last executing test programs: 3.61043327s ago: executing program 3 (id=2524): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_lt={'euid<', r3}}, {@subj_user={'subj_user', 0x3d, '[x-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x82/'}}]}}) 2.714796862s ago: executing program 3 (id=2559): r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240)={'fscrypt:', @auto=[0x36, 0x64, 0x35, 0x30, 0x38, 0x38, 0x35, 0x34, 0x37, 0x62, 0x32, 0x39, 0x36, 0x38, 0x32, 0x61]}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) 2.714352002s ago: executing program 3 (id=2560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2}], 0x3d, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x1}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x18, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x11, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 2.702651952s ago: executing program 3 (id=2561): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x70, 0x1b, 0x9, 0x2, 0x21dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4810) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4dc080, 0x0) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2.521992107s ago: executing program 3 (id=2562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x54, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e444416"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000400)}) 1.673722345s ago: executing program 3 (id=2580): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, 'Z}'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000080)={0x23, [0x0, 0x0, 0x0]}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0xeeee8000, 0xf000, 0x3, 0x0, 0xfc}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x82, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 427.220496ms ago: executing program 1 (id=2599): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000180)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000280)={0x1dc, 0x28, 0x20, 0x70bd26, 0x25dfdbfe, "", [@generic="c24cc73152986dc730fbb747c61d182227301807c0944bd3c4d62444f5b9d01436154140e89bd449ec3f143507ff9d57e7bfdcbc2b25b31e5226188e5bffc9cb1552d4ce56dc04376dfba9ce349963fcad621eb1dcfe5430c042f57d962ea6e2ed6be618bba4c8eaf934652c17df65691ec02a53a89d180668f7140eeb3b7180a39d5db8e085c33efc9e417348a9bd64eb7a7348a2a55e10bc769da1c10a0676ccb0940c898a0d5ba56f0904e5ca3ea3488c96c5c2066fa2dfdb8f8f23e59ccd9786acb9c5f0b1ee41368d108165fb661dd9c2eba7540cf8d2a4c4c73e8b60d597", @typed={0x8, 0xec, 0x0, 0x0, @fd=r1}, @nested={0xdc, 0x6e, 0x0, 0x1, [@generic="6cfcd60e0f3014a7da6173603a00a3ff68c1c134ed2756ab69b4956eef5e68ad0524a311e9998468d4a19354957d09f474d1451a6d708f21b062fa6c50247876b7583c43e4786670542b75a61761040a6a1017a36458", @generic="eaca572976900dbb7cce457e56f38b08b8efdc33170f06912794f1346b459ab7a26fc8db4dbc2d7f13543fc61dbeef482d58eb8569c4a0508d74688ad472190bd753a680ab94567855b591c6db012681312f9bfbe4ea3ef7d075b5a96dde180aab9d4483c0cf3d6e828d7d077b1c36260f6b", @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @typed={0x5, 0x46, 0x0, 0x0, @str='\x00'}]}, @typed={0x4, 0x4a}]}, 0x1dc}, {&(0x7f0000000100)={0x24, 0x30, 0x1, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x40}, @typed={0xc, 0x126, 0x0, 0x0, @u64}]}, 0x24}, {&(0x7f0000000480)={0x1a8, 0x14, 0x1bde097ea45b60b2, 0x70bd27, 0x25dfdbff, "", [@nested={0x167, 0x81, 0x0, 0x1, [@nested={0x4, 0x20}, @typed={0x5, 0x5a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xc2}, @generic="13143eef116becd0dd426f46e64784338fb6a26243bf66d9a987068121da190e9004db74666ec42f32e7c326ad32298bcd2b62b78d714d36c8123f10c95b6225395c2eace126a494239e1e237ad6d4182f35f49c90437adef17ff2671f7f958f2c06a2e0b906972b6e1473ad0f70399564f682ed19fcb3f2364f5dd7271dbeb99a9ddd28e853969c3d27bb67ff5e1af9e4bd9e7aa1fbe1474647f8dd21e52a95da8a209859a0f9fddec3832eba4c440443409d84453895eb31941fe8057910f11bdb7e6a43902e7bef135eb75ff0ad758f98d889669c3f02aaa6e06a5dbb16dadfa78eebc4704ca82ea850", @typed={0x10, 0x131, 0x0, 0x0, @str='/dev/ashmem\x00'}, @nested={0x4, 0x28}, @nested={0x4, 0x47}, @generic="82d389d15d2509b7165e474c8f9e9fcd46c69bebf04b94515eaa986b27ca0dd220f2bd615038ead69f5ac441301cf5bf54ecf8b7e8ee6b8207ec171790a44cb16e73ffe594dd51f60aa9e49a7469bda9"]}, @typed={0x14, 0x11a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@mcast2}]}, 0x1a8}], 0x3, 0x0, 0x0, 0x800}, 0x20004001) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0x84619000) 347.734892ms ago: executing program 1 (id=2602): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0xa, 0x4, 0x8, 0x4, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x20}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 299.154366ms ago: executing program 1 (id=2607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0xc7fd8000) (async, rerun: 64) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) (rerun: 64) 252.00642ms ago: executing program 1 (id=2611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1ffffe23, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x5f}]) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000002c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c94037660ffa5750b93b0300000f328fa9189021da820001c0fef3440f0966b881000f00d8", 0x42}], 0x1, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x6, 0x80800) syslog(0x4, &(0x7f0000005480)=""/85, 0x55) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f00000002c0)={0x400002, r9}) close_range(r0, 0xffffffffffffffff, 0x0) 251.36689ms ago: executing program 2 (id=2613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="1c001c00", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363fc986e", 0x52}, {&(0x7f0000000840)="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", 0xb85}, {0x0}], 0x4}, 0x20000044) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2036e3, &(0x7f0000000600)={0x0, 0x8da5, 0xc00, 0x800, 0x2c9}, &(0x7f00000000c0), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x494082, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="1c001c00", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) (async) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363fc986e", 0x52}, {&(0x7f0000000840)="3b9eccc918ce8c50894cb802b04e9492b64a02d85d3ed05eac49318868ad13e4fa9e2f1b165dfcc79e43ed30bb0c212bebb71afc79347f2f1a90e936a487e1ce171789626d34ffa8e3b4415ad869955133f81fab7f450d7ef6df7bf6a16cc39fd78e88662ffd1c3b31ffe836682b1ad9c331a068a75d12fd346d77f5cdacee9fee2203a321c260b0b5fdc8b5d7d43148f4b0fb550dd9d8746f0a0444cfa52af90a966921f9cb48b0c99727166a2f59c12dae2fcc4d891258bd723b5fd1fcb4cb219c87fadebe2582802ef18165f5ff67ba0d4eb4d3ef1f80ba9dff1a74dd5874b3d8017ff61b5174d9660e54f2b5f94f29f6665567b2ca6d0549a500a428ce29b197f754f8e3b6c7dc21260ce97551074886667837db75c9a21cdf92b14dcb2e1f997bab3bf1902b8d8e9eb238c021fdbe48675473dac385e2fada25f767ce5e7576c2dc496841123c81314f100e0648405f0ca9b5aa012d9316f3945e613aba10d1fbc2917143ed606c5513394343c9fac6f95ee678031ba5f4a81d8c2ae0d31c5711c91845f07b0add2bb4bd0f700217044582adf1850b0af5f04b63906918b7312fc3a800d67d8293604321633c41153f83662b2cbec354cf9c33e9eaa8ab2c5e4d86f82d379e98ad8d749595829b548ad77596448bf718c5e52a7dac04f62fde8ab1cc55ee5b6fd57327c8e678c1c8f9b8c235c132faffc553d54253f67d40075d91b7abaa303e5844ee31871fcdded3d8de8df952ae53e60d73e57267117129a4b42df34faa3287bb1c475d9ef904b7a4d33f1f8014e59905c3dc145e3974d71487ce05c9149fb4f9788ef0f519151d82391d783df5753819a0d967d842e60d28257741fb8b794b18a4e2f2f4f10412aa580062d0ef3691f4bdc14d283d672ae10fbbe23fa15f9225642aad56cc8a36538afe97750a0bf313cf3b9fdd881aa067b3b6ad9a69c04b50c9b4f8e29c11d7dcaf08b57ecd5cfd8a01b0e50313d09ea6b3634867f0c23c06055e04c36bddcdc6f4e30b2b6c0b0fa25a20843570bd582df937f7f48cd8e07abcfeaef4f8a72b34978ba5c95d65731943cdf2df8357311bb28d7d72fb9226dcbd059b14242c6fd4ab1ac90367a27ab715ebe553416966ceb79db37cd2dc45687269e4da211fbfdd77a44c730a4732a12ff99fd151d205379bee91935a7bf4eef879d564872fdb2d7c399972ce5d44b59ea05d19a6b00c717b1dd3401a169b4402152b6f21c84c865f00ed0a9da758decaf1ad20138b80bee54a918d5d7dd5432c7ee34ae786cf7f55ea7f67229c39b81cccf80ccb424d139df240a9b18b3c4223de42e71ee7264a1c5db8da2d7fb3dfae2befb2f26e0c996d204ba3df39b111c445f3affed9c9fc8c2b67630de56b5a922f3fd7e0c2ef97df3ad486354937c4606a91874c7403dadaeabd03fe82c92cde4d67c6ac2ad7eedc9761224bf0c6b73ba60934f5c2db9846de4c41c6cb2f5ac6a7ad47418279f6cdd951679c1530ee4dab6d81a8cb41db64fc28ab9598c26fe51f6ddb0900a971aacc92a7e2dfbb596a1571609a4b8bc86c5c218b9220ceca304b7052a58e8c6ce427e4c9b127a133e625c02bf77a89ebff746f829401230f2a757c3ce04a6d01b35350973d24637526278fa724cb3053fd04cba673f682992041dc1cbebe9b574e5ab39307d695b2470cc21122e9c587301630351eeaa5dc1c8bb685ce2b0f4cc25d584354799858c2a11fe1b70518659acff13ad9702e6fd3116d311628bbd9b86f6a09c2a00ad08440860b621716799576b0de92285d0700004719a1eddbb691878526c34ad392e1d72f04d7830686f792152e7e497bc76721aa1c0493698efb8f463d0403d134b9ca6b19240e496edad804be73acb88b0fd1e0de3f00f83a135cf1b58376137e6e93136682343440fd4f96f00d56f9ff265cf5f4b8cc663d56eace1c1eb9fc8bcfcc5f947f14633886ae2b4c6b2bdeb71fcc7802945e484188b3f0425fd96996780f4f9e5ba028e5a600c65bdf6fc6936fc5f9e1792a02cb428f97262167e47a13f6a6634b99eb1791e7cd82f14c8c3353a52569c12e5b40a404564b4cba2fa7f247fbd74e1ab16f4caf68f6ebad58634970c1336d38c3feaf2b5c4eb8afb45aedb65c54b7e6a811c337d68ca5fc58279d7c4c524eb02bb36cd61f6269ce6b81e542e86500c837f7144962b2a6772981bed18a2173e41d73a74235f468305b3f0d5bd0a8f6ce90f6ba63f25322705d6464f9a24cdc13a528a9ae5f3907aa7018f5a1582c5242dbd325d05fef384da2f2cbd65ac0905a2311d75f72e2e1d30d34a62f91ebb79464ad1ca22b94e84d14c2337d13a017f80b3011d715c8629b1a2b638d4e20cdd639ad3db15e85db21494fb5e6ea599f0412d2b238a8a93b9bc930a9e126942c04f26e27631a2a46ef3115c683494bf2d805d03f76b07ea99380725914d01de34b1a5ab51487ea4c70c9591d6f84db21bb1c65c29d47a61b4e227e8bd917e6ff9d8cc1027bd2cf453b49d59cc9d21b13533df66c76cade633aaea0345f8d6e3b14375cc99d0b3e4c0eab870c9bc7b6911014fa556c8db62c3fcfec23deb242278c49b743987d0f65969f2e517b8de7d0b2a74865246cb4f32d40e1a4ea050563f28d3b9f598cf16265b270183cbaf91a2ef96c5aaaf7223a0bdf83c9fbdb324497e11aa4ed8ef02c5c9b7556504c957f2123603c62df3098ba82cd8d9f9738af6067e509159689741a262afd436b8d21c6104d092e66e2fbefa0b7e2c84c6d8ed44410224929b5ff349bef8d9ed6df6193424858f58039e4437b01e12517c86056108c7e6bc21caa884b9f3fd116657b2c8ca30ea557e6c4b60641686d0edf7c49a1c26589f82715e2e1914385bb91100169cf509aa1f3372ab65ccb422d1db5ff6acfde3af9bc2aef6e01455ac94f9d9655dc6020e858f97bb69dce077215d1427f61aabe63786384a2195ce411207aea8af9e3a0e736bf1af08ce4aecf45ce79c46a7f3cb111b14c54de5ef13c54b68fa5fa11bfbbf6bfcde697b300a2bbc152260db6bd5d9e9a648d9e54531c4e16610b885dd9e2f620879ca8d126f843630f17ddc42fb502a0f51ee6c630eb734c54891094684f9e34e5331ccb5570bed0fc99361e681e9e2f9ee16c8d3d89ddc7b1e51c70942b0a890d69411f1e8a8e73c6415eeb848a6987f806af7ef5c62ec16b862164943325b8c5b3ae2d8df2e33bb5dac9546c2b32070d05bb2753c6ade48f1c54fb0e3333c2de138a736a19e895037090336bc5e7e3683f7cdf148d20f5bbcfaa458fb9a24faa62c7151577ac9ab8f10af0e70b35c8c2d5d30c53e394d1eda842fef1647ec686022df373ca10be06ab8d74b56f2c7108f08d56b6c9e3980c6f30e14a1a154c5fec893deb607868eeeb6f981cfd08056b54f3327bb733cbd64c7c79447489dd6950b07c079544da5f184e21dbe9478dc0b5ed245e0dc9f60b577d0230e4a92fe1d7c2d1cb354f65da8f28692159b103e6564c58854f8bedc969f4e1158b58a90f21aa67686fcd74a8cc8909fe8557662582bf916cb409af96267dc0cbb5232309c5934e152e758f28518f37fa1da83fdfefb0f2991a13aa4c03e4f8ba4e2721a7c5e78474c05581299f3e9d24c433685dcea029494a7b7bd74cc986b3a4a92b5f6a21a2f7dcee7605474e1508ab632a9a4aa1992c7bf3d9265bffb047cdd0ebce043e411a3260de73af0dcbf6197a60a81846b3ae05db1227d5fc2815a9a7572764bbcf83d47fe202ffff6bda074405bb6132e3063bfd0ebdca4b8f8074f784bb0823fba59188764a37f73adcbcd80e7f82ac948d27102e6559fcee0911a8627e4c9a9cf4a3db42ba75d7b9b44295f584bf35b40e20ebdf0bd4a1e72517197ee97d094dfb4010dd14d61fb13fb325bc37ad76fe84b7862e80312963ebf5a6df02ce54e68aaf1818c774eaac75cd551841f08cc33a887aca1839e5f88798518d73fbba066257ea0f4383214d16597ec5021452250d528806674510d2c92e4d40d19fedbfb3d7bd41bd36374e111d2ca1310ee91768269e59fd27abe2482d6428de48772f8b10b6a9b4f0af6bdb7ad5ddf08a2c9107c817f0fac7ab1cfe2adc5973328bb0cd979ade83b70967edfd8c1097a444d05da3c93ab2ac20dc24", 0xb85}, {0x0}], 0x4}, 0x20000044) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) syz_io_uring_setup(0x2036e3, &(0x7f0000000600)={0x0, 0x8da5, 0xc00, 0x800, 0x2c9}, &(0x7f00000000c0), 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x494082, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000040)) (async) 251.13692ms ago: executing program 0 (id=2614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@private0, 0x0}, &(0x7f00000002c0)=0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000280)={0x1}) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x1, 0x20, 0x2a, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x408, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xaa?#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '({\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',-,-\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "63f0b13160c41fa0b2044058956aae493c3b21cd85df1fc42d35865ca36f6cbfea51394305b91c02f51ef141dee9d6c89c15"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "96cdfd17f8713f71a21ec104e95ecf29c52d7354fe264e7b9fc7f5357305669194d7f72b1c85b782492477364f00f8beb9b3d2368fa318b9c0f18618901f0012b0f6810d4f02238cb9ab07af31d8b5d743822eaff3874c4861e4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "457b420d1cc2f186c8dbe988e9fc4e9d53dce47f82d0b26ea0f4a0a3b5f87fa7541e0a22f489840aaedb8cd7ff767bec01e708b3e813c46f6e601755550c37e75a2813a209714e5dbd217e210de6b3f4d34d30b53a72cd17fbed1847f2b3d6614c5b5aa3ad9dca566d5a4e5bf11a11da7841e84c20aa8691157da1a092f25f1c2d88529095fc87b0aad86c3bbf00219f29d2d1f14d71caea3b998e88cef0c07490d5846ebc41c8657eb81577934d37260652720a04c76e4d7e9f91b05b598727683d1eb4e045de6f7e90bc1882028bdb6ffa1c4f5707071a850825822341c41968eb668cb1"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000800)=@ccm_128={{0x304}, "488d9c9043dff6df", "ad0326fbcc3791bc26e85f6570b86256", "864635cf", "f33a9c4e3e02b48c"}, 0x28) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r10 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r10, 0x0) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[], 0xffdd) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000240)={[0x8]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r11) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 236.427031ms ago: executing program 2 (id=2615): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff98000040"]) (async) sendmsg$netlink(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') lseek(r3, 0x6, 0x2) (async) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 208.466604ms ago: executing program 2 (id=2616): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f32, 0x8}]}}) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x20000884, 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x73, "e64b59879d37376e0ae3a91c2c49ef933a2a9b52e76bd600d7f55d1f0aebb4dd641c8665144bbd5cba249ddb57abe775e7bfe691e82d2a1b8303f48805a17c7e8ee7f8781f0827eae9a53086fe9c6715f7c5f2973c93af116b12172e5e98d61ed135b6cbf6119d0dd2ad14f4e2021589d0211b"}, &(0x7f0000000180)=0x97) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x3c, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140100001a0001000000000000000000fc010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc00000000000000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040a000200000000000000000014000e00ff01000000000000000000000000000108001e00fcffffff08001d008000"/204], 0x114}}, 0x0) (async) r10 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) listen(r10, 0x0) r11 