last executing test programs: 34m49.501980715s ago: executing program 32 (id=4983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r2 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x8fe, 0x6}, 0x10) sendmsg$netlink(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0x20c40}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x5}, 0x0) syz_io_uring_setup(0xcc3, &(0x7f0000001180)={0x0, 0x8b09, 0x2000, 0x3, 0x256}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) r7 = openat$cgroup_ro(r6, &(0x7f0000001100)='pids.events\x00', 0x5000000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGABS0(r8, 0x80184520, 0x0) readv(r7, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4090, 0x103c}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540), 0x0, 0x0) close(r9) read$FUSE(r4, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x1040008, &(0x7f0000001300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="967c734792148959e17fee4c65c2b8ff1e1b226e7b7cd60f8d48725af8a71fee7b74c85b8fc6458634b90020aba58271f8383af55967834ca2d414c7e404f3e4272686f29f3b5a6fd21b19f11f3b6f0f50b46fb4c7ceba4e1b4373d0cde3e1efa4c32d3d302f3e393b1a79e9ecd9049e24211109f960e00215ecc2e5d3d8261a6db3ce10d81bc41c73ecbe6b59095af90f6ec5759db7edae2e3772e003613361b85e6bdc3c4c375f9fb95ac9cf80bb13345db1c41bcf27fc309eecbd262cd77ba79ea00a2f06c44149b715b3c9644500d1217d5dd943a63ece2276bd540f05da40eedc621cd003911495", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESOCT]) io_setup(0x101, &(0x7f0000000140)) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000298000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x51, 0x0, 0x0) 34m13.967304887s ago: executing program 33 (id=5341): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x4000000009}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x4000000009}}]}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000006c0)) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa6402, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) 33m56.467325018s ago: executing program 34 (id=5780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x6) r1 = accept4(r0, &(0x7f0000000340)=@x25, 0x0, 0x800) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) socket$netlink(0x10, 0x3, 0xa) setresgid(0x0, r3, 0xee01) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x100004, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESOCT=r1]) 32m38.145299113s ago: executing program 35 (id=7388): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000200)={0x2, 0x4e00, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000000000000007000000441206"], 0x28}}], 0x1, 0x46000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x37) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x19, r3) syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0a1}, 0x44000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/123, 0x7b, 0x1, 0xb}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3, 0x1000000}, @fda={0x66646185, 0x7, 0x1, 0x80000001a}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1881, 0x0) 31m10.892352052s ago: executing program 36 (id=9241): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x3, @private1, 0x8}, {0xa, 0x4e22, 0x7a6, @local, 0x28a}, 0x1, {[0x96, 0x8, 0x9, 0x80000000, 0xd35, 0xffffffff, 0x81, 0x9]}}, 0x5c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a00130400000000fbdbdf25fe8000000000000000000000000000bb7f00000100000000000000000000000000004be64e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xff, 0x8, @vifc_lcl_ifindex, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 30m46.31209665s ago: executing program 37 (id=9383): r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x553542, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/60, 0x3c}, {0x0}], 0x2) 28m18.202927325s ago: executing program 38 (id=12086): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) getgroups(0xfffffffffffffdc5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x0, @private}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x10}}], 0x10, 0x4000080}, 0x10004040) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 25m50.889460118s ago: executing program 39 (id=14270): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x98aa2000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0xca639000) 25m49.005485735s ago: executing program 40 (id=14047): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x10}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0xc88c5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24m9.974159135s ago: executing program 41 (id=16401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') poll(&(0x7f0000001040)=[{r0, 0x4}, {r0, 0x1}, {r0, 0xb0aa}, {r0, 0x8151}, {r0, 0x349}], 0x5, 0xde2) pread64(r2, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 23m54.177870414s ago: executing program 42 (id=16636): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x248803, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0xff2e) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setuid(0xee01) (async) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) pidfd_send_signal(r2, 0x1, 0x0, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 18m56.017465558s ago: executing program 43 (id=21156): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fremovexattr(r1, &(0x7f00000033c0)=@known='system.posix_acl_access\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r9, @ANYRES64=r9], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000012002506000000fbffffffff04001900"], 0x18}, 0x1, 0x0, 0x0, 0x4004011}, 0x20040810) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd\x00\x00\x00\x00no=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',aname=,k']) umount2(&(0x7f0000000380)='./file0\x00', 0xb) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xffffffff, 0x9d2) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x0, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 18m20.696156457s ago: executing program 44 (id=21395): r0 = socket$unix(0x1, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0xffff}}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001100)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) fcntl$setsig(r1, 0xa, 0x41) r5 = dup2(r4, r3) read$FUSE(r5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 18m12.607717845s ago: executing program 45 (id=21708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x1008c69) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000004480)) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000100)={0x3, 0x7}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r3, 0x19}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, 0xeeee8000, 0x2, r3, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd(0x1008c69) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000004480)) (async) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000100)={0x3, 0x7}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r3, 0x19}) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, 0xeeee8000, 0x2, r3, 0x8}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 16m52.400421349s ago: executing program 0 (id=22913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1, 0x4}}, 0x2e) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r3) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x4000001, 0x0, 0x4, 0x0, "0022ffffffffffffffffeb2bda00df00000080"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0x1, 0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001100)={0x5b279f6196f49b8d, 0x17, 0x5, 0x9, 0x0, 0xfffffffe, 0x0}) r6 = syz_open_pts(r0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) dup3(r6, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 16m51.503723267s ago: executing program 0 (id=22914): modify_ldt$read_default(0x2, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, r0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/108, 0x6c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x101301) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r7 = syz_open_pts(r6, 0x20800) dup3(r7, r6, 0x0) write$uinput_user_dev(r5, &(0x7f0000000300)={'syz1\x00', {0x8381, 0x3, 0xff1e, 0x401}, 0x16, [0x8, 0x80000001, 0x81, 0x4, 0x10, 0x9c71, 0xe, 0xc, 0xfffffffc, 0x0, 0x8, 0x46e, 0x7fffffff, 0x7, 0xc, 0x0, 0x0, 0xac, 0x4, 0x3, 0x0, 0x2e8, 0x8, 0x41, 0x2, 0x80, 0x2, 0x1, 0x8, 0x0, 0x229b, 0x8, 0x6, 0x4, 0x80, 0x6a5f, 0x5, 0x81, 0x5, 0x7dbf, 0x8, 0x81, 0x6, 0x8, 0x8, 0x8001, 0x6, 0x3, 0x2, 0xfffffeff, 0xd0, 0x5, 0x9, 0x0, 0x90f, 0x8, 0x4507, 0x7, 0x2, 0x7, 0x8, 0x7f, 0xe, 0x4], [0x4, 0x0, 0x8, 0x3, 0xd, 0x4, 0x4, 0xfffff923, 0x4, 0x7f, 0x4, 0x4096, 0x9, 0x0, 0x9, 0x81, 0x80, 0xf7, 0x8, 0x7, 0x2, 0xc440, 0x7f, 0x9, 0x5, 0x6, 0x3ff, 0x10, 0x80, 0x1, 0x7, 0xffffffff, 0x80000001, 0x3, 0x2, 0xc, 0xfffffc00, 0x65b2, 0x4, 0x7, 0xfff, 0x3, 0x5, 0x7, 0x7, 0x0, 0xf72, 0x7fffffff, 0x8001, 0x9, 0x3, 0x22e, 0x6, 0x90000000, 0x4, 0xd91b, 0x8, 0x0, 0x1, 0xf, 0x9, 0x6, 0x1, 0xfffffff7], [0x400, 0x2, 0xdcf, 0x9, 0x95, 0x7d, 0x9, 0x2, 0x7, 0x80000000, 0x5, 0x7c, 0x6, 0x6, 0x3, 0x457, 0x983f, 0xff, 0x0, 0x7, 0x4, 0x4, 0x1, 0x8, 0x8, 0xfff, 0x5, 0x0, 0xf7b, 0x6, 0x3, 0x6, 0x7, 0x5, 0x8, 0x101, 0x0, 0x6, 0x4, 0xb33, 0xfae0, 0xfffffffb, 0x8, 0x68a2, 0x8, 0x35bd, 0x9b, 0x4, 0x9, 0x2, 0x802, 0x20005, 0x7, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x6, 0x401, 0x2, 0x1, 0xfffffffc], [0x4, 0x6, 0x4, 0x8, 0x6, 0x4f83, 0x3ff, 0x7, 0x0, 0x9, 0x6, 0xffff, 0x1, 0x5, 0x6, 0x1, 0x108, 0x4, 0x7, 0x3, 0xa07, 0x2, 0xa, 0xeb13, 0x3ff, 0x7fff, 0x468, 0x6, 0x2, 0x2b2, 0x4, 0x3ff, 0x7f, 0x6c, 0x80000001, 0xd, 0x0, 0xc, 0xfffffc00, 0x3, 0x6, 0x7fff, 0x3, 0x2, 0x5, 0xff000000, 0x0, 0x3, 0x0, 0x4, 0x67, 0x6, 0x10001, 0x5, 0x9, 0x8, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x10, 0x1000, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r3, r4, 0x0) 16m51.35452285s ago: executing program 0 (id=22918): r0 = socket(0x840000000002, 0x5, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 16m51.34671673s ago: executing program 0 (id=22919): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async, rerun: 64) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) (rerun: 64) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @ioapic={0x2000, 0x49df, 0x1ff, 0x3ff, 0x0, [{0xaa, 0xf, 0xf0, '\x00', 0xca}, {0x8, 0x9c, 0xc, '\x00', 0x8}, {0x2, 0x3, 0x4, '\x00', 0x40}, {0xa1, 0x66, 0x16, '\x00', 0x6}, {0xff, 0x2, 0x4, '\x00', 0x3d}, {0x3, 0x5, 0x5, '\x00', 0x91}, {0x6, 0xdc, 0x1, '\x00', 0xf}, {0x4, 0xf8, 0x74, '\x00', 0x5}, {0x80, 0x3, 0x7, '\x00', 0x2}, {0x9, 0x2, 0x7, '\x00', 0xc}, {0x0, 0x0, 0xf0, '\x00', 0x9b}, {0x0, 0xc, 0xae, '\x00', 0x7}, {0x0, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x7, 0xf7, '\x00', 0x3e}, {0x0, 0x6, 0x7, '\x00', 0xa7}, {0x3, 0x3, 0x6, '\x00', 0xa4}, {0x5, 0xf, 0xff, '\x00', 0x4}, {0xe, 0x9e, 0x5, '\x00', 0x1}, {0x2, 0x40, 0x8, '\x00', 0x3}, {0x4, 0x2e, 0x1, '\x00', 0x1}, {0x81, 0x3, 0x6, '\x00', 0x5}, {0x80, 0x4, 0xfa, '\x00', 0x6}, {0x0, 0x31, 0x6, '\x00', 0xff}, {0x8, 0x9, 0x6, '\x00', 0xe}]}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x1, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) 16m51.301630381s ago: executing program 0 (id=22922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, &(0x7f0000000000)='/dev/rnullb0\x00') timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 16m51.196852423s ago: executing program 0 (id=22930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={@fda={0x66646185, 0x1, 0x2, 0x1a}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)}}], 0xffffffffffffff57, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 16m51.161893274s ago: executing program 46 (id=22930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={@fda={0x66646185, 0x1, 0x2, 0x1a}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)}}], 0xffffffffffffff57, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 16m45.757625779s ago: executing program 2 (id=23036): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x4196ccce67868bab, 0x0, 0x80000}, 0x14}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 16m45.70546627s ago: executing program 2 (id=23037): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) r1 = signalfd(r0, &(0x7f00000000c0), 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 16m44.798539927s ago: executing program 2 (id=23064): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x2080022, 0x0) 16m44.798157297s ago: executing program 2 (id=23065): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000003940), 0xfffffffffffffff9, 0x1c3503) ioctl$BLKPG(r1, 0x1269, &(0x7f0000003a40)={0x1, 0x0, 0x0, 0x0}) (async) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000140)=')1NS\xbf\xe6AnA{=\xc9Pv-^}*&+++,@\x00') (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x54}}, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 16m44.769527598s ago: executing program 2 (id=23066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdfffffffcde7edd340000000e000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400a00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)=ANY=[]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 16m44.694828469s ago: executing program 2 (id=23067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) listen(r2, 0xfffffbeb) close_range(r0, 0xffffffffffffffff, 0x0) 16m44.66734208s ago: executing program 47 (id=23067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) listen(r2, 0xfffffbeb) close_range(r0, 0xffffffffffffffff, 0x0) 15m19.01713959s ago: executing program 7 (id=24313): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$usbmon(&(0x7f0000002040), 0x4, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x8, 0xfffffffeffffffff, r2}) r4 = socket$inet6(0xa, 0x800, 0x7) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000002100)=0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000002140)={0x6, {{0xa, 0x4e22, 0x77a, @remote, 0x5}}, 0x0, 0x8, [{{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc00}}, {{0xa, 0x4e21, 0x2, @empty, 0x10001}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}}, {{0xa, 0x4e20, 0x1cb, @local}}, {{0xa, 0x4e21, 0x5, @private1, 0x9}}, {{0xa, 0x4e22, 0x4, @mcast2, 0x4}}, {{0xa, 0x4e22, 0x58c2c0d5, @loopback, 0x3a}}, {{0xa, 0x4e23, 0x4, @private1}}]}, 0x490) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000002600)=@arm64={0x0, 0x0, 0x40, '\x00', 0x40000000000}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000002640), 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000002680)='westwood', 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8) r8 = socket$nl_audit(0x10, 0x3, 0x9) getpeername$netlink(r8, &(0x7f00000026c0), &(0x7f0000002700)=0xc) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r6) write$UHID_INPUT(r5, &(0x7f0000002740)={0x8, {"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", 0x1000}}, 0x1006) connect$inet6(r4, &(0x7f0000003780)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000037c0)={0x7, {{0xa, 0x4e21, 0xe1, @mcast2, 0x80000000}}}, 0x88) write$binfmt_misc(r5, &(0x7f0000003880)="141841b9c76a3bdb3c63a660b9da4c9b5433c543774a612ccf3d2bd1be1085a5006decf47f7988455b5727f7011a3ed155c5b448f65d223805bc00f5529c20d5b6cc5d9532677e997ab8439e73e91654515541022f3deb2bec416fc2d4be5e161e36314529206adc08413348c606a044762abf7d632761de7a9aa160cf13c62e6e96", 0x82) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000003940)={{0x0, 0x0, 0x80, {0x8080000, 0xf000, 0x2}}, "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", "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"}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000059c0)={'\x00', 0xaf, 0x9, 0x9, 0x1, 0x8, r2}) r10 = dup2(r4, r4) bind$bt_sco(r10, &(0x7f0000005a40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) connect$inet6(r5, &(0x7f0000005a80)={0xa, 0x4e20, 0x6, @local, 0xbf29f6d}, 0x1c) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000005b80)=0x0) sendmsg$netlink(r11, &(0x7f0000006580)={&(0x7f0000005ac0)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006380)=[{&(0x7f0000005b00)={0x20, 0x1c, 0x1, 0x70bd26, 0x25dfdbfc, "", [@nested={0x10, 0xa4, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd}, @nested={0x4, 0xec}]}]}, 0x20}, {&(0x7f0000005b40)={0x10, 0x16, 0x800, 0x70bd26, 0x25dfdbfb}, 0x10}, {&(0x7f0000005bc0)={0x114, 0x18, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x3c, 0x10c, 0x0, 0x1, [@nested={0x4, 0x17}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x106, 0x0, 0x0, @u32=0xe}, @nested={0x4, 0x41}]}, @generic="57696828d327a45e5c39b6a73367428ba8347d791197a7563445f9def36350", @generic="a46b0b88cf83dbfd143dc6a0b3d34ddaf2fc288f1fb0ef9cdfcf205e95f5e852bbbb49a240c8640cbcbcb50f3e85800ddf93fc663642ed7167c3cb4b5590c5169f94b43f02c27629d340120f681cbe0c1aad038b9c8ea656f63b0804cd3d01048591ec21ed20bb682e26e276efa1e0ece74ac6f40524a27099433bb6351659a2497ca98725e09fe840f09654b0c37768d4ec3102", @nested={0x14, 0xc1, 0x0, 0x1, [@typed={0x8, 0xf7, 0x0, 0x0, @pid=r12}, @typed={0x8, 0x106, 0x0, 0x0, @u32=0x1}]}]}, 0x114}, {&(0x7f0000005d00)={0x4d4, 0x35, 0x8, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x107, 0x0, 0x0, @u64=0x101}, @nested={0x8c, 0x135, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0x13f}, @generic="6709f5011d601e90", @generic="ee40d69ac2f793575188ab31350313272be2df075a0bc141bac92ad07b14eb42bf193e336daed62f1c357d05e97ce44a15bfcb91773e8bfc662ed41af17fe34cc888680d9ce015dc06e908350882fc279899568d102526ffdd3ca6f63424472a860fcabcff58ef5bc5dbf6713fb8bceb", @typed={0x8, 0x85, 0x0, 0x0, @pid=r9}]}, @generic="d409192f86aceb662e1952637223ac26bc4fb816c449bdc213490269e07d89aa008a3ccc0da0a2909ebfa4bc090c507cb5941217df02929b72d277c810895c221c007fdcc306", @generic="0eb3e53a5e6cb30f37532bc3197a8b57eee7ee1af955089384f8c8e764c1b7067e5184f092307a80100a26eae7a693b25b7ce0ed094ff0ce980bb3d95669aac26656f090072fde98788ebb5ba95bf19e0162f586b4a81d34cc3ea3d764844abb3d32b22c307343a59d50312508bbf32196ef7a9945fdf4788775cc9e8443b2afdca879e9c3a6be4446087d34782c53f44767147144ff724189b50d4026a47efb021b6584991c0881a8d57bf8699b942bae14d6f856283cba5234deeda97c93a456d8044fc17c09bcc4abfa1b6df6b15a343df5d30b66e8ddf16511b80ec5674a3929a152206d20ffb14eb435e18dd3924c5af01303df6856", @nested={0x19c, 0x72, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x3}, @generic="27b0fc5fa911c37e742b24cedcdef6c9f17c466d8be66edcafca2b8b77f3ec1f5b3282bd01ee244373b21f09a49509e8fff467a319b0e00d064196a83f4d9cc9d875cc1d4507c5b6c94d9fb39b24b679e39729d026c3cae1f214712e97492663f9ac73671933f9077ac45a2a8cf098f9638ee0d4f8630d751f05a94333f90294f4dbc1576d345f137f875fb58822dd9b157a872dcc75267f5a112dd231389b019e058565f3ea3ac3fb12d2b6ab7a04cd701abb9e9ffc6656b61873ba32deee57f6848cb9eb439472fb07d681341b317a029b0d251cec2183cac4c03a94ef7d4892add9bc9c9ca2c6809e58c2efb9de47b965", @typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x6}, @generic="6e5a814188742737bc5b8074f20783399886106d4e89cf4880003c9b11c795d5e1f0b6dee68596d1b41f660a1cf4e780ddb74696fe50498d79ab087de7ad204908213f42203c87a1b61e0c82761c22990e288c99f892c2b388db56de7abc7d8e031ba09a2d1fd60b79fae7ea3226ec87d2ba761fe16c", @nested={0x4, 0x7a}, @nested={0x4, 0xfe}, @nested={0x4, 0x1c}]}, @nested={0x14e, 0x57, 0x0, 0x1, [@typed={0x14, 0x105, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="1c341ba294153bca943620bbc1c6ef4e3e95a56031ed4424c3325d12c502c6c6db9f188899511355ae3795063d5aac4d6d99e810078373b79410f0d962fed5c088b978eec2b049aed2da644b6fd40abc6d29b9c36e16f7d565c62f7c20e88cc19dc989ddc9a174a355386e7913e4ff9ae4c05b83dfa5f12bd490998ff1af49291f8550fa3384d0354bb3b727105d7781952d0f6cd3b87a4756320c86966a67ef1865987f0f89c9e4a80907ebd756c58409b69fa737896037be6cb2468f52b936c36c1461fadb51d6409d67dfc0b8b58aab4dd08dd9a740ab9857d980a608a4d125e66189b91ee21b6d899b85cbbf3b44e7a9abc062", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@remote}, @typed={0x9, 0xeb, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @generic="1636b0976fd79338c895333b4925a4d760734075ac7471f13859dd6cd73098f8133b19269fd7794999", @nested={0x4, 0x81}]}]}, 0x4d4}, {&(0x7f0000006200)={0x164, 0x26, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0xbf, 0x0, 0x0, @uid=r0}, @typed={0xc, 0xf, 0x0, 0x0, @str='westwood'}, @nested={0x10, 0x1b, 0x0, 0x1, [@typed={0x9, 0x97, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, @generic="2fbdc48d8ec81ede8e26d4c019f402904d1d418f185826e095cd8ab6db424851f60da05c692576d84f08778b7b6c17d038561d54ae75bf08ff1825f8d80ac15460f4a17818c3c7442b73db046e0c303b04b47cb1271fc452fdf86f85029fdd78363ac02530ba9ad9e851afadb12757b68e456c4eefd2821bb1deed18682424c327a702a5503858d2e74fe737faf9c0f33a42951205a68226901d557d4a5e6a43ad0f618b680f1ef9ef933ca8a0766ac36f7c9412204ef670", @typed={0x8, 0x92, 0x0, 0x0, @uid=r0}, @typed={0x8, 0xbe, 0x0, 0x0, @fd=r7}, @generic="d5f8178fa6ffaa5b71aea526b0fd99351eded802951be8b7cb3a8da7d1cb7d8be2739baee155fad52110a2537c8c1ef5ed41ad7754df7c57b0b289bb68a6e5858cbba3fc58c1c555290e968134742686a62f4e196f9ff8d55972bfff3d4d1cec0e45640ced409e2c"]}, 0x164}], 0x5, &(0x7f0000006480)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r8, r7, r3, r5, r5, r6, r4, 0xffffffffffffffff, r5]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r8, r8, r5]}}, @rights={{0x30, 0x1, 0x1, [r4, r8, r4, r6, r10, r8, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, r0, r1}}}], 0xd0, 0x4004080}, 0x40881) 15m19.015771891s ago: executing program 7 (id=24315): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000180)=0xe8) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$FS_IOC_GETFSMAP(r8, 0x4c09, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000580)={0xa4c, 0xa1, 0xb, 0x80000000}, 0x10) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff00889e715e045773ec2b1f31e9b40d00000000000000020000000000000000012a2d7716fd7da79f0b00004000000000000000000000000000800100000000020000000020000049000000000000001000000000000000ef000000000000000c000000ff0700000000000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="03000000980d000000000000000000000000000001000000000000000100"], 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2002, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0xbb83}}, {@access_client}, {@nodevmap}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptp0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r2}}, {@fowner_gt={'fowner>', r6}}, {@euid_gt={'euid>', r7}}, {@euid_lt={'euid<', r11}}]}}) 15m18.131740148s ago: executing program 7 (id=24325): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xa0b00, 0x8) openat(r0, &(0x7f0000000100)='./cgroup\x00', 0x100, 0x4) 15m18.102604218s ago: executing program 7 (id=24326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0x2) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) r2 = syz_open_dev$loop(&(0x7f0000003940), 0xfffffffffffffff9, 0x1c3503) ioctl$BLKPG(r2, 0x1269, &(0x7f0000003a40)={0x1, 0x0, 0x0, 0x0}) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000140)=')1NS\xbf\xe6AnA{=\xc9Pv-^}*&+++,@\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002480)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000024c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf250700000005002e000000000005002a000000000008003a000600000008000b0001000000050038000000000008000600", @ANYRES32=r6, @ANYBLOB="08f09355ee239395fc0d21f60363d9257af95b75b3dede5983944df4665e2ffd9af3ac83ebdfc682e50401fe26d9919dd51d7f5b18aaed4680072bf930d0b21790051cc27a07b35bc2efdf127a2e1aac", @ANYRES32=r7, @ANYBLOB='\b\x00+\x00\x00\x00\x00\x00'], 0x54}}, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000002440)={'tunl0\x00', &(0x7f0000002400)=@ethtool_rxfh_indir={0x1, 0x1, [0x1]}}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r10, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) 15m18.102122798s ago: executing program 7 (id=24328): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x44}}, 0xfe3991774efeed9e) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x1b, 0x1ff, &(0x7f00000002c0)="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"}) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000700)=[0x9549, 0x5, 0xe49, 0x6, 0x9, 0x31a, 0x5527cbf6, 0x4]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xc11, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r4) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000008c0)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000085) sync_file_range(r0, 0x8, 0x8d, 0x2) sync_file_range(r4, 0xfff, 0x0, 0x6) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet6(r7, &(0x7f0000000d40)=[{{&(0x7f0000000a80)={0xa, 0x4e20, 0x6b, @empty, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="e156c934979f0652a6cd7ba82128bfdf25aeda7e679158ab3d3abe3684e4b5c7227e8e75f6f1848ff6fe8a04701ac2840b9ee07769b48179b2630c8bb876b79042d66191041aad94c8b65491d11b5d5eea502b5faefd03242e", 0x59}, {&(0x7f0000000b40)="40bcc17cfc35dcc8113c025e9582ac720456313e98f2ce1008246bcb55344b1801a3bef0c0ab8190f6e850a5235689439d2ac1e6bac92d5a7827eb988795fe153f47edbcd9eab15068136ca8ce1b473f1b3df8a86edda0adb9da794a942c890bddbe1eafb40e01ba87c398303bde80805688d0146c4c17503a66f9bd6b33fd9c3e55", 0x82}], 0x2, &(0x7f0000000c40)=[@tclass={{0x14, 0x29, 0x43, 0x200}}], 0x18}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x14e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=[@dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@ra, @padn={0x1, 0x1, [0x0]}]}}}], 0x20}}], 0x2, 0x24000040) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000011c0)={0x2, 0x0, 0x9, 0x1d, 0x186, &(0x7f0000000dc0)="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"}) accept4(r4, &(0x7f0000001200)=@caif=@dbg, &(0x7f0000001280)=0x80, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000001600)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x2a4, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15279c29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x787fa63}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x594ec91d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5247c4d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x11c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50d137c9}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f1639bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d7cab42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x620e71ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50659753}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x518e30fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21789975}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5750b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3720e45d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e6f703c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42761e15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ae5332b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6290cf71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16b0b7c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45b50ad2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x163ed6a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3482a044}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aa5d524}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74396f76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf270}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64c3bd5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d79ccd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fea6421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57e9046b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7211}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3332}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58bc8785}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7caf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a1a38af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x482f4d60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22fb118a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43b99d8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1913}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1913725f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x171a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c79}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4c099}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000001640)) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000001940)={{'\x00', 0x3}, {0x8}, 0x22, 0x0, 0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)="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", 0xff, 0x0, &(0x7f0000001800)={0x2, 0xec, {0x0, 0xc, 0xae, "d8bd65ba8904850758166ebf228726961758a766f93195e34d1f7776950844f096e3aa3088293b67d381c4b1fb2e7eef80ce6bb05640410198789d84b57383bb6c339d841ef510db5fe8c28384860048224cb56fd6df3f2eee825b7fc3329708155a65a398c280386b50a435a62ad057265d699ce7ee6e6ab40aaeaafb3d7ac8d10676291ab65559d89c76d35ba374ae836bb30278e89e75ff16a2cb78bb164b6102266ff17b23d579c643d9f68b", 0x31, "fd17d656a46bfecd2713d54364c26d074d3b0137f841d4d0b24c7ccb78519a8ef776df0d87b162ec0e9203eba1cda12544"}, 0xb, "03c4f2f055b4bee58806e2"}, 0x103}) 15m17.985241481s ago: executing program 7 (id=24332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14c43, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x101000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000980)={{r0}, r4, 0x18, @inherit={0x58, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000200000000000000010000000000000009000000000000000900000000000000ffffffff0000000003000000000000000400000000000000060000000000090000000000000000000200000000000000"]}, @subvolid=0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000}) ioctl$KDSETLED(r3, 0x4b32, 0xfd6d) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m58.597881656s ago: executing program 3 (id=29842): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x8000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="00094c0000004cfa8294d4fb1cf6423220914eb85103d343051070ccd91f6ba6b9c8972ae58266f68437ba844ad07003006b5e25f1ab839467a351e59ed5a349b1ab37c62d9a82fcc9adcb49d687e85763f53b0e5a2ca18c98fd0e"], 0x0, 0x0, 0x0}, 0x0) futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x40000a3a, [0x7, 0x8eff], 0x1}, 0x10) sendfile(r0, r0, 0x0, 0x7e78a6f1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4000010, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r0, 0x409, 0xc) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x8dacf000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) tgkill(r5, 0x0, 0x5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x1, 0xf, 0xfff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 9m57.965643758s ago: executing program 3 (id=29848): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x2) (async) close(r1) r2 = inotify_init1(0x800) (async) r3 = gettid() fcntl$setown(r1, 0x8, r3) (async) fcntl$setsig(r2, 0xa, 0xe) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) (async) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) rmdir(&(0x7f0000000100)='./control\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2(&(0x7f0000000240)={0x0, 0x0}, 0x4080) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) (async) dup3(r4, r7, 0x0) (async) tee(r6, r5, 0xff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9m57.897373499s ago: executing program 3 (id=29849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m57.039861006s ago: executing program 3 (id=29875): r0 = getpid() syz_open_procfs$userns(r0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000000)={0x3, 0x200, 0xb7a8, 0xdf, 0x0, 0xdf}) r3 = fcntl$getown(r2, 0x9) r4 = syz_pidfd_open(r3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = pidfd_getfd(r4, r4, 0x0) setns(r6, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m56.497420447s ago: executing program 3 (id=29887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x448000, 0x140) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={[{@gid}]}) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) dup(r2) (async) r4 = dup(r2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000002c0)="de547fc49ddf22bade76f1a03b794f0c74be0dec8f51ddba0ee954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d3090b0d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e64"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000002c0)="de547fc49ddf22bade76f1a03b794f0c74be0dec8f51ddba0ee954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d3090b0d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e64"}) write$selinux_load(r1, 