last executing test programs: 2m48.209404081s ago: executing program 1 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x8, 0x4) (async) write(r0, &(0x7f0000000340)="07100773fa7e64fdd8790049fed252389ae9c288cae70d608548ee78476f7d6d5c449181ccabf51af91c2fd3c9c260cc20bde1afce768a2aaca7b6bbb05e7895438120c7053e72bec45f687562bb81f4dd50a77d353425094d77a7f35e29ec3b1ea0c791ce1b4dfc22f6792a947ffd61994d0dbea2e660288202b273c92eaa5f1a387668b2c8f5f59a", 0x89) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x228913ed903faa86, 0x0) 2m48.150140597s ago: executing program 1 (id=227): ppoll(&(0x7f0000000080), 0x1fffffffffffff7b, 0x0, 0x0, 0x62) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = syz_open_dev$loop(&(0x7f0000003400), 0x3, 0x8080) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0x7fffffff, 0x8, [0x80000001, 0x2, 0xb, 0x20000], &(0x7f0000000100)=[0x0]}) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xff) fcntl$setstatus(r2, 0x4, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000d004"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) ppoll(&(0x7f0000000080), 0x1fffffffffffff7b, 0x0, 0x0, 0x62) (async) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') (async) syz_open_dev$loop(&(0x7f0000003400), 0x3, 0x8080) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0x7fffffff, 0x8, [0x80000001, 0x2, 0xb, 0x20000], &(0x7f0000000100)=[0x0]}) (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xff) (async) fcntl$setstatus(r2, 0x4, 0x40000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000d004"]) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) 2m48.096563812s ago: executing program 1 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2m48.083062853s ago: executing program 1 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) lgetxattr(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000140)=@random={'trusted.', '{+\b'}, &(0x7f0000000180)=""/121, 0x79) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 2m48.01423388s ago: executing program 1 (id=230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe0, 0xa0, 0x90, 0x10, 0x525, 0x1080, 0x5b44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0x0, 0x2, 0x5c, 0x8a, 0x4f, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f0000000580)=[@enter_looper, @free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {0x100003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 2m47.983603073s ago: executing program 1 (id=232): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(r5, r5, 0x0, 0x80000004) recvfrom$inet(r2, &(0x7f0000000100)=""/190, 0xbe, 0x2042, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0xa) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m47.922461719s ago: executing program 32 (id=232): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(r5, r5, 0x0, 0x80000004) recvfrom$inet(r2, &(0x7f0000000100)=""/190, 0xbe, 0x2042, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0xa) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m51.707801517s ago: executing program 0 (id=1106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000001a80)={0x14dc, r2, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa76}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "4c63bae64e5d92fe"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "02148661a6e3a7a17f2401dd"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f08ee9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "96484c76e5044ce43e7007f3d97c8d"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "aae476b87347a2f5ce0cd8245826db0bc0d5343978a0939c0e"}, @NL80211_ATTR_FILS_ERP_RRK={0x94, 0xfc, "92af7bf8276b59519553633f9c89a616608b226e5c95428b099d306e06b2ead857b03555161ab1ffe721162f67f6ef712e3dbb691ddbc3e20178948f350e72476f41f014e6391f19dd4daa984bc4f10d384f1c372c51dedc1b38705f01cf5b8790233e2bcb5fc6c9dbc315a63635ee57151a5cd5c1109d1dabb96f260998f0bfcce3f924974f43b22bf7e4cf765ea21a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xfffffffffffffd05, 0xf9, "f97ecd"}], @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fedd"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "3f2660447680bc0ad8b0462edbb8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "b784d5d0b5ce"}, @NL80211_ATTR_FILS_ERP_RRK={0x37, 0xfc, "2c264dfc296a41391c23e49ad8d674f8979ef831913f7d56b511bb70e3b8b5a8eb1eaa88de4a8f43451d7d930ae3a122fcb7cc9724"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xbb3}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x55, 0xfa, "691c9445b5a17c3751e8a187ef30eced4722ff7e236331f8c792947e22a9677c69a1251b03084b5730b066a10bdd915ad8560b05777340c685fdcd1f91eda8efcfc6093fbe845dac42f568d3176f6cd9d8"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "e23e68"}, @NL80211_ATTR_FILS_ERP_REALM={0x21, 0xfa, "0d6e249aacd6da1e3b901a63eac8c4443adad142fcc40e12c8ad4a152f"}, @NL80211_ATTR_FILS_ERP_REALM={0xba, 0xfa, "7624bb75923a3c4fc0eca051ff0fbd002a41daf0910cff2abdc4b1b83eff5000b213e9a1091bc758e1f392520eec666a004e6210f1763dd52126b6f229f7136ac5936d96df1af1ae7669890d8eac901f387da38f49f80d76ef1d8535fac451c99b0c95a46b90f961e7f5f70c4679e04241a4a82679d0c362d513b505e789ff3c48b57e531afcccf64a8f604ebc9868517bea99001ef10f22c90c9477b38cd0de4a8086e6ef93e51964d5f9b18c4ac593524f4b9db900"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "73ea24fa"}], @NL80211_ATTR_IE={0x12, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x88, 0x9}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x41}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x26, 0xfa, "571008051e671edb0f88c521e82ec1cd23395624981a825b1281a6e7c8587565d960"}, @NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "de6bbead3f2aaadf10a77799bc3e2bd40a55903ac377adb9cb434e4d7a47022fb8cfae79e26c6c9801ab925fb5c599824ba6654fbeef22986074202495401bc89f7d1cd7273ca0ef63d557315145f9287df72e9ee87c5447383914af4c387120bf8c3720b0912365d546533761828ca60ae3766a8ea7e8b6df07f6d1ed5bde8b6a88118f9de5fcfa7742047e4e9b03b3f2f2fe28e5e9be28"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "2771f5c22473b8"}, @NL80211_ATTR_FILS_ERP_RRK={0x2e, 