last executing test programs: 2m45.872162286s ago: executing program 1 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x103) 2m45.825338546s ago: executing program 1 (id=522): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x3000426) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1800038007"], 0x38}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2m45.805404836s ago: executing program 1 (id=523): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x30342, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x30342, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 2m45.752092576s ago: executing program 1 (id=524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0xa}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2m45.751923216s ago: executing program 1 (id=525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = epoll_create1(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x5b87e000) 2m45.750612076s ago: executing program 1 (id=526): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x9c, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3, 0x0, 0x0, 0x80, 0x40000000}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149e43, 0x82) sendfile(r6, r5, 0x0, 0xffffffff) 2m30.197136118s ago: executing program 32 (id=526): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x9c, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3, 0x0, 0x0, 0x80, 0x40000000}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149e43, 0x82) sendfile(r6, r5, 0x0, 0xffffffff) 1m27.739891788s ago: executing program 3 (id=1660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d58fa403d1b0901003101020301090212000102fe80090904e9"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1381, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x2, 0x0, [{0x40000091, 0x0, 0x9}, {0x897, 0x0, 0xfff}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1ff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 1m24.700277767s ago: executing program 3 (id=1703): pipe2$9p(&(0x7f00000000c0), 0x4080) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1300000065ffff020000ff055cfb5032303030"], 0x13) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000487000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x20) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4040004}, 0x804) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tcp_mem(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r7, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r9, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x4, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000d049) syz_usb_connect(0x0, 0xb8, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYRES16=r8, @ANYRESDEC=0x0], 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000fd0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000fc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) 1m21.581902425s ago: executing program 3 (id=1717): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = getuid() r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x4, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000180)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001a80)={@my=0x1}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f6e2819e) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x4, 0x70bd25, 0x4, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) r9 = dup2(r8, r7) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000040)=0x10000002, 0x4) preadv(r6, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/176, 0xb0}], 0x1, 0xfffffffa, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) close_range(r7, 0xffffffffffffffff, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000240)) open(&(0x7f00000003c0)='./file0\x00', 0x1, 0x1c) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000100)="d384c3be7cc05053bc0c1252960a7e4bc12cd9e53580fdb9bb867c473c83ed683d39c5fef355c8d4c83605f9e0b261885fed8fc22e648d3e586049e3e6180f9758a9b7ce81acdb16e15d44dcb92a8ca593a3ada8f29679199c658933a0ebe48d716155ed829f9909dc2813391affb74790e5ea96b380668e3dac0ba46cf5d7a8b2e40416ada14251993ce8083bfe3233bee4e8ed01734933b69df8789e7c6c9310c189de96d9fb325284186f785073f5cc9e6fd9e339171f975c4a6b", 0xbc}, 0x1, 0x0, 0x0, 0x48001}, 0x20040002) 1m21.502956686s ago: executing program 3 (id=1718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x5, {{0xa, 0x4e24, 0x7, @private0, 0x2}}, {{0xa, 0x4e22, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, 0x108) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000005) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xf3a, 0x6) r6 = dup(r1) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000040)=ANY=[], 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 1m21.416991876s ago: executing program 3 (id=1719): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) (async) madvise(&(0x7f0000655000/0x1000)=nil, 0x1000, 0x17) 1m21.315934407s ago: executing program 3 (id=1720): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r6 = syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x40101287, 0x401) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) read$FUSE(r2, &(0x7f0000001940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000001c0)={0x28, 0xfffffffffffffff5, r7, [{0x6, 0x10000, 0x0, 0x6}]}, 0x28) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 1m6.295276595s ago: executing program 33 (id=1720): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) syz_io_uring_setup(0x58f5, &(0x7f00000000c0)={0x0, 0x400289b, 0x10000, 0x1, 0x2000031f}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r6 = syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x40101287, 0x401) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) read$FUSE(r2, &(0x7f0000001940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000001c0)={0x28, 0xfffffffffffffff5, r7, [{0x6, 0x10000, 0x0, 0x6}]}, 0x28) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 42.579779106s ago: executing program 2 (id=2185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x3fc}], 0x1, 0x40000002, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000001c0)=0x1, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x1a40, 0x4) sendmsg$can_raw(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@can={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "5a08f8daecc6083b"}, 0x10}}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="380000002d000100000000000000000008000200", @ANYRES32, @ANYBLOB="0b005682f3f06a01af5c30001400018038b7741b49e8324113e0c15b81d7da39"], 0x38}], 0x1}, 0xcc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x6}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fuseblk\x00', 0x208003, 0x0) 41.754453011s ago: executing program 2 (id=2188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xf) r1 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x84000100) close(0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, &(0x7f0000000280)) read$FUSE(r4, 0x0, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x28, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) 41.388083773s ago: executing program 2 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x1ff, 0xfffffffffffffff9, 0x4, 0x6, 0x3, 0x4, 0xffffffffffffffff, 0x4, 0x101, 0x1800000000000000, 0x3, 0x3, 0x8, 0xfffffffffffffffc, 0x7, 0x8872], 0xd000, 0x20000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40.807910307s ago: executing program 0 (id=2192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) io_setup(0x197, &(0x7f0000000440)=0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x41624800ab11328f, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x8402, 0x33) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x0, r4, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000980)="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", 0x1000, 0xe5, 0x0, 0x2}]) 40.386099439s ago: executing program 0 (id=2196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') pread64(r2, &(0x7f0000000480)=""/14, 0xd, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@handle={0x73682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 39.875852042s ago: executing program 0 (id=2198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x9554a000) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgid(0xffffffffffffffff) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (rerun: 32) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) (async, rerun: 32) read$FUSE(r7, 0x0, 0x0) (rerun: 32) dup3(0xffffffffffffffff, r7, 0x0) (async) socketpair(0x2a, 0x800, 0xaf07, &(0x7f0000000b00)) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x6000, &(0x7f0000000200)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, 0x0) (async) ppoll(&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000001540)=[{r5, 0x180}, {r6, 0x240}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) write$P9_RLERRORu(r5, &(0x7f0000000040)={0x20, 0x7, 0x1, {{0x13, './binderfs/binder1\x00'}, 0x5}}, 0x20) (rerun: 64) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)={0x40, 0x8, 0x3f, {0x3f, 0x24, "4daa674da53ff4baefa7a621fcfcb6fbbc49f24614a0a2fe34685a76aac237d0031fae9ef48fc3fbb07e863d5a5b2cc74c60501ddca0339da80a712651"}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="f602040000001f0338040e86cb0f8ff02d27fa7db2e0e8977945b6ed38f70cb2492885b9e9c8af0dd61fe410baef32a13520889b"], &(0x7f0000000580)={0x0, 0xf, 0x135, {0x5, 0xf, 0x135, 0x5, [@generic={0xee, 0x10, 0x9, "5ce8c9f2d5e56cc31985fd1448dc7973e788679956ceb6a6b189c90c31ef35e1dfddb877b2343cecd09492c1dbc0e0833b5bc411e1b9bb9ca0fac646ecc5e5e9eba074be456e67cdce833cedf69c76d81cc7c3c409d74050676156837f1004ecd3f8e20cd339e2be89a9e2b8db5331c624267c48bb5ed42f0f0830b813f744df689e9b6cf49affc240b5c2eedff8d017eae3db4f054b53290f5759b1f235fa2527613418dd4d5a7528c51a79c006a8f16d258c8a16b80be9d8d75cbeec02bbd95b91636d4dbe7c3b7f70ad8c0ba90a73512254925ca4ad157d470a27f509725ff84f00f747b2e6787e55db"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x5, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "1d9910eb0eb0503cc7c7b30d21f99ec8"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x4, 0x60, 0xfffb, 0xc}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x0, 0x780f, 0x4, [0xff0000, 0xff3e80, 0xff0000, 0xc000]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x9, 0x9, "e2b949a7", "81ca7cff"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x3, 0xff, 0xff, 0x7, 0xab4b}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000440)={0x40, 0xd, 0x7f, "d66864ad9df44d2cc4483607e5d651e505ef15142689b37105e9692b4c9809858348ada2d97b7f40e299ae5a3ff2d5f6124efac624267a8b5161410d6e96410ba4fa971c4eec3139b2ea4218aab3728aebde24194c66ec40b05acbd1aa2fde045337ac738efb815bd5ca3a87b037075fb850a1b27eb7803dba85bcfc4ab9b7"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x120, 0x20, [0xff00]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0xb, 0x2, "baea"}, 0xfffffffffffffffc, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x19, 0x2, "f2a3"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xf}}) (async) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) 39.798694143s ago: executing program 2 (id=2200): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f7000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x29, 0x1, 0x6a542793, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x5}}, 0x30) ftruncate(0xffffffffffffffff, 0xc17a) creat(0x0, 0x109) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x9f, 0x100000, 0x760, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0xb0, 0x0, 0x11000, 0x3, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x1, 0x400081, 0x2, 0x180000, 0x4007, 0x8c, 0xffff98db, 0xfffffffe, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x8, 0x2, 0x84, 0x100, 0x5, 0x252, 0x4, 0xd3a, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x145, 0x0, 0x4, 0x2, 0x40, 0x8, 0xfffffffc, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x10001, 0x7, 0xc5c, 0xffffffff]}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cde0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2240, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000002c40)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8}) 39.501502944s ago: executing program 0 (id=2202): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x435b66218419afc9) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 39.051175777s ago: executing program 2 (id=2203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) lstat(0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r3], 0x60}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5501, &(0x7f00000000c0)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 38.661851889s ago: executing program 5 (id=2205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xb0, 0x3, 0x8, 0xe04, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcd5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000380)=0xc) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x7}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x7}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x2, 0x4, 0x10000) 38.52297791s ago: executing program 4 (id=2206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00') 38.367503931s ago: executing program 4 (id=2207): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000240)={0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="f320c5a29f098c0f56a51a9322079081"], 0x18) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000040)=[r3, 0xee01, 0x0, r3, 0xffffffffffffffff, r3, 0x0, r3, 0x0]) setfsgid(r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f00000000c0)) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r6, 0x88, 0x1, &(0x7f0000000080), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 38.337638311s ago: executing program 5 (id=2208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) (async) 38.027880103s ago: executing program 4 (id=2209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4bda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 37.960078174s ago: executing program 5 (id=2210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) memfd_secret(0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 37.770377164s ago: executing program 2 (id=2211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002a38738406c0500815a7a01020301090250810904ee0100393df3fc"], 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x10000, 0x9000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 37.765149075s ago: executing program 4 (id=2212): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000100)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8000000002}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xeec}) r4 = dup2(r1, r0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4ea4, 0x0, @empty, 0xff}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='Je=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r8, &(0x7f0000000040)=""/36, 0x24) getdents64(r8, 0xfffffffffffffffe, 