0x0, 0x0) (async) write$selinux_load(r1, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) clock_gettime(0x0, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0x5}, {0x10, 0x5}]}, 0x5a, 0x1) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) (async) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000140)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x5, 0x10020, 0x13, "fee8a2abf8fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000a320a9c81f40f05f819e01177d3d458dac00f4ff00000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4000020000004, 0x40000000000000]}}) (async) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000140)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x5, 0x10020, 0x13, "fee8a2abf8fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000a320a9c81f40f05f819e01177d3d458dac00f4ff00000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4000020000004, 0x40000000000000]}}) bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deff000040"]) syz_clone(0x1200, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x29, 0xa, 0x1) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 9m39.89371716s ago: executing program 49 (id=29887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x448000, 0x140) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={[{@gid}]}) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) dup(r2) (async) r4 = dup(r2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000002c0)="de547fc49ddf22bade76f1a03b794f0c74be0dec8f51ddba0ee954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d3090b0d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e64"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000002c0)="de547fc49ddf22bade76f1a03b794f0c74be0dec8f51ddba0ee954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d3090b0d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e64"}) write$selinux_load(r1, 0x0, 0x0) (async) write$selinux_load(r1, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) clock_gettime(0x0, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0x5}, {0x10, 0x5}]}, 0x5a, 0x1) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) (async) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000140)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x5, 0x10020, 0x13, "fee8a2abf8fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000a320a9c81f40f05f819e01177d3d458dac00f4ff00000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4000020000004, 0x40000000000000]}}) (async) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000140)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x5, 0x10020, 0x13, "fee8a2abf8fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000a320a9c81f40f05f819e01177d3d458dac00f4ff00000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4000020000004, 0x40000000000000]}}) bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deff000040"]) syz_clone(0x1200, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x29, 0xa, 0x1) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m52.149477206s ago: executing program 6 (id=36792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none}, 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x11, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m51.245421264s ago: executing program 6 (id=36807): r0 = socket$inet_udplite(0x2, 0x2, 0x11) flistxattr(r0, &(0x7f0000000000)=""/1, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.243846593s ago: executing program 6 (id=36808): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x2, 0x16, 0x1, 0x7, 0xa, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bbc, 0x4, {0x6, 0x3c, 0xd, 0x26, 0x0, 0x8, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local}}]}, 0x50}}, 0x24008980) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff8a, &(0x7f00000001c0)={&(0x7f0000000280)={0x11c, r4, 0x400, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '\b'}, @ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "8e2ea60f9b8a4f31d6890508cc38f091c191f65033e627602576279878ecfbe7e9b7b6bc535ee924d50cb4a024451e8bd491b7e743042050317579cbcc9a35422bfc1cc33cd734cc0684659c4d175b923ce7125bae2070c19b61852be0d65a84fd926dbaa78e87e990a62b878782611b32d32683f9bde2a0fb63d299f0d9ff8a36d6c01079c6cc2e87ea9b8403e81baa90f9c6f55c8c9ee4d69108672587207ec45f517a921a67d998a7d47372a972157342ba6f229ef9e32f370a8b21515e7ba86df07738a44f8ee2f4325776493ce17c44523c56f568b1d9a010bd92440183"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x11c}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x3, 0x2, 0x1, 0x4}}, 0xfffffcf6) 2m51.235274144s ago: executing program 6 (id=36809): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x129}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket(0x5, 0x2, 0x9) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x602001, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/dev/!shmem\x00\xc9\xbb\xa9\x13\xb0^\x17\x9bF\xd3\x903\xc4m7\n\xa8\xa3\xafV\xea\xb0\xfdJ\xec\xe4\xadDI\x80\x01!\xf0\x8bY\xbfK\xaa8AB_\x81\'\x9c\xe1\x02a\x17\x14\v\xe7!\x8c\xb1a\xec\xa8\x95\xb3\x17\x82E\x9b/U\x90\xeb(\x97$1\x9c\x11\x7f\xb3\xe9\xa6u\x9c\x13\xdc\xed\x7f\xe9(L]\x81\x89\xa0\x1a\xda\x01\x16R\t\x87\xbd\x0e\x9aR\xfb\n\xa8a\x82N\x87\xcd\x8f]\xcaJiAc\f*\xa7\x83\x10\x96d\x03A\\\x95;\x92\\4\xf3\xaasr2\xd9]:\xa4\xc0P\xc6\xcb\xd8') getxattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00', &(0x7f0000000780)=""/4096, 0x1000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000280)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) 2m51.210739954s ago: executing program 6 (id=36810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x17, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x17, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2m51.208170584s ago: executing program 6 (id=36811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x100000001, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0xffff1000, 0x0, 0x1, 0x1, 0x3}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) r6 = socket(0x10, 0x2, 0x0) dup2(r6, r5) (async) write$FUSE_DIRENTPLUS(r5, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) (async, rerun: 64) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) (async, rerun: 64) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r7, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m35.112753388s ago: executing program 50 (id=36811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x100000001, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0xffff1000, 0x0, 0x1, 0x1, 0x3}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) r6 = socket(0x10, 0x2, 0x0) dup2(r6, r5) (async) write$FUSE_DIRENTPLUS(r5, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) (async, rerun: 64) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) (async, rerun: 64) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r7, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 6.211571s ago: executing program 8 (id=39982): membarrier(0x8, 0x0) membarrier(0x1, 0x0) membarrier(0x40, 0x0) membarrier(0x4, 0x0) membarrier(0x4, 0x0) membarrier(0x0, 0x0) membarrier(0x10, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) membarrier(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x6, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008012}, 0x92) membarrier(0x1, 0x0) membarrier(0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x100, 0x91c, {{0x19, 0x4, 0x0, 0x3f, 0x64, 0x66, 0x0, 0xb, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0xe, [{@broadcast, 0x5}, {@multicast2, 0x1}, {@loopback, 0x8001}, {@loopback, 0x10}, {@private=0xa010102, 0x8}, {@private=0xa010102, 0x81}, {@rand_addr=0x64010102, 0x8b91}, {@broadcast, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0xf9, 0x2f, 0x1, 0x46, @private1, @mcast2, 0x700, 0x80, 0x40, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7, 0x8, 0x6, 0x64d7, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, {[@ssrr={0x89, 0x27, 0x51, [@empty, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback, @empty, @multicast1, @multicast1, @local]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@multicast2, @remote, 0x0}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x8, 0x8, 0xa482, 0x7f, {{0x1e, 0x4, 0x3, 0x1d, 0x78, 0x64, 0x0, 0x1d, 0xc71e5ef72b68ada7, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1f, 0x9b, [@private=0xa010102, @private=0xa010100, @multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x61, [@loopback, @loopback, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x1, [{@remote, 0x8}, {@rand_addr=0x64010101, 0xd9}, {@local, 0x141b}, {@private=0xa010101, 0x40}]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x8, [0x5, 0x5bd, 0x13e4]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000e002}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x18c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) membarrier(0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000800)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x8, &(0x7f0000000880)=""/4096) syz_genetlink_get_family_id$wireguard(&(0x7f0000001880), r0) membarrier(0x0, 0x0) membarrier(0x1, 0x0) membarrier(0x8, 0x0) mount$incfs(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x6028, &(0x7f0000001980)={[{@readahead={'readahead', 0x3d, 0x2}}, {@no_bf_readahead}, {@rlog_pages={'rlog_pages', 0x3d, 0x5}}, {@no_bf_cache}, {@readahead={'readahead', 0x3d, 0xafe}}, {@no_bf_readahead}], [{@fsmagic}, {@obj_user={'obj_user', 0x3d, ':\xf0-#^+'}}]}) 6.013610674s ago: executing program 8 (id=39984): syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 5.985360434s ago: executing program 8 (id=39985): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9003}, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x25b, {{0xa, 0x4, 0x3, 0x33, 0x28, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xfe, [@rand_addr=0x64010102, @remote, @multicast1]}, @noop]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@delqdisc={0xec, 0x25, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x10}, {0x8, 0xf}, {0x7, 0x10}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x40}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x74) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs], 0x0, 0x0, 0x0}) 5.893400826s ago: executing program 8 (id=39986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x4480, 0x3) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x325099, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 5.887676566s ago: executing program 8 (id=39987): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440200001d0000032cbd7000ffdbdf2508001d000000000008001d000700000008001f0003000000700014006469676573745f6e756c6c2d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020010000800000003bc5ffe526328676670f12fe871d2fe4fa2bb015a7c1f66bfacd103fe6044ee67833caa7940002006362632863616d656c6c6961290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006002000036ed347039a133003e50e3816c6f469420cf8e4a85a371781795a792030a16d44ecbc3122bbfb8bcc8f63461c1cac360a085a92a6798d6382c15c79349e3512cb694841954bd767c833089408b0002006563622861726334290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018020000d81df8bf439cb28ab0b738b9ed4a9b6c12fa7b2f5ac1af613bb2550b6eb5913c975875b976713bb33fb9e138be1b06de8c52a268a632a10c18ad44edac5fd3fc8b1443000c001c00", @ANYRES32=r3, @ANYBLOB="0000000038001700070000002cbd700028bd700026bd70002cbd7000ff7f000000080000300b00000001800000000000100000000101000000800000470008004300080001063b00abf364c08b6de886df155fd41d0ad3be0533b3d334e55b4c49d48d6bb1963af500e4d0b31bcbbe3a6582ad2882ed98355425c3e141cd81fbf2ff3000"], 0x244}}, 0x40800) r4 = syz_clone3(&(0x7f0000001600)={0x4008800, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540), {0x10}, &(0x7f0000001580)=""/64, 0x40, &(0x7f0000001840)=""/4096, &(0x7f00000015c0)=[0x0], 0x1, {r3}}, 0x58) capset(&(0x7f0000000040)={0x20080522, r4}, &(0x7f0000000080)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x10000, 0x0) unshare(0x62040200) pidfd_getfd(r3, r2, 0x0) unshare(0x80) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.876500666s ago: executing program 8 (id=39988): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004"], 0x40}}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r2, 0xffffffffffffffff, 0x0) 5.851392857s ago: executing program 51 (id=39988): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004"], 0x40}}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r2, 0xffffffffffffffff, 0x0) 3.413587644s ago: executing program 4 (id=40015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x63, &(0x7f0000000000)="b08dcfcfc741b253cf7ebf09c67fc527dccceeef35093d0f8f95502e13d9f6b5eddd2b1c2edf825a2e9d338d474ef0582b0140fd81916699bd1cf206693bd0d50eecf0f8f10eec948f0de3f25bab22e72924e51cec2cad2ea43d92603f3772e22bb45a", 0x21, 0x0, &(0x7f0000000080)="121129fb2c67eee69f1957934cb7fe8e1d3e3c4308e437319cd99dddf4d01e4a59"}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40046721, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000023}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x400}], 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x400}], 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x50, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x23}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) 3.087041481s ago: executing program 4 (id=40036): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="d08672c5444115203317a97e01daff3f", 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60540, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60540, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xbd35122ea165c321, 0x0, &(0x7f0000000500)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 3.017307002s ago: executing program 4 (id=40038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000730000400000000081"]) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="bdb3b39d1370b78f62ada9db472ddeb3a57a2a313ed37caae91de34a5e86654bea70cdb4923962c1a75b6e867f7c7aca50723a2c92978429f616c916b166253dc1cb5135c811b7aaee7b527ceb10a842d27fb26e4072d6aee0b44bdb597f71d89e453d17558fe528362ab8401320d35bf00d601bb7cc15b8a4afdc3d4db1a17fb6fdd9c491a51269eb8a7375bb4391295378ae41161b2a452e53306fbe31b11462fce982398b3027157be9d9c0ee744ebf68b980e21c8600619c7593ae0ee5e44b23b1c69c38b6a8a25daff77e3a5aa9f495490de7df8f5a81803ae3eaa5188d88ecfaa91a0757e3cbad2b233c8fe427781d9f76a4000000", 0xf8}], 0x1, 0x2) 2.900071254s ago: executing program 4 (id=40047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 2.891616954s ago: executing program 4 (id=40048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002580)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x8000000}}, 0x30) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x100, 0x8000000, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x100, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x4, 0x4, 0x9, 0x4000000000000, 0x0, 0xdc, 0x0, 0xffffffffffffffff}, {0x8}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32']) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6000) r5 = socket$netlink(0x10, 0x3, 0x0) preadv2(r5, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) r6 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0100000206010228bd7000fddbdf25000000030800b100", @ANYRES32, @ANYBLOB="14000500fc0000000000000000000000000000000800420007000000dd56727889d5d9f838aad16fbed0c9d0939ca1aacd31aab49c5f0b1d469cafc9a743c186048180aec91202c4b4b23eacf5b9286cc183fc32dceed12b6ba3321ec0e731b5302e22e0c99f8808a25c5c7917d40f3106c06ab4d07ef1b9522a213c8ce455ded7811cef1b9dc06cc7177109f9edbc7ce1078b5e7e6ba400d1d1045574218c6ac3cbd4ee91f3564c458324c93a471f2c7e9adf7bde4963199d0800e500", @ANYRES32=r11, @ANYBLOB="868756b8540013550a146bdef22c365490b45d19880c0107e39ba3f48d1efd0a71640500370a94c029ad757541f6836159235b2ed77c7b343ba40a751ec60b6339f02f05b4b089f5fc3272c904dc4f0832bf50e712ea5df9a9caa10251e5a6320d161507c21bd4972e9631bdd21b00"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.708845378s ago: executing program 4 (id=40054): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x5, "a3"}, @global=@item_4={0x3, 0x1, 0x8, "bd7ab528"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001700)={0x2c, 0x0, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000001600)={0x20, 0x1, 0x9, "331b6fe9f1bad6483c"}, 0x0}) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62a4000000"]) 1.394937763s ago: executing program 1 (id=40071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000002c40)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000380)={0x65, 0x0, 0x66, 0x46, "4b0d814e10e14464ab3517e8b7d3513391426bd994796298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83632f2f94169ae115ddd0a"}, 0x66, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) lsm_get_self_attr(0xc, &(0x7f0000000240)={0x0, 0x0, 0xe7, 0xc7, ""/199}, &(0x7f0000000080)=0xe7, 0x0) 1.322966685s ago: executing program 1 (id=40072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa0, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 1.259472466s ago: executing program 1 (id=40073): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 1.251841046s ago: executing program 1 (id=40074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6(0xa, 0x800, 0xa44) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0xd0be, 0x1, 0x2, 0x5, 0xa, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/167, 0xa7, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x24, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.224157337s ago: executing program 1 (id=40075): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1.165435938s ago: executing program 1 (id=40076): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000060932e80f94e64a18247163bb5d4dc24000107000000090400000903000000092100000001222200090581030800ff5e880dbfe71797932f43fb65ac8fdf1c51a58a72981de8a085d7dc6696e72f95"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f070c0100002a9011070900be0083"], 0x0}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r4, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) close_range(r5, r1, 0x0) 953.780402ms ago: executing program 9 (id=40082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) (async) 889.186203ms ago: executing program 9 (id=40084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r1, 0x2) close_range(r0, r0, 0x0) 884.511353ms ago: executing program 9 (id=40085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) write$vga_arbiter(r3, &(0x7f0000000100)=@other={'trylock', ' ', 'io'}, 0xb) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030f00000000000000000700"], 0x20}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)="390000001300034700a965e1c3e4ffff0100000001000000d500000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 850.275304ms ago: executing program 5 (id=40087): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/210, 0xd2}], 0x5, &(0x7f00000005c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000015c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/26, 0x1a}, {&(0x7f0000001680)=""/198, 0xc6}, {&(0x7f0000001ac0)=""/43, 0x2b}, {&(0x7f00000017c0)=""/212, 0xd4}, {&(0x7f00000018c0)=""/241, 0xf1}], 0x5}, 0x3}], 0x2, 0x40012120, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xd0}) fsopen(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 797.363905ms ago: executing program 9 (id=40088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x4, 0x9, 0x4}]}, 0xc0}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x85a9, 0xf}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 758.102716ms ago: executing program 5 (id=40089): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x480) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) setuid(r6) r7 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000080)={0x1e, 0x15, 0x5, 0x2, 0xb, 0xff, 0x3, 0x1, 0x1}) close_range(r3, r1, 0x0) 737.320377ms ago: executing program 9 (id=40090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4010054}, 0x24000048) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2e, 0xb, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0xe357, 0x8}, {0x0, @broadcast, 0xfefa, 0x0, [0x4706, 0x6]}, @tcp_ip6_spec={@private2, @remote, 0x4e22, 0x4e21, 0x6}, {0x0, @local, 0xb28a, 0x3, [0x401]}, 0xdc6, 0xe}}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00"], 0x1c}], 0x1}, 0x0) recvfrom(r3, 0x0, 0x0, 0x40000200, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0x100000a, 0x2, 0x7}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 673.368058ms ago: executing program 5 (id=40091): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r0, 0x0, 0x0) getrandom(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) write(r1, &(0x7f0000000400)="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", 0x1f000) 657.188408ms ago: executing program 9 (id=40092): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86441122}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x46c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x3}}}}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60980}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa164}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6daea208}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @private0, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b55de45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x646eac1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8d}]}, @TIPC_NLA_BEARER={0x4}]}, 0x46c}, 0x1, 0x0, 0x0, 0x8d5}, 0x4014) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) getresgid(0x0, 0x0, 0x0) (async) getresgid(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183040, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) timer_create(0x7, &(0x7f0000000540)={0x0, 0x29, 0x0, @thr={&(0x7f0000000600)="2ab4d3a19962caffd28aaa807e07e04a4eed1687db4a7cd904cd9aec7649c607cb1ab657831d6a8748942e958f2a4dbd6af15f10d7a24094196ade28bf89e7769525f9f803f243ff3950a6f8b8026f0ebeaef177bf5ede334af6fff9175508b89e53528143698089e0feb7d45ff732b4b1d681b9ebebc4e820184fac9943b17a1cc847662cd8d0aabef6f2a375b1dd62ed6b4cce35070d38a4662a39e19318a7bac4ee973870214c1e6c05998161aebc4f45e25bd5b22b34085a64057c96331087ff27042173bc005906132e5901767ffd04f37dddaa22211d701caab90d8b9142b4abda562b24e034727d0ade608814ac378bbe6ebae8", &(0x7f0000000700)="eaaa3f0b3a6977ad3e7c8c1f7f3a6e1eee785a98d666a70731956935229fb3b2f7ee027eb88c1dd220086fb01f333fb64e3b2d4fbede1f6b59bd547681f58b2f879f49cb12d16e8e7e4263d5299394678fe381a5f10b0bc4a6e04ad6526d96b0b245807cb20a2d4a15218f0c8a89ba9b5271b816a69dfa7660e120c81c45208c38440832a0aebf6376d3569dc0ed917d0a2baed2a99e494d5e82a557c1f1e8d66c1471fe38e91f40b0ed53eee8dfaeaf2e1a04d1d187e36469bd10f287a88e85fb1de56ff5cfb5e6193a"}}, &(0x7f0000000800)) (async) timer_create(0x7, &(0x7f0000000540)={0x0, 0x29, 0x0, @thr={&(0x7f0000000600)="2ab4d3a19962caffd28aaa807e07e04a4eed1687db4a7cd904cd9aec7649c607cb1ab657831d6a8748942e958f2a4dbd6af15f10d7a24094196ade28bf89e7769525f9f803f243ff3950a6f8b8026f0ebeaef177bf5ede334af6fff9175508b89e53528143698089e0feb7d45ff732b4b1d681b9ebebc4e820184fac9943b17a1cc847662cd8d0aabef6f2a375b1dd62ed6b4cce35070d38a4662a39e19318a7bac4ee973870214c1e6c05998161aebc4f45e25bd5b22b34085a64057c96331087ff27042173bc005906132e5901767ffd04f37dddaa22211d701caab90d8b9142b4abda562b24e034727d0ade608814ac378bbe6ebae8", &(0x7f0000000700)="eaaa3f0b3a6977ad3e7c8c1f7f3a6e1eee785a98d666a70731956935229fb3b2f7ee027eb88c1dd220086fb01f333fb64e3b2d4fbede1f6b59bd547681f58b2f879f49cb12d16e8e7e4263d5299394678fe381a5f10b0bc4a6e04ad6526d96b0b245807cb20a2d4a15218f0c8a89ba9b5271b816a69dfa7660e120c81c45208c38440832a0aebf6376d3569dc0ed917d0a2baed2a99e494d5e82a557c1f1e8d66c1471fe38e91f40b0ed53eee8dfaeaf2e1a04d1d187e36469bd10f287a88e85fb1de56ff5cfb5e6193a"}}, &(0x7f0000000800)=0x0) timer_delete(r5) 650.006878ms ago: executing program 5 (id=40093): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x243082, 0x0) brk(0x8000000000000008) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001600)={0x1498, 0x12, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x5, 0x6, 0x0, {0x4e21, 0x4e21, [0x0, 0x2879, 0x5, 0xfffffff3], [0x3, 0x467, 0x6, 0x6], 0x0, [0x8, 0x5]}, 0x10001, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x78, 0x1, "4f268a4c12149f95e40c64ef4dbff1335fa5f787a978950b25d72f55f6ae07e7d10ecfc8e95b28d52662c8b71a7518290be66a654965d4ea5c00a8d2804614bf07403b63a3d6c58370d289023e673be574cf185c959aa2f4dfc7c9e9c6ecf93550d178167bfc1d1b03f4b78879425ff4b0643b51"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "4ea4cd714101ef2afc3b631e4333ac1212d49d9375690b465082b316bfac267a2fdef3dac0526c5e47edde680eb20dbe895f99ba7bc4de54579241f06e9b2710422966f23adee7aa3a1b9028d5fa95946a9707ed3157cdc7bf0c9be402b6c8e769f0f9945208dc47e4ca0f1d6fb67ef264fdbe8e6f89e070146505d0f0035665e6e77686755eeabe6bbda432f385e5b1654ef3f50c09c080e2e558fa244deb6d5c070e800d4860c5a490f3d5152794eb11ec59"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "63545213fe286598ce22b00031d39e0cc35a55a51027732750db40be9656942e8a5f7152d9cf9b39f772b38aa8321d8063b8e99c01d2a01cead4b9feef099be0c33863f9e5ea61d2be195fc31703af329983685f103ebd42f3db352d9faf1a8fda74a93d6c6bee8b63e9899b386f1308bb0dcfcb434fc95fe3a11beb2cdf3837ed45410134261ae24151da2c98f10b86ae01bf3c84d64a6712d213d8b0a887bd7f06affa49f96caf81d339a4ea02015199bae4f1169ed754916f4acf53b8b90390679f97e5816cd974ff35"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "523790e0043be6d8d976c96a2c14aa297a153ae1d1b477c7a43b92dae156254cffef9d44b25c64df1ce4b1f25f731d79619fa484a320c3cdaf8513a4dd21c30ab364668280c6067b78458c67d85ca61dc7"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "229f04882789fd4dc210fbfdbf0f009b6e2a42cb3446650444721dc3a3f7c2ee1ec6e7447b4b6c7699e17cc45423974eb4c86060b32443242952f5cd9ef3f9936a319da2b696a72f16b818a93621986a761b90b5602e567b94c8963f9be61176c5f88bd54a47f99143d235f24358c4a1f48fca1b3389d3aa988d157d1f0fc9505f2f21eda227512e4321aceab2fe7356a37a117bc5636316dafc43f9c4509e377cfc243189a08ea9013d66f6d15851f2e0f6071d36339080cd7313d55348f5cdc380a35b0d1366a45ab632470b235157f9765dc2b281358f5152d5a0f5df6f3c8c0e6a2021c1610505e692693121baa18183f39122b521"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "83f94b6b1e770f3a9f2a27ff44b63b2f9c7ad6cec43556a459b44fe0bb816f9394371c0f9745d81a29c4815a140af444378d594ffc89a93dab17cfcaebf47becb9bc657164c892345230067f7ff805f5111a4a6fabef34f94ac4328f870bf278d25b90dd29a538e87dafb9337d6498113b02fb4b7ef77bdee627bdcaa6cc1adca42b83bb5453e21fe3bb6d2e00ec25bbdc52bd2c955dc19cbcb62ca2ed5f1955a189d7402d1549ead96c1e24a9c886488daf81d997e85111c2d87cee423f9a1dec3b9243bb239f0f41ba3e828daf98ac9daf079fd758540395d0e5aa0ab07b4177d3d32a321a47c4b3"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1498}, 0x1, 0x0, 0x0, 0x40084}, 0x4001) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 577.404389ms ago: executing program 5 (id=40094): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902480001010020000904000003020200fe052406ee0005240000000d240f01000000800000000000042402040905810300040503fa09058202200000000209050302"], 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r1, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x40001}}], 0x1, 0x0) accept(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x7}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 0s ago: executing program 5 (id=40095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x20000850) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) (async) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) recvfrom$inet_nvme(r3, &(0x7f0000000440)=""/189, 0xbd, 0x142, &(0x7f0000000500)=@l2tp={0x2, 0x0, @private=0xa010102}, 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000580)={{r2}, 0x4, &(0x7f00000001c0)=[0x7, 0x8, 0x9a9, 0x7fffffffffffffff], 0xffffffffffffc292, 0x0, 0x1}) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000580)={{r2}, 0x4, &(0x7f00000001c0)=[0x7, 0x8, 0x9a9, 0x7fffffffffffffff], 0xffffffffffffc292, 0x0, 0x1}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="8c510dc25174c618", 0x8, 0x0, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') kernel console output (not intermixed with test programs): LETE my_pid:645 [ 2168.783802][T11136] /dev/loop0: Can't lookup blockdev [ 2169.152296][T11184] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2169.383772][ T9143] rust_binder: 11126: removing orphan mapping 0:24 [ 2169.391768][T11194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2169.391795][T11194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 2169.391944][T11194] rust_binder: Error while translating object. [ 2169.416873][T11194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2169.423121][T11194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:649 [ 2169.533420][T11203] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 2169.552178][T11205] SELinux: policydb string length 1633771784 does not match expected length 8 [ 2169.569420][T11205] SELinux: failed to load policy [ 2169.576312][T11205] rust_binder: Error while translating object. [ 2169.576337][T11205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2169.582570][T11205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:660 [ 2169.656124][T11215] netlink: 'syz.8.35740': attribute type 16 has an invalid length. [ 2169.673170][T11215] netlink: 'syz.8.35740': attribute type 2 has an invalid length. [ 2169.680996][T11215] netlink: 64086 bytes leftover after parsing attributes in process `syz.8.35740'. [ 2169.699956][T11216] netlink: 'syz.4.35738': attribute type 16 has an invalid length. [ 2169.707917][T11216] netlink: 'syz.4.35738': attribute type 3 has an invalid length. [ 2169.715733][T11216] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.35738'. [ 2169.745916][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.35740'. [ 2170.602443][ T36] kauditd_printk_skb: 162 callbacks suppressed [ 2170.602461][ T36] audit: type=1400 audit(2000051526.945:145546): avc: denied { setcurrent } for pid=11286 comm="syz.4.35764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2170.650269][T11296] netlink: 'syz.4.35767': attribute type 11 has an invalid length. [ 2170.658513][T11296] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 2170.658530][T11296] rust_binder: Error while translating object. [ 2170.670528][T11296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2170.676690][T11296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679 [ 2171.112108][T11318] rust_binder: Write failure EFAULT in pid:697 [ 2171.239429][ T36] audit: type=1326 audit(2000051527.546:145547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.9.35781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2c518eec9 code=0x0 [ 2171.303518][ T36] audit: type=1400 audit(2000051527.602:145548): avc: denied { listen } for pid=11344 comm="syz.4.35782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2171.346220][ T36] audit: type=1400 audit(2000051527.640:145549): avc: denied { create } for pid=11349 comm="syz.4.35783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2171.358043][T11350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 2171.366054][T11351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 2171.366255][ T36] audit: type=1400 audit(2000051527.640:145550): avc: denied { create } for pid=11349 comm="syz.4.35783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2171.475330][T11362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:730 [ 2171.545483][T11363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2171.554674][T11363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:730 [ 2172.264316][T11411] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 2172.276362][T11413] 9pnet_fd: Insufficient options for proto=fd [ 2172.283393][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.35804'. [ 2172.611417][ T36] audit: type=1400 audit(2000051528.831:145551): avc: denied { ioctl } for pid=11450 comm="syz.6.35821" path="socket:[424099]" dev="sockfs" ino=424099 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2172.629866][T11451] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 2172.647378][T11451] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 2172.765860][T11459] can0: slcan on ptm0. [ 2172.809867][T11459] can0 (unregistered): slcan off ptm0. [ 2173.135393][T11518] SELinux: failed to load policy [ 2173.320760][ T36] audit: type=1400 