last executing test programs: 31.084120593s ago: executing program 2 (id=1517): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lstat(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000500)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x6400}, {r1, 0x1}, {0xffffffffffffffff, 0x342}, {r3, 0x1288}, {r0, 0x180}, {0xffffffffffffffff, 0x2042}, {r4, 0x4002}], 0x7, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x8000]}, 0x8) getpeername(r2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x98, &(0x7f0000000240)={0xfff, 0xfffffffffffffff6, 0xb}}) 31.026805284s ago: executing program 2 (id=1519): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x100}, {r1, 0x18a}, {r0, 0x45c59a4348dd15fd}, {r2, 0x604}, {r2, 0x2118}, {r2, 0x1002}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x3ff, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000900)={0x4, 0x8000000, 0x1, r7, 0x1}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x7a2, 0xeeee8000, 0x1020ccfeab39c7c8, r7, 0x4}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0x1000800000]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 30.935163576s ago: executing program 2 (id=1522): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000300)) 30.847455827s ago: executing program 2 (id=1525): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x18) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r3, 0xee01, 0x0) (async) keyctl$setperm(0x5, r3, 0x70505) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) setresuid(r4, 0x0, 0x0) (async) setreuid(0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r5, 0x147a5000) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x11) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) timerfd_create(0x4, 0x80000) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) 30.763793338s ago: executing program 2 (id=1528): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x14c}}, 0x4810) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1111097, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x2e7}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x120010, &(0x7f00000002c0)={[{@uuid_auto}, {@redirect_dir_off}, {@redirect_dir_off}, {@uuid_off}, {@uuid_off}], [{@subj_user={'subj_user', 0x3d, './binderfs/binder1\x00'}}]}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x20c02, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 30.584013381s ago: executing program 2 (id=1532): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x6a) fcntl$setpipe(r1, 0x407, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000568000/0x1000)=nil, 0x1000, 0x11) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8000000000) 30.479721243s ago: executing program 32 (id=1532): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x6a) fcntl$setpipe(r1, 0x407, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000568000/0x1000)=nil, 0x1000, 0x11) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8000000000) 6.811561187s ago: executing program 0 (id=1926): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x45809000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30fea7, 0xa) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, &(0x7f00000005c0)={0x40, 0x7, 0xee, {0xee, 0x2, "a3e265bd77288a4aa21b497434713981708919bfedd848a242e41ec3efd7d2ab1e33f86a2e1ada9c7210d8384b0d3a6838935d04725ad768f1f8d9b37731fff073e9c4e030ea3098bd773b1f915104e1b5e34feae7a9c89561804ab30ee32313c8deafc0d7462f51eb13cf0819003add6d1d3e87e6065f68402630e4c32a36be3683c45064338e2afd9655fc8281c16e253b1fe2f3e3cb8a59674faf1af8e55c150bb5f380bdc3549bf239f36ca5f35649a9a63778a1db32aa6d94274892a80a2b980c1915ed7b8782a84ed64a3963415d3ff2bfcfc52adbf299a09eff1b29b2c017bd9e73bee78107e2d7c5"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x800) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) 3.696097464s ago: executing program 0 (id=1946): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xfffd, 0xb007}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000d00)={0x2, {{0xa, 0x2, 0x5, @mcast1}}}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a300000006be7a438cc40a932ab8f54500830fcc874124"], 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x20, 0x14, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) 1.603455575s ago: executing program 1 (id=1978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x20000840, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000700)=[@acquire={0x40046305, 0x1}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/7, 0x7, 0x0, 0x28}, @fda={0x66646185, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/41, 0x29, 0x1, 0x17}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x545e8c7e3a2252d2}], 0x0, 0x0, 0x0}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1, 0xe225, {{0x8, 0x4, 0x2, 0x37, 0x20, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x3c, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x1d00d2a2d86efd90, r5, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x3}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x0, 0x33}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/22, 0x16, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0xf, 0x0, &(0x7f0000000340)="ba4ad03c173ef6a095f79fe85d4864"}) 1.584481566s ago: executing program 1 (id=1979): mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc006, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="14000380040001000400040008000200000000001ff9846ccd5dd13d3f2f16"], 0x34}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000008, &(0x7f0000000a80)=ANY=[@ANYBLOB='nr_blocks=m']) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000000ff7f02000000000002003e00eefffbff94020000000000004000000000000000cf000000000000000f0000f3b8002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e600000000000000ffffffffffffffff030000000000"], 0x78) close(r5) execveat(r5, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sync() sync() fsopen(0x0, 0x0) sync() mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r6, r8, 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x2}) sync() mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @exit_looper, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.31398753s ago: executing program 4 (id=1983): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x227, 0x0, 0x804}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) write$char_usb(r3, &(0x7f0000000140)="dec8720a524c22d4bfa2bb6d9828576a3689651f74f818c598531c1238b7b1e6a0d9899cc13b6cc4d9a79c15f67af205fbe5b82dee883d0af933e5d48e1d19bc4919c36cb4110c9b1098c6e5e4df03a50cb2c0324dd5be58a5fb4f05492a251a0c8bdc26ca5911fd4432ec4ad8f0ef8ea9705f65dab168a2704996698ad1a0d32e6edab7cdcfdb008de76d5f6b5035a444f562f76d985555e77d1ab734b939e339551fe714fe8eff28219c0aa28e98ac8697976b458a", 0xb6) unlinkat(0xffffffffffffffff, 0x0, 0x200) syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092402010303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 787.143228ms ago: executing program 4 (id=1986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@weak_handle={0x77682a85, 0x100b}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 708.095099ms ago: executing program 4 (id=1988): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 707.130059ms ago: executing program 1 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x40}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8798ea8ba9371ae9}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x820, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0xc14, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8d, 0x7d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r3, 0x4, 0x70bd26, 0x3, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3cc6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x48804) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1c0, 0x33, 0x20, 0x70bd2a, 0x25dfdbff, {0xc}, [@generic="cfcfb873d931939b958a736be5eae825e7e5221d1e1dfd884770f7606d5f2dc7d45b96092856c43ba39beeeb04b98691a7cda1f596bde6068f1199d2dc84c96878308bc47ce89943efdacdaa64c5c668a3acfd8f51c1a302865b4eeb06c14be1a06d4a9757e8ddc8beba1b8b117c7b4e69e3dbe3f5a593cd793d6ab64d95375689070a18ac7d2c511f9ad0620be36e68f5b1d47ca3709e1fa134fa0b00aec0d9152676c6991f8a3ec194c7f0f20f4ead613f5af97cbad08309ca320551ed5d8210d9dce87396d0a7d49927b847ba149a9176efef9a8d2d2c745d82817bd2cc", @generic="7c41e8", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xfc, 0x0, 0x0, @fd=r0}, @nested={0x60, 0x115, 0x0, 0x1, [@nested={0x4, 0x64}, @generic="165b9eba7bc6ca072ff49998eaa8d791d5de223748553acdbb6c763104a838ef6fe88f7694aed9334e9f5190968407031de04b653ad3eb37c196f25e011cbc0860d9c70403387f517c93939268c13faa9f0d40d7", @nested={0x4, 0x90}]}, @typed={0xc, 0xd4, 0x0, 0x0, @u64}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x9}, @generic="a1c99671c6f351cf47ce5400fdc9c72668ab0dc274260e5c240802bf", @generic="a0f3b3926a1e8e57411478150529f6ea871b76d4747d", @nested={0x10, 0xa4, 0x0, 0x1, [@typed={0xc, 0xcd, 0x0, 0x0, @u64=0x2040000000000}]}]}, 0x1c0}}, 0x20000051) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000880)={0x9c8, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = creat(&(0x7f000000f380)='./file0\x00', 0x10) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f000000f500)={&(0x7f000000f3c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000f4c0)={&(0x7f000000f400)={0xa0, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x602}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = syz_open_dev$usbfs(&(0x7f000000f540), 0xd4, 0x206400) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f000000f640)={0x60, 0x6, 0xffff, 0xa7, 0xa1, 0x0, &(0x7f000000f580)="16336c520ef370e648123aad827dac8eb7286f036a65f99909b5c0acd5da119fb46633558531c3e3745004865ac28c189c116a556a2ea2ea37b7a247e63d5feac378566a8f987b7ff8afc2bbed87658ba4c53bd006a2b256eebb824a5340fd1de8918e47c0b5e9ae95a0563eac53f5bd483dd957b5ab2c141bb36d31af53df287a58468c904f71391992b6adab3860811a9dce7e92bc578eab32512501bdcb0347"}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000f6c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000f700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f000000f8c0)={&(0x7f000000f680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000f880)={&(0x7f000000f740)={0x11c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x100, 0xbe, "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"}]}, 0x11c}}, 0x4030) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f000000f900)) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f000000f980), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f000000fa40)={&(0x7f000000f940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000fa00)={&(0x7f000000f9c0)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x3c}}, 0x24004890) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f000000fa80)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000fb00), r5) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f000000fd00)={&(0x7f000000fac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000fcc0)={&(0x7f000000fb40)={0x16c, r10, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x689e, 0x529c, 0x6]}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xf095, 0x7, 0x3, 0x6b]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x80000001, 0x5, 0x0, 0x6, 0xdd08, 0x8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x53f7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa4a2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xa4}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x704}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfffffffd, 0x28000, 0xf786, 0xa36, 0x52b, 0x1, 0x7]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x531}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x4, 0x80000000, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff00}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x543}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x34d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1d}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004004) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r11 = syz_genetlink_get_family_id$tipc(&(0x7f000000fd40), r0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f000000fe40)={&(0x7f000000fd80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000fe00)={&(0x7f000000fdc0)={0x24, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2) sendmsg$AUDIT_USER_TTY(r5, &(0x7f000000ff40)={&(0x7f000000fe80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000ff00)={&(0x7f000000fec0)={0x34, 0x464, 0x300, 0x70bd2a, 0x25dfdbfd, "06a12c2a67617e654182f9e36a37e718192df70b88be525373845555c6d9ac976945", ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x80) connect$netlink(r0, &(0x7f000000ff80)=@unspec, 0xc) 663.03784ms ago: executing program 4 (id=1990): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x1, 0x0, 0xac1d}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x3}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/115, 0x73}], 0x1, 0x1, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x27, 0x2, 0x5) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000d0000007fffffff07000000000001000200000000000000b26979b7c0ffd6515f36f798bd911f3c9cdd8df2a7609f9d4e06debb4e6f97832db868c27a3d4a07752ebc0616c69bea14a5638a47975266e615849fed508887767bd1e51dc6ef5f70ac2db5672170654f8f31082cb3fa54a07471834356e0c69f9b9db6e6f5373095e6fcd65e9046f21edfbadd480a29247b98a6cabe9b9d4b36798835decb889736bad31024fc83922d472deecfcb867af8dc719a53f682b5146eaf870154c1c5547e36139b07ea3d8f3dc778a2202c03e3c627756d175dc072651096e5144e6e2406"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x289c41c, &(0x7f0000000180)=ANY=[]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000000080)=0x5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000009740)=[{{&(0x7f00000032c0)={0xa, 0x4e22, 0x10000, @local, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000003840)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x30}}], 0x1, 0x24008085) r9 = epoll_create1(0x0) epoll_create1(0x80000) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0x5000, 0x1000, 0xb, 0x6, 0x51, 0x3, 0x42, 0x6, 0x3, 0xa, 0x93, 0x1}, {0xf000, 0x2000, 0xb, 0x3, 0xe, 0x7, 0x3, 0x1, 0x6, 0x5, 0xfc, 0x40}, {0x3b322000, 0x8080000, 0x0, 0x81, 0x5c, 0x10, 0x1, 0x0, 0x1, 0x0, 0x2, 0x5}, {0xd000, 0xd000, 0xe, 0x2, 0x9, 0xc2, 0x11, 0x8, 0x7f, 0x3, 0x5, 0x8}, {0x10000, 0xffff1000, 0x8, 0x4, 0xc, 0x7, 0xe, 0x9, 0x6, 0x43, 0x6, 0x7}, {0x3000, 0xdddd1000, 0x10, 0x4, 0x9, 0x9, 0xfb, 0x5, 0x3, 0xbf, 0x1}, {0x0, 0xddddd000, 0xd, 0x3, 0x7, 0x41, 0x9, 0x1, 0x4, 0x0, 0x9, 0x8}, {0x3000, 0x80a0000, 0x3, 0x7f, 0xd5, 0x0, 0x5a, 0x9, 0xdc, 0x9, 0x40, 0xc}, {0xdddd1000, 0x6}, {0x4000, 0x7ff}, 0x11, 0x0, 0x6000, 0x540002, 0xb, 0x3001, 0x4, [0x9a44, 0x4, 0x0, 0x2b]}) fcntl$dupfd(r9, 0x0, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r11, 0xe6abc45bd9dbfb93, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) 548.064721ms ago: executing program 0 (id=1992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000001fc0)="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", 0xe00}, {&(0x7f0000000000)="a88ad4d39b60bf3019f6952ebd5c69a7d67f57e0a16c5a11d06913156969fb4c237893fefaf7a31834e7d19aac210520dbe0575946b07d0eb9fec87580c950607cb0b5c040292a55662c2f4c8a06ee6ef59ad3b8feebcfcc44faf41e08d16e7e5ee8ef197ba06c462ff65e7477640f5ce854a3e7d9039c919f287617a5c9b7507a50066ccce5a245dfb5778e0367c145bee2fe8f504a6f6b33fc849ff3", 0x9d}, {&(0x7f00000000c0)="f0211a28730b9b40c3cd7279bec4a1a1c470c2f33556d72adc2864fd0007f10a0463a58c317fff0a977a7739f2a20ef4ea587305a6c25e9e874137691918a529212e8dc27128909b93a187c446c12355891c", 