855] overlayfs: failed to clone upperpath [ 381.016579][T21830] bridge_slave_1: entered promiscuous mode [ 381.223601][T21830] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.230702][T21830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.238041][T21830] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.245109][T21830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.324660][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.332218][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.367963][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.375078][ T7056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.402498][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.409602][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.498828][T21830] veth0_vlan: entered promiscuous mode [ 381.539497][T21830] veth1_macvtap: entered promiscuous mode [ 381.580117][ T36] audit: type=1400 audit(2000000045.146:7325): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/root/syzkaller.ZzixGy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=72032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 381.666882][T21933] overlayfs: failed to clone upperpath [ 381.731631][T21946] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 381.738855][T21946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 381.744134][T21950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 381.758442][T21950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 381.773964][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.800299][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.809494][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.817868][T21960] rust_binder: Write failure EFAULT in pid:9 [ 381.818082][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.832785][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.840980][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.857663][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.872407][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.880788][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.888996][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.905442][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.914305][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.922340][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.930662][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.938721][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.946825][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.954997][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.963066][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.971064][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.979354][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.987435][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 381.995472][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.003674][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.011767][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.020520][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.028811][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.036812][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.045224][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.053217][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.061162][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.070744][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.080075][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.088719][T21955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 382.103313][ T418] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 382.253554][ T418] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 382.268344][ T418] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 382.278479][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.286564][ T418] usb 3-1: Product: syz [ 382.290799][ T418] usb 3-1: Manufacturer: syz [ 382.295508][ T418] usb 3-1: SerialNumber: syz [ 382.303309][ T418] usb 3-1: config 0 descriptor?? [ 382.309587][ T418] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 382.316536][ T418] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 382.324710][ T418] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 382.510535][T21967] netlink: 'syz.2.7451': attribute type 12 has an invalid length. [ 382.525271][T21967] SELinux: security_context_str_to_sid () failed with errno=-22 [ 382.534516][ T10] usb 3-1: USB disconnect, device number 25 [ 383.130904][ T36] audit: type=1326 audit(2000000046.696:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.0.7488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 383.570882][T22079] netlink: 'syz.5.7489': attribute type 32 has an invalid length. [ 383.615397][ T36] audit: type=1326 audit(2000000047.186:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22088 comm="syz.5.7492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974158f6c9 code=0x0 [ 383.651543][T22091] x_tables: unsorted entry at hook 2 [ 383.990808][T22103] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 383.998470][T22103] SELinux: failed to load policy [ 384.041141][T22111] rust_binder: Write failure EFAULT in pid:20 [ 384.431108][T22123] netlink: 'syz.2.7504': attribute type 64 has an invalid length. [ 384.464338][T22123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22123 comm=syz.2.7504 [ 385.154185][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7518'. [ 385.283933][T22199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 385.283980][T22199] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 385.300943][T22202] rust_binder: Error in use_page_slow: ESRCH [ 385.300963][T22202] rust_binder: use_range failure ESRCH [ 385.307727][T22202] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 385.315376][T22202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 385.321228][T22202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:39 [ 385.383948][T22212] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7532'. [ 385.480775][T22214] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7533'. [ 385.489840][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7533'. [ 385.584918][T22233] overlayfs: failed to clone upperpath [ 385.589618][T22234] overlayfs: failed to clone upperpath [ 385.683828][T22258] netlink: 'syz.0.7549': attribute type 4 has an invalid length. [ 385.714952][T22263] netlink: 'syz.0.7550': attribute type 1 has an invalid length. [ 385.953531][T22292] overlayfs: failed to clone upperpath [ 386.088090][T22299] tipc: Enabling of bearer rejected, failed to enable media [ 386.393209][ T493] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 386.543244][ T493] usb 3-1: Using ep0 maxpacket: 16 [ 386.552937][ T493] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 386.558173][T22331] overlayfs: missing 'lowerdir' [ 386.561200][ T493] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.566475][T22332] overlayfs: missing 'lowerdir' [ 386.576340][ T493] usb 3-1: config 0 has no interface number 0 [ 386.587470][ T493] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 386.599250][ T493] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 386.610649][ T493] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 386.621639][ T493] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 386.631521][ T493] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 386.645353][ T493] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 386.654416][ T493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.663011][ T493] usb 3-1: config 0 descriptor?? [ 386.668714][T22308] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 386.683367][T20959] udevd[20959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 386.878893][ T418] usb 3-1: USB disconnect, device number 26 [ 387.125591][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7581'. [ 387.134607][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7581'. [ 387.204284][T22362] cgroup: Need name or subsystem set [ 387.569954][T22383] overlayfs: overlapping lowerdir path [ 387.576496][T22383] overlayfs: overlapping lowerdir path [ 387.725657][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7600'. [ 387.811351][T22406] can: request_module (can-proto-0) failed. [ 387.819173][T22406] overlayfs: failed to clone lowerpath [ 387.825479][T22406] overlayfs: failed to clone lowerpath [ 387.853205][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 388.003188][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 388.010717][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 388.019881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.027916][ T10] usb 3-1: Product: syz [ 388.032160][ T10] usb 3-1: Manufacturer: syz [ 388.036874][ T10] usb 3-1: SerialNumber: syz [ 388.244058][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 388.318317][T22426] netlink: 'syz.5.7609': attribute type 63 has an invalid length. [ 388.326316][T22426] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7609'. [ 388.335319][T22426] gretap0: entered allmulticast mode [ 388.340945][T22426] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.411550][ T36] audit: type=1400 audit(2000000051.976:7328): avc: denied { execute } for pid=22441 comm="syz.0.7615" path="pipe:[72675]" dev="pipefs" ino=72675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 388.446486][ T36] audit: type=1400 audit(2000000052.016:7329): avc: denied { read write } for pid=22389 comm="syz.2.7595" name="lp0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 388.471870][ T418] usb 3-1: USB disconnect, device number 27 [ 388.478956][ T36] audit: type=1400 audit(2000000052.016:7330): avc: denied { open } for pid=22389 comm="syz.2.7595" path="/dev/usb/lp0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 388.669524][T22468] netlink: 'syz.0.7623': attribute type 63 has an invalid length. [ 388.678473][T22468] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7623'. [ 388.684612][T22389] usblp0: removed [ 388.687852][T22468] gretap0: entered allmulticast mode [ 388.697678][T22468] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.705270][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7625'. [ 388.854386][T22495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22495 comm=syz.5.7634 [ 389.212243][T22501] netlink: 'syz.2.7636': attribute type 4 has an invalid length. [ 389.544263][ T36] audit: type=1400 audit(2000000053.116:7331): avc: denied { create } for pid=22551 comm="syz.0.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 389.957909][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.965028][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.972251][T22594] bridge_slave_0: entered allmulticast mode [ 389.978672][T22594] bridge_slave_0: entered promiscuous mode [ 389.985489][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.992639][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.999886][T22594] bridge_slave_1: entered allmulticast mode [ 390.006432][T22594] bridge_slave_1: entered promiscuous mode [ 390.098695][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.105998][T22594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.113368][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.120427][T22594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.152349][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.159973][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.172801][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.179902][ T7056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.190224][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.197398][ T7056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.199182][T22620] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 390.234748][T22594] veth0_vlan: entered promiscuous mode [ 390.255955][T22594] veth1_macvtap: entered promiscuous mode [ 390.278162][ T36] audit: type=1400 audit(2000000062.844:7332): avc: denied { mounton } for pid=22594 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 390.438467][T22628] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.482792][ T36] audit: type=1326 audit(2000000063.044:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22632 comm="syz.6.7680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5344f8f6c9 code=0x0 [ 390.563563][ T418] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 390.574692][T22640] __nla_validate_parse: 1 callbacks suppressed [ 390.574708][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7682'. [ 390.652267][T22655] fuse: Bad value for 'fd' [ 390.693202][ T418] usb 6-1: device descriptor read/64, error -71 [ 390.933216][ T418] usb 6-1: device descriptor read/64, error -71 [ 391.183325][ T418] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 391.313204][ T418] usb 6-1: device descriptor read/64, error -71 [ 391.501682][T22700] fuse: Bad value for 'fd' [ 391.553221][ T418] usb 6-1: device descriptor read/64, error -71 [ 391.610328][T22711] overlayfs: failed to clone upperpath [ 391.663513][ T418] usb usb6-port1: attempt power cycle [ 392.023584][ T418] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 392.054200][ T418] usb 6-1: device descriptor read/8, error -71 [ 392.194245][ T418] usb 6-1: device descriptor read/8, error -71 [ 392.195057][T22753] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 