audit(2000051529.497:145552): avc: denied { create } for pid=11532 comm="syz.4.35835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 2173.388253][T11538] fuse: Bad value for 'group_id' [ 2173.393253][T11538] fuse: Bad value for 'group_id' [ 2173.467373][T11536] rust_binder: Error in use_page_slow: ESRCH [ 2173.467402][T11536] rust_binder: use_range failure ESRCH [ 2173.473658][T11536] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2173.479131][T11536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2173.487363][T11536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:755 [ 2173.856482][T11545] netlink: 104 bytes leftover after parsing attributes in process `syz.9.35839'. [ 2174.384647][ T36] audit: type=1400 audit(2000051530.492:145553): avc: denied { map } for pid=11559 comm="syz.4.35844" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2174.419811][T11562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35845'. [ 2174.488004][T11566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.35847'. [ 2174.616112][T11568] sit0: entered promiscuous mode [ 2174.622933][T11568] netlink: 'syz.9.35848': attribute type 1 has an invalid length. [ 2174.642809][T11568] netlink: 1 bytes leftover after parsing attributes in process `syz.9.35848'. [ 2174.708513][T11572] 9pnet_fd: Insufficient options for proto=fd [ 2174.722898][T11576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2174.722965][T11576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:776 [ 2174.729411][T11578] 9pnet_fd: Insufficient options for proto=fd [ 2174.743357][T11580] batadv_slave_1: entered promiscuous mode [ 2174.756758][T11583] binder: Bad value for 'defcontext' [ 2174.762565][T11580] tipc: Cannot configure node identity twice [ 2174.769261][T11579] batadv_slave_1: left promiscuous mode [ 2174.872736][ T36] audit: type=1400 audit(2000051530.952:145554): avc: denied { connect } for pid=11602 comm="syz.8.35863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2174.939785][ T36] audit: type=1400 audit(2000051531.017:145555): avc: denied { map } for pid=11604 comm="syz.8.35864" path="socket:[424449]" dev="sockfs" ino=424449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2176.005323][T11633] overlayfs: failed to clone upperpath [ 2176.071044][ T7625] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2176.153801][T30040] Bluetooth: hci0: Frame reassembly failed (-84) [ 2176.160291][T30040] Bluetooth: hci0: Frame reassembly failed (-84) [ 2176.230925][ T7625] usb 5-1: Using ep0 maxpacket: 8 [ 2176.237050][ T7625] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2176.245399][ T7625] usb 5-1: config 179 has no interface number 0 [ 2176.251647][ T7625] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2176.263084][ T7625] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2176.274516][ T7625] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2176.285771][ T7625] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2176.299130][ T7625] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2176.306142][ T7625] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2176.315190][ T7625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.326200][ T7625] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input152 [ 2176.515513][T11639] overlayfs: failed to clone upperpath [ 2176.521320][T11640] overlayfs: failed to clone upperpath [ 2176.603604][T11646] netlink: 196 bytes leftover after parsing attributes in process `syz.8.35879'. [ 2176.658828][T11659] /dev/loop0: Can't lookup blockdev [ 2176.676443][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.35885'. [ 2176.695125][T18030] usb 5-1: USB disconnect, device number 86 [ 2176.695238][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2176.709389][T18030] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2176.952058][T11690] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2176.963387][T11690] tc_dump_action: action bad kind [ 2176.983220][T11698] 9pnet_fd: Insufficient options for proto=fd [ 2176.990292][T11698] 9pnet_fd: Insufficient options for proto=fd [ 2177.251540][T11708] overlayfs: missing 'lowerdir' [ 2177.321199][T11710] can0: slcan on ptm1. [ 2177.351102][T11710] can0 (unregistered): slcan off ptm1. [ 2177.481354][T11743] rust_binder: 802: no such ref 3 [ 2177.486473][T11743] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2177.493738][T11743] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2177.502016][T11743] rust_binder: Write failure EFAULT in pid:802 [ 2177.590534][T11758] rust_binder: Error while translating object. [ 2177.597139][T11758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2177.606291][T11758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:807 [ 2177.949798][T11791] netlink: 5 bytes leftover after parsing attributes in process `syz.9.35921'. [ 2178.352038][T24125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2178.352036][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 2178.574896][T11804] rust_binder: Write failure EINVAL in pid:814 [ 2178.820520][T11829] netlink: 'syz.9.35933': attribute type 6 has an invalid length. [ 2178.834728][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35933'. [ 2178.914661][T11835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665 [ 2178.933917][T11838] rust_binder: Write failure EFAULT in pid:667 [ 2178.955688][T11842] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2178.969368][T11842] rust_binder: Write failure EINVAL in pid:669 [ 2179.032446][T11847] rust_binder: Failed copying remainder into alloc: EFAULT [ 2179.038669][T11847] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 2179.046050][T11847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2179.054300][T11847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:825 [ 2179.166061][T11840] netlink: 393 bytes leftover after parsing attributes in process `syz.9.35938'. [ 2179.193691][T11856] can0: slcan on ptm0. [ 2179.247137][T11855] can0 (unregistered): slcan off ptm0. [ 2179.410033][T11891] rust_binder: 11889 RLIMIT_NICE not set [ 2179.413349][T18653] rust_binder: 11888: removing orphan mapping 0:4240 [ 2179.734872][ T36] audit: type=1400 audit(2000051535.511:145556): avc: denied { audit_read } for pid=11902 comm="syz.9.35949" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2180.164597][T11907] netlink: 680 bytes leftover after parsing attributes in process `syz.8.35950'. [ 2180.326390][T11918] netlink: 'syz.9.35955': attribute type 4 has an invalid length. [ 2180.334245][T11918] netlink: 3581 bytes leftover after parsing attributes in process `syz.9.35955'. [ 2180.430965][ T36] audit: type=1400 audit(2000051536.177:145557): avc: denied { read } for pid=11934 comm="syz.9.35962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2180.487247][ T45] kernel read not supported for file inotify (pid: 45 comm: kworker/1:1) [ 2180.535164][T11956] fuse: Bad value for 'fd' [ 2180.547554][T11963] overlayfs: failed to clone upperpath [ 2180.584554][ T36] audit: type=1400 audit(2000051536.318:145558): avc: denied { create } for pid=11969 comm="syz.9.35973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2180.605115][T11970] tipc: Cannot configure node identity twice [ 2180.728895][T18653] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2180.888759][T18653] usb 5-1: Using ep0 maxpacket: 8 [ 2180.895138][T18653] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2180.904851][T18653] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 2180.913937][T18653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.921939][T18653] usb 5-1: Product: syz [ 2180.926117][T18653] usb 5-1: Manufacturer: syz [ 2180.930689][T18653] usb 5-1: SerialNumber: syz [ 2181.205582][T11980] rust_binder: 11942 RLIMIT_NICE not set [ 2181.205953][T11980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:853 [ 2181.220809][T18653] usb 5-1: USB disconnect, device number 87 [ 2181.251624][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35983'. [ 2181.301252][T11996] rust_binder: 11993 RLIMIT_NICE not set [ 2181.311829][T11998] rust_binder: 861: no such ref 0 [ 2181.322738][T11998] rust_binder: 861: no such ref 0 [ 2181.333538][T11998] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2181.345023][T11998] rust_binder: 861: no such ref 64 [ 2181.350368][T11998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:861 [ 2181.351229][T12006] +$<: renamed from bridge0 (while UP) [ 2181.369477][T12006] overlayfs: failed to clone upperpath [ 2181.399904][T12019] rust_binder: Error while translating object. [ 2181.399936][T12019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2181.406138][T12019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:873 [ 2181.733486][T12050] binder: Unknown parameter 'defcontext01777777777777777777777' [ 2181.804175][ T36] audit: type=1400 audit(2000051537.453:145559): avc: denied { listen } for pid=12054 comm="syz.4.36004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2182.320537][T12077] tipc: Started in network mode [ 2182.325418][T12077] tipc: Node identity , cluster identity 4711 [ 2182.331645][T12077] tipc: Failed to obtain node identity [ 2182.337101][T12077] tipc: Enabling of bearer rejected, failed to enable media [ 2182.346040][T12077] netlink: 5 bytes leftover after parsing attributes in process `syz.6.36013'. [ 2182.355745][T12077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2182.379559][T12084] 9pnet_fd: Insufficient options for proto=fd [ 2182.393727][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12088 comm=syz.6.36016 [ 2182.488317][T12117] tipc: Started in network mode [ 2182.493288][T12117] tipc: Node identity 4, cluster identity 4711 [ 2182.500031][T12117] tipc: Node number set to 4 [ 2182.506257][ T36] audit: type=1400 audit(2000051538.119:145560): avc: denied { shutdown } for pid=12116 comm="syz.6.36027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2182.539971][T12127] tc_dump_action: action bad kind [ 2182.709578][T12140] rust_binder: Write failure EFAULT in pid:901 [ 2182.791888][T12151] rust_binder: 12150 RLIMIT_NICE not set [ 2182.852331][T12157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2182.860995][T24787] rust_binder: 12149: removing orphan mapping 0:24 [ 2182.867519][T12160] cgroup: Unknown subsys name 'perf_event' [ 2182.884612][T12162] rust_binder: 918: no such ref 3 [ 2182.889672][T12162] rust_binder: 918: no such ref 1 [ 2182.939128][T12170] rust_binder: Error while translating object. [ 2182.939171][T12170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2182.945363][T12170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:918 [ 2183.910185][T12218] rust_binder: Error in use_page_slow: ESRCH [ 2183.919148][T12218] rust_binder: use_range failure ESRCH [ 2183.919163][T12218] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 2183.924656][T12218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2183.932864][T12218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:926 [ 2183.952031][ T36] audit: type=1401 audit(2000051539.470:145561): op=fscreate invalid_context=CFA7AE [ 2183.952074][T12220] rust_binder: Write failure EFAULT in pid:930 [ 2184.392669][T12250] ip6gretap0: mtu less than device minimum [ 2184.962688][ T36] audit: type=1400 audit(2000000000.440:145562): avc: denied { lock } for pid=12289 comm="syz.4.36083" path="socket:[425782]" dev="sockfs" ino=425782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2184.997717][ T36] audit: type=1326 audit(2000000000.469:145563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.4.36085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcca38eec9 code=0x0 [ 2185.521646][T12337] veth1: entered allmulticast mode [ 2186.066489][ T36] audit: type=1400 audit(2000000001.463:145564): avc: denied { accept } for pid=12352 comm="syz.6.36103" path="socket:[426784]" dev="sockfs" ino=426784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2186.371918][T12364] netlink: 'syz.8.36106': attribute type 4 has an invalid length. [ 2186.409125][T12336] veth1: left allmulticast mode [ 2186.609745][T12382] overlayfs: failed to clone upperpath [ 2187.178688][T12439] veth1_macvtap: left promiscuous mode [ 2187.184209][T12439] macsec0: entered allmulticast mode [ 2187.203076][T12439] veth1_macvtap: entered promiscuous mode [ 2187.208806][T12439] veth1_macvtap: entered allmulticast mode [ 2187.214846][T12439] macsec0: left allmulticast mode [ 2187.219885][T12439] veth1_macvtap: left allmulticast mode [ 2187.824441][T12483] veth1: entered allmulticast mode [ 2187.841625][T12482] veth1: left allmulticast mode [ 2187.867378][T12487] netlink: 44 bytes leftover after parsing attributes in process `syz.6.36148'. [ 2187.943677][T12506] tipc: Enabling of bearer rejected, failed to enable media [ 2188.139093][T12528] fuse: Bad value for 'fd' [ 2188.182168][ T36] audit: type=1400 audit(2000000003.452:145565): avc: denied { relabelfrom } for pid=12535 comm="syz.9.36166" name="NETLINK" dev="sockfs" ino=428119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2188.206980][ T36] audit: type=1400 audit(2000000003.452:145566): avc: denied { relabelto } for pid=12535 comm="syz.9.36166" name="NETLINK" dev="sockfs" ino=428119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 2188.358657][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36170'. [ 2189.019301][ T36] audit: type=1400 audit(2000000004.240:145567): avc: denied { read } for pid=12573 comm="syz.4.36179" name="file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2190.491087][T12668] netlink: 'syz.6.36214': attribute type 1 has an invalid length. [ 2190.543941][T12670] netlink: 80 bytes leftover after parsing attributes in process `syz.6.36215'. [ 2190.578262][T12674] tipc: Enabling of bearer rejected, failed to enable media [ 2190.595700][T12679] tipc: Enabling of bearer rejected, failed to enable media [ 2190.707174][T12698] 9pnet_fd: Insufficient options for proto=fd [ 2190.727999][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36226'. [ 2190.745577][T12708] IPv6: NLM_F_CREATE should be specified when creating new route [ 2190.753379][T12708] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2190.911621][T12728] overlayfs: failed to clone upperpath [ 2191.051306][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36239'. [ 2191.460034][ T36] audit: type=1400 audit(2000000006.529:145568): avc: denied { setattr } for pid=12781 comm="syz.6.36256" name="PING" dev="sockfs" ino=428566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2192.116512][T12837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12837 comm=syz.8.36273 [ 2192.129972][T12837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12837 comm=syz.8.36273 [ 2192.136964][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36275'. [ 2192.179540][T12852] overlayfs: failed to clone upperpath [ 2192.381285][ T36] audit: type=1400 audit(2000000008.398:145569): avc: denied { shutdown } for pid=12893 comm="syz.6.36294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2192.404961][T12895] 9pnet_fd: Insufficient options for proto=fd [ 2192.424167][T12906] overlay: Unknown parameter '/' [ 2192.492107][T12922] netlink: 37 bytes leftover after parsing attributes in process `syz.4.36304'. [ 2192.515783][T12926] fuse: Unknown parameter 'user_Y}%2SoܺxWtL)@^1[>2L1_Yfo%%Bhd; I<5' [ 2192.751255][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.8.36310'. [ 2193.062425][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36316'. [ 2193.086910][T12958] netlink: 388 bytes leftover after parsing attributes in process `syz.4.36319'. [ 2193.354872][T12973] tipc: Enabling of bearer rejected, failed to enable media [ 2193.982932][T13013] fuse: Bad value for 'fd' [ 2194.052212][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36340'. [ 2194.268740][ T36] audit: type=1326 audit(2000000010.162:145570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.8.36327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa112d8eec9 code=0x7fc00000 [ 2194.292557][ T36] audit: type=1326 audit(2000000010.162:145571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.8.36327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa112d8eec9 code=0x7fc00000 [ 2194.370637][ T36] audit: type=1400 audit(2000000010.256:145572): avc: denied { lock } for pid=13033 comm="syz.8.36345" path="socket:[427727]" dev="sockfs" ino=427727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2194.602253][T13051] netlink: 44 bytes leftover after parsing attributes in process `syz.6.36351'. [ 2194.675377][T13069] netlink: 'syz.9.36357': attribute type 5 has an invalid length. [ 2194.683318][T13069] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.36357'. [ 2194.705143][T13074] futex_wake_op: syz.8.36358 tries to shift op by -1; fix this program [ 2194.734924][T13078] netlink: 72 bytes leftover after parsing attributes in process `syz.9.36359'. [ 2194.770983][T13084] veth0: entered promiscuous mode [ 2194.776178][T13084] veth0: left promiscuous mode [ 2194.891568][T13089] netlink: 165 bytes leftover after parsing attributes in process `syz.4.36364'. [ 2194.908183][T13091] netlink: 'syz.4.36365': attribute type 16 has an invalid length. [ 2194.908265][T13092] netlink: 'syz.4.36365': attribute type 16 has an invalid length. [ 2194.916110][T13091] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.36365'. [ 2194.924041][T13092] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.36365'. [ 2194.973960][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36369'. [ 2195.034725][T13105] devpts: called with bogus options [ 2195.098098][T13123] incfs: Error accessing: ./file0. [ 2195.103290][T13123] incfs: mount failed -20 [ 2195.962836][T13175] overlayfs: failed to clone upperpath [ 2196.143217][T13220] veth1: entered allmulticast mode [ 2197.030957][T13219] veth1: left allmulticast mode [ 2197.129704][T13277] erofs: dax options not supported [ 2197.303072][T13302] 9pnet_fd: Insufficient options for proto=fd [ 2197.657492][ T36] audit: type=1400 audit(2000000013.342:145573): avc: denied { create } for pid=13317 comm="syz.8.36446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2197.666179][T13318] netlink: 188 bytes leftover after parsing attributes in process `syz.8.36446'. [ 2198.591356][T13392] overlayfs: failed to clone upperpath [ 2199.692534][T13442] Invalid ELF header len 1 [ 2199.734541][T13444] netlink: 'syz.9.36488': attribute type 46 has an invalid length. [ 2199.861462][T13488] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36503'. [ 2199.871011][T13488] overlayfs: conflicting options: metacopy=off,verity=require [ 2199.893956][T13491] tipc: Enabling of bearer rejected, media not registered [ 2200.298299][T13515] overlayfs: failed to clone lowerpath [ 2200.304544][T13515] overlayfs: failed to clone upperpath [ 2200.633481][T13567] netlink: 16 bytes leftover after parsing attributes in process `syz.8.36534'. [ 2200.721770][T13572] netlink: 'syz.6.36535': attribute type 153 has an invalid length. [ 2201.388747][T13615] 9pnet: Could not find request transport: bd [ 2201.411596][T13619] overlayfs: failed to clone lowerpath [ 2201.425925][T13623] x_tables: duplicate underflow at hook 1 [ 2201.443970][T13628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13628 comm=syz.6.36557 [ 2201.506957][T13634] overlayfs: failed to clone upperpath [ 2202.255445][T13707] netlink: 'syz.6.36588': attribute type 11 has an invalid length. [ 2202.263489][T13708] netlink: 'syz.6.36588': attribute type 11 has an invalid length. [ 2202.353637][T13730] tmpfs: Unknown parameter '' [ 2202.424409][T13751] overlayfs: failed to clone upperpath [ 2202.445207][ T36] audit: type=1400 audit(2000000017.836:145574): avc: denied { relabelto } for pid=13757 comm="syz.8.36606" name="459" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2202.474854][ T36] audit: type=1400 audit(2000000017.836:145575): avc: denied { associate } for pid=13757 comm="syz.8.36606" name="459" dev="tmpfs" ino=2416 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 2202.510204][ T36] audit: type=1400 audit(2000000017.893:145576): avc: denied { write } for pid=9023 comm="syz-executor" name="459" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2202.536712][ T36] audit: type=1400 audit(2000000017.893:145577): avc: denied { remove_name } for pid=9023 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2202.564013][ T36] audit: type=1400 audit(2000000017.893:145578): avc: denied { rmdir } for pid=9023 comm="syz-executor" name="459" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2209.247244][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36609'. [ 2209.324892][T13795] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 2209.714004][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36634'. [ 2209.723039][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36634'. [ 2209.834167][T13850] 9pnet_fd: Insufficient options for proto=fd [ 2209.847405][T13852] netlink: 84 bytes leftover after parsing attributes in process `syz.9.36639'. [ 2209.866200][ T36] audit: type=1400 audit(2000000024.798:145579): avc: denied { create } for pid=13853 comm="syz.9.36640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2210.655728][ T36] audit: type=1326 audit(2000000025.539:145580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.8.36653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fa112d8eec9 code=0x0 [ 2211.554866][T13956] IPv6: NLM_F_CREATE should be specified when creating new route [ 2211.563961][T13956] overlayfs: failed to clone lowerpath [ 2211.999243][T13988] overlayfs: failed to clone upperpath [ 2212.073386][T13990] 9pnet_fd: Insufficient options for proto=fd [ 2212.553171][T14025] 9pnet_fd: Insufficient options for proto=fd [ 2212.650806][ T36] audit: type=1326 audit(2000000027.406:145581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.4.36709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcca38eec9 code=0x0 [ 2213.523082][T14067] netlink: 72 bytes leftover after parsing attributes in process `syz.9.36720'. [ 2213.604421][T14090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=14090 comm=syz.9.36728 [ 2214.390768][ T36] audit: type=1326 audit(2000000029.048:145582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14057 comm="syz.6.36717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66c58eec9 code=0x7fc00000 [ 2215.143856][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.36749'. [ 2215.152911][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36749'. [ 2215.963815][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.8.36765'. [ 2215.982121][ T36] audit: type=1326 audit(2000000030.540:145583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.8.36766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa112d8eec9 code=0x0 [ 2216.013489][T14197] overlayfs: failed to clone upperpath [ 2216.302244][T14209] fuse: Bad value for 'group_id' [ 2216.307301][T14209] fuse: Bad value for 'group_id' [ 2216.312906][T14209] netlink: 'syz.6.36771': attribute type 16 has an invalid length. [ 2216.321049][T14209] netlink: 'syz.6.36771': attribute type 2 has an invalid length. [ 2216.328900][T14209] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.36771'. [ 2217.352464][T14259] overlayfs: failed to clone lowerpath [ 2217.392246][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.36789'. [ 2217.401320][T14261] bridge_slave_1: left allmulticast mode [ 2217.407159][T14261] bridge_slave_1: left promiscuous mode [ 2217.412804][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.420455][T14261] bridge_slave_0: left allmulticast mode [ 2217.426091][T14261] bridge_slave_0: left promiscuous mode [ 2217.431994][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.072379][T14275] batadv_slave_1: entered promiscuous mode [ 2218.079879][T14274] batadv_slave_1: left promiscuous mode [ 2218.402320][T14301] sit0: entered promiscuous mode [ 2218.420354][T14301] netlink: 'syz.4.36803': attribute type 1 has an invalid length. [ 2218.428234][T14301] netlink: 1 bytes leftover after parsing attributes in process `syz.4.36803'. [ 2218.469744][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36804'. [ 2219.012173][ T36] audit: type=1400 audit(2000000033.373:145584): avc: denied { create } for pid=14314 comm="syz.6.36809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2219.043630][T24784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=24784 comm=kworker/0:11 [ 2221.192674][T14429] netlink: 16 bytes leftover after parsing attributes in process `syz.8.36848'. [ 2221.225616][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.36849'. [ 2221.720454][T14490] netlink: 'syz.9.36867': attribute type 4 has an invalid length. [ 2221.728761][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36867'. [ 2221.801625][T14507] 9pnet: Could not find request transport: xen [ 2221.904102][T14518] tmpfs: Bad value for 'uid' [ 2221.908727][T14518] tmpfs: Bad value for 'uid' [ 2223.100460][T14592] devpts: called with bogus options [ 2223.369403][T14597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.36906'. [ 2223.388776][ T36] audit: type=1400 audit(2000000037.482:145585): avc: denied { shutdown } for pid=14595 comm="syz.4.36906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2223.750455][T14610] overlayfs: disabling nfs_export due to verity=require [ 2223.757463][T14610] overlayfs: failed to clone upperpath [ 2224.206144][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.235915][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.244172][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.252654][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.260632][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.268604][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.276552][T14645] netlink: 'syz.4.36923': attribute type 4 has an invalid length. [ 2224.664388][T14664] netlink: 96 bytes leftover after parsing attributes in process `syz.8.36931'. [ 2224.722155][T14669] netlink: 'syz.8.36932': attribute type 27 has an invalid length. [ 2225.171250][T14706] /dev/loop0: Can't lookup blockdev [ 2225.184976][ T36] audit: type=1400 audit(2000000039.162:145586): avc: denied { accept } for pid=14707 comm="syz.9.36944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2225.870958][T14745] netlink: 44 bytes leftover after parsing attributes in process `syz.8.36959'. [ 2226.116613][T14765] overlayfs: failed to clone upperpath [ 2226.122436][T14765] overlayfs: failed to clone upperpath [ 2226.128305][T14765] overlayfs: failed to clone upperpath [ 2226.134152][T14765] overlayfs: failed to clone upperpath [ 2226.140045][T14765] overlayfs: failed to clone upperpath [ 2226.145894][T14765] overlayfs: failed to clone upperpath [ 2226.152011][T14765] overlayfs: failed to clone upperpath [ 2226.157827][T14765] overlayfs: failed to clone upperpath [ 2226.163536][T14765] overlayfs: failed to clone upperpath [ 2226.169226][T14765] overlayfs: failed to clone upperpath [ 2226.174918][T14765] overlayfs: failed to clone upperpath [ 2226.180851][T14765] overlayfs: failed to clone upperpath [ 2226.186816][T14765] overlayfs: failed to clone upperpath [ 2226.192607][T14765] overlayfs: failed to clone upperpath [ 2226.198309][T14765] overlayfs: failed to clone upperpath [ 2226.204122][T14765] overlayfs: failed to clone upperpath [ 2226.209941][T14765] overlayfs: failed to clone upperpath [ 2226.215660][T14765] overlayfs: failed to clone upperpath [ 2226.221466][T14765] overlayfs: failed to clone upperpath [ 2226.227121][T14765] overlayfs: failed to clone upperpath [ 2226.232845][T14765] overlayfs: failed to clone upperpath [ 2226.238478][T14765] overlayfs: failed to clone upperpath [ 2226.244256][T14765] overlayfs: failed to clone upperpath [ 2226.249930][T14765] overlayfs: failed to clone upperpath [ 2226.255682][T14765] overlayfs: failed to clone upperpath [ 2226.261323][T14765] overlayfs: failed to clone upperpath [ 2226.267049][T14765] overlayfs: failed to clone upperpath [ 2226.272672][T14765] overlayfs: failed to clone upperpath [ 2226.278570][T14765] overlayfs: failed to clone upperpath [ 2226.284378][T14765] overlayfs: failed to clone upperpath [ 2226.290069][T14765] overlayfs: failed to clone upperpath [ 2226.295822][T14765] overlayfs: failed to clone upperpath [ 2226.301437][T14765] overlayfs: failed to clone upperpath [ 2226.340758][T14784] netlink: 'syz.9.36972': attribute type 16 has an invalid length. [ 2226.348754][T14784] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.36972'. [ 2226.506008][T14796] netlink: 124 bytes leftover after parsing attributes in process `syz.8.36976'. [ 2226.900513][T14798] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2226.924529][ T36] audit: type=1400 audit(2000000040.803:145587): avc: denied { map } for pid=14804 comm="syz.9.36979" path="socket:[432053]" dev="sockfs" ino=432053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2227.061368][T14810] fuse: Bad value for 'fd' [ 2227.088412][T14815] fuseblk: Unknown parameter 'groqg:00000000000000000000' [ 2227.154482][T14829] netlink: 'syz.4.36989': attribute type 4 has an invalid length. [ 2227.188685][T14838] x_tables: unsorted entry at hook 2 [ 2227.195512][T14838] overlayfs: failed to clone upperpath [ 2227.651115][T14876] incfs: Options parsing error. -22 [ 2227.658727][T14876] incfs: mount failed -22 [ 2227.840407][T14888] tipc: Started in network mode [ 2227.848829][T14888] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 2227.881134][T14888] tipc: Enabling of bearer rejected, failed to enable media [ 2228.130716][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.37017'. [ 2228.964176][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 2228.971248][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.978298][T14965] bridge_slave_0: entered allmulticast mode [ 2228.984692][T14965] bridge_slave_0: entered promiscuous mode [ 2228.990981][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2228.998018][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.005550][T14965] bridge_slave_1: entered allmulticast mode [ 2229.011714][T14965] bridge_slave_1: entered promiscuous mode [ 2229.053576][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2229.060636][T14965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.067915][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.074930][T14965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.096460][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.103881][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.113066][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.120121][ T7984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.131530][T19080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2229.138592][T19080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.171418][T14965] veth0_vlan: entered promiscuous mode [ 2229.184585][T14965] veth1_macvtap: entered promiscuous mode [ 2229.503365][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37047'. [ 2229.521355][T15005] 9pnet_fd: Insufficient options for proto=fd [ 2229.566963][T18183] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 2229.705470][T18183] usb 10-1: device descriptor read/64, error -71 [ 2229.961124][T18183] usb 10-1: device descriptor read/64, error -71 [ 2230.094452][T15020] netlink: 'syz.4.37052': attribute type 2 has an invalid length. [ 2230.163316][T15028] netlink: 'syz.8.37055': attribute type 6 has an invalid length. [ 2230.171216][T15028] IPv6: NLM_F_CREATE should be specified when creating new route [ 2230.189699][T15030] netlink: 44 bytes leftover after parsing attributes in process `syz.8.37056'. [ 2230.196786][T15032] netlink: 104 bytes leftover after parsing attributes in process `syz.4.37057'. [ 2230.219930][T18183] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 2230.247331][T15040] netlink: 'syz.8.37061': attribute type 4 has an invalid length. [ 2230.267211][T15040] netlink: 'syz.8.37061': attribute type 4 has an invalid length. [ 2230.374090][T18183] usb 10-1: device descriptor read/64, error -71 [ 2230.420781][T15049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.427914][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.435116][T15049] bridge_slave_0: entered allmulticast mode [ 2230.441505][T15049] bridge_slave_0: entered promiscuous mode [ 