last executing test programs: 1m14.615738093s ago: executing program 3 (id=1584): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x4, 0x5, 0x0, {0x0, 0x6}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f00000002c0)=0x7, 0x4) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x8, 0xc}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f00000043c0)={0x29, 0x3, 0x80000, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) 1m14.606207543s ago: executing program 3 (id=1585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000340)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1m14.557467184s ago: executing program 3 (id=1586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) (async) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) (async) prlimit64(0x0, 0xc, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 1m14.557206284s ago: executing program 3 (id=1587): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) inotify_add_watch(r2, 0x0, 0x2000a2c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000040, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x16, 0x4, "a6f5de1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x11, 0x8e, "45361262b686483c77ca7b2b32b55e849629026019dcd103cf8a506e7bf8821149e9e04d556269622d782abb58e5f2895aed27a9adb66890a69dd9669bf3b363971f5c2d74efc75ae346c5758af400d205af893e353c5166c2d0a270910c51be0fd28baeddb44ca7e029b8cd1b44b34f4c2465b5b0c629eab6eb4355098deb445bf57934df5612aa5a3cd4275af1"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x4, 0x8, 0x6, 0x8, 0x1, 0x4, 0x2, 0x5, 0x0, 0x5, 0x1000, 0x6}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x81}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5bd}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 1m14.081975121s ago: executing program 3 (id=1606): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:etc_mail_t:s0\x00', 0x20, 0x2) socket(0x80000000000000a, 0x2, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m13.311656654s ago: executing program 3 (id=1622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0xfffffffe}, 0xc) (async) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) (async) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r7, &(0x7f0000000000)='N', 0xfffffffffffffe28, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 58.315958982s ago: executing program 32 (id=1622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) close(r2) (async) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0xfffffffe}, 0xc) (async) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) (async) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r7, &(0x7f0000000000)='N', 0xfffffffffffffe28, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 17.965909094s ago: executing program 2 (id=2556): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000680)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000680)) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) (async) 17.913351565s ago: executing program 2 (id=2557): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lchown(&(0x7f0000003b80)='./file0\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f00000004c0)="0600", 0x2) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) prlimit64(r3, 0x8, &(0x7f0000000200)={0x400000029, 0x6}, 0x0) getpid() request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='enc=', r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1, 0x63, 0x2c}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha256-mb\x00'}}, &(0x7f0000000300)="f62172ffcdc6c8e000d2ffb69a0ffd98fb9048cbf1e42f4dff1f3f54630455509fa23f12267e571ebb3551ebd3db6eaad5ea12b1bf50cdab4c6a683fb4c67af0d56df4d704e779f6ce26b5ed37a5882be6f4015c0bdc07cac1700e3f2dc0ecbcb10d0c", &(0x7f0000000180)=""/44) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f0000000380)=0x7f, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 17.083888478s ago: executing program 2 (id=2571): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44080}, 0x200000c1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) syz_io_uring_setup(0x2374, &(0x7f00000002c0)={0x0, 0xd27d, 0x1000, 0x3, 0x2c9, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)) (async) r3 = syz_io_uring_setup(0x2374, &(0x7f00000002c0)={0x0, 0xd27d, 0x1000, 0x3, 0x2c9, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c5}, 0x8d0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000004c0)={0x6, 0x1, 0x1}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000580)={@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfff, 0x10, 0x100, 0x5, 0x20, r5}) (async) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000580)={@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfff, 0x10, 0x100, 0x5, 0x20, r5}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240408d4}, 0x40) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240408d4}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000700)={0x7, 'syz_tun\x00', {0xfff}, 0xfffe}) r6 = signalfd4(r0, &(0x7f0000000740)={[0x1]}, 0x8, 0x800) setsockopt$inet_mreqsrc(r6, 0x0, 0xb50b7c6c303432e1, &(0x7f0000000780)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast}, 0xc) (async) setsockopt$inet_mreqsrc(r6, 0x0, 0xb50b7c6c303432e1, &(0x7f0000000780)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast}, 0xc) syz_open_dev$loop(&(0x7f00000007c0), 0xfb7, 0x200400) (async) r7 = syz_open_dev$loop(&(0x7f00000007c0), 0xfb7, 0x200400) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000800)={r3, 0x5, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x1a, 0x0, "625fc6b54105c9fb6e5fa7c291e7265da009b9f212ab6041458682adb75a6d842c57db112a99936690efcff9c774843347959c55b69265e0673b115f597bf04d", "7bde65f4be94e90701ffad0dc94a58cd331ee78d3f5fbfbc6be5baea866b770f690f112c8bc914ecc9a85a6ec316c5f4789b287ff54ceb8e649fc99238df31d9", "616bc9ae745c8c075f4d0901f97acc57d56a473ce85c743f7d9db05a043f543d", [0x9, 0xf294]}}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = accept4$unix(r6, 0x0, &(0x7f0000000940), 0x80000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'ip6erspan0\x00'}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000009c0)=r6) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1d85b563}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x10) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) setsockopt$sock_timeval(r8, 0x1, 0x1, &(0x7f0000000bc0)={r10, r11/1000+10000}, 0x10) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000c00)=0x6, 0x4) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000fc0)={0x5, 0x0, [{0xf000, 0xc7, &(0x7f0000000c40)=""/199}, {0x3000, 0x7f, &(0x7f0000000d40)=""/127}, {0x8000000, 0x7a, &(0x7f0000000dc0)=""/122}, {0x10000, 0xbe, &(0x7f0000000e40)=""/190}, {0xf000, 0x8c, &(0x7f0000000f00)=""/140}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000fc0)={0x5, 0x0, [{0xf000, 0xc7, &(0x7f0000000c40)=""/199}, {0x3000, 0x7f, &(0x7f0000000d40)=""/127}, {0x8000000, 0x7a, &(0x7f0000000dc0)=""/122}, {0x10000, 0xbe, &(0x7f0000000e40)=""/190}, {0xf000, 0x8c, &(0x7f0000000f00)=""/140}]}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001080)=0x0) syz_open_procfs(r12, &(0x7f00000010c0)='net/nfsfs\x00') 17.020437189s ago: executing program 2 (id=2572): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x13, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x4, 0x0, 0xff, 0x0, 0x6, 0x3, 0x4}, {0xeeee8000, 0x2000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffcb, 0x0, 0xf0ffffffffffff, 0x40361, 0x0, 0xd01, 0x0, [0x0, 0x0, 0x1]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1ce6000019ffff5affffffffffffff02000000000000000400000000"], 0x1c}], 0x1}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x285, 0x6, 0x26, 0x100000000000009, 0x8, 0xb, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x8, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x94d8, 0x4, 0x1, 0x6, 0xe, 0xfffffffffffffffa, 0x1, 0x2000008000000}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz1\x00', {0xf8, 0x100, 0x8, 0x3}, 0x20, [0x8000003, 0x4, 0x80, 0x143b4048, 0x5, 0x7, 0xa, 0x3000000, 0xea1, 0x0, 0x589f, 0x1000, 0x1e, 0x81, 0x0, 0xffffff80, 0x1, 0x2, 0x1000, 0x3, 0x40000000, 0xfffffff9, 0x2, 0xc, 0x3, 0x394d, 0x9, 0x0, 0x5, 0x53987b9e, 0xc, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0xffffce2d, 0x2, 0x8, 0x5, 0x1004, 0x1, 0x81, 0xfffffff8, 0x4, 0x40, 0x7ff, 0x7c2c0bf, 0x5, 0x5, 0x3, 0x8001, 0x1, 0xc2000000, 0xa560, 0xfffff801, 0x8, 0xd809, 0x395, 0x9, 0x8, 0x1, 0x5], [0x76, 0x100, 0x1, 0x7, 0x0, 0x8e8, 0x5, 0xe, 0xfffffffe, 0xf, 0xb16, 0x2, 0x9061, 0x8, 0x8, 0x5, 0xb3f, 0x3, 0x7, 0x4c, 0xff, 0x4557, 0x1, 0x8, 0x7, 0x5d01, 0x5, 0x3, 0x7, 0x4, 0x5, 0x9114, 0x3, 0x7, 0xda0f, 0xac, 0x9, 0xc, 0x2, 0x400, 0x4, 0x2, 0x3, 0x8, 0xd, 0x8e6, 0x1, 0x7, 0x200, 0xd4a, 0x10, 0x8, 0xf1c, 0x8, 0x27, 0x6, 0x9, 0x5, 0x6, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x1, 0x2, 0x9, 0x872d, 0xfffffffb, 0x75cb, 0x4b, 0x1000, 0x3, 0x1, 0x0, 0x4, 0x9, 0x3a7d, 0x3, 0x1000, 0x2, 0x7, 0x0, 0xfff, 0x22, 0x6, 0x7, 0x432c, 0x20000, 0xd, 0x3, 0x1020, 0x4, 0x2, 0x9, 0x100, 0x1, 0x5, 0x8001, 0x4, 0x1, 0x7f, 0xffff2840, 0x1e0000, 0x8000, 0x80000001, 0x5, 0x3, 0x3, 0x9, 0x4, 0x7, 0x7, 0x0, 0x1, 0x2, 0xd4b, 0x2a, 0x3, 0x9, 0x9, 0x22f, 0x7, 0x80, 0x400, 0x2, 0x3, 0x5], [0xef, 0x8000000, 0xfffffffe, 0x8001, 0x4da1, 0x4, 0x1000, 0x200, 0x7, 0x80, 0x8, 0x6, 0x3, 0x80000001, 0x4, 0x0, 0x10c5, 0x324, 0x0, 0x3, 0xcf, 0x8, 0x9, 0x3, 0x40009b33, 0x1, 0x2, 0x3b, 0x2, 0x37fe, 0xff6f, 0x9, 0x0, 0xc, 0x0, 0x3, 0x8, 0x3, 0x7ffffeff, 0x2, 0xff, 0x74, 0x8, 0xc3f, 0x4, 0x7, 0x9, 0x7ff, 0x7, 0x5, 0x4, 0x5, 0xdc, 0x8, 0x7ff, 0x6, 0x5, 0x9, 0x200000, 0x93e7, 0xad7, 0x2, 0x3, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000680)={'syz1\x00', {0x3ff, 0x5, 0x0, 0x4}, 0x20, [0x8, 0x8, 0x7, 0x8e, 0x1e69, 0x3, 0x3, 0x10, 0x7f, 0x7d, 0xa, 0xffffffff, 0x7, 0x81, 0x4, 0xc, 0x9, 0x8, 0x9, 0x401, 0x3, 0x80, 0x10, 0x10000, 0x4ab, 0x200, 0x80bb, 0x3, 0x6, 0xfffffffb, 0x1002, 0x3, 0x6, 0x5, 0x20000007, 0x34, 0x7, 0x2, 0x3d4e23a4, 0x9, 0x5, 0x8, 0x9, 0x0, 0x73060f7a, 0xffffffff, 0x494f5a75, 0x2, 0x100, 0x93fc, 0x9, 0xa, 0xb, 0x7ff7ffff, 0x8, 0x2, 0x1000001, 0x20000000, 0x1, 0x2, 0x1, 0x2, 0x1, 0x8001], [0x433, 0xe, 0xfffffffe, 0x659, 0xffffffff, 0x6, 0x401, 0x5, 0x101, 0x3, 0x8, 0x8, 0x6, 0x4a9, 0x6, 0x10000, 0x7f, 0x2, 0x99d0, 0x404, 0x200, 0x1, 0xa2e, 0x9, 0xffff95a0, 0x3, 0x4, 0x4, 0x0, 0xcb6, 0x6, 0x9, 0x9, 0x9, 0x7, 0x0, 0x4, 0x29800000, 0x6, 0xa, 0x23, 0xe756, 0xffff934e, 0x6, 0xc, 0x2d, 0x7, 0x45, 0x80, 0x4, 0x80, 0xa4c, 0xffffff0e, 0x1, 0x1000, 0xff, 0x67ac, 0x171680f8, 0x3, 0x6, 0x754b, 0x9, 0xffffffff, 0x5], [0x7a9, 0xfffffffe, 0x7fffffff, 0x2430, 0x220, 0x9, 0x7, 0xc0d, 0x5, 0x2b, 0xfff, 0x2, 0x7, 0x42b2, 0x4, 0x5, 0x4c, 0x7, 0x5, 0x101, 0x6, 0x4, 0x1, 0x101, 0x9, 0x1, 0x7f, 0x1, 0x3, 0xd0, 0x0, 0xfffffffa, 0x9, 0x8, 0x100, 0x6, 0x7, 0x1004, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x8, 0x3fd, 0x8, 0x80000001, 0xe29, 0x6, 0x7, 0x7fff, 0xe0000000, 0x101, 0x3, 0x5, 0x6d4, 0xb, 0x9, 0x7, 0x9, 0xc, 0xc, 0x9, 0x4000000c], [0xfffff001, 0xc3c7, 0x3ff, 0x2, 0x2, 0x4, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0x5, 0x1, 0xe65, 0xe25, 0xffffb705, 0x8, 0x5db45c26, 0x80, 0xa14, 0x1, 0x80, 0xfbf, 0xf, 0x5, 0x4, 0x2, 0x3e5fc7b7, 0x20000002, 0x780, 0xc, 0x8, 0x9, 0x4b2, 0x101, 0x2, 0x7, 0x2, 0xa328, 0x7ff, 0x0, 0x8, 0x0, 0x80000001, 0xffffffff, 0x0, 0x8, 0x2, 0x70e8, 0x1, 0x3, 0x7, 0x2, 0x207, 0x3, 0x104, 0x0, 0x10000700, 0x2, 0x80, 0xf, 0xa]}, 0x45c) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r8, 0x10, &(0x7f0000000000)) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r9, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 16.9770856s ago: executing program 2 (id=2573): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x202, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16.881183661s ago: executing program 2 (id=2574): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet6(r1, &(0x7f0000000b00)={0xa, 0x4e21, 0xcfc, @remote, 0x53b6}, 0x1c) read$char_usb(r1, &(0x7f00000034c0)=""/243, 0xf3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000540)) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000035c0)=ANY=[@ANYBLOB="3c0000000001030000000000dbb93fd818409aa0f20000000002000000240002801400018008000100e0000001080002e28b31732b8d533cd61f2c401ed9a300e00000010c00028005000160eacb9ad1e5294bd3a23b2563fad04ed42d418c57f3c8d825462fe1519d6f33d7493eeae46269b4b4c51cb2fb30ad637010aa00025125301261aeaba2412de5a50100793c53d09d57a7d7df9fdcf300cf40e25ee1dac788e60af54ab98766b0aa6789d107b03992"], 0x3c}}, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x7f) read$FUSE(r6, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffce6) syz_clone3(&(0x7f0000003300)={0x18d410bd15c42e68, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0xd}, &(0x7f00000021c0)=""/4096, 0x1000, &(0x7f0000003380)=""/213, &(0x7f00000032c0)=[r7, r7, r7, r7, r7, r7, r7, r7, r7], 0x9, {r6}}, 0x58) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e00000010000000058000000000000000000000007000000441c7910000000020000023200070000000c00000001442c6d73e0000002"], 0xb0}, 0x408b0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x2, 0x0, 0x87, "0062ba7d820000a75e0000000000fcff00"}) r10 = syz_open_pts(r6, 0x1b1602) r11 = dup3(r10, r9, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x44) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r6) sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000003480)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)=ANY=[@ANYBLOB="19060080", @ANYRES16=r12, @ANYBLOB="20002bbd7000ffdbdf251a00000008009a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x24054004) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r5, 0xd0eb4000) 9.44323844s ago: executing program 0 (id=2600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async) fcntl$lock(r1, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x1000000020, 0x1fd}) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) close_range(r2, r2, 0x2) 9.39741307s ago: executing program 1 (id=2601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000100)={[{@xattr}]}) (async) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000180), &(0x7f0000000280)=0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a000000000000004012000000000000000000000000000100000000200002000a004e20f4fffffffe8000000000000000000000000000bb000000000d000100"], 0x6c}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x110b, 0x8000000000000}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) (async) ptrace(0x11, r6) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000180), 0x0) (async) dup3(r5, r0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000780)={'veth0_vlan\x00', 0xb901}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xa) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffc}) 9.39663132s ago: executing program 4 (id=2602): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/178, 0x230000, 0x1800, 0x268c, 0x3}, 0x20) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) lseek(r1, 0x10001, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/178, 0x230000, 0x1800, 0x268c, 0x3}, 0x20) (async) 8.11607846s ago: executing program 0 (id=2603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0}) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bind$802154_dgram(r8, &(0x7f00000000c0)={0x24, @short={0x2, 0x1}}, 0x14) splice(r2, 0x0, r4, 0x0, 0x100000004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) close(r9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$UHID_INPUT2(r10, &(0x7f0000000440), 0x6) add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 8.115007851s ago: executing program 1 (id=2604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454da, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000080)={0x5, 0xe, 0xc, 0xffffffffffff1fec, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100b}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x1a}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 8.114634511s ago: executing program 4 (id=2605): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) mknod$loop(0x0, 0xfff, 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "a7825f6e6b7d76fec3773008cc46553d9899dbf2128554440d16350f3283c18d72949756ab0ac0b8a390adfcdfff069237486a53dff36ff1bbacf1d78d13a2ce54157f29a118716bda107862e14805fd5e8450327d00c9580b3c"}, 0x6a) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) (async) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, {0x1, 0xc, 0x5, 0x3c, "83d7892e116e13c080911d57515b2231cf6f625716868a7f63138c2d1758c6dde2a079ccab1bdbf11f572e07e1793eeb8615a812c5fa51cf504f5819"}}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0xf7f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r4, 0x9, 0x6, 0xe) close_range(r4, r3, 0x0) 5.195521887s ago: executing program 0 (id=2606): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) (async) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000080), 0x800) (async) pipe2$9p(&(0x7f0000000080), 0x800) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async) setreuid(0x0, r5) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.193134837s ago: executing program 1 (id=2607): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) inotify_init1(0x0) (async) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) (async) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async) 5.192905997s ago: executing program 4 (id=2608): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@max={'max', 0x3d, 0x7fffffff}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x33) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x5, 0x4, 0x8, 0x39, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x0, 0xeeeb, {0x6, 0x18, 0x2, 0x8, 0x0, 0x4, 0x0, @in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_key={0x1e, 0x8, 0x730, 0x0, "6840e0ad9509f21ca8cf0aebcececeb5a8e17a5837819afb79c1c47ff61ff1b7a71d8b88814ca29db2788a3c42c78ec18b7de6ccffa33103540e80048ba719b262dba7acb512374944ad0c8517db33ca4edfdbeecc3fec2ec889eda31f7d535a5858293232bb43f7748ab92500d5c527d044b6db68b732777fdd950a33a3bba3179e6a5048a629710f4239bb6209f25e995b5b5d4717e58c66d1e54e1162bb348051cdb80234ce314d3fa15a88037ed1c390e6a66c6d93c3fa5150d369180b55c58211337baf26f2e8181b4b7ff95d10105529c6fe93e2b1672cc7e67df791b14b22ab381d49"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x0, @remote, 0x4}, @in6={0xa, 0x4e24, 0xb8, @rand_addr=' \x01\x00', 0x7e54}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbb, 0xffff, {0x6, 0x1, 0x7, 0x40, 0x0, 0x0, 0x0, @in=@broadcast, @in=@loopback}}]}, 0x1c8}}, 0x80) 3.545136763s ago: executing program 0 (id=2609): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ftruncate(r0, 0x1) (async) ftruncate(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) r2 = dup2(r0, r1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0x3, r3, 0x2007) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x248800, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x76, 0x6, 0x0, "22b7cf4a3160e149ec3b1fdd3b62b00d", "9ef54310f1ca7ba990b56422ed31b281a67e46a55d286f7bef1a3510050408adf05037023bc7ed7e98662f622326428b651274eb24ef550e916e90a370592ec25616c84d83cc78480e9b07323c748bba012d13ff515f93d4676c147b8cfe5da4d8"}, 0x76, 0x2) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x76, 0x6, 0x0, "22b7cf4a3160e149ec3b1fdd3b62b00d", "9ef54310f1ca7ba990b56422ed31b281a67e46a55d286f7bef1a3510050408adf05037023bc7ed7e98662f622326428b651274eb24ef550e916e90a370592ec25616c84d83cc78480e9b07323c748bba012d13ff515f93d4676c147b8cfe5da4d8"}, 0x76, 0x2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) (async) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x200043, 0x0) writev(r5, &(0x7f0000000340), 