392.237044][T22755] devpts: called with bogus options [ 392.290238][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7725'. [ 392.299269][T22762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7725'. [ 392.433221][ T418] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 392.464313][ T418] usb 6-1: device descriptor read/8, error -71 [ 392.594208][ T418] usb 6-1: device descriptor read/8, error -71 [ 392.713290][ T418] usb usb6-port1: unable to enumerate USB device [ 392.860855][T22784] netlink: 'syz.6.7732': attribute type 12 has an invalid length. [ 392.923406][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 393.073217][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 393.079731][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 393.089822][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.100012][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 393.111131][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.120484][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.128609][ T10] usb 3-1: SerialNumber: syz [ 393.136546][T22782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 393.231488][ T36] audit: type=1326 audit(2000000065.794:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.6.7738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5344f8f6c9 code=0x0 [ 393.345106][T22782] rust_binder: Error while translating object. [ 393.345156][T22782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 393.351557][T22782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 393.362222][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 393.382621][ T10] usb 3-1: USB disconnect, device number 28 [ 393.723211][T22801] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 393.853230][T22801] usb 6-1: device descriptor read/64, error -71 [ 393.886932][T22814] x_tables: unsorted entry at hook 2 [ 394.093215][T22801] usb 6-1: device descriptor read/64, error -71 [ 394.120383][T22823] overlayfs: failed to resolve './file0/file0': -2 [ 394.143238][ T377] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 394.303251][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 394.309658][ T377] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 394.317821][ T377] usb 3-1: config 0 has no interface number 0 [ 394.325354][ T377] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 394.334477][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.342480][ T377] usb 3-1: Product: syz [ 394.343212][T22801] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 394.346848][ T377] usb 3-1: Manufacturer: syz [ 394.358867][ T377] usb 3-1: SerialNumber: syz [ 394.364206][ T377] usb 3-1: config 0 descriptor?? [ 394.369949][ T377] smsc95xx v2.0.0 [ 394.483260][T22801] usb 6-1: device descriptor read/64, error -71 [ 394.577070][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 394.588311][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.598638][ T377] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 394.609975][ T377] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 394.619710][ T377] usb 3-1: USB disconnect, device number 29 [ 394.721991][T22856] overlayfs: missing 'lowerdir' [ 394.733207][T22801] usb 6-1: device descriptor read/64, error -71 [ 394.770807][T22864] overlayfs: failed to clone upperpath [ 394.843311][T22801] usb usb6-port1: attempt power cycle [ 395.043217][ T377] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 395.183233][T22801] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 395.204871][T22801] usb 6-1: device descriptor read/8, error -71 [ 395.213992][ T377] usb 3-1: config 247 has an invalid interface number: 81 but max is 0 [ 395.222320][ T377] usb 3-1: config 247 has an invalid interface descriptor of length 5, skipping [ 395.231470][ T377] usb 3-1: config 247 has no interface number 0 [ 395.237914][ T377] usb 3-1: config 247 interface 81 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.251342][ T377] usb 3-1: config 247 interface 81 has no altsetting 0 [ 395.274402][ T377] usb 3-1: string descriptor 0 read error: -22 [ 395.280637][ T377] usb 3-1: Dual-Role OTG device on HNP port [ 395.312877][ T377] usb 3-1: New USB device found, idVendor=054c, idProduct=0169, bcdDevice=ab.2a [ 395.343235][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.344844][T22801] usb 6-1: device descriptor read/8, error -71 [ 395.416806][T22871] overlay: filesystem on ./bus is read-only [ 395.570079][ T377] usb 3-1: USB disconnect, device number 30 [ 395.623446][T22801] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 395.653944][T22801] usb 6-1: device descriptor read/8, error -71 [ 395.791079][T22801] usb 6-1: device descriptor read/8, error -71 [ 395.903298][T22801] usb usb6-port1: unable to enumerate USB device [ 396.131467][T22889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.131628][T22889] rust_binder: Error in use_page_slow: ESRCH [ 396.138159][T22889] rust_binder: use_range failure ESRCH [ 396.144218][T22889] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 396.149810][T22889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 396.157747][T22889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:119 [ 396.401204][ T36] audit: type=1400 audit(2000000068.964:7335): avc: denied { watch watch_reads } for pid=22901 comm="syz.0.7769" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 396.433448][T22801] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 396.436734][ T36] audit: type=1326 audit(2000000069.004:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.5.7771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f332ef8f6c9 code=0x0 [ 396.593977][T22801] usb 3-1: Using ep0 maxpacket: 16 [ 396.605223][T22801] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.682569][T22801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.689682][T22801] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 396.699003][T22801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.708400][T22801] usb 3-1: config 0 descriptor?? [ 396.911060][T22934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 396.911094][T22934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 396.921533][T22801] usbhid 3-1:0.0: can't add hid device: -71 [ 396.945116][T22801] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 396.965256][T22801] usb 3-1: USB disconnect, device number 31 [ 396.995289][T22946] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 397.002367][T22946] rust_binder: 37: no such ref 3 [ 397.293179][T22801] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 397.369637][T22955] rust_binder: inc_ref_done called when no active inc_refs [ 397.369663][T22955] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 397.383996][T22955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 397.444308][T22801] usb 3-1: config 1 has an invalid interface number: 253 but max is 1 [ 397.461630][T22801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.471865][T22801] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 397.480916][T22801] usb 3-1: config 1 has no interface number 2 [ 397.487250][T22801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.498195][T22801] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.508052][T22801] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 397.517863][T22801] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.530699][T22801] usb 3-1: config 1 interface 1 has no altsetting 0 [ 397.538804][T22801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.547926][T22801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.556139][T22801] usb 3-1: Product: syz [ 397.560409][T22801] usb 3-1: Manufacturer: syz [ 397.565617][T22801] usb 3-1: SerialNumber: syz [ 397.573833][T22801] cdc_ncm 3-1:1.253: CDC Union missing and no IAD found [ 397.580859][T22801] cdc_ncm 3-1:1.253: bind() failure [ 397.590391][ T36] audit: type=1400 audit(2000000070.154:7337): avc: denied { map } for pid=22964 comm="syz.0.7791" path="socket:[75516]" dev="sockfs" ino=75516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 397.615300][ T36] audit: type=1400 audit(2000000070.154:7338): avc: denied { accept } for pid=22964 comm="syz.0.7791" path="socket:[75516]" dev="sockfs" ino=75516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 397.633463][T22968] overlayfs: failed to clone upperpath [ 397.645671][T22967] overlayfs: failed to clone upperpath [ 397.984093][T22801] usb 3-1: USB disconnect, device number 32 [ 398.469012][ T36] audit: type=1326 audit(2000000071.034:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 398.537476][ T36] audit: type=1326 audit(2000000071.034:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 398.603429][T22998] rust_binder: Write failure EFAULT in pid:130 [ 398.609580][ T36] audit: type=1326 audit(2000000071.064:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 398.690418][ T36] audit: type=1326 audit(2000000071.064:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 398.927135][ T36] audit: type=1326 audit(2000000071.064:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 398.951005][ T36] audit: type=1326 audit(2000000071.064:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5344f8f6c9 code=0x7ffc0000 [ 399.980134][T23048] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7821'. [ 400.313379][T23072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 400.673333][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 400.843309][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 400.854982][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 400.865053][ T10] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 400.874458][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.883012][ T10] usb 6-1: Product: syz [ 400.887954][ T10] usb 6-1: Manufacturer: syz [ 400.892575][ T10] usb 6-1: SerialNumber: syz [ 401.119947][T23078] rust_binder: Write failure EINVAL in pid:74 [ 401.123577][ T10] usb 6-1: USB disconnect, device number 35 [ 401.432467][T23126] fuse: Bad value for 'user_id' [ 401.437453][T23126] fuse: Bad value for 'user_id' [ 401.443197][T23126] cgroup: Unknown subsys name 'rdma' [ 401.637165][T23130] binder: Bad value for 'max' [ 401.637526][T23131] binder: Bad value for 'max' [ 401.863252][ T377] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 401.943230][ T418] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 401.984494][T23142] veth1: entered allmulticast mode [ 401.992177][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 401.992195][ T36] audit: type=1326 audit(2000000074.554:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz.0.7859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 402.034345][ T377] usb 3-1: config 0 has no interfaces? [ 402.039848][ T377] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 402.048989][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.058128][ T377] usb 3-1: config 0 descriptor?? [ 402.073222][ T418] usb 6-1: device descriptor read/64, error -71 [ 402.265062][ T377] usb 3-1: USB disconnect, device number 33 [ 402.323209][ T418] usb 6-1: device descriptor read/64, error -71 [ 402.573209][ T418] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 402.703190][ T418] usb 6-1: device descriptor read/64, error -71 [ 402.818275][T23141] veth1: left allmulticast mode [ 402.944600][ T418] usb 6-1: device descriptor read/64, error -71 [ 403.053271][ T418] usb usb6-port1: attempt power cycle [ 403.393229][ T418] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 403.414367][ T418] usb 6-1: device descriptor read/8, error -71 [ 403.544679][ T418] usb 6-1: device descriptor read/8, error -71 [ 403.783285][ T418] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 403.801971][T23222] FAT-fs (rnullb0): bogus number of reserved sectors [ 403.808768][T23222] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 403.818398][ T418] usb 6-1: device descriptor read/8, error -71 [ 403.953968][T23230] fuse: Bad value for 'fd' [ 403.959034][ T418] usb 6-1: device descriptor read/8, error -71 [ 404.083279][ T418] usb usb6-port1: unable to enumerate USB device [ 404.595643][T23266] overlayfs: failed to clone lowerpath [ 404.612995][T23268] overlayfs: failed to clone upperpath [ 405.053213][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 405.204212][ T10] usb 6-1: config 127 has an invalid interface number: 54 but max is 0 [ 405.212490][ T10] usb 6-1: config 127 has no interface number 0 [ 405.218836][ T10] usb 6-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 405.227910][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.439625][ T10] usb 6-1: string descriptor 0 read error: -71 [ 405.449385][ T10] usb 6-1: Found UVC 0.00 device (1b3f:2002) [ 405.453252][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.458273][ T10] usb 6-1: No valid video chain found. [ 405.469596][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.479734][ T10] usb 6-1: USB disconnect, device number 40 [ 405.487220][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.505489][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.518074][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.530635][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.543352][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.555886][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.568465][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.580993][T23319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23319 