0x52}, {&(0x7f0000000880)="ebf392c77bd6c1648643544f411cffccf70701b369a9bf25adeb0416c0c4b43d7ec3d4ead944d55eaf525730f1f33a5d597a3a96bc92412359c0b975d49f189563f7d153b76873dcd7986a8e90b3cd445a35f04cde8abcc4906be24040ceefe8ae3c748c43b36e4f99029d51ec1abe13399aa72fd68e3ba3784ac492575063e03325b7b7767c361408b83a03ac97c14eb51b8cc5d4ce5038a7d6f2980adada2a989f9e9adf12cdd2285be2c281a0e47246d726cf24d7213b2d98715195f88cf9f5242225587ec394b0353dcfe60254f3b6", 0xd1}, {&(0x7f0000000a00)="cfedbe579da717ff95ff4865c66ed4a76906dfadf691c71602a38309e2bbe8893832ec9be18510207295b9861f4aa0c3d3d9067cf3040ed69a45499c87acbc953b36d3fcf5428d108a4452543c1a987096f01076da8de1c84bd19401847226dfbac2a0cc8daa78be0118a5d7cc868efdda4c17abd48d7344d803d60af69c32d6a3a0941bc7571e13830f7712d2dfc56380c82c05e32e146c15136a50a8df566b227170cbb841d91da8cdbc2a6d4a6b1143ecf7a59fc56e3d26554a5a834b5a9f881129581928941a5a05dd72ccc4d48b8e4a4e19890852a34eca1a0454ed06cbca2b9cd4c097507d96399fd041", 0xed}, {&(0x7f0000000300)="c343dff2a9acf65a", 0x8}], 0x6) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000202010400000000000034000a0000003c0002802c00018014000300"], 0x50}}, 0x4000084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2a, 0x25dddbfc, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b839f97f3a5f2aa7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e92f34df85a3dad48bbeb1361f35f3b2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b1bd2c9b88060876"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8beab78b408ae173"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4ba9f3923f056a0914272b1966e6b2482a53f3b3680127a2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ff288d2ca48c3800b81c5d97aeccb042"}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48800}, 0x6004850) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 547.537621ms ago: executing program 1 (id=1993): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x8010) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 538.884501ms ago: executing program 4 (id=1994): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mprotect(&(0x7f000091f000/0x1000)=nil, 0x1000, 0x100000c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 485.169052ms ago: executing program 1 (id=1995): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) pread64(r0, &(0x7f0000000100)=""/248, 0xf8, 0x4eb) 399.042203ms ago: executing program 4 (id=1997): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x8800, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x20e02, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000280)={{}, {r5, r6+60000000}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x400000000000000) (async) connect$802154_dgram(r1, &(0x7f0000000180)={0x27, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 354.314924ms ago: executing program 1 (id=1998): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2100, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x100000, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=ANY=[], 0x2c}], 0x1}, 0x20000004) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r8, &(0x7f0000000540)=0x6, 0x12) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x30, r11}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r11}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES16=r9, @ANYBLOB="00012abd7000fddbdf251000000004000180080006000800000008000800f10e000020000180140002006772657461703000000000000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x404c095) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000140)={0x5000, 0xffff1000, 0x4, 0x0, 0x3ffc000}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x800000000, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) 280.038435ms ago: executing program 0 (id=2000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) fstat(r0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) fstat(r0, &(0x7f0000000000)) (async) 260.557336ms ago: executing program 3 (id=2001): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x25dfd3fb, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'net_prio'}, {0x2b, 'rlimit'}, {0x2d, 'devices'}, {0x2d, 'pids'}, {0x2b, 'cpuset'}, {0x2d, 'net_prio'}, {0x0, 'io'}, {0x2b, 'net_cls'}]}, 0x40) 212.965906ms ago: executing program 0 (id=2002): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff9a030000000000004000000000000000560000000000000000000000000038000100020002000000030000000500000004000000000000000d20000000400000c801000000000000e20000000000000004000000000000000200000000000000097ae9620e7dd5fa29a74a6ad4afaa24ddb85b0fed4351a419a4c43700000000e65900000000aa235733806147fdbb5a23345e64114f9ec13e2fdaa6c095910ac96e28083d47b4e93e1b451e8fad10cb91c4474f20db82196ceb37d42c9cbb55cd75a081562692bdde8615d61f41"], 0x12f) close(r2) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x7ff, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) copy_file_range(r5, 0x0, r6, &(0x7f00000000c0)=0x5, 0xb2, 0x0) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x200000, 0x80004002004c4, 0x1000, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0x5000, 0x2113c0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 199.632006ms ago: executing program 3 (id=2003): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10010, r0, 0x45809000) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 128.106667ms ago: executing program 0 (id=2004): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_usb_connect(0x6, 0x3b3, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0xc4, 0x9d, 0xe, 0x10, 0x1199, 0x68a3, 0x14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a1, 0x1, 0xc, 0x82, 0x50, 0xa4, [{{0x9, 0x4, 0xb, 0xfc, 0xe, 0x46, 0x49, 0xd7, 0x7, [@hid_hid={0x9, 0x21, 0x1, 0xec, 0x1, {0x22, 0xbce}}], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x0, 0xde, 0x8, [@generic={0xe6, 0x22, "df40534a07340c9b1833fe31db8d6712a40a873c32718e38df9545f5f4d293cfcc659c24523e1c78669838f58575760cfecb3b36dfe3c171c1ef5ee4cbc26563225713285936e9e781a1c5c82ae128c2b06bc50ca366c77164d7086b037718d50241cc26603ac91367384dc1b94ec53cca9c7d7f12adee5680f536fc1a6bd0d786f4ff1ca73c52c27038d4e783dc9fe440ba23d9567d15e75299e9c766868ee8788f587e0fbfa1584b07a030d4a39e98ba40c755bc62adf386e5f91d900e07d442a7a2ee62ff882c1e5a95debefc6e2de1db3d6fb36b5633506cdba5dbffd0de9bf0bfdf"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}, @generic={0xf3, 0x21, "788e80f4e979436f188e474da21758b20ffb8532bfaf0ffdb199c8390d155f438752988536dc08d8508a36d56c4e969b3d83c085603a0412bbf486c6f55e70d4ee9fb05843baa440feabea64f3e0001d7ad85b994f8f5492804df999054dc503b68362227ed851d55d9caab050bf4a6e452a70331334628ca41b6c68b1707d3edc22e12ea33ac81c5e75be755ca05a844af9e3c388b8278d31062059c7f497b68495490e7a45689eb31e43c4aaf75aa2587b88e2754c5520a29c97f0dbb6c5ac743c20e3d82776925fd26d014a2d288df0e438f96a3343a1bc21b6c96e978d2b7c91fa7d1874662b31142e1090392fb478"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x40, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x3, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xba, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd40}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3, 0xa0, 0x3}}, {{0x9, 0x5, 0xb, 0x20, 0x8, 0x1, 0x6, 0x5, [@generic={0xab, 0x7, "50e9dce75454e316f0f477722172fa8cc1b17cc20f147538be001f2f9237593cbce793c2229776324d4586a11e2534c99a46a271e6309b5118ee6c6cd6f6e803565bd76adc997ba4063be4c5690b89b63ea452699623d80be4ecc91f3d456acc8123471ec5cbea3260e26f65f6d09c02b962ebbf6b21025a4c88f6ce2ec571f269b06f0febeaefc0d430306ff03d40bd5a6fbabddc3a9c3b34f1977f2bda76b2dd12aef8778760e20e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x2, 0x11, 0x3ff, 0x83, 0x9, 0x40}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x0, 0x2, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x40, 0x0, 0x3, [@generic={0x2d, 0x3, "28c8d8b409c20994eb74de2f9c4e2a735f5a1bd72eb1048876e64738b2ab95fd965258affffb9eabfa2c52"}, @generic={0x11, 0x10, "00275b32c94a310adaf5ab1a5f7d59"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xb9, 0x4, 0x1}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0xa, 0xff, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x7f, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x3, 0xb2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4a}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xe7, 0x24, 0x6, 0xef, 0xc}, 0x43, &(0x7f0000000040)={0x5, 0xf, 0x43, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x4, 0x4, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x5, 0x6, 0xf, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xf, 0xf00, 0x0, [0x30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x9, 0x8, 0xfff7, 0xe9}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x411}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000004) mmap(&(0x7f00001cd000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x84814000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x6, 0x286, 0xfffffffc}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x9) 126.743407ms ago: executing program 3 (id=2005): r0 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) gettid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4000fffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4000) pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414281, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) syz_clone(0x89208400, &(0x7f00000001c0)="c46c101d18c21c21076bd16c4a13f146be19c894834e18a23cde346785d8210c24ac70c2f51cf77f3e079a587d93b077900a2d9244d705149560bfa97130be3501425b2ebb814ed3e5275fd76421795c847d655e3f56c87177dfe85afe3ae4112cdcf84b1135e74ad6af8e51b09e973e969e58e64ce13ba2e42ef07c5894c0c2dde636c0e9e72f3221d5c272e3db36f6ea9d72ea2abccdfcb9b240521c4e9a08d3b24c3011a1c1a306f15f85f636f5e27596073ebc78eb25f0a2fc0353d524d0486a836402f502e88f28a6", 0xcb, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="9ffccb78894afb") r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf1) renameat2(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x8) 103.090838ms ago: executing program 3 (id=2006): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x80002, 0x4) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 77.357278ms ago: executing program 3 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0100000000d99954c20000007f00000008"]) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) listen(r2, 0x5) setuid(0xee00) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 0s ago: executing program 3 (id=2008): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x6, 0x7}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "8a1621370500", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x11f, 0x1000000003}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x100000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4]) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=']) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x4, 0x9, 0x8}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T967] exFAT-fs (rnullb0): invalid boot record signature [ 44.057717][ T967] exFAT-fs (rnullb0): failed to read boot sector [ 44.064075][ T967] exFAT-fs (rnullb0): failed to recognize exfat type [ 44.083409][ T970] fuse: Bad value for 'fd' [ 44.089062][ T970] loop8: detected capacity change from 0 to 16385 [ 44.265450][ T970] overlay: ./file0 is not a directory [ 44.276272][ T970] binder: Unknown parameter '' [ 44.323850][ T981] binder: Unknown parameter 'rw/ l5µc^)†Ñ' [ 44.392767][ T989] netlink: 104 bytes leftover after parsing attributes in process `syz.2.211'. [ 44.592503][ T997] rust_binder: Write failure EFAULT in pid:204 [ 44.819554][ T1005] exFAT-fs (rnullb0): invalid boot record signature [ 44.837785][ T1005] exFAT-fs (rnullb0): failed to read boot sector [ 44.844211][ T1005] exFAT-fs (rnullb0): failed to recognize exfat type [ 44.844356][ T992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.927195][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.129751][ T1019] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 45.137631][ T1019] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.222'. [ 45.170257][ T1023] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.281245][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.441243][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 45.447681][ T64] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.458681][ T64] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.471629][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.478334][ T64] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 45.487460][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.496295][ T64] usb 3-1: config 0 descriptor?? [ 45.905717][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 45.911864][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.924288][ T64] usb 3-1: USB disconnect, device number 3 [ 46.007519][ T1060] fuse: Bad value for 'group_id' [ 46.012558][ T1060] fuse: Bad value for 'group_id' [ 46.020057][ T1060] rust_binder: Error while translating object. [ 46.020089][ T1060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.026655][ T1060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 46.540361][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 46.540379][ T36] audit: type=1400 audit(1752108516.980:19257): avc: granted { setsecparam } for pid=1073 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 46.609724][ T36] audit: type=1400 audit(1752108517.050:19258): avc: denied { mounton } for pid=1078 comm="syz.2.240" path="/72/file0" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 46.691356][ T1083] rust_binder: Write failure EINVAL in pid:223 [ 46.886897][ T1068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.931209][ T389] Bluetooth: hci0: command 0x1003 tx timeout [ 46.931209][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.941227][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.978326][ T36] audit: type=1400 audit(1752108517.420:19259): avc: denied { create } for pid=1090 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.998925][ T36] audit: type=1400 audit(1752108517.430:19260): avc: denied { sys_admin } for pid=1090 comm="syz.1.245" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.025542][ T36] audit: type=1400 audit(1752108517.470:19261): avc: denied { ioctl } for pid=1084 comm="syz.2.242" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.074163][ T1094] syz.3.246: attempt to access beyond end of device [ 47.074163][ T1094] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 47.079564][ T36] audit: type=1400 audit(1752108517.480:19262): avc: denied { set_context_mgr } for pid=1093 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.095967][ T64] usb 3-1: device descriptor read/64, error -71 [ 47.132315][ T1094] FAT-fs (loop3): unable to read boot sector [ 47.140415][ T1098] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 47.140478][ T36] audit: type=1400 audit(1752108517.480:19263): avc: denied { read } for pid=1093 comm="syz.3.246" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.191584][ T36] audit: type=1400 audit(1752108517.480:19264): avc: denied { open } for pid=1093 comm="syz.3.246" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.218559][ T36] audit: type=1400 audit(1752108517.480:19265): avc: denied { ioctl } for pid=1093 comm="syz.3.246" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.247052][ T1102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 47.256876][ T36] audit: type=1400 audit(1752108517.500:19266): avc: denied { ioctl } for pid=1090 comm="syz.1.245" path="/newroot/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.305399][ T1102] overlayfs: failed to clone upperpath [ 47.391205][ T64] usb 3-1: device descriptor read/64, error -71 [ 47.461236][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.551214][ T308] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.623985][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.631359][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.634258][ T31] usb 2-1: config 0 has no interfaces? [ 47.647154][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 47.656238][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.666072][ T31] usb 2-1: config 0 descriptor?? [ 47.701232][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 47.709821][ T308] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 47.719760][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.729968][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.741847][ T308] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.750997][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.759009][ T308] usb 4-1: Product: syz [ 47.763271][ T308] usb 4-1: Manufacturer: syz [ 47.767868][ T308] usb 4-1: SerialNumber: syz [ 47.782939][ T64] usb 3-1: device descriptor read/64, error -71 [ 47.907779][ T1100] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009 ' [ 47.973067][ T31] usb 2-1: USB disconnect, device number 7 [ 48.021221][ T64] usb 3-1: device descriptor read/64, error -71 [ 48.131352][ T64] usb usb3-port1: attempt power cycle [ 48.189948][ T308] usb 4-1: 0:2 : does not exist [ 48.351249][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.471244][ T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.493796][ T64] usb 3-1: device descriptor read/8, error -71 [ 48.523327][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.534627][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.543726][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.553359][ T31] usb 2-1: config 0 descriptor?? [ 48.623687][ T64] usb 3-1: device descriptor read/8, error -71 [ 48.861235][ T64] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.883688][ T64] usb 3-1: device descriptor read/8, error -71 [ 48.964896][ T31] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 48.976503][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input12 [ 49.003951][ T1104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.015838][ T64] usb 3-1: device descriptor read/8, error -71 [ 49.051440][ T31] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 49.131314][ T64] usb usb3-port1: unable to enumerate USB device [ 49.172435][ T64] usb 2-1: USB disconnect, device number 8 [ 49.399450][ T1137] fuse: Bad value for 'fd' [ 49.800433][ T1160] fuse: Bad value for 'fd' [ 50.121221][ T64] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.301200][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 50.320116][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.338940][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 50.388716][ T64] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.413809][ T64] usb 3-1: config 0 interface 0 has no altsetting 1 [ 50.427953][ T64] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 50.447187][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.455342][ T64] usb 3-1: Product: syz [ 50.465424][ T64] usb 3-1: Manufacturer: syz [ 50.470053][ T64] usb 3-1: SerialNumber: syz [ 50.482761][ T64] usb 3-1: config 0 descriptor?? [ 50.731244][ T1158] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26132 sclass=netlink_xfrm_socket pid=1158 comm=syz.2.267 [ 51.539824][ T1196] rust_binder: Error while translating object. [ 51.539857][ T1196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 51.549353][ T1196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:232 [ 51.599780][ T36] kauditd_printk_skb: 398 callbacks suppressed [ 51.599800][ T36] audit: type=1400 audit(1752108522.040:19665): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.624375][ T1198] netlink: 'syz.1.278': attribute type 28 has an invalid length. [ 51.711208][ T36] audit: type=1400 audit(1752108522.070:19666): avc: denied { read write } for pid=1197 comm="syz.1.278" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.734856][ T36] audit: type=1400 audit(1752108522.070:19667): avc: denied { read write open } for pid=1197 comm="syz.1.278" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.769359][ T36] audit: type=1400 audit(1752108522.090:19668): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.809351][ T1203] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 51.814347][ T36] audit: type=1400 audit(1752108522.090:19669): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.824415][ T1203] rust_binder: Write failure EINVAL in pid:234 [ 51.853682][ T36] audit: type=1400 audit(1752108522.120:19670): avc: denied { mounton } for pid=1197 comm="syz.1.278" path="/63/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.882696][ T36] audit: type=1400 audit(1752108522.130:19671): avc: denied { mount } for pid=1197 comm="syz.1.278" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.904712][ T36] audit: type=1400 audit(1752108522.250:19672): avc: denied { mounton } for pid=1199 comm="syz.2.280" path="/78/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.927507][ T36] audit: type=1400 audit(1752108522.250:19673): avc: denied { mount } for pid=1199 comm="syz.2.280" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.949528][ T36] audit: type=1400 audit(1752108522.250:19674): avc: denied { write } for pid=1199 comm="syz.2.280" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.206143][ T1206] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=37 [ 52.206167][ T1206] rust_binder: Error while translating object. [ 52.215105][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.221619][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 52.612974][ T1227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.639439][ T1227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.710247][ T1227] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=37 [ 52.710273][ T1227] rust_binder: Error while translating object. [ 52.733702][ T1227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.739922][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 52.769112][ T1240] /dev/loop0: Can't lookup blockdev [ 53.259745][ T1276] fuse: Bad value for 'fd' [ 53.503361][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.536643][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.825774][ T308] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 53.843401][ T64] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 53.871928][ T64] usb 3-1: USB disconnect, device number 8 [ 53.961702][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 54.282925][ T1309] netlink: 'syz.2.315': attribute type 4 has an invalid length. [ 55.210646][ T1354] capability: warning: `syz.0.332' uses 32-bit capabilities (legacy support in use) [ 55.221252][ T1122] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 55.391208][ T1122] usb 2-1: Using ep0 maxpacket: 16 [ 55.398359][ T1122] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.409959][ T1122] usb 2-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.424291][ T1122] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.430992][ T1122] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 55.441460][ T1122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.452183][ T1122] usb 2-1: config 0 descriptor?? [ 55.892964][ T1122] usbhid 2-1:0.0: can't add hid device: -71 [ 55.910697][ T1122] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.931828][ T1122] usb 2-1: USB disconnect, device number 9 [ 56.602434][ T36] kauditd_printk_skb: 553 callbacks suppressed [ 56.602452][ T36] audit: type=1400 audit(1752108527.050:20228): avc: denied { write } for pid=1379 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.664723][ T1380] input: syz0 as /devices/virtual/input/input13 [ 56.673963][ T36] audit: type=1400 audit(1752108527.080:20229): avc: denied { nlmsg_write } for pid=1379 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.726712][ T36] audit: type=1400 audit(1752108527.080:20230): avc: denied { read write } for pid=1379 comm="syz.3.341" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.750182][ T36] audit: type=1400 audit(1752108527.080:20231): avc: denied { read open } for pid=1379 comm="syz.3.341" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.774601][ T36] audit: type=1400 audit(1752108527.080:20232): avc: denied { read } for pid=1375 comm="syz.1.340" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.804296][ T36] audit: type=1400 audit(1752108527.080:20233): avc: denied { read open } for pid=1375 comm="syz.1.340" path="net:[4026532380]" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.845723][ T36] audit: type=1400 audit(1752108527.090:20234): avc: denied { create } for pid=1375 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.919922][ T36] audit: type=1400 audit(1752108527.090:20235): avc: denied { write } for pid=1375 comm="syz.1.340" path="socket:[10921]" dev="sockfs" ino=10921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.954243][ T36] audit: type=1400 audit(1752108527.090:20236): avc: denied { write } for pid=1375 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.035803][ T36] audit: type=1400 audit(1752108527.090:20237): avc: denied { read write } for pid=1379 comm="syz.3.341" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.230448][ T1392] 9pnet_fd: Insufficient options for proto=fd [ 58.101600][ T1417] fuse: Bad value for 'fd' [ 58.846804][ T1422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.180788][ T1456] overlayfs: failed to clone upperpath [ 59.933100][ T1503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.947652][ T1503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.522094][ T1526] rust_binder: 1526: no such ref 3 [ 60.527348][ T1526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 61.176212][ T1576] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.611175][ T36] kauditd_printk_skb: 400 callbacks suppressed [ 61.611196][ T36] audit: type=1400 audit(1752108532.050:20638): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.692484][ T36] audit: type=1400 audit(1752108532.050:20639): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.718135][ T36] audit: type=1400 audit(1752108532.100:20640): avc: denied { read write } for pid=1593 comm="syz.3.408" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.747398][ T36] audit: type=1400 audit(1752108532.100:20641): avc: denied { read open } for pid=1593 comm="syz.3.408" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.770970][ T36] audit: type=1400 audit(1752108532.110:20642): avc: denied { execute } for pid=1593 comm="syz.3.408" path=2F6D656D66643A2F6465762F726E756C6C6230202864656C6574656429 dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.797733][ T36] audit: type=1400 audit(1752108532.120:20643): avc: denied { read write } for pid=1593 comm="syz.3.408" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.841518][ T36] audit: type=1400 audit(1752108532.120:20644): avc: denied { read write open } for pid=1593 comm="syz.3.408" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.871837][ T1599] rust_binder: 1599: no such ref 5 [ 61.886750][ T1599] rust_binder: 1599: no such ref 3 [ 61.905385][ T36] audit: type=1400 audit(1752108532.120:20645): avc: denied { create } for pid=1593 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.926593][ T36] audit: type=1400 audit(1752108532.120:20646): avc: denied { write } for pid=1593 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.947529][ T36] audit: type=1400 audit(1752108532.120:20647): avc: denied { create } for pid=1594 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.726865][ T1644] cgroup: fork rejected by pids controller in /syz2 [ 63.389822][ T1716] netlink: 2885 bytes leftover after parsing attributes in process `syz.0.440'. [ 63.498492][ T1720] rust_binder: Write failure EINVAL in pid:209 [ 63.611226][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 63.633379][ T1725] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.633403][ T1725] rust_binder: Read failure Err(EFAULT) in pid:214 [ 63.781231][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 63.796453][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 63.805644][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.816078][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.825078][ T10] usb 2-1: config 1 has no interface number 1 [ 63.831210][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.844795][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.868816][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.882600][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.890934][ T10] usb 2-1: Product: syz [ 63.896157][ T10] usb 2-1: Manufacturer: syz [ 63.900770][ T10] usb 2-1: SerialNumber: syz [ 64.067278][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.081392][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.140464][ T10] usb 2-1: USB disconnect, device number 10 [ 64.171501][ T406] udevd[406]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 64.189626][ T406] udevd[406]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 64.230543][ T1751] fuse: Bad value for 'user_id' [ 64.245600][ T1751] fuse: Bad value for 'user_id' [ 64.250421][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 64.773827][ T1765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 64.790526][ T1768] rust_binder: 1768: no such ref 1 [ 65.740000][ T1792] rust_binder: Error while translating object. [ 65.740030][ T1792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 65.747088][ T1792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:262 [ 65.937570][ T1805] netlink: 'syz.1.470': attribute type 3 has an invalid length. [ 65.956019][ T1805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.470'. [ 66.656452][ T36] kauditd_printk_skb: 430 callbacks suppressed [ 66.656471][ T36] audit: type=1400 audit(1752108537.100:21078): avc: denied { create } for pid=1827 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.713402][ T36] audit: type=1400 audit(1752108537.160:21079): avc: denied { mounton } for pid=1829 comm="syz.0.481" path="/168/file0" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.736938][ T1830] 9pnet_fd: Insufficient options for proto=fd [ 66.766491][ T36] audit: type=1400 audit(1752108537.160:21080): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.817816][ T36] audit: type=1400 audit(1752108537.160:21081): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.870112][ T36] audit: type=1400 audit(1752108537.160:21082): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.904649][ T36] audit: type=1400 audit(1752108537.310:21083): avc: denied { create } for pid=1833 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.929219][ T36] audit: type=1400 audit(1752108537.310:21084): avc: denied { setopt } for pid=1833 comm="syz.0.483" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.969229][ T36] audit: type=1400 audit(1752108537.310:21085): avc: denied { connect } for pid=1833 comm="syz.0.483" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.001192][ T36] audit: type=1400 audit(1752108537.320:21086): avc: denied { create } for pid=1833 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.040490][ T36] audit: type=1400 audit(1752108537.320:21087): avc: denied { write } for pid=1833 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.320378][ T1863] binder: Unknown parameter '00000000000000000000' [ 68.078120][ T1872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.372844][ T1908] tmpfs: Unknown parameter '' [ 68.545904][ T1912] __vm_enough_memory: pid: 1912, comm: syz.3.507, bytes: 70373039144960 not enough memory for the allocation [ 68.618579][ T1916] 9pnet_fd: Insufficient options for proto=fd [ 68.625850][ T1915] 9pnet_fd: Insufficient options for proto=fd [ 68.703869][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.731361][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.959276][ T1930] exFAT-fs (rnullb0): invalid boot record signature [ 68.965985][ T1930] exFAT-fs (rnullb0): failed to read boot sector [ 68.973095][ T1930] exFAT-fs (rnullb0): failed to recognize exfat type [ 69.031222][ T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 69.181173][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 69.193144][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.221230][ T64] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 69.230287][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.251430][ T64] usb 2-1: config 0 descriptor?? [ 69.672392][ T64] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0 [ 69.680528][ T64] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0 [ 69.712755][ T64] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0 [ 69.721887][ T64] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0 [ 69.751221][ T64] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0 [ 69.871332][ T1122] usb 2-1: USB disconnect, device number 11 [ 70.044087][ T1976] overlayfs: conflicting options: userxattr,metacopy=on [ 70.094481][ T1978] netlink: 100 bytes leftover after parsing attributes in process `syz.0.531'. [ 70.116134][ T1978] tmpfs: Unsupported parameter 'mpol' [ 70.599647][ T1995] fuseblk: Bad value for 'fd' [ 70.619542][ T1997] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.892869][ T2014] rust_binder: Error while translating object. [ 70.901054][ T2014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 70.921462][ T2014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:300 [ 71.701606][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 71.701628][ T36] audit: type=1400 audit(2000000001.970:21698): avc: denied { execmem } for pid=2068 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.751206][ T36] audit: type=1400 audit(2000000001.990:21699): avc: denied { read write } for pid=2070 comm="syz.1.565" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.775257][ T36] audit: type=1400 audit(2000000001.990:21700): avc: denied { read write open } for pid=2070 comm="syz.1.565" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.800341][ T36] audit: type=1400 audit(2000000001.990:21701): avc: denied { read } for pid=2070 comm="syz.1.565" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.841215][ T36] audit: type=1400 audit(2000000001.990:21702): avc: denied { read open } for pid=2070 comm="syz.1.565" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.911767][ T36] audit: type=1400 audit(2000000002.010:21703): avc: denied { setattr } for pid=2070 comm="syz.1.565" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.961243][ T36] audit: type=1400 audit(2000000002.020:21704): avc: denied { create } for pid=2070 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.962025][ T2074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 71.994687][ T36] audit: type=1400 audit(2000000002.020:21705): avc: denied { create } for pid=2068 comm="syz.0.567" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.006674][ T2074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:283 [ 72.055478][ T36] audit: type=1400 audit(2000000002.020:21706): avc: denied { ioctl } for pid=2068 comm="syz.0.567" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14506 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.126542][ T36] audit: type=1400 audit(2000000002.070:21707): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.239849][ T2090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 72.277851][ T2090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 72.791205][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 72.961190][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.211223][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.373061][ T2139] fuse: Bad value for 'fd' [ 73.385477][ T2139] 9pnet_fd: Insufficient options for proto=fd [ 73.388990][ T2140] 9pnet_fd: Insufficient options for proto=fd [ 73.461208][ T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 73.611218][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.858296][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.886629][ T2150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.895182][ T2150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.971792][ T10] usb usb2-port1: attempt power cycle [ 74.311237][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 74.334991][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.473992][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.569537][ T2195] binder: Unknown parameter 'appraise_type' [ 74.711198][ T10] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 74.748762][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.894171][ T10] usb 2-1: device descriptor read/8, error -71 [ 75.001868][ T10] usb usb2-port1: unable to enumerate USB device [ 75.253620][ T2215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.616'. [ 75.261492][ T2216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.616'. [ 75.387602][ T2222] netlink: 'syz.0.619': attribute type 3 has an invalid length. [ 75.399255][ T2222] netlink: 'syz.0.619': attribute type 4 has an invalid length. [ 75.408975][ T2222] netlink: 'syz.0.619': attribute type 21 has an invalid length. [ 75.417685][ T2222] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.619'. [ 75.904043][ T472] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 76.077328][ T472] usb 2-1: not running at top speed; connect to a high speed hub [ 76.088265][ T472] usb 2-1: config 8 has an invalid interface number: 23 but max is 1 [ 76.097327][ T472] usb 2-1: config 8 has an invalid interface number: 113 but max is 1 [ 76.106189][ T472] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 76.115547][ T472] usb 2-1: config 8 has no interface number 0 [ 76.122241][ T472] usb 2-1: config 8 has no interface number 1 [ 76.128382][ T472] usb 2-1: config 8 interface 23 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 76.140116][ T472] usb 2-1: config 8 interface 23 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 76.151577][ T472] usb 2-1: config 8 interface 23 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 76.169276][ T472] usb 2-1: config 8 interface 23 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 76.190621][ T472] usb 2-1: config 8 interface 113 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 76.216270][ T472] usb 2-1: config 8 interface 113 altsetting 128 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 76.237409][ T472] usb 2-1: config 8 interface 113 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 76.260385][ T472] usb 2-1: config 8 interface 113 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 76.282989][ T472] usb 2-1: config 8 interface 113 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 76.304271][ T472] usb 2-1: config 8 interface 113 altsetting 128 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 76.316394][ T472] usb 2-1: config 8 interface 113 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 76.328616][ T472] usb 2-1: config 8 interface 113 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 76.351242][ T472] usb 2-1: config 8 interface 113 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 76.371215][ T472] usb 2-1: config 8 interface 113 has no altsetting 0 [ 76.386704][ T472] usb 2-1: New USB device found, idVendor=10c4, idProduct=814a, bcdDevice=d9.2a [ 76.401223][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.409677][ T472] usb 2-1: Product: 畽讓⬅埶ߞ㜚嘌䢰∛ç¹ç¼·ç®†à²¹ì¡¯æŒæº³ìƒºíš§ì±¿ä»†å·‹æ«å ¿ë­ îªã—°î˜¶á›€å¨„Ễ줫ဵ鱠ë’ì«Œâ¬ï’¬âž„䪜뾷鴲׵᠓┦앪뙎æ™ì…¼î®…嚿惸罱賩è™î«šç¥¦ [ 76.431417][ T472] usb 2-1: Manufacturer: î§ä†¦ã™¦êª‡ç„˜æ·¤å¢¥ç‰½Â›ë°ºäµï‚™î¹© [ 76.439446][ T472] usb 2-1: SerialNumber: syz [ 76.678347][ T472] usb 2-1: USB disconnect, device number 16 [ 77.147106][ T36] kauditd_printk_skb: 930 callbacks suppressed [ 77.147126][ T36] audit: type=1400 audit(2000000007.410:22638): avc: denied { create } for pid=2250 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.173024][ T36] audit: type=1400 audit(2000000007.410:22639): avc: denied { setopt } for pid=2250 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.199620][ T36] audit: type=1400 audit(2000000007.470:22640): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.245613][ T2255] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 77.249096][ T36] audit: type=1400 audit(2000000007.470:22641): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.282905][ T36] audit: type=1400 audit(2000000007.470:22642): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.339994][ T36] audit: type=1400 audit(2000000007.510:22643): avc: denied { read write } for pid=2254 comm="syz.1.631" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.365871][ T36] audit: type=1400 audit(2000000007.510:22644): avc: denied { read write open } for pid=2254 comm="syz.1.631" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.391425][ T2255] overlayfs: statfs failed on './file0' [ 77.397615][ T36] audit: type=1400 audit(2000000007.530:22645): avc: denied { read write } for pid=2254 comm="syz.1.631" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.437648][ T36] audit: type=1400 audit(2000000007.530:22646): avc: denied { read write open } for pid=2254 comm="syz.1.631" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.541195][ T36] audit: type=1400 audit(2000000007.550:22647): avc: denied { read write } for pid=2254 comm="syz.1.631" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.721764][ T2290] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 77.858023][ T2298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 77.977853][ T2305] 9pnet_fd: Insufficient options for proto=fd [ 77.997544][ T2305] bpf: Bad value for 'uid' [ 78.504653][ T2320] rust_binder: Write failure EFAULT in pid:341 [ 78.586019][ T2326] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 78.592276][ T2326] rust_binder: Error while translating object. [ 78.600953][ T2326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.607198][ T2326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 78.649010][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.667598][ T2329] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.721362][ T2332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.659'. [ 78.997409][ T2342] overlay: Unknown parameter 'func' [ 79.181242][ T2358] rust_binder: 2358: no such ref 0 [ 79.186491][ T2358] rust_binder: Write failure EFAULT in pid:357 [ 79.960033][ T2392] netlink: 92 bytes leftover after parsing attributes in process `syz.0.680'. [ 80.119695][ T2403] incfs: Error accessing: ./file0. [ 80.124923][ T2403] incfs: mount failed -20 [ 80.691305][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.759161][ T2432] netlink: 'syz.3.696': attribute type 4 has an invalid length. [ 80.766954][ T2432] netlink: 'syz.3.696': attribute type 5 has an invalid length. [ 80.777598][ T2432] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 80.788518][ T2432] FAT-fs (rnullb0): bogus number of reserved sectors [ 80.795763][ T2432] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 80.861978][ T2434] exFAT-fs (rnullb0): invalid boot record signature [ 80.868635][ T2434] exFAT-fs (rnullb0): failed to read boot sector [ 80.875060][ T2434] exFAT-fs (rnullb0): failed to recognize exfat type [ 81.021972][ T2443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.031605][ T2443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.040456][ T2443] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 81.040472][ T2443] rust_binder: Error while translating object. [ 81.049180][ T2443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.055464][ T2443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 81.333526][ T2455] overlayfs: failed to clone upperpath [ 81.613284][ T2477] netlink: 124 bytes leftover after parsing attributes in process `syz.3.713'. [ 81.983592][ T2504] fuseblk: Bad value for 'fd' [ 82.164778][ T36] kauditd_printk_skb: 439 callbacks suppressed [ 82.164796][ T36] audit: type=1400 audit(2000000012.430:23087): avc: denied { accept } for pid=2511 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.211183][ T36] audit: type=1400 audit(2000000012.430:23088): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.255644][ T36] audit: type=1400 audit(2000000012.430:23089): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.306036][ T36] audit: type=1400 audit(2000000012.430:23090): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.312090][ T2520] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 82.365517][ T2520] rust_binder: Write failure EINVAL in pid:391 [ 82.375523][ T36] audit: type=1400 audit(2000000012.510:23091): avc: denied { execute } for pid=2514 comm="syz.0.728" path="/dev/rnullb0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.426204][ T36] audit: type=1400 audit(2000000012.510:23092): avc: denied { execute } for pid=2514 comm="syz.0.728" path="/dev/rnullb0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.451199][ T36] audit: type=1400 audit(2000000012.520:23093): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.504486][ T36] audit: type=1400 audit(2000000012.520:23094): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.536391][ T2527] netlink: 'syz.0.733': attribute type 28 has an invalid length. [ 82.539800][ T36] audit: type=1400 audit(2000000012.520:23095): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.583856][ T2530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.616036][ T2530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.647779][ T36] audit: type=1400 audit(2000000012.520:23096): avc: denied { write } for pid=2515 comm="syz.1.729" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.661326][ T2530] fuse: Bad value for 'group_id' [ 82.701197][ T2530] fuse: Bad value for 'group_id' [ 82.748539][ T2541] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 82.843770][ T2541] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 83.050899][ T2553] input: syz0 as /devices/virtual/input/input15 [ 83.568290][ T2572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.580744][ T2572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.597014][ T2574] netlink: 'syz.2.749': attribute type 35 has an invalid length. [ 83.613690][ T2574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 83.817109][ T2579] FAT-fs (rnullb0): bogus number of reserved sectors [ 83.823840][ T2579] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 84.026837][ T2592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.035917][ T2593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.201742][ T2601] rust_binder: Error while translating object. [ 84.216048][ T2601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.226671][ T2601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 85.501985][ T2628] syzkaller0: entered allmulticast mode [ 85.755773][ T2641] cgroup: Unknown parameter './binderfs/binder0' [ 85.791552][ T2641] binder: Unknown parameter 'fscontext?