2230.448112][T15049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.456505][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.464715][T15049] bridge_slave_1: entered allmulticast mode [ 2230.471141][T15049] bridge_slave_1: entered promiscuous mode [ 2230.540956][T15049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.548054][T15049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2230.555329][T15049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.562406][T15049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2230.588488][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.595977][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.618109][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.625181][T11037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2230.642888][T18183] usb 10-1: device descriptor read/64, error -71 [ 2230.664500][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.671585][T11037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2230.723184][T15049] veth0_vlan: entered promiscuous mode [ 2230.770800][T18183] usb usb10-port1: attempt power cycle [ 2230.789191][T15049] veth1_macvtap: entered promiscuous mode [ 2230.925721][T15065] rust_binder: Error in use_page_slow: ESRCH [ 2230.925740][T15065] rust_binder: use_range failure ESRCH [ 2230.931934][T15065] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2230.937749][T15065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2230.945811][T15065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 2230.978909][ T36] audit: type=1400 audit(2000000046.611:145588): avc: denied { create } for pid=15068 comm="syz.4.37067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2231.046020][ T36] audit: type=1400 audit(2000000046.667:145589): avc: denied { bind } for pid=15070 comm="syz.4.37068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2231.134116][T18183] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 2231.155278][T18183] usb 10-1: device descriptor read/8, error -71 [ 2231.293690][T18183] usb 10-1: device descriptor read/8, error -71 [ 2231.516509][T18653] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2231.548618][T18183] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 2231.592548][T18183] usb 10-1: device descriptor read/8, error -71 [ 2231.687980][T18653] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 2231.696165][T18653] usb 5-1: config 0 has no interface number 1 [ 2231.702261][T18653] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2231.712118][T18653] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2231.723522][T18653] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2231.732947][T18653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2231.740979][T18653] usb 5-1: SerialNumber: syz [ 2231.746339][T18653] usb 5-1: config 0 descriptor?? [ 2231.751388][T18183] usb 10-1: device descriptor read/8, error -71 [ 2231.868079][T18183] usb usb10-port1: unable to enumerate USB device [ 2232.007855][T15081] rust_binder: Failed to allocate buffer. len:4294968088, is_oneway:true [ 2232.007881][T15081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2232.016317][T15081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:16 [ 2232.029064][T18653] usb 5-1: Found UVC 0.00 device (0002:0000) [ 2232.044954][T18653] usb 5-1: No valid video chain found. [ 2232.051851][T18653] usb 5-1: USB disconnect, device number 88 [ 2232.848402][T24784] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2233.007908][T24784] usb 5-1: Using ep0 maxpacket: 16 [ 2233.015566][T24784] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2233.024900][T24784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.033395][T24784] usb 5-1: Product: syz [ 2233.037545][T24784] usb 5-1: Manufacturer: syz [ 2233.042154][T24784] usb 5-1: SerialNumber: syz [ 2233.047281][T24784] usb 5-1: config 0 descriptor?? [ 2233.053248][T24784] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2233.060956][T24784] usb 5-1: Detected FT-X [ 2233.266803][T24784] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2233.702016][T24784] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2233.764263][ T7625] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 2233.916111][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.924790][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.933138][ T7625] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2233.933431][T15111] rust_binder: Error while translating object. [ 2233.942400][T15111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2233.942434][ T7625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.948642][T15111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 2233.966522][ T7625] usb 10-1: config 0 descriptor?? [ 2233.975181][T18183] usb 5-1: USB disconnect, device number 89 [ 2233.989396][T18183] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2233.999029][T18183] ftdi_sio 5-1:0.0: device disconnected [ 2234.196484][ T7625] usb 10-1: Cannot read MAC address [ 2234.201791][ T7625] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2234.214501][ T7625] usb 10-1: USB disconnect, device number 118 [ 2234.558851][ T36] audit: type=1400 audit(2000000049.962:145590): avc: denied { ioctl } for pid=15142 comm="syz.4.37091" path="/10/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2234.741767][T15163] rust_binder: Error while translating object. [ 2234.741797][T15163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2234.748226][T15163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:15 [ 2234.949962][T15182] rust_binder: Write failure EFAULT in pid:23 [ 2234.970858][T15185] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 2235.036683][T15190] kvm: pic: non byte write [ 2235.218938][T15202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2235.260124][T15202] rust_binder: Error in use_page_slow: ESRCH [ 2235.266649][T15202] rust_binder: use_range failure ESRCH [ 2235.272690][T15202] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2235.281313][T15202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2235.289384][T15202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:40 [ 2235.311761][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.325816][T15208] rust_binder: Write failure EFAULT in pid:42 [ 2235.328008][T15203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.341825][T15203] bridge_slave_0: entered allmulticast mode [ 2235.348246][T15203] bridge_slave_0: entered promiscuous mode [ 2235.354849][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.361987][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.369126][T15203] bridge_slave_1: entered allmulticast mode [ 2235.375740][T15203] bridge_slave_1: entered promiscuous mode [ 2235.475652][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.482761][T15203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2235.490086][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.497120][T15203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2235.543183][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.550460][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.559420][T30040] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.566474][T30040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2235.575857][T30040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.582909][T30040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2235.616834][T15203] veth0_vlan: entered promiscuous mode [ 2235.632856][T15227] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59673 sclass=netlink_xfrm_socket pid=15227 comm=syz.4.37120 [ 2235.633696][T15203] veth1_macvtap: entered promiscuous mode [ 2235.760990][ T36] audit: type=1400 audit(2000000051.098:145591): avc: denied { lock } for pid=15235 comm="syz.5.37122" path="socket:[435163]" dev="sockfs" ino=435163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2236.297696][T15239] netlink: 180 bytes leftover after parsing attributes in process `syz.4.37123'. [ 2236.316046][ T36] audit: type=1326 audit(2000000051.614:145592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.4.37124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe354b8eec9 code=0x0 [ 2237.205207][T18183] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 2237.232707][T15291] netlink: 'syz.4.37140': attribute type 5 has an invalid length. [ 2237.366027][T18183] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2237.375126][T18183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.383848][T18183] usb 6-1: config 0 descriptor?? [ 2237.398519][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.8.37144'. [ 2237.616717][T18183] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2237.641949][T18183] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2237.653172][T18183] asix 6-1:0.0: probe with driver asix failed with error -71 [ 2237.662444][T15320] input: syz0 as /devices/virtual/input/input153 [ 2237.662898][T18183] usb 6-1: USB disconnect, device number 85 [ 2237.799301][T15330] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 2238.046799][T18183] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 2238.062173][T18653] usb 10-1: new low-speed USB device number 119 using dummy_hcd [ 2238.229022][T18653] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2238.238169][T18653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.246284][T18183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2238.257185][T18183] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2238.270269][T18183] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2238.279616][T18653] usb 10-1: config 0 descriptor?? [ 2238.284759][T18183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.295266][T18183] usb 6-1: config 0 descriptor?? [ 2238.301836][T15323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2238.311436][T18183] usbhid 6-1:0.0: can't add hid device: -22 [ 2238.317571][T18183] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 2238.359577][T15338] tipc: Enabling of bearer rejected, failed to enable media [ 2238.499012][T15354] SELinux: Context system_u:object_r:dbusd_etc_t:s0 is not valid (left unmapped). [ 2238.508691][ T36] audit: type=1400 audit(2000000053.679:145593): avc: denied { relabelto } for pid=15353 comm="syz.4.37161" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dbusd_etc_t:s0" [ 2238.509378][T18653] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2238.536481][T15323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.547511][T18653] asix 10-1:0.0: probe with driver asix failed with error -71 [ 2238.555095][ T36] audit: type=1400 audit(2000000053.679:145594): avc: denied { associate } for pid=15353 comm="syz.4.37161" name="file0" dev="tmpfs" ino=210 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dbusd_etc_t:s0" [ 2238.564485][T18653] usb 10-1: USB disconnect, device number 119 [ 2238.591094][T15323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.617010][ T36] audit: type=1400 audit(2000000053.763:145595): avc: denied { rmdir } for pid=15049 comm="syz-executor" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dbusd_etc_t:s0" [ 2238.649565][T24787] usb 6-1: USB disconnect, device number 86 [ 2239.283661][T15400] binder: Binderfs stats mode cannot be changed during a remount [ 2239.410335][T18653] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 2239.584211][T18653] usb 10-1: Using ep0 maxpacket: 8 [ 2239.590846][T18653] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2239.602775][T18653] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 2239.611037][T18653] usb 10-1: config 6 has no interface number 0 [ 2239.644754][T18653] usb 10-1: config 6 interface 248 has no altsetting 0 [ 2239.654124][T18653] usb 10-1: New USB device found, idVendor=245a, idProduct=5210, bcdDevice= 1.01 [ 2239.676694][T18653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.687131][T18653] usb 10-1: Product: syz [ 2239.696019][T18653] usb 10-1: Manufacturer: syz [ 2239.706467][T18653] usb 10-1: SerialNumber: syz [ 2239.809519][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.816663][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.823758][T15432] bridge_slave_0: entered allmulticast mode [ 2239.830485][T15432] bridge_slave_0: entered promiscuous mode [ 2239.837386][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.844453][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2239.851744][T15432] bridge_slave_1: entered allmulticast mode [ 2239.858326][T15432] bridge_slave_1: entered promiscuous mode [ 2239.932566][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.939648][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2239.946967][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.954018][T15432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2239.964396][T18653] usb 10-1: USB disconnect, device number 120 [ 2239.987546][T30040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.004155][T30040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.013669][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.020747][ T7984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2240.032351][T30040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.039400][T30040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2240.066462][T15432] veth0_vlan: entered promiscuous mode [ 2240.076621][T15432] veth1_macvtap: entered promiscuous mode [ 2240.157834][T15451] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2240.171877][T15454] rust_binder: Error in use_page_slow: ESRCH [ 2240.179933][T15454] rust_binder: use_range failure ESRCH [ 2240.185969][T15454] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2240.191623][T15454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2240.199789][T15454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 2240.479430][T15476] random: crng reseeded on system resumption [ 2240.511874][ T36] audit: type=1107 audit(2000000055.556:145596): pid=15475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2240.622547][T15478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2240.629656][T15478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 2240.662836][T15486] random: crng reseeded on system resumption [ 2240.708346][T15488] fuseblk: Unknown parameter 'O' [ 2240.737618][T15503] can0: slcan on ptm0. [ 2240.839504][T15503] can0 (unregistered): slcan off ptm0. [ 2240.846473][T15527] rust_binder: 15515 RLIMIT_NICE not set [ 2240.896580][ T36] audit: type=1400 audit(2000000055.913:145597): avc: denied { search } for pid=15536 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2240.929069][T15527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 2240.932459][ T36] audit: type=1400 audit(2000000055.913:145598): avc: denied { read } for pid=15536 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2240.994550][ T36] audit: type=1400 audit(2000000055.913:145599): avc: denied { open } for pid=15536 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2241.020321][T11037] Bluetooth: hci0: Frame reassembly failed (-84) [ 2241.035772][ T36] audit: type=1400 audit(2000000055.913:145600): avc: denied { getattr } for pid=15536 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2241.061571][ T36] audit: type=1400 audit(2000000055.913:145601): avc: denied { getattr } for pid=15528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2241.242769][ T45] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2241.391955][ T45] usb 9-1: device descriptor read/64, error -71 [ 2241.506117][T15594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2241.506146][T15594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 2241.515585][T24787] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2241.647502][ T45] usb 9-1: device descriptor read/64, error -71 [ 2241.668801][T24787] usb 6-1: device descriptor read/64, error -71 [ 2241.903161][ T45] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2241.924467][T24787] usb 6-1: device descriptor read/64, error -71 [ 2242.041996][ T45] usb 9-1: device descriptor read/64, error -71 [ 2242.180146][T24787] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2242.297575][ T45] usb 9-1: device descriptor read/64, error -71 [ 2242.318635][T24787] usb 6-1: device descriptor read/64, error -71 [ 2242.345979][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 2242.346002][ T36] audit: type=1400 audit(2000000057.274:145660): avc: denied { read write } for pid=15596 comm="syz.9.37229" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 2242.380871][ T36] audit: type=1400 audit(2000000057.274:145661): avc: denied { open } for pid=15596 comm="syz.9.37229" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 2242.409266][ T36] audit: type=1400 audit(2000000057.274:145662): avc: denied { map } for pid=15596 comm="syz.9.37229" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=437177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2242.433991][ T36] audit: type=1400 audit(2000000057.274:145663): avc: denied { read write } for pid=15596 comm="syz.9.37229" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=437177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2242.434357][ T45] usb usb9-port1: attempt power cycle [ 2242.460084][ T36] audit: type=1400 audit(2000000057.284:145664): avc: denied { ioctl } for pid=15596 comm="syz.9.37229" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 2242.495615][ T36] audit: type=1400 audit(2000000057.312:145665): avc: denied { ioctl } for pid=15598 comm="syz.9.37230" path="socket:[437184]" dev="sockfs" ino=437184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2242.521602][ T36] audit: type=1400 audit(2000000057.312:145666): avc: denied { setopt } for pid=15598 comm="syz.9.37230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2242.541799][ T36] audit: type=1400 audit(2000000057.387:145667): avc: denied { bind } for pid=15598 comm="syz.9.37230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2242.562170][ T36] audit: type=1400 audit(2000000057.387:145668): avc: denied { listen } for pid=15598 comm="syz.9.37230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2242.659585][T24787] usb 6-1: device descriptor read/64, error -71 [ 2242.776909][T24787] usb usb6-port1: attempt power cycle [ 2242.819331][ T45] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2242.841736][ T45] usb 9-1: device descriptor read/8, error -71 [ 2242.980640][ T45] usb 9-1: device descriptor read/8, error -71 [ 2243.138944][T24787] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2243.149549][T24125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2243.161394][T24787] usb 6-1: device descriptor read/8, error -71 [ 2243.234944][ T45] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2243.257203][ T45] usb 9-1: device descriptor read/8, error -71 [ 2243.299786][T24787] usb 6-1: device descriptor read/8, error -71 [ 2243.311496][ T36] audit: type=1400 audit(2000000058.185:145669): avc: denied { create } for pid=15601 comm="syz.9.37231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2243.339496][T15602] netlink: 32 bytes leftover after parsing attributes in process `syz.9.37231'. [ 2243.390195][T15609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=15609 comm=syz.9.37234 [ 2243.404279][ T45] usb 9-1: device descriptor read/8, error -71 [ 2243.522516][ T45] usb usb9-port1: unable to enumerate USB device [ 2243.565030][T24787] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2243.602122][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.37240'. [ 2243.618169][T24787] usb 6-1: device descriptor read/8, error -71 [ 2243.757808][T24787] usb 6-1: device descriptor read/8, error -71 [ 2243.874053][T24787] usb usb6-port1: unable to enumerate USB device [ 2244.465832][T15649] rust_binder: Error while translating object. [ 2244.465876][T15649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2244.472251][T15649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 2244.481868][T15649] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2244.490957][T15649] rust_binder: Read failure Err(EFAULT) in pid:43 [ 2245.393124][T15665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2245.418654][T15666] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 2245.425103][T15666] rust_binder: Error while translating object. [ 2245.454471][T15666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2245.460713][T15666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 2245.515811][T15674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2245.536482][T15674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:53 [ 2245.617218][T15680] tmpfs: Unsupported parameter 'mpol' [ 2245.658258][T15680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2245.658289][T15680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 2245.750685][T15683] rust_binder: Error while translating object. [ 2245.770202][T15683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2245.784458][T15683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 2247.205396][T15742] netlink: 'syz.8.37279': attribute type 6 has an invalid length. [ 2247.514317][T15763] netlink: 228 bytes leftover after parsing attributes in process `syz.8.37286'. [ 2247.680473][ T36] kauditd_printk_skb: 37444 callbacks suppressed [ 2247.680491][ T36] audit: type=1326 audit(2000000062.287:183111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.712871][ T36] audit: type=1326 audit(2000000062.287:183112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.736607][ T36] audit: type=1326 audit(2000000062.287:183113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.760371][ T36] audit: type=1326 audit(2000000062.287:183114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.784138][ T36] audit: type=1326 audit(2000000062.287:183115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.808176][ T36] audit: type=1326 audit(2000000062.287:183116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.837454][ T36] audit: type=1326 audit(2000000062.287:183117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.861246][ T36] audit: type=1326 audit(2000000062.287:183118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.885023][ T36] audit: type=1326 audit(2000000062.287:183119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2247.908793][ T36] audit: type=1326 audit(2000000062.287:183120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.5.37250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x50000 [ 2248.006310][T15785] can0: slcan on ptm0. [ 2248.051509][T15785] can0 (unregistered): slcan off ptm0. [ 2248.329922][T15805] 9pnet_fd: Insufficient options for proto=fd [ 2249.339864][T15827] tipc: Enabling of bearer rejected, failed to enable media [ 2249.348262][T15826] tipc: Enabling of bearer rejected, failed to enable media [ 2249.368687][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.37311'. [ 2250.608634][T15908] netlink: 92 bytes leftover after parsing attributes in process `syz.9.37340'. [ 2250.660814][T15911] rust_binder: Error while translating object. [ 2250.660844][T15911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2250.667019][T15911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 2250.968888][T24784] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2251.139311][T24784] usb 6-1: Using ep0 maxpacket: 8 [ 2251.145585][T24784] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 2251.153902][T24784] usb 6-1: config 250 has an invalid interface number: 0 but max is -1 [ 2251.162362][T24784] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.172661][T24784] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2251.182718][T24784] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2251.191737][T24784] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2251.199995][T24784] usb 6-1: Product: syz [ 2251.204169][T24784] usb 6-1: SerialNumber: syz [ 2251.211520][T24784] hub 6-1:250.0: bad descriptor, ignoring hub [ 2251.217640][T24784] hub 6-1:250.0: probe with driver hub failed with error -5 [ 2251.529510][T15928] 8021q: VLANs not supported on ip_vti0 [ 2251.544210][ T45] usb 6-1: USB disconnect, device number 91 [ 2251.972761][T15934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2251.972790][T15934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158 [ 2252.115054][T15955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15955 comm=syz.4.37358 [ 2252.151194][T15958] netlink: 104 bytes leftover after parsing attributes in process `syz.5.37359'. [ 2252.163738][T15958] can0: slcan on ptm0. [ 2252.194789][T15958] can0 (unregistered): slcan off ptm0. [ 2252.619234][T15981] netlink: 13 bytes leftover after parsing attributes in process `syz.8.37369'. [ 2253.108463][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 2253.108482][ T36] audit: type=1400 audit(2000000067.375:183217): avc: denied { unlink } for pid=15992 comm="syz.5.37373" name="#a760" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2253.137908][ T36] audit: type=1400 audit(2000000067.375:183218): avc: denied { mount } for pid=15992 comm="syz.5.37373" name="/" dev="overlay" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2253.160559][ T36] audit: type=1400 audit(2000000067.412:183219): avc: denied { unmount } for pid=15203 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2253.215423][ T36] audit: type=1400 audit(2000000067.478:183220): avc: denied { read write } for pid=15999 comm="syz.5.37374" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2253.239381][ T36] audit: type=1400 audit(2000000067.478:183221): avc: denied { open } for pid=15999 comm="syz.5.37374" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2253.263239][ T36] audit: type=1400 audit(2000000067.478:183222): avc: denied { ioctl } for pid=15999 comm="syz.5.37374" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2253.288224][ T36] audit: type=1400 audit(2000000067.478:183223): avc: denied { connect } for pid=16013 comm="syz.4.37378" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2253.309368][ T36] audit: type=1400 audit(2000000067.534:183224): avc: denied { mount } for pid=16024 comm="syz.8.37383" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2253.348461][T16030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2253.348486][T16030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:182 [ 2253.449670][T16037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.37387'. [ 2253.717241][T24784] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2253.876984][T24784] usb 6-1: Using ep0 maxpacket: 8 [ 2253.883070][T24784] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 2253.891467][T24784] usb 6-1: config 250 has an invalid interface number: 0 but max is -1 [ 2253.899736][T24784] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.909998][T24784] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2253.920079][T24784] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2253.929124][T24784] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2253.937378][T24784] usb 6-1: Product: syz [ 2253.941561][T24784] usb 6-1: SerialNumber: syz [ 2253.948034][T24784] hub 6-1:250.0: bad descriptor, ignoring hub [ 2253.954144][T24784] hub 6-1:250.0: probe with driver hub failed with error -5 [ 2254.431050][T24784] usb 6-1: reset high-speed USB device number 92 using dummy_hcd [ 2254.529805][T19080] veth0_to_team: left allmulticast mode [ 2254.535380][T19080] veth0_to_team: left promiscuous mode [ 2254.540951][T19080] bridge0: port 3(veth0_to_team) entered disabled state [ 2254.548318][T19080] bridge_slave_1: left allmulticast mode [ 2254.554003][T19080] bridge_slave_1: left promiscuous mode [ 2254.559632][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.567010][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.602167][T24784] usb 6-1: device firmware changed [ 2254.607430][T24784] usb 6-1: USB disconnect, device number 92 [ 2254.620850][T16058] vlan0: entered promiscuous mode [ 2254.622608][ T36] audit: type=1400 audit(2000000068.792:183225): avc: denied { getopt } for pid=16056 comm="syz.4.37396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2254.626023][T16058] vlan0: entered allmulticast mode [ 2254.651874][T16058] veth0_vlan: entered allmulticast mode [ 2254.708026][T19080] tipc: Left network mode [ 2254.815211][T19080] veth0_vlan: left promiscuous mode [ 2254.931618][T24784] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2255.091314][T24784] usb 6-1: Using ep0 maxpacket: 8 [ 2255.097501][T24784] usb 6-1: config 0 has no interfaces? [ 2255.104152][T24784] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2255.113241][T24784] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2255.121551][T24784] usb 6-1: Product: syz [ 2255.125734][T24784] usb 6-1: SerialNumber: syz [ 2255.130893][T24784] usb 6-1: config 0 descriptor?? [ 2255.355885][T16089] netlink: 'syz.4.37410': attribute type 25 has an invalid length. [ 2255.887683][T24787] usb 6-1: USB disconnect, device number 93 [ 2255.950906][ T36] audit: type=1400 audit(2000000070.050:183226): avc: denied { append } for pid=16104 comm="syz.5.37417" name="binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2256.003065][T16112] can0: slcan on ptm0. [ 2256.038257][T16123] netlink: 388 bytes leftover after parsing attributes in process `syz.4.37423'. [ 2256.078065][T16112] can0 (unregistered): slcan off ptm0. [ 2256.124571][T16141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2256.124811][T16141] rust_binder: Error while translating object. [ 2256.134144][T16141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2256.140638][T16141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:203 [ 2256.422809][T24787] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2256.593197][T24787] usb 6-1: Using ep0 maxpacket: 8 [ 2256.599271][T24787] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2256.607543][T24787] usb 6-1: config 179 has no interface number 0 [ 2256.613792][T24787] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2256.625359][T24787] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2256.636640][T24787] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2256.647993][T24787] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2256.658281][T24787] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2256.671777][T24787] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2256.681182][T24787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.682861][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37442'. [ 2256.692809][T16146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2256.706371][T24787] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 2256.928718][T16146] rust_binder: Write failure EINVAL in pid:206 [ 2256.929087][T18183] usb 6-1: USB disconnect, device number 94 [ 2257.075047][T16239] overlayfs: failed to resolve './file1': -2 [ 2257.124182][T16254] overlayfs: failed to clone upperpath [ 2257.129942][T16256] overlayfs: failed to clone upperpath [ 2257.130792][T16255] fuse: Unknown parameter 'LUZf<' [ 2257.719506][T16306] overlay: Bad value for 'workdir' [ 2257.754189][T24787] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2257.915884][T24787] usb 6-1: Using ep0 maxpacket: 8 [ 2257.922128][T24787] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 2257.930649][T24787] usb 6-1: config 250 has an invalid interface number: 0 but max is -1 [ 2257.939240][T24787] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2257.949549][T24787] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2257.965520][T24787] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2257.974640][T24787] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2257.983525][T24787] usb 6-1: Product: syz [ 2257.988223][T24787] usb 6-1: SerialNumber: syz [ 2258.000670][T24787] hub 6-1:250.0: bad descriptor, ignoring hub [ 2258.006763][T24787] hub 6-1:250.0: probe with driver hub failed with error -5 [ 2258.499976][T18653] usb 6-1: reset high-speed USB device number 95 using dummy_hcd [ 2258.540348][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 2258.540365][ T36] audit: type=1400 audit(2000000072.472:183275): avc: denied { create } for pid=16363 comm="syz.8.37495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 2258.660328][T18653] usb 6-1: device firmware changed [ 2258.665625][T18653] usb 6-1: USB disconnect, device number 95 [ 