comm=syz.6.7914 [ 405.777803][T23345] No source specified [ 405.796139][T23348] netlink: 'syz.0.7923': attribute type 15 has an invalid length. [ 406.028587][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7925'. [ 406.039050][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7925'. [ 406.048030][T23353] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 406.064405][T23353] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 406.077200][T23355] rust_binder: Write failure EFAULT in pid:94 [ 406.159065][T23359] 9pnet_fd: Insufficient options for proto=fd [ 406.275453][T23375] netlink: 'syz.6.7931': attribute type 2 has an invalid length. [ 406.313060][T23382] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7933'. [ 406.340241][T23395] 9pnet_fd: Insufficient options for proto=fd [ 406.347050][T23396] overlay: Bad value for 'redirect_dir' [ 406.967004][T23413] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 406.987149][T23415] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 406.996554][T23415] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 407.005221][T23415] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 407.013272][T23415] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 407.028634][T23420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.029293][T23420] rust_binder: Error in use_page_slow: ESRCH [ 407.035867][T23420] rust_binder: use_range failure ESRCH [ 407.041947][T23420] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 407.047729][T23420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 407.056607][T23420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:172 [ 407.134690][T23429] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 407.162814][T23431] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 407.242817][T23438] overlayfs: failed to clone upperpath [ 407.313357][T23453] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7957'. [ 407.471947][T23473] batadv_slave_0: entered promiscuous mode [ 407.483644][T23472] batadv_slave_0: left promiscuous mode [ 407.928264][T23487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.928360][T23487] rust_binder: Error in use_page_slow: ESRCH [ 407.934992][T23487] rust_binder: use_range failure ESRCH [ 407.941069][T23487] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 407.946735][T23487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 407.954805][T23487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:177 [ 407.973319][T23487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.023200][T23499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.030335][T23499] rust_binder: Error in use_page_slow: ESRCH [ 408.036924][T23499] rust_binder: use_range failure ESRCH [ 408.042959][T23499] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 408.048565][T23499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 408.056650][T23499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:189 [ 408.671232][T23534] overlayfs: unescaped trailing colons in lowerdir mount option. [ 408.699428][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.707851][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.716229][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.724620][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.732908][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.741625][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.750083][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.758440][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.766757][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 408.777072][T23536] futex_wake_op: syz.0.7986 tries to shift op by 144; fix this program [ 409.116206][T23558] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 409.116234][T23558] rust_binder: Read failure Err(EFAULT) in pid:120 [ 409.128553][T23560] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7995'. [ 409.169621][T23566] syzkaller0: entered promiscuous mode [ 409.175245][T23566] syzkaller0: entered allmulticast mode [ 409.508623][T23593] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8007'. [ 409.783260][T22801] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 409.923559][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8010'. [ 409.943272][T22801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.954305][T22801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.964229][T22801] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 409.973395][T22801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.982268][T22801] usb 6-1: config 0 descriptor?? [ 410.216134][T22801] usbhid 6-1:0.0: can't add hid device: -71 [ 410.222194][T22801] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 410.230971][T22801] usb 6-1: USB disconnect, device number 41 [ 410.502480][T23641] selinux_netlink_send: 23 callbacks suppressed [ 410.502504][T23641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23641 comm=syz.0.8022 [ 410.603213][T22801] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 410.754254][T22801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 410.765501][T22801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24867, setting to 1024 [ 410.776716][T22801] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.789663][T22801] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.798727][T22801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.807573][T22801] usb 6-1: config 0 descriptor?? [ 410.903843][ T36] audit: type=1400 audit(2000000083.474:7380): avc: denied { accept } for pid=23647 comm="syz.6.8025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 411.131361][T23667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.216809][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.230720][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.238167][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.245623][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.253079][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.260536][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.268260][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.275689][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.283090][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.290525][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.297953][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.305522][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.312915][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.323189][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.330627][T22801] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 411.338252][T22801] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 411.347248][T22801] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 411.463449][ T418] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 411.473995][T22801] usb 6-1: USB disconnect, device number 42 [ 411.624422][ T418] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.634652][ T418] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.645587][ T418] usb 3-1: config 1 interface 1 has no altsetting 0 [ 411.653603][ T418] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.662944][ T418] usb 3-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 411.671202][ T418] usb 3-1: Product: syz [ 411.675423][ T418] usb 3-1: Manufacturer: syz [ 411.680058][ T418] usb 3-1: SerialNumber: syz [ 411.687299][ T418] cdc_ncm 3-1:1.0: skipping garbage [ 411.697444][ T418] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 411.705082][ T418] cdc_ncm 3-1:1.0: bind() failure [ 411.721323][ T36] audit: type=1400 audit(2000000084.284:7381): avc: denied { name_bind } for pid=23700 comm="syz.0.8043" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 411.801862][T23709] overlayfs: failed to clone lowerpath [ 411.892876][ T418] usb 3-1: USB disconnect, device number 34 [ 411.979265][T23716] 9pnet_fd: Insufficient options for proto=fd [ 412.032063][T23727] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 412.151575][T23743] veth0_to_team: mtu greater than device maximum [ 412.162179][T23743] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 412.169751][T23743] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 412.207211][T23747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 412.207237][T23747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:184 [ 412.228722][T23749] usb usb8: usbfs: process 23749 (syz.5.8060) did not claim interface 0 before use [ 412.267618][T23752] overlayfs: failed to resolve './file0': -2 [ 412.412828][ T36] audit: type=1400 audit(2000000084.974:7382): avc: denied { write } for pid=23754 comm="syz.2.8062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.414951][T23756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 412.432735][T23757] rust_binder: 210: no such ref 4096 [ 412.578489][ T36] audit: type=1326 audit(2000000085.144:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.2.8064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x0 [ 413.115681][T23829] rust_binder: Error in use_page_slow: ESRCH [ 413.115701][T23829] rust_binder: use_range failure ESRCH [ 413.127310][T23829] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 413.127333][T23829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 413.135406][T23829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192 [ 413.173397][ T36] audit: type=1400 audit(2000000085.744:7384): avc: denied { lock } for pid=23830 comm="syz.5.8086" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.214137][T23835] rust_binder: Error while translating object. [ 413.214185][T23835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 413.220454][T23835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 413.260557][ T330] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 413.408528][T23845] overlayfs: failed to clone upperpath [ 413.471461][T23858] netlink: 'syz.0.8095': attribute type 1 has an invalid length. [ 413.479416][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8095'. [ 413.488433][T23858] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.634055][T23878] overlayfs: missing 'lowerdir' [ 413.717048][ T330] bridge_slave_1: left allmulticast mode [ 413.722959][ T330] bridge_slave_1: left promiscuous mode [ 413.728765][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.736449][ T330] bridge_slave_0: left allmulticast mode [ 413.742112][ T330] bridge_slave_0: left promiscuous mode [ 413.751788][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.303218][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 415.303218][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 415.333028][T23927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8116'. [ 415.447799][T23940] binder: Unknown parameter '0x0000000000000000' [ 415.478161][ T36] audit: type=1326 audit(2000000001.700:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23763 comm="syz.2.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7fc00000 [ 415.478629][T23942] rust_binder: Write failure EINVAL in pid:223 [ 415.595164][T23948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.619118][T23946] input: syz0 as /devices/virtual/input/input16 [ 415.645558][T22802] udevd[22802]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 415.744069][T23960] rust_binder: Error while translating object. [ 415.744114][T23960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 415.747457][T23961] rust_binder: Error in use_page_slow: ESRCH [ 415.759811][T23960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 415.770326][T23961] rust_binder: use_range failure ESRCH [ 415.812039][T23961] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 415.823225][T23961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 415.852960][T23961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:223 [ 415.906784][T23979] overlayfs: failed to resolve './file1': -2 [ 416.124443][T23979] fuse: Unknown parameter 'group_iD' [ 416.348639][T23981] rust_binder: Write failure EFAULT in pid:234 [ 416.386998][T23985] netlink: 328 bytes leftover after parsing attributes in process `syz.6.8136'. [ 416.443353][T23996] binder: Bad value for 'max' [ 416.508969][T24011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.516029][T24013] rust_binder: Error in use_page_slow: ESRCH [ 416.522565][T24013] rust_binder: use_range failure ESRCH [ 416.528814][T24013] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 416.534881][T24013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 416.543036][T24013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:231 [ 416.560992][T24016] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 416.570218][T24016] rust_binder: Error while translating object. [ 416.582401][T24016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 416.588680][T24016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 416.641078][T24025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.749138][T24055] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8155'. [ 416.766170][T24055] gretap0: entered promiscuous mode [ 416.772711][T24055] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8155'. [ 416.781734][T24055] 0ªî{X¹¦: renamed from gretap0 [ 416.786169][T24064] incfs: Options parsing error. -22 [ 416.792637][T24055] 0ªî{X¹¦: left