}' [ 86.262584][ T2660] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 86.272977][ T2662] rust_binder: Error while translating object. [ 86.273014][ T2662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.279215][ T2662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 86.300398][ T2663] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 86.795813][ T2690] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 87.392098][ T36] kauditd_printk_skb: 509 callbacks suppressed [ 87.392118][ T36] audit: type=1400 audit(2000000017.660:23606): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.424000][ T36] audit: type=1400 audit(2000000017.660:23607): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.455732][ T36] audit: type=1400 audit(2000000017.660:23608): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.479039][ T2704] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 47) [ 87.481388][ T36] audit: type=1400 audit(2000000017.730:23609): avc: denied { mount } for pid=2703 comm="syz.1.796" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 87.483275][ T2704] rust_binder: Error while translating object. [ 87.492009][ T36] audit: type=1400 audit(2000000017.740:23610): avc: denied { read append } for pid=2703 comm="syz.1.796" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.514898][ T2704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.519660][ T36] audit: type=1400 audit(2000000017.740:23611): avc: denied { read append open } for pid=2703 comm="syz.1.796" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.545008][ T2704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 87.559371][ T36] audit: type=1400 audit(2000000017.740:23612): avc: denied { setattr } for pid=2703 comm="syz.1.796" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.611728][ T36] audit: type=1400 audit(2000000017.740:23613): avc: denied { setattr } for pid=2703 comm="syz.1.796" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.647098][ T36] audit: type=1400 audit(2000000017.740:23614): avc: denied { ioctl } for pid=2703 comm="syz.1.796" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.690062][ T36] audit: type=1400 audit(2000000017.740:23615): avc: denied { set_context_mgr } for pid=2703 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.950907][ T2728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 88.072950][ T2734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.096809][ T2734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.012970][ T2763] rust_binder: 2763: no such ref 0 [ 89.039961][ T2763] rust_binder: Write failure EINVAL in pid:454 [ 89.040385][ T2763] rust_binder: Read failure Err(EAGAIN) in pid:454 [ 89.602293][ T2797] 9pnet_fd: Insufficient options for proto=fd [ 89.946043][ T2836] netlink: 'syz.2.842': attribute type 16 has an invalid length. [ 89.954150][ T2836] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.842'. [ 90.003895][ T2838] incfs: Can't find or create .index dir in ./file0 [ 90.010617][ T2838] incfs: mount failed -30 [ 90.039104][ T2838] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 90.511199][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 90.685215][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.697156][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.708610][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.712769][ T2899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24850 sclass=netlink_route_socket pid=2899 comm=syz.3.863 [ 90.723729][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.744449][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.771294][ T10] usb 2-1: config 0 descriptor?? [ 90.781580][ T10] hub 2-1:0.0: USB hub found [ 90.986014][ T10] hub 2-1:0.0: 14 ports detected [ 90.991236][ T10] hub 2-1:0.0: insufficient power available to use all downstream ports [ 91.405943][ T10] usb 2-1: USB disconnect, device number 17 [ 91.681208][ T2927] fuse: Unknown parameter 'use¡OHr00000000000000000000' [ 92.417784][ T36] kauditd_printk_skb: 483 callbacks suppressed [ 92.417802][ T36] audit: type=1400 audit(2000000022.680:24099): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.472187][ T36] audit: type=1400 audit(2000000022.680:24100): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.498265][ T36] audit: type=1400 audit(2000000022.680:24101): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.571179][ T36] audit: type=1400 audit(2000000022.710:24102): avc: denied { read write } for pid=2932 comm="syz.1.876" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.619635][ T36] audit: type=1400 audit(2000000022.710:24103): avc: denied { read open } for pid=2932 comm="syz.1.876" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.664770][ T36] audit: type=1400 audit(2000000022.760:24104): avc: denied { create } for pid=2932 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.689758][ T36] audit: type=1400 audit(2000000022.760:24105): avc: denied { setopt } for pid=2932 comm="syz.1.876" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.717925][ T36] audit: type=1400 audit(2000000022.760:24106): avc: denied { connect } for pid=2932 comm="syz.1.876" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.755051][ T36] audit: type=1400 audit(2000000022.760:24107): avc: denied { create } for pid=2932 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.780414][ T36] audit: type=1400 audit(2000000022.760:24108): avc: denied { write } for pid=2932 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.949838][ T2955] netlink: 124 bytes leftover after parsing attributes in process `syz.2.885'. [ 93.888948][ T3008] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 93.912439][ T3008] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 94.158079][ T3039] overlayfs: failed to clone upperpath [ 94.967340][ T3088] overlayfs: conflicting options: userxattr,verity=require [ 95.139003][ T3104] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3104 comm=syz.3.939 [ 95.811181][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.811189][ T389] Bluetooth: hci0: command 0x1003 tx timeout [ 95.918927][ T3137] rust_binder: Write failure EFAULT in pid:505 [ 96.169395][ T3151] overlayfs: failed to clone upperpath [ 96.311182][ T308] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 96.492982][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.511168][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.520954][ T308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 96.551169][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.571418][ T308] usb 2-1: config 0 descriptor?? [ 96.574666][ T3164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 96.735828][ T3166] can: request_module (can-proto-0) failed. [ 96.984471][ T308] pyra 0003:1E7D:2CF6.0007: item fetching failed at offset 5/7 [ 97.011383][ T308] pyra 0003:1E7D:2CF6.0007: parse failed [ 97.017094][ T308] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -22 [ 97.429354][ T36] kauditd_printk_skb: 398 callbacks suppressed [ 97.429373][ T36] audit: type=1400 audit(2000000027.690:24507): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.458419][ T36] audit: type=1400 audit(2000000027.710:24508): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.481034][ T36] audit: type=1400 audit(2000000027.710:24509): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.503594][ T36] audit: type=1400 audit(2000000027.730:24510): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.531263][ T36] audit: type=1400 audit(2000000027.730:24511): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.551780][ T36] audit: type=1400 audit(2000000027.750:24512): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.591178][ T36] audit: type=1400 audit(2000000027.750:24513): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.611928][ T36] audit: type=1400 audit(2000000027.750:24514): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.632417][ T36] audit: type=1400 audit(2000000027.770:24515): avc: denied { create } for pid=3191 comm="syz.2.970" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.653278][ T36] audit: type=1400 audit(2000000027.770:24516): avc: denied { accept } for pid=3173 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.914624][ T3207] netlink: 68 bytes leftover after parsing attributes in process `syz.2.975'. [ 98.262578][ T3222] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 98.916797][ T3250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3250 comm=syz.3.994 [ 98.980589][ T308] usb 2-1: USB disconnect, device number 18 [ 99.079263][ T3268] rust_binder: 3268: no such ref 0 [ 99.084584][ T3268] rust_binder: Write failure EINVAL in pid:510 [ 99.811988][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 99.827068][ T3289] bridge_slave_1: left allmulticast mode [ 99.832787][ T3289] bridge_slave_1: left promiscuous mode [ 99.838553][ T3289] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.846493][ T3289] bridge_slave_0: left allmulticast mode [ 99.852223][ T3289] bridge_slave_0: left promiscuous mode [ 99.857868][ T3289] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.905609][ T3292] rust_binder: Error while translating object. [ 99.905657][ T3292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.912753][ T3292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:513 [ 99.958740][ T3294] binder: Unknown parameter '¿}' [ 100.465760][ T3312] fuse: Bad value for 'fd' [ 100.486074][ T3312] tc_dump_action: action bad kind [ 100.625024][ T3318] rust_binder: 3317 RLIMIT_NICE not set [ 100.951193][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 101.111177][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 101.119551][ T10] usb 2-1: config index 0 descriptor too short (expected 256, got 59) [ 101.128923][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.139016][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.149348][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.158633][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.166676][ T10] usb 2-1: SerialNumber: syz [ 101.173249][ T10] usb 2-1: config 0 descriptor?? [ 101.583904][ T3325] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 101.591277][ T3325] rust_binder: Write failure EINVAL in pid:534 [ 101.591750][ T31] usb 2-1: USB disconnect, device number 19 [ 101.941872][ T3360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 102.461743][ T36] kauditd_printk_skb: 784 callbacks suppressed [ 102.461765][ T36] audit: type=1400 audit(2000000032.730:25301): avc: denied { ioctl } for pid=3369 comm="syz.1.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.521223][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 102.529515][ T36] audit: type=1400 audit(2000000032.790:25302): avc: denied { ioctl } for pid=3369 comm="syz.1.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.556282][ T36] audit: type=1400 audit(2000000032.790:25303): avc: denied { create } for pid=3382 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.576638][ T36] audit: type=1400 audit(2000000032.790:25304): avc: denied { setopt } for pid=3382 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.596895][ T36] audit: type=1400 audit(2000000032.830:25305): avc: denied { ioctl } for pid=3369 comm="syz.1.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.624165][ T36] audit: type=1400 audit(2000000032.830:25306): avc: denied { ioctl } for pid=3369 comm="syz.1.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.650652][ T36] audit: type=1400 audit(2000000032.830:25307): avc: denied { create } for pid=3382 comm="syz.0.1046" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.673535][ T36] audit: type=1400 audit(2000000032.830:25308): avc: denied { ioctl } for pid=3382 comm="syz.0.1046" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19325 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.700541][ T36] audit: type=1400 audit(2000000032.830:25309): avc: denied { ioctl } for pid=3382 comm="syz.0.1046" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19325 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.727491][ T36] audit: type=1400 audit(2000000032.830:25310): avc: denied { ioctl } for pid=3382 comm="syz.0.1046" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19325 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.761186][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 102.768939][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 102.777693][ T10] usb 2-1: config 0 has no interface number 0 [ 102.792367][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 102.800773][ T3397] bridge0: port 3(erspan0) entered blocking state [ 102.808523][ T3397] bridge0: port 3(erspan0) entered disabled state [ 102.817285][ T3397] erspan0: entered allmulticast mode [ 102.823586][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 102.834541][ T3397] erspan0: entered promiscuous mode [ 102.839886][ T3397] bridge0: port 3(erspan0) entered blocking state [ 102.846352][ T3397] bridge0: port 3(erspan0) entered forwarding state [ 102.853358][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.863081][ T10] usb 2-1: Product: syz [ 102.867275][ T10] usb 2-1: Manufacturer: syz [ 102.872824][ T10] usb 2-1: SerialNumber: syz [ 102.887217][ T10] usb 2-1: config 0 descriptor?? [ 103.098425][ T3371] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1040'. [ 103.117835][ T10] ipheth 2-1:0.196: Unable to find endpoints [ 103.128946][ T10] usb 2-1: USB disconnect, device number 20 [ 103.148243][ T307] udevd[307]: setting mode of /dev/bus/usb/002/020 to 020664 failed: No such file or directory [ 103.184563][ T307] udevd[307]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 103.255545][ T3425] overlayfs: failed to clone upperpath [ 103.405129][ T3439] TCP: out of memory -- consider tuning tcp_mem [ 103.546503][ T3453] /dev/rnullb0: Can't lookup blockdev [ 103.627664][ T3466] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 104.848510][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 104.956258][ T3532] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=3532 comm=syz.2.1094 [ 104.968767][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 105.811274][ T389] Bluetooth: hci0: command 0x1003 tx timeout [ 105.817319][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.211199][ T1122] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 106.239496][ T3605] fuseblk: Bad value for 'fd' [ 106.361205][ T1122] usb 2-1: device descriptor read/64, error -71 [ 106.602293][ T1122] usb 2-1: device descriptor read/64, error -71 [ 106.629800][ T3628] fuseblk: Bad value for 'fd' [ 106.851204][ T1122] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 107.001199][ T1122] usb 2-1: device descriptor read/64, error -71 [ 107.210269][ T3655] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1139'. [ 107.219317][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 107.241197][ T1122] usb 2-1: device descriptor read/64, error -71 [ 107.361193][ T1122] usb usb2-port1: attempt power cycle [ 107.491161][ T36] kauditd_printk_skb: 395 callbacks suppressed [ 107.491179][ T36] audit: type=1400 audit(2000000037.757:25706): avc: denied { create } for pid=3671 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.531170][ T36] audit: type=1400 audit(2000000037.757:25707): avc: denied { create } for pid=3671 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.559966][ T36] audit: type=1400 audit(2000000037.757:25708): avc: denied { create } for pid=3671 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.581927][ T36] audit: type=1400 audit(2000000037.757:25709): avc: denied { setopt } for pid=3671 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.606384][ T36] audit: type=1400 audit(2000000037.757:25710): avc: denied { ioctl } for pid=3671 comm="syz.0.1144" path="socket:[20681]" dev="sockfs" ino=20681 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.671365][ T36] audit: type=1400 audit(2000000037.917:25711): avc: denied { create } for pid=3679 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.711200][ T1122] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 107.718867][ T36] audit: type=1400 audit(2000000037.917:25712): avc: denied { setopt } for pid=3679 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.741228][ T36] audit: type=1400 audit(2000000037.927:25713): avc: denied { ioctl } for pid=3592 comm="syz.1.1115" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.772333][ T36] audit: type=1400 