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000380)) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000380)) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{r0}, "be79e47b206f64d96c6eb68511da2d903da615c2420e9c026a99dd31f5d91129cfb0080b952f17c4f085a2f832deee22db94390f513685124ea01a890f0b80e522eb99cf5a91d47125113985cd236e38e61781bca11f9b263d09744be249d714cfdfb13df7b8573b9aff03feea6db0d03338dc07eb0bbef1d86c95180dc02fbec2f0eb692bca30b79499c35d8b44bf65399a233a62ff6e75fc5cf6b70a3e801ed0bd49d47c07eae1bda06e372eb0d829dcb9a6bea314ad5cbe80ea64dc391b73d72f5c52dcbc3bd536d40f7dd737a4eace00c7328b5dd2e366c5ee8794fb4826fa36941359311793c9fe5c5c7b9feac3051d4a3d64de2cd26e75f11746b4e84d3746e014ea092e64d6acf6387560918ec3b5d4ba0544fadb1ca226ad9131b4f5bce422931065cec835510cffaf45034e2ff411e1c9d1ff5728940d811ccb35dc0b9868d98f2ec1f09df70b0e1de1dd6dda5aae20eedcb62f23e687156eaeb79a48a7822c5103f7e698ac972f4986b253291e5d9bdb52b5337293be33779f33069306649eada124852cb8a78b84b7486a28132b5d73ff5ae343a85844bfaefc8eb06afa04834e3a8e5238bfa7c43ca01f1314cd3b9ef8b07b9622c35c68e1317fa8235f03e713909d77f491ef68e5e60cc30e31981aca3bd33c663732a31ac309fc42ebeb22e16c6352f6695fe1c3be9e3cc38317e0d27a262fd13198d10759ebf0191c9c9df8b3943e82f17e16a458c066a12c57043c66b7207ce246f5686f903174bb0dd55a8457ad05e4316b3bef7f9a0894ebd6f26293e183f3c289731d247d18a16340dab1cf79ec2b74bc72835b7422fb27618ff0db7e14f22ccf504f9be6bed6ce9053b5229dda6c98f09c3ef4405e69c43aed05627f76de8c095bb08203322af3cbf316a6b9148bf01165c20e9acd15b5d533b473254642b697059c6a56c1e286ee47717ff47c2d26682de7e2a631269c241f747798c783a1f19b516ffec451c5f3f6334b7a9a20aeca19b165b7852a4b0ea60468090c0c9faf98a3a9fcaf785c624b81cf6dffc3c377637ffca31f7c4eea905768c049ad749d61e18e5b8697ff1fcab338c79e085f48a93035a596d8bfb14a54721528e7ceb7321730efc2f408143f129d8c2ffaba7d99533d90f8a6476ba83eea1c9c8d792cb461eab52e1cee1cee862c913de06f6173362342c85606426dac1f456b037128a4c0baa15437e5318ff4c688754d678c61de1350bb79dc128a2ed2c4c487fdcaa491fbd963f2792a08b53bb38c758dd20caadf771414f4c4cb4b3f3ac695a7bb4742cda703a6a5e49624516a31555f98747276c404e2d163a47794657c929cd41fc83089285d789f1c050d242ff7cd28a4ee7a8e5c602d17a829a5de39cd974efd20456b1b23d8ed332c3121b0979156f802ccbc280cec5cbc2ec577c543827173f230679d24009c251faaa17ff071b03d81f5a229c136f8cf464a5a8bfa71407928d958059ac0d341e7cb66a61750b39d3eda3f215a0ed34f134e03c3629dd441a3507f7ce3c828d70b90e085fb6f3ceb529eae3946fcc09714b6fec3d6b176bb5f273c5e64f3fef501eaa236e91a168165265cceac3c21984714436abb42d0fbf10f870bc84f3696e1dcd7a9f5f338ba232b046e4ec86c8d9c97bea64eff00ef3128f7187855ce769ac42b653b521a3ea2b6f0a22b0735d471a2665c5d25afe81058359bd2722419c7146ed11482381313098ef3ed9765a57e858303bb0029d826f2adb84f2c212d4ee3ba6929defd100cbb1281d1f80ba1a6527863672f96f262598e9eaffb34cd3b2242a5ebabb0585598618e394920119db7712421e20d01ac7fbaf4eeb42c2b1bc0e47a39c48bf2dfdf5e8250a867d7aaf1d77245c7e857463b89b77ebd59551f804ec686d901543e4670fccace587f40cbda8ef999d11e7aae24453965c774cfdc5406221f5aa7f005be151e153e536817128a04a04c2db155e950d7c17c3435d3443d2539dc243981082d5233f77481fe78652222a79aa4d95a215c6bb7f2b92ed49e15b073371273f04e1fbac27a95e02f2fd764f7daf9440b28875d97299bfa17b3c4ea868efb6114af77e5fc53eb8bd9f6cede27c90fed6c816d17a01be03212f9908d0cd3b79d07c1ac14f76c6d89aa5011e5263fddb3bfb827b58e30f31084cdc300a40869275d706f12a0ab62a19fd441c0cb7988dec1be06d966251ec2e668f24986fb7c3bdb1b22055d56d1f9f9b11288c2ab374afb815a3ddc9308cba26f049bbfeb23026395a4da79871a96459249f84df384a5e495fd67f47829e14bca00aad652141dd7e67c31350dbe2a674f7863998380490a58d5f156261ecebd2adab83d8a07f176445faa118f823996a7dbf97a7f75b8fdecf57b0a0305628474d45f0dfa385213a01d1d02cca8b8f1ab508c6bd35f4fd155421db0c46438161849ede55c015512b765a9f5de3ede65d3f694e6789e836cdcffad7cde2fc334ceea07984bf5135bbb4ad9a43db29fd861f9917d3efcafb67f167b8a923099eee5a22b24c8f6ce56eac05c8affd2596de1f373e8b4619fc230e2942b67c0d172b3577ad4df8217d1af556c7ee5aba2c5a2681b22aded29f42b474333ac398b6323900f98cf674acccd7966df82e5802f0a9f9a8e2244b1a11391d8a8b5aa5c3c303dfa50a28ce5341edf1d78922f9b056dad0dac83d1ce11c59ba85d50cea2a5a11403567863decc5b013cc90117f64103f1c30f84c691a8f501b8ff300fd0ff1d81dc4eb8c6e5b5c8bb4efb4acedff07d0da57e87a85d984c05e591d2a8fdbf14caab335cd81d64f06a807118db77c21bb9961a97b2eaa5e979e1de2bb1831b8a0cd2b91ff9a6b1bf0ff722fddca82857f191a13d244f34b82701cc5e6b873eee116cc890b1ecfdd63ad9f5207260c8c54999061d0d01f6de47578625f9ea0c31cc7a01e315754f3916dee717f299c841927e44e3ccef983ec6f6875f17bd9b562f75eeda4bf5eba1403eafa035e3db7509b64e76822603f3830796d293694ef20a43a3f749a221102531830b5649307ef10973d9814da43bf8454397551603f8b7330829beadea34cbf8fe2e49c754b729d6af8ec35f5f2799ddcfd2ccba66459eb1ae338729274cd07b4019c755624915ced0d35eaa7bb22fafc7252c1aaaf028e4f892a58043147e3af250fc104d3777632eb4a6e37639e1c1a690e799a29dd3f6202288292f05948a716064482bf78486512ed8f792a73b1afa2760601dfdb7fe8bda9038f052d629cd74175c328e7a7d4027df83413ff4eb9d5958887812b22ff6077320b95b883d35c5045ebd03c6b2f29f6782524ee792bd16da2768b2482bc93af728aae2186b3339fef01e94e8adb4ea890274021ccad0df3a24c97ea02d7f4445d911c34f0d07692b004b4165f2f805970cd203a5519843dcc9fd87f8c5e8f5f152fcfaa7762bee391bb86c13d9e1f652b3d93177ffa538baadebe4c6c2a616d88f2cd98e7860b553fbc406e02dd3f3e4283cb8257830eb760486a04366715cb892c95acfa742f6c0328757fed567c961b646debddb8ac1f2a2b1613bcedb9192733f7876aac2be86289c9361e27be6b4311e30be93bb81316465acd4d23e17148dbf4df63665c90651de2aa2358634372984f53767fc7672d671fd39adda19454474acc0650379d11ba331a8cdc6a8f21909323d6668e74920e9c9d57fd2eb4618426245099099bf027f5943ea69ee892ce0d2e4e4ca9fc13cde2f01b03d65d787d8aedb11ea423f02ea1217a74b8d453bb7581ad6330154383118bb67d60e7be646e9e28c688bdda40a90063da8b4e58a91c3f02ed643abd571e8e202b32ceb3e54197026a0db1b9622f49b1539283ddb82b0e0244bf31fa1eece4983241c95063962e9a8838735a78277a9b73ff2aa5ccdc1a0123f970cc42a3e8b07fe26774beb12d7bc0ad4894759da38ea5c9ff0f29ad956467c8f79ed6d3a4410150210db7eeeacfead83d693ad7a7ba4a59cc2903feffdbd5b91e3b042070e9bc72bb57b3d03302ab8f986bf0de860686181fcbc7e556d67f5ea1273b97628c9ef4fd1211e9dbdaec7cc3074176d5026aeaae3d8bf7d7c4030f0fadcff3657cfc5f926797eb6fbb259e1fbf3cb58ad41d81de919c7cc99796b43cbb8159c420dafbeadff973f96509b3760113bf8cbad073d90cd352e7b9fa342b2455653bbcf779fdd906daa2f2368d433c969599596ec3d2e604071e44006daffe414c3221b597e024e9fd2bee88e77f36be354c14189bc29680adeb482ec6050332f7b3d92ac3145a7567438cc0079b2c4313d186cfe51d9517c62117df4c481742b1f9dde01352e1dcc2852b6fccf8b3df34d671703fa2a4d94a367dcea23875d34f1e0ed015e2f8bea0f973fb31cc46b0740dc766529e2fc5afbdebbecaa9b372148b73cfaf4f43c35f40030257c13ae071a59a3b0a481ef52dc317930f8309621eb3f8e3ec238a326b5b4e2093641d806a26cde04fd22aa6fb61ef828cbb76cf10405875b1e625dc587319df33d5e6feabe6a09b6a1d8b732d4a6fe38e45749db11779d994d55d32f7b370b396245319e9a3e24bd01ccbd62518ef9c22a1111f96b0ad3fcc4c5060f1c82cf8346dde9f72b6a6da89fbab9a7baa8f1e9e2af25839fbb974f04a27051ed6b1c0dc9055bc335b8e54792bbd76b47a30e0fac4e23ac133fcc98e98f2e6aec88b158105aa369c734d6073f11b1cdac4d9daa1b717a0c3dd18c34990063b07e4ceb6420cb09d4dea820dfabbbfc4d8b22d6d6c0e0eea99247da9cdc74cd0e32b7e98f75f2f412593313dbebe78e158b3b7dc09e6a80e94c2a6fa5c17fffdefedbdefc078cde119c90e52b0053789224721074ece683e0153d340ab97860aea0e1d6f1ae8bc555526d670857dbe0b333ee278805b117e613875a5888c3f655ef836dca69596fb62b3726487d261551acbb68fb333e4468f669041ee37b4a745e03e7dbbe1edc6aa6ade3f0e6dd8cd3a996ee124ffff2863939192c569e51f93d0b442849f4eb1d4f4dc2d4e0d2d89ecd8d0e5fbf0e5caf7f053085242228819a6b0ce34275b77d42a92c0ac74ad09f4e2d8f8b58f56e668be38e55098db0838b95db149e8755cecd7e5a485e010b426400384bb453fa8511705551255312718557234f8885112bc2fe452b762df02f1fafacae11ea1d14af3835480a08b3b76742374c4bdc5dce51642e69d00f14a345dbc5028464c1d0f28991435a8c3d872963262c3857eec3bc8ca25dedb5d35b8c5bce818de6ac0e0d8e675cfd9410d5b36414a49bb4b8323fb738fed97815d28669b365fbff7a5af6ba76e980214dca058fc49f3d0c45e7d4d46d01408eea0192562bb2932b0fe1702e08025243a3130546892c71bee9b0f042efba050ed0269f3c43288093cffc95ede70f29b40253d5d8c670a4f1acf6eea3c23151e2847a0f942e36f5546f238815a5f1cfce59ec221db1d56841ed9ad1f98b2e0fc3356a2c7d7ebec4c30bf48964ce5febce53f8ad810d02511017303df7b8e70dfcbe59159467cf9dac31256b8e972fbba598ddb8d107bc08b553e549863f745abbd6600405ed53bec5e89b9fde99c76a34bf92ef313fe6ce8e399f7813693dff57d9c9a9003ae60d2601800b97297fd1bac3051376eb437381f80541206a52438ba99c103024b30e1c9d045cae5df97ed95613ad6566bbf2da1017eadce5773cf8b3713d1503b185c0ed5b2408df277aa03c8be36947da3e5881"}) r6 = dup3(r4, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000029c0)={0x0, 0x0, 0x0}, &(0x7f0000002a00)=0xc) getresgid(&(0x7f0000002a40)=0x0, &(0x7f0000002a80), &(0x7f0000002ac0)) sendmsg$netlink(r4, &(0x7f0000002b80)={&(0x7f00000013c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc, &(0x7f0000002980)=[{&(0x7f0000001400)={0x1cc, 0x15, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x1b9, 0x5c, 0x0, 0x1, [@nested={0x4, 0x113}, @generic="3000d45bc826d3ea26e2cd61bc727570a6", @generic="e15a414c38af32c36c2085bbe0cc10adbf96356d7ddc0a367d58c52278a945552a74ce97985e798b45e70a475d60b2771cdec8d8db49010a3f62f5e01a8bda1393b61afa27f7c975762492287df439c9134b10ce658e9011c95f21cd4fc36b1f52c37f50c39fadc2eae3b4bf24fc2d9196a83e7669755bf64211df487d708f6ceaef698a182d09927c9cee7368ea1fb3aa02a17c2040037980ddd563423c097484a9e7c765ccdc4dfcc9e6b1ead5c0ea", @generic="b63335f4ed09aa3b16d16b4395bbe4b3704975ef93ceea295d7202abfc4a41b5aba4b68583090a3ed4dd1107f4d02e77cef30235979ee938aaa9031963b42e45d86d59cf726fa7490c3da2bfbe0bb969c3a52bf09e875cafb999265c82ac7648285c6263341742f94c2c84bebda4ae3af89fcfbf8eb08dedf3586dfeb578b2897489682dd3776805bc1dc6a29f12edd85406eb0c37756be0749ede4ee6081d1ae85a12c61d6d24a59f2ace0451f95043c8b6728b4e6bdef4889ced709d44be52177f7e45459fa3b5bc7c2db28176e02e7debc33031574717cc9c3c3578078acd02528262c8246ccd2e59367859522316"]}]}, 0x1cc}, {&(0x7f0000001600)={0xc8, 0x36, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x51, 0x0, 0x0, @u32=0x9}, @nested={0x10, 0xe1, 0x0, 0x1, [@nested={0x4, 0x9b}, @nested={0x4, 0x12c}, @nested={0x4, 0x17}]}, @typed={0x8, 0x13, 0x0, 0x0, @uid=r3}, @typed={0x96, 0xf5, 0x0, 0x0, @binary="a168e32681cd46db6e186005a0fc9e4b6b15712e845de0ad3fbdcb481e900058c3ced6fa7a36bcf2216ac5e5d7fe36d34cc9aaebdb863d518e30414a6a53978cd6333df3e0856c3b7bc4e72fbec0a5c0a808a630006c32e2429a121356eb76f90a8b2daaeb121c2ea4ce5f3fb80ac7edce70944c273157764fc92e2184f4f91bf7d8edb6944a2293008ba563f27b99493161"}]}, 0xc8}, {&(0x7f0000001700)={0x10, 0x33, 0x400, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f0000001740)={0x121c, 0x19, 0x600, 0x70bd25, 0x25dfdbfc, "", [@generic="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", @generic="36cd8938ad213c1cf18dd87c53f750e8f0d31f4a318a09145a311f8a3ede3a0d8aa15a4ec3d3f8aa148bf79dd1a14cbaf590b731bfc46b7043f9603035e68d7eb86c960e30d95c0413b59b181393c4edf45a215ae2750f4f29d356830103a876479a0d3de98805a2d7deb1bdcce2c8bed6bf703417e0671880de31b97559d0863b1aa0524e350bb2849619bc5416fbc76c0cb5dc6cd41b376619b0bfeb09618624587aa91fb1093dbf52911d5f8b9e71b0ddd1488b05b3", @generic="51693d2663d3943fc9d52d3753861380cd1aae3da7c8448c2767e37650f373eabbcf828f22d863cd2188eb30505d9d9557ec389bd51f093f4cda9de4d7f4eaaee82b925f600b85aff96c296f0943f70cc4c58e5a4493a1d00f07bb5540b7a85298236d03c06ae6be437346e0744d9d7f3c2a2ede41743112fc54ff20c1eec423d016426e1e65fa230937815aaac4110bff113c19c0a78ce0559687450185ff0dd792247e77bb50bb983658cb3091947af1c73440dfc25f74d2df3fa6a5b95c50ba26b574e482a42b583fc1775b9ec7256085a262d20f8cac65197667e72a0db959f22f30d404c00197022055dbea309a2e", @generic="0698b1476d707313864a48319de946189df9a623647c9213637d33f9c97fbe49289e4de6da40246c48dab7fc06a8d26f20db12b81a8833f823ab45d6b034b4cb253b79f4b8a4bdb07209f86501e47fb259ef633bacf43b47cc0979c619998a0fbe39c7c6"]}, 0x121c}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r3, r9}}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r2, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x78, 0x8800}, 0x8040000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000002c00)={&(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xffffffff}) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000002c00)={&(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xffffffff}) getsockname$packet(r4, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002c80)=0x14) (async) getsockname$packet(r4, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002c80)=0x14) syz_clone(0x40011000, &(0x7f0000002cc0)="29f9ef6acb0fd774b817577c5cfa2ce45b64b23ed88ed064b9ee3828752f1ecc71d0b95bbfcd368de7c894875d4f308ac5f6959b3d15514a93f49ed756c6ee325c8a8360701e2409cd358337faef8262faca3057bfede25378909b19fb", 0x5d, &(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)="74e6be27e822af5dd7a2b981ca8654603640d8aed7347ef124040a7fe56e0c2c10f241bf20180a5c9d3ef9970efe07a83ce37f0919fa884155c8e0bd3cd4265ba029340f5072c7851dd558f87c0a45aafbf82f4adf4e26d2e34caa36af7d0affdd330fe7e3807b600ec3b6742615dc156a30fae66729fd1c92df73adf2f8aa973991af2cd76d6bd2b942dcf4586c07b73cf6ecfdaf6d85f718b445a8c238") mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) getgroups(0x2, &(0x7f0000002e80)=[r8, r9]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002ec0), &(0x7f0000002f00)=0xc) syz_open_dev$MSR(&(0x7f0000002f40), 0x3, 0x0) (async) syz_open_dev$MSR(&(0x7f0000002f40), 0x3, 0x0) read$msr(r2, &(0x7f0000002f80)=""/146, 0x92) r10 = epoll_create1(0x80000) accept4$nfc_llcp(r2, &(0x7f0000003040), &(0x7f00000030c0)=0x60, 0x800) (async) r11 = accept4$nfc_llcp(r2, &(0x7f0000003040), &(0x7f00000030c0)=0x60, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000003100)={r11, 0xfffffffffffffffe, 0x0, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000003100)={r11, 0xfffffffffffffffe, 0x0, 0x5}) 3.544550733s ago: executing program 1 (id=2610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000001800000002"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) r4 = socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r6, &(0x7f0000000740), 0xff67) sendfile(r5, r6, &(0x7f0000000000), 0xfffb) fcntl$addseals(r6, 0x409, 0x8) lseek(r6, 0x100000, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x4a, 0x0, 0x101}}) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201410134004420240400000010000904b8070096d1ca00581e93e1776bf73e8e8722dc2330cd3e58f10cde2007740d7b53ff6dae70ff25c26ee4f97770a94998083c80ad8deda5493525fa6feb54729f3436f77e2ab7d1a3e7c939547b9ae466a3bb8e6ef5f0d4118c60ce33ed57de275259548e12a0e57923c468672589a3ad0b09cc7dffadd10d1865f904c50a6ee5e30c37d75d7b6c8b78ca30ebe62cb06c16f7"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.543214323s ago: executing program 4 (id=2611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x1a, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) close(r2) setresuid(0xee00, 0xee00, 0x0) r3 = getpid() prlimit64(r3, 0x1, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0xc800) timer_create(0x0, &(0x7f0000000180)={0x0, 0x32, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(r0, r0, 0x0, 0x7ffff000) 1.86536082s ago: executing program 0 (id=2612): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setrlimit(0x4, &(0x7f0000000040)={0x8, 0x5}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) getrlimit(0x1, &(0x7f0000000080)) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)={0x6}) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0xbbe61824c7c87825, 0x0) getrlimit(0xb, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000180)={0x3, 0x0, [{0x1, 0x1, 0x1, 0x0, @irqchip={0x8, 0x79e}}, {0xfffffffe, 0x5, 0x1, 0x0, @irqchip={0xc3c}}, {0xfffffffe, 0x4, 0x1, 0x0, @sint={0x80, 0x5}}]}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x7, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0x2931, &(0x7f0000000300)={0x0, 0x344e, 0x10, 0x0, 0x120, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x4000014) sendto$inet(r3, &(0x7f0000000580)="88a98fa66d93d1de3080a1208e4a76d1577f33f3858beec2f17423aaec9ae3204f397a50fc555350b2f619ee2aaa8e5d6035e1b55eeb61309e24d2", 0x3b, 0x8024, 0x0, 0x0) getrlimit(0xd, &(0x7f00000005c0)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000600)={0x3, 0x0, [{0x933, 0x0, 0xfffffffffffff801}, {0xa87, 0x0, 0x5}, {0x976, 0x0, 0x80}]}) r5 = openat$cgroup_procs(r3, &(0x7f0000000640)='cgroup.threads\x00', 0x2, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) chdir(&(0x7f00000006c0)='./file0\x00') close(r5) chdir(&(0x7f0000000700)='./file0\x00') ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 1.86244928s ago: executing program 1 (id=2613): setregid(0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r7, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf250d0000000c000180080003000500000060000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002006e657464657673696d3000000000000008000300040000003c000180140002006c6f00000000000000000000000000001400020076657468305f746f5f62617461647600080003000200000008000100", @ANYRES32=r10, @ANYBLOB="1400018008000300000000000800030000000000040001803c00018014000200726f7365300000000000000000000000140002006e696376663000000000000000000000080003000300000008000300020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) (async) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.86001773s ago: executing program 4 (id=2614): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xfffffffffffffffb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1.3993ms ago: executing program 0 (id=2615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') 776.14µs ago: executing program 1 (id=2616): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/91, 0x5b, 0x3, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x30}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2617): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x2}}, 0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82105182}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0xb, 0xa, 0x401, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0xa}, [@typed={0x14, 0xad, 0x0, 0x0, @ipv6=@local}, @nested={0x24, 0x89, 0x0, 0x1, [@typed={0xc, 0x44, 0x0, 0x0, @u64=0x8000000000000001}, @typed={0x14, 0xba, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @generic="c36c46ce16d1ec48dcf44ea3397972319bd904fc64ecc2f8b75a250e5b942c4d305b3325774bc2d2181db2f89f7986362b956050ff1b221a6e86151b9e4cdcc8d6e88cc4860be893182d7d7802fe2f16009aef6093d9e1a09a4c1f773d834073cb79266d0f70ca2e37010d"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x80}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x84) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000003c0)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000380)=[0x0]}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000400)={0x80}) syz_usb_connect$uac1(0x2, 0xca, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x4, 0x80, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x2, 0xcf, 0x7, 0x0, 0xf5}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0x2, "243da957"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0x4, 0xa], 0x8}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x7ff, 0x0, "460d9fe278"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x8, 0x22, "c0a23005"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x9, "b8d2a2", ';'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x5, 0x5, {0x7, 0x25, 0x1, 0x2, 0x2, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0xf}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x8, "67bd9b", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x7, 0x6, {0x7, 0x25, 0x1, 0x1, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x7, 0x3, 0x0, 0xff, 0x8}, 0x19, &(0x7f0000000600)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "a0888590958d56d8a8f515dbd921dffb"}]}, 0x8, [{0x9b, &(0x7f0000000640)=@string={0x9b, 0x3, "a769f0451821543bdd92128dfe7dad288f3622d40ffa2047dbdd3aa99217d380decb97aa220f3c57482171f15336b61ed1551ab8baabf192b918d37ae89d09236ac4a3dedc06aef413c2f66601b8bdb7f8ae8cbe323194fbe571270e8e17a52bcfaab357cd2530b3597c2e877348f32a1a47ec57d0c564d5aa567bc45145d1945cc0190583b98a75e02ffc71a3fc34d06a2bfaab9d47170418"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x423}}, {0xcf, &(0x7f00000007c0)=@string={0xcf, 0x3, "b8bbd23d443915ed59c4348d18a1e581e4e015bc6fb07fca109828d7534a8d4f06a303372f0b888372d4be0cc1313419c8bcf3384cb8b15a3fbc5cb64abbd30da2eda203f2e4e4782f197f2eeb64e972898f481ef000c38406890aeea18641ccb337a467cc07150c601a3b6adb29d41289cceea200abb4c08b65be0c6cba2604cc3d08fffc9d39035de1466dad00ebf37aa7f3b80d9b1721865e5ee119ca163b12a2887a95a876ce808a2db09ff9975258f6de5ae7f2d3c500e496fae83c0f4bd926e6c9222264a50bf3599a24"}}, {0x10, &(0x7f00000008c0)=@string={0x10, 0x3, "edb151ce5320e2b661e01309e67e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x410}}, {0xc2, &(0x7f0000000940)=@string={0xc2, 0x3, "30c4cdbeaf47217bc6d2ef6f85c826496cf6c721da1509f49e20f82ef84e217b18e6a2af0f1cbd4fa3f26d3d0d1ae21cf927c7d21d870a52bb674b355baa752bd59116be5a87bfcdf14db5e9bb7ff6a969885fc04b5bf6e888aeff743d11584fbe96282886a0c68285903b8df634213b053a06e0ecc7f07f17f86047673fe7c41c39a1d779d87dcd7c40ef1ab835c1457745e5701fc1c279233736b77b63653bcbca4c4519bd694c4879cafe6accfe428e42cc229d0994e7bdf61df32812fe28"}}]}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) r6 = socket$inet(0x2, 0x1, 0xd5) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ftruncate(r0, 0x7) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000c40)={'veth0_virt_wifi\x00', &(0x7f0000000bc0)=@ethtool_test={0x1a, 0xfff, 0x82, 0xa, [0x9, 0x64, 0x1, 0x101, 0x2, 0x1, 0x5, 0x9, 0x2, 0x3]}}) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000d80)=0xc) write$P9_RSTATu(r1, &(0x7f0000000dc0)={0x6b, 0x7d, 0x2, {{0x0, 0x55, 0xce, 0x13, {0x1, 0x3, 0x8}, 0x800000, 0x2, 0x8, 0x8, 0x10, 'veth0_virt_wifi\x00', 0x10, 'veth0_virt_wifi\x00', 0x1, '\x00', 0x1, '/'}, 0x1, '[', 0xffffffffffffffff, r7, r8}}, 0x6b) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000e40)=0x1000840, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000e80)={0x4, 0x5}, 0x4) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000ec0)={0x9, 0x6}) read$FUSE(r9, &(0x7f0000000f00)={0x2020}, 0x2020) r10 = openat$cgroup_int(r9, &(0x7f0000002f40)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002f80)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000002fc0)={{r6}, r11, 0x14, @unused=[0xe7bd, 0x7fffffff, 0x22, 0x5], @subvolid=0x5}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f0000004000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 22.502151][ T36] audit: type=1400 audit(1750825299.870:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.503376][ T281] cgroup: Unknown subsys name 'net' [ 22.524921][ T36] audit: type=1400 audit(1750825299.870:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.552182][ T36] audit: type=1400 audit(1750825299.890:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.552337][ T281] cgroup: Unknown subsys name 'devices' [ 22.693729][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.699333][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.850641][ T36] audit: type=1400 audit(1750825300.210:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.873816][ T36] audit: type=1400 audit(1750825300.210:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.898574][ T36] audit: type=1400 audit(1750825300.210:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.907011][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.930457][ T36] audit: type=1400 audit(1750825300.290:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.955931][ T36] audit: type=1400 audit(1750825300.290:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.985527][ T36] audit: type=1400 audit(1750825300.350:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.011108][ T36] audit: type=1400 audit(1750825300.350:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.011292][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.730795][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.739096][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.746248][ T288] bridge_slave_0: entered allmulticast mode [ 23.752651][ T288] bridge_slave_0: entered promiscuous mode [ 23.779863][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.786926][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.794011][ T288] bridge_slave_1: entered allmulticast mode [ 23.800154][ T288] bridge_slave_1: entered promiscuous mode [ 23.898380][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.905455][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.912598][ T293] bridge_slave_0: entered allmulticast mode [ 23.918941][ T293] bridge_slave_0: entered promiscuous mode [ 23.925254][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.932319][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.939582][ T293] bridge_slave_1: entered allmulticast mode [ 23.945827][ T293] bridge_slave_1: entered promiscuous mode [ 23.951993][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.959010][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.966266][ T292] bridge_slave_0: entered allmulticast mode [ 23.972438][ T292] bridge_slave_0: entered promiscuous mode [ 23.987408][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.994478][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.001597][ T292] bridge_slave_1: entered allmulticast mode [ 24.007765][ T292] bridge_slave_1: entered promiscuous mode [ 24.054692][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.061750][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.068811][ T294] bridge_slave_0: entered allmulticast mode [ 24.075081][ T294] bridge_slave_0: entered promiscuous mode [ 24.085914][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.093121][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.100166][ T294] bridge_slave_1: entered allmulticast mode [ 24.106442][ T294] bridge_slave_1: entered promiscuous mode [ 24.166843][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.173910][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.181238][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.188261][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.234056][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.241101][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.248428][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.255468][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.286437][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.293741][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.301136][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.308519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.324196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.331259][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.345047][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.352103][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.391045][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.398122][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.412790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.419835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.428190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.435232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.452492][ T288] veth0_vlan: entered promiscuous mode [ 24.459816][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.466863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.492986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.500014][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.507837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.514886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.535451][ T292] veth0_vlan: entered promiscuous mode [ 24.557792][ T288] veth1_macvtap: entered promiscuous mode [ 24.567208][ T293] veth0_vlan: entered promiscuous mode [ 24.578396][ T294] veth0_vlan: entered promiscuous mode [ 24.585433][ T292] veth1_macvtap: entered promiscuous mode [ 24.609638][ T294] veth1_macvtap: entered promiscuous mode [ 24.620227][ T293] veth1_macvtap: entered promiscuous mode [ 24.656859][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.718733][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.770037][ T319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 24.770095][ T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 24.856111][ T329] ./cgroup: Can't lookup blockdev [ 24.961334][ T305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.091295][ T305] usb 1-1: device descriptor read/64, error -71 [ 25.161286][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.281336][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.311526][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 25.317804][ T307] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 25.326681][ T307] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 25.335362][ T305] usb 1-1: device descriptor read/64, error -71 [ 25.341671][ T307] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 25.350632][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.360581][ T307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 25.370335][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.383413][ T307] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 25.392855][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.401970][ T307] usb 2-1: config 0 descriptor?? [ 25.431255][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 25.437394][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 25.446519][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.455311][ T45] usb 3-1: config 0 descriptor?? [ 25.591279][ T305] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.608452][ T307] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 25.731228][ T305] usb 1-1: device descriptor read/64, error -71 [ 25.810582][ T10] usb 2-1: USB disconnect, device number 2 [ 25.819489][ T10] usblp0: removed [ 25.981287][ T305] usb 1-1: device descriptor read/64, error -71 [ 26.062818][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 26.073233][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 26.081532][ T45] usb 3-1: USB disconnect, device number 2 [ 26.091406][ T305] usb usb1-port1: attempt power cycle [ 26.382112][ T350] overlayfs: conflicting options: userxattr,metacopy=on [ 26.389726][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 26.390141][ T351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.441276][ T305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.472520][ T305] usb 1-1: device descriptor read/8, error -71 [ 26.603959][ T305] usb 1-1: device descriptor read/8, error -71 [ 26.821247][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.841256][ T305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.862291][ T305] usb 1-1: device descriptor read/8, error -71 [ 26.971262][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 26.981808][ T45] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 26.989912][ T45] usb 3-1: config 0 has no interface number 0 [ 26.998897][ T305] usb 1-1: device descriptor read/8, error -71 [ 27.008139][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.017255][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.026817][ T45] usb 3-1: Product: syz [ 27.031824][ T45] usb 3-1: Manufacturer: syz [ 27.036506][ T45] usb 3-1: SerialNumber: syz [ 27.042172][ T45] usb 3-1: config 0 descriptor?? [ 27.047813][ T45] smsc95xx v2.0.0 [ 27.092086][ T375] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 27.111378][ T305] usb usb1-port1: unable to enumerate USB device [ 27.223654][ T377] exFAT-fs (rnullb0): invalid boot record signature [ 27.230286][ T377] exFAT-fs (rnullb0): failed to read boot sector [ 27.237088][ T377] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.361782][ T385] ======================================================= [ 27.361782][ T385] WARNING: The mand mount option has been deprecated and [ 27.361782][ T385] and is ignored by this kernel. Remove the mand [ 27.361782][ T385] option from the mount to silence this warning. [ 27.361782][ T385] ======================================================= [ 27.423937][ T387] can0: slcan on ttyS3. [ 27.455732][ T387] can0 (unregistered): slcan off ttyS3. [ 27.511506][ T305] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.531227][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 27.531246][ T36] audit: type=1400 audit(1750825304.890:183): avc: denied { create } for pid=389 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.560672][ T36] audit: type=1400 audit(1750825304.890:184): avc: denied { write } for pid=389 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.587684][ T36] audit: type=1400 audit(1750825304.890:185): avc: denied { append } for pid=389 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.612555][ T36] audit: type=1400 audit(1750825304.940:186): avc: denied { unlink } for pid=410 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.722608][ T36] audit: type=1400 audit(1750825305.090:187): avc: denied { create } for pid=425 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 27.748220][ T305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.748513][ T429] tmpfs: Unknown parameter 'Xè¿' [ 27.763532][ T305] usb 2-1: not running at top speed; connect to a high speed hub [ 27.772085][ T305] usb 2-1: config 14 has an invalid interface number: 18 but max is 0 [ 27.780322][ T305] usb 2-1: config 14 has no interface number 0 [ 27.791414][ T305] usb 2-1: config 14 interface 18 has no altsetting 0 [ 27.805529][ T305] usb 2-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 27.810966][ T36] audit: type=1400 audit(1750825305.170:188): avc: denied { write } for pid=437 comm="syz.0.33" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.820505][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.839282][ T36] audit: type=1400 audit(1750825305.210:189): avc: denied { execute } for pid=437 comm="syz.0.33" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.845523][ T305] usb 2-1: Product: syz [ 27.873624][ T36] audit: type=1400 audit(1750825305.240:190): avc: denied { ioctl } for pid=437 comm="syz.0.33" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.901258][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 27.913346][ T36] audit: type=1400 audit(1750825305.280:191): avc: denied { read write } for pid=439 comm="syz.3.34" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.921241][ T305] usb 2-1: Manufacturer: syz [ 27.937620][ T440] input: syz0 as /devices/virtual/input/input4 [ 27.959983][ T36] audit: type=1400 audit(1750825305.280:192): avc: denied { open } for pid=439 comm="syz.3.34" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.961398][ T305] usb 2-1: SerialNumber: syz [ 28.024804][ T446] tmpfs: Bad value for 'uid' [ 28.029662][ T446] tmpfs: Bad value for 'uid' [ 28.035964][ T448] rust_binder: Write failure EFAULT in pid:9 [ 28.102250][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 28.125012][ T45] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 28.134990][ T45] usb 3-1: USB disconnect, device number 3 [ 28.219502][ T305] rtl8150 2-1:14.18: couldn't find required endpoints [ 28.241328][ T305] rtl8150 2-1:14.18: probe with driver rtl8150 failed with error -5 [ 28.258046][ T305] usb 2-1: USB disconnect, device number 3 [ 28.644580][ T475] incfs: Options parsing error. -22 [ 28.650353][ T475] incfs: mount failed -22 [ 28.659271][ T476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 28.669010][ T476] rust_binder: Error in use_page_slow: ESRCH [ 28.669028][ T476] rust_binder: use_range failure ESRCH [ 28.675167][ T475] rust_binder: Error in use_page_slow: ESRCH [ 28.680742][ T475] rust_binder: use_range failure ESRCH [ 28.686803][ T476] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 28.692406][ T475] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 28.700356][ T476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.708411][ T475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.717766][ T476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16 [ 28.727285][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16 [ 28.765673][ T480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.793839][ T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 28.822962][ T484] /dev/rnullb0: Can't open blockdev [ 28.853434][ T486] /dev/rnullb0: Can't open blockdev [ 29.032488][ T500] rust_binder: Error while translating object. [ 29.032533][ T500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.043449][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 29.098495][ T513] can0: slcan on ttyS3. [ 29.211440][ T514] can0 (unregistered): slcan off ttyS3. [ 29.301475][ T542] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.392157][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.533717][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.562214][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 29.573653][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.586685][ T308] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.595780][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.604390][ T308] usb 4-1: config 0 descriptor?? [ 29.641264][ T341] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 29.648855][ T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.691257][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 29.697523][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.708451][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.721733][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.730899][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.739732][ T45] usb 1-1: config 0 descriptor?? [ 29.802307][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.813368][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.823491][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.832471][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.842325][ T305] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.851419][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.860594][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.869787][ T305] usb 2-1: config 0 descriptor?? [ 29.875271][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.883357][ T341] usb 3-1: Product: syz [ 29.888285][ T341] usb 3-1: Manufacturer: syz [ 29.893055][ T341] usb 3-1: SerialNumber: syz [ 30.022390][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 30.028381][ T308] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.038324][ T308] usb 4-1: USB disconnect, device number 2 [ 30.099303][ T562] PM: Enabling pm_trace changes system date and time during resume. [ 30.099303][ T562] PM: Correct system time has to be restored manually after resume. [ 30.122984][ T562] fuseblk: Bad value for 'source' [ 30.147540][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.155339][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.162790][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.170038][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.177374][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.184637][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.192109][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.199342][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.206587][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.213873][ T45] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 30.223085][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 30.298011][ T45] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 30.350344][ T45] usb 1-1: USB disconnect, device number 6 [ 30.399637][ T577] fido_id[577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 30.647293][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 30.727333][ T341] usb 3-1: 0:2 : does not exist [ 30.747117][ T305] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 30.747706][ T598] rust_binder: Fixups oob 154 158 203 174 [ 30.759215][ T305] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 30.767494][ T598] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 30.777353][ T598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.777532][ T305] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 30.791283][ T598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 30.801684][ T341] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 30.826257][ T305] usb 2-1: USB disconnect, device number 4 [ 30.835815][ T341] usb 3-1: USB disconnect, device number 4 [ 30.850498][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.230094][ T589] cgroup: fork rejected by pids controller in /syz3 [ 31.251227][ T341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.261417][ T305] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.391271][ T305] usb 1-1: device descriptor read/64, error -71 [ 31.411225][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 31.417468][ T341] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.425843][ T341] usb 3-1: config 0 has no interface number 0 [ 31.434071][ T341] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.451214][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.459334][ T341] usb 3-1: Product: syz [ 31.463731][ T341] usb 3-1: Manufacturer: syz [ 31.468338][ T341] usb 3-1: SerialNumber: syz [ 31.481959][ T341] usb 3-1: config 0 descriptor?? [ 31.490495][ T341] smsc95xx v2.0.0 [ 31.641248][ T305] usb 1-1: device descriptor read/64, error -71 [ 31.891237][ T305] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 32.021285][ T305] usb 1-1: device descriptor read/64, error -71 [ 32.281291][ T305] usb 1-1: device descriptor read/64, error -71 [ 32.304856][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 32.404031][ T305] usb usb1-port1: attempt power cycle [ 32.517627][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 32.539202][ T341] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.555876][ T341] usb 3-1: USB disconnect, device number 5 [ 32.610266][ T666] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 32.631578][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 32.631592][ T36] audit: type=1400 audit(1750825310.000:239): avc: denied { create } for pid=665 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 32.676560][ T36] audit: type=1400 audit(1750825310.000:240): avc: denied { sys_admin } for pid=665 comm="syz.1.77" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 32.714801][ T36] audit: type=1400 audit(1750825310.080:241): avc: denied { create } for pid=669 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.744221][ T36] audit: type=1400 audit(1750825310.080:242): avc: denied { connect } for pid=669 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.779797][ T305] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.802265][ T305] usb 1-1: device descriptor read/8, error -71 [ 32.932575][ T305] usb 1-1: device descriptor read/8, error -71 [ 33.055146][ T36] audit: type=1400 audit(1750825310.420:243): avc: denied { create } for pid=678 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.093023][ T36] audit: type=1400 audit(1750825310.460:244): avc: denied { setopt } for pid=678 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.181240][ T305] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 33.209882][ T36] audit: type=1400 audit(1750825310.570:245): avc: denied { ioctl } for pid=687 comm="syz.2.82" path="socket:[7147]" dev="sockfs" ino=7147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.234544][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 33.242402][ T305] usb 1-1: device descriptor read/8, error -71 [ 33.272198][ T36] audit: type=1400 audit(1750825310.600:246): avc: denied { write } for pid=687 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.294054][ T36] audit: type=1400 audit(1750825310.640:247): avc: denied { write } for pid=687 comm="syz.2.82" path="socket:[7216]" dev="sockfs" ino=7216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.331254][ T36] audit: type=1400 audit(1750825310.640:248): avc: denied { read write } for pid=687 