promiscuous mode [ 416.793681][T24064] incfs: mount failed -22 [ 416.797791][T24055] 0ªî{X¹¦: entered allmulticast mode [ 416.808567][T24055] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 416.827598][ T36] audit: type=1326 audit(2000000003.050:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24065 comm="syz.0.8160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d698f6c9 code=0x0 [ 416.879321][T24055] input: syz0 as /devices/virtual/input/input17 [ 416.911366][T24070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.911776][T24070] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 416.918355][T24070] rust_binder: Error while translating object. [ 416.927678][T24070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 416.933982][T24070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 416.956669][T24072] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.973840][T24072] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 416.982279][T24072] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.990274][T24072] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 416.999560][T24073] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.007510][T24073] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 417.015980][T24073] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.023917][T24073] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 417.179916][ T7056] Bluetooth: hci0: Frame reassembly failed (-84) [ 417.331867][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8171'. [ 417.341838][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8171'. [ 417.350785][T24101] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 418.841573][T24155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.842671][T24155] rust_binder: Error in use_page_slow: ESRCH [ 418.849188][T24155] rust_binder: use_range failure ESRCH [ 418.855591][T24155] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 418.861101][T24155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 418.869275][T24155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:256 [ 418.895914][T24159] rust_binder: Write failure EFAULT in pid:259 [ 418.919699][T24165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.108367][T24173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.115038][T24173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.200783][T24178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.224268][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 419.236880][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 419.297001][T24186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.297176][T24186] rust_binder: Error while translating object. [ 419.312900][T24186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 419.323190][T24186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:283 [ 419.476431][T24202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.488175][T24203] rust_binder: Error in use_page_slow: ESRCH [ 419.503647][T24203] rust_binder: use_range failure ESRCH [ 419.515380][T24203] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 419.526332][T24203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 419.543195][T24203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:283 [ 419.587617][T24206] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 419.587620][ T36] audit: type=1400 audit(2000000005.810:7387): avc: denied { remount } for pid=24205 comm="syz.2.8208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 419.693192][ T10] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 419.823215][ T10] usb 6-1: device descriptor read/64, error -71 [ 429.066652][ T330] bridge_slave_1: left allmulticast mode [ 429.072317][ T330] bridge_slave_1: left promiscuous mode [ 429.078027][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.085574][ T330] bridge_slave_0: left allmulticast mode [ 429.091222][ T330] bridge_slave_0: left promiscuous mode [ 429.097170][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.105043][ T330] tipc: Resetting bearer [ 429.120593][ T330] tipc: Disabling bearer [ 429.194789][ T330] tipc: Left network mode [ 429.200148][ T330] veth1_macvtap: left promiscuous mode [ 429.205713][ T330] veth0_vlan: left promiscuous mode [ 434.185097][ T7056] bridge_slave_1: left allmulticast mode [ 434.190770][ T7056] bridge_slave_1: left promiscuous mode [ 434.196694][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.204688][ T7056] bridge_slave_0: left allmulticast mode [ 434.210362][ T7056] bridge_slave_0: left promiscuous mode [ 434.216241][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.058400][T24234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.071113][T24234] rust_binder: Write failure EFAULT in pid:288 [ 437.135325][T24248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.226567][T24266] binder: Unknown parameter '0x0000000000000000' [ 437.403266][T22801] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 437.473215][ T331] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 437.554340][T22801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.565343][T22801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.575298][T22801] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 437.584436][T22801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.592449][T24268] 9pnet_fd: Insufficient options for proto=fd [ 437.593535][T22801] usb 3-1: config 0 descriptor?? [ 437.618186][T24270] overlayfs: failed to clone lowerpath [ 437.624346][T24270] overlayfs: failed to clone lowerpath [ 437.633315][ T331] usb 6-1: Using ep0 maxpacket: 8 [ 437.644301][ T331] usb 6-1: config 6 has an invalid interface number: 218 but max is 1 [ 437.652627][ T331] usb 6-1: config 6 has an invalid descriptor of length 78, skipping remainder of the config [ 437.663018][ T331] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 437.671945][ T331] usb 6-1: config 6 has no interface number 0 [ 437.678249][ T331] usb 6-1: config 6 interface 218 altsetting 88 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.688405][ T331] usb 6-1: config 6 interface 218 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 437.701777][ T331] usb 6-1: config 6 interface 218 has no altsetting 0 [ 437.710064][ T331] usb 6-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 437.719376][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.727418][ T331] usb 6-1: Product: syz [ 437.731713][ T331] usb 6-1: Manufacturer: syz [ 437.736379][ T331] usb 6-1: SerialNumber: syz [ 437.945630][T24266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.946257][T24266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.961676][T24266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.970634][T24266] rust_binder: Error while translating object. [ 437.970668][T24266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 437.976912][T24266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 437.989289][ T331] ftdi_sio 6-1:6.218: FTDI USB Serial Device converter detected [ 438.006718][ T331] usb 6-1: Detected SIO [ 438.009434][T24256] futex_atomic_op_inuser: 23 callbacks suppressed [ 438.009458][T24256] futex_wake_op: syz.2.8226 tries to shift op by 144; fix this program [ 438.010925][ T331] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 438.024435][ T331] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 438.041427][T24256] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.046301][ T331] usb 6-1: USB disconnect, device number 44 [ 438.048729][T24256] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.073700][ T331] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 438.082149][T22801] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 438.093025][T22801] lenovo 0003:17EF:6047.0015: item fetching failed at offset 3/5 [ 438.096565][ T331] ftdi_sio 6-1:6.218: device disconnected [ 438.101478][T22801] lenovo 0003:17EF:6047.0015: hid_parse failed [ 438.119939][T22801] lenovo 0003:17EF:6047.0015: probe with driver lenovo failed with error -22 [ 438.283238][T24256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.291810][T24256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.300202][T24256] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.300907][ T331] usb 3-1: USB disconnect, device number 35 [ 438.818319][T24321] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 439.133187][T22801] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 439.284371][T22801] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 439.292546][T22801] usb 3-1: config 0 has no interface number 0 [ 439.298682][T22801] usb 3-1: config 0 interface 41 has no altsetting 0 [ 439.308218][T22801] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 439.317304][T22801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.325354][T22801] usb 3-1: Product: syz [ 439.329538][T22801] usb 3-1: Manufacturer: syz [ 439.334171][T22801] usb 3-1: SerialNumber: syz [ 439.339455][T22801] usb 3-1: config 0 descriptor?? [ 439.343183][ T377] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 439.454664][T24352] netlink: 'syz.0.8258': attribute type 1 has an invalid length. [ 439.504493][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.515591][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.525383][ T377] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 439.534498][ T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.543241][ T377] usb 6-1: config 0 descriptor?? [ 439.750434][T24333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.759012][T24333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.767761][T24354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8252'. [ 439.769145][T24333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.785380][T24333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.794636][ T377] usbhid 6-1:0.0: can't add hid device: -71 [ 439.800924][ T377] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 439.820164][ T377] usb 6-1: USB disconnect, device number 45 [ 439.829913][T24358] input: syz0 as /devices/virtual/input/input18 [ 439.932524][T24363] tmpfs: Unknown parameter 'quota' [ 440.076174][ T36] audit: type=1326 audit(2000000026.300:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24365 comm="syz.0.8262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe9d6986567 code=0x0 [ 440.147810][T24367] overlayfs: failed to clone upperpath [ 440.153338][T22801] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 440.587201][T24328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.587386][T24328] rust_binder: Error in use_page_slow: ESRCH [ 440.615738][T24328] rust_binder: use_range failure ESRCH [ 440.621849][T24328] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 440.634677][T24328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 440.642809][T24328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:308 [ 440.654019][T22801] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 440.692389][T22801] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 440.702302][T22801] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 440.716659][T22801] usb 3-1: USB disconnect, device number 36 [ 440.750329][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8269'. [ 441.003216][ T63] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 441.153179][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 441.159472][ T63] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.170622][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.177290][ T63] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 441.186374][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.198788][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.206378][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.209400][ T63] usb 6-1: config 0 descriptor?? [ 441.214160][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.227650][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.235341][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.242945][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.250413][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.258214][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.266082][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.273539][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.280955][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.288423][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.295856][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.303722][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.311136][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.318571][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.325998][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.333431][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.340838][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.348274][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.355715][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.363118][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.370578][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.378020][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.385465][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.392866][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.400310][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.407737][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.415171][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.422576][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.429352][ T63] usbhid 6-1:0.0: can't add hid device: -71 [ 441.429992][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.439763][ T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 441.443313][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.455087][ T63] usb 6-1: USB disconnect, device number 46 [ 441.458441][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.471730][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.479165][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.486586][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.494100][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.501486][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.508924][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.516349][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.523851][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.531269][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.538708][ T377] hid-generic 0003:0008:000F.0016: unknown main item tag 0x0 [ 441.546636][ T377] hid-generic 0003:0008:000F.0016: hidraw0: USB HID v0.04 Device [syz1] on syz1 [ 441.571541][T24411] fido_id[24411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 441.817761][T24419] __vm_enough_memory: pid: 24419, comm: syz.2.8277, bytes: 18014402804453376 not enough memory for the allocation [ 441.872192][ T36] audit: type=1326 audit(2000000028.090:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24426 comm="syz.2.8279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7abad8f6c9 code=0x0 [ 442.273221][T22801] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 442.403227][T22801] usb 6-1: device descriptor read/64, error -71 [ 442.643196][T22801] usb 6-1: device descriptor read/64, error -71 [ 442.883194][T22801] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 443.013192][T22801] usb 6-1: device descriptor read/64, error -71 [ 443.237525][T24465] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8290'. [ 443.246728][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8290'. [ 443.263980][T22801] usb 6-1: device descriptor read/64, error -71 [ 443.373268][T22801] usb usb6-port1: attempt power cycle [ 443.713184][T22801] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 443.734252][T22801] usb 6-1: device descriptor read/8, error -71 [ 443.800373][T24474] overlayfs: missing 'lowerdir' [ 443.864480][T22801] usb 6-1: device descriptor read/8, error -71 [ 443.870456][T24478] futex_wake_op: syz.0.8295 tries to shift op by 144; fix this program [ 443.923004][T24474] overlayfs: failed to clone lowerpath [ 444.103246][T22801] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 444.115287][T24491] syzkaller0: entered promiscuous mode [ 444.120790][T24491] syzkaller0: entered allmulticast mode [ 444.127039][T24491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8299'. [ 444.134342][T22801] usb 6-1: device descriptor read/8, error -71 [ 444.247363][T24500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 444.247458][T24500] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 444.267862][T22801] usb 6-1: device descriptor read/8, error -71 [ 444.304070][T24506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=24506 comm=syz.2.8305 [ 444.316824][T24506] binder: Unknown parameter 'fscontext?}' [ 444.323036][T24507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=24507 comm=syz.2.8305 [ 444.323058][T24506] binder: Unknown parameter 'fscontext?}' [ 444.356125][T24509] fuseblk: Unknown parameter '–Tþ|ø¦˜š+Îô FL©‰‹er—\·ÐP§K¥²Jè^zT›\[!}Ÿ!¢Ö' [ 444.383320][T22801] usb usb6-port1: unable to enumerate USB device [ 444.418631][T24513] 9pnet_fd: Insufficient options for proto=fd [ 444.464361][T24511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 444.464400][T24511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 444.475356][ T7054] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.505407][T24526] netlink: 'syz.0.8313': attribute type 4 has an invalid length. [ 444.652174][T24531] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.659433][T24531] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.666593][T24531] bridge_slave_0: entered allmulticast mode [ 444.672963][T24531] bridge_slave_0: entered promiscuous mode [ 444.680376][T24531] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.688035][T24531] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.695317][T24531] bridge_slave_1: entered allmulticast mode [ 444.701620][T24531] bridge_slave_1: entered promiscuous mode [ 444.711300][ T7054] bridge_slave_0: left allmulticast mode [ 444.717376][ T7054] bridge_slave_0: left promiscuous mode [ 444.722989][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.816055][ T7054] tipc: Disabling bearer [ 444.821441][ T7054] tipc: Left network mode [ 444.824381][T24531] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.832840][T24531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.840168][T24531] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.847223][T24531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.856620][ T7054] veth1_macvtap: left promiscuous mode [ 444.862126][ T7054] veth0_vlan: left promiscuous mode [ 444.919140][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.926531][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.936555][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.943741][ T7056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.953445][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.960507][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.992593][T24531] veth0_vlan: entered promiscuous mode [ 445.004426][T24531] veth1_macvtap: entered promiscuous mode [ 445.062177][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.070779][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.453269][T22801] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 445.603210][T22801] usb 6-1: Using ep0 maxpacket: 32 [ 445.609598][T22801] usb 6-1: config 4 has an invalid descriptor of length 142, skipping remainder of the config [ 445.621931][T22801] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 445.630957][T22801] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 445.640043][T22801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.850371][T22801] usb 6-1: USB disconnect, device number 51 [ 446.245270][ T36] audit: type=1401 audit(2000000032.470:7390): op=fscreate invalid_context=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A117500000000C6DEA27B07E040986DFD5B [ 446.503273][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 446.504325][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 446.558297][T24585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 446.558323][T24585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:361 [ 446.632026][T24589] rust_binder: Got transaction with invalid offset. [ 446.641326][T24589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 446.647994][T24589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 446.671354][T24593] rust_binder: Error while translating object. [ 446.680751][T24593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 446.687064][T22801] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 446.687321][T24593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:369 [ 446.873552][T22801] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 446.931033][T22801] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 446.951190][T22801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 446.963158][T22801] usb 6-1: Product: syz [ 446.967371][T22801] usb 6-1: Manufacturer: syz [ 446.982282][T22801] usb 6-1: SerialNumber: syz [ 446.993434][T22801] usb 6-1: config 0 descriptor?? [ 447.027967][T24603] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.035160][T24603] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.042458][T24603] bridge_slave_0: entered allmulticast mode [ 447.050104][T24603] bridge_slave_0: entered promiscuous mode [ 447.056674][T24603] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.064093][T24603] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.071457][T24603] bridge_slave_1: entered allmulticast mode [ 447.077826][T24603] bridge_slave_1: entered promiscuous mode [ 447.092551][ T330] bridge_slave_1: left allmulticast mode [ 447.098329][ T330] bridge_slave_1: left promiscuous mode [ 447.104019][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.111667][ T330] bridge_slave_0: left allmulticast mode [ 447.117439][ T330] bridge_slave_0: left promiscuous mode [ 447.123288][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.230974][T24603] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.238069][T24603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.245387][T24603] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.252602][T24603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.277157][ T330] tipc: Left network mode [ 447.282697][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.291682][ T330] veth1_macvtap: left promiscuous mode [ 447.297504][ T330] veth0_vlan: left promiscuous mode [ 447.305688][T24613] loop2: detected capacity change from 0 to 8388607 [ 447.318558][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 447.364097][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.371228][ T7056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.400959][T24603] veth0_vlan: entered promiscuous mode [ 447.415441][T24603] veth1_macvtap: entered promiscuous mode [ 447.567201][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 447.778169][T24620] rust_binder: Error while translating object. [ 447.778211][T24620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 447.784491][T24620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 447.820129][T24624] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 448.096874][ T36] audit: type=1400 audit(2000000034.320:7391): avc: denied { create } for pid=24637 comm="syz.2.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 448.099139][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.106474][T24638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 448.134683][T24638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:379 [ 448.154979][T24643] rust_binder: Write failure EFAULT in pid:26 [ 448.176330][T24259] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.196893][T24649] rust_binder: Write failure EINVAL in pid:28 [ 448.215954][T24651] netlink: 'syz.0.8344': attribute type 12 has an invalid length. [ 448.230965][T24651] fuse: Bad value for 'fd' [ 448.251558][T24655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 448.338226][ T36] audit: type=1400 audit(2000000034.560:7392): avc: denied { read } for pid=24667 comm="syz.6.8356" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.344053][T24668] rust_binder: 46: no such ref 0 [ 448.345145][ T36] audit: type=1400 audit(2000000034.560:7393): avc: denied { open } for pid=24667 comm="syz.6.8356" path="/17/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.368745][T24668] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 448.373931][ T36] audit: type=1400 audit(2000000034.560:7394): avc: denied { ioctl } for pid=24667 comm="syz.6.8356" path="/17/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.399074][T24668] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 448.405671][ T36] audit: type=1400 audit(2000000034.560:7395): avc: denied { write } for pid=24667 comm="syz.6.8356" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.431357][T24668] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 448.469050][T24668] rust_binder: 46: no such ref 0 [ 448.474214][T24668] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 448.474237][T24668] rust_binder: Read failure Err(EFAULT) in pid:46 [ 448.522592][T24674] loop5: detected capacity change from 0 to 7 [ 448.615024][T24259] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.651808][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.749389][T24691] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8363'. [ 448.758809][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.871175][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.884347][T24699] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 448.884480][T24700] rust_binder: Error while translating object. [ 448.891513][T24700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 448.898014][T24700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 448.912444][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.958242][T24356] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 448.971618][T24709] rust_binder: Write failure EINVAL in pid:402 [ 449.016968][T24713] rust_binder: Error while translating object. [ 449.023486][T24713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 449.029702][T24713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 449.096939][T24719] rust_binder: 9: no such ref 0 [ 449.101862][T24719] rust_binder: 9: no such ref 2 [ 449.106825][T24719] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 449.321830][ T36] audit: type=1400 audit(2000000035.540:7396): avc: denied { connect } for pid=24734 comm="syz.2.8379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 