audit(2000000037.947:25714): avc: denied { create } for pid=3684 comm="syz.3.1149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.795095][ T36] audit: type=1400 audit(2000000037.947:25715): avc: denied { write } for pid=3684 comm="syz.3.1149" name="file0" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.818386][ T1122] usb 2-1: device descriptor read/8, error -71 [ 107.961337][ T1122] usb 2-1: device descriptor read/8, error -71 [ 108.201183][ T1122] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 108.234652][ T1122] usb 2-1: device descriptor read/8, error -71 [ 108.248939][ T3711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3711 comm=syz.0.1160 [ 108.373913][ T1122] usb 2-1: device descriptor read/8, error -71 [ 108.491548][ T1122] usb usb2-port1: unable to enumerate USB device [ 108.778592][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 109.085506][ T3759] 9pnet_fd: Insufficient options for proto=fd [ 109.109891][ T3762] overlay: Unknown parameter 'uid<00000000000000000000' [ 109.646364][ T3802] 9pnet_fd: Insufficient options for proto=fd [ 110.451114][ T3837] 9pnet_fd: Insufficient options for proto=fd [ 110.801186][ T372] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 110.951204][ T372] usb 2-1: Using ep0 maxpacket: 8 [ 110.968515][ T372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.987608][ T372] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 111.005967][ T372] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 111.021206][ T372] usb 2-1: config 4 has no interface number 0 [ 111.038686][ T372] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 111.049408][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.061283][ T372] usb 2-1: Product: syz [ 111.065474][ T372] usb 2-1: Manufacturer: syz [ 111.074999][ T372] usb 2-1: SerialNumber: syz [ 111.298976][ T372] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 111.310568][ T372] usb 2-1: No valid video chain found. [ 111.319317][ T372] usb 2-1: USB disconnect, device number 25 [ 111.351006][ T3898] 9pnet_fd: p9_fd_create_tcp (3898): problem connecting socket to 127.0.0.1 [ 111.444049][ T3902] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1231'. [ 111.742634][ T3919] fuse: Unknown parameter 'f' [ 111.881867][ T3932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1240'. [ 112.795105][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 112.795136][ T36] audit: type=1400 audit(2000000043.067:26250): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.877069][ T36] audit: type=1400 audit(2000000043.067:26251): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.878443][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 112.917748][ T36] audit: type=1400 audit(2000000043.067:26252): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.953085][ T36] audit: type=1400 audit(2000000043.147:26253): avc: denied { read write } for pid=3961 comm="syz.1.1253" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.993147][ T36] audit: type=1400 audit(2000000043.147:26254): avc: denied { read open } for pid=3961 comm="syz.1.1253" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.042010][ T36] audit: type=1400 audit(2000000043.217:26255): avc: denied { create } for pid=3963 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.055520][ T3972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 113.069867][ T36] audit: type=1400 audit(2000000043.217:26256): avc: denied { setopt } for pid=3963 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.098993][ T36] audit: type=1400 audit(2000000043.227:26257): avc: denied { ioctl } for pid=3961 comm="syz.1.1253" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.123721][ T36] audit: type=1400 audit(2000000043.227:26258): avc: denied { setopt } for pid=3963 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.147929][ T36] audit: type=1400 audit(2000000043.227:26259): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.693127][ T4001] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.703260][ T4001] syzkaller0: entered promiscuous mode [ 113.708755][ T4001] syzkaller0: entered allmulticast mode [ 113.726292][ T4001] rust_binder: Error while translating object. [ 113.726329][ T4001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.732725][ T4001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 114.831205][ T308] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 114.993734][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.004762][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.014572][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.028643][ T308] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.038137][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.048457][ T308] usb 2-1: config 0 descriptor?? [ 115.059768][ T308] hub 2-1:0.0: USB hub found [ 115.250914][ T4117] overlayfs: failed to clone upperpath [ 115.263425][ T308] hub 2-1:0.0: 14 ports detected [ 115.268729][ T308] hub 2-1:0.0: insufficient power available to use all downstream ports [ 115.677239][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.686843][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.707698][ T308] usb 2-1: USB disconnect, device number 26 [ 116.841518][ T4194] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 117.173202][ T4217] fuse: Bad value for 'fd' [ 117.190576][ T4217] overlayfs: failed to clone upperpath [ 117.263159][ T4218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.485663][ T4234] syzkaller0: entered allmulticast mode [ 117.500465][ T4234] syzkaller0: entered promiscuous mode [ 117.510170][ T4234] syzkaller0 (unregistering): left promiscuous mode [ 117.518054][ T4234] syzkaller0 (unregistering): left allmulticast mode [ 117.810099][ T36] kauditd_printk_skb: 478 callbacks suppressed [ 117.810120][ T36] audit: type=1400 audit(2000000048.077:26738): avc: denied { create } for pid=4285 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 117.859593][ T36] audit: type=1400 audit(2000000048.127:26739): avc: denied { create } for pid=4292 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.913014][ T36] audit: type=1400 audit(2000000048.187:26740): avc: denied { create } for pid=4296 comm="syz.3.1371" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.936497][ T36] audit: type=1400 audit(2000000048.187:26741): avc: denied { create } for pid=4297 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.946438][ T4299] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1371'. [ 117.960086][ T36] audit: type=1400 audit(2000000048.187:26742): avc: denied { ioctl } for pid=4296 comm="syz.3.1371" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22670 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.998534][ T36] audit: type=1400 audit(2000000048.187:26743): avc: denied { write } for pid=4297 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.041209][ T36] audit: type=1400 audit(2000000048.187:26744): avc: denied { read } for pid=4297 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.110903][ T36] audit: type=1400 audit(2000000048.187:26745): avc: denied { ioctl } for pid=4296 comm="syz.3.1371" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22670 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.162494][ T36] audit: type=1400 audit(2000000048.197:26746): avc: denied { create } for pid=4296 comm="syz.3.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.191234][ T36] audit: type=1400 audit(2000000048.197:26747): avc: denied { write } for pid=4296 comm="syz.3.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.266947][ T4318] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 118.354785][ T4323] rust_binder: Error while translating object. [ 118.354827][ T4323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 118.360197][ T4326] cannot load conntrack support for proto=3 [ 118.370506][ T4323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:649 [ 119.530970][ T4386] rust_binder: Error while translating object. [ 119.540247][ T4386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.547668][ T4386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 119.793003][ T4401] 9pnet_fd: p9_fd_create_unix (4401): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 120.591194][ T472] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 120.731215][ T472] usb 2-1: device descriptor read/64, error -71 [ 120.971185][ T472] usb 2-1: device descriptor read/64, error -71 [ 121.211176][ T472] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 121.351189][ T472] usb 2-1: device descriptor read/64, error -71 [ 121.541637][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 121.591182][ T472] usb 2-1: device descriptor read/64, error -71 [ 121.701266][ T472] usb usb2-port1: attempt power cycle [ 121.850370][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4515 comm=syz.0.1447 [ 122.041217][ T472] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 122.063599][ T472] usb 2-1: device descriptor read/8, error -71 [ 122.193373][ T472] usb 2-1: device descriptor read/8, error -71 [ 122.441205][ T472] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 122.464115][ T472] usb 2-1: device descriptor read/8, error -71 [ 122.530444][ T4538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4538 comm=syz.0.1457 [ 122.548704][ T4538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4538 comm=syz.0.1457 [ 122.603704][ T472] usb 2-1: device descriptor read/8, error -71 [ 122.711265][ T472] usb usb2-port1: unable to enumerate USB device [ 122.885830][ T36] kauditd_printk_skb: 388 callbacks suppressed [ 122.885847][ T36] audit: type=1400 audit(2000000053.157:27136): avc: denied { create } for pid=4540 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.911942][ T36] audit: type=1400 audit(2000000053.157:27137): avc: denied { setopt } for pid=4540 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.931775][ T36] audit: type=1400 audit(2000000053.187:27138): avc: denied { setopt } for pid=4540 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.992761][ T36] audit: type=1400 audit(2000000053.267:27140): avc: denied { create } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.012724][ T36] audit: type=1400 audit(2000000053.267:27141): avc: denied { create } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.032499][ T36] audit: type=1400 audit(2000000053.267:27139): avc: denied { create } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.052065][ T36] audit: type=1400 audit(2000000053.267:27142): avc: denied { create } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.081207][ T36] audit: type=1400 audit(2000000053.267:27143): avc: denied { ioctl } for pid=4542 comm="syz.3.1459" path="socket:[23030]" dev="sockfs" ino=23030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.106991][ T36] audit: type=1400 audit(2000000053.267:27144): avc: denied { connect } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.113944][ T4549] overlay: ./file0 is not a directory [ 123.128978][ T36] audit: type=1400 audit(2000000053.267:27145): avc: denied { write } for pid=4542 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.286051][ T4561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4561 comm=syz.3.1466 [ 123.298935][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 123.500586][ T4576] tipc: Enabling of bearer rejected, failed to enable media [ 123.512447][ T4574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1471'. [ 124.733241][ T4634] netlink: 'syz.3.1493': attribute type 4 has an invalid length. [ 124.741100][ T4634] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1493'. [ 125.319722][ T4675] rust_binder: Error in use_page_slow: ESRCH [ 125.319750][ T4675] rust_binder: use_range failure ESRCH [ 125.327820][ T4675] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 125.333398][ T4675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 125.341408][ T4675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:700 [ 125.618001][ T4696] netlink: 'syz.3.1514': attribute type 46 has an invalid length. [ 125.763094][ T4709] overlayfs: failed to clone upperpath [ 125.822705][ T4715] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1518'. [ 126.071435][ T4736] cgroup2: Unknown parameter 'net_cls' [ 126.349166][ T304] veth1_macvtap: left promiscuous mode [ 126.357378][ T304] veth0_vlan: left promiscuous mode [ 126.565267][ T4763] veth0_vlan: left promiscuous mode [ 126.579943][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.587045][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.594305][ T4753] bridge_slave_0: entered allmulticast mode [ 126.600737][ T4753] bridge_slave_0: entered promiscuous mode [ 126.608520][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.616192][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.623444][ T4753] bridge_slave_1: entered allmulticast mode [ 126.629807][ T4753] bridge_slave_1: entered promiscuous mode [ 126.773436][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.780574][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.787915][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.794980][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.861521][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.870301][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.894402][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.901493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.922701][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.929769][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.058873][ T4753] veth0_vlan: entered promiscuous mode [ 127.092712][ T4778] cgroup: fork rejected by pids controller in /syz0 [ 127.132957][ T4753] veth1_macvtap: entered promiscuous mode [ 127.940801][ T36] kauditd_printk_skb: 556 callbacks suppressed [ 127.940825][ T36] audit: type=1400 audit(2000000058.207:27702): avc: denied { read write } for pid=4753 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.993165][ T36] audit: type=1400 audit(2000000058.207:27703): avc: denied { read write open } for pid=4753 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.018614][ T36] audit: type=1400 audit(2000000058.217:27704): avc: denied { ioctl } for pid=4753 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.046625][ T36] audit: type=1400 audit(2000000058.267:27705): avc: denied { read write } for pid=4847 comm="syz.4.1548" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.101949][ T36] audit: type=1400 audit(2000000058.267:27706): avc: denied { read write open } for pid=4847 comm="syz.4.1548" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.171221][ T36] audit: type=1400 audit(2000000058.317:27707): avc: denied { ioctl } for pid=4847 comm="syz.4.1548" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.211368][ T36] audit: type=1400 audit(2000000058.347:27708): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.291615][ T36] audit: type=1400 audit(2000000058.347:27709): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.321431][ T36] audit: type=1400 audit(2000000058.347:27710): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.358148][ T36] audit: type=1400 audit(2000000058.437:27711): avc: denied { create } for pid=4855 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.440028][ T4871] 9pnet_fd: Insufficient options for proto=fd [ 128.790305][ T4892] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1564'. [ 128.810789][ T4892] __vm_enough_memory: pid: 4892, comm: syz.1.1564, bytes: 70373039144960 not enough memory for the allocation [ 128.884850][ T4900] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1566'. [ 129.103192][ T4911] batadv_slave_1: entered promiscuous mode [ 129.126030][ T4911] batadv_slave_1: left promiscuous mode [ 129.203680][ T4921] rust_binder: Error while translating object. [ 129.203722][ T4921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.210945][ T4921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 129.462302][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 129.831679][ T4970] binder: Unknown parameter './file0' [ 129.958341][ T4981] /dev/rnullb0: Can't lookup blockdev [ 129.992369][ T4983] fuse: Bad value for 'fd' [ 130.390631][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 130.693863][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1605'. [ 130.901224][ T372] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.952951][ T5030] rust_binder: Write failure EFAULT in pid:775 [ 131.091212][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 131.112623][ T5037] netlink: 'syz.3.1613': attribute type 63 has an invalid length. [ 131.126847][ T372] usb 5-1: config 156 has too many interfaces: 43, using maximum allowed: 32 [ 131.138701][ T372] usb 5-1: config 156 has an invalid descriptor of length 1, skipping remainder of the config [ 131.149003][ T372] usb 5-1: config 156 has 0 interfaces, different from the descriptor's value: 43 [ 131.158364][ T5037] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1613'. [ 131.169105][ T5037] gretap0: entered allmulticast mode [ 131.177196][ T372] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.186833][ T5037] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.202460][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.210478][ T372] usb 5-1: Product: syz [ 131.218893][ T372] usb 5-1: Manufacturer: syz [ 131.223566][ T372] usb 5-1: SerialNumber: syz [ 131.571218][ T308] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 131.741256][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 131.749008][ T308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.759624][ T308] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.768812][ T308] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.782644][ T308] usb 2-1: config 0 interface 0 has no altsetting 1 [ 131.795140][ T308] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 131.804693][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.814066][ T308] usb 2-1: Product: syz [ 131.818339][ T308] usb 2-1: Manufacturer: syz [ 131.824204][ T308] usb 2-1: SerialNumber: syz [ 131.830628][ T308] usb 2-1: config 0 descriptor?? [ 131.856861][ T308] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 131.936508][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 132.126453][ T5065] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 132.344790][ T10] usb 2-1: USB disconnect, device number 31 [ 132.949879][ T36] kauditd_printk_skb: 832 callbacks suppressed [ 132.949917][ T36] audit: type=1400 audit(2000000063.217:28544): avc: denied { create } for pid=5076 comm="syz.1.1623" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.983287][ T36] audit: type=1400 audit(2000000063.247:28545): avc: denied { ioctl } for pid=5076 comm="syz.1.1623" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25488 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.015374][ T36] audit: type=1400 audit(2000000063.247:28546): avc: denied { create } for pid=5076 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.037311][ T36] audit: type=1400 audit(2000000063.257:28547): avc: denied { connect } for pid=5076 comm="syz.1.1623" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.092793][ T36] audit: type=1400 audit(2000000063.257:28548): avc: denied { setopt } for pid=5076 comm="syz.1.1623" laddr=fe80::b lport=58 faddr=fe80::3d fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.132259][ T36] audit: type=1400 audit(2000000063.277:28549): avc: denied { write } for pid=5076 comm="syz.1.1623" path="socket:[25489]" dev="sockfs" ino=25489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.173263][ T36] audit: type=1400 audit(2000000063.277:28550): avc: denied { write } for pid=5076 comm="syz.1.1623" laddr=fe80::b lport=58 faddr=fe80::3d fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.197967][ T36] audit: type=1400 audit(2000000063.307:28551): avc: denied { execute } for pid=5080 comm="syz.3.1625" path="/349/cpu.stat" dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.221630][ T36] audit: type=1400 audit(2000000063.307:28552): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.246619][ T36] audit: type=1400 audit(2000000063.307:28553): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.509809][ T372] usb 5-1: USB disconnect, device number 2 [ 133.872974][ T5135] x_tables: duplicate underflow at hook 1 [ 133.876457][ T5136] x_tables: duplicate underflow at hook 1 [ 133.886355][ T5136] 9pnet_fd: Insufficient options for proto=fd [ 133.886553][ T5135] 9pnet_fd: Insufficient options for proto=fd [ 133.941172][ T372] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 134.096701][ T372] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.115551][ T372] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.126645][ T372] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.136569][ T372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.147631][ T372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.160190][ T372] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.169280][ T372] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.177305][ T372] usb 5-1: Product: syz [ 134.184300][ T372] usb 5-1: Manufacturer: syz [ 134.195492][ T372] cdc_wdm 5-1:1.0: skipping garbage [ 134.200740][ T372] cdc_wdm 5-1:1.0: skipping garbage [ 134.212052][ T372] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 134.218112][ T372] cdc_wdm 5-1:1.0: Unknown control protocol [ 134.262191][ T5145] rust_binder: Write failure EINVAL in pid:802 [ 134.398887][ T5121] 9pnet_fd: Insufficient options for proto=fd [ 134.413912][ T372] usb 5-1: USB disconnect, device number 3 [ 134.561302][ T45] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 134.697644][ T5171] tipc: Started in network mode [ 134.703000][ T5171] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 134.712186][ T5171] tipc: Enabled bearer , priority 10 [ 134.733974][ T45] usb 2-1: descriptor type invalid, skip [ 134.744411][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 134.762913][ T45] usb 2-1: config 0 has no interfaces? [ 134.775881][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.785508][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.794557][ T45] usb 2-1: Product: syz [ 134.798808][ T45] usb 2-1: Manufacturer: syz [ 134.803919][ T45] usb 2-1: SerialNumber: syz [ 134.814552][ T45] usb 2-1: config 0 descriptor?? [ 135.042091][ T45] usb 2-1: USB disconnect, device number 32 [ 135.684306][ T5209] rust_binder: Error while translating object. [ 135.684345][ T5209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.710123][ T5209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:808 [ 135.841242][ T372] tipc: Node number set to 4269801488 [ 136.048491][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1678'. [ 136.666923][ T5262] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1687'. [ 136.976937][ T5283] input: syz0 as /devices/virtual/input/input18 [ 137.002029][ T5283] binder: Unknown parameter 'ÿÿÿÿ/uinput' [ 138.043606][ T36] kauditd_printk_skb: 473 callbacks suppressed [ 138.043631][ T36] audit: type=1400 audit(2000000068.317:29027): avc: denied { setopt } for pid=5319 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.219146][ T36] audit: type=1400 audit(2000000068.487:29028): avc: denied { read write } for pid=4753 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.282180][ T5323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 138.291997][ T36] audit: type=1400 audit(2000000068.487:29029): avc: denied { read write open } for pid=4753 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.343567][ T5325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 138.343661][ T36] audit: type=1400 audit(2000000068.487:29030): avc: denied { ioctl } for pid=4753 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.384792][ T5328] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1709'. [ 138.387808][ T36] audit: type=1400 audit(2000000068.547:29031): avc: denied { create } for pid=5322 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.416583][ T36] audit: type=1400 audit(2000000068.547:29032): avc: denied { write } for pid=5322 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.439185][ T36] audit: type=1400 audit(2000000068.547:29033): avc: denied { read } for pid=5322 comm="syz.4.1708" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.473973][ T36] audit: type=1400 audit(2000000068.547:29034): avc: denied { read open } for pid=5322 comm="syz.4.1708" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.531709][ T36] audit: type=1400 audit(2000000068.557:29035): avc: denied { ioctl } for pid=5322 comm="syz.4.1708" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.560900][ T36] audit: type=1400 audit(2000000068.587:29036): avc: denied { read write } for pid=4753 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.941247][ T45] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 139.103980][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 139.114467][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 139.126738][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.138495][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.147672][ T45] usb 2-1: Product: syz [ 139.152486][ T45] usb 2-1: Manufacturer: syz [ 139.157108][ T45] usb 2-1: SerialNumber: syz [ 139.389503][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 139.425695][ T45] usb 2-1: USB disconnect, device number 33 [ 139.775302][ T5418] raw_sendmsg: syz.4.1743 forgot to set AF_INET. Fix it! [ 139.783997][ T5418] syz.4.1743 (5418): attempted to duplicate a private mapping with mremap. This is not supported. [ 140.056852][ T5435] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 140.511465][ T5477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=5477 comm=syz.1.1763 [ 140.629781][ T5487] rust_binder: 5487: no such ref 0 [ 140.808063][ T5512] Invalid ELF header type: 2 != 1 [ 140.888156][ T5516] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 141.014453][ T5525] netlink: 'syz.4.1780': attribute type 15 has an invalid length. [ 141.301690][ T5545] netlink: 'syz.3.1787': attribute type 13 has an invalid length. [ 141.304706][ T5546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1787'. [ 141.800395][ T5575] rust_binder: Failed to allocate buffer. len:4294970672, is_oneway:false [ 141.800423][ T5575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 141.828868][ T5575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:885 [ 141.987577][ T5588] fuse: Bad value for 'fd' [ 142.014800][ T5588] overlayfs: failed to clone upperpath [ 142.103797][ T5592] 9pnet: Could not find request transport: fdrfdno=0x0000000000000004 [ 142.391772][ T5613] fuse: Bad value for 'fd' [ 142.402462][ T5613] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 142.536934][ T5621] rust_binder: Error while translating object. [ 142.536978][ T5621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 142.543964][ T5621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:899 [ 142.588566][ T5624] incfs: Options parsing error. -22 [ 142.602984][ T5624] incfs: mount failed -22 [ 143.081569][ T36] kauditd_printk_skb: 671 callbacks suppressed [ 143.081587][ T36] audit: type=1400 audit(2000000073.357:29708): avc: denied { read } for pid=5640 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.123566][ T36] audit: type=1400 audit(2000000073.357:29709): avc: denied { read open } for pid=5640 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.156114][ T36] audit: type=1400 audit(2000000073.357:29710): avc: denied { mounton } for pid=5640 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.196853][ T36] audit: type=1400 audit(2000000073.357:29711): avc: denied { sys_module } for pid=5640 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.218445][ T36] audit: type=1400 audit(2000000073.367:29712): avc: denied { sys_module } for pid=5640 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.240091][ T36] audit: type=1400 audit(2000000073.367:29713): avc: denied { sys_module } for pid=5640 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.264447][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.269522][ T36] audit: type=1400 audit(2000000073.367:29714): avc: denied { sys_module } for pid=5640 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.272642][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.293025][ T36] audit: type=1400 audit(2000000073.537:29715): avc: denied { create } for pid=5647 comm="syz.3.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.300557][ T5640] bridge_slave_0: entered allmulticast mode [ 143.327247][ T5640] bridge_slave_0: entered promiscuous mode [ 143.336808][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.344655][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.350732][ T36] audit: type=1400 audit(2000000073.537:29716): avc: denied { setopt } for pid=5647 comm="syz.3.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.356719][ T5640] bridge_slave_1: entered allmulticast mode [ 143.378707][ T36] audit: type=1400 audit(2000000073.647:29717): avc: denied { execmem } for pid=5649 comm="syz.4.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.378998][ T5640] bridge_slave_1: entered promiscuous mode [ 143.462115][ T13] erspan0: left allmulticast mode [ 143.467188][ T13] erspan0: left promiscuous mode [ 143.473248][ T13] bridge0: port 3(erspan0) entered disabled state [ 143.494886][ T13] bridge_slave_1: left allmulticast mode [ 143.503641][ T13] bridge_slave_1: left promiscuous mode [ 143.510722][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.524801][ T13] bridge_slave_0: left allmulticast mode [ 143.530566][ T13] bridge_slave_0: left promiscuous mode [ 143.555673][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.699288][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.706823][ T5640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.714163][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.721220][ T5640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.731777][ T13] veth1_macvtap: left promiscuous mode [ 143.737283][ T13] veth0_vlan: left promiscuous mode [ 143.971772][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.980750][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.996248][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.003323][ T5664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.013999][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.021057][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.127248][ T5666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:912 [ 144.205784][ T5640] veth0_vlan: entered promiscuous mode [ 144.294668][ T5640] veth1_macvtap: entered promiscuous mode [ 144.399224][ T5680] rust_binder: Write failure EINVAL in pid:2 [ 144.403016][ T5680] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 144.441710][ T5684] fuse: Bad value for 'fd' [ 144.491215][ T372] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 144.644311][ T372] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 144.654040][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.665108][ T372] usb 2-1: config 0 descriptor?? [ 144.887538][ T372] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.913420][ T372] asix 2-1:0.0: probe with driver asix failed with error -71 [ 144.958553][ T372] usb 2-1: USB disconnect, device number 34 [ 145.235164][ T5704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.235199][ T5704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:924 [ 145.279855][ T5708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.298653][ T5708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 145.719348][ T5727] rust_binder: Error while translating object. [ 145.728518][ T5727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 145.735906][ T5727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:929 [ 145.903686][ T5748] IPv6: Can't replace route, no match found [ 146.051224][ T372] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 146.191168][ T372] usb 2-1: device descriptor read/64, error -71 [ 146.253931][ T5768] 9pnet_fd: Insufficient options for proto=fd [ 146.270464][ T5768] mmap: syz.4.1868 (5768): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 146.413849][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 146.441170][ T372] usb 2-1: device descriptor read/64, error -71 [ 146.691181][ T372] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 146.801172][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.841161][ T372] usb 2-1: device descriptor read/64, error -71 [ 146.954168][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.965151][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.974933][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 146.984037][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.993775][ T45] usb 1-1: config 0 descriptor?? [ 147.081177][ T372] usb 2-1: device descriptor read/64, error -71 [ 147.195225][ T372] usb usb2-port1: attempt power cycle [ 147.219292][ T5805] /dev/loop0: Can't lookup blockdev [ 147.418006][ T45] wacom 0003:056A:010F.0008: unknown main item tag 0x3 [ 147.441625][ T45] wacom 0003:056A:010F.0008: hidraw0: USB HID vff.fe Device [HID 056a:010f] on usb-dummy_hcd.0-1/input0 [ 147.541160][ T372] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 147.575484][ T372] usb 2-1: device descriptor read/8, error -71 [ 147.723997][ T5833] overlayfs: failed to clone upperpath [ 147.724314][ T372] usb 2-1: device descriptor read/8, error -71 [ 147.822255][ T5839] overlayfs: failed to clone upperpath [ 147.832922][ T5839] overlayfs: failed to clone upperpath [ 147.971425][ T372] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 148.000662][ T372] usb 2-1: device descriptor read/8, error -71 [ 148.068258][ T5856] overlay: filesystem on ./bus is read-only [ 148.141781][ T36] kauditd_printk_skb: 1627 callbacks suppressed [ 148.141800][ T36] audit: type=1400 audit(2000000078.417:31345): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.176029][ T372] usb 2-1: device descriptor read/8, error -71 [ 148.182637][ T36] audit: type=1400 audit(2000000078.437:31346): avc: denied { mounton } for pid=5861 comm="syz.3.1903" path="/415/file0" dev="tmpfs" ino=2268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.206032][ T36] audit: type=1400 audit(2000000078.447:31347): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.233212][ T36] audit: type=1400 audit(2000000078.447:31348): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.260648][ T36] audit: type=1400 audit(2000000078.447:31349): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.287746][ T36] audit: type=1400 audit(2000000078.447:31350): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.313858][ T36] audit: type=1400 audit(2000000078.457:31351): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.321303][ T372] usb usb2-port1: unable to enumerate USB device [ 148.349797][ T36] audit: type=1400 audit(2000000078.507:31352): avc: denied { create } for pid=5861 comm="syz.3.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.369483][ T36] audit: type=1400 audit(2000000078.617:31353): avc: denied { ioctl } for pid=5741 comm="syz.1.1857" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.465485][ T36] audit: type=1400 audit(2000000078.737:31354): avc: denied { create } for pid=5879 comm="syz.3.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.201215][ T372] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 149.353490][ T372] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.364745][ T372] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.374708][ T372] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.381464][ T372] usb 2-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 149.390517][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.400219][ T372] usb 2-1: config 0 descriptor?? [ 149.535500][ T348] usb 1-1: USB disconnect, device number 6 [ 149.615745][ T5910] netlink: 'syz.4.1918': attribute type 58 has an invalid length. [ 149.665193][ T5914] vcan0: entered promiscuous mode [ 149.805907][ T5929] netlink: 'syz.4.1922': attribute type 4 has an invalid length. [ 149.815306][ T5929] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1922'. [ 149.826828][ T5929] incfs: Options parsing error. -22 [ 149.832247][ T5929] incfs: mount failed -22 [ 149.832293][ T372] wacom 0003:056A:00D1.0009: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 149.868165][ T372] wacom 0003:056A:00D1.0009: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.1-1/input0 [ 149.894714][ T372] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D1.0009/input/input22 [ 150.029850][ T45] usb 2-1: USB disconnect, device number 39 [ 150.311221][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 150.451225][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.691172][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.801254][ T64] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 150.931181][ T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 150.951156][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 150.958885][ T64] usb 2-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.971826][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.978447][ T64] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 150.987536][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.997243][ T64] usb 2-1: config 0 descriptor?? [ 151.061191][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.301178][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.411303][ T10] usb usb1-port1: attempt power cycle [ 151.421543][ T64] logitech 0003:046D:C623.000A: hidraw0: USB HID v0.07 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 151.713585][ T64] usb 2-1: USB disconnect, device number 40 [ 151.751172][ T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 151.773203][ T10] usb 1-1: device descriptor read/8, error -71 [ 151.903519][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.141212][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 152.168272][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.305932][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.430707][ T10] usb usb1-port1: unable to enumerate USB device [ 152.445608][ T5960] fuseblk: Bad value for 'fd' [ 152.453946][ T5962] exFAT-fs (rnullb0): invalid boot record signature [ 152.460745][ T5962] exFAT-fs (rnullb0): failed to read boot sector [ 152.471708][ T5962] exFAT-fs (rnullb0): failed to recognize exfat type [ 152.670634][ T5971] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 152.678098][ T5971] rust_binder: Write failure EINVAL in pid:951 [ 153.058411][ T5988] rust_binder: Error while translating object. [ 153.064705][ T5988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.071087][ T5988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:957 [ 153.153955][ T36] kauditd_printk_skb: 368 callbacks suppressed [ 153.153976][ T36] audit: type=1400 audit(2000000083.427:31723): avc: denied { create } for pid=5989 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.203015][ T36] audit: type=1400 audit(2000000083.477:31724): avc: denied { read write } for pid=5991 comm="syz.1.1947" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.256994][ T36] audit: type=1400 audit(2000000083.477:31725): avc: denied { setopt } for pid=5989 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.277541][ T36] audit: type=1400 audit(2000000083.477:31726): avc: denied { map } for pid=5989 comm="syz.0.1946" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.302962][ T36] audit: type=1400 audit(2000000083.477:31727): avc: denied { read } for pid=5989 comm="syz.0.1946" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.352031][ T36] audit: type=1400 audit(2000000083.497:31728): avc: denied { read write } for pid=5989 comm="syz.0.1946" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.384037][ T36] audit: type=1400 audit(2000000083.497:31729): avc: denied { read write open } for pid=5989 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.408640][ T36] audit: type=1400 audit(2000000083.497:31730): avc: denied { ioctl } for pid=5989 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.436066][ T36] audit: type=1400 audit(2000000083.497:31731): avc: denied { ioctl } for pid=5989 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.465251][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.478211][ T36] audit: type=1400 audit(2000000083.497:31732): avc: denied { ioctl } for pid=5989 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.631160][ T10] usb 1-1: device descriptor read/64, error -71 [ 153.711179][ T348] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 153.714664][ T6018] /dev/loop0: Can't lookup blockdev [ 153.862563][ T348] usb 2-1: Using ep0 maxpacket: 32 [ 153.870820][ T348] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.879292][ T348] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.881203][ T10] usb 1-1: device descriptor read/64, error -71 [ 153.887949][ T348] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.903770][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 153.914756][ T348] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 153.924708][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.934509][ T348] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.944916][ T348] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.957927][ T348] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 153.967002][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.977598][ T348] usb 2-1: config 0 descriptor?? [ 153.984483][ T5995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.993882][ T348] usblp0: Disabling reads from problematic bidirectional printer [ 154.131732][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.245236][ T348] usblp 2-1:0.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 154.267083][ T348] usb 2-1: USB disconnect, device number 41 [ 154.281654][ T348] usblp0: removed [ 154.285756][ T10] usb 1-1: device descriptor read/64, error -71 [ 154.481977][ T6036] fuse: Unknown parameter '' [ 154.541186][ T10] usb 1-1: device descriptor read/64, error -71 [ 154.647021][ T6049] overlayfs: failed to clone upperpath [ 154.651308][ T10] usb usb1-port1: attempt power cycle [ 155.001268][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.034027][ T10] usb 1-1: device descriptor read/8, error -71 [ 155.163381][ T10] usb 1-1: device descriptor read/8, error -71 [ 155.212085][ T6094] rust_binder: 6094: no such ref 1 [ 155.217455][ T6094] rust_binder: 6094: no such ref 3 [ 155.222949][ T6094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:983 [ 155.401221][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.434234][ T10] usb 1-1: device descriptor read/8, error -71 [ 155.443682][ T6097] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 155.563912][ T10] usb 1-1: device descriptor read/8, error -71 [ 155.681263][ T10] usb usb1-port1: unable to enumerate USB device [ 155.881900][ T6110] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1984'. [ 155.897261][ T6110] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1984'. [ 156.153464][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 156.596651][ T6151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.768208][ T6169] 9pnet_fd: Insufficient options for proto=fd [ 156.807748][ T6171] ------------[ cut here ]------------ [ 156.813304][ T6171] WARNING: CPU: 0 PID: 6171 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 156.822754][ T6171] Modules linked in: [ 156.826682][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.3.2008 Not tainted 6.12.30-syzkaller-gd893caf112c8 #0 64e33962539d0ce7a45dea9f0941eea22919d800 [ 156.840180][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.850376][ T6171] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 156.856349][ T6171] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f4 2f ee 05 00 0f 85 c4 00 00 00 c6 05 e7 2f ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 156.875998][ T6171] RSP: 0018:ffffc9000ca4f880 EFLAGS: 00010246 [ 156.882119][ T6171] RAX: 0000000000000000 RBX: 1ffff92001949f14 RCX: 0000000000000000 [ 156.890107][ T6171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ca4f928 [ 156.898124][ T6171] RBP: ffffc9000ca4f9b0 R08: ffffc9000ca4f927 R09: 0000000000000000 [ 156.906141][ T6171] R10: ffffc9000ca4f910 R11: fffff52001949f25 R12: ffffc9000ca4f8c0 [ 156.914163][ T6171] R13: 000000000000001e R14: dffffc0000000000 R15: 0000000000000000 [ 156.922177][ T6171] FS: 00007fac951bd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.931165][ T6171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.937768][ T6171] CR2: 0000000000000000 CR3: 000000011fd2c000 CR4: 00000000003526b0 [ 156.945783][ T6171] Call Trace: [ 156.949075][ T6171] [ 156.952047][ T6171] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.958158][ T6171] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.963929][ T6171] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 156.969611][ T6171] ___kmalloc_large_node+0x9c/0x1d0 [ 156.974866][ T6171] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 156.980536][ T6171] __kmalloc_large_node_noprof+0x1e/0xe0 [ 156.986208][ T6171] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 156.991899][ T6171] __kmalloc_noprof+0x26d/0x450 [ 156.996774][ T6171] incfs_realloc_mount_info+0xa7/0x4d0 [ 157.002292][ T6171] ? incfs_add_sysfs_node+0x118/0x240 [ 157.007695][ T6171] incfs_alloc_mount_info+0x479/0x600 [ 157.013788][ T6171] incfs_mount_fs+0x3ca/0x960 [ 157.018592][ T6171] ? __cfi_incfs_mount_fs+0x10/0x10 [ 157.024068][ T6171] ? vfs_parse_fs_string+0x102/0x170 [ 157.029389][ T6171] ? selinux_capable+0x38/0x50 [ 157.034201][ T6171] legacy_get_tree+0x106/0x1b0 [ 157.038986][ T6171] ? __cfi_incfs_mount_fs+0x10/0x10 [ 157.044234][ T6171] vfs_get_tree+0x9e/0x290 [ 157.048696][ T6171] do_new_mount+0x251/0xb40 [ 157.053245][ T6171] ? security_capable+0xcf/0xf0 [ 157.058147][ T6171] path_mount+0x688/0x1050 [ 157.062642][ T6171] ? putname+0x113/0x150 [ 157.066916][ T6171] __se_sys_mount+0x2bd/0x480 [ 157.071670][ T6171] ? __x64_sys_mount+0xf0/0xf0 [ 157.076461][ T6171] __x64_sys_mount+0xc3/0xf0 [ 157.081059][ T6171] x64_sys_call+0x2021/0x2ee0 [ 157.085798][ T6171] do_syscall_64+0x58/0xf0 [ 157.090314][ T6171] ? clear_bhb_loop+0x50/0xa0 [ 157.095051][ T6171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.101003][ T6171] RIP: 0033:0x7fac9438e929 [ 157.105469][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.125157][ T6171] RSP: 002b:00007fac951bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.133620][ T6171] RAX: ffffffffffffffda RBX: 00007fac945b5fa0 RCX: 00007fac9438e929 [ 157.141644][ T6171] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 00002000000007c0 [ 157.149705][ T6171] RBP: 00007fac94410b39 R08: 0000200000000000 R09: 0000000000000000 [ 157.157728][ T6171] R10: 0000000001004002 R11: 0000000000000246 R12: 0000000000000000 [ 157.165734][ T6171] R13: 0000000000000000 R14: 00007fac945b5fa0 R15: 00007fff68a9c1d8 [ 157.173850][ T6171] [ 157.176894][ T6171] ---[ end trace 0000000000000000 ]--- [ 157.182461][ T6171] incfs: Error allocating mount info. -12 [ 157.188303][ T6171] incfs: mount failed -12