last executing test programs: 2m40.906018212s ago: executing program 3 (id=35): r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) mmap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x7, 0x12, r0, 0x2e35e000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000600), 0x5, 0x10b100) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000700)={0x3, 0x0, 0x98, &(0x7f0000000640)={0x10000000, 0x200, 0x3}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "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"}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4097, 0x1001}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x4}], 0x3, 0x2100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m39.674698067s ago: executing program 3 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.649959797s ago: executing program 3 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x3601) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x45809000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.460255601s ago: executing program 3 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb000000004e2300010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104040, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 2m39.429206771s ago: executing program 3 (id=53): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/133, 0x85}, 0xbe7}], 0x1, 0x2, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="8bf9c333442d145a6a694ddaf5187a9516cf6edf46a03edb22e9", 0x1a}], 0x2) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000bc0)=0x54) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') faccessat2(r9, &(0x7f0000000040)='\x00', 0x1, 0x1300) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f00000006c0)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ec", 0x63}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12", 0xe7}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591ff336d948", 0x59}], 0x6}, 0x20000004) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) (async) close(r0) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r10, 0xe5441000) 2m39.345464363s ago: executing program 3 (id=58): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002040)=""/152, 0x98, 0xb9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2m39.276443874s ago: executing program 32 (id=58): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002040)=""/152, 0x98, 0xb9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2m15.013592879s ago: executing program 0 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000700)=[{}], 0x1}}], 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.97681726s ago: executing program 0 (id=259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x7ffff000) 2m14.125568096s ago: executing program 0 (id=263): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x4002) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x1001, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x2}) 2m14.036363618s ago: executing program 0 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@md0, r1, &(0x7f0000000140)={0x21, 0x9}) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x121a80) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ffbfffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 2m14.022482869s ago: executing program 0 (id=265): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xb}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}]}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) 2m13.900339051s ago: executing program 0 (id=268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0xfffffffffffffffe) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6c5", 0x2) 2m13.866491422s ago: executing program 33 (id=268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0xfffffffffffffffe) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6c5", 0x2) 2m11.924809519s ago: executing program 5 (id=299): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) getpgrp(r2) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (rerun: 64) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) 2m11.051612096s ago: executing program 5 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1001, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="341888"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, 0x0) write$binfmt_format(r2, &(0x7f0000000000)='0\x00', 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = eventfd(0xb) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) close_range(r5, r6, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2m10.88041334s ago: executing program 5 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r3, 0xffffa000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 2m10.752285972s ago: executing program 5 (id=324): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) finit_module(r2, 0x0, 0x1) r3 = getpid() syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = fcntl$dupfd(r0, 0x0, r5) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x40051) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080026bd7000ffdbdf256400000008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00\x00\x00\x00\x00@\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044057) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000740)={{r0}, r8, 0xa, @unused=[0x3, 0x9, 0x33, 0x1], @name="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"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) 2m9.910665449s ago: executing program 5 (id=341): r0 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='P', 0x1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000000)={0x10001, 0x240, 0x80, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 2m9.84066803s ago: executing program 5 (id=345): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x5350c0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001180)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x40, &(0x7f0000003a80)={[{@workdir={'workdir', 0x3d, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@verity_require}, {@metacopy_off}, {@nfs_export_on}, {@default_permissions}, {@nfs_export_off}, {@xino_auto}, {@xino_auto}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000100), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x35d75000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 2m9.799717401s ago: executing program 34 (id=345): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x5350c0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001180)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x40, &(0x7f0000003a80)={[{@workdir={'workdir', 0x3d, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@verity_require}, {@metacopy_off}, {@nfs_export_on}, {@default_permissions}, {@nfs_export_off}, {@xino_auto}, {@xino_auto}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000100), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x35d75000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 1m41.273220869s ago: executing program 1 (id=752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000800) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f0000000100)="4701010000000000007a5b6c1bedca5c3b493f3cbc13c05d032d6945d818178b6b6409c1c87f62e879e0dbbd0f1a82bb4a3874710cad44fba480e9b67ec264ac3577cfd01d54f1b011a9457487688898e0ae0ff3b15f5e043cca23") 1m41.18674622s ago: executing program 1 (id=756): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x18040, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x00\x00\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\xb1[\x17\xc7\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18T]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xd8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3\xb4\x8b\xfe[\xf5\xe6\x93\x02E\n\xe8\x00\x97:\x97-\x7f\xa0\xd1\xd6h\x00DH\n\xc2\xb2^\x00\x8c\xed\x11\t\x00J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9Ni\x18&5\x96\xea@\r\x14u\xcb\x9f\xfd\xe7\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xe8>\x01\x00+\xfa\xa9 \xe1U\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\x01\xf4\xda-L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXBk\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\t\xec\x10>\xc7{\x84\xb9\xbeB\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeaut\xfc\x88\xc8b\xd2\xf8\xfa\xd2\xe5\x8d\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4\xbb\xc2a\xbb\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\xfd\x9b\x00\x00\x00\x00\x00\a\x00'/752) 1m41.112380442s ago: executing program 1 (id=758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 1m41.112187272s ago: executing program 1 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000000)="1dbf3ebe", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x2b, 0x0, 0x101}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "0e3715", 0x1c, 0x3a, 0x1, @mcast2, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x7f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x8, 0x7}}}}}}}, 0x56) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x7fffffff, 0x8000000000000000, 0x4, 0xab7}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 1m40.988369274s ago: executing program 1 (id=762): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f00000000c0)={0x2, 0x9}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40485404, &(0x7f0000000180)={{0x3}}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, ',@{/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}, @exit_looper, @increfs_done], 0x0, 0x0, 0x0}) 1m40.962254475s ago: executing program 1 (id=763): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) socket(0x1, 0x800, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m40.923199816s ago: executing program 35 (id=763): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) socket(0x1, 0x800, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m5.061423167s ago: executing program 7 (id=1288): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 1m4.936279499s ago: executing program 7 (id=1289): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x20006000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ptrace$getregs(0xe, r3, 0x6a, &(0x7f0000000000)=""/213) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000200)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x21, 0x6, 0x0, 0x300, 0x4, 0x540001, r7}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @remote, 0x1, 0x6, 0x0, 0x500, 0x6, 0x2, r7}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x8, {0x0, 0x0, 0x0, 0x5, 0x4000020000000ffd, 0x0, 0x12, 0xfffffffe, 0x15, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099ce6dc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc061a74df2cfc06c89f3d9e234b30c50997d3bef409ff214a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162a430700000400", [0xfffffffffffffce8, 0x20000000000000a]}}) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) (async) close(0xffffffffffffffff) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r8, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.841919761s ago: executing program 7 (id=1290): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7fffffff, 0xffffffffffffffff, 'id0\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c0, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x194, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26e8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c40)={"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"}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.766717213s ago: executing program 7 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c6) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m4.708230814s ago: executing program 7 (id=1292): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) socket$inet6(0x2d, 0x2, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x1}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_USE_MFP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8885}, 0x44004) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000040)=""/66, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f00000000c0)=ANY=[@ANYBLOB="73746187a22c7b2e0364ec488a42ddacf82e6b733d676c6f62616c2c00"]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x800, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@clone_children}]}) mmap$binder(&(0x7f000028c000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffffffffff0) 1m4.681246294s ago: executing program 7 (id=1294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x9, 0x7fffffff, 0x5, 0x0, 0xe, "7e0d74261ab80f6dcd8e7edf75c2f314b48943"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x10, 0x6, 0x2, 0xc3e9, 0xd, 0xffffffffffffffff, 0x8f, 0x7, 0x6, 0x2, 0x1, 0x4, 0x7, 0x1, 0x8, 0x3], 0x6000, 0x410}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ddb900ef8cc55ea266edb0bf6f77a1c51059bc3b546f3fe7fad9bd952b36c78208", 0x21}], 0x1}}], 0x1, 0x8008801) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x4044081) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) 1m4.624261106s ago: executing program 36 (id=1294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x9, 0x7fffffff, 0x5, 0x0, 0xe, "7e0d74261ab80f6dcd8e7edf75c2f314b48943"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x10, 0x6, 0x2, 0xc3e9, 0xd, 0xffffffffffffffff, 0x8f, 0x7, 0x6, 0x2, 0x1, 0x4, 0x7, 0x1, 0x8, 0x3], 0x6000, 0x410}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ddb900ef8cc55ea266edb0bf6f77a1c51059bc3b546f3fe7fad9bd952b36c78208", 0x21}], 0x1}}], 0x1, 0x8008801) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x4044081) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) 36.2439394s ago: executing program 4 (id=1842): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x184002, &(0x7f0000000280)=ANY=[@ANYBLOB='memory_hugetlb_accounting,pids_localevents,subj_role=/dev/rnullb0\x00,rootcontext=unconfiVed_u,uid=', @ANYRESDEC=r0, @ANYBLOB=',smackfshat=}(,\x00']) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x307, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x6f631b4376e74f1c, {0x2, 0x4e21, @rand_addr=0x64010100}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) move_mount(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000dc0)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="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"], 0x388}, 0x1, 0x0, 0x0, 0x20000000}, 0x894) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="4e93a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="400e06000000000097055a1b177f74b310e7df9f9581a3103749aea7299e85510e2f02277fdcc836885e0b3f0c336dbb44fc1a12512a32aa79b46f00f5e0c058322a6bb2fcbe89adad480b3cfe658edb1df6776d82a7ff28bad43a07889c4a81422d5e4ed54ddb5ee204049b8fe6c78955b9c2ad6a06202f0c0cbff4f8d2454052eb06923ebd215dfdf8d5d983d99383fe75707d5b22d4de88b254b232fea45c8b8c0b8bbfd17bcb10f2a577e8eca1bdbddd2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "4196"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="00110c000000e5cd000000019000005b9ba53a5ad1d15c02ccb846539af3e17e2278b33a27dd02bd94ebe5cae6a25858910aeeb8659dccdf78247203c64af561510edbc6a821f1f38edf0501da5b3440"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, 0x0, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "851d"}, 0x0, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) (async) socket(0x28, 0x5, 0x0) 36.213744811s ago: executing program 4 (id=1843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="f07f0200", @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00d400000006001100ba00000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00ff03000006001100030000000800150005000000"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) close_range(r0, 0xffffffffffffffff, 0x0) 36.181103182s ago: executing program 4 (id=1844): futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000) 36.096320824s ago: executing program 4 (id=1845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x6, {0x10, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x1af3, 0x3, 0x4, 0x92e, 0x6, 0xfff, 0x2000, 0xd, 0xffffffffffffffff, 0x0, 0x800003, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 36.095330233s ago: executing program 4 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) r1 = inotify_init1(0x5e6c3ca24b4649ee) splice(r0, &(0x7f0000000400)=0x2, r1, &(0x7f0000000440)=0x8037, 0xbe22, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x40000001000000, 0x3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8000000000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 36.071674074s ago: executing program 4 (id=1849): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x8001, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x19) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/58, 0x3a}], 0x4, &(0x7f0000000440)=""/98, 0x62}, 0x1}], 0x1, 0x0, &(0x7f0000000500)={0x0, 0x989680}) getsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 20.801068613s ago: executing program 37 (id=1849): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x8001, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x19) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/58, 0x3a}], 0x4, &(0x7f0000000440)=""/98, 0x62}, 0x1}], 0x1, 0x0, &(0x7f0000000500)={0x0, 0x989680}) getsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 9.162873981s ago: executing program 2 (id=2009): prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x200, 0x40) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xd, 0x7, 0x2, 0x3, 0xa, 0x9, 0x30000, 0x5, 0x1, 0x80000000, 0x80000000, 0x4, 0x7, 0x8c, 0x80000001, 0xf8], 0xdddd0000, 0x81542}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xc1, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x9, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x306, 0x6, 0x4, 0x1, 0x4, 0x40}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0x7fff, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x4, "", 'uH'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x3, 0x2, "4b8dad084534"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x1, [{0x67, &(0x7f0000000300)=ANY=[@ANYBLOB="6703252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"]}]}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x3a091fa7162192cd, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0xff, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x8, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xe, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0x6, 0x4, 0x0, 0xe, 0x0, 0x81}, {0x0, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x1}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x26}, {0xffff1000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x4, 0x128, 0xb, 0xf801, 0xffff1000, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x3a091fa7162192cd, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0xff, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x8, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xe, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0x6, 0x4, 0x0, 0xe, 0x0, 0x81}, {0x0, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x1}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x26}, {0xffff1000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x4, 0x128, 0xb, 0xf801, 0xffff1000, [0x0, 0x0, 0x1]}) socket$key(0xf, 0x3, 0x2) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3d) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3d) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x2, 0x1f, 0x14, "03861f23a65ba8544ae406752f31465b3e67f360f91b04dcc621271d0e07383d23378225a40a301a590b04d4ff8064fc6a298ce78bd55fb5d24702cfe882f93d", "761531d54d4ae8df40e9b6d909185eae7a0e350b825598d03fb3b937756c01bc4d3457c151399adcf29b8a4addfb3a3d7b5940bac1178c358d157593578cad75", "e7be151621b6fec1193a21b00b2aa8da9b06cdc356ab070d4acf441db553d72c", [0x8, 0x1000]}) read$FUSE(r4, &(0x7f0000001200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x15000010, 0x8, 0x7, 0x6, 0x3, 0x0, 0x0, 0x80, 0xaa}}, 0x50) sendfile(r4, r2, 0x0, 0x7ffff000) 7.491007653s ago: executing program 2 (id=2012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) (async) sendfile(r3, r2, 0x0, 0x7ffff000) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe87}}, 0xa2e96467983c0f3c) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b00), 0x22000, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380), 0xffffffffffffff52, 0x0, 0x0}) (async) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) 5.842063866s ago: executing program 8 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb103}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x853}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e8e955d246f1ab554deb4f00069e1ade925b4e5eb5732fbf2c53e3661404261d67"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x226d4844}, @TIPC_NLA_NODE_ID={0x98, 0x3, "7c37ecbf738094b34ef8fa50e3f50e0e10b2b39fecc02bff2675ceff77718ec177094cb8e3e3f2d83cab384d4b5e46b1cc632a90817940233777a45229279ed4cb68ba467aa95e187130f47de6802aa6da495ed30d8490f45fae85e8e4682f4fd68fdeab90d3ba67ceb25ee94390f6dd7e81352eed8606522d28b7ff102911d342c6157a8982fcb6b69b28b4a9680ce02f0e4baa"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x39c}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x180000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x183e808e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "286c36c4782ac0bc86792500308394cd08de022783f8340a6e97ac"}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x744}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5fe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7000}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004000}, 0x6000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x3, 0x0, &(0x7f0000000500)=""/243, &(0x7f0000000600)=""/47, &(0x7f0000000640)=""/84, 0xeeef0000}) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x9, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x3ff, 0xbd]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x990}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x741}]}]}, 0xf8}}, 0x40004) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000900)=[@wrmsr={0x1e, 0x20, {0xb2c, 0x600000000000}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @wrmsr={0x1e, 0x20, {0x318, 0x5e}}, @wrmsr={0x1e, 0x20, {0x584, 0x8000000000000000}}, @code={0xa, 0x70, {"450f0966b8e7000f00d0420fc779f965d9fe440f01c3b9dd0b0000b800800000ba000000000f30c744240039000000c74424027a1035ccc7442406000000000f011c24450f09c744240030010000c7442402fe800000ff2c2466ba420066ed"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0x2eb}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18, 0x5}, @rdmsr={0x32, 0x18, {0x32d}}], 0x170}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000ac0)=@x86={0x5, 0x0, 0x3, 0x0, 0x7fff, 0x2, 0x5, 0x7f, 0x3, 0x2, 0x10, 0x25, 0x0, 0x9, 0x1, 0x6, 0x5, 0x4, 0xb, '\x00', 0x5, 0x7}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b40)={'ip6gretap0\x00', 0x20}) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000c00)={0x12, 0x54, &(0x7f0000000b80)="2ff2ea317854d0d395ddfd4ba3dca0d4bcfb55b2bfad85aab379234699dd9f22170d2ce477f51a69adeac1b8ca594470915e268c571b802dc5d0de0c9264a3ed6325b636c004bb2b83ad8aae6112d82c56628a68"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000c40)={'vxcan1\x00'}) r7 = dup(r3) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000c80)={0x1}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000cc0)={0x0, 0x10000}) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000d00)=""/74) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000d80)={0x2, 0x0, [{0x883}, {0xe7, 0x0, 0x5}]}) r8 = dup(r3) ioctl$VHOST_VDPA_SET_GROUP_ASID(r6, 0x4008af7c, &(0x7f0000000dc0)={0x3, 0x10}) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000e00)=0x3) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000e40)) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f0000000e80)=0x8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/uevent_seqnum', 0x410082, 0xe4) ioctl$HIDIOCINITREPORT(r9, 0x4805, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000f00)={0x7}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f80)) 5.784918787s ago: executing program 2 (id=2015): keyctl$update(0x2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r0, &(0x7f0000000040)=""/141, 0x8d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) pselect6(0x40, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x300, 0x0, 0x1d5240000000000, 0x200000000000}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 5.784296517s ago: executing program 8 (id=2016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000200)=""/178, &(0x7f0000000080)=0xb2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 5.783953567s ago: executing program 8 (id=2017): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000240)={{r3}, 0xfffffffffffffffc, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x50) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r6) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000400)=&(0x7f00000003c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, 0x0, &(0x7f0000000100)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xeb, 0xc, 0x91, 0x8, 0xc52, 0x2442, 0xf83f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0xa1, 0x40, 0x5, [{{0x9, 0x4, 0xd7, 0x5, 0x2, 0x15, 0x1b, 0x24, 0x3, [], [{{0x9, 0x5, 0xb, 0x2, 0x7cf, 0x7, 0x4, 0xf}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0xdf, 0x6, 0x8}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r9, 0x80047453, &(0x7f0000000280)) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 4.005814702s ago: executing program 6 (id=2018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x2}], 0x5e, 0x0, &(0x7f0000000280)="c6547e22bade76f1a03b79e9b03aebdd7b10b4def1b3f2f36946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e1483470d2a7c1bc13f8ef59f4fd331612e70000000000000"}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r1, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x1, 0x5, 0x18, 0x64, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@end]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3e) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 4.002430842s ago: executing program 8 (id=2019): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x736c22aeda961247, 0x0, 0x35, r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r6, 0x0, 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x8f40, 0x5, 0x7, {{0x14, 0x4, 0x1, 0xd, 0x50, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xd4, [@multicast1, @local, @local, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @rr={0x7, 0xb, 0xc0, [@broadcast, @remote]}, @generic={0x94, 0x11, "ad90cc8800a52cf0651e96d2ebe8a1"}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r7}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r11, 0x0) getsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000000080)={0x9, 0x48, [0x100000000, 0x40, 0x0, 0x9], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x105840, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x2d0, 0x1e8, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x52, 'system_u:object_r:crond_unit_file_t:s0\x00'}}}, {{@arp={@private=0xa010101, @remote, 0xffffff00, 0xffffff00, 0x1, 0x0, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x1, 0xff01, 0x1, 0x60d, 0x91, 'nr0\x00', 'lo\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@arp={@multicast2, @multicast1, 0xff000000, 0x0, 0x5, 0x5, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0xff, 0x8, 0x7, 0x101, 0x7, 0xe, 'veth1_to_bond\x00', 'dvmrp0\x00', {}, {0xff}, 0x0, 0x141}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x10000, 0x9, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f8) 4.001939172s ago: executing program 2 (id=2020): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000080)={0x7}) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r4, 0xfffffff2) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0xe) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r5, 0xa0e4f000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.979816342s ago: executing program 6 (id=2021): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0xc0c5) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) 2.076972409s ago: executing program 6 (id=2022): ftruncate(0xffffffffffffffff, 0x398a0bdb) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x12) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x40, 0x14, 0x31, "24759dfa974a94a357c0baa01eb12a0403f447972e0e9614e9cb22798c60b9ab5c2b6b4df2c7a6f701699bbf0b0efc2d0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) r2 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000340)={0x14, &(0x7f0000000440)={0x20, 0x1, 