449.453504][T24745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.500649][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.507274][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.513840][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.520376][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.526880][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.534919][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.541815][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.549002][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.555933][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.562396][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.569175][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.575727][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.582252][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.588809][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.595291][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.601930][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.611175][T22801] usb 6-1: bad CDC descriptors [ 449.617341][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.619935][T22801] usb 6-1: USB disconnect, device number 52 [ 449.628163][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.637156][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.646655][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.655977][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.662541][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.672326][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.683906][T24763] netlink: 'syz.0.8389': attribute type 3 has an invalid length. [ 449.689795][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.693719][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8389'. [ 449.698788][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.713528][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.720171][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.726804][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.741206][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.748494][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.755161][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.761726][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.768260][T24755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.828063][T24778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.848568][T24778] rust_binder: Failed copying remainder into alloc: EFAULT [ 449.862893][T24778] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 449.889501][T24778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 449.889545][T24778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:353 [ 449.915073][T24782] binder: Bad value for 'max' [ 449.953177][ T36] audit: type=1400 audit(2000000036.170:7397): avc: denied { watch watch_reads } for pid=24785 comm="syz.5.8396" path="/117/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 450.021111][T24791] rust_binder: 444: no such ref 3 [ 450.033190][T24791] rust_binder: 444: no such ref 1 [ 450.038287][T24791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444 [ 450.079265][ T36] audit: type=1400 audit(2000000036.300:7398): avc: denied { append } for pid=24793 comm="syz.5.8399" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 450.180751][T24803] rust_binder: Write failure EFAULT in pid:31 [ 450.266818][T24810] rust_binder: Error while translating object. [ 450.273235][T24810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 450.279602][T24810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:38 [ 450.334278][T24818] rust_binder: Write failure EINVAL in pid:44 [ 450.353168][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 450.514220][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.527394][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.537207][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 450.546447][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.559604][ T10] usb 3-1: config 0 descriptor?? [ 450.966760][ T10] lenovo 0003:17EF:6047.0017: unknown main item tag 0x0 [ 450.973833][ T10] lenovo 0003:17EF:6047.0017: item fetching failed at offset 3/5 [ 450.981695][ T10] lenovo 0003:17EF:6047.0017: hid_parse failed [ 450.987932][ T10] lenovo 0003:17EF:6047.0017: probe with driver lenovo failed with error -22 [ 451.160005][T24825] tipc: Started in network mode [ 451.164937][T24825] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 451.174088][T24825] tipc: Enabling of bearer rejected, failed to enable media [ 451.196287][T24825] kvm: kvm [24824]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 451.204890][T24825] kvm: kvm [24824]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 451.226173][T24825] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 451.233531][T24825] rust_binder: Write failure EINVAL in pid:367 [ 451.317902][T24828] overlayfs: lower data-only dirs require metacopy support. [ 451.359305][T24839] rust_binder: Write failure EFAULT in pid:381 [ 451.395641][T24843] 9pnet: Unknown protocol version 9p2006 [ 451.513933][T24845] cgroup2: Unknown parameter 'freezer' [ 451.520325][T24845] rust_binder: Write failure EFAULT in pid:387 [ 451.526668][T24849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.601112][T24851] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 451.614847][T24851] rust_binder: Write failure EINVAL in pid:392 [ 451.777587][T24864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.844719][T24868] rust_binder: Write failure EFAULT in pid:409 [ 451.908756][T24874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.973176][T24874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415 [ 452.686881][T24885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.752855][T24881] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 452.766419][T24881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 452.774419][T24881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:74 [ 452.980803][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8426'. [ 453.079854][ T331] usb 3-1: USB disconnect, device number 37 [ 453.180761][T24898] binder: Unknown parameter 'dosh' [ 453.497008][T24916] tmpfs: Unknown parameter 'permit_directio' [ 453.600423][T24930] input: syz0 as /devices/virtual/input/input19 [ 453.684899][T24937] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 453.684930][T24937] rust_binder: Error while translating object. [ 453.700945][T24939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 453.713199][T24937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.722992][T24937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 453.727876][T24939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.762714][T24939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 453.824921][T24947] /dev/rnullb0: Can't open blockdev [ 453.979264][T24970] overlayfs: missing 'lowerdir' [ 453.989629][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8451'. [ 454.015444][T24976] incfs: Error accessing: ./file0. [ 454.018198][ T36] audit: type=1400 audit(2000000040.240:7399): avc: denied { mounton } for pid=24965 comm="syz.2.8450" path="/148/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 454.020636][T24976] incfs: mount failed -20 [ 454.756011][T25037] rust_binder: 131: no such ref 0 [ 454.761159][T25037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 454.768290][T25037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 454.775483][T25037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 454.782612][T25037] rust_binder: 131: no such ref 0 [ 454.847323][T25039] rust_binder: Write failure EINVAL in pid:133 [ 454.934774][T25052] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 454.975720][T25058] overlayfs: disabling nfs_export due to verity=on [ 454.982321][T25058] overlayfs: missing 'lowerdir' [ 454.987646][T25058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.988298][T25058] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 454.994965][T25058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 455.003095][T25058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:487 [ 455.012895][T25058] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 455.029295][T25058] rust_binder: Read failure Err(EAGAIN) in pid:487 [ 455.029842][T25058] overlay: Unknown parameter './binderfs/binder1' [ 455.057054][T25064] fuse: Unknown parameter 'user' [ 455.877305][T25113] incfs: mount failed -22 [ 455.897242][T25115] overlayfs: workdir and upperdir must reside under the same mount [ 455.912008][ T36] audit: type=1400 audit(2000000042.140:7400): avc: denied { unmount } for pid=22594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 456.183357][ T493] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 456.334389][ T493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.345423][ T493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.355235][ T493] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 456.364312][ T493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.377543][ T493] usb 6-1: config 0 descriptor?? [ 456.400678][T25124] incfs: Options parsing error. -22 [ 456.405993][T25124] incfs: mount failed -22 [ 456.427600][T25127] overlayfs: failed to clone lowerpath [ 456.591561][T25137] fuse: Unknown parameter 'ÿ' [ 456.788651][ T493] lenovo 0003:17EF:6047.0018: unknown main item tag 0x0 [ 456.795712][ T493] lenovo 0003:17EF:6047.0018: item fetching failed at offset 3/5 [ 456.803667][ T493] lenovo 0003:17EF:6047.0018: hid_parse failed [ 456.809881][ T493] lenovo 0003:17EF:6047.0018: probe with driver lenovo failed with error -22 [ 456.989748][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.998322][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.006891][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.015460][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.023954][T25119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 457.024601][ T493] usb 6-1: USB disconnect, device number 53 [ 457.036453][T25150] rust_binder: 111: no such ref 1 [ 457.042053][T25150] rust_binder: Read failure Err(EAGAIN) in pid:111 [ 457.210797][T25156] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 457.210837][T25156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 457.218790][T25156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:117 [ 457.250809][T25162] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8503'. [ 457.269534][T25162] rust_binder: Write failure EFAULT in pid:123 [ 457.283194][T25164] netlink: 'syz.6.8504': attribute type 13 has an invalid length. [ 457.365459][T25178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 457.365592][T25178] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 457.372072][T25178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 457.380287][T25178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:129 [ 457.569280][T25209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25209 comm=syz.6.8519 [ 457.614714][T25211] binder: Unknown parameter 'fscontext?}' [ 457.640867][T25213] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 4240, size: 18446744073709551008) [ 457.640898][T25213] rust_binder: Error while translating object. [ 457.642341][T25214] 9pnet_fd: Insufficient options for proto=fd [ 457.653569][T25213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 457.665623][T25213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 457.768197][T25218] netlink: 'syz.5.8523': attribute type 4 has an invalid length. [ 457.785324][T25218] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8523'. [ 457.867526][T25220] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8524'. [ 457.876912][T25220] rust_binder: Write failure EFAULT in pid:465 [ 457.892454][T25225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 458.331505][T25279] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 458.345229][T25279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 458.703167][ T418] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 458.863203][ T418] usb 6-1: Using ep0 maxpacket: 32 [ 458.869627][ T418] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 458.877882][ T418] usb 6-1: config 0 has no interface number 0 [ 458.884064][ T418] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 458.894135][ T418] usb 6-1: config 0 interface 196 has no altsetting 0 [ 458.902306][ T418] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 458.911550][ T418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.919702][ T418] usb 6-1: Product: syz [ 458.923946][ T418] usb 6-1: Manufacturer: syz [ 458.928565][ T418] usb 6-1: SerialNumber: syz [ 458.933834][ T418] usb 6-1: config 0 descriptor?? [ 458.939095][T25311] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 459.550288][ T418] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 459.560548][ T418] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 459.575033][T25351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8567'. [ 459.626014][ T36] audit: type=1400 audit(2000000045.840:7401): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.647540][ T36] audit: type=1400 audit(2000000045.840:7402): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=6652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.670266][ T36] audit: type=1400 