0xfc, "a94a9174bb9b852444eabf2ea3be0d266984a428b54be02064fa3cd613fdd63b851bf22eb5685dd7858b"}, @NL80211_ATTR_FILS_ERP_REALM={0x5, 0xfa, "fb"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xb7, 0xfc, "0ba08330e647a5bb2c38879d4128dc3d50ea829fab9dc982e7cee7a1252057b61afbd91129f36f244b8248dcb90239e7d202db4ff30df7b5810405c39e0278c2f20bfe3ace0dbe971169938af6a0891358a58f0d82a1dad65fc521d7a929bdd2ba4474b81bcff2fe4f3cc1329fa80919f43403c00e324770304d7e75e0a508ffd97ee5961a1a30f381d6736fdf261bf002f0ed5aac2c1db1a358c06cfaf182f7fb81727692dd0940f12246c0f2442a2dc2b660"}, @NL80211_ATTR_FILS_ERP_RRK={0xe, 0xfc, "b374ab7a841d6fb98a48"}]]}, 0x14dc}, 0x1, 0x0, 0x0, 0x800}, 0x8000004) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1m51.654036752s ago: executing program 0 (id=1107): r0 = add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)={0x2, 0x0, @b}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000840)=""/59, 0x3b) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2f5f7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xfffa, 0xe, 0x8, 0xff}, {0x7, 0x6, 0x0, 0x7}]}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x22020600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) clock_gettime(0x0, &(0x7f0000000180)) setitimer(0x6, &(0x7f0000000140)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r1, &(0x7f0000000400)="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", 0xfffffcf1) 1m51.403594017s ago: executing program 0 (id=1120): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x200000, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) ioprio_get$pid(0x3, r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x424801, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x80a0000, 0x8000}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x200000, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) (async) ioprio_get$pid(0x3, r4) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x424801, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x80a0000, 0x8000}) (async) 1m51.399818378s ago: executing program 0 (id=1122): setfsgid(0xee01) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="49a745a0", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r7, 0x0, 0x0) sendto$packet(r4, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r6, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000000000000000000000000000400000000000000a9cc210da016f99b698046aa586ba1a03eaf0c7ff2566078a9a9b2c3f4787dd3c2caa180493c9012400f76e7ddf6c0c6805502f4d5cb26d889779c4e40df44b66a46862c4ea5e5da27fa4d6e7be12d0e9af17298f02a09a1bf2757b373c14b02ce037b1efbf4054fcc3e9e9c08864b0fc14d19210d204610a1de6aa5e4a088d86efde340445c02e42a0a8d4c9a570c2631eea34390"], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.261876122s ago: executing program 0 (id=1130): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf252400000008000200", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000040), 0xb, 0x101000) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xb, 0x101000) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f0000000080)={0xe903, 0x8001}) 1m51.153458852s ago: executing program 0 (id=1131): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e64573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 1m50.945477973s ago: executing program 33 (id=1131): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e64573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 22.620911103s ago: executing program 5 (id=3482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 22.096200906s ago: executing program 5 (id=3489): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) r2 = socket$inet(0x2, 0x80000, 0x7) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f00000003c0)={0x9, 0x867, &(0x7f0000000280)="18832a8ee60257aa9c66e2a7d7438ccb5bb2a5828ad4149f3a6476679c68402f08d99d8c8df028b2ee4f9a431ebca60bf3eb15272ef1a346c7cc032814877a96bdaa0042262a992636055ba7635b614324438394afc9e0ceab00ee83380ba1e440dffc5d133ce871e3cb882eb22b4cc73700d3cd4979cfd3d6c101b14c1dcaaad94a9a685e685860461b90d6e028404251ef00ca79a005911df9b0db80cb237c928c6cd96d3d1a701bfc00ff36fbdee4791717755ab39dfcd37677b3a2b848a88ffca052e05e7a154b59d1d4a8ca8283cc26761d6c7f42c1025f", &(0x7f0000000380)="42f6dd", 0xda, 0x3}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80000) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4000}, {r0, 0x60}, {0xffffffffffffffff, 0x1}, {r0, 0x8204}, {r1, 0x40}, {r2, 0x402}, {r3, 0x4320}, {r5}, {r6, 0x200}], 0x9, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0xffffeffc) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r7, 0x0, 0x0, 0x400000000000000) r9 = openat$incfs(0xffffffffffffff9c, 0x0, 0x14040, 0x0) syz_io_uring_setup(0x109f, &(0x7f0000000600)={0x0, 0xb05b, 0x20000, 0x0, 0x0, 0x0, r9}, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r10, &(0x7f0000001440)="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", 0x1000) syz_open_pts(0xffffffffffffffff, 0x800) 21.227808072s ago: executing program 5 (id=3510): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x0, 0x81, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x3, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x9, @in=@private=0xa010101, 0x3501, 0x0, 0x0, 0xb7, 0x2, 0x0, 0x8}}, 0xe8) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$notify(r1, 0x402, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async) socketpair(0xb, 0xa, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000098000040"]) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r7, 0x8010aebb, &(0x7f00000005c0)={0xffff1000, 0x11000}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)) (async) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0xffffc000) (async) r10 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000001000)={0x3, 0x5, 0x5, 0x101, 0xe, 0x1}) (async) getsockopt$packet_int(r10, 