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r11, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async, rerun: 64) accept4$nfc_llcp(r10, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$tipc(r11, &(0x7f0000000640)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x4}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21001, 0x0) 156.382658ms ago: executing program 0 (id=2617): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ffc0000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'hsr0\x00', {0x10001}, 0x1ff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 155.585408ms ago: executing program 1 (id=2618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4040800) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000251a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000340)=[@dead_binder_done, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x8, 0x2, 0x36}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x95, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c"}) 149.259379ms ago: executing program 0 (id=2619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0xfffd, 0x20, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x100000001, 0x0, 0x7fffffffffffffff, 0x1, 0xffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x4}, {{@in6=@mcast1, 0x4d5, 0xff}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3507, 0x0, 0x2, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x6, 0x1ff, 0x2, 0x7, "ff00000000000000000000008000"}) (async) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x1) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4b, 0x3, 0x8, '\x00', 0xe9}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 105.659842ms ago: executing program 1 (id=2620): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000340)={0x0, 0x4, 0x5, {0x5, 0x23, "6534a4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 74.973964ms ago: executing program 0 (id=2621): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x0, 0x434) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x2, 0x15}, @fda={0x66646185, 0x6, 0x1, 0xc97}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000040)}}], 0xffffffffffffffd7, 0x0, &(0x7f0000000580)="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"}) 74.433444ms ago: executing program 2 (id=2622): futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) mount(&(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth1_to_bridge\x00', @multicast}) chmod(&(0x7f0000000100)='./cgroup\x00', 0x40) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x2, 0x15}, @fda={0x66646185, 0x6, 0x1, 0xc97}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000040)}}], 0xffffffffffffffd7, 0x0, &(0x7f0000000580)="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"}) 74.244364ms ago: executing program 0 (id=2623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 73.566054ms ago: executing program 2 (id=2624): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x400, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x96ac0a7df1da2c70}, 0x2) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000500)="5ff3ac0c86f0d58ed63d6cde805f998d4c12fedd682bc1d5146e6a66fb9399d476e51489f98ee47b5af14afc9ed102836e4504861cc27f28e56c2b0f16823aa72aca47a4958a9f09d68338f0cbc120e2ec830a190128bb1a84fab3ee2c4a47959794bf2c3d4bb7cd219df0c78fd9210c1da24f6d92940f64f897f708ed4186ff9031cfaf5e04c443bc71de886e6fcad55ce492ac8f1cafaa23346aff00f12592f66c8fc45241977ac07f1e78a25029cf5cb39f99f214de43a296d40b2d36aaba") syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) mremap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000880)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f00000008c0)=r9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000b80)={0x4, &(0x7f0000000900)=[{@none}, {@none}, {}, {@fixed}]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1040}, 0x4040) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r10, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1ad43882fd7869a8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x97}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendto$inet(r7, &(0x7f0000000e80)="64553d621f39ff688f912f294790dd8f193332ceb33c45c15b1951f6c9e1cd80da3f935c9b02ba0776fa5c55ea27519808654e8d489b32e7a0694afaeab79ec285dadebc6f2e2ee5e23aaf29ee4caf05c591bc2dae88e366d6d4f1942d57d50cb3d1e07a11166c989dd257dde0f7465543ac3102587be8e7e01f135d1056613b58669ff578e2b8e13d28e8d8ecabee87d1ee6a1e6a1afc884ce53bac9cd9c501f605e5b2e30be2e89d13c45fc14ce23307", 0xb1, 0x1, &(0x7f0000000f40)={0x2, 0x4e20, @broadcast}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r12, 0xfc876de42bf49f80, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x18) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x4004014) 8.29974ms ago: executing program 2 (id=2625): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x2, 0x7, @local, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x1b7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x37a8d000) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, 0x51) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a0a3df8ceef4ad4eefdc8ae8ad14389024b26b8f3a925b8cffa276fe6dc2a04c4587ba24984d93bb461f92e61870569d3cf90456e3344332f1c5f9b8566e1c44e599c15c559facc7ea0a06b9964aa0982ee2b01deb9f61b9d9fd61f8f20d81be943f4fb789db7471b3888f3ed435c7ba6f777e6f852cd4c4abcb2ba8bd322c0dd5bbb2999498b4e1abe5333ed4075b585c11159c4a0c7b73a669b15a0d6d93a12c70a4dbf946e1303a5"], 0x128}, 0x4000840) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x60, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000240)=0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047437, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) dup3(r5, r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x1, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 0s ago: executing program 0 (id=2626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500), 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000100)="9a38aae61845c6d3df8ffc7e999e258c08e530f32f01cb04b9ad6ef372a583e739d9053ea8768e10782734eff5ee29e77ec29055e6d6311ad0efad51484e2863154bd7dfabd37df54f2b848f01524f0a508695a98e56bd3efc5da0243f502e6c046059356ea5d90355edc2d7c296f98fbe431e0169428d836c2ffadeb97bf3c70182362323506700ca8db57f3a82eb88ce6c05e80dc230f55d0beb30cb0b8db6063f4554e34a0d27a605c3d2b581cba56568b729fd66cdbf35f28c68d66febe9", 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0xfffffc7f, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): 740][ T351] usb 3-1: Using ep0 maxpacket: 32 [ 41.175918][ T36] audit: type=1400 audit(1755719336.899:406): avc: denied { ioctl } for pid=1027 comm="syz.3.238" path="socket:[7073]" dev="sockfs" ino=7073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.201305][ T351] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.209963][ T351] usb 3-1: config 0 has no interface number 0 [ 41.216406][ T351] usb 3-1: config 0 interface 184 has no altsetting 0 [ 41.225440][ T351] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.234717][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.242996][ T351] usb 3-1: Product: syz [ 41.247518][ T351] usb 3-1: Manufacturer: syz [ 41.256052][ T1034] mmap: syz.3.240 (1034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.259534][ T351] usb 3-1: SerialNumber: syz [ 41.274588][ T351] usb 3-1: config 0 descriptor?? [ 41.288932][ T351] smsc75xx v1.0.0 [ 41.524182][ T1055] fuse: Bad value for 'fd' [ 41.552371][ T1061] netlink: 'syz.1.248': attribute type 20 has an invalid length. [ 41.573837][ T1064] overlayfs: conflicting options: nfs_export=on,index=off [ 41.737804][ T1086] netlink: 76 bytes leftover after parsing attributes in process `syz.1.256'. [ 42.111758][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 42.127778][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 42.137554][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 42.148965][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 42.159015][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 42.169603][ T351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 42.181854][ T351] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 42.194633][ T351] usb 3-1: USB disconnect, device number 7 [ 42.686849][ T351] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 42.706654][ T1112] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.715111][ T1112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'. [ 42.759135][ T1120] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 42.779383][ T1122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.783134][ T1123] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 42.846857][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 42.861663][ T351] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.869952][ T351] usb 4-1: config 0 has no interface number 0 [ 42.878252][ T351] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 42.887585][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.895849][ T351] usb 4-1: Product: syz [ 42.900229][ T351] usb 4-1: Manufacturer: syz [ 42.904946][ T351] usb 4-1: SerialNumber: syz [ 42.910358][ T351] usb 4-1: config 0 descriptor?? [ 42.916505][ T351] smsc95xx v2.0.0 [ 43.318205][ T351] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 43.329231][ T351] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.940055][ T1110] rust_binder: 1104 RLIMIT_NICE not set [ 43.940632][ T351] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 43.957828][ T351] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 43.968234][ T351] usb 4-1: USB disconnect, device number 16 [ 44.455540][ T434] rust_binder: 1103: removing orphan mapping 0:24 [ 44.517555][ T1182] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 44.517586][ T1182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.525815][ T1182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:108 [ 45.340898][ T1269] rust_binder: 1268 RLIMIT_NICE not set [ 45.355763][ T9] rust_binder: 1267: removing orphan mapping 0:24 [ 45.380015][ T1272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.465767][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 45.465785][ T36] audit: type=1400 audit(1755719341.189:425): avc: denied { read write } for pid=1275 comm="syz.3.317" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.514522][ T36] audit: type=1400 audit(1755719341.229:426): avc: denied { open } for pid=1275 comm="syz.3.317" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.537870][ T36] audit: type=1400 audit(1755719341.229:427): avc: denied { ioctl } for pid=1275 comm="syz.3.317" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.623846][ T36] audit: type=1400 audit(1755719341.349:428): avc: denied { getopt } for pid=1286 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.657196][ T1291] /dev/rnullb0: Can't open blockdev [ 45.916832][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 46.076819][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.326816][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.586844][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 46.736845][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.814272][ T1317] 9pnet_fd: Insufficient options for proto=fd [ 46.976821][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.086926][ T45] usb usb4-port1: attempt power cycle [ 47.163483][ T36] audit: type=1400 audit(1755719342.889:429): avc: denied { ioctl } for pid=1320 comm="syz.1.334" path="socket:[8773]" dev="sockfs" ino=8773 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.199221][ T1329] overlayfs: failed to clone upperpath [ 47.267489][ T36] audit: type=1400 audit(1755719342.969:430): avc: denied { bind } for pid=1334 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.305408][ T1343] /dev/loop0: Can't lookup blockdev [ 47.399825][ T1350] 9pnet_fd: Insufficient options for proto=fd [ 47.426808][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 47.467836][ T45] usb 4-1: device descriptor read/8, error -71 [ 47.608020][ T45] usb 4-1: device descriptor read/8, error -71 [ 47.758710][ T1372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.758736][ T1372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 47.769046][ T1372] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.778421][ T1372] rust_binder: Read failure Err(EFAULT) in pid:222 [ 47.798194][ T1375] overlayfs: upper fs does not support file handles, falling back to index=off. [ 47.815481][ T1375] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 47.856957][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 47.878400][ T45] usb 4-1: device descriptor read/8, error -71 [ 47.928994][ T1379] rust_binder: inc_ref_done called when no active inc_refs [ 47.929021][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 48.009384][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.137054][ T45] usb usb4-port1: unable to enumerate USB device [ 48.196849][ T434] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 48.303349][ T36] audit: type=1400 audit(1755719344.029:431): avc: denied { mount } for pid=1386 comm="syz.0.360" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 48.367938][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.379304][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.389793][ T434] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 48.399785][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.409179][ T434] usb 3-1: config 0 descriptor?? [ 48.813599][ T36] audit: type=1400 audit(1755719344.539:433): avc: denied { accept } for pid=1394 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.837862][ T36] audit: type=1400 audit(1755719344.539:432): avc: denied { accept } for pid=1394 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.089453][ T434] usb 3-1: string descriptor 0 read error: -71 [ 49.096407][ T434] uclogic 0003:256C:006E.0004: failed retrieving string descriptor #200: -71 [ 49.105362][ T434] uclogic 0003:256C:006E.0004: failed retrieving pen parameters: -71 [ 49.113768][ T434] uclogic 0003:256C:006E.0004: failed probing pen v2 parameters: -71 [ 49.121944][ T434] uclogic 0003:256C:006E.0004: failed probing parameters: -71 [ 49.129772][ T434] uclogic 0003:256C:006E.0004: probe with driver uclogic failed with error -71 [ 49.140088][ T434] usb 3-1: USB disconnect, device number 8 [ 49.369227][ T1406] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 49.419495][ T36] audit: type=1400 audit(1755719345.149:434): avc: denied { name_bind } for pid=1420 comm="syz.0.372" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.534190][ T1425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=1425 comm=syz.3.374 [ 49.657918][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 49.667029][ T1435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 49.676003][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 49.963397][ T1487] fuse: Unknown parameter '0x0000000000000006' [ 49.980349][ T1490] veth1_vlan: mtu greater than device maximum [ 50.181348][ T1526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.191662][ T1526] overlayfs: failed to set xattr on upper [ 50.198774][ T1526] overlayfs: ...falling back to redirect_dir=nofollow. [ 50.205706][ T1526] overlayfs: ...falling back to index=off. [ 50.211988][ T1526] overlayfs: ...falling back to uuid=null. [ 50.218475][ T1526] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 50.238460][ T1528] fuse: Bad value for 'fd' [ 50.238455][ T1529] fuse: Bad value for 'fd' [ 50.321909][ T1537] 9pnet_fd: Insufficient options