audit(2000000045.840:7403): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.693597][ T36] audit: type=1400 audit(2000000045.840:7404): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.733200][ T36] audit: type=1400 audit(2000000045.910:7405): avc: denied { read } for pid=25355 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.784263][ T36] audit: type=1400 audit(2000000045.910:7406): avc: denied { open } for pid=25355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.812463][ T36] audit: type=1400 audit(2000000045.910:7407): avc: denied { getattr } for pid=25355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.823963][ C1] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 459.838283][ T36] audit: type=1400 audit(2000000045.990:7408): avc: denied { write } for pid=25354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.873650][ T36] audit: type=1400 audit(2000000045.990:7409): avc: denied { add_name } for pid=25354 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.896507][ T36] audit: type=1400 audit(2000000045.990:7410): avc: denied { create } for pid=25354 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.040269][T25311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 460.042285][ T418] usb 6-1: USB disconnect, device number 54 [ 460.094648][ T418] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 460.196863][T25413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27997 sclass=netlink_route_socket pid=25413 comm=syz.2.8576 [ 460.542694][T25429] @: renamed from vlan0 [ 460.933178][ T418] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 461.089446][ T418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.102514][ T418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.116993][ T418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.137527][ T418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.154808][ T418] usb 6-1: Product: syz [ 461.160631][ T418] usb 6-1: Manufacturer: syz [ 461.173212][ T418] usb 6-1: SerialNumber: syz [ 461.179982][T25469] fuseblk: Bad value for 'fd' [ 461.192534][ T418] cdc_mbim 6-1:1.0: skipping garbage [ 461.199053][ T418] usb 6-1: selecting invalid altsetting 1 [ 461.285960][T25485] bridge0: port 3(veth0_to_team) entered blocking state [ 461.293308][T25485] bridge0: port 3(veth0_to_team) entered disabled state [ 461.297813][T25490] overlayfs: unescaped trailing colons in lowerdir mount option. [ 461.300836][T25485] veth0_to_team: entered allmulticast mode [ 461.314475][T25485] veth0_to_team: entered promiscuous mode [ 461.589256][T25441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.597891][T25441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.606340][T25441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.614965][T25441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.271894][T25503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=153 sclass=netlink_route_socket pid=25503 comm=syz.2.8611 [ 462.877973][T25531] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8621'. [ 462.904607][T25533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25533 comm=syz.6.8622 [ 463.076061][T25552] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000005' [ 463.150801][T25566] netlink: 'syz.6.8633': attribute type 1 has an invalid length. [ 463.159564][T25566] overlay: filesystem on ./bus is read-only [ 463.219816][T25576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8638'. [ 463.243066][T25578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8639'. [ 463.252587][T25578] netlink: 'syz.2.8639': attribute type 16 has an invalid length. [ 463.260660][T25578] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.8639'. [ 463.590746][ T418] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 463.602286][ T418] cdc_mbim 6-1:1.0: bind() failure [ 463.610045][ T418] usb 6-1: USB disconnect, device number 55 [ 463.927581][ T418] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 464.098753][ T418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.110005][ T418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.126543][ T418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.140316][ T418] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.150016][ T418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.159474][ T418] usb 6-1: config 0 descriptor?? [ 464.372759][T25622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25622 comm=syz.0.8654 [ 464.385766][T25622] overlayfs: regular lower layers cannot follow data lower layers [ 464.394023][T25622] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 464.401308][T25622] rust_binder: 180: no such ref 1 [ 464.564204][T25631] x_tables: unsorted underflow at hook 3 [ 464.571068][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.584132][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.591616][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.599053][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.606589][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.614007][ T418] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 464.621646][ T418] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 464.630787][ T418] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 464.678048][T25634] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 464.678072][T25634] rust_binder: Error while translating object. [ 464.690264][T25634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.696602][T25634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 464.727390][T25637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25637 comm=syz.0.8659 [ 464.732075][T25636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25636 comm=syz.0.8659 [ 464.779790][T25582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.788387][T25582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.798164][T25582] fuse: Bad value for 'group_id' [ 464.803187][T25582] fuse: Bad value for 'group_id' [ 464.804970][T25642] input: syz1 as /devices/virtual/input/input22 [ 464.809177][ T63] usb 6-1: USB disconnect, device number 56 [ 464.913902][T25647] netlink: 'syz.2.8664': attribute type 8 has an invalid length. [ 464.970160][T25658] netlink: 'syz.2.8668': attribute type 28 has an invalid length. [ 465.001988][T25661] overlayfs: missing 'workdir' [ 465.106145][T25676] sit0: entered promiscuous mode [ 465.113597][T25676] netlink: 'syz.2.8673': attribute type 1 has an invalid length. [ 465.121402][T25676] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8673'. [ 465.133659][T25676] overlayfs: failed to clone upperpath [ 465.182794][ T63] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 465.198551][ T63] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.747019][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 465.747038][ T36] audit: type=1326 audit(2000000051.970:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.776744][ T36] audit: type=1326 audit(2000000051.970:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.800765][ T36] audit: type=1326 audit(2000000051.970:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.824464][ T36] audit: type=1326 audit(2000000051.970:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.848092][ T36] audit: type=1326 audit(2000000051.970:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.871514][ T36] audit: type=1326 audit(2000000051.970:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.895116][ T36] audit: type=1326 audit(2000000051.970:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.918625][ T36] audit: type=1326 audit(2000000051.970:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.942121][ T36] audit: type=1326 audit(2000000051.970:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 465.965466][ T36] audit: type=1326 audit(2000000051.970:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25709 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abad8f6c9 code=0x7ffc0000 [ 467.463231][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.385418][T25776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.385457][T25776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 468.729981][T25798] netlink: 260 bytes leftover after parsing attributes in process `syz.6.8717'. [ 468.972807][T25802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:526 [ 469.218701][T25809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.236383][T25809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.453235][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 469.603197][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 469.609767][ T10] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 469.618040][ T10] usb 6-1: config 0 has no interface number 0 [ 469.624178][ T10] usb 6-1: too many endpoints for config 0 interface 160 altsetting 157: 226, using maximum allowed: 30 [ 469.635387][ T10] usb 6-1: config 0 interface 160 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 469.648832][ T10] usb 6-1: config 0 interface 160 has no altsetting 0 [ 469.655667][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 469.664921][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.673595][ T10] usb 6-1: config 0 descriptor?? [ 469.881134][ T10] usb 6-1: string descriptor 0 read error: -71 [ 469.888072][ T10] ftdi_sio 6-1:0.160: FTDI USB Serial Device converter detected [ 469.896136][ T10] usb 6-1: Detected FT4232H [ 469.900914][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 469.908017][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 469.916124][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 469.925770][ T10] usb 6-1: USB disconnect, device number 57 [ 469.932334][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 469.942009][ T10] ftdi_sio 6-1:0.160: device disconnected [ 471.303184][T25857] fuse: Bad value for 'rootmode' [ 471.400887][T25870] SELinux: security_context_str_to_sid () failed with errno=-22 [ 471.595004][T25892] rust_binder: Write failure EFAULT in pid:227 [ 471.607969][T25897] __vm_enough_memory: pid: 25897, comm: syz.0.8746, bytes: 18014402804453376 not enough memory for the allocation [ 472.130182][T25907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.130260][T25908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:562 [ 472.137112][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 472.137130][ T36] audit: type=1400 audit(2000000058.360:7518): avc: denied { transfer } for pid=25906 comm="syz.5.8750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 472.137142][T25907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 472.137168][T25907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:562 [ 472.261198][T25917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25917 comm=syz.5.8752 [ 472.284177][T25917] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 182) [ 472.284198][T25917] rust_binder: Error while translating object. [ 472.294966][T25917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 472.301165][T25917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 490.097540][T25944] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8762'. [ 490.259349][T25977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 490.259484][T25977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 490.266381][T25977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:578 [ 490.366697][ T36] audit: type=1400 audit(2000000076.590:7519): avc: denied { setattr } for pid=25985 comm="syz.5.8774" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.531527][T26007] 9pnet_fd: Insufficient options for proto=fd [ 490.852584][T26060] 9pnet_fd: Insufficient options for proto=fd [ 491.422386][T26088] PM: Enabling pm_trace changes system date and time during resume. [ 491.422386][T26088] PM: Correct system time has to be restored manually after resume. [ 491.464383][ T36] audit: type=1404 audit(2000000077.690:7520): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 491.484894][ T36] audit: type=1400 audit(2000000077.690:7521): avc: denied { read } for pid=26098 comm="syz.0.8807" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 491.512655][ T36] audit: type=1400 audit(2000000077.720:7522): avc: denied { create } for pid=26103 comm="syz.6.8809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 491.533480][ T36] audit: type=1400 audit(2000000077.720:7523): avc: denied { create } for pid=26103 comm="syz.6.8809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 491.559159][ T36] audit: type=1400 audit(2000000077.730:7524): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 491.590372][ T36] audit: type=1400 audit(2000000077.730:7525): avc: denied { create } for pid=26105 comm="syz.0.8810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 491.615630][ T36] audit: type=1400 audit(2000000077.730:7526): avc: denied { read write } for pid=26105 comm="syz.0.8810" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 491.621491][T26124] netlink: 'syz.5.8814': attribute type 4 has an invalid length. [ 491.649304][ T36] audit: type=1400 audit(2000000077.760:7527): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 491.680963][ T36] audit: type=1400 audit(2000000077.760:7528): avc: denied { read } for pid=26111 comm="syz.0.8812" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 491.830098][T26186] netlink: 'syz.6.8832': attribute type 46 has an invalid length. [ 492.469250][T26233] pim6reg1: entered promiscuous mode [ 