0xca, {0xca, 0x22, "340efe5722fb5d10f0ccbe5dc0f88d8907f38dfd7ea85f0dca6d24914c2acba1aef1d192454960732d1eeba4ab1d356dd079724cc5c48a30635bc0edbea2dcd3643b661e034ac5a3870c2df8640759e6839721bcef89ae37e45b8cf0dd80b180945acbbb6066894e297fbc98a4fa43a78f15f1986ccc678d080087ed97463c0fcd29f0e22b654af38776a6d9a88b6e4374c8300caf004f0dd2e83bf8ba97777b595fd1311cb0f4526499a148c17b377c728adb8d8da81059c0b8859af6e5ee142068dda6322e937d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000700)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="4014ae0000002c349e2ed09dcf6d413d4f62c9225e435fe355c29ef09d365144878e85898cb846d58d90b22b20e64bb41384eeeb77afb1233284c5c8d319d28228ac37db0579ad42e4c1c51dae5556d3c6f8aa57dabca15e47ea5228a6e49b90739c3b8e123253cae9a9d39ea85c142994821b59538361d3eef518c39d669cbc8c65a2421e7295ae055b2918e839e52febf204d9ca7fbfdd8eaa5ae30910ed09df6c2cbf1ba200"/180], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x3a69}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "e9445596bd0b80a00b34264d50344dc6ffabe15c9b50e0c07274971a8e69cfe202afa29138d1b2d3de57eac6d3b26b"}}) (async) r3 = socket(0x2, 0x3, 0x2) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) (async) keyctl$describe(0x6, r1, &(0x7f0000000100)=""/230, 0xe6) (async) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 2.076459229s ago: executing program 8 (id=2023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0xeff, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dvmrp0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.076187199s ago: executing program 2 (id=2024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_GET_SECUREBITS(0x1b) (async, rerun: 32) r1 = socket(0x11, 0x2, 0x0) (rerun: 32) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e44647522663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdb98fd5450ad2ce7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8844}, 0x1) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) r5 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'bridge0\x00'}, {}], 0xa, "04eb154b6a1de02e4cebb83949fc7050998f37c68be534b213123d17671d418bf12b383f190876988383d073bff3e4c6204a6c336291fbb88672346451bf42d528fdfb5f38ab6e2498cd8c742714d2adc3d6f9db43a561110ca88736299275079c5cf0a53c55bcdb6101143aa597c956d16e62233f9ddfb1c1410db1e6b0a10252e12862b1667d8d48d59d1673ed12eff164557d42df5fbfa9a1e914ac7f76d89a6d1b977549feab03da0df3dc863f69f54eddc8ac786c37ec7c49cfc7bbb3148a0bb78e553a23dd9c35238851a3a3428c8a8b982c338c54acb2414bfbb0fcd5870cb2db0079804ef3915bc1ab37261d50e461afca5c901cc25d419df7"}, 0x112) (async) sendmsg$can_bcm(r6, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@empty, @empty, 0x1, "6db5a6ad7f728da8df5fdc58c7fbb9a18590f563f54ae4872148d7fe2a1c6eb3", 0x6, 0x8, 0x7, 0x5}, 0x3c) 37.112249ms ago: executing program 6 (id=2025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000001, 0x30, r1, 0x40000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 36.175769ms ago: executing program 8 (id=2026): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000062c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) inotify_init() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040)='vfat\x00', 0x2002189, 0x0) 35.461169ms ago: executing program 2 (id=2027): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0xa, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x4000010) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0xffffff80, 0x5, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x67, 0x0, 0x88, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, {[@generic={0x82, 0x6, "7cd4da4a"}, @noop]}}}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @mcast2, 0x7fffffff, 0x0, 0xffff, 0x100, 0x8001, 0x4, r3}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000000000000000000003000600002000000200000000000020000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) getuid() (async) mount$binderfs(&(0x7f0000000040), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030342c6d61783d30303030303030303030303030303030303030303030372c73746174733d676c6f62616c2c6d61783d30303030303030303030303030372c73746174733d676c6f62616c2c737461783d30303030303030303030303030303030303030303030312c6d61783d30303030303030303030303030303030303030303230312c6d61736b3d4d41595f415050454e442c6d6561737572652c66756e633d46494c455f434845434b2c6173796e632c736d61636b66736861743d2f6465762f6173686d656d002c000000000000000000000000000000000000000000000cde4af3cc0c23c6fc68650d6c36fc8e52db9f71d77137bdd8947dd90fac816acc680d1e184c1367f199ba9e7ebb149b6eb21d0c3958ae761b137cba2bc8bc3d2597249f8e329b1b86ec495cca1b6926e56ef33505dc213711e84eac7a63de8a26dcdbafce7045d19077de7ba7a7eea9888d731b6a2533d7dbefff53b8f56d5814e7be6a549f5bc3594f7e7472d2493bfeb3faad1c969fd1f6b0e71624aaf0d421a706f329f23af4d5281541a7acb59d1f3d4241f4429edb4fccd0398ebb325feb26a9c84923de8d86bdc2b19018adf0c307155b"]) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000040)={0x10, 0x0, {0x55, 0x7, 0x7, {0x6, 0xa}, {0x800, 0x80}, @ramp={0x0, 0x10, {0xc26, 0x4, 0x72da, 0x2}}}, {0x53, 0x8, 0xff, {0x3, 0x59e}, {0x9, 0xbc}, @cond=[{0x0, 0x4, 0xfffd, 0x200, 0xf, 0x8}, {0x6558, 0x1, 0x7, 0x9, 0x7, 0x6}]}}) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/protocols\x00') (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @local}}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f1ffffff120084e946010a000000000000f5ff0a"], 0x14}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xfffffffe}}) (async) process_vm_readv(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e23, @local}}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r9, 0xc06855c8, &(0x7f0000000040)={0x10, 0x0, {0x55, 0x7, 0x7, {0x6, 0xa}, {0x800, 0x80}, @ramp={0x0, 0x10, {0xc26, 0x4, 0x72da, 0x2}}}, {0x53, 0x8, 0xff, {0x3, 0x59e}, {0x9, 0xbc}, @cond=[{0x0, 0x4, 0xfffd, 0x200, 0xf, 0x8}, {0x6558, 0x1, 0x7, 0x9, 0x7, 0x6}]}}) (async) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r10, 0x85b83000) 35.185669ms ago: executing program 6 (id=2028): creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800806, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@afid={'afid', 0x3d, 0x7}}, {@noxattr}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000000)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xa2f00, 0x7c) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) mknodat$loop(r3, &(0x7f0000000200)='./file0\x00', 0x2, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 0s ago: executing program 6 (id=2029): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x93, 0x7, 0xffff, 0x0, 0x7fffffffffffffff, 0x7]}, &(0x7f0000000140)=0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0x8, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x80000001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r7, 0x0, r7) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x400000000000a, 0x5, 0x180, 0x0, 0x200000000, 0xf4, 0x1, 0x8, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 21.154700][ T36] audit: type=1400 audit(1756985178.480:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.155992][ T281] cgroup: Unknown subsys name 'net' [ 21.178451][ T36] audit: type=1400 audit(1756985178.480:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.206348][ T36] audit: type=1400 audit(1756985178.510:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.206523][ T281] cgroup: Unknown subsys name 'devices' [ 21.331036][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.337222][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.510000][ T36] audit: type=1400 audit(1756985178.830:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.534016][ T36] audit: type=1400 audit(1756985178.830:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.559297][ T36] audit: type=1400 audit(1756985178.830:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.568047][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.592337][ T36] audit: type=1400 audit(1756985178.910:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.618063][ T36] audit: type=1400 audit(1756985178.910:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.671306][ T36] audit: type=1400 audit(1756985178.990:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.697689][ T36] audit: type=1400 audit(1756985178.990:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.697718][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.561183][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.568358][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.575881][ T288] bridge_slave_0: entered allmulticast mode [ 22.582398][ T288] bridge_slave_0: entered promiscuous mode [ 22.595928][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.603138][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.610578][ T290] bridge_slave_0: entered allmulticast mode [ 22.616824][ T290] bridge_slave_0: entered promiscuous mode [ 22.623143][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.630404][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.637553][ T291] bridge_slave_0: entered allmulticast mode [ 22.643878][ T291] bridge_slave_0: entered promiscuous mode [ 22.650202][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.657780][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.664937][ T288] bridge_slave_1: entered allmulticast mode [ 22.671171][ T288] bridge_slave_1: entered promiscuous mode [ 22.680764][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.687921][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.695227][ T290] bridge_slave_1: entered allmulticast mode [ 22.701456][ T290] bridge_slave_1: entered promiscuous mode [ 22.711905][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.719534][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.726593][ T291] bridge_slave_1: entered allmulticast mode [ 22.733431][ T291] bridge_slave_1: entered promiscuous mode [ 22.743149][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.750378][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.757710][ T289] bridge_slave_0: entered allmulticast mode [ 22.764143][ T289] bridge_slave_0: entered promiscuous mode [ 22.780915][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.787995][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.795308][ T289] bridge_slave_1: entered allmulticast mode [ 22.801625][ T289] bridge_slave_1: entered promiscuous mode [ 22.974097][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981470][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.989036][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.996563][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.017960][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.025665][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.032982][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.040305][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.050699][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.057953][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.065483][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.072622][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.094806][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.102001][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.109424][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.116461][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.151136][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.158537][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.165887][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.174029][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.181442][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.188767][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.196512][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.203897][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.219835][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.227004][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.240288][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.247635][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.260246][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.267509][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.281221][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.289045][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.298238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305433][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.323930][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.331043][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.338823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.346260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.354281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.361455][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.424255][ T288] veth0_vlan: entered promiscuous mode [ 23.432191][ T289] veth0_vlan: entered promiscuous mode [ 23.443194][ T291] veth0_vlan: entered promiscuous mode [ 23.461045][ T289] veth1_macvtap: entered promiscuous mode [ 23.476790][ T290] veth0_vlan: entered promiscuous mode [ 23.485760][ T291] veth1_macvtap: entered promiscuous mode [ 23.495380][ T288] veth1_macvtap: entered promiscuous mode [ 23.525401][ T290] veth1_macvtap: entered promiscuous mode [ 23.570524][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.617409][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.628699][ T336] rust_binder: Write failure EFAULT in pid:2 [ 23.651359][ T340] rust_binder: Write failure EINVAL in pid:2 [ 23.690985][ T345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.723949][ T345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.727014][ T350] Zero length message leads to an empty skb [ 23.742239][ T352] rust_binder: inc_ref_done called when no active inc_refs [ 23.769891][ T356] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 23.788291][ T356] rust_binder: 6: no such ref 2 [ 23.793875][ T356] rust_binder: Read failure Err(EAGAIN) in pid:6 [ 23.802062][ T358] rust_binder: Error while translating object. [ 23.808585][ T358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 23.815072][ T358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 23.849740][ T356] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 23.872112][ T360] netlink: 'syz.2.10': attribute type 16 has an invalid length. [ 23.888766][ T360] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 23.897311][ T360] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.10'. [ 24.120518][ T387] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 24.157058][ T388] input: syz1 as /devices/virtual/input/input4 [ 24.479000][ T364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.630426][ T364] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.639099][ T364] usb 4-1: config 0 has no interface number 0 [ 24.645415][ T364] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.656603][ T364] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.666821][ T364] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 24.676240][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.685182][ T364] usb 4-1: config 0 descriptor?? [ 24.718606][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 24.839966][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.864895][ T412] loop7: detected capacity change from 0 to 7 [ 24.866723][ T415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.000083][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.020272][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.030842][ T31] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 25.037827][ T424] ./cgroup: Can't lookup blockdev [ 25.040191][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.054828][ T31] usb 2-1: config 0 descriptor?? [ 25.091759][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 25.101690][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 25.111507][ T364] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 25.119115][ T364] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 25.128247][ T364] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 25.140290][ T364] hid_prodikeys: hid-prodikeys: failed to find output report [ 25.140290][ T364] [ 25.319249][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.333175][ T10] usb 4-1: USB disconnect, device number 2 [ 25.465706][ T31] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 25.466825][ T431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.473822][ T31] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 25.483172][ T431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.501419][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 25.508052][ T64] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.520365][ T64] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.531830][ T64] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.541261][ T64] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 25.548950][ T31] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 25.549952][ T64] usb 3-1: Product: syz [ 25.561842][ T31] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 25.562406][ T64] usb 3-1: Manufacturer: syz [ 25.575521][ T31] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 25.588242][ T64] hub 3-1:4.0: USB hub found [ 25.616696][ T10] usb 2-1: USB disconnect, device number 2 [ 25.626470][ T10] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 25.788989][ T426] binder: Unknown parameter '' [ 25.794926][ T64] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 25.819908][ T64] usb 3-1: USB disconnect, device number 2 [ 25.913770][ T440] process 'syz.0.31' launched './file0' with NULL argv: empty string added [ 25.934454][ T445] devpts: called with bogus options [ 26.303592][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 26.303611][ T36] audit: type=1400 audit(1756985183.620:180): avc: denied { write } for pid=466 comm="syz.1.37" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.436819][ T36] audit: type=1400 audit(1756985183.750:181): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.459408][ T36] audit: type=1400 audit(1756985183.750:182): avc: denied { unlink } for pid=471 comm="syz.0.40" name="#1" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.481813][ T36] audit: type=1400 audit(1756985183.750:183): avc: denied { mount } for pid=471 comm="syz.0.40" name="/" dev="overlay" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.504110][ T36] audit: type=1400 audit(1756985183.780:184): avc: denied { mount } for pid=469 comm="syz.2.39" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.526429][ T36] audit: type=1400 audit(1756985183.780:185): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.527029][ T476] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 26.546628][ T36] audit: type=1400 audit(1756985183.830:186): avc: denied { create } for pid=474 comm="syz.0.41" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.550837][ T476] rust_binder: Error while translating object. [ 26.571734][ T36] audit: type=1400 audit(1756985183.890:187): avc: denied { append } for pid=477 comm="syz.0.42" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.598195][ T476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.623465][ T36] audit: type=1400 audit(1756985183.940:188): avc: denied { read } for pid=479 comm="syz.0.43" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.628394][ T476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 26.638692][ T36] audit: type=1400 audit(1756985183.940:189): avc: denied { open } for pid=479 comm="syz.0.43" path="net:[4026532300]" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.271175][ T488] netlink: 37 bytes leftover after parsing attributes in process `syz.0.52'. [ 27.379730][ T498] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 27.387175][ T498] rust_binder: Write failure EINVAL in pid:30 [ 27.416068][ T501] overlayfs: conflicting options: userxattr,metacopy=on [ 27.421141][ T504] ======================================================= [ 27.421141][ T504] WARNING: The mand mount option has been deprecated and [ 27.421141][ T504] and is ignored by this kernel. Remove the mand [ 27.421141][ T504] option from the mount to silence this warning. [ 27.421141][ T504] ======================================================= [ 27.422791][ T502] binder: Unknown parameter 'contextÀ' [ 27.496254][ T512] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 27.517588][ T518] rust_binder: Failed copying remainder into alloc: EFAULT [ 27.525729][ T518] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 27.537249][ T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 27.546220][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 27.557465][ T46] bridge_slave_1: left allmulticast mode [ 27.602160][ T46] bridge_slave_1: left promiscuous mode [ 27.609007][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.626429][ T46] bridge_slave_0: left allmulticast mode [ 27.638788][ T46] bridge_slave_0: left promiscuous mode [ 27.644897][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.655790][ T528] 9pnet_fd: Insufficient options for proto=fd [ 27.784762][ T46] veth1_macvtap: left promiscuous mode [ 27.790598][ T46] veth0_vlan: left promiscuous mode [ 27.894984][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.902536][ T542] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.910289][ T542] bridge_slave_0: entered allmulticast mode [ 27.916618][ T542] bridge_slave_0: entered promiscuous mode [ 27.924150][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.931696][ T542] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.944209][ T551] rust_binder: 50: no such ref 1 [ 27.948804][ T542] bridge_slave_1: entered allmulticast mode [ 27.949432][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 27.956306][ T542] bridge_slave_1: entered promiscuous mode [ 28.021502][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.029035][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.034668][ T329] rust_binder: 552: removing orphan mapping 0:8 [ 28.036713][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.050164][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.081879][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.090093][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.102611][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.109809][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.128612][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.135746][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.155613][ T574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.155648][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 28.173614][ T542] veth0_vlan: entered promiscuous mode [ 28.199460][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.204299][ T542] veth1_macvtap: entered promiscuous mode [ 28.351490][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 28.361049][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.373213][ T31] usb 2-1: Product: syz [ 28.384013][ T31] usb 2-1: Manufacturer: syz [ 28.389178][ T31] usb 2-1: SerialNumber: syz [ 28.499533][ T329] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 28.583456][ T610] rust_binder: Write failure EFAULT in pid:83 [ 28.660255][ T329] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.686687][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.698378][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.711682][ T329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.721382][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.729817][ T329] usb 5-1: Product: syz [ 28.734259][ T329] usb 5-1: Manufacturer: syz [ 28.738994][ T329] usb 5-1: SerialNumber: syz [ 28.839238][ T330] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 28.968953][ T330] usb 1-1: device descriptor read/64, error -71 [ 29.167062][ T623] /dev/rnullb0: Can't open blockdev [ 29.208926][ T330] usb 1-1: device descriptor read/64, error -71 [ 29.347159][ T580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.356056][ T580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.365286][ T580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 29.375567][ T329] usb 5-1: 0:2 : does not exist [ 29.387132][ T329] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 29.400188][ T329] usb 5-1: USB disconnect, device number 2 [ 29.412306][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.448923][ T330] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 29.588956][ T330] usb 1-1: device descriptor read/64, error -71 [ 29.829040][ T330] usb 1-1: device descriptor read/64, error -71 [ 29.920633][ T329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.939611][ T330] usb usb1-port1: attempt power cycle [ 29.953459][ T644] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 30.078982][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 30.086853][ T329] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.096392][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.104879][ T329] usb 3-1: Product: syz [ 30.109203][ T329] usb 3-1: Manufacturer: syz [ 30.109916][ T647] Restarting kernel threads ... [ 30.113858][ T329] usb 3-1: SerialNumber: syz [ 30.124425][ T647] done. [ 30.127865][ T329] r8152-cfgselector 3-1: Unknown version 0x0000 [ 30.134552][ T329] r8152-cfgselector 3-1: config 0 descriptor?? [ 30.141683][ T329] hub 3-1:0.0: bad descriptor, ignoring hub [ 30.147635][ T329] hub 3-1:0.0: probe with driver hub failed with error -5 [ 30.278999][ T330] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 30.300153][ T330] usb 1-1: device descriptor read/8, error -71 [ 30.341849][ T329] r8152-cfgselector 3-1: Unknown version 0x0000 [ 30.348401][ T329] r8152-cfgselector 3-1: bad CDC descriptors [ 30.430573][ T330] usb 1-1: device descriptor read/8, error -71 [ 30.543953][ T629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.543980][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 30.554312][ T629] rust_binder: 89: no such ref 2 [ 30.568623][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 30.668960][ T330] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 30.685737][ T9] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 30.710240][ T330] usb 1-1: device descriptor read/8, error -71 [ 30.750023][ T9] usb 2-1: USB disconnect, device number 3 [ 30.769590][ T649] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 30.777388][ T649] rust_binder: Write failure EINVAL in pid:49 [ 30.840206][ T330] usb 1-1: device descriptor read/8, error -71 [ 30.854207][ T653] /dev/rnullb0: Can't open blockdev [ 30.959439][ T330] usb usb1-port1: unable to enumerate USB device [ 31.076962][ T673] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 31.189212][ T406] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.190228][ T680] netlink: 57 bytes leftover after parsing attributes in process `syz.2.109'. [ 31.328925][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.341811][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.341828][ T36] audit: type=1400 audit(1756985188.660:237): avc: denied { ioctl } for pid=690 comm="syz.2.114" path="socket:[5872]" dev="sockfs" ino=5872 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.372676][ T406] usb 5-1: Using ep0 maxpacket: 32 [ 31.378534][ T36] audit: type=1400 audit(1756985188.660:238): avc: denied { setopt } for pid=690 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.398541][ T406] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 31.407154][ T406] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 31.411205][ T36] audit: type=1400 audit(1756985188.720:239): avc: denied { accept } for pid=695 comm="syz.2.115" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.416052][ T406] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 31.436216][ T36] audit: type=1400 audit(1756985188.720:240): avc: denied { listen } for pid=695 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.445405][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.476465][ T406] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.486606][ T406] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.499823][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 31.505010][ T406] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.514363][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.523588][ T329] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 31.532699][ T406] usb 5-1: config 0 descriptor?? [ 31.537863][ T329] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 31.546672][ T329] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 31.556066][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.567265][ T329] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.577446][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.591386][ T329] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.600780][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.611396][ T329] usb 2-1: config 0 descriptor?? [ 31.718957][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.756661][ T36] audit: type=1400 audit(1756985189.070:241): avc: denied { append } for pid=659 comm="syz.4.101" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.788587][ T406] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 31.803188][ T406] usb 5-1: USB disconnect, device number 3 [ 31.810805][ T406] usblp0: removed [ 31.820987][ T329] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 31.833215][ T329] usb 2-1: USB disconnect, device number 4 [ 31.840283][ T329] usblp0: removed [ 31.871034][ T330] usb 3-1: config 1 has an invalid interface number: 135 but max is 3 [ 31.879414][ T330] usb 3-1: config 1 has an invalid interface number: 127 but max is 3 [ 31.887675][ T330] usb 3-1: config 1 has an invalid interface number: 10 but max is 3 [ 31.895787][ T330] usb 3-1: config 1 has an invalid interface number: 191 but max is 3 [ 31.904160][ T330] usb 3-1: config 1 has no interface number 0 [ 31.910564][ T330] usb 3-1: config 1 has no interface number 1 [ 31.916836][ T330] usb 3-1: config 1 has no interface number 2 [ 31.923162][ T330] usb 3-1: config 1 has no interface number 3 [ 31.929903][ T330] usb 3-1: config 1 interface 135 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 8 [ 31.939962][ T330] usb 3-1: config 1 interface 135 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 31.950696][ T330] usb 3-1: config 1 interface 135 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 31.961507][ T330] usb 3-1: config 1 interface 135 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 31.972515][ T330] usb 3-1: config 1 interface 135 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 31.983517][ T330] usb 3-1: config 1 interface 135 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 31.995448][ T330] usb 3-1: config 1 interface 135 altsetting 4 bulk endpoint 0xC has invalid maxpacket 64 [ 32.005639][ T330] usb 3-1: config 1 interface 135 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 32.016419][ T330] usb 3-1: config 1 interface 127 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 32.027766][ T330] usb 3-1: config 1 interface 10 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 32.039077][ T330] usb 3-1: config 1 interface 10 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 32.049733][ T330] usb 3-1: config 1 interface 10 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 32.060380][ T330] usb 3-1: config 1 interface 10 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 32.071284][ T330] usb 3-1: config 1 interface 10 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 32.082664][ T330] usb 3-1: config 1 interface 10 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 32.093553][ T330] usb 3-1: config 1 interface 10 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 32.104389][ T330] usb 3-1: config 1 interface 10 altsetting 5 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 32.115394][ T330] usb 3-1: config 1 interface 10 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 32.126512][ T330] usb 3-1: config 1 interface 10 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 32.137331][ T330] usb 3-1: config 1 interface 10 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 32.148339][ T330] usb 3-1: config 1 interface 10 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 32.159278][ T330] usb 3-1: config 1 interface 10 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 32.170228][ T330] usb 3-1: config 1 interface 191 altsetting 87 has an invalid descriptor for endpoint zero, skipping [ 32.181224][ T330] usb 3-1: config 1 interface 191 altsetting 87 has a duplicate endpoint with address 0xC, skipping [ 32.192146][ T330] usb 3-1: config 1 interface 191 altsetting 87 has an invalid descriptor for endpoint zero, skipping [ 32.203301][ T330] usb 3-1: config 1 interface 191 altsetting 87 has a duplicate endpoint with address 0x5, skipping [ 32.214559][ T330] usb 3-1: config 1 interface 191 altsetting 87 has a duplicate endpoint with address 0xD, skipping [ 32.225381][ T330] usb 3-1: config 1 interface 191 altsetting 87 has a duplicate endpoint with address 0xA, skipping [ 32.236222][ T330] usb 3-1: config 1 interface 191 altsetting 87 has an invalid descriptor for endpoint zero, skipping [ 32.247220][ T330] usb 3-1: config 1 interface 191 altsetting 87 has a duplicate endpoint with address 0x2, skipping [ 32.258054][ T330] usb 3-1: config 1 interface 135 has no altsetting 0 [ 32.265347][ T330] usb 3-1: config 1 interface 127 has no altsetting 0 [ 32.268928][ T406] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.272354][ T330] usb 3-1: config 1 interface 10 has no altsetting 0 [ 32.286753][ T330] usb 3-1: config 1 interface 191 has no altsetting 0 [ 32.295041][ T330] usb 3-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=79.b8 [ 32.304349][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.312916][ T330] usb 3-1: Product: syz [ 32.317111][ T330] usb 3-1: Manufacturer: ␁ [ 32.321843][ T330] usb 3-1: SerialNumber: syz [ 32.328298][ T698] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.428941][ T406] usb 2-1: Using ep0 maxpacket: 32 [ 32.435575][ T406] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 32.444267][ T406] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 32.453056][ T406] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 32.462104][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.472425][ T406] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.482624][ T406] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.495731][ T406] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 32.504999][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.514100][ T406] usb 2-1: config 0 descriptor?? [ 32.721284][ T406] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 32.735541][ T406] usb 2-1: USB disconnect, device number 5 [ 32.745640][ T406] usblp0: removed [ 32.755881][ T330] usb 3-1: USB disconnect, device number 4 [ 32.929671][ T700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.938552][ T700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.024505][ T709] overlayfs: failed to resolve './file1/file0': -2 [ 39.031517][ T36] audit: type=1400 audit(1756985196.340:242): avc: denied { create } for pid=706 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.062596][ T36] audit: type=1400 audit(1756985196.380:243): avc: denied { create } for pid=710 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.102902][ T36] audit: type=1400 audit(1756985196.420:244): avc: denied { block_suspend } for pid=711 comm="syz.4.121" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.157866][ T36] audit: type=1400 audit(1756985196.450:245): avc: denied { shutdown } for pid=723 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.182543][ T36] audit: type=1400 audit(1756985196.450:246): avc: denied { create } for pid=723 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.205968][ T36] audit: type=1400 audit(1756985196.450:247): avc: denied { create } for pid=723 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 39.272445][ T36] audit: type=1400 audit(1756985196.590:248): avc: denied { read } for pid=735 comm="syz.1.129" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.297243][ T36] audit: type=1400 audit(1756985196.610:249): avc: denied { ioctl } for pid=735 comm="syz.1.129" path="socket:[6026]" dev="sockfs" ino=6026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.315747][ T739] rust_binder: Error while translating object. [ 39.324218][ T739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.333784][ T739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 39.335591][ T36] audit: type=1400 audit(1756985196.610:250): avc: denied { bind } for pid=735 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.368953][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.528955][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 39.528962][ T406] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.543431][ T330] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 39.551780][ T330] usb 1-1: config 0 has no interface number 0 [ 39.558341][ T330] usb 1-1: config 0 interface 184 has no altsetting 0 [ 39.567328][ T330] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.577088][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.585251][ T330] usb 1-1: Product: syz [ 39.589959][ T330] usb 1-1: Manufacturer: syz [ 39.594718][ T330] usb 1-1: SerialNumber: syz [ 39.599720][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.608368][ T330] usb 1-1: config 0 descriptor?? [ 39.614433][ T330] smsc75xx v1.0.0 [ 39.619035][ T364] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.688925][ T406] usb 3-1: Using ep0 maxpacket: 16 [ 39.695598][ T406] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.706934][ T406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.713626][ T406] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 39.723447][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.733945][ T406] usb 3-1: config 0 descriptor?? [ 39.748958][ T10] usb 5-1: device descriptor read/64, error -71 [ 39.771683][ T364] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 39.781011][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.789243][ T364] usb 2-1: Product: syz [ 39.793523][ T364] usb 2-1: Manufacturer: syz [ 39.798278][ T364] usb 2-1: SerialNumber: syz [ 39.989095][ T10] usb 5-1: device descriptor read/64, error -71 [ 40.140748][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.150171][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.161945][ T406] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 40.216518][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.225335][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.233447][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.237213][ T364] rtl8150 2-1:1.0: couldn't reset the device [ 40.243576][ T330] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 40.249386][ T364] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.258394][ T330] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 40.270670][ T364] usb 2-1: USB disconnect, device number 6 [ 40.276912][ T330] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 40.295480][ T330] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 40.309063][ T330] usb 1-1: USB disconnect, device number 6 [ 40.429043][ T10] usb 5-1: device descriptor read/64, error -71 [ 40.669062][ T10] usb 5-1: device descriptor read/64, error -71 [ 40.726928][ T36] audit: type=1400 audit(1756985198.040:251): avc: denied { map } for pid=743 comm="syz.1.132" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.779140][ T10] usb usb5-port1: attempt power cycle [ 40.858635][ T753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.858664][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 40.870882][ T751] binder: Unknown parameter 'statsŝaÂ}1YÛ¤/' [ 40.882785][ T756] 9pnet: Could not find request transport: f [ 40.882785][ T756] [ 41.047881][ T768] raw_sendmsg: syz.1.142 forgot to set AF_INET. Fix it! [ 41.056677][ T768] rust_binder: Write failure EFAULT in pid:99 [ 41.148989][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 41.179931][ T10] usb 5-1: device descriptor read/8, error -71 [ 41.228946][ T364] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.320111][ T10] usb 5-1: device descriptor read/8, error -71 [ 41.378909][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 41.385492][ T364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.397453][ T364] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 41.406624][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.415070][ T364] usb 1-1: Product: syz [ 41.419308][ T364] usb 1-1: Manufacturer: syz [ 41.423969][ T364] usb 1-1: SerialNumber: syz [ 41.429636][ T364] usb 1-1: config 0 descriptor?? [ 41.435828][ T364] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 41.443950][ T364] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 41.558942][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 41.580218][ T10] usb 5-1: device descriptor read/8, error -71 [ 41.637559][ T762] rust_binder: Write failure EFAULT in pid:101 [ 41.639661][ T364] usb 1-1: USB disconnect, device number 7 [ 41.710104][ T10] usb 5-1: device descriptor read/8, error -71 [ 41.819000][ T10] usb usb5-port1: unable to enumerate USB device [ 42.155313][ T779] rust_binder: 103: no such ref 1 [ 42.184416][ T10] usb 3-1: USB disconnect, device number 5 [ 42.229341][ T783] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.148'. [ 42.239508][ T783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=783 comm=syz.2.148 [ 42.351799][ T786] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 42.459465][ T794] netlink: 'syz.4.152': attribute type 16 has an invalid length. [ 42.476914][ T794] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.152'. [ 42.819008][ T364] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.968933][ T364] usb 3-1: Using ep0 maxpacket: 32 [ 42.975459][ T364] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.983888][ T364] usb 3-1: config 0 has no interface number 0 [ 42.991826][ T364] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.001474][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.009891][ T364] usb 3-1: Product: syz [ 43.014216][ T364] usb 3-1: Manufacturer: syz [ 43.019132][ T364] usb 3-1: SerialNumber: syz [ 43.024912][ T364] usb 3-1: config 0 descriptor?? [ 43.031019][ T364] smsc95xx v2.0.0 [ 43.066961][ T809] rust_binder: Error while translating object. [ 43.067034][ T809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.073348][ T809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 43.239476][ T811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.349437][ T818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.160'. [ 43.499027][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.608989][ T406] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.658937][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 43.665643][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.676217][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 43.690130][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.699523][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 43.707662][ T10] usb 1-1: SerialNumber: syz [ 43.715062][ T10] cdc_acm 1-1:1.0: Zero length descriptor references [ 43.722049][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 43.778889][ T406] usb 2-1: Using ep0 maxpacket: 8 [ 43.785246][ T406] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 205, changing to 11 [ 43.797219][ T406] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 43.807217][ T406] usb 2-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 43.820447][ T406] usb 2-1: config 1 interface 0 has no altsetting 0 [ 43.829067][ T406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.838431][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.847234][ T406] usb 2-1: Product: êŸéĤĉİéĦ¨ĉ›Ğꈖċ´˘á”ĵċ¨ğힺê³İıŽĉ”…§‡„녉땈ìıĵ˜šä‚ê€˜äş˘ï³´—ĞÒĥçœŻí­ïŻ³é‘ĥï¸£Ù²ê˘–ï˜â€¨éšżâŒ“Œżç†­î­·î”ขä¤ä”İ䲲펨ìĤ€îŸƒè·â„ĤëĞĵäĤŞç‚䢂ĉ¸ĥ‡„ĉşŸìŒ…Ò‚è•Ĵċ€ áœĵ瓲ċĥŞêĦıéŸĤ䉜爐ë‡éŽšìĴ‰ìżê•ğç˘—ä­ìşŽċ·ŠîçŻı폝á´İ鸛购èİ„î·£î™î—½ê§äŸ¨ë°Ż²î…™ÊéŒŒè˜šêż˘êžżâ´á—£çı“Ċ¸İ½á‚žï‡ıìĤĉ›ëŽá€—ĉħŸì£‹äĥ‚ë°½çЏ [ 43.881609][ T406] usb 2-1: Manufacturer: 픊ì–ࣜċ€Ĥäż³âş×Œé³Şï•šà·ċ€Ħá݃ꣷĈ˜äĥ´ċ…‰ì™ç­żċ¸›â²°ç² ċ•ê¨‘ìğ—랈ċ‚…¤è”„ꊤ뛇᏷í”ıçĦ¸â ›¨ĤéŞ·Ğ„è·½ä†³â¨„âĞ炷ċ á–äĦĵ銟℘áŒĥï…ŸàşŒêħ·ĉ´è²‰†é•Œĉ™˜àğ˜ [ 43.901652][ T406] usb 2-1: SerialNumber: ࠐ [ 43.907360][ T406] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 43.916534][ T406] usb 2-1: no configuration chosen from 1 choice [ 44.078444][ T10] usb 1-1: USB disconnect, device number 8 [ 44.221518][ T849] 9pnet_fd: Insufficient options for proto=fd [ 44.268486][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 44.268505][ T36] audit: type=1400 audit(1756985201.580:270): avc: denied { read } for pid=857 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.301537][ T36] audit: type=1400 audit(1756985201.620:271): avc: denied { ioctl } for pid=862 comm="syz.4.174" path="socket:[7428]" dev="sockfs" ino=7428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.336670][ T36] audit: type=1326 audit(1756985201.650:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.4.175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff1538ebe9 code=0x0 [ 44.368935][ T364] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 44.380735][ T364] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.389478][ T868] 9pnet_fd: Insufficient options for proto=fd [ 44.391303][ T364] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 44.408087][ T364] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.418688][ T364] usb 3-1: USB disconnect, device number 6 [ 44.452404][ T873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 44.481461][ T873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'. [ 44.572622][ T875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.583052][ T330] rust_binder: 874: removing orphan mapping 0:24 [ 44.596318][ T428] bridge_slave_1: left allmulticast mode [ 44.610860][ T428] bridge_slave_1: left promiscuous mode [ 44.620727][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.630014][ T883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.640210][ T428] bridge_slave_0: left allmulticast mode [ 44.646079][ T428] bridge_slave_0: left promiscuous mode [ 44.652179][ T883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.657696][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.750813][ T889] netlink: 140 bytes leftover after parsing attributes in process `syz.0.183'. [ 44.773288][ T428] veth1_macvtap: left promiscuous mode [ 44.779084][ T428] veth0_vlan: left promiscuous mode [ 44.828998][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.836512][ T887] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.843965][ T887] bridge_slave_0: entered allmulticast mode [ 44.850376][ T887] bridge_slave_0: entered promiscuous mode [ 44.856808][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.864095][ T887] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.871402][ T887] bridge_slave_1: entered allmulticast mode [ 44.878066][ T887] bridge_slave_1: entered promiscuous mode [ 44.923130][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.930385][ T887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.937977][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.945331][ T887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.965761][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.973617][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.983460][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.991108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.003581][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.010747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.036960][ T887] veth0_vlan: entered promiscuous mode [ 45.048133][ T887] veth1_macvtap: entered promiscuous mode [ 45.071555][ T36] audit: type=1400 audit(1756985202.390:273): avc: denied { mounton } for pid=887 comm="syz-executor" path="/root/syzkaller.HV8r5f/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.169186][ T330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.329243][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 45.335700][ T330] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 45.346675][ T330] usb 1-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 45.356061][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.371551][ T36] audit: type=1400 audit(1756985202.690:274): avc: denied { read } for pid=919 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.377770][ T330] ftdi_sio 1-1:254.0: Ignoring interface reserved for JTAG [ 45.658965][ T406] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.720585][ T36] audit: type=1400 audit(1756985203.040:275): avc: denied { unmount } for pid=922 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 45.744395][ T36] audit: type=1400 audit(1756985203.070:276): avc: denied { associate } for pid=922 comm="syz.4.189" name="rnullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 45.773040][ T36] audit: type=1400 audit(1756985203.090:277): avc: denied { mount } for pid=927 comm="syz.4.190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.777459][ T928] overlay: filesystem on ./bus is read-only [ 45.795385][ T36] audit: type=1400 audit(1756985203.090:278): avc: denied { mounton } for pid=927 comm="syz.4.190" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 45.827230][ T36] audit: type=1400 audit(1756985203.140:279): avc: denied { accept } for pid=927 comm="syz.4.190" lport=58291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 45.853244][ T406] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.862020][ T406] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 45.872483][ T406] usb 3-1: config 0 has no interface number 0 [ 45.880610][ T406] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 45.889842][ T406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.898051][ T406] usb 3-1: Product: syz [ 45.902748][ T406] usb 3-1: Manufacturer: syz [ 45.907554][ T406] usb 3-1: SerialNumber: syz [ 45.913554][ T406] usb 3-1: config 0 descriptor?? [ 45.932726][ T936] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.373783][ T616] usb 2-1: USB disconnect, device number 7 [ 46.736445][ T945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.736550][ T944] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.743573][ T944] rust_binder: Read failure Err(EFAULT) in pid:124 [ 46.850111][ T952] rust_binder: Error while translating object. [ 46.857339][ T952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.863858][ T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 47.123002][ T961] rust_binder: Error while translating object. [ 47.132680][ T961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.139319][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 47.149314][ T961] rust_binder: 142: no such ref 1 [ 47.164100][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 47.178688][ T963] fuse: Unknown parameter 'obj_type' [ 47.261644][ T975] /dev/md0: Can't lookup blockdev [ 47.518914][ T329] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 47.648985][ T329] usb 2-1: device descriptor read/64, error -71 [ 47.757197][ T616] usb 1-1: USB disconnect, device number 9 [ 47.898931][ T329] usb 2-1: device descriptor read/64, error -71 [ 48.148984][ T329] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 48.288989][ T329] usb 2-1: device descriptor read/64, error -71 [ 48.334302][ T406] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 48.341533][ T406] usb 3-1: No valid video chain found. [ 48.349690][ T406] usb 3-1: USB disconnect, device number 7 [ 48.538915][ T329] usb 2-1: device descriptor read/64, error -71 [ 48.649449][ T329] usb usb2-port1: attempt power cycle [ 48.738941][ T406] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 48.900122][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.908510][ T992] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 48.911392][ T992] rust_binder: Error while translating object. [ 48.913232][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.926416][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.926982][ T406] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 48.936473][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 48.947731][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.974070][ T406] usb 3-1: config 0 descriptor?? [ 48.998942][ T329] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 49.020038][ T329] usb 2-1: device descriptor read/8, error -71 [ 49.150189][ T329] usb 2-1: device descriptor read/8, error -71 [ 49.185114][ T406] playstation 0003:054C:05C4.0005: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 49.388919][ T329] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 49.409880][ T329] usb 2-1: device descriptor read/8, error -71 [ 49.540086][ T329] usb 2-1: device descriptor read/8, error -71 [ 49.597029][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve feature with reportID 163: -32 [ 49.598377][ T998] rust_binder: Error while translating object. [ 49.607089][ T986] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 49.607155][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve DualShock4 firmware info: -32 [ 49.613456][ T986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 49.621656][ T406] playstation 0003:054C:05C4.0005: Failed to get firmware info from DualShock4 [ 49.631508][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.641080][ T406] playstation 0003:054C:05C4.0005: HW/FW version data in sysfs will be invalid. [ 49.650073][ T986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:19 [ 49.659913][ T329] usb usb2-port1: unable to enumerate USB device [ 49.669249][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 49.760852][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 49.760873][ T36] audit: type=1400 audit(1756985207.080:287): avc: denied { read write } for pid=1005 comm="syz.4.215" name="fuse" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.799374][ T36] audit: type=1400 audit(1756985207.080:288): avc: denied { open } for pid=1005 comm="syz.4.215" path="/dev/fuse" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.822968][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve feature with reportID 2: -71 [ 49.826873][ T36] audit: type=1400 audit(1756985207.140:289): avc: denied { accept } for pid=1011 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.833123][ T406] playstation 0003:054C:05C4.0005: Retrying DualShock 4 get calibration report (0x02) request [ 49.863637][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve feature with reportID 2: -71 [ 49.865701][ T36] audit: type=1400 audit(1756985207.190:290): avc: denied { mount } for pid=1013 comm="syz.4.218" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.873272][ T406] playstation 0003:054C:05C4.0005: Retrying DualShock 4 get calibration report (0x02) request [ 49.909124][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve feature with reportID 2: -71 [ 49.918561][ T406] playstation 0003:054C:05C4.0005: Failed to retrieve DualShock4 calibration info: -71 [ 49.929653][ T406] playstation 0003:054C:05C4.0005: Invalid gyro calibration data for axis (3), disabling calibration. [ 49.941378][ T406] playstation 0003:054C:05C4.0005: Invalid gyro calibration data for axis (4), disabling calibration. [ 49.952801][ T406] playstation 0003:054C:05C4.0005: Invalid gyro calibration data for axis (5), disabling calibration. [ 49.964893][ T406] playstation 0003:054C:05C4.0005: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 49.977793][ T406] playstation 0003:054C:05C4.0005: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 49.989620][ T406] playstation 0003:054C:05C4.0005: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 50.001409][ T406] playstation 0003:054C:05C4.0005: Failed to get calibration data from DualShock4 [ 50.010676][ T406] playstation 0003:054C:05C4.0005: Gyroscope and accelerometer will be inaccurate. [ 50.021307][ T406] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0005/input/input5 [ 50.047934][ T406] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0005/input/input6 [ 50.076370][ T406] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0005/input/input7 [ 50.104283][ T406] playstation 0003:054C:05C4.0005: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 50.119917][ T406] usb 3-1: USB disconnect, device number 8 [ 50.299374][ T1032] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.307687][ T1032] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 50.316728][ T1032] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.324983][ T1032] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 50.340852][ T1034] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 50.476740][ T1048] rust_binder: Write failure EFAULT in pid:25 [ 50.599055][ T1050] pim6reg1: entered promiscuous mode [ 50.599565][ T36] audit: type=1326 audit(1756985207.920:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9158ebe9 code=0x7ffc0000 [ 50.605788][ T1050] pim6reg1: entered allmulticast mode [ 50.611511][ T36] audit: type=1326 audit(1756985207.940:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9158ebe9 code=0x7ffc0000 [ 50.777601][ T1068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=1068 comm=syz.1.238 [ 50.988360][ T1080] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 50.996371][ T1080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 51.558088][ T36] audit: type=1400 audit(1756985208.870:293): avc: denied { bind } for pid=1103 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.666854][ T1112] overlayfs: failed to clone lowerpath [ 52.518925][ T406] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.665085][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 52.679746][ T406] usb 3-1: Using ep0 maxpacket: 32 [ 52.690975][ T406] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.708057][ T406] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.730426][ T406] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 52.741178][ T406] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 52.759499][ T406] usb 3-1: Product: syz [ 52.769024][ T406] usb 3-1: Manufacturer: syz [ 52.782474][ T1147] rust_binder: Error while translating object. [ 52.782522][ T1147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.789871][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 52.802272][ T406] hub 3-1:4.0: USB hub found [ 52.951790][ T428] bridge_slave_1: left allmulticast mode [ 52.965753][ T428] bridge_slave_1: left promiscuous mode [ 52.980571][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.996160][ T428] bridge_slave_0: left allmulticast mode [ 53.002079][ T428] bridge_slave_0: left promiscuous mode [ 53.007780][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.016761][ T406] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 53.044765][ T1157] /dev/rnullb0: Can't open blockdev [ 53.090448][ T1157] netlink: 228 bytes leftover after parsing attributes in process `syz.1.270'. [ 53.140509][ T428] veth1_macvtap: left promiscuous mode [ 53.146306][ T428] veth0_vlan: left promiscuous mode [ 53.195207][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.202415][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.209676][ T1159] bridge_slave_0: entered allmulticast mode [ 53.216698][ T1159] bridge_slave_0: entered promiscuous mode [ 53.223654][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.230811][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.238482][ T1159] bridge_slave_1: entered allmulticast mode [ 53.245896][ T1159] bridge_slave_1: entered promiscuous mode [ 53.308386][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.315655][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.323261][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.331148][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.354310][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.362075][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.371573][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.379209][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.389269][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.396501][ T900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.420347][ T1159] veth0_vlan: entered promiscuous mode [ 53.431598][ T1159] veth1_macvtap: entered promiscuous mode [ 53.479355][ T9] usb 3-1: USB disconnect, device number 9 [ 53.529543][ T1185] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 53.537424][ T1185] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 53.545692][ T1185] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.275'. [ 53.628414][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.047257][ T36] audit: type=1400 audit(1756985211.360:294): avc: denied { setopt } for pid=1205 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.072910][ T36] audit: type=1400 audit(1756985211.390:295): avc: denied { relabelfrom } for pid=1205 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.103462][ T36] audit: type=1400 audit(1756985211.390:296): avc: denied { relabelto } for pid=1205 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.204485][ T1217] /dev/nbd2: Can't lookup blockdev [ 54.345597][ T1219] rust_binder: Error in use_page_slow: ESRCH [ 54.345617][ T1219] rust_binder: use_range failure ESRCH [ 54.351768][ T1219] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 54.357307][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.365561][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:55 [ 54.376025][ T1219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.472382][ T1230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.287'. [ 54.490587][ T1227] support for cryptoloop has been removed. Use dm-crypt instead. [ 55.171236][ T900] bridge_slave_1: left allmulticast mode [ 55.177054][ T900] bridge_slave_1: left promiscuous mode [ 55.182930][ T900] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.191308][ T900] bridge_slave_0: left allmulticast mode [ 55.197075][ T900] bridge_slave_0: left promiscuous mode [ 55.202924][ T900] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.303975][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 55.303993][ T36] audit: type=1400 audit(1756985212.620:299): avc: denied { bind } for pid=1272 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.345780][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.354084][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.361279][ T1271] bridge_slave_0: entered allmulticast mode [ 55.367617][ T1271] bridge_slave_0: entered promiscuous mode [ 55.374423][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.381718][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.388804][ T1271] bridge_slave_1: entered allmulticast mode [ 55.395186][ T1271] bridge_slave_1: entered promiscuous mode [ 55.408426][ T900] veth1_macvtap: left promiscuous mode [ 55.415311][ T900] veth0_vlan: left promiscuous mode [ 55.518320][ T1295] fuse: Bad value for 'fd' [ 55.524996][ T1295] 9pnet_fd: Insufficient options for proto=fd [ 55.572295][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.579423][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.581673][ T36] audit: type=1400 audit(1756985212.900:300): avc: denied { accept } for pid=1309 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 55.586744][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.614855][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.643398][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.651136][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.662331][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.668918][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.669617][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.702622][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.709845][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.790761][ T36] audit: type=1400 audit(1756985213.110:301): avc: denied { ioctl } for pid=1322 comm="syz.4.317" path="socket:[10916]" dev="sockfs" ino=10916 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.830015][ T1271] veth0_vlan: entered promiscuous mode [ 55.855737][ T1271] veth1_macvtap: entered promiscuous mode [ 55.882960][ T1327] rust_binder: Error while translating object. [ 55.883023][ T1327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.884047][ T36] audit: type=1400 audit(1756985213.200:302): avc: denied { getopt } for pid=1326 comm="syz.5.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.898931][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 55.969706][ T36] audit: type=1400 audit(1756985213.290:303): avc: denied { map } for pid=1330 comm="syz.2.303" path="socket:[10981]" dev="sockfs" ino=10981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.019502][ T1335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.019537][ T1335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 56.034979][ T1336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.060410][ T1340] syz.2.322 (1340): /proc/1339/oom_adj is deprecated, please use /proc/1339/oom_score_adj instead. [ 56.418657][ T1359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1359 comm=syz.4.329 [ 56.431533][ T1359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 56.494575][ T36] audit: type=1400 audit(1756985213.810:304): avc: denied { setopt } for pid=1364 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.496735][ T1365] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 56.515930][ T36] audit: type=1400 audit(1756985213.810:305): avc: denied { wake_alarm } for pid=1364 comm="syz.1.332" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.639106][ T1371] binder: Bad value for 'max' [ 56.807004][ T36] audit: type=1400 audit(1756985214.120:306): avc: denied { ioctl } for pid=1382 comm="syz.2.339" path="cgroup:[4026532301]" dev="nsfs" ino=4026532301 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.021472][ T36] audit: type=1326 audit(1756985214.340:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.2.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f567658ebe9 code=0x0 [ 57.262229][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.278924][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.296370][ T1398] bridge_slave_0: entered allmulticast mode [ 57.304248][ T1398] bridge_slave_0: entered promiscuous mode [ 57.311123][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.318183][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.326066][ T1398] bridge_slave_1: entered allmulticast mode [ 57.333272][ T1398] bridge_slave_1: entered promiscuous mode [ 57.395140][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.402432][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.409780][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.417003][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.438897][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.446505][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.457945][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.465155][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.480776][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.488066][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.523766][ T1398] veth0_vlan: entered promiscuous mode [ 57.540496][ T1398] veth1_macvtap: entered promiscuous mode [ 57.691711][ T1427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.691744][ T1427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:262 [ 57.693534][ T36] audit: type=1400 audit(1756985215.010:308): avc: denied { create } for pid=1426 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 57.949007][ T364] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.006967][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 58.098924][ T364] usb 7-1: Using ep0 maxpacket: 8 [ 58.105828][ T364] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 58.114664][ T364] usb 7-1: config 179 has no interface number 0 [ 58.121482][ T364] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 58.132996][ T364] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 58.144808][ T364] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.156997][ T364] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 58.168776][ T364] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 58.182964][ T364] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 58.192229][ T364] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.202205][ T1422] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 58.369333][ T1444] sock: sock_timestamping_bind_phc: sock not bind to device [ 58.388032][ T1449] rust_binder: 31: no such ref 5 [ 58.394443][ T1449] rust_binder: Write failure EINVAL in pid:31 [ 58.415052][ T1452] SELinux: failed to load policy [ 58.479558][ T1453] devpts: called with bogus options [ 58.486246][ T1453] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 58.494967][ T1453] fuseblk: Unknown parameter '0xffffffffffffffff0x0000000000000009' [ 58.659337][ T1456] 9pnet_fd: Insufficient options for proto=fd [ 58.693700][ T364] usb 7-1: USB disconnect, device number 2 [ 58.699692][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 58.699735][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.841339][ T1470] tmpfs: Unknown parameter 'no' [ 58.889828][ T1472] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 58.908313][ T1474] rust_binder: Write failure EFAULT in pid:296 [ 59.158976][ T364] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 59.330279][ T364] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 59.338520][ T364] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.349217][ T364] usb 2-1: config 0 has no interface number 0 [ 59.357101][ T364] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 59.366329][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.374828][ T364] usb 2-1: Product: syz [ 59.379022][ T364] usb 2-1: Manufacturer: syz [ 59.383641][ T364] usb 2-1: SerialNumber: syz [ 59.389218][ T364] usb 2-1: config 0 descriptor?? [ 59.422021][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 59.422512][ T1485] rust_binder: Error while translating object. [ 59.431933][ T1485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.438726][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 59.565940][ T1496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 59.602505][ T1476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 59.663745][ T1505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.683263][ T1505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.761749][ T364] usb 2-1: USB disconnect, device number 12 [ 59.804158][ T1511] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 59.819271][ T1513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.819297][ T1513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 60.007428][ T1525] tipc: Started in network mode [ 60.021912][ T1525] tipc: Node identity 02ca047151ee, cluster identity 4711 [ 60.029235][ T1525] tipc: Enabled bearer , priority 0 [ 60.036845][ T1525] syzkaller0: entered promiscuous mode [ 60.042709][ T1525] syzkaller0: entered allmulticast mode [ 60.049965][ T1525] tipc: Resetting bearer [ 60.056941][ T1525] tipc: Disabling bearer [ 60.329227][ T1531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 60.342474][ T1531] rust_binder: Failed copying into alloc: EFAULT [ 60.342502][ T1531] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 60.349190][ T1531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.357473][ T1531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 60.367189][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.538889][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 60.545401][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.554146][ T10] usb 7-1: config 0 has no interface number 0 [ 60.568076][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.578173][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.596485][ T10] usb 7-1: Product: syz [ 60.600760][ T10] usb 7-1: Manufacturer: syz [ 60.605388][ T10] usb 7-1: SerialNumber: syz [ 60.611911][ T10] usb 7-1: config 0 descriptor?? [ 60.619472][ T10] smsc95xx v2.0.0 [ 60.661343][ T1557] tmpfs: Unknown parameter 'çid' [ 60.683178][ T1563] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.819354][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.831200][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.843935][ T1574] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 60.851470][ T1574] rust_binder: Write failure EINVAL in pid:309 [ 60.979699][ T364] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.056641][ T1583] rust_binder: Write failure EFAULT in pid:318 [ 61.069848][ T1586] 9pnet_fd: Insufficient options for proto=fd [ 61.134130][ T1593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 61.155350][ T364] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 61.171369][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 61.173731][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:332 [ 61.173799][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.201288][ T364] usb 3-1: Product: syz [ 61.205810][ T364] usb 3-1: Manufacturer: syz [ 61.210495][ T364] usb 3-1: SerialNumber: syz [ 61.219410][ T364] usb 3-1: config 0 descriptor?? [ 61.617649][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 61.617672][ T36] audit: type=1400 audit(1756985218.870:314): avc: denied { read } for pid=1610 comm="syz.4.416" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.675276][ T36] audit: type=1400 audit(1756985218.880:315): avc: denied { accept } for pid=1610 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.695674][ T36] audit: type=1400 audit(1756985218.880:316): avc: denied { read } for pid=1610 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.716753][ T36] audit: type=1400 audit(1756985218.910:317): avc: denied { execute } for pid=1526 comm="syz.6.388" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.866276][ T364] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.876929][ T364] asix 3-1:0.0: probe with driver asix failed with error -71 [ 61.891058][ T364] usb 3-1: USB disconnect, device number 10 [ 62.355717][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 62.368612][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 62.380716][ T10] usb 7-1: USB disconnect, device number 3 [ 62.398948][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 62.550941][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 62.559935][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 62.571087][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 62.584197][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.593653][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.601715][ T9] usb 2-1: Product: syz [ 62.605912][ T9] usb 2-1: Manufacturer: è…àĥċŠ¨çŞıìžï’‘ΐâżĦäˆäƒ”ì¤âŒĤꍠâĴêƒŒïŻ—îœğ [ 62.614928][ T9] usb 2-1: SerialNumber: syz [ 62.620704][ T1626] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.627927][ T1626] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.047308][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 63.061089][ T1634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.065812][ T9] usb 2-1: USB disconnect, device number 13 [ 63.079227][ T364] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.146233][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 63.239105][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 63.263239][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17865, setting to 1024 [ 63.279685][ T364] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 63.289085][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.297959][ T364] usb 3-1: config 0 descriptor?? [ 63.304588][ T1632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.339686][ T1656] fuse: Bad value for 'fd' [ 63.345033][ T1656] fuse: Bad value for 'fd' [ 63.458619][ T1661] fuseblk: Bad value for 'fd' [ 63.473611][ T36] audit: type=1400 audit(1756985220.790:318): avc: denied { setopt } for pid=1662 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.492971][ T36] audit: type=1400 audit(1756985220.790:319): avc: denied { ioctl } for pid=1662 comm="syz.4.434" path="socket:[13635]" dev="sockfs" ino=13635 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.568908][ T9] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 63.708949][ T9] usb 7-1: device descriptor read/64, error -71 [ 63.726632][ T364] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 63.737868][ T36] audit: type=1326 audit(1756985221.050:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.1.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fcb9158ebe9 code=0x0 [ 63.761018][ T364] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 63.798761][ T36] audit: type=1400 audit(1756985221.110:321): avc: denied { bind } for pid=1689 comm="syz.1.443" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.804011][ T1690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.820490][ T36] audit: type=1400 audit(1756985221.110:322): avc: denied { name_bind } for pid=1689 comm="syz.1.443" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 63.858103][ T364] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 63.859812][ T36] audit: type=1400 audit(1756985221.110:323): avc: denied { node_bind } for pid=1689 comm="syz.1.443" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 63.876232][ T364] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 63.899491][ T364] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 63.928297][ T330] usb 3-1: USB disconnect, device number 11 [ 63.937512][ T330] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 63.978960][ T9] usb 7-1: device descriptor read/64, error -71 [ 64.218933][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 64.258945][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 64.348949][ T9] usb 7-1: device descriptor read/64, error -71 [ 64.389021][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.532147][ T1713] syz.2.450: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 64.547806][ T1713] CPU: 1 UID: 0 PID: 1713 Comm: syz.2.450 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 64.547838][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.547849][ T1713] Call Trace: [ 64.547855][ T1713] [ 64.547861][ T1713] __dump_stack+0x21/0x30 [ 64.547890][ T1713] dump_stack_lvl+0x10c/0x190 [ 64.547914][ T1713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.547936][ T1713] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.547964][ T1713] dump_stack+0x19/0x20 [ 64.547988][ T1713] warn_alloc+0x1bc/0x2a0 [ 64.548013][ T1713] ? stack_depot_save_flags+0x38/0x800 [ 64.548044][ T1713] ? __cfi_warn_alloc+0x10/0x10 [ 64.548067][ T1713] ? kasan_save_track+0x4f/0x80 [ 64.548086][ T1713] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 64.548113][ T1713] ? xskq_create+0x68/0x2a0 [ 64.548131][ T1713] ? xsk_init_queue+0xb6/0x120 [ 64.548149][ T1713] ? xsk_setsockopt+0x43f/0x6f0 [ 64.548165][ T1713] ? do_sock_setsockopt+0x26d/0x400 [ 64.548183][ T1713] ? __x64_sys_setsockopt+0x1b8/0x250 [ 64.548201][ T1713] ? x64_sys_call+0x2adc/0x2ee0 [ 64.548227][ T1713] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.548251][ T1713] __vmalloc_node_range_noprof+0x135/0x1420 [ 64.548280][ T1713] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.548305][ T1713] ? avc_has_perm+0x144/0x220 [ 64.548331][ T1713] ? kasan_save_alloc_info+0x40/0x50 [ 64.548356][ T1713] ? __kasan_kmalloc+0x96/0xb0 [ 64.548375][ T1713] vmalloc_user_noprof+0x77/0x90 [ 64.548400][ T1713] ? xskq_create+0xdb/0x2a0 [ 64.548418][ T1713] xskq_create+0xdb/0x2a0 [ 64.548436][ T1713] xsk_init_queue+0xb6/0x120 [ 64.548455][ T1713] xsk_setsockopt+0x43f/0x6f0 [ 64.548472][ T1713] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.548489][ T1713] ? do_futex+0x356/0x500 [ 64.548508][ T1713] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 64.548532][ T1713] ? security_socket_setsockopt+0x33/0xd0 [ 64.548548][ T1713] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.548565][ T1713] do_sock_setsockopt+0x26d/0x400 [ 64.548584][ T1713] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 64.548604][ T1713] __x64_sys_setsockopt+0x1b8/0x250 [ 64.548625][ T1713] x64_sys_call+0x2adc/0x2ee0 [ 64.548653][ T1713] do_syscall_64+0x58/0xf0 [ 64.548681][ T1713] ? clear_bhb_loop+0x50/0xa0 [ 64.548704][ T1713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.548727][ T1713] RIP: 0033:0x7f567658ebe9 [ 64.548744][ T1713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.548762][ T1713] RSP: 002b:00007f56773b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.548784][ T1713] RAX: ffffffffffffffda RBX: 00007f56767c6090 RCX: 00007f567658ebe9 [ 64.548798][ T1713] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 64.548811][ T1713] RBP: 00007f5676611e19 R08: 0000000000000004 R09: 0000000000000000 [ 64.548823][ T1713] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.548841][ T1713] R13: 00007f56767c6128 R14: 00007f56767c6090 R15: 00007ffe38ee94d8 [ 64.548858][ T1713] [ 64.618914][ T9] usb 7-1: device descriptor read/64, error -71 [ 64.621817][ T1713] Mem-Info: [ 64.629868][ T1712] capability: warning: `syz.2.450' uses 32-bit capabilities (legacy support in use) [ 64.632142][ T1713] active_anon:6071 inactive_anon:0 isolated_anon:0 [ 64.632142][ T1713] active_file:20102 inactive_file:2221 isolated_file:0 [ 64.632142][ T1713] unevictable:0 dirty:66 writeback:0 [ 64.632142][ T1713] slab_reclaimable:7029 slab_unreclaimable:70162 [ 64.632142][ T1713] mapped:24471 shmem:178 pagetables:836 [ 64.632142][ T1713] sec_pagetables:0 bounce:0 [ 64.632142][ T1713] kernel_misc_reclaimable:0 [ 64.632142][ T1713] free:1523557 free_pcp:4707 free_cma:0 [ 64.688898][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.702041][ T1713] Node 0 active_anon:24284kB inactive_anon:0kB active_file:80408kB inactive_file:8884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97928kB dirty:264kB writeback:0kB shmem:712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5600kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 64.739035][ T9] usb usb7-port1: attempt power cycle [ 64.742201][ T1713] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:13800kB local_pcp:6020kB free_cma:0kB [ 64.997389][ T1713] lowmem_reserve[]: 0 3921 3921 [ 65.002605][ T1713] Normal free:3141956kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24284kB inactive_anon:0kB active_file:80408kB inactive_file:8884kB unevictable:0kB writepending:264kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4992kB local_pcp:2788kB free_cma:0kB [ 65.002641][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.002667][ T1713] lowmem_reserve[]: 0 0 0 [ 65.047072][ T1713] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 65.063152][ T1713] Normal: 2149*4kB (UM) 1970*8kB (UM) 1440*16kB (UM) 681*32kB (UME) 588*64kB (UME) 26*128kB (UME) 5*256kB (UME) 1*512kB (E) 7*1024kB (UME) 10*2048kB (UME) 733*4096kB (ME) = 3141956kB [ 65.082001][ T1713] 22497 total pagecache pages [ 65.087440][ T1713] 0 pages in swap cache [ 65.091875][ T9] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 65.100033][ T1713] Free swap = 124504kB [ 65.104197][ T1713] Total swap = 124996kB [ 65.108784][ T1713] 2097051 pages RAM [ 65.112731][ T1713] 0 pages HighMem/MovableOnly [ 65.117544][ T1713] 351534 pages reserved [ 65.121885][ T1713] 0 pages cma reserved [ 65.126846][ T9] usb 7-1: device descriptor read/8, error -71 [ 65.134014][ T1713] Memory allocations: [ 65.138034][ T1713] 0 B 0 init/main.c:1370 func:do_initcalls [ 65.145415][ T1713] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 65.153594][ T1713] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 65.158981][ T10] usb 2-1: device descriptor read/64, error -71 [ 65.161797][ T1713] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 65.176028][ T1713] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 65.183975][ T1713] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 65.192747][ T1713] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 65.201038][ T1713] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 65.209079][ T1713] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 65.217163][ T1713] 0 B 0 init/initramfs.c:101 func:find_link [ 65.260202][ T9] usb 7-1: device descriptor read/8, error -71 [ 65.398949][ T10] usb 2-1: device descriptor read/64, error -71 [ 65.468940][ T616] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 65.498953][ T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 65.509152][ T10] usb usb2-port1: attempt power cycle [ 65.520132][ T9] usb 7-1: device descriptor read/8, error -71 [ 65.619708][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.627901][ T616] usb 3-1: not running at top speed; connect to a high speed hub [ 65.636926][ T616] usb 3-1: config 9 has an invalid interface number: 49 but max is 0 [ 65.645347][ T616] usb 3-1: config 9 has no interface number 0 [ 65.651718][ T616] usb 3-1: config 9 interface 49 has no altsetting 0 [ 65.659578][ T9] usb 7-1: device descriptor read/8, error -71 [ 65.666416][ T616] usb 3-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 65.675888][ T616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.684286][ T616] usb 3-1: Product: syz [ 65.688818][ T616] usb 3-1: Manufacturer: syz [ 65.693493][ T616] usb 3-1: SerialNumber: syz [ 65.769015][ T9] usb usb7-port1: unable to enumerate USB device [ 65.848908][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 65.869998][ T10] usb 2-1: device descriptor read/8, error -71 [ 65.999945][ T10] usb 2-1: device descriptor read/8, error -71 [ 