2258.979161][T18653] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2259.138914][T18653] usb 6-1: Using ep0 maxpacket: 8 [ 2259.145008][T18653] usb 6-1: config 0 has no interfaces? [ 2259.151602][T18653] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2259.160779][T18653] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2259.169019][T18653] usb 6-1: Product: syz [ 2259.173275][T18653] usb 6-1: SerialNumber: syz [ 2259.181833][T18653] usb 6-1: config 0 descriptor?? [ 2259.332925][T16419] /dev/sr0: Can't lookup blockdev [ 2259.347518][T16423] overlayfs: failed to clone upperpath [ 2259.389649][T16431] tipc: Enabling of bearer rejected, failed to enable media [ 2259.405290][T18653] usb 6-1: USB disconnect, device number 96 [ 2259.423959][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.37518'. [ 2259.488076][T16437] SELinux: Context system_u:object_r:auditd_log_t:s0 is not valid (left unmapped). [ 2259.497743][ T36] audit: type=1400 audit(2000000073.383:183276): avc: denied { relabelto } for pid=16436 comm="syz.8.37520" name="file0" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 2259.524846][ T36] audit: type=1400 audit(2000000073.383:183277): avc: denied { associate } for pid=16436 comm="syz.8.37520" name="file0" dev="tmpfs" ino=665 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_log_t:s0" [ 2259.552699][T16441] 9pnet_fd: Insufficient options for proto=fd [ 2259.552696][ T36] audit: type=1400 audit(2000000073.383:183278): avc: denied { ioctl } for pid=16436 comm="syz.8.37520" path="/120/file0" dev="tmpfs" ino=665 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 2259.552727][ T36] audit: type=1400 audit(2000000073.383:183279): avc: denied { setattr } for pid=16436 comm="syz.8.37520" name="file0" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 2259.613892][ T36] audit: type=1400 audit(2000000073.383:183280): avc: denied { unlink } for pid=15432 comm="syz-executor" name="file0" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 2259.969661][T16447] netlink: 68 bytes leftover after parsing attributes in process `syz.5.37523'. [ 2260.067322][ T36] audit: type=1400 audit(2000000073.918:183281): avc: denied { getopt } for pid=16464 comm="syz.5.37532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2260.088969][ T36] audit: type=1400 audit(2000000073.937:183282): avc: denied { create } for pid=16464 comm="syz.5.37532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2260.448396][ T36] audit: type=1400 audit(2000000074.266:183283): avc: denied { accept } for pid=16491 comm="syz.5.37542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2260.454518][T16492] netlink: 40 bytes leftover after parsing attributes in process `syz.5.37542'. [ 2260.982779][T16501] 9pnet_fd: Insufficient options for proto=fd [ 2261.386185][ T36] audit: type=1400 audit(2000000075.148:183284): avc: denied { read } for pid=16504 comm="syz.8.37547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2261.551470][T16524] 9pnet_fd: Insufficient options for proto=fd [ 2261.893337][T16550] 9pnet_fd: Insufficient options for proto=fd [ 2262.087688][T16587] 9pnet_fd: p9_fd_create_unix (16587): problem connecting socket: ./file0: -111 [ 2262.124345][T16593] netlink: 148 bytes leftover after parsing attributes in process `syz.8.37573'. [ 2270.208266][T16640] 9pnet_fd: Insufficient options for proto=fd [ 2270.260002][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 2270.260021][ T36] audit: type=1400 audit(2000000339.484:183298): avc: denied { mount } for pid=16655 comm="syz.4.37598" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2270.275800][T16657] overlayfs: failed to clone upperpath [ 2270.294552][ T36] audit: type=1400 audit(2000000339.493:183299): avc: denied { ioctl } for pid=16652 comm="syz.5.37596" path="socket:[439553]" dev="sockfs" ino=439553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2270.385998][T16692] netlink: 'syz.8.37609': attribute type 1 has an invalid length. [ 2270.395056][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.8.37609'. [ 2270.452194][T16697] netlink: 68 bytes leftover after parsing attributes in process `syz.5.37610'. [ 2270.632652][T16727] overlayfs: failed to clone upperpath [ 2271.389983][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.37634'. [ 2271.719285][ T36] audit: type=1400 audit(2000000340.844:183300): avc: denied { shutdown } for pid=16792 comm="syz.4.37645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2271.871566][T16804] virtiofs: Unknown parameter 'always' [ 2271.889276][T16807] veth1: entered allmulticast mode [ 2271.908513][ T36] audit: type=1400 audit(2000000341.023:183301): avc: denied { map } for pid=16811 comm="syz.8.37652" path="socket:[439912]" dev="sockfs" ino=439912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2271.965835][T16815] veth1: left allmulticast mode [ 2272.158844][T16837] overlayfs: failed to clone upperpath [ 2272.165192][T16838] overlayfs: failed to clone upperpath [ 2272.202869][T16849] 9pnet_fd: Insufficient options for proto=fd [ 2272.270931][ T36] audit: type=1400 audit(2000000342.374:183302): avc: denied { read } for pid=16850 comm="syz.5.37665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2272.454124][ T36] audit: type=1400 audit(2000000342.533:183303): avc: denied { bind } for pid=16861 comm="syz.8.37668" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2272.474737][ T36] audit: type=1400 audit(2000000342.533:183304): avc: denied { name_bind } for pid=16861 comm="syz.8.37668" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2272.496218][ T36] audit: type=1400 audit(2000000342.533:183305): avc: denied { node_bind } for pid=16861 comm="syz.8.37668" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2272.854448][ T36] audit: type=1326 audit(2000000342.918:183306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a198eec9 code=0x50000 [ 2272.878001][ T36] audit: type=1326 audit(2000000342.918:183307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a198eec9 code=0x50000 [ 2274.373833][T16918] veth1: entered allmulticast mode [ 2274.601659][T16953] devpts: called with bogus options [ 2274.930174][T16981] /dev/loop0: Can't lookup blockdev [ 2275.018312][T16989] fuse: Bad value for 'fd' [ 2275.023880][T16989] syz_tun: tun_net_xmit 1510 [ 2275.029395][T16989] syz_tun: tun_net_xmit 130 [ 2275.226345][T16914] veth1: left allmulticast mode [ 2275.599270][ T36] kauditd_printk_skb: 31741 callbacks suppressed [ 2275.599287][ T36] audit: type=1326 audit(2000000345.489:215049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.632847][ T36] audit: type=1326 audit(2000000345.517:215050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.656277][ T36] audit: type=1326 audit(2000000345.517:215051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.679722][ T36] audit: type=1326 audit(2000000345.517:215052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.703153][ T36] audit: type=1326 audit(2000000345.517:215053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.726621][ T36] audit: type=1326 audit(2000000345.517:215054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.750063][ T36] audit: type=1326 audit(2000000345.517:215055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.773484][ T36] audit: type=1326 audit(2000000345.517:215056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.797021][ T36] audit: type=1326 audit(2000000345.517:215057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2275.820459][ T36] audit: type=1326 audit(2000000345.517:215058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.9.37674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7a198d97f code=0x50000 [ 2276.131241][T17073] overlayfs: failed to clone upperpath [ 2276.277733][T17103] sock: sock_timestamping_bind_phc: sock not bind to device [ 2276.660266][T17133] overlayfs: failed to clone upperpath [ 2276.870022][T17161] incfs: Options parsing error. -22 [ 2276.875251][T17161] incfs: mount failed -22 [ 2276.889167][T17163] netlink: 76 bytes leftover after parsing attributes in process `syz.5.37762'. [ 2276.898253][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.37762'. [ 2276.908126][T17163] 9pnet_fd: Insufficient options for proto=fd [ 2276.927183][T17167] tmpfs: Unknown parameter '0xffffffffffffffff' [ 2277.156357][T17172] netlink: 3 bytes leftover after parsing attributes in process `syz.9.37766'. [ 2277.166196][T17172] tipc: Started in network mode [ 2277.171064][T17172] tipc: Node identity 1, cluster identity 4 [ 2277.176976][T17172] tipc: Node number set to 1 [ 2277.181595][T17172] tipc: Cannot configure node identity twice [ 2277.562290][T17221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=17221 comm=syz.4.37786 [ 2277.837760][T17223] tipc: Started in network mode [ 2277.842651][T17223] tipc: Node identity ac14142f, cluster identity 4711 [ 2277.849566][T17223] tipc: New replicast peer: 0.0.0.0 [ 2277.854909][T17223] tipc: Enabled bearer , priority 10 [ 2277.878996][T17230] 9pnet_fd: Insufficient options for proto=fd [ 2277.907853][T17235] netlink: 680 bytes leftover after parsing attributes in process `syz.5.37791'. [ 2278.137789][T18183] syz_tun: tun_net_xmit 110 [ 2278.200064][T18653] syz_tun: tun_net_xmit 110 [ 2278.435990][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.37832'. [ 2278.445012][T17360] erspan0: default FDB implementation only supports local addresses [ 2278.871580][T18183] syz_tun: tun_net_xmit 110 [ 2279.042039][T24783] tipc: Node number set to 2886997039 [ 2279.145394][T17402] netlink: 'syz.9.37844': attribute type 28 has an invalid length. [ 2279.163858][T17407] 9pnet_fd: Insufficient options for proto=fd [ 2279.262565][T17435] devpts: called with bogus options [ 2280.058230][T17492] netlink: 60 bytes leftover after parsing attributes in process `syz.9.37876'. [ 2280.336143][T17507] overlayfs: failed to clone upperpath [ 2280.435153][T17515] 9pnet_fd: Insufficient options for proto=fd [ 2280.904921][T17546] 9pnet_fd: Insufficient options for proto=fd [ 2280.965868][ T36] kauditd_printk_skb: 2556 callbacks suppressed [ 2280.965886][ T36] audit: type=1326 audit(2000033118.526:217615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.4.37900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x7ffc0000 [ 2280.996684][ T36] audit: type=1326 audit(2000033118.526:217616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.4.37900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x7ffc0000 [ 2281.020501][ T36] audit: type=1326 audit(2000033118.545:217617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.4.37900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe354b8eec9 code=0x7ffc0000 [ 2281.044254][ T36] audit: type=1326 audit(2000033118.545:217618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.4.37900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x7ffc0000 [ 2281.068072][ T36] audit: type=1326 audit(2000033118.545:217619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.4.37900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x7ffc0000 [ 2281.991414][ T36] audit: type=1326 audit(2000033119.483:217620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.5.37911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8eec9 code=0x0 [ 2282.406544][T17596] incfs: Options parsing error. -22 [ 2282.411802][T17596] incfs: mount failed -22 [ 2283.199272][ T36] audit: type=1326 audit(2000033120.628:217621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17594 comm="syz.4.37912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x7fc00000 [ 2283.288270][ T36] audit: type=1326 audit(2000033120.703:217622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.8.37921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x0 [ 2283.320163][ T36] audit: type=1400 audit(2000033120.740:217623): avc: denied { create } for pid=17618 comm="syz.4.37922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2283.338315][T17619] 9pnet_fd: Insufficient options for proto=fd [ 2283.340044][ T36] audit: type=1400 audit(2000033120.750:217624): avc: denied { mounton } for pid=17622 comm="syz.9.37923" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2283.999828][T17667] overlayfs: failed to clone lowerpath [ 2284.290916][T17693] sit0: entered promiscuous mode [ 2284.297102][T17693] netlink: 'syz.9.37946': attribute type 1 has an invalid length. [ 2284.304979][T17693] netlink: 1 bytes leftover after parsing attributes in process `syz.9.37946'. [ 2284.899855][T17743] fuse: Unknown parameter 'audit' [ 2285.490049][T17762] veth0_virt_wifi: entered allmulticast mode [ 2285.498660][T17761] veth0_virt_wifi: left allmulticast mode [ 2287.241239][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.38001'. [ 2288.358839][T17907] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12312 sclass=netlink_xfrm_socket pid=17907 comm=syz.9.38020 [ 2288.510797][T17919] overlayfs: failed to clone upperpath [ 2288.533600][T17923] tipc: Enabling of bearer rejected, failed to enable media [ 2289.062580][T17966] netlink: 'syz.9.38041': attribute type 12 has an invalid length. [ 2289.067215][T17968] fuse: Unknown parameter 'g;c' [ 2289.169660][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 2289.169677][ T36] audit: type=1400 audit(2000033126.229:217667): avc: denied { map } for pid=17972 comm="syz.4.38044" path="socket:[442242]" dev="sockfs" ino=442242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2289.199384][ T36] audit: type=1400 audit(2000033126.229:217668): avc: denied { accept } for pid=17972 comm="syz.4.38044" path="socket:[442242]" dev="sockfs" ino=442242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2289.257138][T17979] netlink: 'syz.4.38047': attribute type 6 has an invalid length. [ 2289.265043][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38047'. [ 2289.592930][ T36] audit: type=1400 audit(2000033126.614:217669): avc: denied { create } for pid=17999 comm="syz.5.38054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2289.869452][T18048] veth0_to_team: entered promiscuous mode [ 2289.875327][T18048] veth0_to_team: entered allmulticast mode [ 2289.882666][T18046] netlink: 'syz.8.38069': attribute type 15 has an invalid length. [ 2290.278956][T18069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=18069 comm=syz.4.38077 [ 2290.668315][T18073] kthread_run failed with err -4 [ 2290.673530][T18074] veth1: entered allmulticast mode [ 2290.682006][T18074] veth1: left allmulticast mode [ 2290.719901][T18083] 9pnet_fd: Insufficient options for proto=fd [ 2290.961660][ T36] audit: type=1326 audit(2000033127.908:217670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.5.38094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31bbd8eec9 code=0x0 [ 2291.020731][ T36] audit: type=1400 audit(2000033127.955:217671): avc: denied { create } for pid=18127 comm="syz.8.38095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2291.287991][ T36] audit: type=1400 audit(2000033128.209:217672): avc: denied { getopt } for pid=18190 comm="syz.8.38115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2291.328549][T18201] IPv6: syztnl0: Disabled Multicast RS [ 2291.636565][T18219] netlink: 'syz.8.38124': attribute type 11 has an invalid length. [ 2291.701698][T18225] bpf: Bad value for 'gid' [ 2291.706207][T18226] bpf: Bad value for 'gid' [ 2292.070950][ T36] audit: type=1326 audit(2000033128.950:217673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.9.38108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a198eec9 code=0x7fc00000 [ 2292.467934][T18270] netlink: 56 bytes leftover after parsing attributes in process `syz.9.38142'. [ 2292.602263][T18280] overlay: Bad value for 'uuid' [ 2292.677096][T18284] netlink: 'syz.4.38146': attribute type 32 has an invalid length. [ 2292.685031][T18284] netlink: 'syz.4.38146': attribute type 32 has an invalid length. [ 2292.768208][T18291] netlink: 188 bytes leftover after parsing attributes in process `syz.4.38149'. [ 2292.788040][ T36] audit: type=1400 audit(2000033129.616:217674): avc: denied { create } for pid=18292 comm="syz.4.38150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2292.824039][T11037] tipc: Left network mode [ 2292.931120][T11037] veth1_macvtap: left promiscuous mode [ 2292.936677][T11037] veth0_vlan: left promiscuous mode [ 2293.559953][T18344] batadv_slave_1: entered promiscuous mode [ 2293.566787][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.8.38170'. [ 2293.612689][T18343] batadv_slave_1: left promiscuous mode [ 2294.695888][T18382] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 2294.705602][T18382] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2294.717190][T18382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2295.308824][T18388] 9pnet_fd: Insufficient options for proto=fd [ 2295.601767][ T36] audit: type=1400 audit(2000033132.252:217675): avc: denied { nlmsg_tty_audit } for pid=18397 comm="syz.5.38190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2295.865272][ T36] audit: type=1400 audit(2000033132.505:217676): avc: denied { read } for pid=18415 comm="syz.4.38197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2296.970529][ T36] audit: type=1400 audit(2000033133.542:217677): avc: denied { bind } for pid=18495 comm="syz.4.38227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2297.198220][T18499] tipc: Trying to set illegal importance in message [ 2297.366467][T18520] overlay: Unknown parameter 'silent' [ 2297.375030][ T36] audit: type=1326 audit(2000033133.917:217678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.400122][ T36] audit: type=1326 audit(2000033133.917:217679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.410681][T18527] netlink: 'syz.9.38239': attribute type 1 has an invalid length. [ 2297.424695][ T36] audit: type=1326 audit(2000033133.917:217680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.455535][ T36] audit: type=1326 audit(2000033133.917:217681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.479278][ T36] audit: type=1326 audit(2000033133.917:217682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.493161][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.9.38239'. [ 2297.503046][ T36] audit: type=1326 audit(2000033133.917:217683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.535767][ T36] audit: type=1326 audit(2000033133.917:217684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.5.38236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31bbd8eec9 code=0x7ffc0000 [ 2297.604579][T18545] cgroup: Name too long [ 2297.725430][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38253'. [ 2297.753812][T18572] netlink: 'syz.4.38255': attribute type 1 has an invalid length. [ 2298.186936][T18587] veth1: entered allmulticast mode [ 2298.321291][T18599] fuse: Unknown parameter 'roo' [ 2298.940608][T18606] x_tables: duplicate underflow at hook 4 [ 2298.946428][T18606] x_tables: duplicate underflow at hook 4 [ 2298.952215][T18606] x_tables: duplicate underflow at hook 4 [ 2298.957987][T18606] x_tables: duplicate underflow at hook 4 [ 2298.963745][T18606] x_tables: duplicate underflow at hook 4 [ 2298.969471][T18606] x_tables: duplicate underflow at hook 4 [ 2298.975390][T18606] x_tables: duplicate underflow at hook 4 [ 2298.981475][T18606] x_tables: duplicate underflow at hook 4 [ 2298.987292][T18606] x_tables: duplicate underflow at hook 4 [ 2298.993015][T18606] x_tables: duplicate underflow at hook 4 [ 2299.074524][T18586] veth1: left allmulticast mode [ 2299.180831][T18632] /dev/loop0: Can't lookup blockdev [ 2299.186289][T18632] /dev/loop0: Can't lookup blockdev [ 2299.199997][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.38280'. [ 2300.378584][T18675] 9pnet_fd: Insufficient options for proto=fd [ 2300.524382][T18704] overlayfs: failed to clone upperpath [ 2300.530745][T18704] tipc: Enabling of bearer rejected, failed to enable media [ 2300.563905][T18712] overlayfs: failed to clone upperpath [ 2300.610295][T18721] netlink: 'syz.8.38296': attribute type 4 has an invalid length. [ 2300.724835][T18734] +$<: renamed from bridge0 (while UP) [ 2300.797714][T18758] netlink: 'syz.5.38323': attribute type 1 has an invalid length. [ 2300.813402][T18760] netlink: 124 bytes leftover after parsing attributes in process `syz.5.38324'. [ 2301.280250][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 2301.280268][ T36] audit: type=1326 audit(2000033137.585:217758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.8.38296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7fc00000 [ 2301.328076][T18765] netlink: 92 bytes leftover after parsing attributes in process `syz.8.38326'. [ 2301.785125][ T36] audit: type=1400 audit(2000033138.055:217759): avc: denied { ioctl } for pid=18786 comm="syz.5.38334" path="socket:[444401]" dev="sockfs" ino=444401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2301.811339][ T36] audit: type=1400 audit(2000033138.083:217760): avc: denied { create } for pid=18786 comm="syz.5.38334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2301.858217][ T36] audit: type=1400 audit(2000033138.130:217761): avc: denied { create } for pid=18792 comm="syz.5.38337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 2302.039388][ T36] audit: type=1400 audit(2000033138.299:217762): avc: denied { create } for pid=18834 comm="syz.8.38350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2302.536609][T18850] overlayfs: cannot append lower layer [ 2302.546341][T18850] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2302.565379][T18854] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 2302.565379][T18854] NHo" hb [ 2302.632877][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38361'. [ 2302.655960][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38364'. [ 2302.680331][T18870] veth1: entered allmulticast mode [ 2303.567886][T18869] veth1: left allmulticast mode [ 2303.617504][ T36] audit: type=1400 audit(2000033139.781:217763): avc: denied { watch_reads } for pid=18925 comm="syz.8.38383" path="/333" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2303.679093][ T36] audit: type=1400 audit(2000033139.837:217764): avc: denied { create } for pid=18934 comm="syz.8.38386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2304.266602][T18949] tipc: Enabling of bearer rejected, failed to enable media [ 2304.291855][T18955] overlay: Unknown parameter 'T~"v;yT CG!BG{iF/U' [ 2304.548898][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38397'. [ 2305.097228][T18976] 9pnet_fd: Insufficient options for proto=fd [ 2305.337241][ T36] audit: type=1401 audit(2000033141.395:217765): op=fscreate invalid_context=CFA7AE [ 2306.356052][T19031] 9pnet_fd: Insufficient options for proto=fd [ 2306.990045][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.38432'. [ 2307.476725][T19120] netlink: 'syz.9.38452': attribute type 63 has an invalid length. [ 2307.487714][T19120] netlink: 5 bytes leftover after parsing attributes in process `syz.9.38452'. [ 2307.496996][T19120] gretap0: entered allmulticast mode [ 2307.502501][T19120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2307.523491][T19126] netlink: 188 bytes leftover after parsing attributes in process `syz.4.38454'. [ 2307.534838][ T36] audit: type=1400 audit(2000033143.459:217766): avc: denied { shutdown } for pid=19125 comm="syz.4.38454" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2307.745374][ T36] audit: type=1326 audit(2000033143.646:217767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19155 comm="syz.4.38465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x0 [ 2308.696334][ T36] audit: type=1400 audit(2000033144.547:217768): avc: denied { relabelto } for pid=19196 comm="syz.8.38478" name="362" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2308.723666][ T36] audit: type=1400 audit(2000033144.547:217769): avc: denied { associate } for pid=19196 comm="syz.8.38478" name="362" dev="tmpfs" ino=1924 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 2308.751283][ T36] audit: type=1400 audit(2000033144.547:217770): avc: denied { write } for pid=15432 comm="syz-executor" name="362" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2308.777691][ T36] audit: type=1400 audit(2000033144.547:217771): avc: denied { remove_name } for pid=15432 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2308.805352][ T36] audit: type=1400 audit(2000033144.547:217772): avc: denied { rmdir } for pid=15432 comm="syz-executor" name="362" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 2308.858533][T19222] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2309.204378][T19243] overlayfs: failed to clone upperpath [ 2309.301530][ T36] audit: type=1400 audit(2000033145.110:217773): avc: denied { map } for pid=19253 comm="syz.9.38498" path="socket:[446102]" dev="sockfs" ino=446102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2309.588169][ T36] audit: type=1326 audit(2000033145.373:217774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.9.38504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7a198eec9 code=0x0 [ 2310.440268][T19298] overlayfs: failed to clone upperpath [ 2310.565729][T19309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=19309 comm=syz.9.38517 [ 2310.578580][T19309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=19309 comm=syz.9.38517 [ 2310.591572][T19309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=19309 comm=syz.9.38517 [ 2310.673032][T19324] 9pnet_virtio: no channels available for device syz [ 2311.535522][T19376] tipc: Enabling of bearer rejected, failed to enable media [ 2311.766601][ T36] audit: type=1400 audit(2000033147.427:217775): avc: denied { sqpoll } for pid=19385 comm="syz.4.38546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2311.810621][T19394] netlink: 'syz.4.38549': attribute type 6 has an invalid length. [ 2312.429030][T19436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.38563'. [ 2312.803018][T19461] netlink: 'syz.8.38571': attribute type 13 has an invalid length. [ 2312.823784][T19464] netlink: 9 bytes leftover after parsing attributes in process `syz.8.38572'. [ 2312.833120][T19464] gretap0: entered promiscuous mode [ 2312.842810][T19464] tipc: Enabling of bearer rejected, failed to enable media [ 2313.220660][T19490] tipc: New replicast peer: 255.255.255.255 [ 2313.227345][T19490] tipc: Enabled bearer , priority 10 [ 2313.424204][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 2313.424221][ T36] audit: type=1400 audit(2000033148.975:217777): avc: denied { relabelfrom } for pid=19525 comm="syz.8.38594" name="NETLINK" dev="sockfs" ino=446416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2313.618532][T19554] netlink: 'syz.5.38605': attribute type 2 has an invalid length. [ 2313.626405][T19554] netlink: 1 bytes leftover after parsing attributes in process `syz.5.38605'. [ 2313.636699][T19554] /dev/loop0: Can't lookup blockdev [ 2314.010370][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38611'. [ 2314.020726][ T36] audit: type=1400 audit(2000033149.538:217778): avc: denied { map } for pid=19569 comm="syz.4.38611" path="socket:[447524]" dev="sockfs" ino=447524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2314.108684][T19579] tmpfs: Unknown parameter 'hugedvise' [ 2314.636492][T19603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.38623'. [ 2314.679734][T19609] /dev/loop0: Can't lookup blockdev [ 2314.735755][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38628'. [ 2314.744885][T19613] erspan0: default FDB implementation only supports local addresses [ 2314.753231][T19614] netlink: 'syz.5.38628': attribute type 4 has an invalid length. [ 2314.763001][T19615] netlink: 'syz.5.38628': attribute type 4 has an invalid length. [ 2314.795541][T19622] EXT4-fs: dax option not supported [ 2314.801582][T19622] EXT4-fs: dax option not supported [ 2314.841343][ T36] audit: type=1400 audit(2000033150.307:217779): avc: denied { create } for pid=19630 comm="syz.5.38633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 2315.052388][ T36] audit: type=1400 audit(2000033150.505:217780): avc: denied { name_bind } for pid=19648 comm="syz.9.38639" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 2315.100320][ T36] audit: type=1326 audit(2000033150.542:217781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.4.38642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe354b8eec9 code=0x0 [ 2315.207915][T19666] tipc: Enabling of bearer rejected, failed to enable media [ 2315.717708][T19726] overlayfs: missing 'lowerdir' [ 2315.739973][T19731] netlink: 76 bytes leftover after parsing attributes in process `syz.8.38664'. [ 2315.763887][T19735] devtmpfs: Unknown parameter 'fuse' [ 2315.809998][ T36] audit: type=1400 audit(2000033151.218:217782): avc: denied { create } for pid=19747 comm="syz.8.38671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2316.283573][T19768] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 2316.293399][ T36] audit: type=1400 audit(2000033151.668:217783): avc: denied { relabelto } for pid=19767 comm="syz.4.38679" name="ashmem" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2316.320599][ T36] audit: type=1400 audit(2000033151.668:217784): avc: denied { associate } for pid=19767 comm="syz.4.38679" name="ashmem" dev="tmpfs" ino=773 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbtty_device_t:s0" [ 2316.348917][ T36] audit: type=1400 audit(2000033151.724:217785): avc: denied { read } for pid=19771 comm="syz.4.38681" name="ashmem" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2316.375661][ T36] audit: type=1400 audit(2000033151.724:217786): avc: denied { open } for pid=19771 comm="syz.4.38681" path="/dev/ashmem" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2316.383152][T19778] netlink: 'syz.4.38683': attribute type 27 has an invalid length. [ 2316.659600][T19812] netlink: 'syz.8.38694': attribute type 6 has an invalid length. [ 2317.748806][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38727'. [ 2318.470184][T19969] overlayfs: failed to clone upperpath [ 2318.489672][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.38753'. [ 2319.183292][T20005] bridge0: port 3(veth0_macvtap) entered blocking state [ 2319.190473][T20005] bridge0: port 3(veth0_macvtap) entered disabled state [ 2319.197569][T20005] veth0_macvtap: entered allmulticast mode [ 2319.204042][T20005] veth0_macvtap: entered promiscuous mode [ 2319.209876][T20005] bridge0: port 3(veth0_macvtap) entered blocking state [ 2319.216853][T20005] bridge0: port 3(veth0_macvtap) entered forwarding state [ 2319.226433][T20011] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2319.299187][T20025] tipc: Enabling of bearer rejected, failed to enable media [ 2319.331662][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.38775'. [ 2320.226113][T20068] netlink: 188 bytes leftover after parsing attributes in process `syz.5.38789'. [ 2320.359893][T20073] 9pnet_fd: Insufficient options for proto=fd [ 2320.650574][T20087] netlink: 24 bytes leftover after parsing attributes in process `syz.8.38795'. [ 2320.660806][T20087] overlayfs: failed to clone upperpath [ 2321.274091][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 2321.274109][ T36] audit: type=1400 audit(2000033157.344:217811): avc: denied { accept } for pid=20094 comm="syz.8.38798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2321.417908][ T36] audit: type=1400 audit(2000033157.476:217812): avc: denied { map } for pid=20104 comm="syz.4.38802" path="socket:[449292]" dev="sockfs" ino=449292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2321.455432][ T36] audit: type=1400 audit(2000033157.513:217813): avc: denied { create } for pid=20108 comm="syz.4.38804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2321.476554][ T36] audit: type=1400 audit(2000033157.522:217814): avc: denied { write } for pid=20108 comm="syz.4.38804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2321.514737][T20111] netlink: 168 bytes leftover after parsing attributes in process `syz.4.38805'. [ 2321.546270][T20113] 9pnet_fd: Insufficient options for proto=fd [ 2321.575907][T20119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65310 sclass=netlink_route_socket pid=20119 comm=syz.4.38809 [ 2322.173005][ T36] audit: type=1400 audit(2000033158.189:217815): avc: denied { map } for pid=20141 comm="syz.4.38818" path="socket:[449346]" dev="sockfs" ino=449346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2322.348647][T20156] xt_check_table_hooks: 