0x107, 0x9, &(0x7f00000003c0), &(0x7f0000000580)=0x4) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r11, 0x29, 0xcf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xa0, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x1, 0x27}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xb, 0x58f4}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x4, 0x30}}}, @release={0x40046306, 0x3}, @increfs], 0x43, 0x0, 0x0}) 21.193690066s ago: executing program 5 (id=3511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x1, @multicast}, 0x20, {0x2, 0x4e23, @private=0x5a80febe}, 'bond_slave_1\x00'}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x98, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x425d, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x720}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000400)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x1, @multicast}, 0x20, {0x2, 0x4e23, @private=0x5a80febe}, 'bond_slave_1\x00'}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) syz_open_procfs$userns(0x0, &(0x7f0000000000)) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x98, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x425d, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x720}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000400)) (async) 21.121442903s ago: executing program 5 (id=3513): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xa, 0xf9, 0x1, 0x22, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x0, 0x700, 0x2, 0x9}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xc0010141, 0x0, 0x8}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r9}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local, @loopback, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7, 0x700, 0xf29, 0xfff, {{0x1e, 0x4, 0x2, 0x2e, 0x78, 0x64, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@rr={0x7, 0x7, 0x4d, [@rand_addr=0x64010102]}, @rr={0x7, 0xb, 0xa, [@multicast2, @multicast1]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x2, [0xd09254a, 0x1, 0x8]}, @timestamp_addr={0x44, 0x3c, 0xf6, 0x1, 0x2, [{@local, 0x7fffffff}, {@multicast2, 0x6}, {@remote, 0x9}, {@rand_addr=0x64010100, 0x80000001}, {@loopback, 0xe}, {@private=0xa010101, 0xd88}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r15, 0x0, r14, 0x0, 0x100000004, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x32, 0x3, 0x7}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r17 = eventfd(0x0) io_submit(r16, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r17, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x5, 0x0, r17, 0x0, 0x0, 0x0, 0x0, 0x1, r17}]) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r13, 0xc0046209, 0x0) 21.014407694s ago: executing program 5 (id=3516): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/125) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x300000000000000, 0x0) 9.154215927s ago: executing program 4 (id=3554): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x0, 0x37fffffb}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x327}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r3 = timerfd_create(0x9, 0x80000) sendfile(r3, r0, 0x0, 0xa00) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e0000000000140004"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x12, r2, 0x21aae000) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x46, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0xe23, 0x80006, @empty}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) copy_file_range(r7, &(0x7f0000000000)=0xfffffffffffff61b, r7, 0x0, 0x4, 0x0) 9.152668577s ago: executing program 2 (id=3555): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0xfffc, &(0x7f0000000800)) io_setup(0x7ffe, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0xfc, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) read$FUSE(r5, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x7, 0x1408800, 0x9, 0x9, 0x81, 0xe3, 0x0, 0x0, 0x10, 0x2ea8}}, 0x50) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x14) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0x0, r6}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r11, &(0x7f000000c700)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000004c0)="925977ad4f23b1a7e895a060423bca9955315665ff0f20749d2e3f394bd5585f538b5f304b26688f0332c47070b101c52a43c20a6c86802a7a27c18d09f52ab66f67e077dc1fef0f4104f67f008d56f19f489d76c7ee2ed9735860c2bc5cffdc5eb0f692574ff9519fc46efdff56fb206cc98081bdcef0b18913d40515b820875327f0", 0x83}], 0x1, &(0x7f0000000340)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x4001}}], 0x1, 0x4040000) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x8e}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000680)={{0x80a0000, 0xeeee0000, 0x8, 0x3d, 0xfb, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xc, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x6000, 0xffff1000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x4, 0xe, 0xf1}, {0xeeee0000, 0x0, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x7f}, {0x8080000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0x10, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8080000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 9.152307937s ago: executing program 3 (id=3556): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getpeername(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x1, 0x8000, 0x5, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8000, 0x9828, 0xffff}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xac, 0x80, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @loopback, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4810}, 0x48011) (async) sendto$packet(r1, &(0x7f0000000400)="50b0cd2685536bad3b0b920265b5de77f83972a42b26b4bd3a3f947e997c1c38377c99327d6af27e7d3934b376fb2a12a25f0c91e4d14c7efb96a993dd5a7efb3d9e", 0x42, 0x40040, &(0x7f0000000480)={0x11, 0x19, r3, 0x1, 0x15, 0x6, @link_local}, 