for proto=fd [ 50.336865][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 50.379355][ T1547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.379621][ T1547] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 50.419718][ T1559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 50.427899][ T1559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:248 [ 50.450022][ T1561] rust_binder: Write failure EFAULT in pid:251 [ 50.489898][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.508097][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.518194][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.527983][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.531768][ T1562] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 50.537572][ T9] usb 4-1: config 0 descriptor?? [ 50.552941][ T9] hub 4-1:0.0: USB hub found [ 50.640738][ T1567] fuseblk: Bad value for 'fd' [ 50.646031][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 50.646047][ T36] audit: type=1400 audit(1755719346.369:445): avc: denied { map } for pid=1564 comm="syz.2.418" path="socket:[8015]" dev="sockfs" ino=8015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 50.754768][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 50.784177][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 50.790425][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.817399][ T9] usb 4-1: USB disconnect, device number 21 [ 50.886940][ T236] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.926738][ T36] audit: type=1400 audit(1755719346.649:446): avc: denied { bind } for pid=1591 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.946247][ T36] audit: type=1400 audit(1755719346.659:447): avc: denied { name_bind } for pid=1591 comm="syz.0.428" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 50.968017][ T36] audit: type=1400 audit(1755719346.659:448): avc: denied { node_bind } for pid=1591 comm="syz.0.428" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 50.990057][ T36] audit: type=1326 audit(1755719346.679:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 51.014007][ T36] audit: type=1326 audit(1755719346.679:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 51.038041][ T236] usb 3-1: device descriptor read/64, error -71 [ 51.044355][ T36] audit: type=1326 audit(1755719346.679:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0c9d8e7eb code=0x7ffc0000 [ 51.068005][ T36] audit: type=1326 audit(1755719346.679:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 51.091617][ T36] audit: type=1326 audit(1755719346.679:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 51.116103][ T36] audit: type=1326 audit(1755719346.679:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0c9d8e7eb code=0x7ffc0000 [ 51.162911][ T1608] 9pnet_fd: Insufficient options for proto=fd [ 51.276880][ T236] usb 3-1: device descriptor read/64, error -71 [ 51.362706][ T1623] netlink: 104 bytes leftover after parsing attributes in process `syz.3.440'. [ 51.516852][ T236] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.646910][ T236] usb 3-1: device descriptor read/64, error -71 [ 51.806336][ T1661] netlink: 76 bytes leftover after parsing attributes in process `syz.0.454'. [ 51.886839][ T236] usb 3-1: device descriptor read/64, error -71 [ 52.003942][ T236] usb usb3-port1: attempt power cycle [ 52.142791][ T1691] devpts: called with bogus options [ 52.346895][ T236] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.368373][ T236] usb 3-1: device descriptor read/8, error -71 [ 52.497859][ T236] usb 3-1: device descriptor read/8, error -71 [ 52.736835][ T236] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.758038][ T236] usb 3-1: device descriptor read/8, error -71 [ 52.888801][ T236] usb 3-1: device descriptor read/8, error -71 [ 52.996998][ T236] usb usb3-port1: unable to enumerate USB device [ 53.894867][ T1754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.902779][ T1754] overlayfs: failed to set xattr on upper [ 53.909117][ T1754] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.916251][ T1754] overlayfs: ...falling back to uuid=null. [ 54.168232][ T1765] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 54.602236][ T1778] 9pnet_fd: Insufficient options for proto=fd [ 54.732525][ T1791] overlayfs: failed to clone upperpath [ 54.827968][ T1805] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.854688][ T1808] batadv_slave_0: mtu less than device minimum [ 54.862822][ T1808] overlay: filesystem on ./bus is read-only [ 55.159805][ T1816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 55.249634][ T1827] overlayfs: failed to clone upperpath [ 55.306307][ T1835] bridge0: port 3(macsec0) entered blocking state [ 55.313066][ T1835] bridge0: port 3(macsec0) entered disabled state [ 55.319810][ T1835] macsec0: entered allmulticast mode [ 55.325404][ T1835] veth1_macvtap: entered allmulticast mode [ 55.335519][ T1835] macsec0: entered promiscuous mode [ 55.341228][ T1835] bridge0: port 3(macsec0) entered blocking state [ 55.347723][ T1835] bridge0: port 3(macsec0) entered forwarding state [ 55.777731][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 55.777746][ T36] audit: type=1400 audit(1755719351.509:480): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=480 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 55.808480][ T36] audit: type=1400 audit(1755719351.509:481): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=480 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 55.831869][ T36] audit: type=1400 audit(1755719351.509:482): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=480 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 55.862700][ T36] audit: type=1400 audit(1755719351.589:483): avc: denied { map } for pid=1857 comm="syz.0.526" path="socket:[9868]" dev="sockfs" ino=9868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 56.147353][ T1876] tmpfs: Unknown parameter 'usrquota0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 56.147353][ T1876] 0 [ 57.082296][ T1890] overlayfs: failed to clone upperpath [ 57.623650][ T36] audit: type=1400 audit(1755719353.349:484): avc: denied { sys_nice } for pid=1911 comm="syz.3.544" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.792622][ T1930] overlayfs: missing 'lowerdir' [ 57.836237][ T1928] TCP: out of memory -- consider tuning tcp_mem [ 57.914349][ T1950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.557'. [ 57.956739][ T1954] overlayfs: failed to resolve './file1': -2 [ 58.004377][ T1958] tipc: Can't bind to reserved service type 1 [ 58.143611][ T36] audit: type=1400 audit(1755719353.869:485): avc: denied { bpf } for pid=1971 comm="syz.3.567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.443989][ T1984] bridge0: entered allmulticast mode [ 58.463464][ T1986] netlink: 'syz.1.573': attribute type 27 has an invalid length. [ 58.523872][ T1993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.576'. [ 58.834388][ T36] audit: type=1400 audit(1755719354.559:486): avc: denied { read } for pid=2004 comm="syz.2.580" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.858510][ T36] audit: type=1400 audit(1755719354.559:487): avc: denied { open } for pid=2004 comm="syz.2.580" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.994407][ T36] audit: type=1400 audit(1755719354.719:488): avc: denied { ioctl } for pid=2008 comm="syz.1.582" path="socket:[10573]" dev="sockfs" ino=10573 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.020272][ T36] audit: type=1400 audit(1755719354.749:489): avc: denied { getopt } for pid=2008 comm="syz.1.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.146816][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 59.270622][ T2028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 59.296811][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 59.303455][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.312193][ T9] usb 3-1: config 0 has no interface number 0 [ 59.318565][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 59.327105][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.336624][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.344916][ T9] usb 3-1: Product: syz [ 59.349237][ T9] usb 3-1: Manufacturer: syz [ 59.353918][ T9] usb 3-1: SerialNumber: syz [ 59.367598][ T9] usb 3-1: config 0 descriptor?? [ 59.373495][ T9] smsc75xx v1.0.0 [ 59.385411][ T2030] fuse: Bad value for 'fd' [ 59.979620][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 59.990968][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.001057][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 60.013890][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 60.024083][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 60.034868][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 60.044549][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 60.054747][ T9] usb 3-1: USB disconnect, device number 13 [ 60.214737][ T2057] fuse: Bad value for 'group_id' [ 60.220209][ T2057] fuse: Bad value for 'group_id' [ 60.362618][ T2098] overlayfs: failed to resolve '/ [ 60.362618][ T2098] MOì"Ù': -2 [ 60.403905][ T2096] 9pnet_fd: Insufficient options for proto=fd [ 60.403905][ T2106] 9pnet_fd: Insufficient options for proto=fd [ 60.760844][ T2155] tipc: Started in network mode [ 60.765950][ T2155] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 60.775827][ T2155] tipc: Enabling of bearer rejected, failed to enable media [ 60.888202][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 60.888220][ T36] audit: type=1326 audit(1755719356.619:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2178 comm="syz.1.634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44a9f8ebe9 code=0x0 [ 61.184378][ T36] audit: type=1400 audit(1755719356.909:493): avc: denied { create } for pid=2210 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 61.204894][ T36] audit: type=1400 audit(1755719356.909:492): avc: denied { create } for pid=2210 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 61.245471][ T36] audit: type=1400 audit(1755719356.969:494): avc: denied { create } for pid=2218 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 61.538597][ T2229] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 61.595449][ T2240] overlayfs: failed to clone upperpath [ 61.612406][ T2242] netlink: 25 bytes leftover after parsing attributes in process `syz.3.651'. [ 61.622028][ T2241] TCP: out of memory -- consider tuning tcp_mem [ 61.896826][ T236] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 62.067010][ T236] usb 3-1: Using ep0 maxpacket: 16 [ 62.073902][ T236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.086824][ T236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.097200][ T236] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 62.106402][ T236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.115519][ T236] usb 3-1: config 0 descriptor?? [ 62.527924][ T2248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 62.537568][ T36] audit: type=1400 audit(1755719358.269:495): avc: denied { write } for pid=2247 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.557628][ T236] usbhid 3-1:0.0: can't add hid device: -71 [ 62.564252][ T236] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.573763][ T236] usb 3-1: USB disconnect, device number 14 [ 63.487394][ T2302] fuseblk: Bad value for 'user_id' [ 63.492646][ T2302] fuseblk: Bad value for 'user_id' [ 63.508894][ T2304] 9pnet_fd: Insufficient options for proto=fd [ 63.819570][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 63.835771][ T2319] netlink: 188 bytes leftover after parsing attributes in process `syz.3.680'. [ 63.926496][ T2326] netlink: 57 bytes leftover after parsing attributes in process `syz.1.682'. [ 63.974870][ T2334] netlink: 'syz.3.686': attribute type 2 has an invalid length. [ 63.983092][ T2334] netlink: 1 bytes leftover after parsing attributes in process `syz.3.686'. [ 64.164824][ T2367] fuseblk: Bad value for 'fd' [ 64.186901][ T36] audit: type=1400 audit(1755719359.924:496): avc: denied { write } for pid=2373 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.790910][ T2385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=2385 comm=syz.0.705 [ 64.896580][ T36] audit: type=1400 audit(1755719360.624:497): avc: denied { listen } for pid=2398 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.079217][ T2418] overlayfs: failed to clone upperpath [ 65.108847][ T36] audit: type=1400 audit(1755719360.844:498): avc: denied { create } for pid=2419 comm="syz.3.717" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.132161][ T36] audit: type=1400 audit(1755719360.844:499): avc: denied { write } for pid=2419 comm="syz.3.717" name="file2" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.155023][ T36] audit: type=1400 audit(1755719360.844:500): avc: denied { open } for pid=2419 comm="syz.3.717" path="/160/file2" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.203749][ T2425] overlayfs: failed to clone upperpath [ 65.340074][ T2427] x_tables: duplicate entry at hook 1 [ 65.385334][ T2436] 9pnet_fd: Insufficient options for proto=fd [ 66.046661][ T2478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 66.170316][ T2490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'. [ 66.432259][ T2504] rust_binder: Write failure EINVAL in pid:340 [ 66.453260][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 66.453279][ T36] audit: type=1326 audit(1755719362.184:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2507 comm="syz.2.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 66.670157][ T2511] 9pnet_fd: Insufficient options for proto=fd [ 66.714436][ T2525] netlink: 96 bytes leftover after parsing attributes in process `syz.0.754'. [ 66.728272][ T2527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.755'. [ 66.750253][ T2536] raw_sendmsg: syz.0.757 forgot to set AF_INET. Fix it! [ 67.292564][ T2563] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 67.301515][ T2563] overlayfs: missing 'lowerdir' [ 67.303850][ T2565] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.315939][ T36] audit: type=1400 audit(1755719363.044:504): avc: denied { mounton } for pid=2564 comm="syz.2.767" path="/dev/binderfs/binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.348337][ T36] audit: type=1326 audit(1755719363.084:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2566 comm="syz.2.