0x64) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001dc0)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x9, 0x6, {0x4, 0x636, 0x5, 0x8, 0x3, 0x7f, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r10, r11, 0x7, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x7, 0x8, 0x6, 0x2008, 0x0, 0xe44, r10, r11, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000019480)={0xffffffffffffffff}) close(r12) 37.690139175s ago: executing program 5 (id=2213): prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe79, 0x4}}}}, [@NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x400, 0x6, 0xdd45, 0x8, 0x80]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x50}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c095}, 0x9804) 37.519955356s ago: executing program 0 (id=2214): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/sco\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) getdents64(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4, 0x0, 0xa, 0x0, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x3ff, 0x2204c6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = userfaultfd(0x80001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'veth0_macvtap\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x1, 0x3, [0x8283, 0x20000003, 0x9]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) shutdown(r8, 0x1000000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0}) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) 37.457762007s ago: executing program 5 (id=2215): r0 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) r3 = gettid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x7) (async) sendfile(r2, r2, 0x0, 0x7ffff000) 33.606256889s ago: executing program 4 (id=2216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000040)="1a075f4409eca4a3325c73b58b1355038934c25f892ececb1fab852304dc96a745ee7a3069090ef9567f192d73265ad427f4529453d2a932722177c8c36358ee99c520e6ebfaf9484c9cfdda72873c9d8c141866b142bdbd9227f055dc21da0e29f37caca4edec872c8e9539bd21f5ec316e", 0x72, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r6}) 27.813636024s ago: executing program 5 (id=2217): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x84, 0x6, 0x4, 0x3, 0xf2, 0x8, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x43}]}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) mknodat(r4, &(0x7f0000000140)='./file0\x00', 0xc000, 0x7) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20000) ioctl$EVIOCSFF(r5, 0x402c4580, &(0x7f0000000100)={0x53, 0xff, 0x7, {0x400, 0x7}, {0x9, 0x8}, @cond=[{0x7, 0x9, 0xb, 0x8, 0xfff5, 0x37}, {0x3, 0xea0a, 0x5, 0x8, 0x2, 0x5}]}) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) 27.687306955s ago: executing program 0 (id=2218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x18681, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x1, 0xf000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x8, 0x0, 0x2b, 0x9}, {0x6000, 0xf000, 0xf, 0x0, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x3}, {0x2, 0x100000, 0x10, 0x5, 0x1, 0x2, 0x9, 0xe, 0x0, 0x5, 0xb, 0x9}, {0x8000000, 0x1000, 0x0, 0xe7, 0x4, 0x1, 0xff, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0xf6, 0x5, 0x86, 0x6, 0x7f, 0x6, 0xfc, 0xf2, 0x43}, {0x3000, 0x6000, 0xb, 0x7c, 0xb1, 0x8, 0x7f, 0xab, 0x80, 0xc, 0x4, 0x3d}, {0xd000, 0x8000000, 0xa, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0xffff1000, 0x3000, 0x5, 0x5, 0x5, 0x7, 0x3, 0x37, 0x0, 0x9, 0xf0, 0x40}, {0xeeef0000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2004, 0xc, 0x0, 0x80a0000, [0x4, 0x800, 0x7, 0x3]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)) 24.303367194s ago: executing program 4 (id=2219): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000440)={0x1, 0x2, 0x7fffffffffffffff, 0x1000}) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = socket(0x10, 0x802, 0x101) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2022, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x84300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6bd5"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) write(r4, &(0x7f0000000140)="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", 0xfc) r9 = socket$inet_udp(0x2, 0x2, 0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r10, &(0x7f0000000300)) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r3, 0xffffb000) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x21) 12.251309496s ago: executing program 34 (id=2211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002a38738406c0500815a7a01020301090250810904ee0100393df3fc"], 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x10000, 0x9000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.113977618s ago: executing program 35 (id=2218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x18681, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x1, 0xf000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x8, 0x0, 0x2b, 0x9}, {0x6000, 0xf000, 0xf, 0x0, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x3}, {0x2, 0x100000, 0x10, 0x5, 0x1, 0x2, 0x9, 0xe, 0x0, 0x5, 0xb, 0x9}, {0x8000000, 0x1000, 0x0, 0xe7, 0x4, 0x1, 0xff, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0xf6, 0x5, 0x86, 0x6, 0x7f, 0x6, 0xfc, 0xf2, 0x43}, {0x3000, 0x6000, 0xb, 0x7c, 0xb1, 0x8, 0x7f, 0xab, 0x80, 0xc, 0x4, 0x3d}, {0xd000, 0x8000000, 0xa, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0xffff1000, 0x3000, 0x5, 0x5, 0x5, 0x7, 0x3, 0x37, 0x0, 0x9, 0xf0, 0x40}, {0xeeef0000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2004, 0xc, 0x0, 0x80a0000, [0x4, 0x800, 0x7, 0x3]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)) 4.912396291s ago: executing program 36 (id=2219): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000440)={0x1, 0x2, 0x7fffffffffffffff, 0x1000}) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = socket(0x10, 0x802, 0x101) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2022, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x84300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6bd5"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) write(r4, &(0x7f0000000140)="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", 0xfc) r9 = socket$inet_udp(0x2, 0x2, 0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r10, &(0x7f0000000300)) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r3, 0xffffb000) open(&(0x7f0000000000)='./bus\x00', 0x100, 0x21) 0s ago: executing program 37 (id=2217): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x84, 0x6, 0x4, 0x3, 0xf2, 0x8, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x43}]}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) mknodat(r4, &(0x7f0000000140)='./file0\x00', 0xc000, 0x7) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20000) ioctl$EVIOCSFF(r5, 0x402c4580, &(0x7f0000000100)={0x53, 0xff, 0x7, {0x400, 0x7}, {0x9, 0x8}, @cond=[{0x7, 0x9, 0xb, 0x8, 0xfff5, 0x37}, {0x3, 0xea0a, 0x5, 0x8, 0x2, 0x5}]}) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 78 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.366754][ T36] audit: type=1400 audit(1762472077.490:841): avc: denied { mounton } for pid=5213 comm="syz.0.1590" path="/15/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 141.368247][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 141.414789][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.418148][ T5220] rust_binder: Error while translating object. [ 141.427725][ T10] usb 5-1: USB disconnect, device number 22 [ 141.441580][ T36] audit: type=1400 audit(1762472077.510:842): avc: denied { unmount } for pid=4922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 141.465381][ T5220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.465415][ T5220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 141.484001][ T36] audit: type=1400 audit(1762472077.620:843): avc: denied { unmount } for pid=4922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.533527][ T5230] usb usb8: usbfs: process 5230 (syz.4.1592) did not claim interface 0 before use [ 141.553808][ T36] audit: type=1400 audit(1762472077.670:844): avc: denied { write } for pid=5218 comm="syz.4.1592" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.591330][ T5232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.594816][ T36] audit: type=1400 audit(1762472077.730:845): avc: denied { setattr } for pid=5231 comm="syz.3.1595" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.688949][ T36] audit: type=1400 audit(1762472077.830:846): avc: denied { read } for pid=5226 comm="syz.0.1594" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.715674][ T36] audit: type=1400 audit(1762472077.830:847): avc: denied { open } for pid=5226 comm="syz.0.1594" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.715910][ T5236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.818696][ T5243] overlayfs: failed to clone lowerpath [ 141.831914][ T5238] overlayfs: failed to clone lowerpath [ 141.839421][ T5238] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 141.915872][ T5253] 9pnet_fd: Insufficient options for proto=fd [ 142.367703][ T5279] /dev/rnullb0: Can't open blockdev [ 142.577388][ T5295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.577711][ T5295] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 142.584186][ T5295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 142.592244][ T5295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:849 [ 142.884975][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 142.936780][ T5303] binder: Bad value for 'stats' [ 143.044976][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 143.051573][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.062554][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.069247][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 143.078362][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.087524][ T10] usb 4-1: config 0 descriptor?? [ 143.118504][ T5308] 9pnet_fd: Insufficient options for proto=fd [ 143.305013][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 143.326342][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.343631][ T10] usb 4-1: USB disconnect, device number 62 [ 143.438918][ T5341] incfs: Can't find or create .index dir in ./file0 [ 143.445757][ T5341] incfs: mount failed -1 [ 143.450300][ T5341] incfs: Can't find or create .index dir in ./file0 [ 143.450312][ T5342] incfs: Can't find or create .index dir in ./file0 [ 143.450353][ T5342] incfs: mount failed -1 [ 143.457067][ T5341] incfs: mount failed -1 [ 143.528341][ T5346] 9pnet_fd: Insufficient options for proto=fd [ 143.534923][ T2420] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 143.685559][ T2420] usb 5-1: Using ep0 maxpacket: 32 [ 143.695291][ T2420] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.704620][ T2420] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 143.716972][ T2420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.726007][ T2420] usb 5-1: config 0 descriptor?? [ 143.739254][ T5360] rust_binder: Write failure EFAULT in pid:883 [ 143.759791][ T5362] overlay: Unknown parameter '/' [ 143.773392][ T5364] rust_binder: Error while translating object. [ 143.773460][ T5364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.779817][ T5364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:885 [ 144.064922][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 144.188677][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.195127][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.234950][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 144.241390][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.249836][ T10] usb 4-1: config 179 has no interface number 0 [ 144.256174][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 144.267363][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 144.278709][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 144.289957][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 144.301717][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.315303][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 144.324388][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.333527][ T2420] usbhid 5-1:0.0: can't add hid device: -71 [ 144.340121][ T2420] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.348167][ T5370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.349578][ T2420] usb 5-1: USB disconnect, device number 23 [ 144.564574][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.573259][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.583262][ T2420] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 145.008293][ T2420] usb 4-1: USB disconnect, device number 63 [ 145.008354][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.008391][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.031533][ T2420] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.814953][ T475] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 145.964928][ T475] usb 4-1: Using ep0 maxpacket: 32 [ 145.971589][ T475] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.980344][ T475] usb 4-1: config 6 has an invalid interface number: 210 but max is 0 [ 145.988629][ T475] usb 4-1: config 6 has no interface number 0 [ 145.994779][ T475] usb 4-1: config 6 interface 210 has no altsetting 0 [ 146.003243][ T475] usb 4-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=1d.40 [ 146.012419][ T475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.020892][ T475] usb 4-1: Product: syz [ 146.025148][ T475] usb 4-1: Manufacturer: syz [ 146.029765][ T475] usb 4-1: SerialNumber: syz [ 146.225235][ T690] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.225398][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 146.238014][ T5400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1652'. [ 146.248861][ T5400] can0: slcan on ptm1. [ 146.255064][ T5405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.258430][ T475] ums-sddr55 4-1:6.210: USB Mass Storage device detected [ 146.264365][ T5405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.280788][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 146.280811][ T36] audit: type=1400 audit(1762472082.400:965): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.308328][ T36] audit: type=1400 audit(1762472082.400:966): avc: denied { read } for pid=149 comm="dhcpcd" name="n18" dev="tmpfs" ino=3869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.330041][ T36] audit: type=1400 audit(1762472082.400:967): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=3869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.353177][ T36] audit: type=1400 audit(1762472082.400:968): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=3869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.376415][ T36] audit: type=1400 audit(1762472082.470:969): avc: denied { read } for pid=5413 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.400453][ T36] audit: type=1400 audit(1762472082.470:970): avc: denied { open } for pid=5413 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.407212][ T475] usb 4-1: USB disconnect, device number 64 [ 146.428204][ T36] audit: type=1400 audit(1762472082.470:971): avc: denied { getattr } for pid=5413 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.462977][ T5399] can0 (unregistered): slcan off ptm1. [ 146.469020][ T36] audit: type=1400 audit(1762472082.600:972): avc: denied { write } for pid=5412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.492283][ T36] audit: type=1400 audit(1762472082.600:973): avc: denied { add_name } for pid=5412 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.515259][ T36] audit: type=1400 audit(1762472082.600:974): avc: denied { create } for pid=5412 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.544933][ T49] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 146.706145][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.717142][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.727661][ T49] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.736776][ T49] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.744938][ T49] usb 5-1: Manufacturer: syz [ 146.750201][ T49] usb 5-1: config 0 descriptor?? [ 147.011732][ T5448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.012807][ T5449] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 147.019731][ T5449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 147.028189][ T5449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:893 [ 147.209199][ T5459] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 147.225758][ T5459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 147.257792][ T5466] rust_binder: 105: no such ref 0 [ 147.276266][ T5466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 147.304971][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 147.338589][ T5468] __vm_enough_memory: pid: 5468, comm: syz.0.1666, bytes: 18014402804453376 not enough memory for the allocation [ 147.352923][ T5469] __vm_enough_memory: pid: 5469, comm: syz.0.1666, bytes: 18014402804453376 not enough memory for the allocation [ 147.380516][ T5473] rust_binder: Error in use_page_slow: ESRCH [ 147.380538][ T5473] rust_binder: use_range failure ESRCH [ 147.386806][ T5473] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 147.392385][ T5473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.400477][ T5473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112 [ 147.410431][ T5473] netlink: 'syz.0.1667': attribute type 27 has an invalid length. [ 147.441005][ T5474] netlink: 'syz.0.1667': attribute type 27 has an invalid length. [ 147.457537][ T5473] binder: Unknown parameter 'context[7' [ 147.457567][ T5474] binder: Unknown parameter 'context[7' [ 147.476237][ T10] usb 4-1: config 2 has an invalid interface number: 233 but max is 0 [ 147.491974][ T10] usb 4-1: config 2 has no interface number 0 [ 147.505179][ T10] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=31.00 [ 147.514688][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.523288][ T10] usb 4-1: Product: syz [ 147.535008][ T10] usb 4-1: Manufacturer: syz [ 147.542965][ T10] usb 4-1: SerialNumber: syz [ 147.696630][ T5494] overlayfs: failed to clone upperpath [ 147.905365][ T5503] sit0: entered promiscuous mode [ 147.912300][ T5503] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 147.920196][ T5503] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1660'. [ 149.016251][ T5534] @: renamed from vlan0 (while UP) [ 149.056361][ T5536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1686'. [ 149.217190][ T49] uclogic 0003:256C:006D.0017: failed retrieving Huion firmware version: -71 [ 149.244764][ T49] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 149.264943][ T49] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 149.285719][ T49] usb 5-1: USB disconnect, device number 24 [ 149.295800][ T673] udevd[673]: setting mode of /dev/bus/usb/005/024 to 020664 failed: No such file or directory [ 149.330018][ T673] udevd[673]: setting owner of /dev/bus/usb/005/024 to uid=0, gid=0 failed: No such file or directory [ 149.507488][ T5553] bridge0: port 3(veth1_macvtap) entered blocking state [ 149.530110][ T5553] bridge0: port 3(veth1_macvtap) entered disabled state [ 149.537257][ T5553] veth1_macvtap: entered allmulticast mode [ 149.543815][ T5553] veth1_macvtap: left allmulticast mode [ 149.615491][ T5561] binder: Bad value for 'stats' [ 149.725340][ T5575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.725372][ T5575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 150.107739][ T10] ftdi_sio 4-1:2.233: FTDI USB Serial Device converter detected [ 150.146132][ T10] usb 4-1: Detected FT4232HP [ 150.156251][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 150.178487][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 150.192322][ T5593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.192362][ T5593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 150.202531][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.225356][ T10] usb 4-1: USB disconnect, device number 65 [ 150.240093][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 150.256030][ T10] ftdi_sio 4-1:2.233: device disconnected [ 150.494955][ T65] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 150.574956][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 150.604943][ T331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.647610][ T65] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 150.655849][ T65] usb 5-1: config 0 has no interface number 0 [ 150.667069][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 150.676247][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.684261][ T65] usb 5-1: Product: syz [ 150.688465][ T65] usb 5-1: Manufacturer: syz [ 150.693124][ T65] usb 5-1: SerialNumber: syz [ 150.699562][ T65] usb 5-1: config 0 descriptor?? [ 150.714939][ T10] usb 4-1: device descriptor read/64, error -71 [ 150.755001][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 150.763586][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.775262][ T331] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 150.784332][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.794536][ T331] usb 1-1: config 0 descriptor?? [ 150.908983][ T5597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.954974][ T10] usb 4-1: device descriptor read/64, error -71 [ 151.022971][ T65] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 151.033387][ T65] usb 5-1: No valid video chain found. [ 151.042281][ T65] usb 5-1: USB disconnect, device number 25 [ 151.204959][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 151.215458][ T331] elo 0003:04E7:0009.0018: unknown main item tag 0x4 [ 151.225840][ T331] elo 0003:04E7:0009.0018: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 151.285541][ T36] kauditd_printk_skb: 460 callbacks suppressed [ 151.285561][ T36] audit: type=1400 audit(1762472087.430:1435): avc: denied { ioctl } for pid=5594 comm="syz.3.1703" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.326830][ T36] audit: type=1400 audit(1762472087.470:1436): avc: denied { create } for pid=5605 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.346407][ T10] usb 4-1: device descriptor read/64, error -71 [ 151.416670][ T36] audit: type=1400 audit(1762472087.560:1437): avc: denied { mounton } for pid=5598 comm="syz.0.1704" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 151.440654][ T36] audit: type=1400 audit(1762472087.570:1438): avc: denied { create } for pid=5617 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.442035][ T2420] usb 1-1: USB disconnect, device number 8 [ 151.460365][ T36] audit: type=1400 audit(1762472087.570:1439): avc: denied { mounton } for pid=5617 comm="syz.2.1708" path="/470/file0" dev="tmpfs" ino=2577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.490345][ T36] audit: type=1400 audit(1762472087.570:1440): avc: denied { mounton } for pid=5617 comm="syz.2.1708" path="/470/file0" dev="tmpfs" ino=2577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.515819][ T36] audit: type=1400 audit(1762472087.570:1441): avc: denied { mounton } for pid=5617 comm="syz.2.1708" path="/470/file0" dev="tmpfs" ino=2577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.539578][ T36] audit: type=1400 audit(1762472087.610:1442): avc: denied { ioctl } for pid=5594 comm="syz.3.1703" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.568472][ T36] audit: type=1400 audit(1762472087.610:1443): avc: denied { ioctl } for pid=5594 comm="syz.3.1703" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.593478][ T36] audit: type=1400 audit(1762472087.610:1444): avc: denied { ioctl } for pid=5594 comm="syz.3.1703" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.618448][ T10] usb 4-1: device descriptor read/64, error -71 [ 151.725820][ T10] usb usb4-port1: attempt power cycle [ 152.064912][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 152.098944][ T10] usb 4-1: device descriptor read/8, error -71 [ 152.200240][ T5637] kvm: kvm [5636]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000034) = 0x8 [ 152.248005][ T10] usb 4-1: device descriptor read/8, error -71 [ 152.504998][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 152.524938][ T475] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 152.528622][ T10] usb 4-1: device descriptor read/8, error -71 [ 152.618967][ T5642] rust_binder: Error while translating object. [ 152.619001][ T5642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.625271][ T5642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 152.668698][ T10] usb 4-1: device descriptor read/8, error -71 [ 152.678672][ T5647] rust_binder: Write failure EFAULT in pid:677 [ 152.687009][ T475] usb 1-1: not running at top speed; connect to a high speed hub [ 152.702974][ T475] usb 1-1: config 1 interface 0 has no altsetting 0 [ 152.713467][ T475] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.722590][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.731330][ T475] usb 1-1: Product: 椂瞴 [ 152.735812][ T475] usb 1-1: Manufacturer: 呰 [ 152.740517][ T475] usb 1-1: SerialNumber: 㐖 [ 152.785123][ T10] usb usb4-port1: unable to enumerate USB device [ 153.229090][ T475] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 153.249851][ T475] usb 1-1: USB disconnect, device number 9 [ 153.366723][ T5654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.378478][ T5654] rust_binder: Error while translating object. [ 153.394956][ T5654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 153.401396][ T5654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:908 [ 153.585863][ T5664] loop7: detected capacity change from 0 to 7 [ 153.652815][ C0] blk_print_req_error: 4 callbacks suppressed [ 153.652836][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 153.668807][ C0] buffer_io_error: 4 callbacks suppressed [ 153.668826][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 153.804924][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 153.957417][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.967337][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 153.976436][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.986559][ T10] usb 5-1: config 0 descriptor?? [ 154.402019][ T10] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 154.473431][ T10] usb 5-1: USB disconnect, device number 26 [ 154.486951][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 154.520113][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 154.552330][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 154.583123][ T5677] rust_binder: Write failure EFAULT in pid:686 [ 154.583175][ T5674] fido_id[5674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 154.661910][ T5679] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 154.684957][ T5679] rust_binder: Write failure EINVAL in pid:688 [ 155.227468][ T5710] can: request_module (can-proto-0) failed. [ 155.735807][ T5747] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 155.766392][ T5751] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 155.896270][ T5758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 156.302314][ T36] kauditd_printk_skb: 551 callbacks suppressed [ 156.302333][ T36] audit: type=1400 audit(2000000004.800:1996): avc: denied { create } for pid=5791 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.338322][ T36] audit: type=1400 audit(2000000004.810:1997): avc: denied { write } for pid=5791 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.358554][ T36] audit: type=1400 audit(2000000004.810:1998): avc: denied { nlmsg_write } for pid=5791 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.381427][ T36] audit: type=1400 audit(2000000004.810:1999): avc: denied { write } for pid=5791 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.404927][ T49] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.424918][ T36] audit: type=1400 audit(2000000004.810:2000): avc: denied { nlmsg_write } for pid=5791 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.451894][ T36] audit: type=1400 audit(2000000004.840:2001): avc: denied { ioctl } for pid=5779 comm="syz.0.1758" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.478971][ T36] audit: type=1400 audit(2000000004.880:2002): avc: denied { create } for pid=5794 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.499797][ T36] audit: type=1400 audit(2000000004.880:2003): avc: denied { create } for pid=5794 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.520590][ T36] audit: type=1400 audit(2000000004.880:2004): avc: denied { getopt } for pid=5794 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.540512][ T36] audit: type=1400 audit(2000000004.910:2005): avc: denied { ioctl } for pid=5779 comm="syz.0.1758" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.594949][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 156.602507][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.612650][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.624774][ T49] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.634061][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.642119][ T49] usb 1-1: Product: syz [ 156.646342][ T49] usb 1-1: Manufacturer: syz [ 156.650954][ T49] usb 1-1: SerialNumber: syz [ 156.929543][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.938486][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.961921][ T49] usb 1-1: 0:2 : does not exist [ 156.969088][ T49] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 156.989365][ T49] usb 1-1: USB disconnect, device number 10 [ 157.037168][ T673] udevd[673]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.596163][ T5830] rust_binder: Error while translating object. [ 157.596196][ T5830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 157.602475][ T5830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:194 [ 158.104976][ T331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.264972][ T331] usb 1-1: Using ep0 maxpacket: 8 [ 158.272758][ T331] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.283881][ T331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.290730][ T331] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 158.299872][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.309679][ T331] usb 1-1: config 0 descriptor?? [ 158.728428][ T331] uclogic 0003:5543:0004.001A: unknown main item tag 0x0 [ 158.744168][ T331] uclogic 0003:5543:0004.001A: item fetching failed at offset 4/7 [ 158.753364][ T331] uclogic 0003:5543:0004.001A: parse failed [ 158.760025][ T331] uclogic 0003:5543:0004.001A: probe with driver uclogic failed with error -22 [ 159.081309][ T2420] usb 1-1: USB disconnect, device number 11 [ 160.665242][ T331] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.827307][ T331] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 160.836480][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.846395][ T331] usb 1-1: config 0 descriptor?? [ 161.275145][ T331] usb 1-1: Cannot read MAC address [ 161.280377][ T331] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 161.308455][ T331] usb 1-1: USB disconnect, device number 12 [ 161.773920][ T36] kauditd_printk_skb: 430 callbacks suppressed [ 161.773938][ T36] audit: type=1400 audit(2000000010.270:2436): avc: denied { read write } for pid=4922 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.804906][ T36] audit: type=1400 audit(2000000010.270:2437): avc: denied { read write open } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.836779][ T36] audit: type=1400 audit(2000000010.270:2438): avc: denied { ioctl } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.862432][ T36] audit: type=1400 audit(2000000010.360:2439): avc: denied { create } for pid=6042 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.883187][ T36] audit: type=1400 audit(2000000010.360:2440): avc: denied { write } for pid=6042 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.909519][ T36] audit: type=1400 audit(2000000010.360:2441): avc: denied { read } for pid=6042 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.930691][ T36] audit: type=1400 audit(2000000010.360:2442): avc: denied { read } for pid=6042 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.951073][ T36] audit: type=1400 audit(2000000010.360:2443): avc: denied { read } for pid=6042 comm="syz.0.1838" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.973782][ T36] audit: type=1400 audit(2000000010.360:2444): avc: denied { read open } for pid=6042 comm="syz.0.1838" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.997397][ T36] audit: type=1400 audit(2000000010.360:2445): avc: denied { ioctl } for pid=6042 comm="syz.0.1838" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.143838][ T6057] netlink: 'syz.4.1842': attribute type 8 has an invalid length. [ 162.186539][ T6062] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.243238][ T6066] /dev/loop0: Can't lookup blockdev [ 162.294947][ T331] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 162.375242][ T6075] netlink: 'syz.2.1849': attribute type 19 has an invalid length. [ 162.383195][ T6075] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1849'. [ 162.447386][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.458447][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.469952][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 162.479053][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.488016][ T331] usb 1-1: SerialNumber: syz [ 162.499738][ T331] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 162.508259][ T331] usb-storage 1-1:1.0: USB Mass Storage device detected [ 162.517485][ T331] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 162.530559][ T331] scsi host1: usb-storage 1-1:1.0 [ 163.058466][ T6120] binder: Unknown parameter 'fscontext?}' [ 163.697618][ T6135] overlayfs: failed to clone upperpath [ 163.761120][ T6142] No source specified [ 163.789031][ T49] usb 1-1: USB disconnect, device number 13 [ 163.926297][ T6157] overlayfs: failed to clone lowerpath [ 164.606585][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 164.624915][ T49] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.693475][ T6179] overlayfs: missing 'workdir' [ 164.776109][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 164.784446][ T49] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.798145][ T49] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.798946][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 164.817448][ T49] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.827850][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.835928][ T49] usb 1-1: Product: syz [ 164.840168][ T49] usb 1-1: Manufacturer: syz [ 164.844819][ T49] usb 1-1: SerialNumber: syz [ 165.146989][ T6162] syz.0.1877: attempt to access beyond end of device [ 165.146989][ T6162] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 165.159985][ T6162] exFAT-fs (loop0): unable to read boot sector [ 165.166400][ T6162] exFAT-fs (loop0): failed to read boot sector [ 165.172609][ T6162] exFAT-fs (loop0): failed to recognize exfat type [ 165.181146][ T6162] rust_binder: Error while translating object. [ 165.181188][ T6162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 165.187481][ T6162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 165.206261][ T49] usb 1-1: failed to enable PITCH for EP 0x82 [ 165.221849][ T49] usb 1-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 165.250809][ T49] usb 1-1: USB disconnect, device number 14 [ 165.274589][ T673] udevd[673]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory [ 165.393442][ T5408] udevd[5408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.549359][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 165.879037][ T6228] tmpfs: Unknown parameter '00000000000000000000003' [ 166.021871][ T6240] usb usb8: usbfs: process 6240 (syz.0.1906) did not claim interface 0 before use [ 166.287544][ T6256] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.459575][ T6262] rust_binder: Write failure EFAULT in pid:242 [ 166.657387][ T6264] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 166.685254][ T6264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 166.807207][ T36] kauditd_printk_skb: 387 callbacks suppressed [ 166.807229][ T36] audit: type=1400 audit(2000000015.310:2833): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.869934][ T36] audit: type=1400 audit(2000000015.310:2834): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.907857][ T36] audit: type=1400 audit(2000000015.340:2835): avc: denied { create } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.944672][ T36] audit: type=1400 audit(2000000015.340:2836): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.946938][ T6278] FAT-fs (rnullb0): bogus number of reserved sectors [ 166.966416][ T36] audit: type=1400 audit(2000000015.340:2837): avc: denied { read } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.014908][ T6278] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 167.033781][ T36] audit: type=1400 audit(2000000015.340:2838): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.058818][ T36] audit: type=1400 audit(2000000015.340:2839): avc: denied { read } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.085646][ T36] audit: type=1400 audit(2000000015.340:2840): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.109931][ T36] audit: type=1400 audit(2000000015.340:2841): avc: denied { read } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.130847][ T36] audit: type=1400 audit(2000000015.360:2842): avc: denied { write } for pid=6269 comm="syz.0.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.154123][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 167.226808][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 167.486273][ T6308] 9p: Unknown uid 00000000004294967295 [ 167.670219][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 167.864934][ T331] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.014946][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 168.022699][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.034546][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.044353][ T331] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 168.053486][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.063308][ T331] usb 1-1: config 0 descriptor?? [ 168.274647][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.288944][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.541098][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.571839][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.594864][ T331] koneplus 0003:1E7D:2D51.001B: item fetching failed at offset 4/5 [ 168.603036][ T331] koneplus 0003:1E7D:2D51.001B: parse failed [ 168.649759][ T331] koneplus 0003:1E7D:2D51.001B: probe with driver koneplus failed with error -22 [ 168.847255][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.875262][ T475] usb 1-1: USB disconnect, device number 15 [ 168.884811][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.893171][ T6356] bridge_slave_0: entered allmulticast mode [ 168.900306][ T6356] bridge_slave_0: entered promiscuous mode [ 168.907350][ T6369] netlink: 'syz.4.1949': attribute type 4 has an invalid length. [ 168.917236][ T6369] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1949'. [ 168.927214][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.934278][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.945870][ T6356] bridge_slave_1: entered allmulticast mode [ 168.949464][ T6371] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 168.952446][ T6356] bridge_slave_1: entered promiscuous mode [ 169.072262][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.079386][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.086728][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.093789][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.129006][ T6388] overlayfs: missing 'lowerdir' [ 169.156798][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.164258][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.180268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.187422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.199157][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.206267][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.286823][ T6356] veth0_vlan: entered promiscuous mode [ 169.324589][ T6356] veth1_macvtap: entered promiscuous mode [ 169.431184][ T6390] rust_binder: Write failure EFAULT in pid:259 [ 169.515023][ T6393] rust_binder: Write failure EFAULT in pid:2 [ 169.875710][ T6417] /dev/nbd2: Can't lookup blockdev [ 169.892386][ T6417] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 169.974982][ T1876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 169.989162][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'. [ 170.105410][ T6426] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 170.113549][ T6426] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 170.122334][ T6426] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 170.130359][ T1876] usb 6-1: Using ep0 maxpacket: 8 [ 170.130374][ T6426] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 170.141150][ T1876] usb 6-1: config 1 has an invalid interface number: 16 but max is 0 [ 170.152437][ T1876] usb 6-1: config 1 has no interface number 0 [ 170.168364][ T1876] usb 6-1: New USB device found, idVendor=c925, idProduct=b30b, bcdDevice= 0.fd [ 170.178751][ T1876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.187737][ T1876] usb 6-1: Product: syz [ 170.192706][ T1876] usb 6-1: Manufacturer: syz [ 170.202606][ T1876] usb 6-1: SerialNumber: syz [ 170.247192][ T6433] 9pnet_fd: p9_fd_create_tcp (6433): problem connecting socket to 127.0.0.1 [ 170.429858][ T1876] usblp 6-1:1.16: usblp0: USB Unidirectional printer dev 2 if 16 alt 0 proto 1 vid 0xC925 pid 0xB30B [ 170.556871][ T10] usb 6-1: USB disconnect, device number 2 [ 170.575878][ T10] usblp0: removed [ 170.634950][ T331] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.805006][ T331] usb 1-1: Using ep0 maxpacket: 8 [ 170.815372][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.834150][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 170.845652][ T331] usb 1-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 170.855754][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.867609][ T6470] fuse: Bad value for 'fd' [ 170.872414][ T331] usb 1-1: config 0 descriptor?? [ 171.054993][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.194950][ T10] usb 6-1: device descriptor read/64, error -71 [ 171.290655][ T331] wacom 0003:056A:00B0.001C: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 171.305135][ T331] wacom 0003:056A:00B0.001C: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.0-1/input0 [ 171.317524][ T331] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B0.001C/input/input24 [ 171.474916][ T10] usb 6-1: device descriptor read/64, error -71 [ 171.518079][ T6444] bridge0: port 3(veth1_to_bridge) entered blocking state [ 171.534056][ T6444] bridge0: port 3(veth1_to_bridge) entered disabled state [ 171.551122][ T6444] veth1_to_bridge: entered allmulticast mode [ 171.558217][ T6444] veth1_to_bridge: entered promiscuous mode [ 171.564258][ T6444] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 171.582071][ T6444] bridge0: port 3(veth1_to_bridge) entered blocking state [ 171.589310][ T6444] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 171.608164][ T1876] usb 1-1: USB disconnect, device number 16 [ 171.724922][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.864926][ T10] usb 6-1: device descriptor read/64, error -71 [ 171.976017][ T36] kauditd_printk_skb: 628 callbacks suppressed [ 171.976036][ T36] audit: type=1400 audit(2000000020.480:3471): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.007246][ T36] audit: type=1400 audit(2000000020.480:3472): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.032188][ T36] audit: type=1400 audit(2000000020.480:3473): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.057154][ T36] audit: type=1400 audit(2000000020.480:3474): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.082196][ T36] audit: type=1400 audit(2000000020.480:3475): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.107114][ T36] audit: type=1400 audit(2000000020.480:3476): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.132035][ T36] audit: type=1400 audit(2000000020.480:3477): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.134915][ T10] usb 6-1: device descriptor read/64, error -71 [ 172.157393][ T36] audit: type=1400 audit(2000000020.560:3478): avc: denied { ioctl } for pid=6453 comm="syz.5.