66.238924][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 66.260081][ T10] usb 2-1: device descriptor read/8, error -71 [ 66.350979][ T1720] capability: warning: `syz.6.452' uses deprecated v2 capabilities in a way that may be insecure [ 66.390132][ T10] usb 2-1: device descriptor read/8, error -71 [ 66.399877][ T1720] kvm: kvm [1719]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 66.410191][ T616] usb-storage 3-1:9.49: USB Mass Storage device detected [ 66.436261][ T616] usb-storage 3-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 66.481452][ T616] usb 3-1: USB disconnect, device number 12 [ 66.499099][ T10] usb usb2-port1: unable to enumerate USB device [ 66.778939][ T616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 66.828925][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 66.928919][ T616] usb 3-1: Using ep0 maxpacket: 8 [ 66.935933][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.944088][ T616] usb 3-1: too many configurations: 246, using maximum allowed: 8 [ 66.953317][ T616] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 66.961715][ T616] usb 3-1: can't read configurations, error -61 [ 66.990051][ T45] usb 7-1: config 0 has an invalid interface number: 18 but max is 0 [ 66.998586][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.009389][ T45] usb 7-1: config 0 has no interface number 0 [ 67.015664][ T45] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 67.024931][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.033792][ T45] usb 7-1: config 0 descriptor?? [ 67.044889][ T45] usb 7-1: bad CDC descriptors [ 67.084776][ T1748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1748 comm=syz.1.461 [ 67.098120][ T36] audit: type=1400 audit(1756985224.414:324): avc: denied { mount } for pid=1747 comm="syz.1.461" name="/" dev="configfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.099048][ T616] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 67.130387][ T36] audit: type=1400 audit(1756985224.454:325): avc: denied { setattr } for pid=1747 comm="syz.1.461" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.193769][ T1750] syzkaller0: entered promiscuous mode [ 67.199529][ T1750] syzkaller0: entered allmulticast mode [ 67.208906][ T1750] tipc: Started in network mode [ 67.214081][ T1750] tipc: Node identity , cluster identity 4711 [ 67.220213][ T1750] tipc: Failed to obtain node identity [ 67.225761][ T1750] tipc: Enabling of bearer rejected, failed to enable media [ 67.236959][ T1750] netlink: 25 bytes leftover after parsing attributes in process `syz.1.462'. [ 67.249345][ T1734] 9pnet_fd: Insufficient options for proto=fd [ 67.255964][ T10] usb 7-1: USB disconnect, device number 8 [ 67.278976][ T616] usb 3-1: Using ep0 maxpacket: 8 [ 67.285613][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.293356][ T616] usb 3-1: too many configurations: 246, using maximum allowed: 8 [ 67.302548][ T616] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.310384][ T616] usb 3-1: can't read configurations, error -61 [ 67.316794][ T616] usb usb3-port1: attempt power cycle [ 67.391912][ T1756] netlink: 80 bytes leftover after parsing attributes in process `syz.1.463'. [ 67.400970][ T1755] netlink: 80 bytes leftover after parsing attributes in process `syz.1.463'. [ 67.405905][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.418772][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.438344][ T1765] 9pnet_fd: Insufficient options for proto=fd [ 67.638949][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 67.658910][ T616] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 67.679409][ T616] usb 3-1: Using ep0 maxpacket: 8 [ 67.686179][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.694319][ T616] usb 3-1: too many configurations: 246, using maximum allowed: 8 [ 67.703988][ T616] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.711818][ T616] usb 3-1: can't read configurations, error -61 [ 67.800104][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.811598][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 67.824665][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 67.834041][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.846777][ T45] usb 2-1: config 0 descriptor?? [ 67.849995][ T616] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.878960][ T1786] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.883508][ T616] usb 3-1: Using ep0 maxpacket: 8 [ 67.893102][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.906177][ T616] usb 3-1: too many configurations: 246, using maximum allowed: 8 [ 67.915374][ T616] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.923539][ T616] usb 3-1: can't read configurations, error -61 [ 67.930573][ T616] usb usb3-port1: unable to enumerate USB device [ 67.960462][ T1788] rust_binder: Error while translating object. [ 67.960510][ T1788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 67.967442][ T1788] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 67.977068][ T1788] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:97 [ 67.994404][ T616] rust_binder: 1787: removing orphan mapping 0:24 [ 68.064365][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 68.072879][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 68.083250][ T45] usb 2-1: USB disconnect, device number 18 [ 68.092359][ T36] audit: type=1400 audit(1756985225.414:326): avc: denied { setopt } for pid=1801 comm="syz.6.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.113228][ T36] audit: type=1400 audit(1756985225.414:327): avc: denied { getopt } for pid=1801 comm="syz.6.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.139142][ T36] audit: type=1400 audit(1756985225.464:328): avc: denied { bind } for pid=1803 comm="syz.6.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.139630][ T1805] rust_binder: Write failure EFAULT in pid:109 [ 68.203700][ T1810] netlink: 'syz.6.482': attribute type 16 has an invalid length. [ 68.218141][ T1810] netlink: 'syz.6.482': attribute type 3 has an invalid length. [ 68.226011][ T1810] netlink: 64058 bytes leftover after parsing attributes in process `syz.6.482'. [ 68.282327][ T1812] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1812 comm=syz.6.483 [ 68.306396][ T1816] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 68.306432][ T1816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 68.314443][ T1816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:121 [ 68.568899][ T616] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 68.706420][ T1843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 68.730136][ T616] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.758895][ T616] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.778914][ T616] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.792670][ T616] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.802781][ T616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.813204][ T616] usb 7-1: config 0 descriptor?? [ 69.193497][ T1861] rust_binder: Error while translating object. [ 69.193546][ T1861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.200615][ T1861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 69.223350][ T616] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 69.249688][ T616] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 69.298673][ T1865] rust_binder: 1863 RLIMIT_NICE not set [ 69.363846][ T616] rust_binder: 1862: removing orphan mapping 0:4248 [ 69.376611][ T1869] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 69.376640][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 69.384903][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:406 [ 69.422975][ T36] audit: type=1400 audit(1756985226.744:329): avc: denied { read write } for pid=1817 comm="syz.6.485" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.424227][ T616] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 69.455511][ T36] audit: type=1400 audit(1756985226.744:330): avc: denied { open } for pid=1817 comm="syz.6.485" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.501044][ T616] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 69.631037][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 69.761028][ T1898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.485'. [ 69.788942][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 69.795835][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.818263][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 69.827747][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.836970][ T45] usb 2-1: config 0 descriptor?? [ 69.928882][ T616] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 70.044566][ T45] usb 2-1: USB disconnect, device number 19 [ 70.088937][ T616] usb 3-1: Using ep0 maxpacket: 16 [ 70.095377][ T616] usb 3-1: config 105 has an invalid interface number: 157 but max is 0 [ 70.104042][ T616] usb 3-1: config 105 has no interface number 0 [ 70.110466][ T616] usb 3-1: config 105 interface 157 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1023 [ 70.120947][ T616] usb 3-1: config 105 interface 157 altsetting 7 endpoint 0x6 has an invalid bInterval 253, changing to 11 [ 70.132540][ T616] usb 3-1: config 105 interface 157 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 70.143119][ T616] usb 3-1: config 105 interface 157 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 70.154291][ T616] usb 3-1: config 105 interface 157 has no altsetting 0 [ 70.163351][ T616] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=7e.69 [ 70.172573][ T616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.180684][ T616] usb 3-1: Product: syz [ 70.185048][ T616] usb 3-1: Manufacturer: syz [ 70.189908][ T616] usb 3-1: SerialNumber: syz [ 70.195753][ T1896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 70.203161][ T1896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 70.419037][ T616] usb 3-1: USB disconnect, device number 17 [ 70.510124][ T1910] netlink: 'syz.4.516': attribute type 7 has an invalid length. [ 70.518153][ T1910] netlink: 'syz.4.516': attribute type 5 has an invalid length. [ 70.526262][ T1910] netlink: 17 bytes leftover after parsing attributes in process `syz.4.516'. [ 70.593251][ T1927] fuse: Bad value for 'fd' [ 70.593505][ T1928] rust_binder: Error in use_page_slow: ESRCH [ 70.597932][ T1928] rust_binder: use_range failure ESRCH [ 70.605100][ T1928] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 70.611027][ T1928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.619108][ T1928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:412 [ 70.628874][ T1928] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 70.678971][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 70.958897][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 71.032105][ T1948] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 71.033384][ T36] audit: type=1400 audit(1756985228.354:331): avc: denied { checkpoint_restore } for pid=1946 comm="syz.2.528" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.120054][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 71.139210][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 71.158873][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.177480][ T10] usb 2-1: config 0 descriptor?? [ 71.183211][ T1941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.252247][ T1966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 71.352563][ T36] audit: type=1400 audit(1756985228.674:332): avc: denied { bind } for pid=1973 comm="syz.6.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.393412][ T10] hid-generic 0003:04F3:0755.000A: unknown main item tag 0x0 [ 71.404524][ T10] hid-generic 0003:04F3:0755.000A: unknown main item tag 0x0 [ 71.421669][ T10] hid-generic 0003:04F3:0755.000A: unknown main item tag 0x0 [ 71.436088][ T10] hid-generic 0003:04F3:0755.000A: unknown main item tag 0x0 [ 71.443941][ T10] hid-generic 0003:04F3:0755.000A: unknown main item tag 0x0 [ 71.453544][ T10] hid-generic 0003:04F3:0755.000A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 71.466250][ T45] usb 7-1: USB disconnect, device number 9 [ 71.469692][ T10] usb 2-1: USB disconnect, device number 20 [ 71.482994][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.661383][ T1987] rust_binder: Write failure EFAULT in pid:433 [ 71.794398][ T1989] netlink: 'syz.2.543': attribute type 5 has an invalid length. [ 71.808735][ T1989] netlink: 'syz.2.543': attribute type 5 has an invalid length. [ 71.816927][ T1989] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.543'. [ 71.968923][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 72.120187][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 72.129264][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.139476][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.148449][ T10] usb 2-1: config 1 has no interface number 0 [ 72.154667][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 72.165448][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 72.180828][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.190146][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.198247][ T10] usb 2-1: Product: syz [ 72.202612][ T10] usb 2-1: Manufacturer: syz [ 72.207459][ T10] usb 2-1: SerialNumber: syz [ 72.414430][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 72.427463][ T10] usb 2-1: USB disconnect, device number 21 [ 72.716761][ T1998] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 72.716781][ T1998] rust_binder: Error while translating object. [ 72.725850][ T1998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.732481][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 72.754410][ T2000] rust_binder: Error while translating object. [ 72.763699][ T2000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 72.770323][ T2000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 72.830218][ T2002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.849163][ T2002] rust_binder: Write failure EFAULT in pid:114 [ 73.138672][ T2020] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 73.157526][ T2020] netlink: 'syz.1.554': attribute type 2 has an invalid length. [ 73.191510][ T428] Bluetooth: hci1: Frame reassembly failed (-84) [ 73.208908][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 73.338903][ T45] usb 3-1: device descriptor read/64, error -71 [ 73.508986][ T2024] Bluetooth: hci0: command 0x1003 tx timeout [ 73.508986][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.599077][ T45] usb 3-1: device descriptor read/64, error -71 [ 73.791528][ T2041] kernel profiling enabled (shift: 63) [ 73.797311][ T2041] profiling shift: 63 too large [ 73.802422][ T2040] kernel profiling enabled (shift: 63) [ 73.807941][ T2040] profiling shift: 63 too large [ 73.828545][ T2045] binder: Unknown parameter 'contextÀ' [ 73.838953][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.964757][ T2054] syz.6.564 (2054): attempted to duplicate a private mapping with mremap. This is not supported. [ 73.978907][ T45] usb 3-1: device descriptor read/64, error -71 [ 74.167856][ T2059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 74.218948][ T45] usb 3-1: device descriptor read/64, error -71 [ 74.305184][ T2076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 74.329037][ T45] usb usb3-port1: attempt power cycle [ 74.668973][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 74.689945][ T45] usb 3-1: device descriptor read/8, error -71 [ 74.820020][ T45] usb 3-1: device descriptor read/8, error -71 [ 74.839065][ T2081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.573'. [ 74.908768][ T2098] overlayfs: failed to clone upperpath [ 74.935357][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 74.944853][ T2095] netlink: 16 bytes leftover after parsing attributes in process `syz.6.577'. [ 75.058918][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.080110][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.208974][ T406] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 75.217576][ T45] usb 3-1: device descriptor read/8, error -71 [ 75.268939][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 75.268939][ T1190] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.329914][ T45] usb usb3-port1: unable to enumerate USB device [ 75.353221][ T2118] syzkaller0: entered promiscuous mode [ 75.358935][ T406] usb 7-1: Using ep0 maxpacket: 32 [ 75.361524][ T2118] syzkaller0: entered allmulticast mode [ 75.365496][ T406] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 75.370757][ T2117] tipc: Started in network mode [ 75.378555][ T406] usb 7-1: config 4 has no interface number 0 [ 75.383318][ T2117] tipc: Node identity 92b4552aa24a, cluster identity 4711 [ 75.389589][ T406] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.396818][ T2117] tipc: Enabled bearer , priority 0 [ 75.407946][ T406] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.424856][ T406] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 75.424931][ T2119] tipc: Resetting bearer [ 75.434325][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.450275][ T2119] tipc: Disabling bearer [ 75.453334][ T406] hub 7-1:4.128: USB hub found [ 75.653388][ T406] hub 7-1:4.128: 6 ports detected [ 75.658571][ T406] hub 7-1:4.128: Using single TT (err -22) [ 75.665346][ T406] hub 7-1:4.128: insufficient power available to use all downstream ports [ 75.702802][ T36] audit: type=1400 audit(1756985233.024:333): avc: denied { map } for pid=2132 comm="syz.1.591" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.810107][ T36] audit: type=1326 audit(1756985233.134:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.1.593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9158ebe9 code=0x0 [ 75.974270][ T2153] fuseblk: Bad value for 'fd' [ 76.072806][ T406] usb 7-1: USB disconnect, device number 10 [ 76.569315][ C0] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 76.580147][ T2180] netlink: 'syz.4.607': attribute type 2 has an invalid length. [ 76.588545][ T2180] netlink: 1 bytes leftover after parsing attributes in process `syz.4.607'. [ 76.623335][ T36] audit: type=1400 audit(1756985233.944:335): avc: denied { bind } for pid=2181 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.666345][ T2180] netlink: 300 bytes leftover after parsing attributes in process `syz.4.607'. [ 76.678611][ T36] audit: type=1400 audit(1756985233.944:336): avc: denied { name_bind } for pid=2181 comm="syz.1.608" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 76.701721][ T36] audit: type=1400 audit(1756985233.944:337): avc: denied { node_bind } for pid=2181 comm="syz.1.608" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 76.931303][ T2213] rust_binder: 2200 RLIMIT_NICE not set [ 76.969704][ T36] audit: type=1400 audit(1756985234.294:338): avc: denied { unmount } for pid=1271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.004386][ T36] audit: type=1400 audit(1756985234.324:339): avc: denied { mounton } for pid=2215 comm="syz.2.617" path="/48/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 77.056846][ T2217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.617'. [ 77.640256][ T2222] rust_binder: 491: no such ref 4 [ 77.645459][ T2222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491 [ 77.750524][ T2232] No source specified [ 77.761225][ T2234] veth1: entered allmulticast mode [ 77.826201][ T2241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 77.826241][ T2241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:507 [ 77.860436][ T2243] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 77.920350][ T36] audit: type=1400 audit(1756985235.244:340): avc: denied { create } for pid=2248 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.944821][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 78.019451][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 78.081712][ T36] audit: type=1400 audit(1756985235.404:341): avc: denied { write } for pid=2257 comm="syz.1.631" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 78.113202][ T36] audit: type=1400 audit(1756985235.404:342): avc: denied { setattr } for pid=2257 comm="syz.1.631" path="/dev/urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 78.173563][ T2264] incfs: Error accessing: ./file0. [ 78.179406][ T2264] incfs: mount failed -20 [ 78.186793][ T2264] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 208) [ 78.186830][ T2264] rust_binder: Error while translating object. [ 78.198592][ T2264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.205979][ T2264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:527 [ 78.206087][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.215754][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.246305][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.256602][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.265549][ T10] usb 7-1: SerialNumber: syz [ 78.365272][ T2270] rust_binder: Write failure EINVAL in pid:152 [ 78.383075][ T2272] loop7: detected capacity change from 0 to 7 [ 78.477993][ T10] usb 7-1: USB disconnect, device number 11 [ 78.486717][ T2234] veth1: left allmulticast mode [ 78.502158][ T717] udevd[717]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.536358][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 78.546524][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 78.555264][ T616] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 78.575987][ T2276] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 78.686946][ T2283] rust_binder: Read failure Err(EAGAIN) in pid:165 [ 78.710318][ T616] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 78.727402][ T616] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.740481][ T616] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.747119][ T616] usb 2-1: New USB device found, idVendor=054c, idProduct=0250, bcdDevice= 0.00 [ 78.756484][ T616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.765244][ T616] usb 2-1: config 0 descriptor?? [ 78.771169][ T616] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 79.021409][ T2306] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 268435457 [ 79.171518][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 79.268985][ T406] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 79.420085][ T406] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.432832][ T406] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.442008][ T364] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 79.450349][ T406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.458439][ T406] usb 7-1: Product: syz [ 79.462773][ T406] usb 7-1: Manufacturer: syz [ 79.467450][ T406] usb 7-1: SerialNumber: syz [ 79.620361][ T364] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.629424][ T364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.639785][ T364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.648736][ T364] usb 3-1: config 1 has no interface number 0 [ 79.655009][ T364] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 79.666017][ T364] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 79.681136][ T364] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.682915][ T2321] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 79.690419][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.690449][ T364] usb 3-1: Product: syz [ 79.690465][ T364] usb 3-1: Manufacturer: syz [ 79.690480][ T364] usb 3-1: SerialNumber: syz [ 79.719488][ T2321] rust_binder: 531: no such ref 1 [ 79.724559][ T2321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:531 [ 80.482797][ T406] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 80.499076][ T406] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 80.506888][ T406] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 80.885802][ T329] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 80.895514][ T329] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.984341][ T406] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 80.993139][ T406] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 81.022926][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 81.022944][ T36] audit: type=1400 audit(1756985238.344:348): avc: denied { bind } for pid=2380 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.049750][ T2381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 81.049792][ T36] audit: type=1400 audit(1756985238.374:349): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 81.063456][ T2381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.672'. [ 81.083363][ T36] audit: type=1400 audit(1756985238.404:350): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.110990][ T36] audit: type=1400 audit(1756985238.404:351): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.134257][ T36] audit: type=1400 audit(1756985238.404:352): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.159326][ T36] audit: type=1400 audit(1756985238.404:353): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.184512][ T36] audit: type=1400 audit(1756985238.454:354): avc: denied { read } for pid=2386 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.210681][ T36] audit: type=1400 audit(1756985238.454:355): avc: denied { open } for pid=2386 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.250271][ T36] audit: type=1400 audit(1756985238.454:356): avc: denied { getattr } for pid=2386 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.297444][ T36] audit: type=1400 audit(1756985238.614:357): avc: denied { write } for pid=2385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.353185][ T2402] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 81.367289][ T2401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.378098][ T2402] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 81.387169][ T45] usb 2-1: USB disconnect, device number 22 [ 81.387970][ T2401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.423458][ T2409] netlink: 104 bytes leftover after parsing attributes in process `syz.4.676'. [ 81.563323][ T2420] netlink: 'syz.4.680': attribute type 4 has an invalid length. [ 81.572768][ T2420] netlink: 17 bytes leftover after parsing attributes in process `syz.4.680'. [ 81.762263][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.774257][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.786541][ T2461] rust_binder: 582: no such ref 3 [ 81.905346][ T406] usb 7-1: USB disconnect, device number 12 [ 81.915233][ T406] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 82.213888][ T364] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 82.240080][ T364] usb 3-1: USB disconnect, device number 22 [ 82.288701][ T2486] rust_binder: 2487 RLIMIT_NICE not set [ 82.298246][ T616] rust_binder: 2485: removing orphan mapping 0:4248 [ 82.372422][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 82.498915][ T406] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 82.512318][ T2531] overlayfs: failed to clone upperpath [ 82.588939][ T616] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 82.660264][ T406] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.669747][ T406] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.680013][ T406] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.690715][ T406] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.700422][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.708442][ T406] usb 2-1: Product: syz [ 82.712681][ T406] usb 2-1: Manufacturer: syz [ 82.717643][ T406] usb 2-1: SerialNumber: syz [ 82.750325][ T616] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.761768][ T616] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.771926][ T616] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.785337][ T616] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.794645][ T616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.803551][ T616] usb 7-1: config 0 descriptor?? [ 82.932967][ T406] usb 2-1: 0:2 : does not exist [ 82.940959][ T406] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 82.953102][ T406] usb 2-1: USB disconnect, device number 23 [ 82.962154][ T717] udevd[717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.211095][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.219931][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.227577][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.235164][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.242713][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.250201][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.257738][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.265443][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.273148][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.280763][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.289001][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.296624][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.304432][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.312878][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.320953][ T616] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 83.328756][ T616] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 83.338006][ T616] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 83.388171][ T2565] netlink: 'syz.4.709': attribute type 30 has an invalid length. [ 83.399562][ T2565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=2565 comm=syz.4.709 [ 83.470091][ T616] usb 7-1: USB disconnect, device number 13 [ 83.902281][ T2587] SELinux: security_context_str_to_sid (syste_uŬGı ‰:˙ß) failed with errno=-22 [ 83.932603][ T2590] SELinux: failed to load policy [ 84.007705][ T2606] loop0: Can't mount, would change RO state [ 84.089876][ T2612] netlink: 'syz.6.723': attribute type 11 has an invalid length. [ 84.133504][ T2621] rust_binder: 212: no such ref 1 [ 84.138700][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:212 [ 84.210650][ T2627] 9pnet_fd: Insufficient options for proto=fd [ 84.678901][ T616] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 84.825715][ T2653] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 84.837670][ T2653] rust_binder: Write failure EINVAL in pid:249 [ 84.837920][ T2654] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 84.844612][ T616] usb 7-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 84.852732][ T2654] rust_binder: Write failure EINVAL in pid:249 [ 84.875230][ T616] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.890952][ T616] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.906076][ T616] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.915842][ T616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.938901][ T616] usb 7-1: Product: syz [ 84.943224][ T616] usb 7-1: Manufacturer: syz [ 84.948190][ T616] usb 7-1: SerialNumber: syz [ 84.954077][ T2676] fuseblk: Bad value for 'fd' [ 85.005067][ T2682] fuse: Bad value for 'fd' [ 85.097753][ T2693] binder: Unknown parameter 'contextÀ' [ 85.163784][ T2687] netlink: 'syz.1.744': attribute type 16 has an invalid length. [ 85.208217][ T616] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 85.218619][ T616] cdc_ncm 7-1:1.0: bind() failure [ 85.225723][ T616] usb 7-1: USB disconnect, device number 14 [ 85.348979][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 85.377695][ T2698] overlayfs: failed to resolve './file0': -2 [ 85.409746][ T2700] rust_binder: 622: no such ref 0 [ 85.415322][ T2700] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 85.422832][ T2700] rust_binder: 622: no such ref 0 [ 85.448936][ T2702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.450102][ T2702] rust_binder: Error in use_page_slow: ESRCH [ 85.456983][ T2702] rust_binder: use_range failure ESRCH [ 85.463204][ T2702] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 85.469477][ T2702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.477818][ T2702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:624 [ 85.510505][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.533087][ T2705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.533266][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.40 [ 85.533369][ T2705] rust_binder: Error in use_page_slow: ESRCH [ 85.540095][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.549034][ T2705] rust_binder: use_range failure ESRCH [ 85.555290][ T10] usb 3-1: Product: ë–İז䂝ċ›Œä‘ĉ½éğˆç”äĦı²êŞ’îİá‚ıċ¤„‰ŸìĦ†Ħ‚蘒甎ïİ‹ê´¸ĉƒ´ïİ‹ï§ëµ˜ċ½•ĉĤŸá¸â¤Šèµ†ĉħáżîž‚ïŞĴçŻ‹èˆœâ¤‰äħ­á‘µë݁⇀ĉˆħċĦ‚䕽왔︞ï‡ħ䅵şê½’İ­ĦħċğıżêĥŻÊĤâš´ìŻ¤âŞŻîı‹‹îš¨ìĥ¨êħ“éĴ­íƒ°ïİŸĉ‘ çĞ­é°µ [ 85.563326][ T2705] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 85.569111][ T10] usb 3-1: Manufacturer: Óż [ 85.592380][ T2705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.600535][ T10] usb 3-1: SerialNumber: ˘ [ 85.605000][ T2705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:627 [ 85.738742][ T2739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=2739 comm=syz.6.757 [ 85.761874][ T2739] rust_binder: Failed copying remainder into alloc: EFAULT [ 85.761899][ T2739] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 85.769611][ T2739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 85.782906][ T2739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:236 [ 85.807624][ T2746] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 85.822624][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 85.825586][ T2746] rust_binder: Write failure EINVAL in pid:238 [ 85.831514][ T2747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.832112][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 85.862891][ T10] usb 3-1: USB disconnect, device number 23 [ 85.923788][ T900] bridge_slave_1: left allmulticast mode [ 85.929708][ T900] bridge_slave_1: left promiscuous mode [ 85.935652][ T900] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.943648][ T900] bridge_slave_0: left allmulticast mode [ 85.949783][ T900] bridge_slave_0: left promiscuous mode [ 85.955530][ T900] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.058679][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.066054][ T2753] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.073852][ T2753] bridge_slave_0: entered allmulticast mode [ 86.080408][ T2753] bridge_slave_0: entered promiscuous mode [ 86.086754][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.093945][ T2753] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.101385][ T2753] bridge_slave_1: entered allmulticast mode [ 86.107562][ T2753] bridge_slave_1: entered promiscuous mode [ 86.113633][ T406] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 86.122583][ T900] tipc: Left network mode [ 86.131096][ T900] veth1_macvtap: left promiscuous mode [ 86.136687][ T900] veth0_vlan: left promiscuous mode [ 86.211143][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.218468][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.225988][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.233254][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.241344][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 86.241362][ T36] audit: type=1400 audit(1756985243.564:380): avc: denied { map } for pid=2763 comm="syz.4.764" path="socket:[20721]" dev="sockfs" ino=20721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.287972][ T2753] veth0_vlan: entered promiscuous mode [ 86.294706][ T406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.315431][ T2753] veth1_macvtap: entered promiscuous mode [ 86.321658][ T406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.335447][ T406] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.363694][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.392120][ T406] usb 7-1: config 0 descriptor?? [ 86.394991][ T2769] rust_binder: Write failure EFAULT in pid:2 [ 86.429411][ T2771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 86.594425][ T2794] tipc: Started in network mode [ 86.625547][ T2794] tipc: Node identity fa9f6656c84a, cluster identity 4711 [ 86.633674][ T2794] tipc: Enabled bearer , priority 10 [ 86.738880][ T1718] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 86.799913][ T2803] tmpfs: Unknown parameter '00000000000000000005' [ 86.814403][ T406] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 86.879923][ T406] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 86.890504][ T406] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 86.908899][ T1718] usb 3-1: Using ep0 maxpacket: 16 [ 86.919312][ T1718] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.931924][ T1718] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.40 [ 86.941939][ T1718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.950510][ T1718] usb 3-1: Product: 䰊 [ 86.954898][ T1718] usb 3-1: Manufacturer: ­ [ 86.961521][ T1718] usb 3-1: SerialNumber: 罆á·ĞêĦ™ïĞĴĉĥĉ£èĴžèžµíœáµ²è­İĥŒè¤ŸáĞĦ面ċ½ î‘žê§†ä§–àĵ‰éŒ·ĉ²’é·’à§Żê“¨ïˆ“â­Ħìż‡ïş†°ï²†íŠğî§ĉƒ‡ëœïĥ„í‘”ċ”–ğ€êŽïŒ‚·µċ·‡äĥĤäĦħíŽĦ齑Ċè”á…†â‹‚ï£ï‘à˘ƒç”´ĠħëıŜ€ä·Şĉ™…à¸î˜’äĦ½íƒĥ²Žé“™ħĤä³şë‰äŻ°ìĤç¨éŻ¤ì˜–èƒı”œ–„çżˆï¸³êħ²è™à§ŽëĴ˘ç„ĵ烪ĉµĵ˜èŸ‚ïğì• [ 87.027885][ T2751] binder: Binderfs stats mode cannot be changed during a remount [ 87.036717][ T10] usb 7-1: USB disconnect, device number 15 [ 87.046778][ T10] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 87.220242][ T36] audit: type=1326 audit(1756985244.544:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.245467][ T36] audit: type=1326 audit(1756985244.564:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff1538d550 code=0x7ffc0000 [ 87.272172][ T36] audit: type=1326 audit(1756985244.564:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff1538d550 code=0x7ffc0000 [ 87.295765][ T36] audit: type=1326 audit(1756985244.564:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.319723][ T36] audit: type=1326 audit(1756985244.564:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.343896][ T36] audit: type=1326 audit(1756985244.564:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.368572][ T36] audit: type=1326 audit(1756985244.564:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.384145][ T2818] tipc: Enabling of bearer rejected, media not registered [ 87.392707][ T36] audit: type=1326 audit(1756985244.564:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.425927][ T36] audit: type=1326 audit(1756985244.564:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2809 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1538ebe9 code=0x7ffc0000 [ 87.607497][ T2780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.616568][ T2780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.630368][ T2780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.640536][ T2780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.658539][ T1718] usbhid 3-1:1.0: can't add hid device: -71 [ 87.668537][ T1718] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 87.684733][ T1718] usb 3-1: USB disconnect, device number 24 [ 87.769064][ T616] tipc: Node number set to 852846166 [ 87.861818][ T2839] rust_binder: Write failure EINVAL in pid:14 [ 87.896204][ T2845] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 87.982802][ T2851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 88.102811][ T2874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.147267][ T2879] binder: Bad value for 'stats' [ 88.200601][ T2881] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 88.255507][ T2884] overlayfs: failed to clone upperpath [ 88.483837][ T406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.501325][ T406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.510904][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.533127][ T406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.551391][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.559894][ T406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.567732][ T406] rtc rtc0: __rtc_set_alarm: err=-22 [ 88.586393][ T2925] rust_binder: Write failure EFAULT in pid:305 [ 88.594896][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.613881][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.622035][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.626043][ T2927] SELinux: policydb version 1885654916 does not match my version range 15-33 [ 88.633524][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.643215][ T2929] SELinux: security_context_str_to_sid (sytem_uŬGı) failed with errno=-22 [ 88.647785][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.656224][ T2927] SELinux: failed to load policy [ 88.665142][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.678037][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.686813][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.694899][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.703031][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.712296][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.720786][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.729228][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.739663][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.754306][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.771324][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.779454][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.787298][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.795548][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.805040][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.813570][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.821943][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.841537][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.850009][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.858219][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.869050][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.872495][ T2939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.896587][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.924324][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.932610][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.941519][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 88.949789][ T2919] binder: Unknown parameter 'defcontext01777777777777777777777' [ 89.012231][ T2947] netlink: 'syz.7.830': attribute type 4 has an invalid length. [ 89.165022][ T2953] pim6reg1: entered promiscuous mode [ 89.170422][ T2953] pim6reg1: entered allmulticast mode [ 89.242474][ T406] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 89.251795][ T2966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 89.251854][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:36 [ 89.270233][ T2967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.408871][ T406] usb 7-1: Using ep0 maxpacket: 32 [ 89.436586][ T406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.448305][ T406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.461132][ T406] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.470830][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.483526][ T406] usb 7-1: config 0 descriptor?? [ 89.493130][ T406] hub 7-1:0.0: USB hub found [ 89.497751][ T2993] binder: Unknown parameter 'statoıobal' [ 89.497904][ T2993] binder: Unknown parameter 'statoıobal' [ 89.530300][ T2996] rust_binder: Write failure EFAULT in pid:308 [ 89.530493][ T2995] __vm_enough_memory: pid: 2995, comm: syz.2.846, bytes: 18014402804453376 not enough memory for the allocation [ 89.719638][ T406] hub 7-1:0.0: 1 port detected [ 89.924205][ T3009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3009 comm=syz.4.850 [ 89.948885][ T3009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3009 comm=syz.4.850 [ 90.530490][ T406] hub 7-1:0.0: activate --> -90 [ 90.548021][ T3024] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 90.569102][ T3024] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 90.694782][ T3037] tipc: Started in network mode [ 90.701814][ T3037] tipc: Node identity 1, cluster identity 4711 [ 90.708236][ T3037] tipc: Node number set to 1 [ 90.713244][ T3037] tipc: Cannot configure node identity twice [ 90.876081][ T406] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 90.876336][ T1718] usb 7-1: USB disconnect, device number 16 [ 91.125149][ T3055] exFAT-fs (rnullb0): invalid boot record signature [ 91.132154][ T3055] exFAT-fs (rnullb0): failed to read boot sector [ 91.138809][ T3055] exFAT-fs (rnullb0): failed to recognize exfat type [ 91.167446][ T3060] netlink: 'syz.2.868': attribute type 12 has an invalid length. [ 91.389155][ T3064] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 91.396556][ T3064] rust_binder: Write failure EINVAL in pid:317 [ 91.397322][ T3064] /dev/md0: Can't lookup blockdev [ 91.408899][ T406] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 91.409278][ T3064] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 91.426743][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 91.426761][ T36] audit: type=1400 audit(1756985248.744:410): avc: denied { relabelto } for pid=3063 comm="syz.6.869" name="cgroup" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 91.462293][ T36] audit: type=1400 audit(1756985248.744:411): avc: denied { associate } for pid=3063 comm="syz.6.869" name="cgroup" dev="tmpfs" ino=560 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 91.491087][ T36] audit: type=1400 audit(1756985248.754:412): avc: denied { unlink } for pid=1398 comm="syz-executor" name="cgroup" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 91.549613][ T3073] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.557659][ T3073] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.567468][ T3073] bridge0: entered promiscuous mode [ 91.568945][ T406] usb 3-1: Using ep0 maxpacket: 32 [ 91.573978][ T3073] bridge0: entered allmulticast mode [ 91.586393][ T406] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 91.588282][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.595821][ T406] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 91.604019][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.604157][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.613427][ T406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.620899][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.660262][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.670504][ T406] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.681452][ T406] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.699610][ T406] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.709654][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.721923][ T406] usb 3-1: config 0 descriptor?? [ 91.928509][ T406] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.934718][ T36] audit: type=1400 audit(1756985249.244:413): avc: denied { read write } for pid=3059 comm="syz.2.868" name="lp0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 91.939672][ C0] usblp0: nonzero read bulk status received: -71 [ 91.942001][ T406] usb 3-1: USB disconnect, device number 25 [ 91.970863][ T36] audit: type=1400 audit(1756985249.244:414): avc: denied { open } for pid=3059 comm="syz.2.868" path="/dev/usb/lp0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 91.998902][ T364] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 92.007657][ T3095] usblp0: removed [ 92.049131][ T3097] veth0_vlan: entered allmulticast mode [ 92.136326][ T36] audit: type=1400 audit(1756985249.454:415): avc: denied { read write } for pid=3100 comm="syz.2.880" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 92.159796][ T36] audit: type=1400 audit(1756985249.454:416): avc: denied { open } for pid=3100 comm="syz.2.880" path="/109/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 92.187141][ T3101] rust_binder: 339: no such ref 1 [ 92.192315][ T364] usb 7-1: Using ep0 maxpacket: 16 [ 92.192341][ T3101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 92.198224][ T3103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.207923][ T364] usb 7-1: config 1 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 92.226321][ T364] usb 7-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 1024 [ 92.236971][ T364] usb 7-1: config 1 interface 0 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.250355][ T364] usb 7-1: config 1 interface 0 has no altsetting 0 [ 92.258598][ T364] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.264168][ T3106] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 92.268086][ T364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.283622][ T364] usb 7-1: Product: syz [ 92.287824][ T364] usb 7-1: Manufacturer: syz [ 92.292820][ T364] usb 7-1: SerialNumber: syz [ 92.303039][ T3094] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 92.314339][ T3094] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 92.559136][ T3123] fuse: Bad value for 'fd' [ 92.575762][ T3125] netlink: 'syz.4.887': attribute type 46 has an invalid length. [ 92.583988][ T3125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.887'. [ 92.618956][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 92.724719][ T3094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.733648][ T3094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.745771][ T364] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 92.758144][ T364] usb 7-1: USB disconnect, device number 17 [ 92.760312][ T3131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.766995][ T3131] rust_binder: Failed copying remainder into alloc: EFAULT [ 92.773691][ T3131] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 92.774930][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 92.781285][ T3131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.789890][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.799245][ T3131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:344 [ 92.809627][ T10] usb 3-1: config 0 descriptor?? [ 92.843244][ T3133] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 92.855130][ T3133] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.878788][ T36] audit: type=1400 audit(1756985250.194:417): avc: denied { execute } for pid=3134 comm="syz.6.890" name="file1" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.901765][ T36] audit: type=1400 audit(1756985250.204:418): avc: denied { execute_no_trans } for pid=3134 comm="syz.6.890" path="/113/file1" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.033367][ T10] usb 3-1: Cannot read MAC address [ 93.038724][ T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.053635][ T10] usb 3-1: USB disconnect, device number 26 [ 93.461659][ T36] audit: type=1400 audit(1756985250.784:419): avc: denied { create } for pid=3162 comm="syz.6.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 93.639099][ T3166] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 93.639131][ T3166] rust_binder: Error while translating object. [ 93.651874][ T3166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.658922][ T3166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 93.810313][ T3172] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 94.064981][ T3183] netlink: 96 bytes leftover after parsing attributes in process `syz.6.909'. [ 94.088877][ T616] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 94.152609][ T3205] overlayfs: failed to clone upperpath [ 94.163014][ T3205] fuse: Bad value for 'fd' [ 94.248952][ T616] usb 3-1: Using ep0 maxpacket: 8 [ 94.255219][ T616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.266048][ T616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.275099][ T616] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.289666][ T616] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.299328][ T616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.307451][ T616] usb 3-1: Product: syz [ 94.312244][ T616] usb 3-1: Manufacturer: syz [ 94.316996][ T616] usb 3-1: SerialNumber: syz [ 94.405319][ T3221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 94.743699][ T900] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.815595][ T3253] netlink: 'syz.6.935': attribute type 12 has an invalid length. [ 94.979372][ T3262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.939'. [ 95.042410][ T616] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 95.061227][ T616] cdc_ncm 3-1:1.0: bind() failure [ 95.066582][ T3270] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 95.068308][ T616] usb 3-1: USB disconnect, device number 27 [ 95.109990][ T3276] 9pnet_fd: Insufficient options for proto=fd [ 95.166765][ T3292] rust_binder: Write failure EFAULT in pid:378 [ 95.216699][ T3306] Invalid ELF header magic: != ELF [ 95.363547][ T3303] overlayfs: failed to resolve './bus': -2 [ 96.318915][ T329] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 96.469953][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 96.481420][ T329] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 96.490850][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.499610][ T329] usb 3-1: config 0 descriptor?? [ 96.504928][ T3330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.659115][ T3342] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29213 sclass=netlink_xfrm_socket pid=3342 comm=syz.4.965 [ 96.673558][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 96.673577][ T36] audit: type=1400 audit(1756985253.994:425): avc: denied { create } for pid=3341 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.788952][ T1190] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.795206][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 96.913996][ T3357] /dev/nullb0: Can't lookup blockdev [ 97.123539][ T329] usb 3-1: string descriptor 0 read error: -71 [ 97.130335][ T329] uclogic 0003:5543:006E.000F: failed retrieving string descriptor #200: -71 [ 97.141907][ T329] uclogic 0003:5543:006E.000F: failed retrieving pen parameters: -71 [ 97.150517][ T329] uclogic 0003:5543:006E.000F: failed probing pen v2 parameters: -71 [ 97.158912][ T329] uclogic 0003:5543:006E.000F: failed probing parameters: -71 [ 97.166863][ T329] uclogic 0003:5543:006E.000F: probe with driver uclogic failed with error -71 [ 97.185980][ T329] usb 3-1: USB disconnect, device number 28 [ 97.290876][ T36] audit: type=1400 audit(1756985254.614:426): avc: denied { bind } for pid=3368 comm="syz.6.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.323133][ T36] audit: type=1400 audit(1756985254.614:427): avc: denied { setopt } for pid=3368 comm="syz.6.