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 67.774632][ T2577] syz.3.771 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.055750][ T2592] overlayfs: failed to clone upperpath [ 68.141711][ T36] audit: type=1400 audit(1755719363.874:506): avc: denied { accept } for pid=2599 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 68.421653][ T2618] netlink: 'syz.3.786': attribute type 29 has an invalid length. [ 68.429579][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 68.586830][ T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 68.736826][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 68.743433][ T65] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.756681][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.763610][ T65] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 68.772945][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.782033][ T65] usb 3-1: config 0 descriptor?? [ 69.023075][ T2624] overlay: Unknown parameter 'smackfstransmute' [ 69.057687][ T36] audit: type=1400 audit(1755719364.794:507): avc: denied { create } for pid=2628 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.077412][ T36] audit: type=1400 audit(1755719364.794:508): avc: denied { create } for pid=2628 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.097200][ T36] audit: type=1400 audit(1755719364.804:509): avc: denied { create } for pid=2628 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.193257][ T65] chicony 0003:04F2:0418.0005: hidraw0: USB HID v0.04 Device [HID 04f2:0418] on usb-dummy_hcd.2-1/input0 [ 69.218602][ T2637] syz.3.793 uses obsolete (PF_INET,SOCK_PACKET) [ 69.392167][ T2612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.401328][ T2612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.410121][ T36] audit: type=1400 audit(1755719365.144:510): avc: denied { connect } for pid=2611 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.417707][ T65] usb 3-1: USB disconnect, device number 15 [ 69.656079][ T36] audit: type=1400 audit(1755719365.384:511): avc: denied { bind } for pid=2661 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.822938][ T36] audit: type=1400 audit(1755719365.554:512): avc: denied { accept } for pid=2672 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.861279][ T2678] overlayfs: missing 'lowerdir' [ 69.980106][ T2685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.124604][ T2690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.228049][ T2695] overlayfs: failed to clone upperpath [ 70.323739][ T2699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.323773][ T2699] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 70.347568][ T2699] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:373 [ 70.352866][ T2705] netlink: 1 bytes leftover after parsing attributes in process `syz.1.819'. [ 70.385415][ T236] rust_binder: 2698: removing orphan mapping 0:24 [ 70.408117][ T2713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 70.431211][ T2717] fuse: Bad value for 'fd' [ 70.676162][ T65] rust_binder: 2720: removing orphan mapping 0:24 [ 70.770666][ T2784] netlink: 277 bytes leftover after parsing attributes in process `syz.1.847'. [ 70.905271][ T2768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'. [ 70.966852][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 71.116851][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 71.123359][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.132242][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.140984][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.150383][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.160386][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.170485][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.183734][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.193367][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.202073][ T31] usb 3-1: config 0 descriptor?? [ 71.412281][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.432373][ T31] usb 3-1: USB disconnect, device number 16 [ 71.440890][ T31] usblp0: removed [ 71.846866][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 71.996818][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 72.003753][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.012891][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.022096][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.031591][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.041431][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.051400][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.064671][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.073863][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.082681][ T9] usb 3-1: config 0 descriptor?? [ 72.135334][ T2852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 72.395505][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.601763][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 72.601779][ T36] audit: type=1400 audit(1755719368.334:521): avc: denied { read write } for pid=2772 comm="syz.2.842" name="lp0" dev="devtmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 72.632391][ T36] audit: type=1400 audit(1755719368.334:522): avc: denied { open } for pid=2772 comm="syz.2.842" path="/dev/usb/lp0" dev="devtmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 72.657192][ T36] audit: type=1326 audit(1755719368.344:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2772 comm="syz.2.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 72.718367][ C1] usblp0: nonzero read bulk status received: -71 [ 72.725256][ T31] usb 3-1: USB disconnect, device number 17 [ 72.995175][ T2859] overlayfs: failed to clone upperpath [ 73.176814][ T9] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 73.316790][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.556938][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.796881][ T9] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 73.936841][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.956543][ T2854] usblp0: removed [ 74.386965][ T9] usb usb3-port1: attempt power cycle [ 74.408104][ T2926] 9pnet_fd: Insufficient options for proto=fd [ 74.468046][ T36] audit: type=1400 audit(1755719370.204:524): avc: denied { wake_alarm } for pid=2931 comm="syz.3.899" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.726827][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 74.747196][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 74.755310][ T9] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 74.764619][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.773007][ T9] usb 3-1: Product: syz [ 74.777351][ T9] usb 3-1: Manufacturer: syz [ 74.782394][ T9] usb 3-1: SerialNumber: syz [ 74.787639][ T9] usb 3-1: config 0 descriptor?? [ 74.794058][ T9] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 74.997070][ T31] usb 3-1: USB disconnect, device number 20 [ 75.352029][ T3011] 9pnet_fd: Insufficient options for proto=fd [ 75.403017][ T36] audit: type=1400 audit(1755719371.134:525): avc: denied { setattr } for pid=3029 comm="syz.0.933" name="NETLINK" dev="sockfs" ino=13115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.518977][ T3035] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 29544 [ 75.527227][ T3034] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 75.629652][ T3052] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.667913][ T3062] overlayfs: failed to clone upperpath [ 75.752887][ T3063] overlayfs: failed to clone upperpath [ 75.786928][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.911732][ T3081] 9pnet_fd: Insufficient options for proto=fd [ 75.938156][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.953657][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.965398][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 75.973812][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.983317][ T31] usb 3-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 75.992316][ T31] usb 3-1: Product: syz [ 75.996609][ T31] usb 3-1: Manufacturer: syz [ 76.001374][ T31] usb 3-1: SerialNumber: syz [ 76.009582][ T31] cdc_ncm 3-1:1.0: skipping garbage [ 76.014952][ T31] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 76.025440][ T31] cdc_ncm 3-1:1.0: bind() failure [ 76.629105][ T3124] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.964'. [ 77.654330][ T3174] netlink: 'syz.3.980': attribute type 16 has an invalid length. [ 77.662564][ T3174] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 77.672690][ T3174] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 77.680696][ T3174] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.980'. [ 77.780697][ T3189] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 77.983151][ T36] audit: type=1400 audit(1755719380.714:526): avc: denied { accept } for pid=3200 comm="syz.1.991" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.202104][ T3222] netlink: 'syz.1.997': attribute type 11 has an invalid length. [ 78.325251][ T3268] 9pnet_fd: Insufficient options for proto=fd [ 78.475476][ T3276] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 78.484178][ T3276] overlayfs: missing 'lowerdir' [ 78.557004][ T31] usb 3-1: USB disconnect, device number 21 [ 78.629770][ T3296] /dev/loop0: Can't lookup blockdev [ 78.657043][ T3302] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.657063][ T3302] rust_binder: Read failure Err(EFAULT) in pid:403 [ 78.793331][ T3307] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1026'. [ 79.036861][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 79.161225][ T3311] veth1_vlan: mtu greater than device maximum [ 79.186812][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 79.193057][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.202064][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 79.212316][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.222773][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.231927][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.240119][ T31] usb 3-1: Product: 눅â¼ç›¡ä©‘â¹æ€­î·“캰奸㠫ã¾á« á³·åª½ã›¸ê«±ã¦ãœœç¥¬çƒ›é§´Ù쌕衵玃瀘㶼딊磱ℕî…뮠֬䊅黟퀪ପ齎艘둷톦á’ݳ [ 79.256569][ T31] usb 3-1: Manufacturer: Е [ 79.261157][ T31] usb 3-1: SerialNumber: syz [ 79.525390][ T3319] 9pnet_fd: Insufficient options for proto=fd [ 80.186096][ T3351] /dev/loop0: Can't lookup blockdev [ 81.506666][ T3421] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 81.515034][ T3421] EXT4-fs: dax option not supported [ 81.521501][ T3421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 81.627366][ T3427] 9pnet_fd: Insufficient options for proto=fd [ 81.682461][ T31] usb 3-1: 0:2 : does not exist [ 81.700610][ T31] usb 3-1: USB disconnect, device number 22 [ 81.809808][ T3460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.820436][ T3460] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 81.892832][ T3474] rust_binder: 421: no such ref 1 [ 81.901576][ T3474] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 81.909642][ T3474] rust_binder: Error while translating object. [ 81.909676][ T3474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.916409][ T3474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:421 [ 82.001748][ T36] audit: type=1400 audit(1755719384.734:527): avc: denied { create } for pid=3490 comm="syz.0.1089" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.056664][ T36] audit: type=1400 audit(1755719384.734:528): avc: denied { rename } for pid=3490 comm="syz.0.1089" name="file0" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.211078][ T3510] 9pnet_fd: Insufficient options for proto=fd [ 82.905745][ T3527] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 82.946406][ T3529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.997910][ T3530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 83.340369][ T36] audit: type=1326 audit(1755719386.074:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.373977][ T36] audit: type=1326 audit(1755719386.084:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.395385][ T3560] cgroup: Unknown subsys name 'measure' [ 83.398821][ T36] audit: type=1326 audit(1755719386.084:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.429720][ T36] audit: type=1326 audit(1755719386.084:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.454442][ T36] audit: type=1326 audit(1755719386.084:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.479281][ T36] audit: type=1326 audit(1755719386.084:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.503083][ T36] audit: type=1326 audit(1755719386.084:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.528438][ T36] audit: type=1326 audit(1755719386.084:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.553049][ T36] audit: type=1326 audit(1755719386.084:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 83.578302][ T36] audit: type=1326 audit(1755719386.084:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f595b98ebe9 code=0x7ffc0000 [ 84.808229][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 85.915914][ T3635] 9pnet_fd: Insufficient options for proto=fd [ 85.964554][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.040494][ T3644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1146'. [ 86.089751][ T3652] overlay: filesystem on ./bus not supported as upperdir [ 86.263496][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.263528][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.272056][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.278254][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.286624][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.292599][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.301255][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.307323][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.316125][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.321877][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.330518][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.336665][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.345027][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.351136][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.359440][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.365541][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.374193][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.380544][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.389074][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.394937][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.403455][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.409488][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.418349][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.424495][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.442249][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.448912][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.449717][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.455789][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.471272][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.473595][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.479864][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.488019][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.497002][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.502547][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.508635][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.508720][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.518144][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.524544][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.531527][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.539858][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.546114][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.554977][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.563690][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.569165][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.575724][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.584212][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.590911][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.599585][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.606316][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.614804][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.621280][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.629922][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.636622][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.645338][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.652043][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.661728][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.673283][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.676573][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.683997][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.691132][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.697499][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.705685][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 