492.474800][T26233] pim6reg1: entered allmulticast mode [ 492.565324][T26244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26244 comm=syz.0.8854 [ 493.337393][T26336] netlink: 4432 bytes leftover after parsing attributes in process `syz.6.8886'. [ 494.295250][T26399] netlink: 'syz.0.8906': attribute type 4 has an invalid length. [ 494.303149][T26399] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8906'. [ 494.800292][T26437] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.8921'. [ 494.992303][T26476] netlink: 'syz.6.8931': attribute type 16 has an invalid length. [ 495.000325][T26476] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.8931'. [ 495.480272][ T36] kauditd_printk_skb: 415 callbacks suppressed [ 495.480287][ T36] audit: type=1400 audit(2000000081.700:7944): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 495.507306][ T36] audit: type=1400 audit(2000000081.700:7945): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 495.527224][ T36] audit: type=1400 audit(2000000081.700:7946): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 495.547889][ T36] audit: type=1400 audit(2000000081.700:7947): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 495.568576][ T36] audit: type=1400 audit(2000000081.700:7948): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 495.589182][ T36] audit: type=1400 audit(2000000081.700:7949): avc: denied { sys_module } for pid=26502 comm="syz.2.8944" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 495.610419][ T36] audit: type=1400 audit(2000000081.700:7950): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 495.631066][ T36] audit: type=1400 audit(2000000081.700:7951): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 495.651695][ T36] audit: type=1400 audit(2000000081.700:7952): avc: denied { create } for pid=26502 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 495.672364][ T36] audit: type=1400 audit(2000000081.710:7953): avc: denied { read write } for pid=22594 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 495.889128][T26568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=26568 comm=syz.6.8965 [ 496.019398][T26582] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8971'. [ 496.028802][T26582] gretap0: entered promiscuous mode [ 496.154676][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8981'. [ 496.458803][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8988'. [ 496.468962][T26633] netlink: 37 bytes leftover after parsing attributes in process `syz.6.8988'. [ 496.590922][T26637] netlink: 'syz.2.8990': attribute type 4 has an invalid length. [ 496.598784][T26637] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8990'. [ 496.847459][ T7056] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.112661][T26658] netlink: 37 bytes leftover after parsing attributes in process `syz.6.8997'. [ 497.788752][T26696] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 498.903177][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 498.903187][ T808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.564280][T26799] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9049'. [ 499.584932][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9050'. [ 500.165078][T26817] netlink: 'syz.2.9055': attribute type 4 has an invalid length. [ 500.172867][T26817] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.9055'. [ 500.521521][ T36] kauditd_printk_skb: 470 callbacks suppressed [ 500.521541][ T36] audit: type=1400 audit(2000000086.740:8424): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 500.552360][ T36] audit: type=1400 audit(2000000086.760:8425): avc: granted { setsecparam } for pid=26836 comm="syz.0.9060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 500.578152][ T36] audit: type=1400 audit(2000000086.760:8426): avc: denied { read } for pid=26836 comm="syz.0.9060" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 500.603215][ T36] audit: type=1400 audit(2000000086.760:8427): avc: denied { read write } for pid=26836 comm="syz.0.9060" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 500.627467][ T36] audit: type=1400 audit(2000000086.760:8428): avc: denied { mounton } for pid=26836 comm="syz.0.9060" path="/143/file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 500.696076][ T36] audit: type=1400 audit(2000000086.780:8429): avc: denied { create } for pid=26836 comm="syz.0.9060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 500.742348][ T36] audit: type=1400 audit(2000000086.800:8430): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 500.751780][T26847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=26847 comm=syz.0.9064 [ 500.785143][ T36] audit: type=1400 audit(2000000086.860:8431): avc: denied { read } for pid=26840 comm="syz.0.9061" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 500.809015][ T36] audit: type=1400 audit(2000000086.890:8432): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 500.833514][ T36] audit: type=1400 audit(2000000086.890:8433): avc: denied { mounton } for pid=26833 comm="syz.5.9059" path="/249/file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 500.878561][T26853] netlink: 'syz.6.9066': attribute type 4 has an invalid length. [ 505.646658][ T36] kauditd_printk_skb: 160 callbacks suppressed [ 505.646678][ T36] audit: type=1400 audit(2000000091.870:8594): avc: denied { execmem } for pid=27070 comm="syz.6.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 505.676866][ T36] audit: type=1400 audit(2000000091.870:8595): avc: denied { mounton } for pid=27070 comm="syz.6.9161" path="/253/file0" dev="tmpfs" ino=1362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 505.705587][ T36] audit: type=1400 audit(2000000091.930:8596): avc: denied { node_bind } for pid=27072 comm="syz.6.9162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=0 [ 505.788893][ T36] audit: type=1400 audit(2000000092.010:8597): avc: denied { execmem } for pid=27074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 505.826113][ T36] audit: type=1400 audit(2000000092.050:8598): avc: denied { execmem } for pid=27077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 505.845775][ T36] audit: type=1400 audit(2000000092.070:8599): avc: denied { execmem } for pid=27080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 505.967899][ T36] audit: type=1400 audit(2000000092.190:8600): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 506.260238][ T36] audit: type=1400 audit(2000000092.480:8601): avc: denied { execmem } for pid=27081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 506.284234][ T36] audit: type=1400 audit(2000000092.480:8602): avc: denied { create } for pid=27082 comm="syz.0.9166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 506.304871][ T36] audit: type=1400 audit(2000000092.480:8603): avc: denied { create } for pid=27082 comm="syz.0.9166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 510.912063][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 510.912083][ T36] audit: type=1400 audit(2000000097.134:8629): avc: denied { execmem } for pid=27122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 510.947614][ T36] audit: type=1400 audit(2000000097.154:8630): avc: denied { create } for pid=27125 comm="syz.6.9184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 510.967525][ T36] audit: type=1400 audit(2000000097.164:8631): avc: denied { read append } for pid=27123 comm="syz.0.9182" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 511.012467][ T36] audit: type=1400 audit(2000000097.234:8632): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 512.068921][ T36] audit: type=1400 audit(2000000098.284:8633): avc: denied { execmem } for pid=27131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 512.114875][ T36] audit: type=1400 audit(2000000098.334:8634): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 513.301341][ T36] audit: type=1400 audit(2000000099.524:8635): avc: denied { execmem } for pid=27139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 513.338009][ T36] audit: type=1400 audit(2000000099.564:8636): avc: denied { create } for pid=27142 comm="syz.0.9190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 513.380538][ T36] audit: type=1400 audit(2000000099.564:8637): avc: denied { execmem } for pid=27140 comm="syz.6.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 513.400165][ T36] audit: type=1400 audit(2000000099.584:8638): avc: denied { mounton } for pid=27140 comm="syz.6.9189" path="/265" dev="tmpfs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 516.066103][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 516.066122][ T36] audit: type=1400 audit(2000000102.294:8643): avc: denied { execmem } for pid=27157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 516.097325][ T36] audit: type=1400 audit(2000000102.324:8644): avc: denied { read } for pid=27158 comm="syz.0.9196" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 516.137316][ T36] audit: type=1400 audit(2000000102.364:8645): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 517.609255][ T36] audit: type=1400 audit(2000000103.834:8646): avc: denied { execmem } for pid=27164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 517.641267][ T36] audit: type=1400 audit(2000000103.854:8647): avc: denied { create } for pid=27167 comm="syz.0.9199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 517.661359][ T36] audit: type=1400 audit(2000000103.874:8648): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 517.710469][ T36] audit: type=1400 audit(2000000103.924:8649): avc: denied { mounton } for pid=27165 comm="syz.2.9200" path="/390" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 517.732793][ T36] audit: type=1400 audit(2000000103.924:8650): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 519.258016][ T36] audit: type=1400 audit(2000000105.484:8651): avc: denied { execmem } for pid=27174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 519.286632][ T36] audit: type=1400 audit(2000000105.504:8652): avc: denied { create } for pid=27176 comm="syz.6.9205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 522.811323][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 522.811345][ T36] audit: type=1400 audit(2000000109.034:8690): avc: denied { execmem } for pid=27196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 522.838749][ T36] audit: type=1400 audit(2000000109.044:8691): avc: denied { read write } for pid=27199 comm="syz.0.9209" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 522.863795][ T36] audit: type=1400 audit(2000000109.064:8692): avc: denied { create } for pid=27199 comm="syz.0.9209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 522.910178][ T36] audit: type=1400 audit(2000000109.134:8693): avc: denied { map } for pid=27199 comm="syz.0.9209" path="pipe:[91371]" dev="pipefs" ino=91371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=0 [ 522.943141][ T36] audit: type=1400 audit(2000000109.164:8694): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 524.729782][ T36] audit: type=1400 audit(2000000110.954:8695): avc: denied { execmem } for pid=27204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 524.753499][ T36] audit: type=1400 audit(2000000110.954:8696): avc: denied { read } for pid=27205 comm="syz.0.9212" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 524.776721][ T36] audit: type=1400 audit(2000000110.954:8697): avc: denied { read } for pid=27205 comm="syz.0.9212" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 524.799853][ T36] audit: type=1400 audit(2000000110.954:8698): avc: denied { read } for pid=27205 comm="syz.0.9212" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 524.822830][ T36] audit: type=1400 audit(2000000110.984:8699): avc: denied { read write } for pid=24531 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 527.084292][ T330] bridge_slave_1: left allmulticast mode [ 527.090023][ T330] bridge_slave_1: left promiscuous mode [ 527.095802][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.104864][ T330] bridge_slave_0: left allmulticast mode [ 527.110536][ T330] bridge_slave_0: left promiscuous mode [ 527.116771][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.126024][ T330] veth0_to_team: left allmulticast mode [ 527.131602][ T330] veth0_to_team: left promiscuous mode [ 527.139049][ T330] bridge0: port 3(veth0_to_team) entered disabled state [ 527.148846][ T330] bridge_slave_1: left allmulticast mode [ 527.154888][ T330] bridge_slave_1: left promiscuous mode [ 527.160541][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.170383][ T330] bridge_slave_0: left allmulticast mode [ 527.176168][ T330] bridge_slave_0: left promiscuous mode [ 527.181886][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.387193][ T330] veth1_macvtap: left promiscuous mode [ 527.393037][ T330] veth1_macvtap: left promiscuous mode [ 527.398594][ T330] veth0_vlan: left promiscuous mode [ 527.844801][ T330] bridge_slave_1: left allmulticast mode [ 527.850466][ T330] bridge_slave_1: left promiscuous mode [ 527.856140][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.863851][ T330] bridge_slave_0: left allmulticast mode [ 527.869513][ T330] bridge_slave_0: left promiscuous mode [ 527.875160][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.966207][ T330] veth1_macvtap: left promiscuous mode [ 527.971728][ T330] veth0_vlan: left promiscuous mode