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.364677][ T3375] SELinux: security_context_str_to_sid (syste_uŬGı ‰:˙ß) failed with errno=-22 [ 97.431773][ T3383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.978'. [ 97.570952][ T3407] netlink: 104 bytes leftover after parsing attributes in process `syz.7.979'. [ 97.704345][ T3415] sit0: entered promiscuous mode [ 97.715157][ T3415] netlink: 'syz.6.990': attribute type 1 has an invalid length. [ 97.722998][ T3415] netlink: 9 bytes leftover after parsing attributes in process `syz.6.990'. [ 97.832507][ T3439] /dev/loop0: Can't lookup blockdev [ 98.399826][ T3457] overlayfs: failed to clone upperpath [ 98.405895][ T3457] overlayfs: failed to clone upperpath [ 98.412070][ T3457] overlayfs: failed to clone upperpath [ 98.417993][ T3457] overlayfs: failed to clone upperpath [ 98.424372][ T3457] overlayfs: failed to clone upperpath [ 98.431268][ T3457] overlayfs: failed to clone upperpath [ 98.437090][ T3457] overlayfs: failed to clone upperpath [ 98.443197][ T3457] overlayfs: failed to clone upperpath [ 98.449130][ T3457] overlayfs: failed to clone upperpath [ 98.454942][ T3457] overlayfs: failed to resolve './file1': -2 [ 98.479819][ T3466] overlayfs: failed to clone upperpath [ 98.496604][ T36] audit: type=1400 audit(1756985255.814:428): avc: denied { setattr } for pid=3467 comm="syz.6.1007" name="NETLINK" dev="sockfs" ino=25718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.750411][ T3488] FAT-fs (rnullb0): bogus number of reserved sectors [ 98.757570][ T3488] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 98.817456][ T3489] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 99.100443][ T3493] /dev/loop0: Can't lookup blockdev [ 99.372493][ T900] tipc: Subscription rejected, illegal request [ 99.393906][ T36] audit: type=1400 audit(1756985256.714:429): avc: denied { audit_read } for pid=3515 comm="syz.6.1026" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.168925][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 100.321235][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.329983][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 100.337998][ T9] usb 3-1: can't read configurations, error -71 [ 100.578257][ T3537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 100.637772][ T3542] overlayfs: failed to clone upperpath [ 100.653644][ T3542] overlayfs: failed to clone upperpath [ 100.660285][ T3542] overlayfs: failed to clone upperpath [ 100.666399][ T3542] overlayfs: failed to clone upperpath [ 100.672676][ T3542] overlayfs: failed to clone upperpath [ 100.678773][ T3542] overlayfs: failed to clone upperpath [ 100.684971][ T3542] overlayfs: failed to clone upperpath [ 100.710786][ T3548] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1036'. [ 100.830317][ T36] audit: type=1400 audit(1756985258.154:430): avc: denied { create } for pid=3566 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.877697][ T3574] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 100.889495][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.889524][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.889825][ T36] audit: type=1400 audit(1756985258.214:431): avc: denied { relabelto } for pid=3573 comm="syz.4.1051" name="file0" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 100.895968][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.895985][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.902813][ T36] audit: type=1400 audit(1756985258.224:432): avc: denied { associate } for pid=3573 comm="syz.4.1051" name="file0" dev="tmpfs" ino=1675 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 100.952304][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.970813][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.977621][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.984442][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.991314][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.018171][ T3584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.033666][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.049007][ T3579] rust_binder: Error while translating object. [ 101.055512][ T3579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 101.068893][ T36] audit: type=1400 audit(1756985258.314:433): avc: denied { unlink } for pid=542 comm="syz-executor" name="file0" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 101.093803][ T3587] rust_binder: Error while translating object. [ 101.122839][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.126059][ T3579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:422 [ 101.136122][ T3590] rust_binder: Error while translating object. [ 101.168899][ T3590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.175206][ T3590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:105 [ 101.189263][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.198980][ T3587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.199848][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.213523][ T3587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:105 [ 101.215935][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.231696][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.238365][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.244980][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.251615][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.258128][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.265113][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.271731][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.278231][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.284912][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.291495][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.292413][ T3604] fuse: Bad value for 'fd' [ 101.298105][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.298129][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.316061][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.322701][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.329354][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.335904][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.342473][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.348935][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.393085][ T36] audit: type=1400 audit(1756985258.714:434): avc: denied { write } for pid=3605 comm="syz.2.1061" name="file2" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.668909][ T329] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 101.756237][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 101.756259][ T36] audit: type=1326 audit(1756985259.074:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.786494][ T36] audit: type=1326 audit(1756985259.074:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.810477][ T36] audit: type=1326 audit(1756985259.074:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.835263][ T36] audit: type=1326 audit(1756985259.074:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.859262][ T36] audit: type=1326 audit(1756985259.074:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.868865][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 101.889504][ T329] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 101.894231][ T36] audit: type=1326 audit(1756985259.074:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 101.923880][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 101.939434][ T3627] rust_binder: Error while translating object. [ 101.939497][ T3627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.947234][ T329] usb 3-1: can't read configurations, error -61 [ 101.957268][ T3627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 102.015636][ T36] audit: type=1326 audit(1756985259.074:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 102.057904][ T36] audit: type=1326 audit(1756985259.074:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 102.089037][ T36] audit: type=1326 audit(1756985259.074:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 102.118625][ T36] audit: type=1326 audit(1756985259.074:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.6.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x7ffc0000 [ 102.126939][ T329] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 102.298909][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 102.304593][ T329] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 102.313827][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.321536][ T329] usb 3-1: can't read configurations, error -61 [ 102.328005][ T329] usb usb3-port1: attempt power cycle [ 102.670040][ T329] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 102.689306][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 102.695019][ T329] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 102.703988][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.712114][ T329] usb 3-1: can't read configurations, error -61 [ 102.838993][ T329] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 102.859352][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 102.865113][ T329] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 102.874969][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.882642][ T329] usb 3-1: can't read configurations, error -61 [ 102.889135][ T329] usb usb3-port1: unable to enumerate USB device [ 109.076966][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 109.076987][ T36] audit: type=1400 audit(1756985266.394:468): avc: denied { create } for pid=3643 comm="syz.6.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.106054][ T36] audit: type=1400 audit(1756985266.394:469): avc: denied { ioctl } for pid=3643 comm="syz.6.1074" path="socket:[25242]" dev="sockfs" ino=25242 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.136334][ T36] audit: type=1400 audit(1756985266.454:470): avc: denied { map } for pid=3648 comm="syz.2.1076" path="socket:[26145]" dev="sockfs" ino=26145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 109.246906][ T3662] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 109.254482][ T3662] rust_binder: Write failure EINVAL in pid:438 [ 109.296692][ T3668] SELinux: security_context_str_to_sid () failed with errno=-22 [ 109.396136][ T3677] tipc: Enabled bearer , priority 0 [ 109.424710][ T3677] tipc: Resetting bearer [ 109.479432][ T3677] tipc: Disabling bearer [ 109.479437][ T3680] overlayfs: failed to clone upperpath [ 109.578184][ T36] audit: type=1400 audit(1756985266.894:471): avc: denied { bind } for pid=3693 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.599658][ T3695] rust_binder: Write failure EFAULT in pid:118 [ 109.838934][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 109.913124][ T3703] 9pnet_fd: Insufficient options for proto=fd [ 109.984075][ T36] audit: type=1400 audit(1756985267.304:472): avc: denied { listen } for pid=3716 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.006333][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 110.021351][ T9] usb 3-1: config index 0 descriptor too short (expected 44080, got 48) [ 110.035521][ T9] usb 3-1: config 5 has an invalid interface number: 125 but max is 1 [ 110.046377][ T9] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 110.055520][ T36] audit: type=1400 audit(1756985267.374:473): avc: denied { write } for pid=3719 comm="syz.4.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.077679][ T9] usb 3-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 110.089906][ T9] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 110.099004][ T36] audit: type=1400 audit(1756985267.374:474): avc: denied { nlmsg_write } for pid=3719 comm="syz.4.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.119891][ T9] usb 3-1: config 5 has no interface number 0 [ 110.126009][ T9] usb 3-1: config 5 interface 125 has no altsetting 0 [ 110.133252][ T36] audit: type=1400 audit(1756985267.414:475): avc: denied { setopt } for pid=3721 comm="syz.6.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.153949][ T36] audit: type=1326 audit(1756985267.414:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.6.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1db18ebe9 code=0x0 [ 110.164144][ T3728] tipc: Enabling of bearer rejected, failed to enable media [ 110.179360][ T9] usb 3-1: string descriptor 0 read error: -22 [ 110.192893][ T9] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=91.20 [ 110.202688][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.214027][ T9] ums-datafab 3-1:5.125: USB Mass Storage device detected [ 110.282650][ T9] ums-sddr55 3-1:5.125: USB Mass Storage device detected [ 110.418328][ T3694] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 110.438967][ T406] usb 3-1: USB disconnect, device number 35 [ 110.661513][ T3746] binder: Bad value for 'max' [ 110.665255][ T36] audit: type=1400 audit(1756985267.984:477): avc: denied { lock } for pid=3744 comm="syz.7.1110" path="socket:[26298]" dev="sockfs" ino=26298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 110.774056][ T3751] netlink: 'syz.4.1112': attribute type 4 has an invalid length. [ 110.806642][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 111.038579][ T3764] rust_binder: Error in use_page_slow: ESRCH [ 111.038621][ T3764] rust_binder: use_range failure ESRCH [ 111.045140][ T3764] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 111.050992][ T3764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.059084][ T3764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:453 [ 111.074021][ T3769] netlink: 'syz.6.1119': attribute type 4 has an invalid length. [ 111.098022][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1119'. [ 111.153807][ T3775] 9pnet_fd: Insufficient options for proto=fd [ 112.595340][ T3835] overlayfs: failed to clone lowerpath [ 112.601504][ T3835] 9pnet_fd: Insufficient options for proto=fd [ 112.616417][ T3837] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 112.625524][ T3837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1143'. [ 113.099223][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1154'. [ 113.125328][ T3876] fuseblk: Bad value for 'source' [ 114.204738][ T3946] rust_binder: Write failure EFAULT in pid:460 [ 114.346265][ T3961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1181'. [ 114.406806][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 114.406832][ T36] audit: type=1400 audit(1756985271.724:482): avc: denied { accept } for pid=3967 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.441852][ T3970] overlayfs: failed to resolve './file1': -2 [ 114.449771][ T3970] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 114.538935][ T36] audit: type=1400 audit(1756985271.854:483): avc: denied { write } for pid=3983 comm="syz.2.1191" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.567102][ T36] audit: type=1400 audit(1756985271.864:484): avc: denied { remove_name } for pid=3983 comm="syz.2.1191" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.591747][ T36] audit: type=1400 audit(1756985271.864:485): avc: denied { unlink } for pid=3983 comm="syz.2.1191" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.622858][ T3995] overlay: Unknown parameter 'smackfstransmute' [ 114.640886][ T3996] syz.2.1192 uses obsolete (PF_INET,SOCK_PACKET) [ 114.647993][ T3996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 114.836002][ T4015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 114.984267][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 115.000384][ T4039] overlayfs: failed to clone upperpath [ 115.049807][ T4053] 9pnet_fd: Insufficient options for proto=fd [ 115.544502][ T4071] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.552695][ T4071] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 115.561649][ T4071] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.569896][ T4071] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 115.591446][ T36] audit: type=1400 audit(1756985272.914:486): avc: denied { execute } for pid=4072 comm="syz.2.1219" path="/sys/kernel/profiling" dev="sysfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 115.695067][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.893235][ T4115] overlayfs: workdir and upperdir must be separate subtrees [ 117.909182][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 118.126298][ T4144] fuse: Bad value for 'fd' [ 118.293971][ T4156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=342 sclass=netlink_route_socket pid=4156 comm=syz.2.1247 [ 118.310511][ T36] audit: type=1326 audit(1756985275.634:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.1248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff1538ebe9 code=0x0 [ 118.313546][ T4156] tipc: Enabling of bearer rejected, failed to enable media [ 118.361689][ T36] audit: type=1400 audit(1756985275.684:488): avc: denied { create } for pid=4159 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.515443][ T406] rust_binder: 4167: removing orphan mapping 0:24 [ 118.573684][ T36] audit: type=1326 audit(1756985275.894:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.2.1257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567658ebe9 code=0x0 [ 118.991002][ T4201] overlayfs: failed to clone upperpath [ 118.997649][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1261'. [ 119.008145][ T4201] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1261'. [ 119.017842][ T4201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4201 comm=syz.6.1261 [ 119.798880][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 119.928905][ T9] usb 3-1: device descriptor read/64, error -71 [ 120.168902][ T9] usb 3-1: device descriptor read/64, error -71 [ 120.408911][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 120.538894][ T9] usb 3-1: device descriptor read/64, error -71 [ 120.741696][ T4233] tipc: Enabling of bearer rejected, failed to enable media [ 120.751975][ T4234] /dev/loop0: Can't lookup blockdev [ 120.751980][ T4233] /dev/loop0: Can't lookup blockdev [ 120.778923][ T9] usb 3-1: device descriptor read/64, error -71 [ 120.889097][ T9] usb usb3-port1: attempt power cycle [ 121.228874][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 121.250060][ T9] usb 3-1: device descriptor read/8, error -71 [ 121.310155][ T4245] mmap: syz.6.1276 (4245) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.379993][ T9] usb 3-1: device descriptor read/8, error -71 [ 121.406870][ T4266] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1285'. [ 121.406871][ T36] audit: type=1400 audit(1756985278.724:490): avc: denied { nlmsg_read } for pid=4265 comm="syz.6.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.423767][ T4268] 9pnet_fd: Insufficient options for proto=fd [ 121.512301][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1286'. [ 121.618915][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 121.640206][ T9] usb 3-1: device descriptor read/8, error -71 [ 121.770063][ T9] usb 3-1: device descriptor read/8, error -71 [ 121.806840][ T36] audit: type=1400 audit(1756985279.124:491): avc: denied { bind } for pid=4272 comm="syz.7.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.879015][ T9] usb usb3-port1: unable to enumerate USB device [ 122.212618][ T328] bridge_slave_1: left allmulticast mode [ 122.235147][ T328] bridge_slave_1: left promiscuous mode [ 122.258488][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.277546][ T328] bridge_slave_0: left allmulticast mode [ 122.293147][ T328] bridge_slave_0: left promiscuous mode [ 122.308214][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.339545][ T4295] netlink: 'syz.4.1296': attribute type 16 has an invalid length. [ 122.361259][ T4295] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1296'. [ 122.426356][ T4306] netlink: 'syz.4.1300': attribute type 4 has an invalid length. [ 122.485822][ T328] veth1_macvtap: left promiscuous mode [ 122.491825][ T328] veth0_vlan: left promiscuous mode [ 122.536312][ T4337] fuse: Bad value for 'fd' [ 122.552745][ T4330] netlink: 'syz.6.1308': attribute type 25 has an invalid length. [ 122.577338][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.589028][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.596154][ T4301] bridge_slave_0: entered allmulticast mode [ 122.602962][ T4301] bridge_slave_0: entered promiscuous mode [ 122.609791][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.616954][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.630335][ T4301] bridge_slave_1: entered allmulticast mode [ 122.636975][ T4301] bridge_slave_1: entered promiscuous mode [ 122.700862][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.707933][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.715706][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.722875][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.753011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.761217][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.770018][ T4353] rust_binder: Write failure EFAULT in pid:566 [ 122.780736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.807598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.822225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.829344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.861274][ T4301] veth0_vlan: entered promiscuous mode [ 122.877377][ T4301] veth1_macvtap: entered promiscuous mode [ 123.164551][ T4383] netlink: 'syz.4.1319': attribute type 4 has an invalid length. [ 123.589085][ T4398] rust_binder: Failed to allocate buffer. len:200, is_oneway:false [ 123.831600][ T4438] binder: Unknown parameter 'contextÀ' [ 124.098916][ T364] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 124.258869][ T364] usb 9-1: Using ep0 maxpacket: 16 [ 124.265176][ T364] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 124.276310][ T364] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.286370][ T364] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.302968][ T364] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.314491][ T364] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.323307][ T364] usb 9-1: Product: syz [ 124.327680][ T364] usb 9-1: Manufacturer: syz [ 124.332834][ T364] usb 9-1: SerialNumber: syz [ 124.336746][ T4450] fuse: Bad value for 'fd' [ 124.354943][ T4454] netlink: 2885 bytes leftover after parsing attributes in process `syz.4.1346'. [ 124.551177][ T364] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 124.561250][ T364] usb 9-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 124.574546][ T364] usb 9-1: USB disconnect, device number 2 [ 124.595631][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.697759][ T4472] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 124.799361][ T4483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4483 comm=syz.2.1355 [ 124.835514][ T36] audit: type=1400 audit(1756985282.154:492): avc: denied { write } for pid=4484 comm="syz.8.1356" path="socket:[29231]" dev="sockfs" ino=29231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.899467][ T4504] fuse: Bad value for 'fd' [ 124.945515][ T4508] rust_binder: Error while translating object. [ 124.945580][ T4508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.952295][ T4508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 125.014285][ T4521] fuseblk: Bad value for 'fd' [ 125.044013][ T4528] futex_wake_op: syz.4.1370 tries to shift op by -1; fix this program [ 125.053621][ T4530] futex_wake_op: syz.4.1370 tries to shift op by -1; fix this program [ 125.125866][ T4538] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 125.134169][ T4539] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 125.142608][ T4538] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 125.152056][ T4539] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 125.160305][ T4538] syz.4.1374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.497754][ T4577] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1387'. [ 125.694657][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1393'. [ 126.024527][ T4612] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 126.024555][ T4612] rust_binder: Error while translating object. [ 126.030220][ T4614] /dev/loop6: Can't lookup blockdev [ 126.038444][ T4612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.052525][ T4612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 126.089757][ T4619] rust_binder: Write failure EFAULT in pid:55 [ 126.099864][ T36] audit: type=1400 audit(1756985283.424:493): avc: denied { ioctl } for pid=4618 comm="syz.8.1400" path="socket:[29379]" dev="sockfs" ino=29379 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.109961][ T4620] overlayfs: failed to clone upperpath [ 126.169438][ T4627] overlayfs: failed to resolve './file1': -2 [ 126.259967][ T4641] fuse: Bad value for 'fd' [ 126.403642][ T36] audit: type=1400 audit(1756985283.724:494): avc: denied { getopt } for pid=4664 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.642734][ T364] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 126.658257][ T4671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1417'. [ 126.753436][ T36] audit: type=1400 audit(1756985284.074:495): avc: denied { read } for pid=4681 comm="syz.8.1420" name="file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.798928][ T364] usb 3-1: Using ep0 maxpacket: 16 [ 126.801352][ T4690] devpts: called with bogus options [ 126.806534][ T364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 126.820977][ T364] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 126.830244][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.838687][ T364] usb 3-1: Product: syz [ 126.843008][ T364] usb 3-1: Manufacturer: syz [ 126.847630][ T364] usb 3-1: SerialNumber: syz [ 126.855868][ T364] usb 3-1: config 0 descriptor?? [ 126.862406][ T364] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 126.871219][ T364] usb 3-1: Detected FT232R [ 127.062101][ T364] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 127.274503][ T364] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.330438][ T4725] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 127.341659][ T36] audit: type=1400 audit(1756985284.663:496): avc: denied { relabelto } for pid=4724 comm="syz.4.1434" name="cgroup" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 127.369897][ T36] audit: type=1400 audit(1756985284.663:497): avc: denied { associate } for pid=4724 comm="syz.4.1434" name="cgroup" dev="tmpfs" ino=2399 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 127.398711][ T36] audit: type=1400 audit(1756985284.693:498): avc: denied { unlink } for pid=542 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 127.475582][ T10] usb 3-1: USB disconnect, device number 40 [ 127.483181][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.493057][ T10] ftdi_sio 3-1:0.0: device disconnected [ 127.820172][ T4761] /dev/rnullb0: Can't lookup blockdev [ 127.955025][ T4783] FAT-fs (rnullb0): bogus number of reserved sectors [ 127.962099][ T4783] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 128.056286][ T36] audit: type=1400 audit(1756985285.362:499): avc: denied { mounton } for pid=4791 comm="syz.6.1460" path="/337/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 128.113338][ T4799] netlink: 'syz.4.1462': attribute type 4 has an invalid length. [ 128.123234][ T4799] netlink: 'syz.4.1462': attribute type 17 has an invalid length. [ 128.162529][ T4805] rust_binder: Error while translating object. [ 128.162583][ T4805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 128.169148][ T4805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:610 [ 128.170497][ T36] audit: type=1400 audit(1756985285.478:500): avc: denied { create } for pid=4806 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.320245][ T4824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 128.320285][ T4824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:115 [ 128.413878][ T4838] rust_binder: 120: no such ref 0 [ 128.433639][ T4838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 128.474000][ T4844] overlayfs: failed to resolve './file1/file0': -2 [ 128.835820][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 128.990912][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 128.997530][ T10] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.006548][ T10] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.015837][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.025631][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.035777][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.046289][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.060921][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.070299][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.081207][ T10] usb 9-1: config 0 descriptor?? [ 129.146658][ T36] audit: type=1400 audit(1756985286.427:501): avc: denied { accept } for pid=4890 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.224505][ T36] audit: type=1400 audit(1756985286.495:502): avc: denied { map } for pid=4893 comm="syz.2.1494" path="pipe:[31805]" dev="pipefs" ino=31805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 129.301604][ T10] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 129.314195][ T10] usb 9-1: USB disconnect, device number 3 [ 129.322661][ T10] usblp0: removed [ 129.341484][ T4904] fuse: Bad value for 'user_id' [ 129.346894][ T4904] fuse: Bad value for 'user_id' [ 129.426329][ T4930] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1505'. [ 129.487934][ T4945] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4945 comm=syz.4.1510 [ 129.501802][ T36] audit: type=1400 audit(1756985286.767:503): avc: denied { relabelfrom } for pid=4943 comm="syz.4.1510" name="" dev="pipefs" ino=31181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 129.640161][ T4959] syzkaller0: entered allmulticast mode [ 129.646317][ T4959] syzkaller0: entered promiscuous mode [ 129.655068][ T4959] syzkaller0 (unregistering): left promiscuous mode [ 129.661874][ T4959] syzkaller0 (unregistering): left allmulticast mode [ 130.073472][ T5004] rust_binder: Write failure EFAULT in pid:137 [ 130.108072][ T5008] syz.8.1532: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 130.130337][ T5008] CPU: 1 UID: 0 PID: 5008 Comm: syz.8.1532 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 130.130367][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.130379][ T5008] Call Trace: [ 130.130386][ T5008] [ 130.130393][ T5008] __dump_stack+0x21/0x30 [ 130.130424][ T5008] dump_stack_lvl+0x10c/0x190 [ 130.130446][ T5008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.130469][ T5008] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 130.130497][ T5008] dump_stack+0x19/0x20 [ 130.130520][ T5008] warn_alloc+0x1bc/0x2a0 [ 130.130544][ T5008] ? stack_depot_save_flags+0x38/0x800 [ 130.130564][ T5008] ? __cfi_warn_alloc+0x10/0x10 [ 130.130587][ T5008] ? kasan_save_track+0x4f/0x80 [ 130.130605][ T5008] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 130.130630][ T5008] ? xskq_create+0x68/0x2a0 [ 130.130648][ T5008] ? xsk_init_queue+0xb6/0x120 [ 130.130666][ T5008] ? xsk_setsockopt+0x43f/0x6f0 [ 130.130685][ T5008] ? do_sock_setsockopt+0x26d/0x400 [ 130.130704][ T5008] ? __x64_sys_setsockopt+0x1b8/0x250 [ 130.130723][ T5008] ? x64_sys_call+0x2adc/0x2ee0 [ 130.130751][ T5008] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.130777][ T5008] __vmalloc_node_range_noprof+0x135/0x1420 [ 130.130807][ T5008] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 