23 callbacks suppressed [ 2322.348669][T20156] x_tables: unsorted underflow at hook 3 [ 2322.956282][T20194] /dev/loop0: Can't lookup blockdev [ 2322.962652][T20194] /dev/loop0: Can't lookup blockdev [ 2322.976937][T20199] netlink: 'syz.4.38835': attribute type 33 has an invalid length. [ 2322.984898][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38835'. [ 2323.102319][T20202] netlink: 'syz.8.38836': attribute type 46 has an invalid length. [ 2323.612113][T20253] netlink: 72 bytes leftover after parsing attributes in process `syz.5.38852'. [ 2323.860414][ T36] audit: type=1400 audit(2000033159.765:217816): avc: denied { mount } for pid=20266 comm="syz.5.38857" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 2324.092399][ T36] audit: type=1400 audit(2000033159.990:217817): avc: denied { execheap } for pid=20276 comm="syz.9.38861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2324.184416][T20287] fuse: Bad value for 'group_id' [ 2324.189420][T20287] fuse: Bad value for 'group_id' [ 2324.295237][T20306] netlink: 'syz.4.38872': attribute type 46 has an invalid length. [ 2324.327461][T20313] 9pnet_fd: Insufficient options for proto=fd [ 2324.803051][T20344] netlink: 104 bytes leftover after parsing attributes in process `syz.8.38885'. [ 2324.846059][T20357] tipc: Enabling of bearer rejected, failed to enable media [ 2325.077228][T20407] overlayfs: failed to clone upperpath [ 2325.629993][T20421] tipc: Enabling of bearer rejected, failed to enable media [ 2325.681763][T20436] tipc: Enabling of bearer rejected, failed to enable media [ 2325.769909][T20465] netlink: 'syz.5.38925': attribute type 46 has an invalid length. [ 2325.823019][T20472] 9pnet_fd: Insufficient options for proto=fd [ 2326.332576][T20485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20485 comm=syz.8.38933 [ 2326.625121][T20516] overlayfs: failed to clone upperpath [ 2327.200052][ T36] audit: type=1400 audit(2000033162.908:217818): avc: denied { module_load } for pid=20531 comm="syz.9.38949" path="/bus" dev="ramfs" ino=449811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 2327.200218][T20532] Invalid ELF header magic: != ELF [ 2327.430989][T20579] overlayfs: failed to clone upperpath [ 2327.437067][ T36] audit: type=1326 audit(2000033163.124:217819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.456266][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.38964'. [ 2327.461025][ T36] audit: type=1326 audit(2000033163.124:217820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.497300][ T36] audit: type=1326 audit(2000033163.124:217821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b8f78d710 code=0x7ffc0000 [ 2327.527639][ T36] audit: type=1326 audit(2000033163.124:217822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b8f78d710 code=0x7ffc0000 [ 2327.527862][T20588] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2327.553036][ T36] audit: type=1326 audit(2000033163.124:217823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.564674][T20588] 9pnet_fd: Insufficient options for proto=fd [ 2327.582260][ T36] audit: type=1326 audit(2000033163.124:217824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.611989][ T36] audit: type=1326 audit(2000033163.124:217825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.623284][T20590] 9pnet_fd: Insufficient options for proto=fd [ 2327.636252][ T36] audit: type=1326 audit(2000033163.124:217826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2327.665743][ T36] audit: type=1326 audit(2000033163.124:217827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.8.38963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8f78eec9 code=0x7ffc0000 [ 2328.112740][T20611] 9pnet_fd: Insufficient options for proto=fd [ 2328.131060][T20613] tipc: Enabling of bearer rejected, media not registered [ 2328.140699][T20615] sock: sock_timestamping_bind_phc: sock not bind to device [ 2328.260613][T20647] overlayfs: failed to clone upperpath [ 2328.337272][ T8004] tipc: Subscription rejected, illegal request [ 2328.848284][T20660] netlink: 37 bytes leftover after parsing attributes in process `syz.5.38993'. [ 2328.866736][T20662] bpf: Bad value for 'uid' [ 2329.123670][T20675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=20675 comm=syz.4.38999 [ 2329.137456][T20675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30117 sclass=netlink_route_socket pid=20675 comm=syz.4.38999 [ 2329.895579][T20715] 9pnet_fd: Insufficient options for proto=fd [ 2330.458078][T20767] 9pnet_fd: Insufficient options for proto=fd [ 2331.572099][T20810] netlink: 'syz.8.39043': attribute type 46 has an invalid length. [ 2332.162157][T20823] 9pnet_fd: Insufficient options for proto=fd [ 2332.429438][T20830] fuse: Bad value for 'rootmode' [ 2333.564726][T20917] tipc: Enabled bearer , priority 0 [ 2333.666357][T20928] netlink: 'syz.9.39085': attribute type 20 has an invalid length. [ 2333.923573][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 2333.923590][ T36] audit: type=1400 audit(2000033169.203:217837): avc: denied { mounton } for pid=20936 comm="syz.8.39088" path="/544/file0" dev="tmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2333.975441][T20941] netlink: 28 bytes leftover after parsing attributes in process `syz.8.39090'. [ 2334.509316][T20952] overlayfs: failed to clone upperpath [ 2334.523541][T19080] tipc: Subscription rejected, illegal request [ 2334.530479][T20954] overlayfs: failed to clone upperpath [ 2334.537136][T20954] netlink: 40 bytes leftover after parsing attributes in process `syz.9.39095'. [ 2334.563317][T20958] overlayfs: failed to clone lowerpath [ 2334.632885][T20971] x_tables: unsorted underflow at hook 4 [ 2334.653019][T20979] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16400 sclass=netlink_xfrm_socket pid=20979 comm=syz.9.39105 [ 2334.680214][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.39108'. [ 2335.405173][T21028] veth1: entered allmulticast mode [ 2335.411191][T21027] veth1: left allmulticast mode [ 2335.453525][T21036] overlayfs: failed to clone upperpath [ 2335.468361][T21038] netlink: 116 bytes leftover after parsing attributes in process `syz.4.39128'. [ 2335.477620][T21038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=21038 comm=syz.4.39128 [ 2336.234939][T21080] x_tables: duplicate underflow at hook 1 [ 2336.613925][ T36] audit: type=1400 audit(2000033171.736:217838): avc: denied { map } for pid=21119 comm="syz.8.39158" path="socket:[451413]" dev="sockfs" ino=451413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2336.646381][T21124] incfs: Error accessing: ./file0. [ 2336.651591][T21124] incfs: mount failed -20 [ 2336.677094][ T36] audit: type=1400 audit(2000033171.793:217839): avc: denied { name_bind } for pid=21137 comm="syz.9.39163" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 2337.261930][T21149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2337.269152][T21149] IPv6: NLM_F_CREATE should be set when creating new route [ 2337.276371][T21149] IPv6: NLM_F_CREATE should be set when creating new route [ 2337.513998][T21165] overlayfs: failed to clone upperpath [ 2338.176474][T21177] netlink: 'syz.9.39179': attribute type 12 has an invalid length. [ 2338.206474][T21180] 9pnet_fd: Insufficient options for proto=fd [ 2338.247651][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.9.39183'. [ 2338.515472][T21205] 9pnet_fd: Insufficient options for proto=fd [ 2339.206754][T21239] overlayfs: failed to clone upperpath [ 2339.408768][ T36] audit: type=1400 audit(2000033174.354:217840): avc: denied { create } for pid=21254 comm="syz.9.39210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2339.413853][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.9.39210'. [ 2339.771204][T21270] fuse: Bad value for 'fd' [ 2340.220429][ T36] audit: type=1326 audit(2000033175.114:217841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21311 comm="syz.9.39232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a198eec9 code=0x0 [ 2340.520344][ T36] audit: type=1400 audit(2000033175.395:217842): avc: denied { setopt } for pid=21338 comm="syz.5.39243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2340.602036][T21355] 9pnet_fd: Insufficient options for proto=fd [ 2340.804136][ T36] audit: type=1400 audit(2000033175.667:217843): avc: denied { create } for pid=21369 comm="syz.5.39256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2340.991643][T21389] netlink: 'syz.5.39262': attribute type 12 has an invalid length. [ 2341.022562][T24787] syz_tun: tun_net_xmit 110 [ 2341.065104][T24787] syz_tun: tun_net_xmit 110 [ 2341.194452][T21420] 9pnet_fd: Insufficient options for proto=fd [ 2341.275645][T21423] bridge0: port 1(bridge_slave_0) entered blocking state [ 2341.282807][T21423] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.289972][T21423] bridge_slave_0: entered allmulticast mode [ 2341.296374][T21423] bridge_slave_0: entered promiscuous mode [ 2341.302932][T21423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.310103][T21423] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.331547][T21423] bridge_slave_1: entered allmulticast mode [ 2341.337932][T21423] bridge_slave_1: entered promiscuous mode [ 2341.487160][T21423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.494255][T21423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2341.501543][T21423] bridge0: port 1(bridge_slave_0) entered blocking state [ 2341.508599][T21423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2341.523484][T24787] syz_tun: tun_net_xmit 90 [ 2341.791368][ T7984] veth0_macvtap: left allmulticast mode [ 2341.797104][ T7984] veth0_macvtap: left promiscuous mode [ 2341.806593][ T7984] bridge0: port 3(veth0_macvtap) entered disabled state [ 2341.814891][T21472] netlink: 'syz.5.39287': attribute type 1 has an invalid length. [ 2341.815052][ T7984] bridge_slave_1: left allmulticast mode [ 2341.828585][ T7984] bridge_slave_1: left promiscuous mode [ 2341.834563][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.840303][T21472] syz_tun: tun_net_xmit 42 [ 2341.848499][ T7984] bridge_slave_0: left allmulticast mode [ 2341.858968][ T7984] bridge_slave_0: left promiscuous mode [ 2341.864752][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.883113][T21478] 9pnet_fd: Insufficient options for proto=fd [ 2341.932695][T21484] netlink: 188 bytes leftover after parsing attributes in process `syz.4.39293'. [ 2341.959276][T30040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.967677][T30040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.982592][ T7984] veth1_macvtap: left promiscuous mode [ 2341.988273][ T7984] veth0_vlan: left promiscuous mode [ 2342.046726][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2342.053792][T19080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2342.066576][T30040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2342.073650][T30040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2342.111964][T21423] veth0_vlan: entered promiscuous mode [ 2342.126368][T21423] veth1_macvtap: entered promiscuous mode [ 2342.137040][T21499] overlayfs: failed to clone upperpath [ 2342.150877][ T36] audit: type=1400 audit(2000033176.924:217844): avc: denied { mounton } for pid=21423 comm="syz-executor" path="/root/syzkaller.VjMzxf/syz-tmp" dev="sda1" ino=2187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2342.176498][ T36] audit: type=1400 audit(2000033176.924:217845): avc: denied { mounton } for pid=21423 comm="syz-executor" path="/root/syzkaller.VjMzxf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2342.205128][ T36] audit: type=1400 audit(2000033176.924:217846): avc: denied { mounton } for pid=21423 comm="syz-executor" path="/root/syzkaller.VjMzxf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=452234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2342.233388][ T36] audit: type=1400 audit(2000033176.962:217847): avc: denied { mounton } for pid=21423 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2342.256598][T21514] sit0: entered promiscuous mode [ 2342.258635][ T36] audit: type=1400 audit(2000033176.962:217848): avc: denied { mounton } for pid=21423 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2342.266492][T21514] netlink: 'syz.4.39304': attribute type 1 has an invalid length. [ 2342.293567][T21514] netlink: 9 bytes leftover after parsing attributes in process `syz.4.39304'. [ 2342.302211][ T36] audit: type=1400 audit(2000033177.075:217849): avc: denied { mounton } for pid=21520 comm="syz.8.39266" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2342.479123][T21536] tipc: Enabling of bearer rejected, failed to enable media [ 2342.535629][T21548] netlink: 'syz.8.39314': attribute type 11 has an invalid length. [ 2342.563021][T21554] SELinux: failed to load policy [ 2342.585483][T21556] binder: Unknown parameter 'defcontextܖ1' [ 2342.635162][T21563] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 2342.635182][T21563] rust_binder: Error while translating object. [ 2342.643955][T21563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2342.650176][T21563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 2342.682797][T21565] rust_binder: Error while translating object. [ 2342.692423][T21565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2342.698624][T21565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:25 [ 2342.773484][T21568] netlink: 596 bytes leftover after parsing attributes in process `syz.8.39321'. [ 2342.775599][T21570] netlink: 44 bytes leftover after parsing attributes in process `syz.9.39322'. [ 2342.805929][T21573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2342.805940][T21570] netlink: 'syz.9.39322': attribute type 6 has an invalid length. [ 2342.805956][T21570] netlink: 'syz.9.39322': attribute type 5 has an invalid length. [ 2342.828211][T21570] netlink: 'syz.9.39322': attribute type 4 has an invalid length. [ 2342.839362][T21570] bridge0: port 3(erspan0) entered blocking state [ 2342.845928][T21570] bridge0: port 3(erspan0) entered disabled state [ 2342.852401][T21570] erspan0: entered allmulticast mode [ 2342.858083][T21570] erspan0: entered promiscuous mode [ 2342.863335][T21570] bridge0: port 3(erspan0) entered blocking state [ 2342.869755][T21570] bridge0: port 3(erspan0) entered forwarding state [ 2342.917082][T21584] 9pnet_fd: Insufficient options for proto=fd [ 2342.983719][ C0] syz_tun: tun_net_xmit 42 [ 2343.069079][T18653] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 2343.250086][T18653] usb 9-1: Invalid ep0 maxpacket: 32 [ 2343.388664][T18653] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 2343.536652][T21645] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 2343.550716][T18653] usb 9-1: Invalid ep0 maxpacket: 32 [ 2343.556099][T18653] usb usb9-port1: attempt power cycle [ 2343.922251][T18653] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 2343.943467][T18653] usb 9-1: Invalid ep0 maxpacket: 32 [ 2344.081475][T18653] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 2344.092234][ C0] syz_tun: tun_net_xmit 42 [ 2344.103225][T18653] usb 9-1: Invalid ep0 maxpacket: 32 [ 2344.111957][T18653] usb usb9-port1: unable to enumerate USB device [ 2344.142514][T21706] netlink: 'syz.4.39373': attribute type 3 has an invalid length. [ 2344.238092][T21718] overlayfs: failed to clone upperpath [ 2344.259096][T21722] 9pnet_fd: Insufficient options for proto=fd [ 2344.831914][T21735] overlayfs: failed to clone upperpath [ 2344.848235][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.39387'. [ 2344.877208][T21742] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2345.416338][T21775] 9pnet_fd: Insufficient options for proto=fd [ 2345.621790][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 2345.621808][ T36] audit: type=1400 audit(2000033180.189:217863): avc: denied { nlmsg_read } for pid=21780 comm="syz.4.39403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2345.976873][ T36] audit: type=1326 audit(2000033180.518:217864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21791 comm="syz.9.39407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a198eec9 code=0x0 [ 2346.027397][T21796] input: syz1 as /devices/virtual/input/input155 [ 2346.035859][ T36] audit: type=1400 audit(2000033180.574:217865): avc: denied { append } for pid=21795 comm="syz.8.39409" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2346.221629][T21815] futex_wake_op: syz.4.39415 tries to shift op by -1; fix this program [ 2346.235685][T21815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.39415'. [ 2346.297659][T21818] binder: Unknown parameter '01777777777777777777777' [ 2346.314346][T21821] rust_binder: Error while translating object. [ 2346.314390][T21821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2346.320529][T21820] rust_binder: Error while translating object. [ 2346.320836][T21821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 2346.333817][T21820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2346.345335][T21820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 2346.396978][T21837] 9pnet_fd: Insufficient options for proto=fd [ 2346.628910][ T45] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2346.788769][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 2346.794913][ T45] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 2346.803380][ T45] usb 9-1: config 250 has an invalid interface number: 0 but max is -1 [ 2346.811656][ T45] usb 9-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.822037][ T45] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2346.832140][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2346.841158][ T45] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2346.849457][ T45] usb 9-1: Product: syz [ 2346.853645][ T45] usb 9-1: SerialNumber: syz [ 2346.859812][ T45] hub 9-1:250.0: bad descriptor, ignoring hub [ 2346.865990][ T45] hub 9-1:250.0: probe with driver hub failed with error -5 [ 2347.343265][ T45] usb 9-1: reset high-speed USB device number 18 using dummy_hcd [ 2347.502115][T21856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39430'. [ 2347.514379][ T45] usb 9-1: device firmware changed [ 2347.519624][ T45] usb 9-1: USB disconnect, device number 18 [ 2347.833348][ T45] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2347.993223][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 2348.003434][ T45] usb 9-1: config 0 has no interfaces? [ 2348.015365][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2348.024695][ T45] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2348.033131][ T45] usb 9-1: Product: syz [ 2348.037559][ T45] usb 9-1: SerialNumber: syz [ 2348.042871][ T45] usb 9-1: config 0 descriptor?? [ 2348.267638][ T45] usb 9-1: USB disconnect, device number 19 [ 2348.405188][ T36] audit: type=1400 audit(2000033182.798:217866): avc: denied { append } for pid=21882 comm="syz.4.39441" name="ashmem" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2348.470836][T21883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39441'. [ 2348.493273][ T36] audit: type=1400 audit(2000033182.873:217867): avc: denied { execute } for pid=21882 comm="syz.4.39441" path="/dev/ashmem" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2348.535068][T21885] tipc: Started in network mode [ 2348.540025][T21885] tipc: Node identity ac14140f, cluster identity 4711 [ 2348.546904][T21885] tipc: New replicast peer: 255.255.255.255 [ 2348.553033][T21885] tipc: Enabled bearer , priority 10 [ 2348.848039][ T36] audit: type=1400 audit(2000033183.220:217868): avc: denied { execute } for pid=21896 comm="syz.8.39446" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2348.871800][ T36] audit: type=1400 audit(2000033183.220:217869): avc: denied { create } for pid=21896 comm="syz.8.39446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2348.920752][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.39447'. [ 2348.929747][T21900] bridge_slave_1: left allmulticast mode [ 2348.935412][T21900] bridge_slave_1: left promiscuous mode [ 2348.941008][T21900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2348.948482][T21900] bridge_slave_0: left allmulticast mode [ 2348.954298][T21900] bridge_slave_0: left promiscuous mode [ 2348.960053][T21900] bridge0: port 1(bridge_slave_0) entered disabled state [ 2348.976383][T30040] Bluetooth: hci0: Frame reassembly failed (-84) [ 2348.978355][ T36] audit: type=1400 audit(2000033183.332:217870): avc: denied { ioctl } for pid=21899 comm="syz.8.39447" path="socket:[453799]" dev="sockfs" ino=453799 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2349.087946][T21900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2349.087976][T21900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:52 [ 2349.251063][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.267256][T21905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.274366][T21905] bridge_slave_0: entered allmulticast mode [ 2349.280541][T21905] bridge_slave_0: entered promiscuous mode [ 2349.286876][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.293901][T21905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2349.300931][T21905] bridge_slave_1: entered allmulticast mode [ 2349.307258][T21905] bridge_slave_1: entered promiscuous mode [ 2349.458758][T21912] netlink: 124 bytes leftover after parsing attributes in process `syz.5.39450'. [ 2349.468276][T30040] bridge_slave_1: left allmulticast mode [ 2349.473941][T30040] bridge_slave_1: left promiscuous mode [ 2349.479694][T30040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2349.487569][T30040] bridge_slave_0: left allmulticast mode [ 2349.488203][T21922] can: request_module (can-proto-0) failed. [ 2349.493467][T30040] bridge_slave_0: left promiscuous mode [ 2349.505445][T30040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.601978][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.609160][T21905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.616471][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.623504][T21905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.623991][T18183] tipc: Node number set to 2886997007 [ 2349.650986][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.659844][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2349.669639][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.676716][T11037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.686628][T30040] tipc: Disabling bearer [ 2349.692145][T30040] tipc: Left network mode [ 2349.695156][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.703490][T11037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.734923][T30040] veth1_macvtap: left promiscuous mode [ 2349.809944][T21905] veth0_vlan: entered promiscuous mode [ 2349.832650][T21905] veth1_macvtap: entered promiscuous mode [ 2349.921601][ T36] audit: type=1400 audit(2000033184.214:217871): avc: denied { associate } for pid=21937 comm="syz.4.39448" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2350.005993][ T36] audit: type=1400 audit(2000033184.299:217872): avc: denied { setattr } for pid=21939 comm="syz.4.39457" name="/" dev="configfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2350.065701][T21941] rust_binder: Write failure EFAULT in pid:4 [ 2350.125339][T21945] binder: Binderfs stats mode cannot be changed during a remount [ 2350.202593][T21948] rust_binder: 21947 RLIMIT_NICE not set [ 2350.245663][T21958] __vm_enough_memory: pid: 21958, comm: syz.5.39464, bytes: 21199673831424 not enough memory for the allocation [ 2351.118865][T21996] rust_binder: Write failure EFAULT in pid:15 [ 2351.169583][T24125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2351.170928][T21902] Bluetooth: hci0: command 0x1003 tx timeout [ 2351.393342][T18653] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2351.553263][T18653] usb 5-1: Using ep0 maxpacket: 16 [ 2351.560991][T18653] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2351.570107][T18653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.578121][T18653] usb 5-1: Product: syz [ 2351.582275][T18653] usb 5-1: Manufacturer: syz [ 2351.587023][T18653] usb 5-1: SerialNumber: syz [ 2351.592108][T18653] usb 5-1: config 0 descriptor?? [ 2351.598135][T18653] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2351.605847][T18653] usb 5-1: Detected FT-X [ 2351.811249][T18653] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 2351.819096][T22002] binder: Unknown parameter '00000000000000000000012' [ 2351.947451][T22010] netlink: 57 bytes leftover after parsing attributes in process `syz.9.39483'. [ 2352.079987][T22013] rust_binder: 21999 RLIMIT_NICE not set [ 2352.294460][T18653] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2352.307201][T18653] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2352.316355][T18653] usb 5-1: USB disconnect, device number 90 [ 2352.323105][T18653] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2352.332718][T18653] ftdi_sio 5-1:0.0: device disconnected [ 2352.697234][T22015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2352.697268][T22015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:59 [ 2352.707661][T30040] bridge_slave_1: left allmulticast mode [ 2352.722682][T30040] bridge_slave_1: left promiscuous mode [ 2352.732515][T30040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.740546][T30040] bridge_slave_0: left allmulticast mode [ 2352.746209][T30040] bridge_slave_0: left promiscuous mode [ 2352.756735][T22025] overlayfs: failed to clone upperpath [ 2352.758467][T30040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2352.833852][T22034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2352.888092][ T36] audit: type=1400 audit(2000033187.010:217873): avc: denied { mounton } for pid=22047 comm="syz.8.39494" path="/26/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2352.919416][ T36] audit: type=1400 audit(2000033187.038:217874): avc: denied { unmount } for pid=21423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2352.981906][T30040] tipc: Disabling bearer [ 2352.987224][T30040] tipc: Left network mode [ 2353.098736][T18653] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 2353.131805][T30040] veth1_macvtap: left promiscuous mode [ 2353.137302][T30040] veth0_vlan: left promiscuous mode [ 2353.194652][T24784] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2353.259621][T18653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2353.270569][T18653] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2353.283382][T18653] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2353.292453][T18653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.300970][T18653] usb 5-1: config 0 descriptor?? [ 2353.306760][T22036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2353.314753][T18653] usbhid 5-1:0.0: can't add hid device: -22 [ 2353.320724][T18653] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2353.355537][T24784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2353.366564][T24784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2353.376398][T24784] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2353.389314][T24784] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2353.398437][T24784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.406905][T24784] usb 9-1: config 0 descriptor?? [ 2353.531161][T18183] usb 5-1: USB disconnect, device number 91 [ 2354.043663][T22072] 9pnet_fd: Insufficient options for proto=fd [ 2354.165716][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.165737][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.186490][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.186516][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.196736][T24784] usbhid 9-1:0.0: can't add hid device: -71 [ 2354.213208][ T36] audit: type=1401 audit(2000033188.249:217875): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 2354.218261][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.313844][T24784] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2354.343544][T22083] rust_binder: Error in use_page_slow: ESRCH [ 2354.343565][T22083] rust_binder: use_range failure ESRCH [ 2354.350296][T22083] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2354.350548][T24784] usb 9-1: USB disconnect, device number 20 [ 2354.355857][T22083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2354.372426][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.387409][T22083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:27 [ 2354.403039][T22084] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.419592][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.419613][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.427940][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.434558][T22084] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.448575][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.448596][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.455155][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.463915][T22084] bridge_slave_0: entered allmulticast mode [ 2354.482515][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.482537][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.491536][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.495187][T22084] bridge_slave_0: entered promiscuous mode [ 2354.502267][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.505074][T22084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.523665][T22084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.529519][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.530820][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.530902][T22084] bridge_slave_1: entered allmulticast mode [ 2354.543678][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.549622][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.549940][T22084] bridge_slave_1: entered promiscuous mode [ 2354.556065][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.568249][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.574711][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.581245][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.587678][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.594351][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.600962][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.609187][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.615798][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.622247][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.629342][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.635801][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.642241][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.649567][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.656115][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.662548][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.669024][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.675488][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.681941][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.688611][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.697553][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.705222][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.711775][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.718328][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.724896][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.731482][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.737901][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.744560][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.751856][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.761581][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.768005][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.776881][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.784761][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.791219][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.797848][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.804425][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.810841][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.817392][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.824021][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.831277][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.837906][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.844476][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.851660][T30040] bridge_slave_1: left allmulticast mode [ 2354.863830][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.863851][T22082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2354.870503][T30040] bridge_slave_1: left promiscuous mode [ 2354.891610][T30040] +$<: port 2(bridge_slave_1) entered disabled state [ 2354.901707][T30040] bridge_slave_0: left allmulticast mode [ 2354.907630][T30040] bridge_slave_0: left promiscuous mode [ 2354.913623][T30040] +$<: port 1(bridge_slave_0) entered disabled state [ 2354.920847][T22114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2354.920870][T22114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 2355.014748][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 2355.030832][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2355.045713][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 2355.052777][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2355.069006][T22084] veth0_vlan: entered promiscuous mode [ 2355.085727][T22084] veth1_macvtap: entered promiscuous mode [ 2355.099120][T22135] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 2355.116497][ T36] audit: type=1400 audit(2000033189.093:217876): avc: denied { map } for pid=22137 comm="syz.4.39521" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2355.153274][T22139] 8021q: VLANs not supported on tunl0 [ 2355.263609][T30040] tipc: Disabling bearer [ 2355.268924][T30040] tipc: Left network mode [ 2355.347120][T22145] netlink: 'syz.4.39522': attribute type 4 has an invalid length. [ 2355.357055][T22145] netlink: 'syz.4.39522': attribute type 4 has an invalid length. [ 2355.497715][T30040] veth1_macvtap: left promiscuous mode [ 2355.503232][T30040] veth0_vlan: left promiscuous mode [ 2355.603744][ T7625] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2355.614273][T24784] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2355.763419][ T7625] usb 9-1: Using ep0 maxpacket: 8 [ 2355.769838][ T7625] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2355.777827][T24784] usb 5-1: Using ep0 maxpacket: 16 [ 2355.782981][ T7625] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 2355.791726][T24784] usb 5-1: config 0 has an invalid interface number: 198 but max is 0 [ 2355.799954][ T7625] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2355.807560][T24784] usb 5-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 2355.817983][ T7625] usb 9-1: can't read configurations, error -61 [ 2355.824270][T24784] usb 5-1: config 0 has no interface number 0 [ 2355.830575][T24784] usb 5-1: config 0 interface 198 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2355.843629][T24784] usb 5-1: config 0 interface 198 has no altsetting 0 [ 2355.851792][T24784] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=13.da [ 2355.861324][T24784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.869425][T24784] usb 5-1: Product: syz [ 2355.873598][T24784] usb 5-1: Manufacturer: syz [ 2355.878187][T24784] usb 5-1: SerialNumber: syz [ 2355.883347][T24784] usb 5-1: config 0 descriptor?? [ 2355.966026][ T7625] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2356.106772][T22145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 2356.107823][T22154] rust_binder: Error while translating object. [ 2356.117203][T24784] rtl8150 5-1:0.198: couldn't find required endpoints [ 2356.117535][T22154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2356.123417][T24784] rtl8150 5-1:0.198: probe with driver rtl8150 failed with error -5 [ 2356.136461][T22154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 2356.139883][ T7625] usb 9-1: Using ep0 maxpacket: 8 [ 2356.163679][T24784] usb 5-1: USB disconnect, device number 92 [ 2356.171183][T22156] binder: Bad value for 'defcontext' [ 2356.179893][ T7625] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2356.193263][ T7625] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 2356.194142][ T36] audit: type=1400 audit(2000033190.106:217877): avc: denied { ioctl } for pid=22157 comm="syz.5.39528" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2356.237530][ T7625] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2356.245251][T22163] Bluetooth: hci0: Frame reassembly failed (-84) [ 2356.252164][ T8004] Bluetooth: hci0: Frame reassembly failed (-84) [ 2356.252705][T22163] tipc: Enabling of bearer rejected, failed to enable media [ 2356.259761][ T7625] usb 9-1: can't read configurations, error -61 [ 2356.273279][ T7625] usb usb9-port1: attempt power cycle [ 2356.298025][T22170] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2356.576564][T22184] overlayfs: failed to clone lowerpath [ 2356.591190][T22187] overlayfs: failed to clone lowerpath [ 2356.637438][ T7625] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2356.659285][ T7625] usb 9-1: Using ep0 maxpacket: 8 [ 2356.666672][ T7625] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2356.671633][T22191] rust_binder: inc_ref_done called when no active inc_refs [ 2356.674794][ T7625] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 2356.691008][ T7625] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2356.698564][ T7625] usb 9-1: can't read configurations, error -61 [ 2356.839975][ T7625] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2356.872270][ T7625] usb 9-1: Using ep0 maxpacket: 8 [ 2356.878697][ T7625] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2356.886395][ T7625] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 2356.895401][ T7625] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2356.903059][ T7625] usb 9-1: can't read configurations, error -61 [ 2356.909603][ T7625] usb usb9-port1: unable to enumerate USB device [ 2356.999861][T18183] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2357.161429][T18183] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 64 [ 2357.173864][T18183] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2357.187002][T18183] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2357.195154][T18183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2357.204222][T18183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.212204][T18183] usb 5-1: Product: ὖૣ [ 2357.216658][T18183] usb 5-1: Manufacturer: 됒쯆箵袿맇➄ះ띙펟䠙뮯ꦭ青쬾틇尛溤爙ꉆ [ 2357.226559][T18183] usb 5-1: SerialNumber: ㏦ꕣⱚ펃6난䷂퍭ˤᐚ奐銍넠퇱㱚淹ᅬ錑彲啥鳡㾺К殄絼Ꝍ忁㚪ͧ䆄❳칉מּ棕枋ẩ弄솶쉖䄚곁㭿慨࿹䣇䏐Ӧঔ둪▲힢樂庣 [ 2357.248420][T22194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2357.255651][T22194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2357.477094][T22194] rust_binder: 22193 RLIMIT_NICE not set [ 2357.480211][T18183] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 2357.495462][T18183] usb 5-1: USB disconnect, device number 93 [ 2358.221274][T22233] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2358.261094][T22239] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2358.277823][T22245] overlayfs: failed to clone upperpath [ 2358.408489][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.415540][T22250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.422637][T24125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2358.422953][T22250] bridge_slave_0: entered allmulticast mode [ 2358.428945][T21902] Bluetooth: hci0: command 0x1003 tx timeout [ 2358.435272][T22250] bridge_slave_0: entered promiscuous mode [ 2358.447349][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.460804][T22250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.467913][T22250] bridge_slave_1: entered allmulticast mode [ 2358.489039][T22250] bridge_slave_1: entered promiscuous mode [ 2358.495551][ T36] audit: type=1400 audit(2000033192.264:217878): avc: denied { relabelto } for pid=22255 comm="syz.5.39560" name="cgroup" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 2358.569867][ T36] audit: type=1400 audit(2000033192.264:217879): avc: denied { associate } for pid=22255 comm="syz.5.39560" name="cgroup" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 2358.606252][ T36] audit: type=1400 audit(2000033192.367:217880): avc: denied { unlink } for pid=22084 comm="syz-executor" name="cgroup" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 2358.656546][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.663609][T22250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2358.670863][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.677918][T22250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2358.700610][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.708136][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.717586][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.724639][T19080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2358.733985][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.741116][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2358.764722][T22250] veth0_vlan: entered promiscuous mode [ 2358.775371][T22250] veth1_macvtap: entered promiscuous mode [ 2358.833150][T18183] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 2358.871568][ T36] audit: type=1400 audit(2000033192.621:217881): avc: denied { read } for pid=22268 comm="syz.9.39559" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2358.916800][ T36] audit: type=1400 audit(2000033192.658:217882): avc: denied { setattr } for pid=22275 comm="syz.9.39564" name="PING" dev="sockfs" ino=455961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2358.940091][ T36] audit: type=1400 audit(2000033192.667:217883): avc: denied { map } for pid=22275 comm="syz.9.39564" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2358.963916][ T36] audit: type=1400 audit(2000033192.667:217884): avc: denied { execute } for pid=22275 comm="syz.9.39564" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2358.987975][T18183] usb 5-1: device descriptor read/64, error -71 [ 2358.993018][ T36] audit: type=1400 audit(2000033192.667:217885): avc: denied { read } for pid=22275 comm="syz.9.39564" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2359.017664][ T36] audit: type=1400 audit(2000033192.667:217886): avc: denied { open } for pid=22275 comm="syz.9.39564" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2359.248830][T18183] usb 5-1: device descriptor read/64, error -71 [ 2359.468972][ T36] audit: type=1400 audit(2000033193.174:217887): avc: denied { unmount } for pid=21423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2359.495372][T22284] binder: Unknown parameter '01777777777777777777777' [ 2359.515289][T18183] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 2359.675204][T18183] usb 5-1: device descriptor read/64, error -71 [ 2359.856424][ T1372] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 2359.930976][T18183] usb 5-1: device descriptor read/64, error -71 [ 2360.016271][ T1372] usb 10-1: Using ep0 maxpacket: 8 [ 2360.022546][ T1372] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 2360.030948][ T1372] usb 10-1: config 250 has an invalid interface number: 0 but max is -1 [ 2360.039386][ T1372] usb 10-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2360.050128][T18183] usb usb5-port1: attempt power cycle [ 2360.055721][ T1372] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2360.064867][T18653] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2360.073585][ T1372] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2360.082766][ T1372] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2360.091121][ T1372] usb 10-1: Product: syz [ 2360.095364][ T1372] usb 10-1: SerialNumber: syz [ 2360.101532][T24787] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 2360.102073][ T1372] hub 10-1:250.0: bad descriptor, ignoring hub [ 2360.115294][ T1372] hub 10-1:250.0: probe with driver hub failed with error -5 [ 2360.229448][T18653] usb 9-1: Using ep0 maxpacket: 8 [ 2360.236034][T18653] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2360.244388][T18653] usb 9-1: config 6 has an invalid interface number: 248 but max is 0 [ 2360.252630][T18653] usb 9-1: config 6 has no interface number 0 [ 2360.258703][T18653] usb 9-1: config 6 interface 248 has no altsetting 0 [ 2360.267024][T18653] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2360.273162][T24787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2360.276088][T18653] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.287193][T24787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2360.295579][T18653] usb 9-1: Product: syz [ 2360.302222][T24787] usb 6-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 2360.305678][T18653] usb 9-1: Manufacturer: syz [ 2360.314999][T24787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.319262][T18653] usb 9-1: SerialNumber: syz [ 2360.331001][T24787] usb 6-1: config 0 descriptor?? [ 2360.343272][T22311] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2360.410612][T18183] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 2360.432922][T18183] usb 5-1: device descriptor read/8, error -71 [ 2360.555016][T18653] ums-karma 9-1:6.248: USB Mass Storage device detected [ 2360.575499][T18183] usb 5-1: device descriptor read/8, error -71 [ 2360.613379][ T1372] usb 10-1: reset high-speed USB device number 121 using dummy_hcd [ 2360.624387][T18653] usb 9-1: USB disconnect, device number 25 [ 2360.773792][ T1372] usb 10-1: device firmware changed [ 2360.779196][ T1372] usb 10-1: USB disconnect, device number 121 [ 2360.836968][T18183] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 2360.859316][T18183] usb 5-1: device descriptor read/8, error -71 [ 2360.922237][ T1372] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 2360.949019][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.39575'. [ 2360.958102][T22316] netlink: 31 bytes leftover after parsing attributes in process `syz.5.39575'. [ 2360.967141][T22316] netlink: 'syz.5.39575': attribute type 3 has an invalid length. [ 2360.974935][T22316] netlink: 'syz.5.39575': attribute type 2 has an invalid length. [ 2360.982994][T22316] netlink: 31 bytes leftover after parsing attributes in process `syz.5.39575'. [ 2361.008635][T18183] usb 5-1: device descriptor read/8, error -71 [ 2361.082109][ T1372] usb 10-1: Using ep0 maxpacket: 8 [ 2361.088388][ T1372] usb 10-1: config 0 has no interfaces? [ 2361.095412][ T1372] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2361.104635][ T1372] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2361.114282][ T1372] usb 10-1: Product: syz [ 2361.118581][ T1372] usb 10-1: SerialNumber: syz [ 2361.124996][T18183] usb usb5-port1: unable to enumerate USB device [ 2361.131585][ T1372] usb 10-1: config 0 descriptor?? [ 2361.158480][T22327] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2361.158497][T22327] rust_binder: Error while translating object. [ 2361.169248][T22327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2361.175441][T22327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 2361.359707][T18653] usb 10-1: USB disconnect, device number 122 [ 2361.514159][T22347] random: crng reseeded on system resumption [ 2361.689694][T18183] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2361.838939][T18183] usb 9-1: device descriptor read/64, error -71 [ 2361.880235][T22362] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.39590'. [ 2361.889892][T22362] binder: Unknown parameter '00000000000000000000003' [ 2361.930677][T22368] overlayfs: missing 'lowerdir' [ 2361.936209][T22368] __vm_enough_memory: pid: 22368, comm: syz.4.39593, bytes: 18014402804453376 not enough memory for the allocation [ 2361.958620][T22371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2361.958894][T22370] rust_binder: Error while translating object. [ 2361.965398][T22370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2361.971643][T22370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 2361.990495][T22375] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 2362.039521][T22382] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2362.094706][T18183] usb 9-1: device descriptor read/64, error -71 [ 2362.159636][T22387] incfs: Can't find or create .index dir in ./file0 [ 2362.166345][T22387] incfs: mount failed -11 [ 2362.171575][T22387] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2362.200426][T22390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 2362.212532][T22395] rust_binder: Error while translating object. [ 2362.221625][T22395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2362.227883][T22395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 2362.350527][T18183] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2362.499721][T18183] usb 9-1: device descriptor read/64, error -71 [ 2362.585007][ T7625] usb 10-1: new full-speed USB device number 123 using dummy_hcd [ 2362.745925][ T7625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2362.755542][T18183] usb 9-1: device descriptor read/64, error -71 [ 2362.756973][ T7625] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2362.778176][ T7625] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2362.787316][ T7625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.796185][ T7625] usb 10-1: config 0 descriptor?? [ 2362.801545][T22404] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2362.809687][ T7625] usbhid 10-1:0.0: can't add hid device: -22 [ 2362.815758][ T7625] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 2362.873078][T18183] usb usb9-port1: attempt power cycle [ 2362.921536][T22406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2362.921569][T22406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 2363.026372][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.044125][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2363.052762][T24781] usb 10-1: USB disconnect, device number 123 [ 2363.090983][T24787] usbhid 6-1:0.0: can't add hid device: -71 [ 2363.097386][T24787] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2363.109137][T24787] usb 6-1: USB disconnect, device number 97 [ 2363.123949][T22414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 2363.131022][T22414] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2363.192541][ T7625] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2363.235250][T18183] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2363.267538][T22416] support for cryptoloop has been removed. Use dm-crypt instead. [ 2363.268268][T18183] usb 9-1: device descriptor read/8, error -71 [ 2363.278207][T22416] tipc: Started in network mode [ 2363.286428][T22416] tipc: Node identity 42e496c97753, cluster identity 4711 [ 2363.293664][T22416] tipc: Enabled bearer , priority 0 [ 2363.302469][T22416] tipc: Disabling bearer [ 2363.334114][T22418] rust_binder: Write failure EFAULT in pid:35 [ 2363.352433][ T7625] usb 5-1: Using ep0 maxpacket: 32 [ 2363.367316][ T7625] usb 5-1: config 254 has an invalid interface number: 146 but max is 0 [ 2363.376427][ T7625] usb 5-1: config 254 has no interface number 0 [ 2363.382737][ T7625] usb 5-1: config 254 interface 146 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2363.403648][ T7625] usb 5-1: config 254 interface 146 has no altsetting 0 [ 2363.417387][T18183] usb 9-1: device descriptor read/8, error -71 [ 2363.429145][T22430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39617'. [ 2363.444442][T22430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22430 comm=syz.5.39617 [ 2363.631154][T22436] __vm_enough_memory: pid: 22436, comm: syz.9.39619, bytes: 18014402804453376 not enough memory for the allocation [ 2363.675445][T18183] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2363.705184][T18183] usb 9-1: device descriptor read/8, error -71 [ 2363.714813][ T9143] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2363.843698][T18183] usb 9-1: device descriptor read/8, error -71 [ 2363.874674][ T9143] usb 6-1: Using ep0 maxpacket: 32 [ 2363.880916][ T9143] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 2363.889236][ T9143] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.899467][ T9143] usb 6-1: config 0 has no interface number 0 [ 2363.905558][ T9143] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2363.918613][ T9143] usb 6-1: config 0 interface 196 has no altsetting 0 [ 2363.926774][ T9143] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2363.935847][ T9143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.943858][ T9143] usb 6-1: Product: syz [ 2363.948011][ T9143] usb 6-1: Manufacturer: syz [ 2363.952616][ T9143] usb 6-1: SerialNumber: syz [ 2363.957818][ T9143] usb 6-1: config 0 descriptor?? [ 2363.963177][T18653] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 2363.971026][T18183] usb usb9-port1: unable to enumerate USB device [ 2364.130867][T18653] usb 10-1: Using ep0 maxpacket: 32 [ 2364.137204][T18653] usb 10-1: config 161 has an invalid interface number: 242 but max is 0 [ 2364.145671][T18653] usb 10-1: config 161 contains an unexpected descriptor of type 0x1, skipping [ 2364.154640][T18653] usb 10-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.164989][T18653] usb 10-1: config 161 has no interface number 0 [ 2364.171336][T18653] usb 10-1: config 161 interface 242 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2364.182490][T18653] usb 10-1: config 161 interface 242 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2364.192605][T18653] usb 10-1: config 161 interface 242 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2364.203815][T18653] usb 10-1: config 161 interface 242 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2364.215065][T18653] usb 10-1: config 161 interface 242 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2364.226264][T18653] usb 10-1: config 161 interface 242 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 2364.237899][T18653] usb 10-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=78.3c [ 2364.247030][T18653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.255121][T18653] usb 10-1: Product: 䭑퓩Ⳍຯ⃃葈켾 [ 2364.261245][T18653] usb 10-1: Manufacturer: 留摿ꪍ獚䥧⼦㖵졆䒞㯞鮮咅ꪤ숙蝀蒵⽂热顂ٞἓ朰䮹㐅곥穤ᦌ着ᨁ䓡渳㬠ﮬ拭㚣관ﱆ쳂駻ꂻ錨᝟㈪ᴵ넻✫榍椘썁ᝏ汓ⵇ苺쾐쟊띟㢊ꩪ慘孽쌹݆᳌欻쪣粫唋䤭ವ⌙鷾혔硚怎쎴咈ꗴ쥹켹앤┐䉖࿘蔖ϐ鑣䔟ᘣፂ캀텤߰䦰渢華漗ƫ [ 2364.293141][T18653] usb 10-1: SerialNumber: Т [ 2364.298917][T22444] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2364.626199][T18653] usb 10-1: USB disconnect, device number 124 [ 2365.043594][T22462] netlink: 72 bytes leftover after parsing attributes in process `syz.5.39628'. [ 2365.043707][T22463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2365.100213][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2365.115344][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2365.572159][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 2365.572195][ T36] audit: type=1400 audit(2000033198.907:217902): avc: denied { append } for pid=22477 comm="syz.9.39634" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2365.636592][T22485] netlink: 80 bytes leftover after parsing attributes in process `syz.9.39637'. [ 2365.646106][T22485] binder: Unknown parameter '' [ 2365.740727][T22491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2365.774952][ T36] audit: type=1400 audit(2000033199.094:217903): avc: denied { setattr } for pid=22492 comm="syz.9.39641" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2365.791041][T22495] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 2365.816625][T22495] rust_binder: Write failure EINVAL in pid:76 [ 2365.821043][ T36] audit: type=1400 audit(2000033199.141:217904): avc: denied { lock } for pid=22494 comm="syz.9.39642" path="/dev/binderfs/binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2365.821851][T22495] rust_binder: Error while translating object. [ 2365.851535][T22495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2365.857893][T22495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:76 [ 2365.878528][ T1372] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2365.902030][T22501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2366.038403][ T1372] usb 9-1: Using ep0 maxpacket: 32 [ 2366.051092][ T1372] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2366.063911][ T1372] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2366.072986][ T1372] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.094051][ T1372] usb 9-1: config 0 descriptor?? [ 2366.145042][T24787] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 2366.159931][ T7625] usb 5-1: string descriptor 0 read error: -71 [ 2366.166637][ T7625] usb 5-1: New USB device found, idVendor=16d8, idProduct=6004, bcdDevice=10.cf [ 2366.175725][ T7625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.189800][ T7625] usb 5-1: can't set config #254, error -71 [ 2366.196450][ T7625] usb 5-1: USB disconnect, device number 98 [ 2366.220354][T22512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2366.229057][T22514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2366.242215][T22514] rust_binder: Error while translating object. [ 2366.248405][T22514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2366.248426][T22514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:82 [ 2366.289227][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39649'. [ 2366.326247][T24787] usb 10-1: Using ep0 maxpacket: 32 [ 2366.432572][T22561] rust_binder: 22559 RLIMIT_NICE not set [ 2366.486100][T24787] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2366.530141][T24787] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2366.540540][T24787] usb 10-1: can't read configurations, error -71 [ 2366.550096][ T1372] steelseries 0003:1038:1410.005F: collection stack underflow [ 2366.557618][ T1372] steelseries 0003:1038:1410.005F: item 0 4 0 12 parsing failed [ 2366.568603][ T1372] steelseries 0003:1038:1410.005F: parse failed [ 2366.575286][ T1372] steelseries 0003:1038:1410.005F: probe with driver steelseries failed with error -22 [ 2366.757814][ T1372] usb 9-1: USB disconnect, device number 30 [ 2367.110916][T22575] rust_binder: Error while translating object. [ 2367.110963][T22575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2367.120211][T22575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 2367.148089][ T36] audit: type=1400 audit(2000033200.389:217905): avc: denied { write } for pid=22576 comm="syz.9.39657" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2367.179417][ T36] audit: type=1400 audit(2000033200.389:217906): avc: denied { remove_name } for pid=22576 comm="syz.9.39657" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2367.204199][ T36] audit: type=1400 audit(2000033200.389:217907): avc: denied { unlink } for pid=22576 comm="syz.9.39657" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2367.237767][ T36] audit: type=1400 audit(2000033200.436:217908): avc: denied { write } for pid=22576 comm="syz.9.39657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2367.597158][T22598] netlink: 'syz.8.39662': attribute type 46 has an invalid length. [ 2367.653427][T22605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 2367.655612][T22590] rust_binder: 22590 RLIMIT_NICE not set [ 2367.659583][T22587] SELinux: failed to load policy [ 2367.681508][T22590] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 2367.681534][T22590] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 2367.689901][T22590] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 2367.710761][T18183] rust_binder: 22586: removing orphan mapping 0:24 [ 2367.721011][T22616] netlink: 16 bytes leftover after parsing attributes in process `syz.5.39668'. [ 2367.757880][T22620] binder: Unknown parameter 'fscontext?