86.712147][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.712210][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.746436][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.755534][ T3660] tipc: Enabling of bearer rejected, failed to enable media [ 86.841968][ T3681] binder: Binderfs stats mode cannot be changed during a remount [ 86.873897][ T3691] incfs: ino conflict with backing FS 1 [ 86.958509][ T3706] 9pnet_fd: Insufficient options for proto=fd [ 87.096956][ T31] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 87.248446][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 87.259565][ T31] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 87.268839][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.281056][ T31] usb 3-1: config 0 descriptor?? [ 87.287629][ T3689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.546769][ T3732] overlayfs: failed to clone upperpath [ 87.704707][ T31] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 87.860512][ T3744] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.869381][ T3744] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 87.878912][ T3744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.410827][ T3750] 9pnet_fd: Insufficient options for proto=fd [ 88.537425][ T36] kauditd_printk_skb: 29329 callbacks suppressed [ 88.537444][ T36] audit: type=1400 audit(1755719391.274:29868): avc: denied { map } for pid=3763 comm="syz.1.1191" path="socket:[15993]" dev="sockfs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.567629][ T36] audit: type=1400 audit(1755719391.274:29869): avc: denied { read } for pid=3763 comm="syz.1.1191" path="socket:[15993]" dev="sockfs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.137070][ T9] usb 3-1: USB disconnect, device number 23 [ 89.267088][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 89.351337][ T3791] fuse: Bad value for 'rootmode' [ 89.399371][ T3807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 89.418356][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.428024][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.438408][ T9] usb 3-1: config 0 descriptor?? [ 89.600726][ T3820] overlayfs: failed to clone upperpath [ 89.644584][ T3825] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 90.527862][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 90.579441][ T3885] overlayfs: failed to clone upperpath [ 91.251601][ T9] usb 3-1: Cannot set autoneg [ 91.256400][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 91.287868][ T9] usb 3-1: USB disconnect, device number 24 [ 91.521648][ T36] audit: type=1326 audit(1755719394.254:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.546887][ T36] audit: type=1326 audit(1755719394.254:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.580166][ T36] audit: type=1326 audit(1755719394.254:29872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.604898][ T36] audit: type=1326 audit(1755719394.284:29873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.630210][ T36] audit: type=1326 audit(1755719394.284:29874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.656782][ T36] audit: type=1326 audit(1755719394.304:29875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.684758][ T36] audit: type=1326 audit(1755719394.304:29876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c9dc14a5 code=0x7ffc0000 [ 91.708992][ T36] audit: type=1326 audit(1755719394.364:29877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c9d8ebe9 code=0x7ffc0000 [ 91.777222][ T4015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.778627][ T4015] rtc_cmos 00:00: Alarms can be up to one day in the future [ 91.797761][ T4015] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 91.805128][ T4015] rust_binder: Write failure EINVAL in pid:453 [ 92.215253][ T4046] 9pnet_fd: Insufficient options for proto=fd [ 92.301038][ T4066] 9pnet_fd: Insufficient options for proto=fd [ 92.342615][ T4069] 9pnet_fd: Insufficient options for proto=fd [ 92.384988][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 92.516415][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4065 comm=syz.1.1290 [ 92.783666][ T4100] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 92.783698][ T4100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 92.792334][ T4100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:495 [ 92.990676][ T4116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1307'. [ 93.081547][ T4120] 9pnet: Could not find request transport: f [ 93.282983][ T4140] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1316'. [ 93.675004][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 93.675024][ T36] audit: type=1400 audit(1755719396.404:29888): avc: denied { create } for pid=4187 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.848093][ T36] audit: type=1326 audit(1755719396.584:29889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4204 comm="syz.0.1334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 93.900141][ T4209] overlay: Unknown parameter 'obj_type' [ 94.097543][ T4217] cgroup: Unknown subsys name 'measure' [ 95.000782][ T36] audit: type=1400 audit(1755719397.734:29890): avc: denied { write } for pid=4254 comm="syz.2.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.475848][ T36] audit: type=1326 audit(1755719398.204:29891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a9f8ebe9 code=0x7fc00000 [ 95.549132][ T4280] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 95.590180][ T4293] fuse: Unknown parameter 'ÿ0x0000000000000005' [ 95.598083][ T4293] fuse: Unknown parameter 'ÿ0x0000000000000005' [ 96.047024][ T4353] overlayfs: failed to clone upperpath [ 96.098996][ T4360] cgroup: fork rejected by pids controller in /syz0 [ 96.169657][ T4498] fuse: Bad value for 'fd' [ 96.218901][ T4611] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1387'. [ 96.423433][ T4633] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 96.830691][ T4661] netlink: 'syz.1.1404': attribute type 16 has an invalid length. [ 96.838833][ T4661] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 96.847053][ T4661] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 96.854858][ T4661] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1404'. [ 98.379072][ T4723] fuse: Bad value for 'rootmode' [ 98.584607][ T4766] /dev/rnullb0: Can't lookup blockdev [ 98.634411][ T4778] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8213 sclass=netlink_xfrm_socket pid=4778 comm=syz.3.1442 [ 98.770752][ T4799] 9pnet_fd: Insufficient options for proto=fd [ 99.102337][ T4842] overlayfs: failed to clone upperpath [ 99.112317][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'. [ 99.185203][ T4859] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1468'. [ 99.449197][ T4883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1472'. [ 99.561429][ T4897] overlay: filesystem on ./bus is read-only [ 99.649964][ T36] audit: type=1400 audit(1755719402.384:29892): avc: denied { map } for pid=4893 comm="syz.1.1480" path="socket:[17270]" dev="sockfs" ino=17270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 100.395431][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 100.445596][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 100.529193][ T4966] netlink: 'syz.1.1507': attribute type 5 has an invalid length. [ 100.537083][ T4966] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1507'. [ 109.061074][ T5004] cgroup: Unknown subsys name 'perf_event' [ 109.066028][ T5007] overlay: Unknown parameter '/' [ 109.263695][ T5026] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.1527'. [ 109.981662][ T5091] cgroup: Invalid name [ 110.009507][ T5099] netlink: 'syz.2.1554': attribute type 4 has an invalid length. [ 110.017646][ T5099] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1554'. [ 110.028941][ T5099] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1554'. [ 110.039737][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.235209][ T5118] fuse: Bad value for 'user_id' [ 110.240218][ T5118] fuse: Bad value for 'user_id' [ 110.269592][ T36] audit: type=1400 audit(1755719925.004:29893): avc: denied { lock } for pid=5124 comm="syz.1.1563" path="socket:[18628]" dev="sockfs" ino=18628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.379174][ T5131] 9pnet_fd: Insufficient options for proto=fd [ 110.409351][ T5138] overlayfs: failed to clone upperpath [ 110.582037][ T5181] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1585'. [ 110.629078][ T5183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'. [ 110.665401][ T36] audit: type=1400 audit(1755719925.394:29894): avc: denied { nlmsg_write } for pid=5185 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 110.686570][ T36] audit: type=1400 audit(1755719925.394:29895): avc: denied { audit_write } for pid=5185 comm="syz.3.1587" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.708435][ T36] audit: type=1107 audit(1755719925.394:29896): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.110580][ T5206] 9pnet_fd: Insufficient options for proto=fd [ 111.198269][ T36] audit: type=1326 audit(1755719925.934:29897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f595b98ebe9 code=0x0 [ 111.841221][ T5249] tmpfs: Unknown parameter '18446744073709551615ÈØí°ð¯:|îãv‡ïª•n­gyj¬iƒ®”ƒö4‡´óª;–ø-ÝvB\^Æ/R›>©>ö~' [ 112.394341][ T5282] veth0_vlan: left promiscuous mode [ 112.455695][ T5287] overlayfs: failed to clone upperpath [ 112.461757][ T5286] overlayfs: failed to clone upperpath [ 112.656790][ T5307] 9pnet_fd: Insufficient options for proto=fd [ 112.788307][ T5333] overlayfs: failed to clone upperpath [ 113.346401][ T5351] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1641'. [ 113.355716][ T5351] tc_dump_action: action bad kind [ 113.361371][ T5352] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1641'. [ 113.371286][ T5352] tc_dump_action: action bad kind [ 114.216340][ T5369] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 114.231940][ T36] audit: type=1400 audit(1755719928.964:29898): avc: denied { relabelto } for pid=5367 comm="syz.3.1646" name="407" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.260617][ T36] audit: type=1400 audit(1755719928.964:29899): avc: denied { associate } for pid=5367 comm="syz.3.1646" name="407" dev="tmpfs" ino=2193 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 114.288981][ T36] audit: type=1400 audit(1755719928.994:29900): avc: denied { write } for pid=292 comm="syz-executor" name="407" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.317010][ T36] audit: type=1400 audit(1755719928.994:29901): avc: denied { remove_name } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.347518][ T36] audit: type=1400 audit(1755719928.994:29902): avc: denied { rmdir } for pid=292 comm="syz-executor" name="407" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.591463][ T5420] /dev/rnullb0: Can't lookup blockdev [ 115.100987][ T5450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 115.134340][ T5459] 9pnet_fd: Insufficient options for proto=fd [ 115.511575][ T5472] overlayfs: failed to resolve './file1/file0': -2 [ 115.555471][ T5494] overlayfs: failed to clone upperpath [ 115.561654][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 115.571250][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=5494 comm=syz.2.1688 [ 115.709070][ T5537] overlayfs: missing 'workdir' [ 115.714426][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 115.714452][ T36] audit: type=1400 audit(1755719930.445:29905): avc: denied { unmount } for pid=5536 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.218684][ T36] audit: type=1400 audit(1755719930.955:29906): avc: denied { create } for pid=5575 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.300413][ T13] tipc: Subscription rejected, illegal request [ 116.314027][ T36] audit: type=1400 audit(1755719931.045:29907): avc: denied { map } for pid=5587 comm="syz.3.1723" path="socket:[19990]" dev="sockfs" ino=19990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 116.339180][ T36] audit: type=1326 audit(1755719931.045:29908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.3.1727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595b98ebe9 code=0x0 [ 116.372255][ T36] audit: type=1400 audit(1755719931.105:29909): avc: denied { shutdown } for pid=5600 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.466163][ T36] audit: type=1400 audit(1755719931.205:29910): avc: denied { mount } for pid=5634 comm="syz.2.1741" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 116.789082][ T36] audit: type=1326 audit(1755719931.525:29911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.1.1757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44a9f8ebe9 code=0x0 [ 117.096721][ T5683] overlayfs: conflicting options: nfs_export=on,index=off [ 118.256363][ T5728] incfs: Options parsing error. -22 [ 118.261843][ T5728] incfs: mount failed -22 [ 118.267543][ T5728] fuse: Bad value for 'fd' [ 118.587557][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 118.871218][ T5780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1794'. [ 118.937187][ T5796] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 118.951991][ T5796] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 118.966795][ T5796] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.974068][ T5796] overlayfs: failed to set xattr on upper [ 118.979987][ T5796] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.986878][ T5796] overlayfs: ...falling back to uuid=null. [ 118.992839][ T5796] overlayfs: ...falling back to xino=off. [ 119.008628][ T5800] overlayfs: failed to clone upperpath [ 119.032921][ T36] audit: type=1400 audit(1755719933.765:29912): avc: denied { read } for pid=5806 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.219349][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 119.322965][ T36] audit: type=1400 audit(1755719934.055:29913): avc: denied { relabelfrom } for pid=5829 comm="syz.2.1812" name="" dev="pipefs" ino=20533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 119.438752][ T5849] 9pnet_fd: Insufficient options for proto=fd [ 119.766978][ T5860] netlink: 'syz.3.1822': attribute type 32 has an invalid length. [ 120.159648][ T5868] 9pnet_fd: Insufficient options for proto=fd [ 120.187615][ T36] audit: type=1400 audit(1755719934.925:29914): avc: denied { create } for pid=5874 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.667755][ T5898] incfs: ino conflict with backing FS 1 [ 120.674051][ T5898] incfs: ino conflict with backing FS 1 [ 120.680332][ T5898] overlayfs: conflicting options: nfs_export=on,index=off [ 120.702188][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 120.711831][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1837'. [ 120.924273][ T5933] fuse: Bad value for 'rootmode' [ 121.064525][ T36] audit: type=1326 audit(1755719935.785:29915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a9f8ebe9 code=0x7fc00000 [ 121.487204][ T5965] /dev/rnullb0: Can't lookup blockdev [ 121.518877][ T5974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.527799][ T5974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.591170][ T36] audit: type=1400 audit(1755719936.325:29916): avc: denied { execute } for pid=5996 comm="syz.0.1867" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=21549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.634369][ T6002] overlayfs: failed to clone upperpath [ 121.880288][ T6007] bond_slave_0: entered promiscuous mode [ 121.886216][ T6007] bond_slave_0: entered allmulticast mode [ 122.102990][ T6013] overlayfs: failed to clone upperpath [ 122.108891][ T6012] overlayfs: failed to clone upperpath [ 123.254362][ T6075] overlayfs: failed to clone upperpath [ 123.422810][ T6080] 9pnet_fd: Insufficient options for proto=fd [ 123.784776][ T36] audit: type=1326 audit(1755719938.526:29917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 123.836116][ T36] audit: type=1326 audit(1755719938.576:29918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 123.886471][ T36] audit: type=1326 audit(1755719938.626:29919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 123.938526][ T36] audit: type=1326 audit(1755719938.676:29920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 123.996179][ T36] audit: type=1326 audit(1755719938.736:29921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 124.073199][ T36] audit: type=1326 audit(1755719938.806:29922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.0.