130.130832][ T5008] ? avc_has_perm+0x144/0x220 [ 130.130857][ T5008] ? kasan_save_alloc_info+0x40/0x50 [ 130.130881][ T5008] ? __kasan_kmalloc+0x96/0xb0 [ 130.130901][ T5008] vmalloc_user_noprof+0x77/0x90 [ 130.130925][ T5008] ? xskq_create+0xdb/0x2a0 [ 130.130943][ T5008] xskq_create+0xdb/0x2a0 [ 130.130961][ T5008] xsk_init_queue+0xb6/0x120 [ 130.130979][ T5008] xsk_setsockopt+0x43f/0x6f0 [ 130.130997][ T5008] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.131014][ T5008] ? do_futex+0x309/0x500 [ 130.131034][ T5008] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 130.131058][ T5008] ? security_socket_setsockopt+0x33/0xd0 [ 130.131076][ T5008] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.131105][ T5008] do_sock_setsockopt+0x26d/0x400 [ 130.131123][ T5008] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 130.131145][ T5008] __x64_sys_setsockopt+0x1b8/0x250 [ 130.131165][ T5008] x64_sys_call+0x2adc/0x2ee0 [ 130.131191][ T5008] do_syscall_64+0x58/0xf0 [ 130.131216][ T5008] ? clear_bhb_loop+0x50/0xa0 [ 130.131239][ T5008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.131260][ T5008] RIP: 0033:0x7fb5c5d8ebe9 [ 130.131277][ T5008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.131294][ T5008] RSP: 002b:00007fb5c6ccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.131316][ T5008] RAX: ffffffffffffffda RBX: 00007fb5c5fc5fa0 RCX: 00007fb5c5d8ebe9 [ 130.131332][ T5008] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 130.131344][ T5008] RBP: 00007fb5c5e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 130.131357][ T5008] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.131370][ T5008] R13: 00007fb5c5fc6038 R14: 00007fb5c5fc5fa0 R15: 00007fffa2d0e178 [ 130.131386][ T5008] [ 130.131394][ T5008] Mem-Info: [ 130.253420][ T5027] cgroup: Invalid name [ 130.254238][ T5008] active_anon:23661 inactive_anon:875 isolated_anon:0 [ 130.254238][ T5008] active_file:10953 inactive_file:12066 isolated_file:0 [ 130.254238][ T5008] unevictable:0 dirty:58 writeback:0 [ 130.254238][ T5008] slab_reclaimable:5998 slab_unreclaimable:73493 [ 130.254238][ T5008] mapped:24333 shmem:16582 pagetables:1311 [ 130.254238][ T5008] sec_pagetables:0 bounce:0 [ 130.254238][ T5008] kernel_misc_reclaimable:0 [ 130.254238][ T5008] free:1500800 free_pcp:4174 free_cma:0 [ 130.495673][ T5008] Node 0 active_anon:94696kB inactive_anon:3500kB active_file:43812kB inactive_file:48268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97332kB dirty:232kB writeback:0kB shmem:66328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:6268kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no [ 130.529810][ T5008] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:13800kB local_pcp:7780kB free_cma:0kB [ 130.555989][ T36] audit: type=1400 audit(1756985287.768:504): avc: denied { setattr } for pid=5031 comm="syz.2.1535" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 130.565099][ T5008] lowmem_reserve[]: [ 130.583631][ T5032] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 130.584974][ T5008] 0 [ 130.588825][ T5032] rust_binder: Write failure EINVAL in pid:646 [ 130.595243][ T5008] 3921 3921 [ 130.595269][ T5008] Normal free:3052840kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94696kB inactive_anon:3500kB active_file:43812kB inactive_file:48268kB unevictable:0kB writepending:232kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1712kB local_pcp:1676kB free_cma:0kB [ 130.595326][ T5008] lowmem_reserve[]: 0 0 0 [ 130.595350][ T5008] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 130.660543][ T5008] Normal: 702*4kB (UME) 1088*8kB (UME) 720*16kB (UME) 77*32kB (UME) 203*64kB (UME) 125*128kB (UME) 61*256kB (UME) 31*512kB (UME) 23*1024kB (UME) 12*2048kB (UME) 712*4096kB (ME) = 3050456kB [ 130.679789][ T5008] 39965 total pagecache pages [ 130.684695][ T5008] 876 pages in swap cache [ 130.689319][ T5008] Free swap = 121160kB [ 130.693591][ T5008] Total swap = 124996kB [ 130.697876][ T5008] 2097051 pages RAM [ 130.701744][ T5008] 0 pages HighMem/MovableOnly [ 130.706541][ T5008] 351534 pages reserved [ 130.713436][ T5008] 0 pages cma reserved [ 130.719462][ T5008] Memory allocations: [ 130.723748][ T5008] 0 B 0 init/main.c:1370 func:do_initcalls [ 130.733679][ T5008] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 130.742487][ T5008] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 130.754739][ T5008] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 130.762929][ T5008] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 130.771723][ T5008] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 130.780695][ T5008] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 130.789595][ T5008] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 130.798304][ T5008] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 130.806948][ T5008] 0 B 0 init/initramfs.c:101 func:find_link [ 131.180879][ T5060] /dev/loop0: Can't lookup blockdev [ 131.213212][ T10] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 131.304456][ T5109] 9pnet_fd: Insufficient options for proto=fd [ 131.367259][ T10] usb 9-1: Invalid ep0 maxpacket: 16 [ 131.410185][ T5128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 131.410223][ T5128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:667 [ 131.500737][ T10] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 131.675339][ T10] usb 9-1: Invalid ep0 maxpacket: 16 [ 131.681614][ T10] usb usb9-port1: attempt power cycle [ 131.736773][ T5133] 9pnet_fd: Insufficient options for proto=fd [ 132.035407][ T10] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 132.055322][ T10] usb 9-1: Invalid ep0 maxpacket: 16 [ 132.188208][ T10] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 132.209097][ T10] usb 9-1: Invalid ep0 maxpacket: 16 [ 132.214815][ T10] usb usb9-port1: unable to enumerate USB device [ 132.265124][ T5135] incfs: Error accessing: ./cgroup. [ 132.271019][ T5135] incfs: mount failed -20 [ 133.002584][ T5178] netlink: 'syz.6.1574': attribute type 33 has an invalid length. [ 133.010914][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1574'. [ 133.335665][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 133.489235][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 133.495848][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 133.505186][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.515089][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 133.524876][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 133.534726][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 133.544649][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.551548][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 133.560574][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.570578][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 133.776080][ T10] scsi host1: usb-storage 3-1:1.0 [ 133.816940][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 133.837475][ T5222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=5222 comm=syz.4.1589 [ 134.068958][ T5248] GUP no longer grows the stack in syz.8.1600 (5248): 200000005000-200000008000 (200000004000) [ 134.079847][ T5248] CPU: 0 UID: 0 PID: 5248 Comm: syz.8.1600 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 134.079882][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.079890][ T5248] Call Trace: [ 134.079895][ T5248] [ 134.079902][ T5248] __dump_stack+0x21/0x30 [ 134.079923][ T5248] dump_stack_lvl+0x10c/0x190 [ 134.079938][ T5248] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.079953][ T5248] ? futex_lock_pi_atomic+0xdd/0xc70 [ 134.079967][ T5248] dump_stack+0x19/0x20 [ 134.079980][ T5248] fixup_user_fault+0x63d/0x6d0 [ 134.079994][ T5248] fault_in_user_writeable+0x76/0xe0 [ 134.080006][ T5248] futex_lock_pi+0x258/0xa10 [ 134.080020][ T5248] ? __cfi_futex_lock_pi+0x10/0x10 [ 134.080033][ T5248] ? __kasan_check_write+0x18/0x20 [ 134.080048][ T5248] ? wake_up_q+0x10f/0x1c0 [ 134.080071][ T5248] ? __cfi_futex_wake_mark+0x10/0x10 [ 134.080084][ T5248] ? __seccomp_filter+0x819/0x1a70 [ 134.080102][ T5248] do_futex+0x25c/0x500 [ 134.080114][ T5248] ? __cfi_do_futex+0x10/0x10 [ 134.080125][ T5248] ? __vm_munmap+0x2c7/0x370 [ 134.080136][ T5248] __se_sys_futex+0x28f/0x300 [ 134.080147][ T5248] ? __x64_sys_futex+0x110/0x110 [ 134.080160][ T5248] __x64_sys_futex+0xe9/0x110 [ 134.080171][ T5248] x64_sys_call+0x227f/0x2ee0 [ 134.080186][ T5248] do_syscall_64+0x58/0xf0 [ 134.080200][ T5248] ? clear_bhb_loop+0x50/0xa0 [ 134.080214][ T5248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.080226][ T5248] RIP: 0033:0x7fb5c5d8ebe9 [ 134.080237][ T5248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.080247][ T5248] RSP: 002b:00007fb5c6ccd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.080261][ T5248] RAX: ffffffffffffffda RBX: 00007fb5c5fc5fa0 RCX: 00007fb5c5d8ebe9 [ 134.080270][ T5248] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 134.080278][ T5248] RBP: 00007fb5c5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.080285][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.080293][ T5248] R13: 00007fb5c5fc6038 R14: 00007fb5c5fc5fa0 R15: 00007fffa2d0e178 [ 134.080303][ T5248] [ 134.098529][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 134.098546][ T36] audit: type=1404 audit(1756985291.238:511): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 134.326718][ T36] audit: type=1400 audit(1756985291.458:512): avc: denied { create } for pid=5253 comm="syz.6.1602" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 134.349478][ T36] audit: type=1400 audit(1756985291.478:513): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.374150][ T36] audit: type=1400 audit(1756985291.478:514): avc: denied { create } for pid=5255 comm="syz.6.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 134.393875][ T36] audit: type=1400 audit(1756985291.478:515): avc: denied { ioctl } for pid=5191 comm="syz.2.1579" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 134.419211][ T36] audit: type=1400 audit(1756985291.478:516): avc: denied { create } for pid=5259 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 134.440470][ T36] audit: type=1400 audit(1756985291.478:517): avc: denied { create } for pid=5259 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 134.461364][ T36] audit: type=1400 audit(1756985291.478:518): avc: denied { create } for pid=5259 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 134.482246][ T36] audit: type=1400 audit(1756985291.478:519): avc: denied { read write } for pid=5259 comm="syz.8.1604" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 134.506147][ T36] audit: type=1400 audit(1756985291.478:520): avc: denied { read write } for pid=5259 comm="syz.8.1604" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 134.802357][ T900] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 135.352505][ T5331] syzkaller0: entered promiscuous mode [ 135.358133][ T5331] syzkaller0: entered allmulticast mode [ 135.529069][ T5358] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1636'. [ 135.582876][ T10] usb 3-1: USB disconnect, device number 41 [ 135.622143][ T328] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 135.632593][ T328] sd 1:0:0:0: [sdb] Sense not available. [ 135.640134][ T328] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 135.648019][ T328] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 135.654267][ T328] sd 1:0:0:0: [sdb] Write Protect is off [ 135.660288][ T328] sd 1:0:0:0: [sdb] Asking for cache data failed [ 135.667151][ T328] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 135.679460][ T5376] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1638'. [ 135.681752][ T328] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 135.736478][ T3701] udevd[3701]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 135.775808][ T3700] udevd[3700]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 135.889342][ T5420] netlink: 37 bytes leftover after parsing attributes in process `syz.6.1657'. [ 135.900297][ T5420] netlink: 37 bytes leftover after parsing attributes in process `syz.6.1657'. [ 136.802405][ T5459] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 136.811366][ T5461] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 136.917192][ T5480] kernel profiling enabled (shift: 5) [ 137.781070][ T5516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1691'. [ 137.832751][ T5528] syz.2.1696(5528): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 138.410974][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 139.042437][ T5654] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1737'. [ 139.092371][ T36] kauditd_printk_skb: 623 callbacks suppressed [ 139.092394][ T36] audit: type=1400 audit(1756985296.248:1144): avc: denied { create } for pid=5658 comm="syz.4.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 139.130668][ T36] audit: type=1400 audit(1756985296.268:1145): avc: denied { create } for pid=5658 comm="syz.4.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 139.197093][ T36] audit: type=1400 audit(1756985296.348:1146): avc: denied { create } for pid=5663 comm="syz.6.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 139.219388][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 139.246331][ T36] audit: type=1400 audit(1756985296.398:1147): avc: denied { create } for pid=5666 comm="syz.4.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 139.274343][ T36] audit: type=1400 audit(1756985296.428:1148): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 139.302238][ T36] audit: type=1400 audit(1756985296.428:1149): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 139.331955][ T36] audit: type=1400 audit(1756985296.428:1150): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 139.352577][ T36] audit: type=1400 audit(1756985296.428:1151): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 139.377927][ T36] audit: type=1400 audit(1756985296.428:1152): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 139.397765][ T36] audit: type=1400 audit(1756985296.428:1153): avc: denied { create } for pid=5668 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 141.727387][ T5792] pim6reg1: entered promiscuous mode [ 141.733062][ T5792] pim6reg1: entered allmulticast mode [ 141.859473][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 141.869022][ T5813] erspan0: default FDB implementation only supports local addresses [ 150.173177][ T36] kauditd_printk_skb: 257 callbacks suppressed [ 150.173198][ T36] audit: type=1400 audit(1756985307.328:1411): avc: denied { mounton } for pid=5882 comm="syz.8.1820" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 150.247077][ T36] audit: type=1400 audit(1756985307.328:1412): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.292416][ T36] audit: type=1400 audit(1756985307.328:1413): avc: denied { create } for pid=5889 comm="syz.8.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 150.334471][ T36] audit: type=1400 audit(1756985307.328:1414): avc: denied { create } for pid=5889 comm="syz.8.1823" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 150.356021][ T36] audit: type=1400 audit(1756985307.328:1415): avc: denied { create } for pid=5889 comm="syz.8.1823" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 150.378155][ T36] audit: type=1400 audit(1756985307.328:1416): avc: denied { create } for pid=5889 comm="syz.8.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 150.399025][ T36] audit: type=1400 audit(1756985307.328:1417): avc: denied { create } for pid=5889 comm="syz.8.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 150.424611][ T36] audit: type=1400 audit(1756985307.358:1418): avc: denied { create } for pid=5883 comm="syz.4.1822" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 150.447260][ T36] audit: type=1400 audit(1756985307.358:1419): avc: denied { create } for pid=5883 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 150.468171][ T36] audit: type=1400 audit(1756985307.358:1420): avc: denied { create } for pid=5883 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 150.831995][ T5962] netlink: 'syz.2.1848': attribute type 46 has an invalid length. [ 155.334635][ T36] kauditd_printk_skb: 399 callbacks suppressed [ 155.334654][ T36] audit: type=1400 audit(1756985312.488:1820): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.401947][ T36] audit: type=1400 audit(1756985312.488:1821): avc: denied { create } for pid=6160 comm="syz.8.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 155.441916][ T36] audit: type=1400 audit(1756985312.488:1822): avc: denied { read } for pid=6160 comm="syz.8.1919" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 155.486380][ T36] audit: type=1400 audit(1756985312.488:1823): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.544928][ T36] audit: type=1400 audit(1756985312.488:1824): avc: denied { read write } for pid=6162 comm="syz.8.1920" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 155.569257][ T36] audit: type=1400 audit(1756985312.488:1825): avc: denied { create } for pid=6162 comm="syz.8.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 155.590716][ T36] audit: type=1400 audit(1756985312.488:1826): avc: denied { read } for pid=6162 comm="syz.8.1920" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 155.614756][ T36] audit: type=1400 audit(1756985312.488:1827): avc: denied { read } for pid=6162 comm="syz.8.1920" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 155.638590][ T36] audit: type=1400 audit(1756985312.488:1828): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.663619][ T36] audit: type=1400 audit(1756985312.518:1829): avc: denied { read } for pid=6164 comm="syz.8.1921" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 156.179703][ T6187] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1929'. [ 163.747535][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 163.747555][ T36] audit: type=1400 audit(1756985320.898:1873): avc: denied { read } for pid=6192 comm="syz.8.1932" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 163.751689][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 163.767114][ T36] audit: type=1400 audit(1756985320.908:1874): avc: denied { create } for pid=6192 comm="syz.8.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 163.816952][ T36] audit: type=1400 audit(1756985320.908:1875): avc: denied { create } for pid=6192 comm="syz.8.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 163.837359][ T36] audit: type=1400 audit(1756985320.908:1876): avc: denied { read write } for pid=6192 comm="syz.8.1932" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 163.873543][ T36] audit: type=1400 audit(1756985320.908:1877): avc: denied { read write } for pid=6192 comm="syz.8.1932" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 163.897112][ T36] audit: type=1400 audit(1756985320.908:1878): avc: denied { read } for pid=6192 comm="syz.8.1932" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 163.928561][ T6205] netlink: 'syz.8.1937': attribute type 4 has an invalid length. [ 163.956392][ T36] audit: type=1400 audit(1756985320.908:1879): avc: denied { create } for pid=6192 comm="syz.8.1932" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 164.010059][ T36] audit: type=1400 audit(1756985320.908:1880): avc: denied { mounton } for pid=6191 comm="syz.6.1931" path="/488" dev="tmpfs" ino=2658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 164.035118][ T36] audit: type=1400 audit(1756985320.928:1881): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 164.081232][ T36] audit: type=1400 audit(1756985321.018:1882): avc: denied { read write } for pid=1271 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.240085][ T428] bridge_slave_1: left allmulticast mode [ 166.245976][ T428] bridge_slave_1: left promiscuous mode [ 166.251648][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.259422][ T428] bridge_slave_0: left allmulticast mode [ 166.266051][ T428] bridge_slave_0: left promiscuous mode [ 166.271733][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.279829][ T428] tipc: Resetting bearer [ 166.294931][ T428] tipc: Disabling bearer [ 166.423411][ T428] tipc: Left network mode [ 166.428637][ T428] veth1_macvtap: left promiscuous mode [ 166.434485][ T428] veth0_vlan: left promiscuous mode [ 169.221598][ T36] kauditd_printk_skb: 312 callbacks suppressed [ 169.221617][ T36] audit: type=1400 audit(1756985326.368:2195): avc: denied { execmem } for pid=6352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 169.256534][ T36] audit: type=1400 audit(1756985326.378:2196): avc: denied { read } for pid=6354 comm="syz.8.1985" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 169.279435][ T36] audit: type=1400 audit(1756985326.398:2197): avc: denied { read } for pid=6355 comm="syz.2.1986" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 169.303040][ T36] audit: type=1400 audit(1756985326.408:2198): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.327581][ T36] audit: type=1400 audit(1756985326.408:2199): avc: denied { read write } for pid=1271 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.352029][ T36] audit: type=1400 audit(1756985326.418:2200): avc: denied { mounton } for pid=6361 comm="syz.2.1988" path="/349/file1/file0" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 169.375838][ T36] audit: type=1400 audit(1756985326.418:2201): avc: denied { mounton } for pid=6361 comm="syz.2.1988" path="/349/bus" dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 169.398641][ T36] audit: type=1400 audit(1756985326.418:2202): avc: denied { create } for pid=6361 comm="syz.2.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 169.419404][ T36] audit: type=1400 audit(1756985326.418:2203): avc: denied { block_suspend } for pid=6361 comm="syz.2.1988" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 169.441264][ T36] audit: type=1400 audit(1756985326.418:2204): avc: denied { block_suspend } for pid=6361 comm="syz.2.1988" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 174.819435][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 174.819456][ T36] audit: type=1400 audit(1756985331.968:2251): avc: denied { execmem } for pid=6399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 174.846072][ T36] audit: type=1400 audit(1756985331.968:2252): avc: denied { mounton } for pid=6402 comm="syz.2.2003" path="/354/bus" dev="tmpfs" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 174.869194][ T36] audit: type=1400 audit(1756985331.968:2253): avc: denied { read write } for pid=6402 comm="syz.2.2003" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 174.893247][ T36] audit: type=1400 audit(1756985331.978:2254): avc: denied { read write } for pid=1271 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.918394][ T36] audit: type=1400 audit(1756985331.978:2255): avc: denied { read } for pid=6400 comm="syz.8.2002" dev="nsfs" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 174.940515][ T36] audit: type=1400 audit(1756985331.978:2256): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.967232][ T36] audit: type=1400 audit(1756985331.978:2257): avc: denied { mounton } for pid=6401 comm="syz.6.2001" path="/511/file0" dev="tmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 174.991289][ T36] audit: type=1400 audit(1756985331.978:2258): avc: denied { name_bind } for pid=6401 comm="syz.6.2001" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 176.230605][ T36] audit: type=1400 audit(1756985333.378:2259): avc: denied { execmem } for pid=6409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 176.251383][ T36] audit: type=1400 audit(1756985333.388:2260): avc: denied { create } for pid=6412 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 181.063567][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 181.063586][ T36] audit: type=1400 audit(1756985338.218:2341): avc: denied { execmem } for pid=6438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 181.094685][ T36] audit: type=1400 audit(1756985338.218:2342): avc: denied { create } for pid=6440 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.116052][ T36] audit: type=1400 audit(1756985338.218:2343): avc: denied { create } for pid=6440 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.137336][ T36] audit: type=1400 audit(1756985338.218:2344): avc: denied { read write } for pid=6440 comm="syz.8.2014" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 181.162204][ T36] audit: type=1400 audit(1756985338.218:2345): avc: denied { create } for pid=6440 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 181.183310][ T36] audit: type=1400 audit(1756985338.218:2346): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.207791][ T36] audit: type=1400 audit(1756985338.218:2347): avc: denied { read } for pid=6444 comm="syz.8.2016" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 181.230421][ T36] audit: type=1400 audit(1756985338.218:2348): avc: denied { read write } for pid=4301 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.255166][ T36] audit: type=1400 audit(1756985338.248:2349): avc: denied { read write } for pid=6446 comm="syz.8.2017" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 181.279471][ T36] audit: type=1400 audit(1756985338.248:2350): avc: denied { read write } for pid=6441 comm="syz.2.2015" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 186.849623][ T36] kauditd_printk_skb: 131 callbacks suppressed [ 186.849642][ T36] audit: type=1400 audit(1756985343.998:2482): avc: denied { execmem } for pid=6474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 186.880729][ T36] audit: type=1400 audit(1756985344.008:2483): avc: denied { create } for pid=6475 comm="syz.6.2025" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 186.933043][ T36] audit: type=1400 audit(1756985344.008:2484): avc: denied { create } for pid=6476 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 187.001935][ T36] audit: type=1400 audit(1756985344.008:2485): avc: denied { create } for pid=6476 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 187.022314][ T36] audit: type=1400 audit(1756985344.018:2486): avc: denied { read write } for pid=6476 comm="syz.8.2026" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 187.046694][ T36] audit: type=1400 audit(1756985344.018:2487): avc: denied { read write } for pid=6476 comm="syz.8.2026" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 187.070392][ T36] audit: type=1400 audit(1756985344.018:2488): avc: denied { mounton } for pid=6476 comm="syz.8.2026" path="/146/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 187.131906][ T36] audit: type=1400 audit(1756985344.018:2489): avc: denied { mounton } for pid=6476 comm="syz.8.2026" path="/146/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 187.200440][ T36] audit: type=1400 audit(1756985344.018:2490): avc: denied { mounton } for pid=6482 comm="syz.6.2028" path="/520/file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 187.231910][ T36] audit: type=1400 audit(1756985344.018:2491): avc: denied { execmem } for pid=6482 comm="syz.6.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 187.404206][ T328] bridge_slave_1: left allmulticast mode [ 187.409999][ T328] bridge_slave_1: left promiscuous mode [ 187.416058][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.426720][ T328] bridge_slave_0: left allmulticast mode [ 187.433640][ T328] bridge_slave_0: left promiscuous mode [ 187.440167][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.448603][ T328] bridge_slave_1: left allmulticast mode [ 187.454710][ T328] bridge_slave_1: left promiscuous mode [ 187.460338][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.468078][ T328] bridge_slave_0: left allmulticast mode [ 187.474000][ T328] bridge_slave_0: left promiscuous mode [ 187.479606][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.664140][ T328] tipc: Left network mode [ 187.670363][ T328] veth1_macvtap: left promiscuous mode [ 187.676451][ T328] veth1_macvtap: left promiscuous mode [ 187.682310][ T328] veth0_vlan: left promiscuous mode [ 188.082881][ T328] bridge_slave_1: left allmulticast mode [ 188.089102][ T328] bridge_slave_1: left promiscuous mode [ 188.094945][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.102785][ T328] bridge_slave_0: left allmulticast mode [ 188.108439][ T328] bridge_slave_0: left promiscuous mode [ 188.114096][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.203552][ T328] tipc: Left network mode [ 188.208905][ T328] veth1_macvtap: left promiscuous mode [ 188.214537][ T328] veth0_vlan: left promiscuous mode