0x14) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f00000005c0)=0xe8) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000600)={0x1, 'virt_wifi0\x00', {}, 0xb0dd}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) sendto$packet(r1, &(0x7f0000000680)="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", 0x1000, 0x10, &(0x7f0000001680)={0x11, 0x16, r3, 0x1, 0x9, 0x6, @broadcast}, 0x14) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000016c0)={'pimreg1\x00'}) r7 = socket$inet6(0xa, 0x0, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000001700)={'ip6gretap0\x00', {0x2, 0x4e24, @rand_addr=0x64010101}}) (async) r8 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r8, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000017c0)=""/209, 0xd1}, {&(0x7f00000018c0)=""/131, 0x83}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000001a40)=""/64, 0x40}], 0x5}, 0x7}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000001b00)=""/137, 0x89}, {&(0x7f0000001bc0)=""/25, 0x19}, {&(0x7f0000001c00)=""/35, 0x23}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/145, 0x91}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000003e40)=""/50, 0x32}}, {{&(0x7f0000003e80)=@xdp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003f00)=""/34, 0x22}], 0x1, &(0x7f0000003f80)=""/237, 0xed}, 0xb54e}], 0x3, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000041c0)={'ip6_vti0\x00', &(0x7f0000004140)={'ip6tnl0\x00', r5, 0x4, 0x0, 0x0, 0xd2, 0xd, @mcast2, @local, 0x7800, 0x7, 0x6, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004280)={'syztnl0\x00', &(0x7f0000004200)={'syztnl2\x00', r9, 0x511bd607ce9252b8, 0x9, 0xf, 0x100, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x8, 0x0, 0x1}}) (async, rerun: 32) bind$bt_hci(r1, &(0x7f00000042c0)={0x1f, 0x0, 0x6}, 0x6) (async, rerun: 32) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004340), r6) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x20, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async, rerun: 32) fcntl$getownex(r1, 0x10, &(0x7f0000004440)) (async, rerun: 32) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000004540)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x28, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4080) (async) syz_clone(0x828000, &(0x7f0000004580)="f17454000689c286722ab96b432f18d4f7abca39782455bf719d609970e1f8ad22ce0896af39a9557b57896ad9179d9fe3439b2802176d77ed16d45d53f12d5b7d16be78d5a1b886550d0d61d707006ed57a80b4c16f1a8110578a", 0x5b, &(0x7f0000004600), &(0x7f0000004640), &(0x7f0000004680)="4f519618d5b8abd83feeb539a0fa57e32f7baea8159c") (async) r11 = accept$inet6(r7, &(0x7f00000046c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000004700)=0x1c) ioctl$sock_SIOCADDDLCI(r11, 0x8980, &(0x7f0000004740)={'dummy0\x00', 0x7d}) (async) ppoll(&(0x7f0000004780)=[{}, {r7, 0x300}, {r6, 0x1420}], 0x3, &(0x7f00000047c0)={0x77359400}, &(0x7f0000004800)={[0x8fc]}, 0x8) (async) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000004840), &(0x7f0000004880)=0xc) 7.52149832s ago: executing program 4 (id=3557): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 7.51575817s ago: executing program 2 (id=3558): r0 = dup(0xffffffffffffffff) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000000)) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x40001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) (async, rerun: 32) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000240)=0x4) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async, rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000002440)=0x16, 0x4) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x88, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc880}, 0x60) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x78, r3, 0x400, 0x200, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x64, 0xa, 0xa, 0x703, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000002880), r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x74, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) (async, rerun: 32) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000003b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000002a40)={0x1044, 0x14, 0x200, 0x70bd26, 0x25dfdbff, {0x1d, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "f718c37dbdef51800be102ae55ad9ae8a8c4ed63b0dbf19b8a2d47066e1e7651ae990177e0"}]}, 0x1044}, 0x1, 0x0, 0x0, 0x10}, 0x4004840) syz_genetlink_get_family_id$batadv(&(0x7f0000003b40), r0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x40000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003d00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003d40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003e40)) (async) prctl$PR_GET_IO_FLUSHER(0x3a) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ec0), r0) (rerun: 64) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x10000) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x30, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x28, r7, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x17}}}}, [""]}, 0x28}}, 0x800) (rerun: 32) 7.51524722s ago: executing program 3 (id=3559): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 5.746257657s ago: executing program 4 (id=3560): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 5.745717687s ago: executing program 2 (id=3561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000080)=""/161, 0xa1}], 0x2, 0xffffffff, 0x392a, 0xe) 5.745556907s ago: executing program 3 (id=3562): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/125) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x3f00) 3.958724205s ago: executing program 4 (id=3563): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000280)={0x7, 0x4, {0xfa5, @struct={0x5, 0x5}, 0x0, 0xa26, 0x7fffffffffffffff, 0x7, 0x401, 0x5, 0x401, @usage=0xffff, 0x8, 0x79b7, [0x3, 0x2, 0x7, 0x1000, 0xe249, 0xfffffffffffffb1e]}, {0x7, @usage=0x35c6, 0x0, 0x8, 0x5, 