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.188788][ T36] audit: type=1400 audit(2000000020.660:3479): avc: denied { unmount } for pid=4922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.209621][ T36] audit: type=1400 audit(2000000020.690:3480): avc: denied { read write } for pid=4922 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.265515][ T10] usb usb6-port1: attempt power cycle [ 172.604935][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.637458][ T10] usb 6-1: device descriptor read/8, error -71 [ 172.767836][ T10] usb 6-1: device descriptor read/8, error -71 [ 172.969385][ T6532] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.004943][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.027844][ T10] usb 6-1: device descriptor read/8, error -71 [ 173.158630][ T10] usb 6-1: device descriptor read/8, error -71 [ 173.275051][ T10] usb usb6-port1: unable to enumerate USB device [ 173.800247][ T6555] loop7: detected capacity change from 0 to 7 [ 173.807269][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.816474][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.825549][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.834725][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.842638][ T6555] loop7: unable to read partition table [ 173.859744][ T6555] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 173.889144][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.898373][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.924873][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.934071][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.944868][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.954059][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.964887][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.974075][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.984979][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.994171][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.106689][ T6562] netlink: 'syz.4.2008': attribute type 13 has an invalid length. [ 174.115636][ T6562] erspan0: refused to change device tx_queue_len [ 174.116161][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 174.197052][ T6564] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.298242][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 174.312915][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.327968][ T10] usb 6-1: config 0 descriptor?? [ 174.584963][ T332] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 174.643421][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.660792][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.674937][ T6576] bridge_slave_0: entered allmulticast mode [ 174.685412][ T6576] bridge_slave_0: entered promiscuous mode [ 174.699452][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.708041][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.716934][ T6576] bridge_slave_1: entered allmulticast mode [ 174.723654][ T6576] bridge_slave_1: entered promiscuous mode [ 174.729585][ T332] usb 1-1: device descriptor read/64, error -71 [ 174.845174][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.852540][ T6576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.859973][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.867240][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.936387][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.943860][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.960495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.967623][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.979489][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.986636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.987969][ T332] usb 1-1: device descriptor read/64, error -71 [ 175.091016][ T6576] veth0_vlan: entered promiscuous mode [ 175.134097][ T6576] veth1_macvtap: entered promiscuous mode [ 175.235639][ T332] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 175.384933][ T332] usb 1-1: device descriptor read/64, error -71 [ 175.534996][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 175.634945][ T332] usb 1-1: device descriptor read/64, error -71 [ 175.704938][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 175.713596][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.723234][ T9] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 175.731421][ T9] usb 3-1: config 0 has no interface number 0 [ 175.737709][ T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 175.749009][ T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 175.759420][ T332] usb usb1-port1: attempt power cycle [ 175.765203][ T10] usb 6-1: Cannot set autoneg [ 175.770058][ T10] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 175.781563][ T9] usb 3-1: config 0 interface 88 has no altsetting 0 [ 175.790064][ T10] usb 6-1: USB disconnect, device number 7 [ 175.800618][ T6596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2015'. [ 175.810821][ T9] usb 3-1: string descriptor 0 read error: -22 [ 175.817461][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 175.827459][ T9] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 175.838016][ T9] usb 3-1: config 0 descriptor?? [ 175.846823][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input27 [ 175.993513][ T673] udevd[673]: Error opening device "/dev/input/event3": Input/output error [ 176.002585][ T673] udevd[673]: Unable to EVIOCGABS device "/dev/input/event3" [ 176.010384][ T673] udevd[673]: Unable to EVIOCGABS device "/dev/input/event3" [ 176.104982][ T332] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 176.127504][ T332] usb 1-1: device descriptor read/8, error -71 [ 176.257490][ T332] usb 1-1: device descriptor read/8, error -71 [ 176.309860][ T6600] fuse: Bad value for 'fd' [ 176.364277][ T6602] 9pnet_fd: Insufficient options for proto=fd [ 176.381992][ T6602] rust_binder: 19: no such ref 7 [ 176.393996][ T6602] rust_binder: Failed to allocate buffer. len:16481591678634614240, is_oneway:false [ 176.394026][ T6602] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 176.407216][ T6602] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 176.463552][ T6606] rust_binder: Write failure EFAULT in pid:21 [ 176.504962][ T332] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 176.557296][ T332] usb 1-1: device descriptor read/8, error -71 [ 176.709114][ T332] usb 1-1: device descriptor read/8, error -71 [ 176.824428][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.833159][ T332] usb usb1-port1: unable to enumerate USB device [ 176.836113][ T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 176.842371][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.026020][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 177.026043][ T36] audit: type=1400 audit(2000000025.530:4026): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.075572][ T49] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 177.087106][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 177.104939][ T36] audit: type=1400 audit(2000000025.570:4027): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.110384][ T49] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 177.138275][ T36] audit: type=1400 audit(2000000025.570:4028): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.164894][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.181561][ T49] usb 6-1: config 0 descriptor?? [ 177.203766][ T36] audit: type=1400 audit(2000000025.570:4029): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.234130][ T36] audit: type=1400 audit(2000000025.580:4030): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.260174][ T36] audit: type=1400 audit(2000000025.590:4031): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.322298][ T36] audit: type=1400 audit(2000000025.710:4032): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.385351][ T36] audit: type=1400 audit(2000000025.710:4033): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.414186][ T36] audit: type=1400 audit(2000000025.710:4034): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.425402][ T6640] rust_binder: Write failure EFAULT in pid:316 [ 177.488074][ T36] audit: type=1400 audit(2000000025.710:4035): avc: denied { ioctl } for pid=6613 comm="syz.5.2021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.615779][ T49] magicmouse 0003:05AC:0269.001D: item fetching failed at offset 5/7 [ 177.642521][ T49] magicmouse 0003:05AC:0269.001D: magicmouse hid parse failed [ 177.675885][ T49] magicmouse 0003:05AC:0269.001D: probe with driver magicmouse failed with error -22 [ 177.784904][ T332] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 177.818000][ T6652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 177.824947][ T6652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 177.844430][ T6652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 177.934965][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 177.957801][ T332] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 177.971303][ T332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.985724][ T332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.991934][ T49] usb 6-1: USB disconnect, device number 8 [ 178.016490][ T332] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.038172][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.050072][ T332] usb 1-1: Product: syz [ 178.054310][ T332] usb 1-1: Manufacturer: syz [ 178.079064][ T332] usb 1-1: SerialNumber: syz [ 178.089977][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.130256][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.305474][ T6649] __vm_enough_memory: pid: 6649, comm: syz.0.2031, bytes: 18014402804453376 not enough memory for the allocation [ 178.325397][ T332] usb 1-1: 0:2 : does not exist [ 178.335444][ T332] usb 1-1: USB disconnect, device number 21 [ 178.402666][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.411332][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.501019][ T673] udevd[673]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.875458][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2041'. [ 178.934200][ T6686] input: syz1 as /devices/virtual/input/input29 [ 179.048929][ T6688] usb usb7: usbfs: process 6688 (syz.0.2043) did not claim interface 0 before use [ 179.374931][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 179.524908][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 179.533285][ T10] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.543369][ T10] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.553328][ T10] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.566405][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 179.578366][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.587752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.596914][ T10] usb 1-1: Product: syz [ 179.601196][ T10] usb 1-1: Manufacturer: syz [ 179.605875][ T10] usb 1-1: SerialNumber: syz [ 179.818489][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 180.050083][ T6727] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 180.058693][ T6727] rust_binder: Write failure EINVAL in pid:44 [ 180.375158][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 180.537702][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 180.548889][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 180.558918][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 180.568088][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.817858][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.827453][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.151746][ T6745] rust_binder: inc_ref_done called when no active inc_refs [ 181.231005][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.265677][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.302040][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.321798][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.653686][ T6762] overlayfs: failed to clone upperpath [ 181.660885][ T6762] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.669759][ T6762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.956205][ T6766] rust_binder: inc_ref_done called when no active inc_refs [ 182.003401][ T6769] binder: Unknown parameter 'posixacl' [ 182.061675][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 182.061696][ T36] audit: type=1400 audit(2000000030.560:4419): avc: denied { read } for pid=6772 comm="syz.2.2068" dev="nsfs" ino=4026532652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.122203][ T36] audit: type=1400 audit(2000000030.560:4420): avc: denied { read open } for pid=6772 comm="syz.2.2068" path="net:[4026532652]" dev="nsfs" ino=4026532652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.146765][ T36] audit: type=1400 audit(2000000030.560:4421): avc: denied { create } for pid=6772 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.166952][ T36] audit: type=1400 audit(2000000030.580:4422): avc: denied { read write } for pid=6576 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.231250][ T36] audit: type=1400 audit(2000000030.580:4423): avc: denied { read write open } for pid=6576 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.266411][ T6777] netlink: 'syz.2.2070': attribute type 3 has an invalid length. [ 182.288156][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.296344][ T10] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 182.297968][ T36] audit: type=1400 audit(2000000030.580:4424): avc: denied { ioctl } for pid=6576 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.304632][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input30 [ 182.334076][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.387341][ T6777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=6777 comm=syz.2.2070 [ 182.403039][ T36] audit: type=1400 audit(2000000030.610:4425): avc: denied { create } for pid=6774 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.445044][ T10] usb 6-1: USB disconnect, device number 9 [ 182.451064][ T36] audit: type=1400 audit(2000000030.620:4426): avc: denied { create } for pid=6774 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.471924][ T36] audit: type=1400 audit(2000000030.620:4427): avc: denied { map } for pid=6774 comm="syz.2.2069" path="socket:[32438]" dev="sockfs" ino=32438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 182.524938][ T36] audit: type=1400 audit(2000000030.620:4428): avc: denied { read append } for pid=6774 comm="syz.2.2069" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.004698][ T6798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.071598][ T6804] 8021q: VLANs not supported on ip_vti0 [ 183.097413][ T6805] fuse: Bad value for 'user_id' [ 183.102368][ T6805] fuse: Bad value for 'user_id' [ 183.683672][ T6801] overlayfs: statfs failed on './file0' [ 183.918792][ T6825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.982509][ T6826] rust_binder: inc_ref_done called when no active inc_refs [ 183.989251][ T6826] rust_binder: inc_ref_done called when no active inc_refs [ 183.999326][ T6826] rust_binder: 57: no such ref 2 [ 184.013300][ T6826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 184.853998][ T6862] rust_binder: Error while translating object. [ 184.872053][ T6862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 184.884923][ T6862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62 [ 184.956687][ T6865] FAT-fs (rnullb0): bogus number of reserved sectors [ 184.977688][ T6865] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 184.985022][ T6867] FAT-fs (rnullb0): bogus number of reserved sectors [ 184.991906][ T6867] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 185.086608][ T6877] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 185.088408][ T6878] binder: Bad value for 'stats' [ 185.101718][ T6692] usblp0:failed reading printer status (-110) [ 185.127337][ T49] usb 1-1: USB disconnect, device number 22 [ 185.130260][ T6878] cannot load conntrack support for proto=3 [ 185.135373][ T49] usblp0: removed [ 185.271406][ T6885] rust_binder: 77: no such ref 1 [ 185.524342][ T6906] 8021q: VLANs not supported on ip_vti0 [ 185.554889][ T49] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 185.594174][ T6908] FAT-fs (rnullb0): bogus number of reserved sectors [ 185.604379][ T6908] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 185.717437][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 185.741107][ T49] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.751593][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.762770][ T49] usb 1-1: config 0 descriptor?? [ 185.770681][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.864892][ T332] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 185.998922][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 186.016893][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 186.032532][ T332] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 186.044491][ T332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 186.046091][ T49] usb 1-1: USB disconnect, device number 23 [ 186.067949][ T332] usb 6-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 186.302775][ T6926] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 186.303186][ T6926] rust_binder: Write failure EINVAL in pid:98 [ 186.333735][ T6927] rust_binder: Write failure EINVAL in pid:98 [ 186.350269][ T6928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.361280][ T6926] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 186.570800][ T6933] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 186.735681][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.747334][ T332] usb 6-1: config 0 descriptor?? [ 186.813662][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.057467][ T6946] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 187.067285][ T36] kauditd_printk_skb: 626 callbacks suppressed [ 187.067304][ T36] audit: type=1400 audit(2000000035.570:5055): avc: denied { write } for pid=6945 comm="syz.4.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.095402][ T36] audit: type=1400 audit(2000000035.570:5056): avc: denied { write } for pid=6945 comm="syz.4.2121" lport=60518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.144888][ T36] audit: type=1400 audit(2000000035.570:5057): avc: denied { write } for pid=6945 comm="syz.4.2121" lport=60518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.171372][ T332] wacom 0003:056A:00DD.001E: unknown main item tag 0x0 [ 187.177835][ T36] audit: type=1400 audit(2000000035.600:5058): avc: denied { write } for pid=6945 comm="syz.4.2121" lport=60518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.209022][ T332] wacom 0003:056A:00DD.001E: unknown main item tag 0x0 [ 187.226009][ T332] wacom 0003:056A:00DD.001E: unknown main item tag 0x0 [ 187.231698][ T36] audit: type=1400 audit(2000000035.600:5059): avc: denied { read write } for pid=4922 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.234048][ T332] wacom 0003:056A:00DD.001E: unknown main item tag 0x0 [ 187.260151][ T36] audit: type=1400 audit(2000000035.600:5060): avc: denied { read write open } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.270291][ T332] wacom 0003:056A:00DD.001E: unknown main item tag 0x0 [ 187.291965][ T36] audit: type=1400 audit(2000000035.600:5061): avc: denied { ioctl } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.299059][ T332] wacom 0003:056A:00DD.001E: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 187.322228][ T36] audit: type=1400 audit(2000000035.640:5062): avc: denied { write } for pid=6947 comm="syz.0.2123" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.356704][ T36] audit: type=1400 audit(2000000035.640:5063): avc: denied { write open } for pid=6947 comm="syz.0.2123" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.368474][ T6910] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 187.380705][ T332] wacom 0003:056A:00DD.001E: hidraw0: USB HID v1.01 Device [HID 056a:00dd] on usb-dummy_hcd.5-1/input0 [ 187.402082][ T332] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00DD.001E/input/input31 [ 187.415333][ T36] audit: type=1400 audit(2000000035.650:5064): avc: denied { read write } for pid=6947 comm="syz.0.2123" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.429232][ T6910] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 187.486802][ T6910] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 187.514508][ T6910] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 187.570329][ T1876] usb 6-1: USB disconnect, device number 10 [ 188.035543][ T6962] netlink: 'syz.0.2127': attribute type 13 has an invalid length. [ 188.387221][ T6977] loop7: detected capacity change from 0 to 7 [ 188.513177][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 188.523030][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 188.854883][ T690] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.855190][ T689] Bluetooth: hci0: command 0x1003 tx timeout [ 189.044898][ T332] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 189.116115][ T6997] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 189.116145][ T6997] rust_binder: Read failure Err(EFAULT) in pid:368 [ 189.210549][ T7003] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 189.228345][ T332] usb 6-1: config index 0 descriptor too short (expected 33104, got 18) [ 189.247047][ T332] usb 6-1: config 4 has an invalid descriptor of length 57, skipping remainder of the config [ 189.270839][ T332] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 189.293268][ T332] usb 6-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=7a.5a [ 189.312042][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.331094][ T332] usb 6-1: Product: syz [ 189.339865][ T332] usb 6-1: Manufacturer: syz [ 189.354743][ T332] usb 6-1: SerialNumber: syz [ 189.429734][ T7015] tmpfs: Unknown parameter 'noOFX]rV7' [ 189.435789][ T7016] rust_binder: 7014 RLIMIT_NICE not set [ 189.436318][ T7016] rust_binder: 372: no such ref 0 [ 189.549577][ T7022] rust_binder: Error while translating object. [ 189.549643][ T7022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.577253][ T7022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 189.778842][ T332] usb 6-1: USB disconnect, device number 11 [ 190.292686][ T7051] FAT-fs (rnullb0): bogus number of reserved sectors [ 190.299725][ T7051] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 190.387263][ T7055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 190.787101][ T7076] usb usb9: usbfs: process 7076 (syz.5.2170) did not claim interface 4 before use [ 190.846780][ T7076] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 190.922184][ T7079] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 191.051039][ T7086] rust_binder: 393: no such ref 2 [ 191.073171][ T7086] rust_binder: 393: no such ref 0 [ 191.082536][ T7086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:393 [ 191.167677][ T7088] rust_binder: 395: no such ref 3 [ 191.182253][ T7088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 191.185203][ T332] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 191.353308][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.374491][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.402668][ T332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.422001][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.430546][ T332] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.435031][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.441107][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.458875][ T332] usb 6-1: config 0 descriptor?? [ 191.471497][ T7095] rust_binder: Error while translating object. [ 191.471528][ T7095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 191.477955][ T7095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:142 [ 191.634934][ T475] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 191.643437][ T7097] overlayfs: failed to clone upperpath [ 191.784897][ T475] usb 1-1: Using ep0 maxpacket: 32 [ 191.803173][ T475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.814482][ T475] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.830617][ T475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.840894][ T475] usb 1-1: config 0 descriptor?? [ 191.853576][ T475] hub 1-1:0.0: USB hub found [ 191.882949][ T332] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 191.916439][ T332] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 192.059881][ T475] hub 1-1:0.0: 1 port detected [ 192.089430][ T36] kauditd_printk_skb: 688 callbacks suppressed [ 192.089450][ T36] audit: type=1400 audit(2000000040.590:5753): avc: denied { name_bind } for pid=7117 comm="syz.4.2183" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 192.160448][ T49] usb 6-1: USB disconnect, device number 12 [ 192.166537][ T36] audit: type=1400 audit(2000000040.590:5754): avc: denied { node_bind } for pid=7117 comm="syz.4.2183" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 192.230742][ T36] audit: type=1400 audit(2000000040.620:5755): avc: denied { read write } for pid=7121 comm="syz.2.2184" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.261411][ T36] audit: type=1400 audit(2000000040.630:5756): avc: denied { read write open } for pid=7121 comm="syz.2.2184" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.324892][ T36] audit: type=1400 audit(2000000040.630:5757): avc: denied { map } for pid=7121 comm="syz.2.2184" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.397107][ T36] audit: type=1400 audit(2000000040.630:5758): avc: denied { read write } for pid=7121 comm="syz.2.2184" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.503563][ T36] audit: type=1400 audit(2000000040.630:5759): avc: denied { read write } for pid=7121 comm="syz.2.2184" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.636272][ T36] audit: type=1400 audit(2000000040.630:5760): avc: denied { read write open } for pid=7121 comm="syz.2.2184" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.720037][ T7127] /dev/rnullb0: Can't open blockdev [ 192.727605][ T36] audit: type=1400 audit(2000000040.640:5761): avc: denied { execmem } for pid=7080 comm="syz.5.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 192.839432][ T36] audit: type=1400 audit(2000000040.640:5762): avc: denied { execute } for pid=7080 comm="syz.5.2173" path="/32/cpuacct.usage_percpu" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 192.957565][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.005123][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.060242][ T475] usb 1-1: USB disconnect, device number 24 [ 193.188653][ T7131] rust_binder: Error while translating object. [ 193.188717][ T7131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 193.224964][ T7131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105 [ 193.327583][ T7131] __vm_enough_memory: pid: 7131, comm: syz.5.2186, bytes: 18014402804453376 not enough memory for the allocation [ 193.586686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.599075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.611707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.624078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.636432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.648852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.661250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.673613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.686004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.698371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 193.958057][ T7145] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.414924][ T7154] rust_binder: Write failure EFAULT in pid:111 [ 194.675096][ T7156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.740804][ T7156] rust_binder: Error while translating object. [ 194.769403][ T7159] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 194.794984][ T7156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.795027][ T7156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 194.840999][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 194.876274][ T7159] rust_binder: inc_ref_done called when no active inc_refs [ 194.876304][ T7159] rust_binder: 113: no such ref 2 [ 194.930669][ T7159] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 195.336114][ T7169] kvm: user requested TSC rate below hardware speed [ 195.467877][ T7163] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2199'. [ 195.754909][ T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 195.904883][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 195.919664][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.938821][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.960241][ T65] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 195.976292][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.989887][ T65] usb 1-1: Product: syz [ 195.998523][ T65] usb 1-1: Manufacturer: syz [ 196.021243][ T65] usb 1-1: SerialNumber: syz [ 196.043733][ T65] usb 1-1: config 0 descriptor?? [ 196.276632][ T7180] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 196.276665][ T7180] rust_binder: Error while translating object. [ 196.341429][ T7180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.372498][ T7180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 196.623563][ T7197] rust_binder: 123: no such ref 0 [ 196.654982][ T7197] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 196.679470][ T7176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.680831][ T7176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 196.688562][ T7176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:407 [ 196.712361][ T7197] rust_binder: Write failure EINVAL in pid:123 [ 196.736982][ T65] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 196.809021][ T65] asix 1-1:0.0: probe with driver asix failed with error -71 [ 196.849175][ T65] usb 1-1: USB disconnect, device number 25 [ 196.979212][ T7203] rust_binder: Error while translating object. [ 196.979244][ T7203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 197.014951][ T7203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:128 [ 197.103866][ T36] kauditd_printk_skb: 304 callbacks suppressed [ 197.103892][ T36] audit: type=1400 audit(2000000045.600:6067): avc: denied { read } for pid=7206 