comm="syz.2.82" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.392975][ T305] usb 1-1: device descriptor read/8, error -71 [ 33.521302][ T305] usb usb1-port1: unable to enumerate USB device [ 34.108599][ T709] netlink: 268 bytes leftover after parsing attributes in process `syz.2.88'. [ 34.204254][ T714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=714 comm=syz.2.91 [ 34.525256][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.525293][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 34.765590][ T735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 34.853971][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 35.065517][ T742] overlayfs: failed to clone upperpath [ 35.095600][ T741] overlayfs: failed to clone upperpath [ 35.106572][ T744] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.106597][ T744] rust_binder: Read failure Err(EFAULT) in pid:42 [ 35.156104][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.513352][ T758] tmpfs: Unsupported parameter 'mpol' [ 35.650877][ T763] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 35.660687][ T763] netlink: 17 bytes leftover after parsing attributes in process `syz.2.109'. [ 35.685449][ T769] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.685472][ T769] rust_binder: Read failure Err(EFAULT) in pid:99 [ 35.693778][ T769] rust_binder: Write failure EINVAL in pid:99 [ 35.891265][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.051256][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 36.057378][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.067591][ T10] usb 4-1: config 0 has no interface number 0 [ 36.075164][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.084231][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.092333][ T10] usb 4-1: Product: syz [ 36.096473][ T10] usb 4-1: Manufacturer: syz [ 36.101050][ T10] usb 4-1: SerialNumber: syz [ 36.106223][ T10] usb 4-1: config 0 descriptor?? [ 36.112967][ T10] smsc95xx v2.0.0 [ 36.626228][ T804] netlink: 'syz.2.123': attribute type 16 has an invalid length. [ 36.841146][ T815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 36.914232][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 37.011653][ T825] binder: Bad value for 'max' [ 37.116467][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 37.128544][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 37.147048][ T10] usb 4-1: USB disconnect, device number 3 [ 37.155675][ T842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.136'. [ 37.231254][ T749] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.237455][ T750] Bluetooth: hci0: command 0x1003 tx timeout [ 37.271247][ T852] netlink: 'syz.0.140': attribute type 12 has an invalid length. [ 37.281821][ T852] /dev/rnullb0: Can't open blockdev [ 37.332703][ T861] overlayfs: failed to clone upperpath [ 37.352993][ T861] GUP no longer grows the stack in syz.1.144 (861): 200000004000-200000005000 (200000001000) [ 37.381262][ T861] CPU: 1 UID: 0 PID: 861 Comm: syz.1.144 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 37.381298][ T861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.381315][ T861] Call Trace: [ 37.381324][ T861] [ 37.381332][ T861] __dump_stack+0x21/0x30 [ 37.381373][ T861] dump_stack_lvl+0x10c/0x190 [ 37.381395][ T861] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.381415][ T861] ? find_vma+0xcd/0x110 [ 37.381439][ T861] dump_stack+0x19/0x20 [ 37.381459][ T861] __get_user_pages+0x1e34/0x22d0 [ 37.381477][ T861] ? __kasan_check_write+0x18/0x20 [ 37.381501][ T861] ? down_read_killable+0x79/0xf0 [ 37.381525][ T861] ? populate_vma_page_range+0x230/0x230 [ 37.381543][ T861] ? kasan_unpoison+0x4a/0x70 [ 37.381564][ T861] __gup_longterm_locked+0xcb1/0x1580 [ 37.381585][ T861] ? try_get_folio+0x249/0x2a0 [ 37.381604][ T861] gup_fast_fallback+0x12ae/0x14a0 [ 37.381626][ T861] ? get_user_pages_fast_only+0xc0/0xc0 [ 37.381645][ T861] ? __kasan_check_read+0x15/0x20 [ 37.381666][ T861] ? static_key_count+0x45/0x70 [ 37.381687][ T861] get_user_pages_fast+0x73/0xb0 [ 37.381705][ T861] __iov_iter_get_pages_alloc+0x38e/0x9f0 [ 37.381734][ T861] iov_iter_get_pages2+0x68/0xb0 [ 37.381760][ T861] sk_msg_zerocopy_from_iter+0x1db/0x830 [ 37.381788][ T861] ? __cfi_sk_msg_zerocopy_from_iter+0x10/0x10 [ 37.381819][ T861] tls_sw_sendmsg+0xa1d/0x20d0 [ 37.381848][ T861] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 37.381872][ T861] ? avc_has_perm_noaudit+0x1c7/0x360 [ 37.381893][ T861] ? inet_send_prepare+0x64/0x4f0 [ 37.381914][ T861] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 37.381937][ T861] inet6_sendmsg+0x113/0x120 [ 37.382001][ T861] sock_write_iter+0x2cb/0x4f0 [ 37.382027][ T861] ? __cfi_sock_write_iter+0x10/0x10 [ 37.382051][ T861] ? selinux_file_permission+0x88b/0xb30 [ 37.382078][ T861] do_iter_readv_writev+0x4f2/0x6a0 [ 37.382102][ T861] ? vfs_iter_read+0x5f0/0x5f0 [ 37.382126][ T861] ? bpf_lsm_file_permission+0xd/0x20 [ 37.382147][ T861] vfs_writev+0x485/0xcf0 [ 37.382164][ T861] ? do_writev+0x2d0/0x2d0 [ 37.382180][ T861] ? __se_sys_mremap+0x8d6/0x1010 [ 37.382203][ T861] do_writev+0x14d/0x2d0 [ 37.382219][ T861] ? vfs_readv+0xa50/0xa50 [ 37.382235][ T861] ? __kasan_check_write+0x18/0x20 [ 37.382256][ T861] ? fpregs_restore_userregs+0x11d/0x260 [ 37.382275][ T861] __x64_sys_writev+0x81/0x90 [ 37.382299][ T861] x64_sys_call+0x1fbb/0x2ee0 [ 37.382322][ T861] do_syscall_64+0x58/0xf0 [ 37.382339][ T861] ? clear_bhb_loop+0x50/0xa0 [ 37.382383][ T861] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.382404][ T861] RIP: 0033:0x7fa6b898e929 [ 37.382428][ T861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.382445][ T861] RSP: 002b:00007fa6b9836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 37.382467][ T861] RAX: ffffffffffffffda RBX: 00007fa6b8bb5fa0 RCX: 00007fa6b898e929 [ 37.382482][ T861] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 37.382495][ T861] RBP: 00007fa6b8a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 37.382508][ T861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.382520][ T861] R13: 0000000000000000 R14: 00007fa6b8bb5fa0 R15: 00007ffe257366a8 [ 37.382536][ T861] [ 37.851230][ T305] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.994013][ T876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.012450][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.021370][ T876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.022348][ T305] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 38.041318][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.050224][ T305] usb 1-1: config 0 descriptor?? [ 38.251528][ T887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.314669][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 38.314686][ T36] audit: type=1400 audit(1750825315.680:285): avc: denied { listen } for pid=899 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.341347][ T36] audit: type=1400 audit(1750825315.700:286): avc: denied { getopt } for pid=899 comm="syz.2.157" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.466171][ T305] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 38.603463][ T36] audit: type=1400 audit(1750825315.970:287): avc: denied { setopt } for pid=905 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.731244][ T36] audit: type=1400 audit(1750825316.090:288): avc: denied { execute } for pid=911 comm="syz.1.161" path=2F6D656D66643A2B88C773202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.872235][ T926] tipc: Started in network mode [ 38.890225][ T926] tipc: Node identity , cluster identity 4711 [ 38.909809][ T926] tipc: Failed to set node id, please configure manually [ 38.932538][ T926] tipc: Enabling of bearer rejected, failed to enable media [ 39.082263][ T852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.092827][ T852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.112088][ T36] audit: type=1400 audit(1750825316.480:289): avc: denied { read } for pid=850 comm="syz.0.140" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.159296][ T305] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 39.176861][ T305] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 39.181347][ T36] audit: type=1400 audit(1750825316.510:290): avc: denied { open } for pid=850 comm="syz.0.140" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.202128][ T305] usb 1-1: USB disconnect, device number 11 [ 39.269390][ T36] audit: type=1400 audit(1750825316.510:291): avc: denied { ioctl } for pid=850 comm="syz.0.140" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.466790][ T932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.482179][ T932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.517635][ T36] audit: type=1400 audit(1750825316.880:292): avc: denied { getopt } for pid=934 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.551236][ T36] audit: type=1400 audit(1750825316.880:293): avc: denied { write } for pid=934 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.625653][ T36] audit: type=1400 audit(1750825316.990:294): avc: denied { getopt } for pid=943 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.669203][ T952] fuse: Bad value for 'fd' [ 39.701283][ T308] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.833873][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.863064][ T308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.881732][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.884197][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.899341][ T308] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.909089][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.917105][ T308] usb 3-1: SerialNumber: syz [ 40.071260][ T305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.086170][ T983] binder: Unknown parameter 'fscontext?}' [ 40.201798][ T996] binder: Bad value for 'max' [ 40.222280][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.234388][ T305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.244331][ T305] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.253624][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.261843][ T305] usb 4-1: SerialNumber: syz [ 40.411441][ T1009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.481656][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.496940][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.009684][ T305] usb 4-1: MIDIStreaming interface descriptor not found [ 41.023188][ T305] usb 4-1: USB disconnect, device number 4 [ 41.024127][ T1013] binder: Bad value for 'stats' [ 41.133754][ T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.256617][ T1041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1041 comm=syz.3.201 [ 41.258250][ T1042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1042 comm=syz.3.201 [ 41.283536][ T1041] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 41.291415][ T1043] binder: Bad value for 'stats' [ 41.339587][ T1054] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.353749][ T1054] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.368099][ T1054] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 41.453662][ T1064] syzkaller0: entered promiscuous mode [ 41.454586][ T1065] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 41.459195][ T1064] syzkaller0: entered allmulticast mode [ 41.611268][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.736963][ T1087] rust_binder: Error while translating object. [ 41.737001][ T1087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.743401][ T1087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 41.743512][ T1089] fuse: Unknown parameter 'gráæp_id' [ 41.781235][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 41.789373][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.801324][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.811254][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.820353][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.832034][ T9] usb 4-1: config 0 descriptor?? [ 41.838385][ T9] hub 4-1:0.0: USB hub found [ 41.937618][ T1101] __vm_enough_memory: pid: 1101, comm: syz.0.221, bytes: 72057731476914176 not enough memory for the allocation [ 42.015388][ T1112] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 42.038764][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 42.052794][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 42.058815][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.091340][ T9] usb 4-1: USB disconnect, device number 5 [ 42.269346][ T308] usb 3-1: 0:2 : does not exist [ 42.281014][ T308] usb 3-1: USB disconnect, device number 6 [ 42.491713][ T1138] binder: Bad value for 'max' [ 42.621296][ T1143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 42.981241][ T308] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.043571][ T1158] overlayfs: failed to clone upperpath [ 43.132557][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.148244][ T308] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 43.160561][ T308] usb 4-1: config 0 has no interface number 0 [ 43.173031][ T308] usb 4-1: config 0 interface 57 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 43.198834][ T308] usb 4-1: config 0 interface 57 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 43.221249][ T308] usb 4-1: config 0 interface 57 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 43.242309][ T308] usb 4-1: config 0 interface 57 has no altsetting 0 [ 43.252621][ T308] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=b1.e9 [ 43.273917][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.298098][ T308] usb 4-1: Product: syz [ 43.311261][ T308] usb 4-1: Manufacturer: syz [ 43.315968][ T308] usb 4-1: SerialNumber: syz [ 43.326143][ T308] usb 4-1: config 0 descriptor?? [ 43.481246][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 43.481263][ T36] audit: type=1400 audit(1750825320.840:373): avc: denied { mount } for pid=1214 comm="syz.1.261" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.548839][ T36] audit: type=1400 audit(1750825320.910:374): avc: denied { mounton } for pid=1150 comm="syz.3.237" path="/proc/206/cgroup" dev="proc" ino=10044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 43.593458][ T308] usbhid 4-1:0.57: couldn't find an input interrupt endpoint [ 43.612492][ T308] usb 4-1: USB disconnect, device number 6 [ 43.643823][ T1232] /dev/sg0: Can't lookup blockdev [ 43.713802][ T1241] mmap: syz.1.269 (1241): VmData 29208576 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 43.996513][ T1268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.996539][ T1268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 44.271302][ T305] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.452644][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.473428][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.486874][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.503177][ T305] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.515255][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.524188][ T305] usb 3-1: config 0 descriptor?? [ 44.572500][ T36] audit: type=1400 audit(1750825321.940:375): avc: denied { create } for pid=1316 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.618363][ T36] audit: type=1400 audit(1750825321.980:376): avc: denied { getopt } for pid=1321 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.661111][ T1329] netlink: 'syz.1.301': attribute type 11 has an invalid length. [ 44.668982][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 44.932236][ T305] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 44.941833][ T305] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 45.109327][ T1350] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 45.116741][ T1350] rust_binder: Write failure EINVAL in pid:218 [ 45.116744][ T1349] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 45.130349][ T1349] rust_binder: Write failure EINVAL in pid:218 [ 45.148445][ T1349] tipc: Started in network mode [ 45.159548][ T1349] tipc: Node identity e29a00fe6ab3, cluster identity 4711 [ 45.166772][ T1349] tipc: Enabled bearer , priority 0 [ 45.173941][ T1349] tipc: Resetting bearer [ 45.185681][ T1349] tipc: Disabling bearer [ 45.224288][ T1350] rust_binder: Write failure EFAULT in pid:218 [ 45.224833][ T1351] rust_binder: Write failure EFAULT in pid:218 [ 45.328336][ T1362] capability: warning: `syz.3.312' uses deprecated v2 capabilities in a way that may be insecure [ 45.330322][ T1367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224 [ 45.948546][ T36] audit: type=1400 audit(1750825323.310:377): avc: denied { view } for pid=1385 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.977747][ T36] audit: type=1400 audit(1750825323.340:378): avc: denied { unmount } for pid=1385 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.085183][ T36] audit: type=1400 audit(1750825323.450:379): avc: denied { watch watch_reads } for pid=1407 comm="syz.0.326" path="/66" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.109774][ T36] audit: type=1400 audit(1750825323.470:380): avc: denied { remount } for pid=1407 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.217651][ T36] audit: type=1400 audit(1750825323.580:381): avc: denied { execheap } for pid=1416 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.381430][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 46.402545][ T1424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.417403][ T1426] tipc: Enabling of bearer rejected, failed to enable media [ 46.425717][ T36] audit: type=1400 audit(1750825323.780:382): avc: denied { getopt } for pid=1427 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.445343][ T1424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.631245][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.761236][ T10] usb 4-1: device descriptor read/64, error -71 [ 47.011269][ T10] usb 4-1: device descriptor read/64, error -71 [ 47.211433][ T305] usb 3-1: USB disconnect, device number 7 [ 47.261274][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.341266][ T305] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 47.391356][ T10] usb 4-1: device descriptor read/64, error -71 [ 47.471233][ T305] usb 3-1: device descriptor read/64, error -71 [ 47.631243][ T10] usb 4-1: device descriptor read/64, error -71 [ 47.721293][ T305] usb 3-1: device descriptor read/64, error -71 [ 47.751309][ T10] usb usb4-port1: attempt power cycle [ 47.961233][ T305] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 48.091282][ T305] usb 3-1: device descriptor read/64, error -71 [ 48.091282][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.112408][ T10] usb 4-1: device descriptor read/8, error -71 [ 48.242417][ T10] usb 4-1: device descriptor read/8, error -71 [ 48.341282][ T305] usb 3-1: device descriptor read/64, error -71 [ 48.451352][ T305] usb usb3-port1: attempt power cycle [ 48.481233][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.502413][ T10] usb 4-1: device descriptor read/8, error -71 [ 48.632245][ T10] usb 4-1: device descriptor read/8, error -71 [ 48.741431][ T10] usb usb4-port1: unable to enumerate USB device [ 48.791239][ T305] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 48.812291][ T305] usb 3-1: device descriptor read/8, error -71 [ 48.942236][ T305] usb 3-1: device descriptor read/8, error -71 [ 49.180207][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 49.180223][ T36] audit: type=1400 audit(1750825326.540:387): avc: denied { create } for pid=1498 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.181279][ T305] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 49.232332][ T305] usb 3-1: device descriptor read/8, error -71 [ 49.268982][ T1503] Zero length message leads to an empty skb [ 49.362218][ T305] usb 3-1: device descriptor read/8, error -71 [ 49.473506][ T305] usb usb3-port1: unable to enumerate USB device [ 49.536738][ T1511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.588073][ T1512] rust_binder: Error while translating object. [ 49.595316][ T1512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 49.601616][ T1512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:234 [ 49.973144][ T36] audit: type=1400 audit(1750825327.340:388): avc: denied { read write } for pid=1550 comm="syz.2.378" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.005460][ T36] audit: type=1400 audit(1750825327.340:389): avc: denied { open } for pid=1550 comm="syz.2.378" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.006881][ T1551] SELinux: policydb version 31913462 does not match my version range 15-33 [ 50.028423][ T36] audit: type=1400 audit(1750825327.370:390): avc: denied { load_policy } for pid=1550 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.057356][ T1551] SELinux: failed to load policy [ 50.066662][ T36] audit: type=1400 audit(1750825327.430:391): avc: denied { ioctl } for pid=1550 comm="syz.2.378" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.486948][ T36] audit: type=1400 audit(1750825327.850:392): avc: denied { map } for pid=1576 comm="syz.0.387" path="socket:[11735]" dev="sockfs" ino=11735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 50.925648][ T1605] /dev/rnullb0: Can't lookup blockdev [ 50.979134][ T1608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1608 comm=syz.2.396 [ 50.991472][ T36] audit: type=1400 audit(1750825328.340:393): avc: denied { create } for pid=1610 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.035375][ T36] audit: type=1400 audit(1750825328.340:394): avc: denied { bind } for pid=1606 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.153169][ T36] audit: type=1400 audit(1750825328.520:395): avc: denied { append } for pid=1634 comm="syz.3.407" name="binder1" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.185537][ T1640] /dev/rnullb0: Can't open blockdev [ 51.273216][ T1660] tmpfs: Bad value for 'nr_inodes' [ 51.364335][ T36] audit: type=1400 audit(1750825328.730:396): avc: denied { read } for pid=1674 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.461240][ T307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.611372][ T307] usb 3-1: Using ep0 maxpacket: 8 [ 51.617514][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.628450][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.639187][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.652024][ T307] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 51.661064][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.672207][ T307] usb 3-1: config 0 descriptor?? [ 52.085926][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.093062][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.100091][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.107231][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.114314][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.121434][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.128512][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.135620][ T307] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 52.142678][ T307] hid-rmi 0003:06CB:81A7.0005: item fetching failed at offset 10/11 [ 52.151769][ T307] hid-rmi 0003:06CB:81A7.0005: parse failed [ 52.157730][ T307] hid-rmi 0003:06CB:81A7.0005: probe with driver hid-rmi failed with error -22 [ 52.207784][ T1724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255 [ 52.230810][ T1730] rust_binder: Write failure EINVAL in pid:260 [ 52.426028][ T1754] input: syz0 as /devices/virtual/input/input6 [ 52.443324][ T10] usb 3-1: USB disconnect, device number 12 [ 52.471451][ T1762] netlink: 92 bytes leftover after parsing attributes in process `syz.1.451'. [ 52.474746][ T1761] can0: slcan on ttyS3. [ 52.583994][ T1785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 52.588482][ T1104] hid (null): unknown global tag 0xe [ 52.604602][ T1104] hid (null): unknown global tag 0xc [ 52.610044][ T1104] hid (null): unknown global tag 0xc [ 52.616455][ T1104] hid (null): unknown global tag 0xc [ 52.622242][ T1104] hid (null): unknown global tag 0xd [ 52.627661][ T1104] hid (null): unknown global tag 0xd [ 52.634635][ T1761] can0 (unregistered): slcan off ttyS3. [ 52.641219][ T1104] hid (null): invalid report_count 45885 [ 52.652111][ T1104] hid (null): unknown global tag 0xc [ 52.657518][ T1104] hid (null): invalid report_size -1755424929 [ 52.664117][ T1104] hid (null): invalid report_size -8703868 [ 52.674020][ T1104] hid (null): unknown global tag 0xe [ 52.689573][ T1104] hid (null): bogus close delimiter [ 52.696793][ T1104] hid (null): usage index exceeded [ 52.703917][ T1104] hid (null): report_id 11729 is invalid [ 52.711026][ T1104] hid (null): unknown global tag 0x79 [ 52.716992][ T1104] hid (null): report_id 24363864 is invalid [ 52.723047][ T1104] hid (null): report_id 0 is invalid [ 52.730445][ T1104] hid (null): unknown global tag 0x52 [ 52.738228][ T1104] hid (null): report_id 30885 is invalid [ 52.746027][ T1104] hid (null): unknown global tag 0x7d [ 52.751506][ T1104] hid (null): invalid report_count 58630 [ 52.757236][ T1104] hid (null): unknown global tag 0x78 [ 52.764514][ T1104] hid (null): unknown global tag 0xe [ 52.771261][ T1104] hid (null): unknown global tag 0xc [ 52.776562][ T1104] hid (null): invalid report_size 6018 [ 52.782253][ T1104] hid (null): global environment stack underflow [ 52.788691][ T1104] hid (null): report_id 47732 is invalid [ 52.800604][ T1104] hid (null): unknown global tag 0xd [ 52.816223][ T1104] hid (null): unknown global tag 0xf3 [ 52.830289][ T1104] hid (null): unknown global tag 0x5f [ 52.841262][ T1104] hid (null): report_id 48435 is invalid [ 52.851372][ T1104] hid (null): unknown global tag 0xc [ 52.856758][ T1104] hid (null): unknown global tag 0x6d [ 52.862208][ T1104] hid (null): unknown global tag 0xd [ 52.867515][ T1104] hid (null): unknown global tag 0xe [ 52.872904][ T1104] hid (null): report_id 0 is invalid [ 52.878350][ T1104] hid (null): unknown global tag 0xc [ 52.883733][ T1104] hid (null): invalid report_size 65408 [ 52.889283][ T1104] hid (null): unknown global tag 0xe [ 52.894663][ T1104] hid (null): unknown global tag 0xc [ 52.899958][ T1104] hid (null): report_id 0 is invalid [ 52.908066][ T1104] hid (null): unknown global tag 0xfe [ 52.913459][ T1104] hid (null): unknown global tag 0xd [ 52.918749][ T1104] hid (null): invalid report_count 34126 [ 52.924462][ T1104] hid (null): unknown global tag 0x63 [ 52.929824][ T1104] hid (null): unknown global tag 0xe [ 52.935116][ T1104] hid (null): unknown global tag 0xe [ 52.940446][ T1104] hid (null): invalid report_size 65490 [ 52.946212][ T1104] hid (null): invalid report_count 672376556 [ 52.952251][ T1104] hid (null): unknown global tag 0xc [ 52.958209][ T1104] hid-generic 0080:0005:0008.0006: unknown main item tag 0x6 [ 52.965645][ T1104] hid-generic 0080:0005:0008.0006: unknown main item tag 0x7 [ 52.973044][ T1104] hid-generic 0080:0005:0008.0006: unknown global tag 0xe [ 52.980135][ T1104] hid-generic 0080:0005:0008.0006: item 0 0 1 14 parsing failed [ 52.987923][ T1104] hid-generic 0080:0005:0008.0006: probe with driver hid-generic failed with error -22 [ 53.016778][ T1814] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 53.016803][ T1814] rust_binder: Error while translating object. [ 53.029368][ T1814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.037674][ T1814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 53.051555][ T1819] binder: Unknown parameter 'staty' [ 53.108041][ T1828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 53.117403][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 53.138146][ T1833] rust_binder: Error while translating object. [ 53.138179][ T1833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 53.144396][ T1833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:298 [ 53.361269][ T307] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.411231][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 53.521267][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 53.527646][ T307] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.535886][ T307] usb 3-1: config 0 has no interface number 0 [ 53.543381][ T307] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.552451][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.560522][ T307] usb 3-1: Product: syz [ 53.564699][ T307] usb 3-1: Manufacturer: syz [ 53.569284][ T307] usb 3-1: SerialNumber: syz [ 53.574539][ T307] usb 3-1: config 0 descriptor?? [ 53.580182][ T307] smsc95xx v2.0.0 [ 53.581232][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 53.590118][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 53.599445][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.608226][ T9] usb 4-1: config 0 descriptor?? [ 53.980905][ T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 53.992353][ T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 54.084353][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 54.102136][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 54.122335][ T9] usb 4-1: USB disconnect, device number 11 [ 54.403017][ T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 54.413938][ T307] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 54.423068][ T307] usb 3-1: USB disconnect, device number 13 [ 54.461939][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 54.461954][ T36] audit: type=1400 audit(1750825331.830:405): avc: denied { create } for pid=1904 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 54.881450][ T1914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'. [ 54.952341][ T36] audit: type=1400 audit(1750825332.320:406): avc: denied { link } for pid=1928 comm="syz.2.502" name="file1" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.989375][ T36] audit: type=1400 audit(1750825332.320:407): avc: denied { read } for pid=1928 comm="syz.2.502" name="file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.993669][ T1935] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 55.014740][ T36] audit: type=1400 audit(1750825332.320:408): avc: denied { open } for pid=1928 comm="syz.2.502" path="/92/bus/file0" dev="overlay" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.235856][ T1951] overlayfs: failed to clone upperpath [ 55.241853][ T36] audit: type=1400 audit(1750825332.600:409): avc: denied { mounton } for pid=1938 comm="syz.0.505" path="/bus" dev="ramfs" ino=14398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 55.311283][ T307] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 55.391261][ T308] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 55.441230][ T307] usb 4-1: device descriptor read/64, error -71 [ 55.541277][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 55.547597][ T308] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.555731][ T308] usb 3-1: config 0 has no interface number 0 [ 55.563857][ T308] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.573025][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.581013][ T308] usb 3-1: Product: syz [ 55.585189][ T308] usb 3-1: Manufacturer: syz [ 55.589865][ T308] usb 3-1: SerialNumber: syz [ 55.595259][ T308] usb 3-1: config 0 descriptor?? [ 55.601671][ T308] smsc95xx v2.0.0 [ 55.681273][ T307] usb 4-1: device descriptor read/64, error -71 [ 55.935686][ T307] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 56.009848][ T308] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 56.020627][ T308] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.068299][ T2004] netlink: 112 bytes leftover after parsing attributes in process `syz.0.524'. [ 56.071247][ T307] usb 4-1: device descriptor read/64, error -71 [ 56.144020][ T36] audit: type=1400 audit(1750825333.510:410): avc: denied { shutdown } for pid=2008 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.197693][ T36] audit: type=1400 audit(1750825333.560:411): avc: denied { bind } for pid=2016 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.230220][ T2019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 56.321249][ T307] usb 4-1: device descriptor read/64, error -71 [ 56.404258][ T2055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 56.431529][ T307] usb usb4-port1: attempt power cycle [ 56.441080][ T308] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 56.462208][ T308] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 56.484687][ T308] usb 3-1: USB disconnect, device number 14 [ 56.551461][ T36] audit: type=1400 audit(1750825333.920:412): avc: denied { getopt } for pid=2067 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.771258][ T307] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 56.802190][ T307] usb 4-1: device descriptor read/8, error -71 [ 56.888458][ T36] audit: type=1326 audit(1750825334.250:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2085 comm="syz.1.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6b898e929 code=0x0 [ 56.942330][ T307] usb 4-1: device descriptor read/8, error -71 [ 56.971798][ T2088] can: request_module (can-proto-0) failed. [ 56.991757][ T36] audit: type=1400 audit(1750825334.360:414): avc: denied { bind } for pid=2085 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.221243][ T307] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 57.242222][ T307] usb 4-1: device descriptor read/8, error -71 [ 57.373647][ T307] usb 4-1: device descriptor read/8, error -71 [ 57.452657][ T2096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.481372][ T307] usb usb4-port1: unable to enumerate USB device [ 57.537098][ T2101] tmpfs: Bad value for 'nr_blocks' [ 57.666435][ T2118] tipc: Started in network mode [ 57.671354][ T2118] tipc: Node identity 4, cluster identity 4711 [ 57.677495][ T2118] tipc: Node number set to 4 [ 57.727156][ T2126] raw_sendmsg: syz.1.569 forgot to set AF_INET. Fix it! [ 57.799699][ T2137] netlink: 'syz.0.571': attribute type 30 has an invalid length. [ 58.098066][ T2145] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 58.106312][ T2145] rust_binder: Write failure EINVAL in pid:318 [ 58.133351][ T2151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.139950][ T2151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.147512][ T2151] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 58.161109][ T2151] rust_binder: Write failure EINVAL in pid:324 [ 58.487700][ T2176] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 58.494526][ T2176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 58.503081][ T2176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:301 [ 58.641667][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 58.660684][ T2204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'. [ 58.671406][ T2208] fuse: Bad value for 'fd' [ 59.009935][ T2230] /dev/rnullb0: Can't lookup blockdev [ 59.272544][ T2248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 59.430066][ T2271] netlink: 232 bytes leftover after parsing attributes in process `syz.1.618'. [ 59.535519][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 59.535535][ T36] audit: type=1326 audit(1750825336.900:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2264 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa6b898e929 code=0x7ffc0000 [ 59.653221][ T36] audit: type=1400 audit(1750825337.020:435): avc: denied { create } for pid=2286 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.810986][ T36] audit: type=1400 audit(1750825337.170:436): avc: denied { read } for pid=2289 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.955234][ T36] audit: type=1400 audit(1750825337.320:437): avc: denied { mounton } for pid=2295 comm="syz.1.627" path="/212/file0" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 60.017352][ T36] audit: type=1326 audit(1750825337.380:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2299 comm="syz.1.629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6b898e929 code=0x0 [ 60.040492][ T36] audit: type=1400 audit(1750825337.400:439): avc: denied { shutdown } for pid=2297 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.176504][ T2308] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 60.191213][ T36] audit: type=1400 audit(1750825337.550:440): avc: denied { relabelto } for pid=2307 comm="syz.0.631" name="rnullb0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 60.241229][ T36] audit: type=1400 audit(1750825337.550:441): avc: denied { associate } for pid=2307 comm="syz.0.631" name="rnullb0" dev="tmpfs" ino=375 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mnt_t:s0" [ 60.289879][ T36] audit: type=1400 audit(1750825337.560:442): avc: denied { read write } for pid=2312 comm="syz.0.632" name="rnullb0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 60.341221][ T36] audit: type=1400 audit(1750825337.560:443): avc: denied { open } for pid=2312 comm="syz.0.632" path="/dev/rnullb0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 61.011232][ T341] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 61.161226][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 61.167453][ T341] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 61.175699][ T341] usb 3-1: config 0 has no interface number 0 [ 61.183175][ T341] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 61.192227][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.200206][ T341] usb 3-1: Product: syz [ 61.204419][ T341] usb 3-1: Manufacturer: syz [ 61.209010][ T341] usb 3-1: SerialNumber: syz [ 61.214234][ T341] usb 3-1: config 0 descriptor?? [ 61.219934][ T341] smsc95xx v2.0.0 [ 61.620499][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 61.631861][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.915854][ T2376] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.222021][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 62.232962][ T341] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 62.242272][ T341] usb 3-1: USB disconnect, device number 15 [ 62.797452][ T2396] cgroup: fork rejected by pids controller in /syz2 [ 64.606582][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 64.606599][ T36] audit: type=1400 audit(1750825341.970:450): avc: denied { name_bind } for pid=2603 comm="syz.3.685" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.995741][ T36] audit: type=1400 audit(1750825342.360:451): avc: denied { mounton } for pid=2619 comm="syz.2.690" path="/114/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 65.018057][ T2621] fuse: Bad value for 'fd' [ 65.022686][ T2620] fuse: Bad value for 'fd' [ 65.247009][ T36] audit: type=1400 audit(1750825342.610:452): avc: denied { create } for pid=2665 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.489769][ T308] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 65.510529][ T2682] tmpfs: Unknown parameter 'usrquota' [ 65.518146][ T2682] overlay: ./file0 is not a directory [ 65.533685][ T36] audit: type=1400 audit(1750825342.900:453): avc: denied { ioctl } for pid=2683 comm="syz.0.714" path="/dev/rnullb0" dev="tmpfs" ino=375 ioctlcmd=0x4c03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 65.651256][ T308] usb 3-1: Using ep0 maxpacket: 8 [ 65.657597][ T308] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.668675][ T308] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.678692][ T308] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.685352][ T308] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 65.694430][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.702952][ T308] usb 3-1: config 0 descriptor?? [ 65.767873][ T2706] overlayfs: failed to resolve 'workdir=./file0': -2 [ 65.784250][ T36] audit: type=1400 audit(1750825599.150:454): avc: denied { setattr } for pid=2708 comm="syz.3.722" name="NETLINK" dev="sockfs" ino=15757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.914693][ T2721] tipc: Enabling of bearer rejected, failed to enable media [ 66.044734][ T36] audit: type=1400 audit(1750825599.410:455): avc: denied { getattr } for pid=2726 comm="syz.3.729" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.112897][ T308] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 66.120104][ T308] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 66.127335][ T308] cypress 0003:04B4:BCA1.0007: item fetching failed at offset 2/3 [ 66.135471][ T308] cypress 0003:04B4:BCA1.0007: parse failed [ 66.141429][ T308] cypress 0003:04B4:BCA1.0007: probe with driver cypress failed with error -22 [ 66.314951][ T308] usb 3-1: USB disconnect, device number 16 [ 66.570562][ T2745] mmap: syz.0.735 (2745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.887363][ T2765] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.204049][ T36] audit: type=1400 audit(1750825600.570:456): avc: denied { create } for pid=2787 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 67.448228][ T2794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 67.701267][ T2799] /dev/rnullb0: Can't lookup blockdev [ 67.743892][ T2811] /dev/md0: Can't lookup blockdev [ 67.828779][ T2841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=2841 comm=syz.0.770 [ 67.841230][ T2841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=2841 comm=syz.0.770 [ 67.868364][ T2849] incfs: Options parsing error. -22 [ 67.873873][ T2849] incfs: mount failed -22 [ 67.913487][ T36] audit: type=1400 audit(1750825601.280:457): avc: denied { create } for pid=2856 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.021248][ T307] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 68.171250][ T307] usb 3-1: Using ep0 maxpacket: 8 [ 68.178399][ T307] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 68.187739][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.198364][ T307] usb 3-1: config 0 descriptor?? [ 68.255267][ T36] audit: type=1400 audit(1750825601.620:458): avc: denied { ioctl } for pid=2872 comm="syz.1.781" path="socket:[16620]" dev="sockfs" ino=16620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.452540][ T2880] overlay: Unknown parameter 'func' [ 68.567151][ T36] audit: type=1400 audit(1750825601.930:459): avc: denied { read } for pid=2889 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.940066][ T2902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 69.393220][ T2922] /dev/sg0: Can't lookup blockdev [ 69.564494][ T2937] cgroup: fork rejected by pids controller in /syz0 [ 72.564408][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.564437][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.590744][ T307] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 72.606210][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.607378][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.608339][ T307] asix 3-1:0.0: probe with driver asix failed with error -71 [ 72.629526][ T307] usb 3-1: USB disconnect, device number 17 [ 72.644551][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.644578][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.681306][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.687971][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.694514][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.701540][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.709904][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.716652][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.723282][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.729795][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.736593][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.743282][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.749883][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.756613][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.763545][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.770089][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.776937][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.783633][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.790255][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.796981][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.804008][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.810554][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.817412][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.824246][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.830857][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.837589][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.844377][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.850905][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.861254][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.868419][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.875407][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.882190][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.898156][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.904923][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.911606][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.918167][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.924887][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.933458][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.940074][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.947051][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.947282][ T3114] overlayfs: failed to clone upperpath [ 72.953786][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.965543][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.972779][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.979949][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.986470][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.001455][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.009906][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.017401][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.024556][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.024674][ T3124] overlayfs: failed to clone upperpath [ 73.031058][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.043214][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.049699][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.058296][ T3123] netlink: 68 bytes leftover after parsing attributes in process `syz.1.819'. [ 73.074152][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.074178][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.081115][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.087958][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.094465][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.106289][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.113032][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.121609][ T3133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.822'. [ 73.128225][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.165760][ T3140] fuse: Bad value for 'user_id' [ 73.181109][ T3140] fuse: Bad value for 'user_id' [ 73.187883][ T3140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.187915][ T3140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:508 [ 73.293135][ T3157] sock: sock_set_timeout: `syz.3.831' (pid 3157) tries to set negative timeout [ 73.334298][ T3161] cgroup: subsys name conflicts with all [ 73.461234][ T341] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 73.504151][ T36] audit: type=1326 audit(1750825606.870:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.1.849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6b898e929 code=0x0 [ 73.611231][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 73.617454][ T341] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.625932][ T341] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.634575][ T341] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 73.643866][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.653831][ T341] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.663640][ T341] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.676642][ T341] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.685701][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.694264][ T341] usb 3-1: config 0 descriptor?? [ 73.900678][ T341] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.967739][ T3212] netlink: 168 bytes leftover after parsing attributes in process `syz.3.852'. [ 74.102631][ T341] usb 3-1: USB disconnect, device number 18 [ 74.109176][ T341] usblp0: removed [ 74.337285][ T36] audit: type=1326 audit(1750825607.700:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b898e929 code=0x7fc00000 [ 74.385071][ T3231] 8021q: VLANs not supported on tunl0 [ 74.506906][ T36] audit: type=1400 audit(1750825607.870:462): avc: denied { getopt } for pid=3236 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.570691][ T36] audit: type=1400 audit(1750825607.930:463): avc: denied { setopt } for pid=3249 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.016324][ T3299] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 75.594445][ T3329] x_tables: duplicate underflow at hook 2 [ 75.625444][ T36] audit: type=1400 audit(1750825608.990:464): avc: denied { nlmsg_read } for pid=3336 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 75.692615][ T3345] netlink: 124 bytes leftover after parsing attributes in process `syz.3.901'. [ 75.761237][ T308] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 75.782879][ T3352] fuse: Bad value for 'group_id' [ 75.787825][ T3352] fuse: Bad value for 'group_id' [ 75.911323][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 75.918043][ T308] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.926197][ T308] usb 3-1: config 0 has no interface number 0 [ 75.934201][ T308] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.943296][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.951311][ T308] usb 3-1: Product: syz [ 75.955457][ T308] usb 3-1: Manufacturer: syz [ 75.960113][ T308] usb 3-1: SerialNumber: syz [ 75.965322][ T308] usb 3-1: config 0 descriptor?? [ 75.971512][ T308] smsc95xx v2.0.0 [ 76.219116][ T36] audit: type=1400 audit(1750825609.580:465): avc: denied { execute } for pid=3372 comm="syz.1.911" path="/dev/rnullb0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.252680][ T36] audit: type=1400 audit(1750825609.620:466): avc: denied { setattr } for pid=3374 comm="syz.1.912" name="RAWv6" dev="sockfs" ino=17298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.301031][ T3385] netlink: 'syz.1.915': attribute type 12 has an invalid length. [ 76.330355][ T3389] overlayfs: failed to clone upperpath [ 76.336650][ T36] audit: type=1400 audit(1750825609.700:467): avc: denied { mounton } for pid=3388 comm="syz.3.917" path="/200/bus/file1" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.772827][ T308] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 76.973139][ T308] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 76.992312][ T308] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 77.001992][ T308] usb 3-1: USB disconnect, device number 19 [ 77.427686][ T36] audit: type=1400 audit(1750825610.790:468): avc: denied { bind } for pid=3428 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.447841][ T36] audit: type=1400 audit(1750825610.810:469): avc: denied { setopt } for pid=3428 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.514167][ T3434] overlayfs: failed to resolve '?': -2 [ 77.529672][ T3439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 77.705359][ T3459] binder: Unknown parameter 'mah' [ 77.710532][ T3459] binder: Unknown parameter 'mah' [ 77.737955][ T3464] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 77.975118][ T3484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 78.082556][ T3517] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 78.106828][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 78.121705][ T3525] tipc: Started in network mode [ 78.124982][ T3527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 78.126958][ T3525] tipc: Node identity 4, cluster identity 4711 [ 78.136816][ T3527] rust_binder: Error while translating object. [ 78.141591][ T3527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.142036][ T3525] tipc: Node number set to 4 [ 78.160949][ T3527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 78.180796][ T3533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:580 [ 78.241839][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'. [ 78.383976][ T3553] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 78.399231][ T3553] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 78.689593][ T3550] binder: Bad value for 'defcontext' [ 78.841972][ T3571] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 78.893430][ T3576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 78.968550][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 78.968567][ T36] audit: type=1400 audit(1750825612.330:474): avc: denied { getopt } for pid=3585 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.084288][ T3614] 9pnet_fd: p9_fd_create_unix (3614): problem connecting socket: ./file0: -111 [ 79.110766][ T36] audit: type=1326 audit(1750825612.470:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.2.992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f120fd8e929 code=0x0 [ 79.162224][ T3620] /dev/rnullb0: Can't lookup blockdev [ 79.780309][ T3661] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.828129][ T3670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.372882][ T36] audit: type=1400 audit(1750825613.740:476): avc: denied { accept } for pid=3713 comm="syz.1.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.622736][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 80.638621][ T3731] : renamed from batadv_slave_1 (while UP) [ 80.644910][ T36] audit: type=1400 audit(1750825614.000:477): avc: denied { ioctl } for pid=3730 comm="syz.3.1032" path="socket:[19031]" dev="sockfs" ino=19031 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.687901][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 81.046199][ T36] audit: type=1400 audit(1750825614.410:478): avc: denied { shutdown } for pid=3786 comm="syz.3.1053" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.139021][ T36] audit: type=1400 audit(1750825614.500:479): avc: denied { create } for pid=3799 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 81.268714][ T3809] overlayfs: failed to clone upperpath [ 81.537353][ T3849] overlayfs: failed to clone upperpath [ 81.842532][ T3855] netlink: 'syz.2.1079': attribute type 4 has an invalid length. [ 82.127003][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.132556][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.140288][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.145794][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.151285][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.156712][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.162186][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.167746][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.173376][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.178920][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.184441][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.189957][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.195455][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.200949][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.206447][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.211928][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.217604][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.223317][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.228754][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.234245][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.239683][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.245188][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.250670][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.256341][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.261818][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.267229][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.272690][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.278109][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.283567][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.289108][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.294574][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.300003][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.305483][ T3870] /dev/rnullb0: Can't lookup blockdev [ 82.854348][ T3921] overlayfs: failed to clone upperpath [ 82.902652][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 83.517867][ T3959] bpf: Bad value for 'mode' [ 83.522587][ T3959] bpf: Bad value for 'mode' [ 83.527175][ T3959] bpf: Bad value for 'mode' [ 83.531762][ T3959] bpf: Bad value for 'mode' [ 83.536362][ T3959] bpf: Bad value for 'mode' [ 83.540906][ T3959] bpf: Bad value for 'mode' [ 83.545546][ T3959] bpf: Bad value for 'mode' [ 83.550094][ T3959] bpf: Bad value for 'mode' [ 83.554677][ T3959] bpf: Bad value for 'mode' [ 83.559222][ T3959] bpf: Bad value for 'mode' [ 83.563801][ T3959] bpf: Bad value for 'mode' [ 83.568375][ T3959] bpf: Bad value for 'mode' [ 84.571881][ T4007] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 84.581543][ T36] audit: type=1400 audit(1750825617.950:480): avc: denied { relabelto } for pid=4006 comm="syz.3.1131" name="file0" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 84.582181][ T4007] overlayfs: failed to clone upperpath [ 84.608019][ T36] audit: type=1400 audit(1750825617.950:481): avc: denied { associate } for pid=4006 comm="syz.3.1131" name="file0" dev="tmpfs" ino=1502 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 84.651945][ T4009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=4009 comm=syz.3.1132 [ 84.872974][ T36] audit: type=1400 audit(1750825618.240:482): avc: denied { associate } for pid=4032 comm="syz.2.1140" name="kvm" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 85.284733][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 85.434649][ T4069] /dev/sg0: Can't lookup blockdev [ 85.830405][ T36] audit: type=1400 audit(1750825619.190:483): avc: denied { create } for pid=4072 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.865630][ T4075] netlink: 'syz.2.1154': attribute type 4 has an invalid length. [ 86.093651][ T36] audit: type=1326 audit(1750825619.430:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21698e929 code=0x7fc00000 [ 86.124494][ T4088] tmpfs: Unknown parameter 'ËÉ>âœy9é§5m*²1Z.)sQeÍþÕ®±LË#ßü\Ok“ÅÉ·¯†AÃÑ ýÁO^æ' [ 86.143840][ T4089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4089 comm=syz.1.1158 [ 86.771674][ T36] audit: type=1400 audit(1750825620.140:485): avc: denied { read } for pid=4129 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.792145][ T36] audit: type=1400 audit(1750825620.160:486): avc: denied { append } for pid=4129 comm="syz.3.1176" name="rnullb0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 86.972961][ T36] audit: type=1400 audit(1750825620.340:487): avc: denied { map } for pid=4131 comm="syz.1.1177" path="socket:[18397]" dev="sockfs" ino=18397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.658209][ T4182] overlayfs: failed to clone upperpath [ 88.916450][ T36] audit: type=1326 audit(1750825622.280:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f120fd8e929 code=0x0 [ 90.745069][ T4354] cgroup: Need name or subsystem set [ 90.943651][ T4381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'. [ 92.178966][ T4454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4454 comm=syz.1.1288 [ 92.191558][ T4454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4454 comm=syz.1.1288 [ 92.461602][ T4486] process 'syz.2.1299' launched './file1' with NULL argv: empty string added [ 92.511918][ T4499] 9pnet_fd: p9_fd_create_tcp (4499): problem connecting socket to 127.0.0.1 [ 92.598856][ T4514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4514 comm=syz.3.1309 [ 92.996281][ T4533] 9pnet_fd: Insufficient options for proto=fd [ 93.114908][ T4558] overlayfs: missing 'lowerdir' [ 93.147431][ T4562] overlay: ./file0 is not a directory [ 93.153816][ T36] audit: type=1326 audit(1750825626.510:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.1.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b898e929 code=0x7fc00000 [ 93.730118][ T4598] overlayfs: failed to clone upperpath [ 93.981294][ T36] audit: type=1326 audit(1750825627.340:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120fd8e929 code=0x7fc00000 [ 94.038583][ T36] audit: type=1326 audit(1750825627.340:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f120fd8e929 code=0x7fc00000 [ 94.547185][ T4638] fuse: Bad value for 'group_id' [ 94.552680][ T4638] fuse: Bad value for 'group_id' [ 94.612408][ T4639] virtiofs: Unknown parameter './binderfs/binder1' [ 95.351008][ T36] audit: type=1400 audit(1750825628.710:492): avc: denied { mounton } for pid=4653 comm="syz.0.1362" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.351059][ T4654] overlay: filesystem on ./bus is read-only [ 95.931308][ T4670] overlayfs: failed to resolve './file1/file0': -13 [ 96.645962][ T36] audit: type=1400 audit(1750825630.010:493): avc: denied { getopt } for pid=4698 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.787072][ T4708] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 96.883612][ T36] audit: type=1326 audit(1750825630.250:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ce78e929 code=0x0 [ 96.933658][ T36] audit: type=1326 audit(1750825630.300:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.0.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ce78e929 code=0x0 [ 97.363085][ T4745] tipc: MTU too low for tipc bearer [ 98.303278][ T4823] overlayfs: failed to resolve './file0': -2 [ 98.333129][ T36] audit: type=1400 audit(1750825631.700:496): avc: denied { sys_nice } for pid=4828 comm="syz.1.1427" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 98.398512][ T4833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.946889][ T4853] tipc: Enabling of bearer rejected, failed to enable media [ 99.343240][ T36] audit: type=1400 audit(1750825632.710:497): avc: denied { execute_no_trans } for pid=4860 comm="syz.3.1438" path="/324/file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.502062][ T4882] 9pnet_fd: Insufficient options for proto=fd [ 99.520000][ T36] audit: type=1400 audit(1750825632.880:498): avc: denied { connect } for pid=4883 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.175132][ T4909] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1458'. [ 100.295961][ T4949] tmpfs: Unknown parameter 'indo64' [ 100.301810][ T4950] tmpfs: Unknown parameter 'indo64' [ 100.850656][ T36] audit: type=1400 audit(1750825634.210:499): avc: denied { map } for pid=4976 comm="syz.3.1481" path="socket:[22725]" dev="sockfs" ino=22725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.940359][ T36] audit: type=1400 audit(1750825634.240:500): avc: denied { read } for pid=4976 comm="syz.3.1481" path="socket:[22725]" dev="sockfs" ino=22725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.311609][ T36] audit: type=1326 audit(1750825634.680:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.3.1493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21698e929 code=0x0 [ 101.712046][ T5028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1498'. [ 101.768213][ T36] audit: type=1400 audit(1750825635.130:502): avc: denied { map } for pid=5031 comm="syz.0.1499" path="socket:[21913]" dev="sockfs" ino=21913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.908476][ T5049] /dev/rnullb0: Can't lookup blockdev [ 101.924468][ T5052] overlayfs: missing 'workdir' [ 102.048764][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 102.084764][ T5065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=5065 comm=syz.1.1508 [ 102.125921][ T5064] 9p: Unknown access argument Š: -22 [ 102.747991][ T5113] tipc: Cannot configure node identity twice [ 103.376807][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 103.386425][ T5152] overlayfs: failed to clone upperpath [ 103.411003][ T36] audit: type=1400 audit(1750825636.770:503): avc: denied { create } for pid=5155 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.768075][ T5192] tipc: Can't bind to reserved service type 0 [ 103.977792][ T36] audit: type=1400 audit(1750825637.340:504): avc: denied { append } for pid=5252 comm="syz.0.1574" name="file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.006300][ T36] audit: type=1400 audit(1750825637.340:505): avc: denied { ioctl } for pid=5252 comm="syz.0.1574" path="/439/file0" dev="tmpfs" ino=2391 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.031029][ T36] audit: type=1326 audit(1750825637.380:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.1575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1ce78e929 code=0x0 [ 104.034595][ T5261] overlayfs: failed to clone upperpath [ 104.876443][ T5333] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1602'. [ 104.929057][ T36] audit: type=1400 audit(1750825638.290:507): avc: denied { getopt } for pid=5340 comm="syz.0.