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c9d8ebe9 code=0x0 [ 124.148687][ T6108] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 124.434869][ T6119] netlink: 'syz.3.1911': attribute type 29 has an invalid length. [ 124.443067][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 125.570626][ T6180] netlink: 'syz.3.1932': attribute type 64 has an invalid length. [ 125.579818][ T6180] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1932'. [ 125.942236][ T6190] 9pnet_fd: Insufficient options for proto=fd [ 125.999055][ T6203] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 126.059623][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 126.069033][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 126.880766][ T6244] fuse: Bad value for 'fd' [ 126.896070][ T6244] netlink: 'syz.1.1953': attribute type 13 has an invalid length. [ 126.918822][ T6244] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.112154][ T6278] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 127.221605][ T6289] @: renamed from vlan0 (while UP) [ 127.313606][ T6312] fuseblk: Bad value for 'fd' [ 127.801056][ T6323] tmpfs: Unknown parameter '' [ 127.807932][ T6325] 9pnet_fd: Insufficient options for proto=fd [ 127.864973][ T36] audit: type=1400 audit(1755719942.606:29923): avc: denied { lock } for pid=6338 comm="syz.1.1987" path="socket:[21075]" dev="sockfs" ino=21075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 127.894887][ T6339] 9pnet_fd: Insufficient options for proto=fd [ 127.915162][ T36] audit: type=1400 audit(1755719942.656:29924): avc: denied { accept } for pid=6345 comm="syz.2.1989" path="socket:[21079]" dev="sockfs" ino=21079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.976814][ T6350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.116805][ T36] audit: type=1326 audit(1755719942.848:29925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.1.1992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44a9f8ebe9 code=0x0 [ 128.514522][ T36] audit: type=1400 audit(1755719943.248:29926): avc: denied { mounton } for pid=6374 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 128.647817][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.655361][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.662723][ T6374] bridge_slave_0: entered allmulticast mode [ 128.669164][ T6374] bridge_slave_0: entered promiscuous mode [ 128.676048][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.683558][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.690709][ T6374] bridge_slave_1: entered allmulticast mode [ 128.696431][ T6382] overlayfs: missing 'lowerdir' [ 128.706148][ T6374] bridge_slave_1: entered promiscuous mode [ 128.723150][ T36] audit: type=1400 audit(1755719943.448:29927): avc: denied { search } for pid=6383 comm="syz.2.2000" name="/" dev="configfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.750199][ T36] audit: type=1400 audit(1755719943.478:29928): avc: denied { read } for pid=6383 comm="syz.2.2000" name="/" dev="configfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.773704][ T36] audit: type=1400 audit(1755719943.478:29929): avc: denied { open } for pid=6383 comm="syz.2.2000" path="/" dev="configfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.880481][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.887650][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.895069][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.902299][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.931223][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.939641][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.950438][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.958332][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.974174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.981719][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.026453][ T6374] veth0_vlan: entered promiscuous mode [ 129.034335][ T46] macsec0: left allmulticast mode [ 129.039524][ T46] veth1_macvtap: left allmulticast mode [ 129.054089][ T46] macsec0: left promiscuous mode [ 129.064239][ T46] bridge0: port 3(macsec0) entered disabled state [ 129.083910][ T46] bridge_slave_1: left allmulticast mode [ 129.090433][ T46] bridge_slave_1: left promiscuous mode [ 129.103572][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.113995][ T46] bridge_slave_0: left allmulticast mode [ 129.119986][ T46] bridge_slave_0: left promiscuous mode [ 129.125731][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.156296][ T46] bridge0 (unregistering): left allmulticast mode [ 129.201788][ T6374] veth1_macvtap: entered promiscuous mode [ 129.225418][ T36] audit: type=1400 audit(1755719943.958:29930): avc: denied { mounton } for pid=6374 comm="syz-executor" path="/root/syzkaller.qpA7f8/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 129.276646][ T36] audit: type=1400 audit(1755719943.988:29931): avc: denied { mounton } for pid=6374 comm="syz-executor" path="/root/syzkaller.qpA7f8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.309288][ T46] veth1_macvtap: left promiscuous mode [ 129.317801][ T46] veth0_vlan: left promiscuous mode [ 129.321195][ T6422] binder: Bad value for 'max' [ 129.324558][ T36] audit: type=1400 audit(1755719943.988:29932): avc: denied { mounton } for pid=6374 comm="syz-executor" path="/root/syzkaller.qpA7f8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 129.450255][ T6441] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2017'. [ 129.581470][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 130.475162][ T6485] rust_binder: Write failure EFAULT in pid:29 [ 131.470200][ T6510] netlink: 'syz.2.2035': attribute type 6 has an invalid length. [ 131.484901][ T6510] netlink: 'syz.2.2035': attribute type 4 has an invalid length. [ 131.493564][ T6510] netlink: 'syz.2.2035': attribute type 6 has an invalid length. [ 131.501803][ T6510] netlink: 'syz.2.2035': attribute type 13 has an invalid length. [ 131.510723][ T6510] netlink: 'syz.2.2035': attribute type 15 has an invalid length. [ 131.519525][ T6510] netlink: 'syz.2.2035': attribute type 19 has an invalid length. [ 131.527681][ T6510] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.2035'. [ 131.550130][ T6521] overlayfs: failed to clone upperpath [ 131.654073][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 132.738996][ T6585] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 133.287502][ T6618] cgroup2: Unknown parameter 'net_cls' [ 133.302136][ T6618] overlayfs: failed to clone upperpath [ 133.346322][ T6630] /dev/rnullb0: Can't lookup blockdev [ 133.773514][ T236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.924822][ T236] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 133.934299][ T236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.944296][ T236] usb 2-1: config 0 descriptor?? [ 133.950672][ T6648] 9pnet_fd: Insufficient options for proto=fd [ 134.048240][ T6659] 9pnet_fd: Insufficient options for proto=fd [ 134.069564][ T6664] fuse: Bad value for 'user_id' [ 134.075003][ T6664] fuse: Bad value for 'user_id' [ 134.173321][ T6665] tipc: Enabling of bearer rejected, failed to enable media [ 134.616697][ T6691] x_tables: duplicate entry at hook 1 [ 134.756239][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 134.756259][ T36] audit: type=1400 audit(1755719949.488:29941): avc: denied { mounton } for pid=6701 comm="syz.0.2103" path="/595/file0" dev="tmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.840199][ T6711] netlink: 'syz.3.2106': attribute type 16 has an invalid length. [ 134.848275][ T6711] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2106'. [ 134.858431][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.905290][ T6725] fuse: Unknown parameter '0x0000000000000003ÿÿÿÿÿÿÿÿ' [ 135.048250][ T36] audit: type=1326 audit(1755719949.778:29942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.2118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 135.525321][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.532573][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.540055][ T6753] bridge_slave_0: entered allmulticast mode [ 135.546841][ T6753] bridge_slave_0: entered promiscuous mode [ 135.555484][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.564363][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.584928][ T6772] overlay: filesystem on ./bus not supported as upperdir [ 135.585293][ T6753] bridge_slave_1: entered allmulticast mode [ 135.599600][ T6753] bridge_slave_1: entered promiscuous mode [ 135.687717][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.694834][ T6753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.702210][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.709298][ T6753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.738225][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.747014][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.762606][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.769727][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.784410][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.791674][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.814052][ T236] usb 2-1: Cannot set autoneg [ 135.819036][ T236] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 135.852874][ T6753] veth0_vlan: entered promiscuous mode [ 135.853527][ T236] usb 2-1: USB disconnect, device number 9 [ 135.866557][ T6753] veth1_macvtap: entered promiscuous mode [ 136.002531][ T6850] rust_binder: Write failure EINVAL in pid:8 [ 136.525141][ T6862] fuse: Unknown parameter ' ' [ 136.795633][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 137.165762][ T6883] overlayfs: failed to clone lowerpath [ 137.172576][ T6883] overlayfs: failed to clone upperpath [ 137.256244][ T36] audit: type=1400 audit(1755719951.988:29943): avc: denied { create } for pid=6899 comm="syz.3.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.257250][ T6900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2163'. [ 137.344463][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6905 comm=syz.2.2165 [ 137.407883][ T36] audit: type=1400 audit(1755719952.138:29944): avc: denied { setopt } for pid=6906 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.430893][ T6909] 9pnet_fd: Insufficient options for proto=fd [ 137.438559][ T36] audit: type=1400 audit(1755719952.178:29945): avc: denied { accept } for pid=6908 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.517764][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'. [ 137.796380][ T36] audit: type=1400 audit(1755719952.528:29946): avc: denied { map } for pid=6940 comm="syz.1.2179" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.848022][ T36] audit: type=1326 audit(1755719952.578:29947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.1.2182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f338338ebe9 code=0x0 [ 138.805086][ T6970] rust_binder: Read failure Err(EAGAIN) in pid:98 [ 139.094463][ T6999] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 139.111498][ T6999] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 139.453574][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 139.572320][ T7058] 9pnet_fd: Insufficient options for proto=fd [ 139.592983][ T7060] netlink: 37 bytes leftover after parsing attributes in process `syz.2.2217'. [ 139.634631][ T31] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 139.643036][ T31] usb 2-1: config 0 has no interface number 0 [ 139.649782][ T31] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 139.661152][ T31] usb 2-1: config 0 interface 214 has no altsetting 0 [ 139.670338][ T31] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 139.679832][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.688309][ T31] usb 2-1: Product: syz [ 139.692895][ T31] usb 2-1: Manufacturer: syz [ 139.698374][ T31] usb 2-1: SerialNumber: syz [ 139.704351][ T31] usb 2-1: config 0 descriptor?? [ 139.709976][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.918419][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.991918][ T36] audit: type=1400 audit(1755719954.718:29948): avc: denied { relabelfrom } for pid=7069 comm="syz.3.2220" name="KEY" dev="sockfs" ino=24265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.991927][ T7070] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 140.026067][ T36] audit: type=1400 audit(1755719954.758:29949): avc: denied { relabelto } for pid=7069 comm="syz.3.2220" name="KEY" dev="sockfs" ino=24265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=key_socket permissive=1 trawcon="system_u:object_r:update_modules_exec_t:s0" [ 140.076571][ T36] audit: type=1400 audit(1755719954.808:29950): avc: denied { map } for pid=7073 comm="syz.3.2222" path="/554/file0" dev="tmpfs" ino=3121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.205142][ T7085] binder: Unknown parameter 'contextÀfs/binder1' [ 140.227036][ T7092] overlayfs: failed to resolve './bus': -2 [ 141.044056][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 141.055830][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 141.114029][ T7131] 9pnet_fd: Insufficient options for proto=fd [ 141.147012][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2245'. [ 141.232533][ T7141] overlay: Unknown parameter 'smackfsfloor' [ 141.766107][ T7145] fuse: Bad value for 'fd' [ 141.780537][ T36] audit: type=1400 audit(1755719956.508:29951): avc: denied { execheap } for pid=7146 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 141.845685][ T7156] 9pnet_fd: Insufficient options for proto=fd [ 141.861639][ T7158] tipc: Enabling of bearer rejected, failed to enable media [ 142.030784][ T36] audit: type=1400 audit(1755719956.758:29952): avc: denied { append } for pid=7160 comm="syz.3.2255" name="file0" dev="tmpfs" ino=3210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.053779][ T36] audit: type=1400 audit(1755719956.758:29953): avc: denied { mounton } for pid=7160 