comm="syz.2.2211" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.253084][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.270364][ T36] audit: type=1400 audit(2000000045.600:6068): avc: denied { read open } for pid=7206 comm="syz.2.2211" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.326902][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.648181][ T36] audit: type=1400 audit(2000000045.650:6069): avc: denied { read write } for pid=6356 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.594897][ C1] net_ratelimit: 29355 callbacks suppressed [ 198.594922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 198.594966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.601013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 198.613003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.624999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 198.636978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.648983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 198.661497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.673135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 198.685187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.168630][ T36] audit: type=1400 audit(2000000045.650:6070): avc: denied { read write open } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.764862][ C1] sched: DL replenish lagged too much [ 201.808024][ T36] audit: type=1400 audit(2000000045.670:6071): avc: denied { ioctl } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.604895][ C1] net_ratelimit: 78403 callbacks suppressed [ 203.604919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 203.605161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.610979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 203.623075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.635026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 203.647038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.659015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 203.671292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.682958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 203.694970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.778699][ T36] audit: type=1400 audit(2000000045.750:6072): avc: denied { read write } for pid=7206 comm="syz.2.2211" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.648207][ T36] audit: type=1400 audit(2000000045.750:6073): avc: denied { read write open } for pid=7206 comm="syz.2.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.875065][ T36] audit: type=1400 audit(2000000045.750:6074): avc: denied { ioctl } for pid=7206 comm="syz.2.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.696433][ T36] audit: type=1400 audit(2000000045.750:6075): avc: denied { ioctl } for pid=7206 comm="syz.2.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.016769][ T36] audit: type=1400 audit(2000000045.820:6076): avc: denied { read write } for pid=4922 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.596030][ T36] audit: type=1400 audit(2000000045.820:6077): avc: denied { read write open } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.614908][ C1] net_ratelimit: 62433 callbacks suppressed [ 208.614935][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 208.621374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.627175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 208.639242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.651148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 208.663242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.675167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 208.687455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.699097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 208.711178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.624898][ C1] net_ratelimit: 87529 callbacks suppressed [ 213.624922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 213.624981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.630989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 213.643010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 213.655036][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 213.667233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.678918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 213.690973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.702894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 213.714883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.634907][ C1] net_ratelimit: 88708 callbacks suppressed [ 218.634932][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 218.634994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.641086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 218.653120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.665040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 218.677010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.689011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 218.701229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.712929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 218.725198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.368297][ T36] audit: type=1400 audit(2000000045.820:6078): avc: denied { ioctl } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.426999][ T36] audit: type=1400 audit(2000000045.830:6079): avc: denied { create } for pid=7206 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.875019][ T475] usb 3-1: USB disconnect, device number 27 [ 223.644892][ C1] net_ratelimit: 85063 callbacks suppressed [ 223.644916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 223.645133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.651054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 223.663107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.675017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 223.687028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.699025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 223.711238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.723016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 223.735023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.249730][ T36] audit: type=1400 audit(2000000045.870:6080): avc: denied { read write } for pid=6356 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.617928][ T36] audit: type=1400 audit(2000000045.870:6081): avc: denied { read write open } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.156952][ T36] audit: type=1400 audit(2000000045.870:6082): avc: denied { ioctl } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.715447][ T36] audit: type=1400 audit(2000000045.890:6083): avc: denied { ioctl } for pid=7206 comm="syz.2.2211" path="socket:[34555]" dev="sockfs" ino=34555 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.654900][ C0] net_ratelimit: 83516 callbacks suppressed [ 228.654924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.654981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 228.660990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.672944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 228.685011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.697142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 228.709350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.721009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 228.733211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.745080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 229.678340][ T36] audit: type=1400 audit(2000000045.910:6084): avc: denied { map } for pid=7206 comm="syz.2.2211" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.631009][ T36] audit: type=1400 audit(2000000045.910:6085): avc: denied { read } for pid=7206 comm="syz.2.2211" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.418349][ T36] audit: type=1400 audit(2000000045.910:6086): avc: denied { ioctl } for pid=7206 comm="syz.2.2211" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.664865][ C0] net_ratelimit: 83081 callbacks suppressed [ 233.664899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.664955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 233.670971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.682960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 233.695010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.706966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 233.719170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.730899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 233.742899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.754995][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 236.026961][ T36] audit: type=1400 audit(2000000045.910:6087): avc: denied { set_context_mgr } for pid=7206 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 238.674892][ C1] net_ratelimit: 120012 callbacks suppressed [ 238.674916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 238.675069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.681065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 238.693090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.705042][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 238.717095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.729077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 238.741274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.753063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 238.765039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.366921][ T36] audit: type=1400 audit(2000000046.270:6088): avc: denied { create } for pid=7206 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.684905][ C1] net_ratelimit: 125074 callbacks suppressed [ 243.684935][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 243.685000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.691071][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 243.703161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.715135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 243.727131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.739123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 243.751335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.763046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 243.775023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.736378][ T36] audit: type=1400 audit(2000000046.270:6089): avc: denied { connect } for pid=7206 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.694877][ C1] net_ratelimit: 122829 callbacks suppressed [ 248.694901][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 248.694959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.701019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 248.713019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.724957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 248.737044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.749015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 248.761242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.772999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 248.784998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.427136][ T36] audit: type=1400 audit(2000000046.360:6090): avc: denied { getopt } for pid=7206 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.704852][ C1] net_ratelimit: 121970 callbacks suppressed [ 253.704877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 253.704902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.711006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 253.723273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.735072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 253.747068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.758994][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 253.770963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.782950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 253.795122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.005285][ T36] audit: type=1400 audit(2000000046.380:6091): avc: denied { read } for pid=7206 comm="syz.2.2211" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.707107][ T36] audit: type=1400 audit(2000000046.380:6092): avc: denied { read open } for pid=7206 comm="syz.2.2211" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.138952][ T36] audit: type=1400 audit(2000000046.380:6093): avc: denied { ioctl } for pid=7206 comm="syz.2.2211" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.714866][ C1] net_ratelimit: 114379 callbacks suppressed [ 258.714890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 258.715011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.721018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 258.733304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.745054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 258.757455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.769481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 258.781544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.793590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 258.805743][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.087636][ T36] audit: type=1400 audit(2000000046.380:6094): avc: denied { mounton } for pid=7214 comm="syz.0.2214" path="/133" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.724839][ C1] net_ratelimit: 116326 callbacks suppressed [ 263.724862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 263.724879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.730969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 263.742967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.755153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 263.767228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.778920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 263.791088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.802848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 263.814827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.267109][ T36] audit: type=1400 audit(2000000046.380:6095): avc: denied { mount } for pid=7214 comm="syz.0.2214" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 265.597013][ T36] audit: type=1400 audit(2000000050.010:6096): avc: denied { read } for pid=7214 comm="syz.0.2214" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.136974][ T36] audit: type=1400 audit(2000000050.010:6097): avc: denied { read open } for pid=7214 comm="syz.0.2214" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.734829][ C1] net_ratelimit: 119281 callbacks suppressed [ 268.734854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 268.734901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.741061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 268.753152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.765056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 268.777062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.789023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 