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.008069][ T5343] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 105.017545][ T36] audit: type=1400 audit(1750825638.380:508): avc: denied { relabelto } for pid=5342 comm="syz.3.1606" name="file0" dev="tmpfs" ino=2009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 105.044391][ T36] audit: type=1400 audit(1750825638.380:509): avc: denied { associate } for pid=5342 comm="syz.3.1606" name="file0" dev="tmpfs" ino=2009 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 105.531718][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 105.551726][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 105.572773][ T36] audit: type=1400 audit(1750825638.940:510): avc: denied { create } for pid=5365 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.687790][ T36] audit: type=1400 audit(1750825639.050:511): avc: denied { create } for pid=5377 comm="syz.2.1619" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.719057][ T36] audit: type=1400 audit(1750825639.050:512): avc: denied { write } for pid=5377 comm="syz.2.1619" name="file0" dev="tmpfs" ino=1640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.720897][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 105.758674][ T5387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5387 comm=syz.3.1622 [ 106.775120][ T5483] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1652'. [ 107.004611][ T5492] cgroup: fork rejected by pids controller in /syz1 [ 107.254558][ T5763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1669'. [ 107.263561][ T5763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1669'. [ 107.272517][ T5763] netlink: 'syz.0.1669': attribute type 6 has an invalid length. [ 107.280229][ T5763] netlink: 'syz.0.1669': attribute type 5 has an invalid length. [ 107.288166][ T5763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1669'. [ 107.348675][ T5775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1674'. [ 107.869188][ T5788] netlink: 'syz.1.1679': attribute type 4 has an invalid length. [ 108.558617][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 108.558633][ T36] audit: type=1400 audit(1750825641.920:517): avc: denied { read } for pid=5807 comm="syz.2.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.629009][ T5839] overlayfs: failed to clone upperpath [ 109.629009][ T5838] overlayfs: failed to clone upperpath [ 110.113186][ T36] audit: type=1400 audit(1750825643.480:518): avc: denied { checkpoint_restore } for pid=5895 comm="syz.1.1717" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.860061][ T5930] /dev/rnullb0: Can't lookup blockdev [ 112.350598][ T6142] fuse: Unknown parameter 'm00006' [ 112.628182][ T6147] overlayfs: failed to clone upperpath [ 113.003518][ T6175] fuse: Unknown parameter '' [ 113.154785][ T6199] fuse: Unknown parameter 'ÿÿ01777777777777777777777' [ 113.205840][ T6218] cgroup: Unknown subsys name '#' [ 113.219280][ T36] audit: type=1400 audit(1750825646.580:519): avc: denied { listen } for pid=6219 comm="syz.2.1783" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.016182][ T6298] overlayfs: failed to clone lowerpath [ 116.052499][ T36] audit: type=1400 audit(1750825649.420:520): avc: denied { read } for pid=6372 comm="syz.1.1827" name="/" dev="configfs" ino=1437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.108476][ T36] audit: type=1400 audit(1750825649.420:521): avc: denied { open } for pid=6372 comm="syz.1.1827" path="/" dev="configfs" ino=1437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.683167][ T304] tipc: Subscription rejected, illegal request [ 117.083389][ T6422] /dev/rnullb0: Can't lookup blockdev [ 117.242374][ T6440] tmpfs: Unknown parameter 'noswip' [ 117.713372][ T6449] /dev/rnullb0: Can't lookup blockdev [ 117.807535][ T6467] fuse: Bad value for 'group_id' [ 117.817004][ T6467] fuse: Bad value for 'group_id' [ 118.173130][ T36] audit: type=1400 audit(1750825651.540:522): avc: denied { write } for pid=307 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25631 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.764533][ T6512] tipc: Started in network mode [ 118.769424][ T6512] tipc: Node identity , cluster identity 3142 [ 118.775879][ T6512] tipc: Failed to set node id, please configure manually [ 118.782962][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 118.820856][ T36] audit: type=1400 audit(1750825652.180:523): avc: denied { getopt } for pid=6525 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.844472][ T36] audit: type=1326 audit(1750825652.210:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.1885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f120fd8e929 code=0x0 [ 118.878504][ T6542] syz.1.1888(6542): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 119.749644][ T6606] 9pnet_fd: Insufficient options for proto=fd [ 119.775026][ T36] audit: type=1326 audit(1750825653.140:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.2.1910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f120fd8e929 code=0x0 [ 119.877077][ T6617] TCP: TCP_TX_DELAY enabled [ 120.338403][ T36] audit: type=1400 audit(1750825653.700:526): avc: denied { mounton } for pid=6619 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 120.400160][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.408909][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.416355][ T6619] bridge_slave_0: entered allmulticast mode [ 120.423883][ T6619] bridge_slave_0: entered promiscuous mode [ 120.430477][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.444231][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.451616][ T6619] bridge_slave_1: entered allmulticast mode [ 120.457992][ T6619] bridge_slave_1: entered promiscuous mode [ 120.500885][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.507950][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.515324][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.520053][ T36] audit: type=1400 audit(1750825653.880:527): avc: denied { shutdown } for pid=6636 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.522370][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.560987][ T13] bridge_slave_1: left allmulticast mode [ 120.569476][ T13] bridge_slave_1: left promiscuous mode [ 120.575811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.585188][ T13] bridge_slave_0: left allmulticast mode [ 120.590848][ T13] bridge_slave_0: left promiscuous mode [ 120.596622][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.620836][ T6647] overlayfs: failed to clone upperpath [ 120.626872][ T6647] overlay: Unknown parameter 'smackfsdef' [ 120.685067][ T6619] veth0_vlan: entered promiscuous mode [ 120.696567][ T6650] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1920'. [ 120.708686][ T6619] veth1_macvtap: entered promiscuous mode [ 120.716511][ T13] tipc: Left network mode [ 120.722948][ T13] veth1_macvtap: left promiscuous mode [ 120.723171][ T36] audit: type=1400 audit(1750825654.090:528): avc: denied { map } for pid=6649 comm="syz.2.1920" path="socket:[26710]" dev="sockfs" ino=26710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.728529][ T13] veth0_vlan: left promiscuous mode [ 120.858786][ T36] audit: type=1400 audit(1750825654.220:529): avc: denied { mounton } for pid=6619 comm="syz-executor" path="/root/syzkaller.Dhf5OF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 120.989749][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.997052][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.004243][ T6677] bridge_slave_0: entered allmulticast mode [ 121.010546][ T6677] bridge_slave_0: entered promiscuous mode [ 121.018641][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.025766][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.033412][ T6677] bridge_slave_1: entered allmulticast mode [ 121.039604][ T6677] bridge_slave_1: entered promiscuous mode [ 121.081734][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.088799][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.096125][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.103181][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.122634][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.129935][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.139667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.146745][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.157758][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.164842][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.189944][ T6677] veth0_vlan: entered promiscuous mode [ 121.200279][ T6677] veth1_macvtap: entered promiscuous mode [ 121.243947][ T6694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 121.243984][ T6694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:4 [ 121.264585][ T36] audit: type=1400 audit(1750825654.630:530): avc: denied { read write } for pid=6695 comm="syz.4.1934" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.298676][ T36] audit: type=1400 audit(1750825654.630:531): avc: denied { open } for pid=6695 comm="syz.4.1934" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.323230][ T36] audit: type=1400 audit(1750825654.630:532): avc: denied { ioctl } for pid=6695 comm="syz.4.1934" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.846939][ T6738] rust_binder: Write failure EFAULT in pid:9 [ 121.887602][ T6741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.941411][ T6744] SELinux: security_context_str_to_sid (sytem_uÝGй$»ÙÁº›!®aVj¤Õ êµùOõuv¥Ñ5ΣˆÙ[€Áà†ŠÌ¬ÐÈH9`$Å‘¾NÍyÈžÆôõù|yéFî÷y&`[SçÁõ××ÐèâšQf|úÜ™‰‰ïŠp) failed with errno=-22 [ 121.998160][ T6746] rust_binder: Error while translating object. [ 121.998199][ T6746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.008791][ T6746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 122.102519][ T6750] binder: Unknown parameter '18446744073709551615' [ 122.137652][ T6755] binder: Unknown parameter 'statW¹s?or?l' [ 122.198608][ T36] audit: type=1400 audit(1750825655.560:533): avc: denied { write } for pid=6765 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.218641][ T36] audit: type=1400 audit(1750825655.580:534): avc: denied { map } for pid=6765 comm="syz.1.1958" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.363560][ T6776] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1962'. [ 122.373341][ T6776] rust_binder: Error while translating object. [ 122.373364][ T6776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 122.379525][ T6776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:45 [ 122.428532][ T6786] Invalid ELF header len 16 [ 122.442179][ T36] audit: type=1400 audit(1750825655.790:535): avc: denied { module_load } for pid=6784 comm="syz.0.1965" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 122.641243][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.802383][ T9] usb 2-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 122.813730][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 122.825892][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25344, setting to 1024 [ 122.837299][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.850659][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 122.860714][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.871666][ T9] usb 2-1: config 0 descriptor?? [ 123.279493][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.286747][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.293640][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.300592][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.307510][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.314458][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.321359][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.328241][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x7 [ 123.335189][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.342098][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.348954][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.355870][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x6 [ 123.362846][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.369702][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.376631][ T9] apple 0003:05AC:0245.0008: unknown main item tag 0x0 [ 123.383579][ T9] apple 0003:05AC:0245.0008: item fetching failed at offset 37/41 [ 123.392193][ T9] apple 0003:05AC:0245.0008: parse failed [ 123.397952][ T9] apple 0003:05AC:0245.0008: probe with driver apple failed with error -22 [ 123.426851][ T36] audit: type=1400 audit(1750825656.790:536): avc: denied { create } for pid=6843 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 123.449659][ T36] audit: type=1326 audit(1750825656.810:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.0.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ce78e929 code=0x0 [ 123.481836][ T305] usb 2-1: USB disconnect, device number 5 [ 124.001986][ T6859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 124.032631][ T36] audit: type=1400 audit(1750825657.400:538): avc: denied { accept } for pid=6867 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 124.073699][ T6873] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1993'. [ 124.083069][ T6873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1993'. [ 124.105275][ T6878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.105299][ T6878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 124.137996][ T6882] rust_binder: Write failure EFAULT in pid:72 [ 124.194964][ T36] audit: type=1400 audit(1750825657.560:539): avc: denied { read } for pid=6888 comm="syz.1.1999" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.246793][ T6889] overlayfs: failed to resolve './file0': -2 [ 124.421806][ T6911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.421841][ T6911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 124.494883][ T6926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 125.123280][ T6940] overlayfs: failed to clone upperpath [ 125.456191][ T6953] binder: Bad value for 'max' [ 125.527253][ T6955] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 125.840688][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 126.141268][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 126.205022][ T6998] overlayfs: failed to clone upperpath [ 126.317263][ T9] usb 2-1: No LPM exit latency info found, disabling LPM. [ 126.325142][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 126.336243][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.352715][ T9] usb 2-1: string descriptor 0 read error: -22 [ 126.358947][ T9] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 126.381281][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.390753][ T6979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.603535][ T6979] binder: Bad value for 'stats' [ 126.609947][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 126.616005][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 126.624606][ T9] usb 2-1: USB disconnect, device number 6 [ 127.246450][ T7045] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 127.327650][ T7055] netlink: 'syz.1.2060': attribute type 4 has an invalid length. [ 127.397070][ T7055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 127.397097][ T7055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:138 [ 127.726530][ T7076] overlayfs: missing 'workdir' [ 128.138388][ T7103] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 128.316273][ T7110] overlayfs: failed to clone upperpath [ 129.203016][ T7153] tmpfs: Bad value for 'uid' [ 129.207672][ T7153] tmpfs: Bad value for 'uid' [ 129.966646][ T7178] binder: Unknown parameter 'sÝa' [ 129.975288][ T7179] rust_binder: 7167 RLIMIT_NICE not set [ 130.014481][ T7186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2101'. [ 130.266589][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 130.748021][ T7211] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 130.805457][ T7217] binder: Bad value for 'max' [ 130.827155][ T7220] rust_binder: Write failure EINVAL in pid:41 [ 131.171267][ T307] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.237424][ T7251] veth0_vlan: left promiscuous mode [ 131.341285][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 131.347527][ T307] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 131.357387][ T307] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 131.367944][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.377035][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 131.385048][ T307] usb 2-1: SerialNumber: syz [ 131.390439][ T7230] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.398551][ T7230] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.611035][ T307] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 131.619636][ T307] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 131.626745][ T307] usb 2-1: USB disconnect, device number 7 [ 131.654416][ T7256] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2125'. [ 131.663941][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 131.663961][ T36] audit: type=1400 audit(2000000001.310:558): avc: denied { map } for pid=7255 comm="syz.0.2125" path="socket:[28326]" dev="sockfs" ino=28326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.794162][ T7267] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2128'. [ 131.811669][ T7267] fuse: Bad value for 'user_id' [ 131.816790][ T7267] fuse: Bad value for 'user_id' [ 131.833648][ T7278] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2131'. [ 131.870110][ T7281] batadv_slave_1: entered promiscuous mode [ 131.878922][ T7281] batadv_slave_1: left promiscuous mode [ 131.949040][ T7295] overlayfs: failed to clone upperpath [ 132.131855][ T7300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.314425][ T36] audit: type=1400 audit(2000000001.960:559): avc: denied { write } for pid=7309 comm="syz.1.