comm="syz.3.2255" path="/570/file0" dev="tmpfs" ino=3210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.093954][ T36] audit: type=1326 audit(1755719956.828:29954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.3.2258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595b98ebe9 code=0x0 [ 142.318948][ T7184] /dev/loop0: Can't lookup blockdev [ 142.344276][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 142.369037][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 142.398795][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.406650][ T7194] rust_binder: Error while translating object. [ 142.409925][ T7194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.416560][ T7194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 142.423894][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.448586][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.462280][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.474723][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 142.486512][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.498986][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 142.511049][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 142.522650][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 142.535145][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.547008][ T7198] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2267'. [ 142.547293][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 142.568649][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 142.582617][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 142.596312][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.608712][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.620745][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.632540][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 142.644079][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.655686][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.667223][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.679234][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.691807][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 142.706036][ T31] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 92:d0:00:8e:31:5d [ 142.725582][ T31] usb 2-1: USB disconnect, device number 10 [ 142.732327][ T31] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 142.763512][ T36] audit: type=1400 audit(1755719957.488:29955): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.935299][ T36] audit: type=1400 audit(1755719957.668:29956): avc: denied { lock } for pid=7200 comm="syz.3.2268" path="socket:[24445]" dev="sockfs" ino=24445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.969658][ T7203] bridge0: entered allmulticast mode [ 142.975418][ T7203] bridge0: left allmulticast mode [ 143.093558][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 143.243526][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 143.253026][ T31] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 143.261552][ T31] usb 2-1: config 4 has no interface number 0 [ 143.268218][ T31] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.280196][ T31] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.291870][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.301397][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.318896][ T7233] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 143.327739][ T31] hub 2-1:4.128: USB hub found [ 143.359562][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'. [ 143.525629][ T36] audit: type=1400 audit(1755719958.258:29957): avc: denied { write } for pid=7252 comm="syz.0.2279" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.547545][ T31] hub 2-1:4.128: 6 ports detected [ 143.553518][ T31] hub 2-1:4.128: Using single TT (err -22) [ 143.553969][ T7253] netfs: Couldn't get user pages (rc=-14) [ 143.560656][ T31] hub 2-1:4.128: insufficient power available to use all downstream ports [ 144.172885][ T7275] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=7275 comm=syz.2.2287 [ 144.202966][ T7277] overlay: Unknown parameter 'smackfsdef' [ 144.378128][ T7290] fuse: Bad value for 'fd' [ 144.432971][ T7295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7295 comm=syz.0.2293 [ 144.447328][ T7295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'. [ 144.457533][ T7295] bridge0: port 3(veth0_to_bond) entered blocking state [ 144.465016][ T7295] bridge0: port 3(veth0_to_bond) entered disabled state [ 144.472497][ T7295] veth0_to_bond: entered allmulticast mode [ 144.478956][ T7295] veth0_to_bond: entered promiscuous mode [ 144.526611][ T7298] overlayfs: missing 'lowerdir' [ 144.624406][ T31] hub 2-1:4.128: hub_hub_status failed (err = -32) [ 144.631149][ T31] hub 2-1:4.128: config failed, can't get hub status (err -32) [ 145.563591][ T363] usb 2-1: USB disconnect, device number 11 [ 145.902342][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 145.911526][ T7334] bridge_slave_1: left allmulticast mode [ 145.917239][ T7334] bridge_slave_1: left promiscuous mode [ 145.923053][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.930807][ T7334] ªªªªª$: left allmulticast mode [ 145.936033][ T7334] ªªªªª$: left promiscuous mode [ 145.941070][ T7334] bridge0: port 1(ªªªªª$) entered disabled state [ 146.068461][ T7342] 9pnet_fd: p9_fd_create_unix (7342): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 147.045325][ T7389] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.063528][ T7389] overlayfs: failed to set xattr on upper [ 147.072647][ T7389] overlayfs: ...falling back to redirect_dir=nofollow. [ 147.087854][ T7389] overlayfs: ...falling back to index=off. [ 147.099651][ T7389] overlayfs: ...falling back to uuid=null. [ 147.113756][ T7389] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 147.162016][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 147.162033][ T36] audit: type=1326 audit(1755719968.894:29959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.3.2330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595b98ebe9 code=0x0 [ 147.297941][ T36] audit: type=1326 audit(1755719969.034:29960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7397 comm="syz.2.2331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 148.008784][ T7409] overlay: filesystem on ./bus not supported as upperdir [ 148.156286][ T7413] mmap: syz.2.2337 (7413): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 148.206974][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.214604][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.221813][ T7411] bridge_slave_0: entered allmulticast mode [ 148.228390][ T7411] bridge_slave_0: entered promiscuous mode [ 148.239454][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.246779][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.254732][ T7411] bridge_slave_1: entered allmulticast mode [ 148.261196][ T7411] bridge_slave_1: entered promiscuous mode [ 148.309244][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.316419][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.324128][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.331703][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.352661][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.361670][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.372450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.379592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.388962][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.396269][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.433927][ T7427] lo: entered allmulticast mode [ 148.439374][ T7411] veth0_vlan: entered promiscuous mode [ 148.451155][ T7427] lo: left allmulticast mode [ 148.457929][ T7411] veth1_macvtap: entered promiscuous mode [ 148.585213][ T7440] rust_binder: Error while translating object. [ 148.585259][ T7440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 148.591638][ T7440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 148.615170][ T7442] cgroup: Need name or subsystem set [ 148.631431][ T36] audit: type=1400 audit(1755719970.364:29961): avc: denied { write } for pid=7441 comm="syz.1.2343" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.682943][ T36] audit: type=1400 audit(1755719970.414:29962): avc: denied { ioctl } for pid=7441 comm="syz.1.2343" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 149.521178][ T36] audit: type=1400 audit(1755719971.254:29963): avc: denied { ioctl } for pid=7452 comm="syz.1.2346" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.341882][ T7475] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.2351'. [ 150.351541][ T7475] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2351'. [ 150.723579][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 150.873525][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 150.880206][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.890449][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.899733][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.908486][ T31] usb 2-1: config 0 descriptor?? [ 150.914671][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 150.920757][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 150.928233][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 151.203043][ T36] audit: type=1400 audit(1755719972.934:29964): avc: denied { create } for pid=7481 comm="syz.2.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 151.227450][ T7488] can: request_module (can-proto-0) failed. [ 151.258756][ T7498] 9pnet_fd: Insufficient options for proto=fd [ 151.531881][ T7503] 9pnet_fd: p9_fd_create_unix (7503): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.782722][ T36] audit: type=1400 audit(1755719973.514:29965): avc: denied { setattr } for pid=7516 comm="syz.2.2364" name="CAN_BCM" dev="sockfs" ino=26781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.523521][ T65] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 152.674865][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.685073][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 152.697687][ T65] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.707175][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.715319][ T65] usb 4-1: Product: syz [ 152.719697][ T65] usb 4-1: Manufacturer: syz [ 152.724876][ T65] usb 4-1: SerialNumber: syz [ 152.730193][ T65] usb 4-1: config 0 descriptor?? [ 152.938099][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.946856][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.150381][ T7536] overlayfs: failed to clone upperpath [ 153.753726][ T31] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 153.802186][ T7550] netlink: 'syz.2.2375': attribute type 4 has an invalid length. [ 153.812942][ T7550] netlink: 'syz.2.2375': attribute type 4 has an invalid length. [ 153.904220][ T31] usb 2-1: device firmware changed [ 153.909748][ T31] usb 2-1: USB disconnect, device number 12 [ 154.203484][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.353466][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 154.359822][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.369182][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.378004][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.387602][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.397676][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.407711][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.421558][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.430732][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.439541][ T31] usb 2-1: config 0 descriptor?? [ 154.508949][ T7562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2379'. [ 154.531601][ T7568] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 154.541298][ T7568] binder: Unknown parameter 'c†ýrw¹Ã „PZ ' [ 154.561926][ T36] audit: type=1400 audit(1755719976.294:29966): avc: denied { accept } for pid=7569 comm="syz.0.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 154.566899][ T7570] vlan0: entered promiscuous mode [ 154.588719][ T7570] vlan0: entered allmulticast mode [ 154.594356][ T7570] veth0_vlan: entered allmulticast mode [ 154.667170][ T36] audit: type=1400 audit(1755719976.404:29967): avc: denied { map } for pid=7571 comm="syz.0.2382" path="/proc/80/task/81/attr/keycreate" dev="proc" ino=26167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 154.692579][ T36] audit: type=1400 audit(1755719976.404:29968): avc: denied { execute } for pid=7571 comm="syz.0.2382" path="/proc/80/task/81/attr/keycreate" dev="proc" ino=26167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 154.696828][ T7574] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 154.727223][ T7574] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2383'. [ 154.779727][ T7580] /dev/rnullb0: Can't open blockdev [ 154.847560][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.857285][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.883230][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 154.898753][ T7599] binder: Unknown parameter 'appraise_type' [ 154.974754][ T7601] /dev/rnullb0: Can't open blockdev [ 155.317500][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.333557][ T65] usb 4-1: USB disconnect, device number 22 [ 155.355354][ T31] usb 2-1: USB disconnect, device number 13 [ 155.359414][ T7618] syzkaller0: entered promiscuous mode [ 155.364016][ T31] usblp0: removed [ 155.368310][ T7618] syzkaller0: entered allmulticast mode [ 155.382656][ T293] syzkaller0: tun_net_xmit 48 [ 155.448342][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 155.531889][ T36] audit: type=1326 audit(1755719977.264:29969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7630 comm="syz.2.2402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd562b8ebe9 code=0x0 [ 155.933279][ T7636] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 155.933311][ T7636] rust_binder: Error while translating object. [ 155.933339][ T7639] /dev/rnullb0: Can't open blockdev [ 155.944576][ T7636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.956498][ T7636] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 155.966018][ T7636] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:199 [ 156.027686][ T31] rust_binder: 7635: removing orphan mapping 0:24 [ 156.079197][ T7655] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2409'. [ 156.462658][ T7704] 9pnet_fd: Insufficient options for proto=fd [ 156.492108][ T7706] tipc: Started in network mode [ 156.497275][ T7706] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 156.506977][ T7706] tipc: Enabling of bearer rejected, failed to enable media [ 156.557183][ T7708] fuse: Bad value for 'group_id' [ 156.562385][ T7708] fuse: Bad value for 'group_id' [ 156.581374][ T36] audit: type=1400 audit(1755719978.314:29970): avc: denied { setcheckreqprot } for pid=7709 comm="syz.3.2426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 156.790972][ T7731] bridge0: entered promiscuous mode [ 156.796546][ T7731] bridge0: entered allmulticast mode [ 156.903589][ T7748] overlayfs: missing 'workdir' [ 156.903609][ T7749] overlayfs: missing 'workdir' [ 157.080201][ T7769] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 157.343543][ T65] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 157.493526][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 157.500067][ T65] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 157.509533][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.520712][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.532328][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.543829][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.556134][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.567691][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.578988][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.590286][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.601828][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.611724][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.620945][ T65] usb 4-1: config 0 descriptor?? [ 157.627203][ T65] hub 4-1:0.0: Invalid hub with more than one config or interface [ 157.635425][ T65] hub 4-1:0.0: probe with driver hub failed with error -22 [ 157.829608][ T65] usb 4-1: USB disconnect, device number 23 [ 157.933714][ T36] audit: type=1400 audit(1755719979.674:29971): avc: denied { write } for pid=7783 comm="syz.1.2453" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 158.003967][ T7796] 9pnet_fd: Insufficient options for proto=fd [ 158.140529][ T7813] rust_binder: Read failure Err(EAGAIN) in pid:240 [ 158.149516][ T7813] syzkaller0: entered promiscuous mode [ 158.161814][ T7813] syzkaller0: entered allmulticast mode [ 158.168163][ T293] syzkaller0: tun_net_xmit 48 [ 158.170800][ T7813] syzkaller0: create flow: hash 2544643631 index 1 [ 158.181763][ T7813] syzkaller0: delete flow: hash 2544643631 index 1 [ 158.286118][ T7815] binder: Unknown parameter 'fscontext?