268.801022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.813023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 268.825246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.356708][ T36] audit: type=1400 audit(2000000050.440:6098): avc: denied { create } for pid=7214 comm="syz.0.2214" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.179661][ T36] audit: type=1400 audit(2000000050.670:6099): avc: denied { block_suspend } for pid=7218 comm="syz.5.2215" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.697731][ T36] audit: type=1400 audit(2000000050.710:6100): avc: denied { read write } for pid=7218 comm="syz.5.2215" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.744876][ C1] net_ratelimit: 121574 callbacks suppressed [ 273.744900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 273.745088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.751069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 273.763058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.774947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 273.787007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.798877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 273.810881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.822879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 273.834874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.937072][ T36] audit: type=1400 audit(2000000050.710:6101): avc: denied { read write open } for pid=7218 comm="syz.5.2215" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.607058][ T36] audit: type=1400 audit(2000000055.460:6102): avc: denied { read write } for pid=6356 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.874941][ T36] audit: type=1400 audit(2000000055.460:6103): avc: denied { read write open } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.754826][ C0] net_ratelimit: 120873 callbacks suppressed [ 278.754852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.754885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 278.760985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.773060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 278.785046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.797035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 278.809284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.820963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 278.833170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.844932][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 279.358885][ T36] audit: type=1400 audit(2000000055.460:6104): avc: denied { ioctl } for pid=6356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.526464][ T36] audit: type=1400 audit(2000000055.520:6105): avc: denied { unmount } for pid=4922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 283.764836][ C0] net_ratelimit: 120961 callbacks suppressed [ 283.764859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.764862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 283.764946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 283.771167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.782950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 283.795118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.806942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 283.818816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.830834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 283.842731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.295938][ T36] audit: type=1400 audit(2000000056.170:6106): avc: denied { read write } for pid=4922 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.065906][ T36] audit: type=1400 audit(2000000056.170:6107): avc: denied { read write open } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.774826][ C1] net_ratelimit: 124343 callbacks suppressed [ 288.774851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 288.774902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.775134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.781174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 288.793232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.805103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 288.816992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.829220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 288.841098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.853185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 293.784871][ C1] net_ratelimit: 126616 callbacks suppressed [ 293.784894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 293.784909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.785152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.791008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 293.803019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.814908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 293.826807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.838793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 293.850668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.862655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 294.058504][ T37] INFO: task syz.3.1720:5661 blocked for more than 123 seconds. [ 296.515703][ T37] Not tainted syzkaller #0 [ 296.520707][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.794861][ C1] net_ratelimit: 124102 callbacks suppressed [ 298.794886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 298.794936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.801000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 298.812994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.824906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 298.836907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.848787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 298.860854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.872829][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 298.884844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.927109][ T37] task:syz.3.1720 state:D stack:0 pid:5661 tgid:5660 ppid:292 flags:0x00004004 [ 298.937484][ T37] Call Trace: [ 298.940802][ T37] [ 298.943758][ T37] __schedule+0x1322/0x1df0 [ 298.948336][ T37] ? __sched_text_start+0x10/0x10 [ 298.953396][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 298.958917][ T37] ? mutex_unlock+0x8b/0x240 [ 298.963535][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 298.969407][ T37] schedule+0xc6/0x240 [ 298.973513][ T37] super_lock+0x150/0x300 [ 298.977900][ T37] ? user_get_super+0x350/0x350 [ 298.982788][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 298.988328][ T37] ? __kasan_check_write+0x18/0x20 [ 298.993486][ T37] iterate_supers+0x8a/0x560 [ 298.998140][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 299.003727][ T37] ksys_sync+0x95/0x160 [ 299.007957][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 299.012759][ T37] ? switch_fpu_return+0x12/0x20 [ 299.017840][ T37] __ia32_sys_sync+0x12/0x20 [ 299.022463][ T37] x64_sys_call+0x2a58/0x2ee0 [ 299.027393][ T37] do_syscall_64+0x58/0xf0 [ 299.031844][ T37] ? clear_bhb_loop+0x50/0xa0 [ 299.036579][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.042524][ T37] RIP: 0033:0x7fcc4dd8f6c9 [ 299.047048][ T37] RSP: 002b:00007fcc4ebfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 299.055536][ T37] RAX: ffffffffffffffda RBX: 00007fcc4dfe5fa0 RCX: 00007fcc4dd8f6c9 [ 299.063539][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.071567][ T37] RBP: 00007fcc4dfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 299.079586][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.087618][ T37] R13: 00007fcc4dfe6038 R14: 00007fcc4dfe5fa0 R15: 00007ffe9b687938 [ 299.095649][ T37] [ 299.636345][ T37] NMI backtrace for cpu 0 [ 299.636368][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 299.636399][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.636414][ T37] Call Trace: [ 299.636422][ T37] [ 299.636432][ T37] __dump_stack+0x21/0x30 [ 299.636468][ T37] dump_stack_lvl+0x10c/0x190 [ 299.636499][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.636533][ T37] dump_stack+0x19/0x20 [ 299.636563][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 299.636593][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 299.636622][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 299.636651][ T37] ? sched_show_task+0x379/0x560 [ 299.636681][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 299.636709][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.636739][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.636770][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 299.636801][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 299.636831][ T37] watchdog+0xd8f/0xed0 [ 299.636865][ T37] ? __cfi_watchdog+0x10/0x10 [ 299.636904][ T37] ? __kasan_check_read+0x15/0x20 [ 299.636940][ T37] ? __kthread_parkme+0x138/0x180 [ 299.636962][ T37] ? schedule+0xc6/0x240 [ 299.636994][ T37] kthread+0x2ca/0x370 [ 299.637018][ T37] ? __cfi_watchdog+0x10/0x10 [ 299.637049][ T37] ? __cfi_kthread+0x10/0x10 [ 299.637073][ T37] ret_from_fork+0x67/0xa0 [ 299.637105][ T37] ? __cfi_kthread+0x10/0x10 [ 299.637129][ T37] ret_from_fork_asm+0x1a/0x30 [ 299.637166][ T37] [ 299.637175][ T37] Sending NMI from CPU 0 to CPUs 1: [ 299.840706][ C1] NMI backtrace for cpu 1 [ 299.840723][ C1] CPU: 1 UID: 0 PID: 1876 Comm: kworker/1:5 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 299.840746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.840759][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 299.840791][ C1] RIP: 0010:find_match+0x149/0x10f0 [ 299.840819][ C1] Code: f6 83 e6 40 41 0f 94 c7 31 ff e8 72 a6 9d fc 41 84 df 74 2c e8 28 a2 9d fc eb 05 e8 21 a2 9d fc 31 c0 48 81 c4 90 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 03 a2 9d fc eb 05 [ 299.840833][ C1] RSP: 0018:ffffc90000230290 EFLAGS: 00000286 [ 299.840848][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88811d61df00 [ 299.840861][ C1] RDX: 0000000000000100 RSI: 00000000fffffffd RDI: 00000000fffffffd [ 299.840874][ C1] RBP: ffffc900002302b0 R08: ffffc90000230540 R09: ffffc90000230550 [ 299.840887][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: 0000000000000001 [ 299.840900][ C1] R13: 1ffff11021977d18 R14: 0000000000000003 R15: 00000000fffffffd [ 299.840914][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 299.840929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.840941][ C1] CR2: 00007f8d2c915000 CR3: 000000010c30e000 CR4: 00000000003526b0 [ 299.840958][ C1] Call Trace: [ 299.840964][ C1] [ 299.840973][ C1] __find_rr_leaf+0x23c/0x790 [ 299.841000][ C1] ? rt6_check_expired+0x250/0x250 [ 299.841024][ C1] ? __siphash_unaligned+0x26e/0x3c0 [ 299.841043][ C1] fib6_table_lookup+0x2c5/0x9b0 [ 299.841063][ C1] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 299.841087][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 299.841105][ C1] ? ipv6_rcv+0xed/0x220 [ 299.841132][ C1] ip6_pol_route+0x167/0x12c0 [ 299.841150][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 299.841174][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 299.841193][ C1] ? netif_receive_skb+0x161/0x7b0 [ 299.841217][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 299.841239][ C1] ? br_flood+0x67e/0x730 [ 299.841261][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 299.841286][ C1] ip6_pol_route_input+0x5a/0x80 [ 299.841305][ C1] fib6_rule_lookup+0x4cc/0x6b0 [ 299.841331][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 299.841351][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 299.841378][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 299.841399][ C1] ip6_route_input+0x59f/0x8d0 [ 299.841419][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 299.841439][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 299.841459][ C1] ? ip6_mc_input+0x4f3/0x670 [ 299.841480][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 299.841503][ C1] ip6_rcv_finish+0x15a/0x3e0 [ 299.841522][ C1] ipv6_rcv+0xed/0x220 [ 299.841540][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 299.841558][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 299.841575][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 299.841599][ C1] process_backlog+0x44b/0xae0 [ 299.841624][ C1] __napi_poll+0xd3/0x610 [ 299.841645][ C1] net_rx_action+0x584/0xce0 [ 299.841669][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 299.841691][ C1] ? sched_balance_domains+0x87a/0xa10 [ 299.841712][ C1] ? sched_balance_softirq+0xbd/0x170 [ 299.841728][ C1] handle_softirqs+0x1ab/0x630 [ 299.841745][ C1] __do_softirq+0xf/0x16 [ 299.841769][ C1] do_softirq+0xa6/0x100 [ 299.841793][ C1] [ 299.841799][ C1] [ 299.841805][ C1] ? __cfi_do_softirq+0x10/0x10 [ 299.841831][ C1] __local_bh_enable_ip+0x74/0x80 [ 299.841855][ C1] wg_timers_any_authenticated_packet_traversal+0x150/0x1b0 [ 299.841882][ C1] ? wg_timers_any_authenticated_packet_traversal+0x7f/0x1b0 [ 299.841905][ C1] ? wg_packet_handshake_receive_worker+0x5e2/0x9d0 [ 299.841931][ C1] wg_packet_handshake_receive_worker+0x6c1/0x9d0 [ 299.841958][ C1] process_scheduled_works+0x7d2/0x1020 [ 299.841989][ C1] worker_thread+0xc58/0x1250 [ 299.842008][ C1] kthread+0x2ca/0x370 [ 299.842025][ C1] ? __cfi_worker_thread+0x10/0x10 [ 299.842040][ C1] ? __cfi_kthread+0x10/0x10 [ 299.842057][ C1] ret_from_fork+0x67/0xa0 [ 299.842080][ C1] ? __cfi_kthread+0x10/0x10 [ 299.842098][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.842132][ C1] [ 299.946157][ T36] audit: type=1400 audit(2000000056.170:6108): avc: denied { ioctl } for pid=4922 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.926513][ T45] bridge_slave_1: left allmulticast mode [ 301.321507][ T45] bridge_slave_1: left promiscuous mode [ 301.505545][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.235598][ T36] audit: type=1400 audit(2000000075.810:6109): avc: denied { mounton } for pid=7225 comm="syz.5.2217" path="/43/file0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.296330][ T45] bridge_slave_0: left allmulticast mode [ 302.486931][ T45] bridge_slave_0: left promiscuous mode [ 302.575755][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.804834][ C0] net_ratelimit: 113713 callbacks suppressed [ 303.804858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.804894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 303.810964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.823026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 303.835013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 303.847006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 303.859135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 303.870971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0) [ 303.883098][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.895069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:48:c4:53:ea:a2, vlan:0)