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.576455][ T7322] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 133.138039][ T36] audit: type=1400 audit(2000000002.780:560): avc: denied { ioctl } for pid=7337 comm="syz.0.2152" path="socket:[29421]" dev="sockfs" ino=29421 ioctlcmd=0xaea0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.363049][ T7379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.363343][ T7379] rust_binder: Error in use_page_slow: ESRCH [ 133.380337][ T7379] rust_binder: use_range failure ESRCH [ 133.387203][ T7379] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 133.395064][ T7379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 133.403358][ T7379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 133.421373][ T7385] rust_binder: Error in use_page_slow: ESRCH [ 133.431213][ T7385] rust_binder: use_range failure ESRCH [ 133.437259][ T7385] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 133.443540][ T7385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 133.444861][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.456963][ T7385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 133.460644][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.483751][ T7376] bridge_slave_0: entered allmulticast mode [ 133.489918][ T7376] bridge_slave_0: entered promiscuous mode [ 133.498442][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.505516][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.508024][ T7387] fuse: Bad value for 'user_id' [ 133.512815][ T7376] bridge_slave_1: entered allmulticast mode [ 133.518653][ T7387] fuse: Bad value for 'user_id' [ 133.523879][ T7376] bridge_slave_1: entered promiscuous mode [ 133.586537][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.593609][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.600919][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.607987][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.626250][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.633723][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.643250][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.650288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.721852][ T7404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.722825][ T7404] rust_binder: Error in use_page_slow: ESRCH [ 133.729358][ T7404] rust_binder: use_range failure ESRCH [ 133.735444][ T7404] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 133.740970][ T7404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 133.748924][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:204 [ 133.912204][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.928293][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.945191][ T7411] __vm_enough_memory: pid: 7411, comm: syz.4.2166, bytes: 70373039144960 not enough memory for the allocation [ 133.945576][ T12] bridge_slave_1: left allmulticast mode [ 133.969866][ T12] bridge_slave_1: left promiscuous mode [ 133.978221][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.986490][ T12] bridge_slave_0: left allmulticast mode [ 133.992307][ T12] bridge_slave_0: left promiscuous mode [ 133.997951][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.066478][ T7376] veth0_vlan: entered promiscuous mode [ 134.077027][ T7376] veth1_macvtap: entered promiscuous mode [ 134.135395][ T7424] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.145352][ T7426] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.168671][ T36] audit: type=1400 audit(2000000003.810:561): avc: denied { accept } for pid=7429 comm="syz.0.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 134.189823][ T12] tipc: Left network mode [ 134.231231][ T36] audit: type=1404 audit(2000000003.870:562): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 134.250900][ T36] audit: type=1400 audit(2000000003.890:563): avc: denied { ioctl } for pid=7419 comm="syz.1.2169" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 134.277114][ T36] audit: type=1400 audit(2000000003.890:564): avc: denied { create } for pid=7419 comm="syz.1.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 134.297235][ T36] audit: type=1400 audit(2000000003.890:565): avc: denied { write } for pid=7419 comm="syz.1.2169" name="icmp6" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 134.324632][ T1104] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.332265][ T36] audit: type=1400 audit(2000000003.890:566): avc: denied { read write } for pid=7419 comm="syz.1.2169" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 134.355402][ T36] audit: type=1400 audit(2000000003.890:567): avc: denied { mounton } for pid=7438 comm="syz.4.2175" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 134.380590][ T12] veth1_macvtap: left promiscuous mode [ 134.386225][ T12] veth0_vlan: left promiscuous mode [ 135.142837][ T7552] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 135.181221][ T7552] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 135.189379][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.251590][ T7552] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 135.259432][ T7552] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 135.291451][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.311674][ T7552] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 135.319509][ T7552] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 135.351850][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.368500][ T7552] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 135.376910][ T7552] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 135.393072][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.408094][ T7552] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 135.419063][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.440596][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.460107][ T7552] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.978607][ T7615] : renamed from bond_slave_0 [ 136.416581][ T7670] syz.1.2255 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 136.740258][ T36] kauditd_printk_skb: 537 callbacks suppressed [ 136.740277][ T36] audit: type=1400 audit(2000000006.376:1096): avc: denied { create } for pid=7680 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 136.935343][ T36] audit: type=1400 audit(2000000006.576:1097): avc: denied { read write } for pid=6619 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.959783][ T36] audit: type=1400 audit(2000000006.586:1098): avc: denied { read write } for pid=6619 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.985087][ T36] audit: type=1400 audit(2000000006.596:1099): avc: denied { read write } for pid=7684 comm="syz.1.2261" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 137.009067][ T36] audit: type=1400 audit(2000000006.596:1100): avc: denied { create } for pid=7684 comm="syz.1.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 137.029140][ T36] audit: type=1400 audit(2000000006.596:1101): avc: denied { create } for pid=7684 comm="syz.1.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 137.035619][ T7689] can0: slcan on ttyS3. [ 137.049597][ T36] audit: type=1400 audit(2000000006.596:1102): avc: denied { read write } for pid=7684 comm="syz.1.2261" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 137.075375][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.076914][ T36] audit: type=1400 audit(2000000006.596:1103): avc: denied { mounton } for pid=7684 comm="syz.1.2261" path="/107/file0" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 137.083311][ T148] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 137.154868][ T7689] can0 (unregistered): slcan off ttyS3. [ 137.239118][ T7715] __nla_validate_parse: 58 callbacks suppressed [ 137.239136][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 137.309353][ T7708] futex_wake_op: syz.4.2271 tries to shift op by -1; fix this program [ 138.120477][ T7806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=7806 comm=syz.2.2305 [ 138.367847][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.485387][ T7855] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 140.431219][ T750] Bluetooth: hci0: command 0x1003 tx timeout [ 140.431225][ T749] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.741277][ T36] kauditd_printk_skb: 44460 callbacks suppressed [ 141.741293][ T36] audit: type=1400 audit(2000000017.388:43304): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.768966][ T36] audit: type=1400 audit(2000000017.388:43305): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.790321][ T36] audit: type=1400 audit(2000000017.388:43306): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.811664][ T36] audit: type=1400 audit(2000000017.388:43307): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.832969][ T36] audit: type=1400 audit(2000000017.388:43308): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.854293][ T36] audit: type=1400 audit(2000000017.388:43309): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.854473][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.875446][ T36] audit: type=1400 audit(2000000017.388:43310): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.881984][ T148] audit: audit_lost=758 audit_rate_limit=0 audit_backlog_limit=64 [ 141.902968][ T36] audit: type=1400 audit(2000000017.388:43311): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.752017][ T36] kauditd_printk_skb: 56403 callbacks suppressed [ 146.752034][ T36] audit: type=1400 audit(2000000022.398:99663): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.781049][ T36] audit: type=1400 audit(2000000022.398:99664): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.802451][ T36] audit: type=1400 audit(2000000022.398:99665): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.823758][ T36] audit: type=1400 audit(2000000022.398:99666): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.824564][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.845091][ T36] audit: type=1400 audit(2000000022.398:99667): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.851585][ T148] audit: audit_lost=776 audit_rate_limit=0 audit_backlog_limit=64 [ 146.872686][ T36] audit: type=1400 audit(2000000022.398:99668): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.880424][ T148] audit: backlog limit exceeded [ 146.901449][ T36] audit: type=1400 audit(2000000022.398:99669): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.590937][ T8067] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2396'. [ 151.761194][ T36] kauditd_printk_skb: 53139 callbacks suppressed [ 151.761212][ T36] audit: type=1400 audit(2000000027.398:152491): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.771664][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.795375][ T148] audit: audit_lost=883 audit_rate_limit=0 audit_backlog_limit=64 [ 151.803291][ T148] audit: backlog limit exceeded [ 151.808380][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.820755][ T148] audit: audit_lost=884 audit_rate_limit=0 audit_backlog_limit=64 [ 151.820927][ T6677] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.828851][ T36] audit: type=1400 audit(2000000027.398:152492): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.856435][ T148] audit: backlog limit exceeded [ 151.861470][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.951235][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 152.971663][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 152.986437][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.001299][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.027395][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.040650][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.063365][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.078466][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.092704][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 153.107259][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8149 comm=syz.4.2428 [ 156.771629][ T148] audit_log_start: 27480 callbacks suppressed [ 156.771646][ T148] audit: audit_backlog=63 > audit_backlog_limit=64 [ 156.771648][ T36] audit: type=1400 audit(2000000032.408:177187): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.771671][ T36] audit: type=1400 audit(2000000032.408:177188): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.777721][ T148] audit: audit_lost=1815 audit_rate_limit=0 audit_backlog_limit=64 [ 156.777735][ T148] audit: backlog limit exceeded [ 156.778281][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.787090][ T8279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.830452][ T148] audit: audit_lost=1816 audit_rate_limit=0 audit_backlog_limit=64 [ 156.848637][ T36] audit: type=1400 audit(2000000032.408:177189): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.852911][ T148] audit: backlog limit exceeded [ 158.635533][ T8362] futex_wake_op: syz.0.2499 tries to shift op by -1; fix this program [ 158.643967][ T8363] futex_wake_op: syz.0.2499 tries to shift op by -1; fix this program [ 158.652929][ T8362] selinux_netlink_send: 55 callbacks suppressed [ 158.652945][ T8362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8362 comm=syz.0.2499 [ 158.750295][ T8379] >: renamed from veth0_vlan (while UP) [ 158.883629][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.895784][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.288843][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2516'. [ 160.912173][ T749] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.912178][ T750] Bluetooth: hci0: command 0x1003 tx timeout [ 161.012448][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8509 comm=syz.0.2551 [ 161.782251][ T36] kauditd_printk_skb: 41022 callbacks suppressed [ 161.782268][ T36] audit: type=1400 audit(2000000037.417:217472): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.788678][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.832413][ T36] audit: type=1400 audit(2000000037.427:217473): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.836595][ T148] audit: audit_lost=2064 audit_rate_limit=0 audit_backlog_limit=64 [ 161.855581][ T8557] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.861980][ T148] audit: backlog limit exceeded [ 161.873195][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.878121][ T8557] audit: audit_lost=2065 audit_rate_limit=0 audit_backlog_limit=64 [ 161.879792][ T148] audit: audit_lost=2066 audit_rate_limit=0 audit_backlog_limit=64 [ 161.892250][ T36] audit: type=1400 audit(2000000037.427:217474): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.823588][ T8608] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.832150][ T304] bridge_slave_1: left allmulticast mode [ 164.838209][ T304] bridge_slave_1: left promiscuous mode [ 164.844416][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.855823][ T304] bridge_slave_0: left allmulticast mode [ 164.861811][ T304] bridge_slave_0: left promiscuous mode [ 164.867913][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.103682][ T304] veth1_macvtap: left promiscuous mode [ 166.792901][ T36] kauditd_printk_skb: 52687 callbacks suppressed [ 166.792918][ T36] audit: type=1400 audit(2000000042.427:267811): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.824955][ T36] audit: type=1400 audit(2000000042.437:267812): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.846429][ T36] audit: type=1400 audit(2000000042.437:267813): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.867837][ T36] audit: type=1400 audit(2000000042.437:267814): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.868120][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.889121][ T36] audit: type=1400 audit(2000000042.437:267815): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.895841][ T148] audit: audit_lost=2850 audit_rate_limit=0 audit_backlog_limit=64 [ 166.916846][ T36] audit: type=1400 audit(2000000042.437:267816): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.924783][ T148] audit: backlog limit exceeded [ 166.945793][ T36] audit: type=1400 audit(2000000042.437:267817): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.803502][ T36] kauditd_printk_skb: 55940 callbacks suppressed [ 171.803520][ T36] audit: type=1400 audit(2000000047.436:323710): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.831525][ T36] audit: type=1400 audit(2000000047.446:323711): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.853072][ T36] audit: type=1400 audit(2000000047.446:323712): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.874701][ T36] audit: type=1400 audit(2000000047.446:323713): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.884792][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.896039][ T36] audit: type=1400 audit(2000000047.446:323714): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.902521][ T148] audit: audit_lost=2867 audit_rate_limit=0 audit_backlog_limit=64 [ 171.923628][ T36] audit: type=1400 audit(2000000047.446:323715): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.931422][ T148] audit: backlog limit exceeded [ 171.952670][ T36] audit: type=1400 audit(2000000047.446:323716): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.814056][ T36] kauditd_printk_skb: 58312 callbacks suppressed [ 176.814072][ T36] audit: type=1400 audit(2000000052.445:380817): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.841985][ T36] audit: type=1400 audit(2000000052.455:380818): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.848095][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.863364][ T36] audit: type=1400 audit(2000000052.455:380819): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.870052][ T148] audit: audit_lost=3272 audit_rate_limit=0 audit_backlog_limit=64 [ 176.890944][ T36] audit: type=1400 audit(2000000052.455:380820): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.898733][ T148] audit: backlog limit exceeded [ 176.919934][ T36] audit: type=1400 audit(2000000052.455:380821): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.925398][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.945843][ T36] audit: type=1400 audit(2000000052.455:380822): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.824706][ T36] kauditd_printk_skb: 58170 callbacks suppressed [ 181.824723][ T36] audit: type=1400 audit(2000000057.465:437788): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.852420][ T36] audit: type=1400 audit(2000000057.465:437789): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.873859][ T36] audit: type=1400 audit(2000000057.465:437790): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.895205][ T36] audit: type=1400 audit(2000000057.465:437791): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.916614][ T36] audit: type=1400 audit(2000000057.465:437792): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.937976][ T36] audit: type=1400 audit(2000000057.465:437793): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.938314][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.959441][ T36] audit: type=1400 audit(2000000057.465:437794): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.966015][ T148] audit: audit_lost=3675 audit_rate_limit=0 audit_backlog_limit=64 [ 181.986949][ T36] audit: type=1400 audit(2000000057.465:437795): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.289707][ T304] bridge_slave_1: left allmulticast mode [ 183.295835][ T304] bridge_slave_1: left promiscuous mode [ 183.301840][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.310188][ T304] bridge_slave_0: left allmulticast mode [ 183.315993][ T304] bridge_slave_0: left promiscuous mode [ 183.321626][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.506149][ T304] veth1_macvtap: left promiscuous mode [ 183.511883][ T304] veth0_vlan: left promiscuous mode [ 184.238283][ T304] bridge_slave_1: left allmulticast mode [ 184.244253][ T304] bridge_slave_1: left promiscuous mode [ 184.250014][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.257691][ T304] bridge_slave_0: left allmulticast mode [ 184.263611][ T304] bridge_slave_0: left promiscuous mode [ 184.269852][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.278275][ T304] bridge_slave_1: left allmulticast mode [ 184.284400][ T304] bridge_slave_1: left promiscuous mode [ 184.290536][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.298671][ T304] bridge_slave_0: left allmulticast mode [ 184.304660][ T304] bridge_slave_0: left promiscuous mode [ 184.310862][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.727542][ T304] veth1_macvtap: left promiscuous mode [ 184.733270][ T304] veth0_vlan: left promiscuous mode [ 184.738765][ T304] veth1_macvtap: left promiscuous mode [ 184.744256][ T304] veth0_vlan: left promiscuous mode [ 186.835299][ T36] kauditd_printk_skb: 54762 callbacks suppressed [ 186.835318][ T36] audit: type=1400 audit(2000000062.464:490712): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.863067][ T36] audit: type=1400 audit(2000000062.474:490713): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.884479][ T36] audit: type=1400 audit(2000000062.474:490714): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.905718][ T36] audit: type=1400 audit(2000000062.474:490715): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.929574][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.936174][ T36] audit: type=1400 audit(2000000062.474:490716): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.936727][ T148] audit: audit_lost=4291 audit_rate_limit=0 audit_backlog_limit=64 [ 186.957477][ T36] audit: type=1400 audit(2000000062.474:490717): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.965183][ T148] audit: backlog limit exceeded [ 186.986576][ T36] audit: type=1400 audit(2000000062.474:490718): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.845903][ T36] kauditd_printk_skb: 57701 callbacks suppressed [ 191.845919][ T36] audit: type=1400 audit(2000000067.474:548372): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.873654][ T36] audit: type=1400 audit(2000000067.484:548373): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.895007][ T36] audit: type=1400 audit(2000000067.484:548374): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.919060][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.925572][ T148] audit: audit_lost=4308 audit_rate_limit=0 audit_backlog_limit=64 [ 191.933507][ T148] audit: backlog limit exceeded [ 191.938650][ T36] audit: type=1400 audit(2000000067.484:548375): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.960001][ T36] audit: type=1400 audit(2000000067.484:548376): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.960249][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.981132][ T36] audit: type=1400 audit(2000000067.484:548377): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0