0x22413914, 0x7ff, 0x7, 0x400, @usage=0x3, 0x9, 0x2, [0x4, 0x9, 0x5b89, 0x7, 0x6, 0xf5a]}, {0x3, @usage=0x1, 0x0, 0x3, 0x7, 0x5a, 0x1, 0xcf, 0x40, @usage=0x9e, 0x3, 0x200, [0x9, 0x7, 0xff, 0x4, 0xffffffffffffff3f, 0x1000]}, {0x0, 0x3, 0x6}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{}, {@val={r1}, @actul_num={@void, 0x2, 0x4b}}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 3.957803375s ago: executing program 2 (id=3564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) (async) syz_clone3(&(0x7f0000001500)={0x200000000, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)=0x0, {0x21}, &(0x7f0000001400)=""/66, 0x42, &(0x7f0000001480)=""/59, &(0x7f00000014c0)=[0x0], 0x1}, 0x58) ptrace$setsig(0x4203, r1, 0x1, &(0x7f0000001580)={0x23, 0x8000, 0x2a}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000080)={{0x32, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x7dc, 0x9}) write$P9_ROPEN(r3, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x10, 0x0, 0x2}, 0x3096}}, 0x18) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffc2f, 0x0, 0x0, 0x0) (async) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r6, &(0x7f0000000000), 0x10) (async) getsockname$inet(r6, 0x0, &(0x7f00000001c0)) (async) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) (async) bind$unix(r7, &(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) bind$unix(r7, &(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000140)={&(0x7f0000000200)=""/4096, 0x1000}) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="680000000206010200000000000000000300000405000401000700000005000500030000000900020073797a320000000005000100070000000c00078008000940fffffff80900020073797a3200000000050004000300"/104], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async) syz_open_dev$hidraw(&(0x7f0000001600), 0x3, 0xe0dc0) 3.957629255s ago: executing program 3 (id=3565): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) close_range(r0, r1, 0x2) lseek(r0, 0xfffd, 0x0) setresgid(0xee00, 0xee01, 0x0) (async) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) close_range(r0, r1, 0x2) (async) lseek(r0, 0xfffd, 0x0) (async) 2.026602908s ago: executing program 4 (id=3566): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0xfffc, &(0x7f0000000800)) io_setup(0x7ffe, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0xfc, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) read$FUSE(r5, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x7, 0x1408800, 0x9, 0x9, 0x81, 0xe3, 0x0, 0x0, 0x10, 0x2ea8}}, 0x50) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x14) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0x0, r6}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r11, &(0x7f000000c700)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000004c0)="925977ad4f23b1a7e895a060423bca9955315665ff0f20749d2e3f394bd5585f538b5f304b26688f0332c47070b101c52a43c20a6c86802a7a27c18d09f52ab66f67e077dc1fef0f4104f67f008d56f19f489d76c7ee2ed9735860c2bc5cffdc5eb0f692574ff9519fc46efdff56fb206cc98081bdcef0b18913d40515b820875327f0", 0x83}], 0x1, &(0x7f0000000340)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x4001}}], 0x1, 0x4040000) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x8e}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000680)={{0x80a0000, 0xeeee0000, 0x8, 0x3d, 0xfb, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xc, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x6000, 0xffff1000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x4, 0xe, 0xf1}, {0xeeee0000, 0x0, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x7f}, {0x8080000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0x10, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8080000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 2.026449318s ago: executing program 2 (id=3567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "41bc012c74bd9062b68fa9a1238214cea741a3d88824207c0734dc8af85de64250332b530dc7bbb12875b52dfabdc96a814d05141b492c95657ed0926c9377ca", 0x18}, 0x48, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.024602148s ago: executing program 3 (id=3568): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) sendfile(r0, r0, 0x0, 0x1000000201005) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000df58"]) sendfile(r2, r2, 0x0, 0x7ffff000) 1.1142ms ago: executing program 4 (id=3569): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 128.66µs ago: executing program 2 (id=3570): r0 = epoll_create(0x7) (async) r1 = epoll_create1(0x80000) (async) r2 = epoll_create(0x7) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=@fragment={0x3c, 0x0, 0x3b, 0x0, 0x0, 0x5, 0x64}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (async) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) (async) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/4, 0x4}, {&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/202, 0xca}], 0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1002, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x11) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x1}) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r9, &(0x7f0000000140)) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x84) 0s ago: executing program 3 (id=3571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 21.995348][ T36] audit: type=1400 audit(1762960918.240:64): avc: denied { mounton } for pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.996830][ T284] cgroup: Unknown subsys name 'net' [ 22.018018][ T36] audit: type=1400 audit(1762960918.240:65): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.045306][ T36] audit: type=1400 audit(1762960918.260:66): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.045619][ T284] cgroup: Unknown subsys name 'devices' [ 22.166514][ T284] cgroup: Unknown subsys name 'hugetlb' [ 22.172167][ T284] cgroup: Unknown subsys name 'rlimit' [ 22.287134][ T36] audit: type=1400 audit(1762960918.530:67): avc: denied { setattr } for pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.310348][ T36] audit: type=1400 audit(1762960918.530:68): avc: denied { mounton } for pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.310580][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.335360][ T36] audit: type=1400 audit(1762960918.530:69): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.366873][ T36] audit: type=1400 audit(1762960918.590:70): avc: denied { relabelto } for pid=286 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.392344][ T36] audit: type=1400 audit(1762960918.590:71): avc: denied { write } for pid=286 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.429751][ T36] audit: type=1400 audit(1762960918.670:72): avc: denied { read } for pid=284 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.455361][ T36] audit: type=1400 audit(1762960918.670:73): avc: denied { open } for pid=284 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.455717][ T284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.652909][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.674134][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.681268][ T291] bridge_slave_0: entered allmulticast mode [ 23.687883][ T291] bridge_slave_0: entered promiscuous mode [ 23.714776][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.721824][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.728952][ T291] bridge_slave_1: entered allmulticast mode [ 23.735210][ T291] bridge_slave_1: entered promiscuous mode [ 23.851560][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.859313][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.866495][ T296] bridge_slave_0: entered allmulticast mode [ 23.872744][ T296] bridge_slave_0: entered promiscuous mode [ 23.889011][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.896099][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.903173][ T296] bridge_slave_1: entered allmulticast mode [ 23.909548][ T296] bridge_slave_1: entered promiscuous mode [ 23.922139][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.929227][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.936374][ T297] bridge_slave_0: entered allmulticast mode [ 23.942589][ T297] bridge_slave_0: entered promiscuous mode [ 23.958268][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.965367][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.972472][ T297] bridge_slave_1: entered allmulticast mode [ 23.978861][ T297] bridge_slave_1: entered promiscuous mode [ 24.011977][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.019156][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.026713][ T295] bridge_slave_0: entered allmulticast mode [ 24.033288][ T295] bridge_slave_0: entered promiscuous mode [ 24.049581][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.056706][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.063850][ T295] bridge_slave_1: entered allmulticast mode [ 24.070116][ T295] bridge_slave_1: entered promiscuous mode [ 24.085807][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.092861][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.100189][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.107290][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.200565][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.207671][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.214996][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.222020][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.254958][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.262320][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.269928][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.277448][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.297104][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.304206][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.311817][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.318863][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.351964][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359049][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.368818][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.375887][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.396282][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.403351][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.411034][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.418122][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.432740][ T291] veth0_vlan: entered promiscuous mode [ 24.466745][ T291] veth1_macvtap: entered promiscuous mode [ 24.489381][ T296] veth0_vlan: entered promiscuous mode [ 24.501300][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.508388][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.520175][ T297] veth0_vlan: entered promiscuous mode [ 24.530167][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.537241][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.559630][ T296] veth1_macvtap: entered promiscuous mode [ 24.571796][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.573364][ T297] veth1_macvtap: entered promiscuous mode [ 24.612487][ T295] veth0_vlan: entered promiscuous mode [ 24.639645][ T295] veth1_macvtap: entered promiscuous mode [ 24.698519][ T338] binder: Bad value for 'stats' [ 24.722940][ T345] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.735538][ T349] binder: Unknown parameter 'obj_user' [ 24.762885][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.788311][ T353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 24.803574][ T358] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 24.845131][ T364] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 24.880659][ T368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.880847][ T368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.888126][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 24.917546][ T370] ======================================================= [ 24.917546][ T370] WARNING: The mand mount option has been deprecated and [ 24.917546][ T370] and is ignored by this kernel. Remove the mand [ 24.917546][ T370] option from the mount to silence this warning. [ 24.917546][ T370] ======================================================= [ 24.971354][ T356] syz.1.