}' [ 158.354830][ T7823] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 158.354864][ T7823] rust_binder: Error while translating object. [ 158.364277][ T7823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.370909][ T7823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 158.392771][ T7825] overlayfs: conflicting options: userxattr,verity=on [ 158.552923][ T7843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:93 [ 159.392658][ T7869] netlink: 'syz.3.2481': attribute type 20 has an invalid length. [ 159.763540][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 159.893497][ T65] usb 4-1: device descriptor read/64, error -71 [ 160.053937][ T36] audit: type=1326 audit(1755719981.794:29972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338338ebe9 code=0x7fc00000 [ 160.085458][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 160.118798][ T7889] syzkaller0: entered promiscuous mode [ 160.124338][ T7889] syzkaller0: entered allmulticast mode [ 160.133475][ T65] usb 4-1: device descriptor read/64, error -71 [ 160.255234][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 160.373519][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 160.503522][ T65] usb 4-1: device descriptor read/64, error -71 [ 160.743531][ T65] usb 4-1: device descriptor read/64, error -71 [ 160.853649][ T65] usb usb4-port1: attempt power cycle [ 160.873525][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.003550][ T9] usb 2-1: device descriptor read/64, error -71 [ 161.156733][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 161.166528][ T7910] erspan0: entered promiscuous mode [ 161.193657][ T65] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 161.214742][ T65] usb 4-1: device descriptor read/8, error -71 [ 161.243523][ T9] usb 2-1: device descriptor read/64, error -71 [ 161.344650][ T65] usb 4-1: device descriptor read/8, error -71 [ 161.483494][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 161.584539][ T65] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 161.605696][ T65] usb 4-1: device descriptor read/8, error -71 [ 161.613525][ T9] usb 2-1: device descriptor read/64, error -71 [ 161.734610][ T65] usb 4-1: device descriptor read/8, error -71 [ 161.843642][ T65] usb usb4-port1: unable to enumerate USB device [ 161.853687][ T9] usb 2-1: device descriptor read/64, error -71 [ 161.963651][ T9] usb usb2-port1: attempt power cycle [ 162.304945][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.324863][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.382803][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2510'. [ 162.454543][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.698987][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 162.724611][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.854696][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.963109][ T36] audit: type=1400 audit(1755719984.694:29973): avc: denied { create } for pid=7980 comm="syz.3.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 162.963935][ T9] usb usb2-port1: unable to enumerate USB device [ 162.993251][ T7981] rust_binder: 132: no such ref 0 [ 163.312231][ T7990] tipc: Enabling of bearer rejected, failed to enable media [ 163.321328][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 163.351806][ T7995] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.360725][ T7995] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 163.370679][ T36] audit: type=1400 audit(1755719985.104:29974): avc: denied { relabelto } for pid=7994 comm="syz.0.2528" name="file0" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 163.397876][ T36] audit: type=1400 audit(1755719985.104:29975): avc: denied { associate } for pid=7994 comm="syz.0.2528" name="file0" dev="tmpfs" ino=453 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 163.441484][ T8005] 9pnet_fd: Insufficient options for proto=fd [ 163.473565][ T8015] overlayfs: failed to clone upperpath [ 163.640091][ T36] audit: type=1400 audit(1755719985.374:29976): avc: denied { create } for pid=8037 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.661700][ T36] audit: type=1400 audit(1755719985.374:29977): avc: denied { write } for pid=8037 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.910488][ T8083] rust_binder: Write failure EFAULT in pid:139 [ 163.917485][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 163.948506][ T36] audit: type=1400 audit(1755719985.684:29978): avc: denied { unmount } for pid=7411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.992038][ T8086] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 164.016862][ T8086] syzkaller0: entered promiscuous mode [ 164.023928][ T8086] syzkaller0: entered allmulticast mode [ 164.031059][ T46] syzkaller0: tun_net_xmit 48 [ 164.039251][ T8086] syzkaller0: create flow: hash 2544643631 index 1 [ 164.046447][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 164.097782][ T8086] syzkaller0 (unregistered): delete flow: hash 2544643631 index 0 [ 164.214629][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.225179][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.239849][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.250093][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.258854][ T9] usb 2-1: SerialNumber: syz [ 164.271034][ T9] usb 2-1: bad CDC descriptors [ 164.417702][ T8112] overlayfs: failed to clone upperpath [ 164.546760][ T31] usb 2-1: USB disconnect, device number 18 [ 164.969122][ T65] rust_binder: 8087: removing orphan mapping 0:24 [ 165.119990][ T8144] kernel profiling enabled (shift: 5) [ 165.138568][ T8144] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 165.158098][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 165.167758][ T8146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.233505][ T444] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 165.394704][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.397155][ T8172] 9pnet: Could not find request transport: xen [ 165.405918][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.405962][ T444] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 165.428042][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 165.431861][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.452611][ T444] usb 4-1: config 0 descriptor?? [ 165.493507][ T65] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 165.643488][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 165.650404][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.662033][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 165.671138][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.680536][ T65] usb 2-1: config 0 descriptor?? [ 166.069283][ T8184] syzkaller0: entered allmulticast mode [ 166.071969][ T8140] rust_binder: Write failure EFAULT in pid:147 [ 166.075573][ T8184] syzkaller0: entered promiscuous mode [ 166.088674][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.097579][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.106973][ T8184] syzkaller0 (unregistering): left promiscuous mode [ 166.114070][ T8184] syzkaller0 (unregistering): left allmulticast mode [ 166.132147][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 166.143875][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 166.153328][ T444] usb 4-1: string descriptor 0 read error: -71 [ 166.161387][ T444] uclogic 0003:256C:006E.0007: failed retrieving string descriptor #200: -71 [ 166.163570][ T65] usb 2-1: USB disconnect, device number 19 [ 166.173494][ T444] uclogic 0003:256C:006E.0007: failed retrieving pen parameters: -71 [ 166.185544][ T444] uclogic 0003:256C:006E.0007: failed probing pen v2 parameters: -71 [ 166.194512][ T444] uclogic 0003:256C:006E.0007: failed probing parameters: -71 [ 166.202638][ T444] uclogic 0003:256C:006E.0007: probe with driver uclogic failed with error -71 [ 166.226857][ T444] usb 4-1: USB disconnect, device number 28 [ 166.326192][ T8214] tipc: Cannot configure node identity twice [ 166.335946][ T8212] cgroup: Unknown subsys name '-&/:.-'%{)' [ 166.421654][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2614'. [ 166.474215][ T8248] overlayfs: failed to clone upperpath [ 166.482659][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2616'. [ 166.503671][ T8255] rust_binder: 311: no such ref 1 [ 166.508877][ T8255] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 166.516959][ T8255] rust_binder: Error while translating object. [ 166.516997][ T8255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 166.523576][ T8255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:311 [ 166.614323][ T8274] TCP: out of memory -- consider tuning tcp_mem [ 166.631161][ T8274] ------------[ cut here ]------------ [ 166.636958][ T8274] WARNING: CPU: 0 PID: 8274 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 166.647126][ T8274] Modules linked in: [ 166.651243][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.0.2626 Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8 [ 166.663260][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.673749][ T8274] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 166.679617][ T8274] Code: a3 e8 b3 26 c3 fc 0f 0b e9 53 fe ff ff e8 a7 26 c3 fc 0f 0b e9 92 fe ff ff e8 9b 26 c3 fc 0f 0b e9 c4 fe ff ff e8 8f 26 c3 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 166.699746][ T8274] RSP: 0018:ffffc9000f07fbe8 EFLAGS: 00010293 [ 166.706281][ T8274] RAX: ffffffff84c2baf1 RBX: 0000000080000000 RCX: ffff888136dfa600 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 166.714598][ T8274] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 166.722794][ T8274] RBP: ffffc9000f07fc30 R08: ffff8881347ce57f R09: 1ffff110268f9caf [ 166.731077][ T8274] R10: dffffc0000000000 R11: ffffed10268f9cb0 R12: ffff8881347ce400 [ 166.740933][ T8274] R13: ffff8881347ce400 R14: ffff8881347ce564 R15: 1ffff110268f9c82 [ 166.749150][ T36] audit: type=1400 audit(1755719988.414:29979): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1628]" dev="pipefs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 166.773514][ T8274] FS: 00005555948d0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 166.782590][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.789446][ T8274] CR2: 0000200000001000 CR3: 0000000155ce4000 CR4: 00000000003526b0 [ 166.797585][ T8274] Call Trace: [ 166.800880][ T8274] [ 166.803957][ T8274] ? __cfi_inet_sock_destruct+0x10/0x10 [ 166.809648][ T8274] __sk_destruct+0x6b/0x6a0 [ 166.814319][ T8274] ? __sk_free+0x304/0x410 [ 166.818763][ T8274] __sk_free+0x313/0x410 [ 166.823026][ T8274] sk_free+0x58/0xb0 [ 166.826993][ T8274] tcp_close+0xc4/0x120 [ 166.831173][ T8274] inet_release+0x1b4/0x2c0 [ 166.835744][ T8274] sock_close+0xdd/0x280 [ 166.840023][ T8274] ? __cfi_sock_close+0x10/0x10 [ 166.844945][ T8274] __fput+0x1fb/0xa00 [ 166.849045][ T8274] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 166.854815][ T8274] ____fput+0x20/0x30 [ 166.858941][ T8274] task_work_run+0x1e3/0x250 [ 166.863946][ T8274] ? __cfi_task_work_run+0x10/0x10 [ 166.869177][ T8274] ? __kasan_check_read+0x15/0x20 [ 166.874544][ T8274] resume_user_mode_work+0x36/0x50 [ 166.879768][ T8274] syscall_exit_to_user_mode+0x64/0xb0 [ 166.885407][ T8274] do_syscall_64+0x64/0xf0 [ 166.889850][ T8274] ? clear_bhb_loop+0x50/0xa0 [ 166.894598][ T8274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.900603][ T8274] RIP: 0033:0x7f9cd7d8ebe9 [ 166.905160][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.925390][ T8274] RSP: 002b:00007fffce34be98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 166.933959][ T8274] RAX: 0000000000000000 RBX: 0000000000028abc RCX: 00007f9cd7d8ebe9 [ 166.942470][ T8274] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 166.950759][ T8274] RBP: 00007f9cd7fb7da0 R08: 0000000000000001 R09: 00000013ce34c18f [ 166.959135][ T8274] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007f9cd7fb5fac [ 166.968409][ T8274] R13: 00007f9cd7fb5fa0 R14: ffffffffffffffff R15: 00007fffce34bfb0 [ 166.976857][ T8274] [ 166.980247][ T8274] ---[ end trace 0000000000000000 ]--- [ 167.206590][ T46] bridge_slave_1: left allmulticast mode [ 167.212366][ T46] bridge_slave_1: left promiscuous mode [ 167.218351][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.225943][ T46] bridge_slave_0: left allmulticast mode [ 167.231752][ T46] bridge_slave_0: left promiscuous mode [ 167.237798][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.465302][ T46] veth1_macvtap: left promiscuous mode [ 167.470961][ T46] veth0_vlan: left promiscuous mode [ 167.716570][ T46] bridge_slave_1: left promiscuous mode [ 167.722566][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.731100][ T46] bridge_slave_0: left allmulticast mode [ 167.738236][ T46] bridge_slave_0: left promiscuous mode [ 167.744593][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.752972][ T46] veth0_to_bond: left allmulticast mode [ 167.758984][ T46] veth0_to_bond: left promiscuous mode [ 167.765064][ T46] bridge0: port 3(veth0_to_bond) entered disabled state [ 167.772798][ T46] bridge_slave_1: left allmulticast mode [ 167.778843][ T46] bridge_slave_1: left promiscuous mode [ 167.784922][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.792972][ T46] bridge_slave_0: left allmulticast mode [ 167.799181][ T46] bridge_slave_0: left promiscuous mode [ 167.804980][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.812977][ T46] bridge_slave_1: left allmulticast mode [ 167.818938][ T46] bridge_slave_1: left promiscuous mode [ 167.824767][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.832535][ T46] bridge_slave_0: left allmulticast mode [ 167.838349][ T46] bridge_slave_0: left promiscuous mode [ 167.844138][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.096146][ T46] tipc: Left network mode [ 168.101052][ T46] tipc: Left network mode [ 168.107313][ T46] veth1_macvtap: left promiscuous mode [ 168.113467][ T46] veth1_macvtap: left promiscuous mode [ 168.119472][ T46] veth1_macvtap: left promiscuous mode [ 168.125205][ T46] veth0_vlan: left promiscuous mode