}' [ 2367.773676][T22623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.782891][T22623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2367.791047][T22626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2367.791303][T22623] rust_binder: Write failure EINVAL in pid:128 [ 2367.870672][T22635] rust_binder: Error in use_page_slow: ESRCH [ 2367.876903][T22635] rust_binder: use_range failure ESRCH [ 2367.883086][T22635] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2367.888563][T22635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2367.896641][T22635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:144 [ 2367.928727][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.39676'. [ 2368.020929][T18030] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2368.039363][T22637] rust_binder: 22638 RLIMIT_NICE not set [ 2368.042253][T18653] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 2368.054880][ T7625] rust_binder: 22636: removing orphan mapping 0:4240 [ 2368.120720][T22644] can0: slcan on ptm0. [ 2368.159495][T18030] usb 5-1: device descriptor read/64, error -71 [ 2368.170815][T22644] can0 (unregistered): slcan off ptm0. [ 2368.225572][T18653] usb 10-1: config index 0 descriptor too short (expected 3133, got 61) [ 2368.233962][T18653] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.244155][T18653] usb 10-1: config 0 has no interfaces? [ 2368.253397][T18653] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2368.267914][T18653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.281932][T18653] usb 10-1: config 0 descriptor?? [ 2368.307596][ T36] audit: type=1400 audit(2000033201.468:217909): avc: denied { module_load } for pid=22648 comm="syz.5.39681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2368.309082][T22649] Invalid ELF header type: 2 != 1 [ 2368.425959][T18030] usb 5-1: device descriptor read/64, error -71 [ 2368.470234][T22651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.478800][T22651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.531690][T22625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.541121][T22625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.587126][T22653] netlink: 104 bytes leftover after parsing attributes in process `syz.8.39683'. [ 2368.596821][T22653] veth1: entered allmulticast mode [ 2368.629730][T18653] usb 10-1: USB disconnect, device number 127 [ 2368.656567][T22656] veth1: left allmulticast mode [ 2368.692441][T18030] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 2368.707159][T22657] rust_binder: 22655 RLIMIT_NICE not set [ 2368.785416][T22666] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2368.798174][T22666] rust_binder: Write failure EFAULT in pid:109 [ 2368.841665][T18030] usb 5-1: device descriptor read/64, error -71 [ 2369.058788][T22670] can0: slcan on ptm0. [ 2369.097797][ T36] audit: type=1400 audit(2000033202.209:217910): avc: denied { unmount } for pid=22084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2369.108118][T18030] usb 5-1: device descriptor read/64, error -71 [ 2369.139752][T22678] binder: Bad value for 'defcontext' [ 2369.145161][T22670] can0 (unregistered): slcan off ptm0. [ 2369.244768][ T36] audit: type=1400 audit(2000033202.350:217911): avc: denied { create } for pid=22693 comm="syz.9.39692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2369.268420][T18030] usb usb5-port1: attempt power cycle [ 2369.282294][T22694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 2369.301143][T22699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2369.588897][ T9143] ipheth 6-1:0.196: Unable to find endpoints [ 2369.614349][T22727] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 2369.641090][T18030] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 2369.674171][T18030] usb 5-1: device descriptor read/8, error -71 [ 2369.750673][T22737] netlink: 'syz.9.39702': attribute type 40 has an invalid length. [ 2369.760379][T22737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22737 comm=syz.9.39702 [ 2369.814342][T18030] usb 5-1: device descriptor read/8, error -71 [ 2369.862182][T22754] rust_binder: Write failure EFAULT in pid:172 [ 2370.078045][T18030] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 2370.113040][T18030] usb 5-1: device descriptor read/8, error -71 [ 2370.249611][T18030] usb 5-1: device descriptor read/8, error -71 [ 2370.326154][T22781] fuse: Bad value for 'fd' [ 2370.376569][T18030] usb usb5-port1: unable to enumerate USB device [ 2370.558042][T22794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2370.558668][T22794] overlayfs: empty lowerdir [ 2370.576180][T22794] SELinux: truncated policydb string identifier [ 2370.582559][T22794] SELinux: failed to load policy [ 2370.587775][T22794] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 18446744073709551614) [ 2370.587790][T22794] rust_binder: Error while translating object. [ 2370.599865][T22794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2370.606044][T22794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 2370.646002][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.39720'. [ 2370.729028][T22799] 9pnet_fd: Insufficient options for proto=fd [ 2370.818814][T22803] rust_binder: 183: no such ref 3 [ 2370.823895][T22803] rust_binder: Read failure Err(EAGAIN) in pid:183 [ 2371.037240][T22809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 2371.053804][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 2371.053817][ T36] audit: type=1400 audit(2000033204.048:217913): avc: denied { create } for pid=22807 comm="syz.4.39724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2371.085028][T22814] rust_binder: Error while translating object. [ 2371.085054][T22814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2371.091339][T22814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 2371.246347][T22824] can0: slcan on ptm0. [ 2371.283526][T22824] can0 (unregistered): slcan off ptm0. [ 2371.382618][T22858] Invalid ELF header type: 3 != 1 [ 2371.418598][ T36] audit: type=1400 audit(2000033204.386:217914): avc: denied { shutdown } for pid=22866 comm="syz.4.39735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2371.447322][T22875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2371.483011][T22880] devpts: called with bogus options [ 2371.484968][ T36] audit: type=1400 audit(2000033204.442:217915): avc: denied { remount } for pid=22879 comm="syz.8.39738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2371.535128][T22887] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2371.815417][T24787] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2371.836732][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2371.845272][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2371.858733][T18030] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 2371.882911][T22906] rust_binder: Error in use_page_slow: ESRCH [ 2371.882930][T22906] rust_binder: use_range failure ESRCH [ 2371.888962][T22906] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2371.894481][T22906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2371.902557][T22906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:199 [ 2371.928133][T22908] veth0_virt_wifi: entered allmulticast mode [ 2371.975296][T24787] usb 9-1: Using ep0 maxpacket: 16 [ 2371.981434][T24787] usb 9-1: config 6 has an invalid interface number: 63 but max is 0 [ 2371.989707][T24787] usb 9-1: config 6 has no interface number 0 [ 2371.995811][T24787] usb 9-1: config 6 interface 63 has no altsetting 0 [ 2372.005495][T24787] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 2372.014568][T24787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.022573][T24787] usb 9-1: Product: syz [ 2372.026722][T24787] usb 9-1: Manufacturer: syz [ 2372.029637][T18030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2372.031325][T24787] usb 9-1: SerialNumber: syz [ 2372.041400][T18030] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2372.058785][T18030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.075639][T18030] usb 5-1: config 0 descriptor?? [ 2372.103690][T22907] veth0_virt_wifi: left allmulticast mode [ 2372.265884][T24787] ftdi_sio 9-1:6.63: FTDI USB Serial Device converter detected [ 2372.274073][T24787] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 2372.285444][T24787] usb 9-1: USB disconnect, device number 31 [ 2372.304844][T24787] ftdi_sio 9-1:6.63: device disconnected [ 2372.408017][T22941] rust_binder: 22939 RLIMIT_NICE not set [ 2372.408874][T22939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2372.414600][T22939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 2372.431260][T18653] rust_binder: 22938: removing orphan mapping 0:24 [ 2372.458924][ T9143] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 2372.470199][ T9143] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2372.488575][T22947] fido_id[22947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2372.526175][T18030] nintendo 0003:057E:200E.0061: unknown main item tag 0x6 [ 2372.533429][T18030] nintendo 0003:057E:200E.0061: unknown main item tag 0x6 [ 2372.540824][T18030] nintendo 0003:057E:200E.0061: unknown main item tag 0x6 [ 2372.548096][T18030] nintendo 0003:057E:200E.0061: item fetching failed at offset 6/7 [ 2372.556678][T18030] nintendo 0003:057E:200E.0061: HID parse failed [ 2372.563299][T18030] nintendo 0003:057E:200E.0061: probe - fail = -22 [ 2372.569900][T18030] nintendo 0003:057E:200E.0061: probe with driver nintendo failed with error -22 [ 2372.616606][T22954] 9pnet_fd: Insufficient options for proto=fd [ 2372.623145][T22954] overlayfs: overlapping lowerdir path [ 2372.692064][T22973] tipc: Enabled bearer , priority 0 [ 2372.765009][T22973] tipc: Disabling bearer [ 2372.840399][T22975] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2372.840425][T22975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2372.848347][T22975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:223 [ 2372.867235][T22977] binder: Unknown parameter 'context[7' [ 2372.908921][T22987] binder: Unknown parameter 'fvb' [ 2372.912279][T22988] binder: Unknown parameter 'fvb' [ 2372.944508][T22993] random: crng reseeded on system resumption [ 2373.003630][T23003] rust_binder: Error in use_page_slow: ESRCH [ 2373.003667][T23003] rust_binder: use_range failure ESRCH [ 2373.009770][T23003] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2373.015239][T23003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2373.023438][T23003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:246 [ 2373.069014][ T36] audit: type=1326 audit(2000033205.934:217916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23004 comm="syz.8.39779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c9218eec9 code=0x0 [ 2373.070058][T24784] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2373.100983][T24784] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2373.253334][ T36] audit: type=1326 audit(2000033206.102:217917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23024 comm="syz.9.39785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a0c58eec9 code=0x0 [ 2373.287710][ T36] audit: type=1326 audit(2000033206.149:217918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23026 comm="syz.5.39786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bed8eec9 code=0x0 [ 2373.323573][ T36] audit: type=1326 audit(2000033206.178:217919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23024 comm="syz.9.39785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a0c58eec9 code=0x0 [ 2373.395619][T23034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2373.478391][T23039] netlink: 'syz.9.39789': attribute type 9 has an invalid length. [ 2373.492697][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.39789'. [ 2373.731323][T23073] overlay: ./file0 is not a directory [ 2374.105626][T23086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2374.108046][T23086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2374.114582][T23086] rust_binder: Error while translating object. [ 2374.121066][T23086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2374.127305][T23086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:288 [ 2374.148733][ T36] audit: type=1400 audit(2000033206.947:217920): avc: denied { read } for pid=23091 comm="syz.5.39809" name="/" dev="configfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2374.181669][ T36] audit: type=1400 audit(2000033206.947:217921): avc: denied { open } for pid=23091 comm="syz.5.39809" path="/" dev="configfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2374.211858][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39811'. [ 2374.223526][T23100] binder: Unknown parameter 'fscontext?}' [ 2374.279929][T23113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.288642][T23113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2375.044653][T23125] rust_binder: Write failure EFAULT in pid:309 [ 2375.088532][T18653] usb 5-1: USB disconnect, device number 103 [ 2375.155779][T23128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2375.169938][T23127] rust_binder: Error in use_page_slow: ESRCH [ 2375.169962][T23127] rust_binder: use_range failure ESRCH [ 2375.176237][T23127] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2375.189884][T23127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2375.206074][T23127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:250 [ 2375.554826][T23139] netlink: 40 bytes leftover after parsing attributes in process `syz.9.39824'. [ 2375.582535][T23141] tipc: Started in network mode [ 2375.587401][T23141] tipc: Node identity 0ad047604d46, cluster identity 4711 [ 2375.594726][T23141] tipc: Enabled bearer , priority 8 [ 2375.652555][T24787] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2375.823145][T18653] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2375.831127][T24787] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 2375.839372][T24787] usb 5-1: config 0 has no interface number 1 [ 2375.845520][T24787] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 2375.854567][T24787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.863169][T24787] usb 5-1: config 0 descriptor?? [ 2375.983000][T18653] usb 9-1: Using ep0 maxpacket: 8 [ 2375.989352][T18653] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 2375.997627][T18653] usb 9-1: config 250 has an invalid interface number: 51 but max is -1 [ 2376.005979][T18653] usb 9-1: config 250 has an invalid descriptor of length 140, skipping remainder of the config [ 2376.016408][T18653] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2376.025448][T18653] usb 9-1: config 250 has no interface number 0 [ 2376.031705][T18653] usb 9-1: too many endpoints for config 250 interface 51 altsetting 162: 84, using maximum allowed: 30 [ 2376.042858][T18653] usb 9-1: config 250 interface 51 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 2376.056245][T18653] usb 9-1: config 250 interface 51 has no altsetting 0 [ 2376.064146][T18653] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2376.073207][T18653] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2376.081462][T18653] usb 9-1: Product: syz [ 2376.085620][T18653] usb 9-1: SerialNumber: syz [ 2376.088601][T24787] usb 5-1: USB disconnect, device number 104 [ 2376.313281][T18653] hub 9-1:250.51: bad descriptor, ignoring hub [ 2376.319524][T18653] hub 9-1:250.51: probe with driver hub failed with error -5 [ 2376.483939][T23181] incfs: Options parsing error. -22 [ 2376.489191][T23181] incfs: mount failed -22 [ 2376.494788][T23181] 9pnet_fd: p9_fd_create_unix (23181): problem connecting socket: ./file0: -111 [ 2376.506673][T18653] usb 9-1: reset high-speed USB device number 32 using dummy_hcd [ 2376.524787][ T36] audit: type=1400 audit(2000033209.180:217922): avc: denied { unmount } for pid=22084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2376.643388][T23189] tipc: Started in network mode [ 2376.648428][T23189] tipc: Node identity 4, cluster identity 4711 [ 2376.654932][ T36] audit: type=1400 audit(2000033209.302:217923): avc: denied { connect } for pid=23190 comm="syz.5.39846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2376.655430][T23189] tipc: Node number set to 4 [ 2376.774972][T23193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22378 sclass=netlink_route_socket pid=23193 comm=syz.5.39847 [ 2376.788544][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2376.793030][T24787] tipc: Node number set to 1201031008 [ 2376.797356][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2376.812433][T23193] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2376.903119][T18653] usb 9-1: failed to restore interface 51 altsetting 162 (error=-71) [ 2376.911409][T18653] usb 9-1: USB disconnect, device number 32 [ 2377.262676][T23196] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2377.278574][ T36] audit: type=1326 audit(2000033209.883:217924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.9.39849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a0c58eec9 code=0x0 [ 2377.517954][T23207] rust_binder: Error while translating object. [ 2377.517994][T23207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2377.524272][T23207] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 2377.534327][T23207] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:262 [ 2377.558134][T24787] rust_binder: 23206: removing orphan mapping 0:8 [ 2377.619710][T23219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 2377.635797][T23222] rust_binder: Write failure EFAULT in pid:336 [ 2377.660503][T23227] overlayfs: overlapping lowerdir path [ 2377.803607][T23235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2377.803644][T23235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 2377.828183][T23239] input: syz0 as /devices/virtual/input/input158 [ 2377.864820][T23243] >: renamed from veth0_vlan (while UP) [ 2377.890024][ T36] audit: type=1326 audit(2000033210.456:217925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.4.39868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840258eec9 code=0x0 [ 2377.907440][T23247] rust_binder: Write failure EFAULT in pid:342 [ 2378.031522][ T36] audit: type=1400 audit(2000033210.596:217926): avc: denied { connect } for pid=23252 comm="syz.8.39871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2378.171278][T23261] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2378.171305][T23261] rust_binder: Error while translating object. [ 2378.180565][T23261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2378.186760][T23261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 2378.281459][T23272] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 2378.807119][T23287] fuse: Bad value for 'fd' [ 2378.831135][T23290] netlink: 'syz.4.39883': attribute type 15 has an invalid length. [ 2378.839093][T23291] netlink: 'syz.4.39883': attribute type 15 has an invalid length. [ 2378.863623][T23296] __vm_enough_memory: pid: 23296, comm: syz.4.39884, bytes: 18014402804453376 not enough memory for the allocation [ 2379.330581][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39893'. [ 2379.340097][T23325] input: syz0 as /devices/virtual/input/input159 [ 2379.395034][ T7625] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2379.425326][ T36] audit: type=1400 audit(2000033211.901:217927): avc: denied { relabelfrom } for pid=23337 comm="syz.4.39895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2379.445595][ T36] audit: type=1400 audit(2000033211.901:217928): avc: denied { relabelto } for pid=23337 comm="syz.4.39895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2379.465708][ T36] audit: type=1326 audit(2000033211.910:217929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.39895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840258eec9 code=0x0 [ 2379.575997][ T7625] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 2379.586067][ T7625] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 2379.595961][ T7625] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2379.603959][ T7625] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 2379.613024][ T7625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.621232][ T7625] usb 9-1: Product: syz [ 2379.625549][ T7625] usb 9-1: Manufacturer: syz [ 2379.630570][ T7625] usb 9-1: SerialNumber: syz [ 2379.636910][T23321] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2379.644193][T23321] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2379.765388][T23352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2379.814643][T23352] netlink: 412 bytes leftover after parsing attributes in process `syz.5.39901'. [ 2379.817265][T23355] fuse: Bad value for 'user_id' [ 2379.837030][T23355] fuse: Bad value for 'user_id' [ 2379.847394][T23359] fuse: Bad value for 'fd' [ 2379.864292][T23363] rust_binder: 354: no such ref 4294967293 [ 2379.867775][T23362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.39904'. [ 2379.887714][T23365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2379.896793][T23365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2379.913905][T23375] overlayfs: failed to clone lowerpath [ 2380.365958][T23377] rust_binder: Write failure EFAULT in pid:216 [ 2380.387330][ T36] audit: type=1400 audit(2000033212.811:217930): avc: denied { write } for pid=23382 comm="syz.4.39911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2380.509069][T23390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 2380.510213][T18653] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2380.537376][T18653] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2380.652603][T23394] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2380.723954][ T36] audit: type=1400 audit(2000033213.120:217931): avc: denied { listen } for pid=23401 comm="syz.4.39917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2380.745083][ T7625] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:f6:4c:cc:9b:5d [ 2380.756591][ T7625] rtl8150 9-1:1.0: eth1: rtl8150 is detected [ 2380.766730][ T7625] usb 9-1: USB disconnect, device number 33 [ 2380.799741][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39920'. [ 2380.809047][T23409] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2380.809062][T23409] rust_binder: Read failure Err(EFAULT) in pid:240 [ 2380.853393][T23415] rust_binder: Error while translating object. [ 2380.860044][T23415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2380.866285][T23415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 2380.936082][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39925'. [ 2381.326317][T23435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 2381.344623][T23437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 2381.430257][T23440] rust_binder: 23439 RLIMIT_NICE not set [ 2381.439695][T23439] rust_binder: Error while translating object. [ 2381.445440][T23439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2381.451699][T23439] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 2381.461089][T23439] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:298 [ 2381.476569][T18653] rust_binder: 23438: removing orphan mapping 0:4224 [ 2381.536862][T24787] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2381.557631][T24787] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2381.678935][T23457] fuse: Invalid rootmode [ 2381.694824][T23462] 9pnet_fd: Insufficient options for proto=fd [ 2381.882959][T23480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2381.882982][T23480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:323 [ 2382.735248][ T36] audit: type=1400 audit(2000033215.006:217932): avc: denied { read } for pid=23502 comm="syz.8.39954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2382.843620][T23506] rust_binder: 23505 RLIMIT_NICE not set [ 2382.844353][T23505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2382.850044][T23505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 2382.889074][T23509] overlayfs: failed to clone upperpath [ 2382.899605][ T36] audit: type=1400 audit(2000033215.156:217933): avc: denied { connect } for pid=23507 comm="syz.9.39955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2382.916920][T18653] rust_binder: 23502: removing orphan mapping 0:24 [ 2382.924387][ T36] audit: type=1400 audit(2000033215.156:217934): avc: denied { link } for pid=23507 comm="syz.9.39955" name="file1" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2382.990343][T23522] netlink: 200 bytes leftover after parsing attributes in process `syz.9.39960'. [ 2382.999509][T23522] tc_dump_action: action bad kind [ 2383.005790][T23522] netlink: 200 bytes leftover after parsing attributes in process `syz.9.39960'. [ 2383.015532][T23522] tc_dump_action: action bad kind [ 2383.027682][T23527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2383.027714][T23527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:339 [ 2383.086477][ T36] audit: type=1400 audit(2000033215.334:217935): avc: denied { accept } for pid=23529 comm="syz.9.39962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2383.316193][T21902] Bluetooth: hci0: command 0x1003 tx timeout [ 2383.322261][T24125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2383.339897][T23546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2383.481030][T23553] No source specified [ 2383.481036][ T36] audit: type=1400 audit(2000033215.710:217936): avc: denied { write } for pid=23550 comm="syz.4.39967" path="socket:[462338]" dev="sockfs" ino=462338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2383.481554][ T36] audit: type=1400 audit(2000033215.710:217937): avc: denied { read } for pid=23550 comm="syz.4.39967" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2383.540244][ T36] audit: type=1400 audit(2000033215.719:217938): avc: denied { open } for pid=23550 comm="syz.4.39967" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2383.565396][ T36] audit: type=1400 audit(2000033215.719:217939): avc: denied { ioctl } for pid=23550 comm="syz.4.39967" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2383.601244][T23557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2383.601272][T23557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:381 [ 2383.761634][T23564] netlink: 'syz.9.39973': attribute type 3 has an invalid length. [ 2383.847156][T23571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2383.855893][T23571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2383.862722][ T9143] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2383.907817][ T36] audit: type=1400 audit(2000033216.104:217940): avc: denied { remount } for pid=23577 comm="syz.8.39979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2383.930166][T23578] __vm_enough_memory: pid: 23578, comm: syz.8.39979, bytes: 18014402804453376 not enough memory for the allocation [ 2384.040958][ T9143] usb 5-1: Using ep0 maxpacket: 8 [ 2384.047100][ T9143] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 2384.055570][ T9143] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2384.065874][ T9143] usb 5-1: config 0 has no interface number 0 [ 2384.072109][ T9143] usb 5-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 2384.086949][ T9143] usb 5-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 2384.096276][ T9143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.104309][ T9143] usb 5-1: Product: syz [ 2384.108744][ T9143] usb 5-1: Manufacturer: syz [ 2384.113385][ T9143] usb 5-1: SerialNumber: syz [ 2384.119606][ T9143] usb 5-1: config 0 descriptor?? [ 2384.126765][ T9143] usb 5-1: bad CDC descriptors [ 2384.222096][T23591] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 2384.222096][T23592] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 2384.296005][T23599] binder: Bad value for 'stats' [ 2384.398925][T23558] rust_binder: Write failure EFAULT in pid:285 [ 2384.443781][T23603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2384.459285][T23603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2384.470332][T23601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.477348][T23601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.484433][T23601] bridge_slave_0: entered allmulticast mode [ 2384.490660][T23601] bridge_slave_0: entered promiscuous mode [ 2384.496948][T23601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.504007][T23601] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.511091][T23601] bridge_slave_1: entered allmulticast mode [ 2384.517197][T23601] bridge_slave_1: entered promiscuous mode [ 2384.566781][T23601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.573867][T23601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2384.581151][T23601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.588219][T23601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2384.608776][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.616122][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.626249][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.633305][ T7984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2384.642262][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.649324][ T7982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2384.673614][T23601] veth0_vlan: entered promiscuous mode [ 2384.684766][T23601] veth1_macvtap: entered promiscuous mode [ 2384.763408][T23627] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2385.019761][T23631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2385.020536][T23632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6930 sclass=netlink_route_socket pid=23632 comm=syz.5.39996 [ 2385.043089][ T1372] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2385.202771][ T1372] usb 2-1: Using ep0 maxpacket: 8 [ 2385.208859][ T1372] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2385.217588][ T1372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2385.227697][ T1372] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2385.236921][ T1372] usb 2-1: config 1 has no interface number 1 [ 2385.243012][ T1372] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2385.255790][ T1372] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2385.270081][ T1372] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2385.279828][ T1372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.287828][ T1372] usb 2-1: Product: syz [ 2385.292213][ T1372] usb 2-1: Manufacturer: syz [ 2385.296811][ T1372] usb 2-1: SerialNumber: syz [ 2385.521367][ T1372] usb 2-1: USB disconnect, device number 10 [ 2385.530711][T22312] udevd[22312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2386.125714][T23665] netlink: 'syz.9.40007': attribute type 6 has an invalid length. [ 2386.151700][T23671] netlink: 324 bytes leftover after parsing attributes in process `syz.9.40009'. [ 2386.210873][ T36] audit: type=1400 audit(2000033218.262:217941): avc: denied { relabelfrom } for pid=23677 comm="syz.9.40012" name="NETLINK" dev="sockfs" ino=463989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2386.706774][ T1372] usb 5-1: USB disconnect, device number 105 [ 2386.820938][T23685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2386.826710][T23692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288 [ 2386.831289][T23687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288 [ 2386.842414][T23685] rust_binder: Error while translating object. [ 2386.861446][T23685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2386.867911][T23685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 2386.954530][T23714] tipc: Enabling of bearer rejected, failed to enable media [ 2387.123046][T23741] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 2387.123046][T23741] NHo" hb [ 2387.225625][T23758] tipc: Enabling of bearer rejected, failed to enable media [ 2387.241608][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.252268][T23761] netlink: 8568 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.257522][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.270645][T23761] netlink: 8568 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.272776][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.280103][T23761] netlink: 8568 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.298035][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40042'. [ 2387.333215][T23774] rust_binder: Write failure EFAULT in pid:298 [ 2387.421941][T23776] rust_binder: Write failure EFAULT in pid:300 [ 2387.466210][T23790] rust_binder: Read failure Err(EAGAIN) in pid:421 [ 2387.505042][T23798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.520192][T23798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.710451][T23801] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2387.729104][T24784] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 2387.743562][T23806] netlink: 37 bytes leftover after parsing attributes in process `syz.1.40059'. [ 2387.900372][T24784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2387.913228][T24784] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 2387.922582][T24784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.934951][T23820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40062'. [ 2387.935113][T24784] usb 5-1: config 0 descriptor?? [ 2388.339741][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 2388.339756][ T36] audit: type=1326 audit(2000033220.269:217949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.40066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9bed8eec9 code=0x0 [ 2388.379690][T24784] ntrig 0003:1B96:0010.0065: report_id 682982077 is invalid [ 2388.386999][T24784] ntrig 0003:1B96:0010.0065: item 0 4 1 8 parsing failed [ 2388.394194][T24784] ntrig 0003:1B96:0010.0065: parse failed [ 2388.399942][T24784] ntrig 0003:1B96:0010.0065: probe with driver ntrig failed with error -22 [ 2388.848865][T23847] tap0: tun_chr_ioctl cmd 1074025677 [ 2388.854256][T23847] tap0: linktype set to 1 [ 2388.913127][T23849] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 2388.924893][ T36] audit: type=1400 audit(2000033220.813:217950): avc: denied { lock } for pid=23850 comm="syz.1.40073" path="socket:[464745]" dev="sockfs" ino=464745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2388.926242][T23851] __vm_enough_memory: pid: 23851, comm: syz.1.40073, bytes: 18014402804453376 not enough memory for the allocation [ 2388.969726][T23852] binder: Bad value for 'stats' [ 2388.984282][T23854] rust_binder: Got transaction with invalid offset. [ 2388.984318][T23854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2388.991126][T23854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 2389.274391][ T1372] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2389.320631][T23876] netlink: 'syz.9.40085': attribute type 3 has an invalid length. [ 2389.328549][T23876] netlink: 'syz.9.40085': attribute type 2 has an invalid length. [ 2389.337094][T23876] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2389.345465][T23876] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 2389.355863][T23876] netlink: 'syz.9.40085': attribute type 4 has an invalid length. [ 2389.366994][T23876] netlink: 'syz.9.40085': attribute type 4 has an invalid length. [ 2389.423621][ T1372] usb 2-1: device descriptor read/64, error -71 [ 2389.614807][T23900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2389.623378][T23900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2389.690107][ T1372] usb 2-1: device descriptor read/64, error -71 [ 2389.945908][ T1372] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2390.084447][ T1372] usb 2-1: device descriptor read/64, error -71 [ 2390.340281][ T1372] usb 2-1: device descriptor read/64, error -71 [ 2390.425544][T23921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.434089][T23921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.457718][ T1372] usb usb2-port1: attempt power cycle [ 2390.589295][T23939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23939 comm=syz.9.40102 [ 2390.683039][T24784] usb 5-1: USB disconnect, device number 106 [ 2390.692461][T23943] rust_binder: Error while translating object. [ 2390.692495][T23943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2390.698683][T23943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 2390.819970][ T1372] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2390.852834][ T1372] usb 2-1: device descriptor read/8, error -71 [ 2390.991429][ T1372] usb 2-1: device descriptor read/8, error -71 [ 2391.246278][ T1372] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2391.268544][ T1372] usb 2-1: device descriptor read/8, error -71 [ 2391.407092][ T1372] usb 2-1: device descriptor read/8, error -71 [ 2391.523441][ T1372] usb usb2-port1: unable to enumerate USB device [ 2401.787387][ T7984] tipc: Disabling bearer [ 2401.969126][ T7984] tipc: Left network mode [ 2402.033620][ T7984] veth1_macvtap: left promiscuous mode [ 2402.039135][ T7984] veth0_vlan: left promiscuous mode [ 2680.438998][ T7984] veth1_macvtap: left promiscuous mode [ 2680.444503][ T7984] veth0_vlan: left promiscuous mode