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.043221][ T382] IPv6: NLM_F_CREATE should be specified when creating new route [ 25.259197][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.259229][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 25.422563][ T415] 9pnet_fd: Insufficient options for proto=fd [ 25.696952][ T425] binder: Unknown parameter 'contextÌðÔð[7’' [ 25.714103][ T333] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.874466][ T333] usb 2-1: Using ep0 maxpacket: 8 [ 25.907802][ T333] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 25.919323][ T333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.954905][ T333] usb 2-1: config 0 has no interface number 0 [ 25.967547][ T333] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 25.984121][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.992166][ T333] usb 2-1: Product: syz [ 26.002784][ T433] /dev/rnullb0: Can't open blockdev [ 26.014023][ T333] usb 2-1: Manufacturer: syz [ 26.019338][ T333] usb 2-1: SerialNumber: syz [ 26.023957][ T435] /dev/rnullb0: Can't open blockdev [ 26.036733][ T333] usb 2-1: config 0 descriptor?? [ 26.097847][ T439] rust_binder: Write failure EFAULT in pid:22 [ 26.154272][ T441] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 26.184656][ T442] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 26.285845][ T333] usb 2-1: USB disconnect, device number 2 [ 26.326734][ T445] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 26.740000][ T456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.759809][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.846724][ T461] rust_binder: Write failure EFAULT in pid:32 [ 26.869186][ T465] devpts: called with bogus options [ 26.881433][ T465] Zero length message leads to an empty skb [ 26.890629][ T468] process 'syz.2.43' launched './file2' with NULL argv: empty string added [ 26.914108][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 26.920399][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.931605][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.941482][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 26.950890][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.966887][ T31] usb 1-1: config 0 descriptor?? [ 26.981625][ T477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.104129][ T476] fuse: Unknown parameter 'group{id' [ 27.118427][ T477] 9pnet: Could not find request transport: fd(rfdno=0x000000000000000e [ 27.128136][ T476] rust_binder: Read failure Err(EAGAIN) in pid:42 [ 27.129545][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 27.129564][ T36] audit: type=1400 audit(1762960923.370:186): avc: denied { write } for pid=475 comm="syz.2.46" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.174291][ T36] audit: type=1400 audit(1762960923.370:187): avc: denied { ioctl } for pid=481 comm="syz.3.47" path="socket:[4202]" dev="sockfs" ino=4202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.247029][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.247056][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.251428][ T493] rust_binder: Write failure EFAULT in pid:34 [ 27.256957][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.262707][ T36] audit: type=1400 audit(1762960923.500:188): avc: denied { getopt } for pid=469 comm="syz.1.44" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.266859][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.292827][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.299652][ T36] audit: type=1400 audit(1762960923.530:189): avc: denied { setopt } for pid=495 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.300322][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.307132][ T36] audit: type=1400 audit(1762960923.550:190): avc: denied { append } for pid=495 comm="syz.3.51" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.325455][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.337195][ T36] audit: type=1400 audit(1762960923.570:191): avc: denied { open } for pid=495 comm="syz.3.51" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.355301][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.361676][ T36] audit: type=1400 audit(1762960923.570:192): avc: denied { ioctl } for pid=495 comm="syz.3.51" path="socket:[4309]" dev="sockfs" ino=4309 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.392163][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.416540][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.423050][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 27.423113][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.429690][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 27.435842][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.443345][ T31] usb 1-1: USB disconnect, device number 2 [ 27.453486][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.461982][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.468515][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.474998][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.481454][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.488172][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.494754][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.501258][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.507768][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.514357][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.521083][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.528271][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.535399][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.541915][ T36] audit: type=1400 audit(1762960923.780:193): avc: denied { remount } for pid=497 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.545535][ T498] netlink: 'syz.3.52': attribute type 12 has an invalid length. [ 27.548930][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.575903][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.582698][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.589514][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.596277][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.602845][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.609393][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.616161][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.622745][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.629324][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.635859][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.642342][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.648849][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.655580][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.662046][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.668609][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.675075][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.681502][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.687963][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.694431][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.700859][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.707326][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.713774][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.720253][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.726734][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.733240][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.739744][ T36] audit: type=1326 audit(1762960923.970:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5db98f6c9 code=0x7fc00000 [ 27.744233][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.746283][ T36] audit: type=1326 audit(1762960923.970:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5db98f6c9 code=0x7fc00000 [ 27.794033][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.799793][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.806789][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.813556][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.820573][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.827591][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.834078][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.840524][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.846997][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.853462][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.860275][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.866893][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.927556][ T505] tmpfs: Unknown parameter 'gÄ)ž)d' [ 27.957138][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 27.957172][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:26 [ 27.991494][ T509] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 28.088290][ T512] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 28.110859][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 28.238037][ T526] __vm_enough_memory: pid: 526, comm: syz.3.61, bytes: 18014402804453376 not enough memory for the allocation [ 28.317271][ T531] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 28.342135][ T531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 28.602191][ T555] rust_binder: Error while translating object. [ 28.621520][ T555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.631594][ T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:73 [ 29.086406][ T576] rust_binder: Write failure EFAULT in pid:37 [ 29.505770][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.523047][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 29.544125][ T453] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.733097][ T453] usb 1-1: not running at top speed; connect to a high speed hub [ 29.742269][ T453] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.752680][ T453] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.763138][ T453] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.772979][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.781298][ T453] usb 1-1: Product: Й [ 29.785486][ T453] usb 1-1: Manufacturer: 鈙͑뷣á²ë•°è§‹å°šî³©ï»Šã‘˜á½ã¥®á–ã’µã»êŽ·å­´í›½å»êŸ¬ç‹­î¹€ë»‚éž„ë…°ç´ãŠ°å©‰ç…±î­¶â¢¸çŒ‹ç”৥á·â“­ï¯Œé¹¯ã¤î™­â°î‚¹ì»ä½ï•â›¾å“ºã¹î’¾âª‘⋾⢚礲謁ⅾ㘪휚ṉç†æž¾í”¬à¥½î£´ã¤³ [ 29.806519][ T453] usb 1-1: SerialNumber: Ð’ [ 29.834099][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.893399][ T618] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 29.985792][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.995703][ T31] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 30.004798][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.013276][ T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 30.013315][ T589] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.014709][ T31] usb 4-1: config 0 descriptor?? [ 30.022669][ T589] rust_binder: Read failure Err(EFAULT) in pid:46 [ 30.038324][ T589] fuse: blksize only supported for fuseblk [ 30.052049][ T589] tipc: Enabling not permitted [ 30.058075][ T589] tipc: Enabling of bearer rejected, failed to enable media [ 30.070186][ T453] usb 1-1: 0:2 : does not exist [ 30.076971][ T453] usb 1-1: USB disconnect, device number 3 [ 30.085765][ T417] udevd[417]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.354094][ T67] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.494118][ T67] usb 2-1: device descriptor read/64, error -71 [ 30.495410][ T630] rust_binder: Write failure EFAULT in pid:100 [ 30.501527][ T631] rust_binder: Write failure EFAULT in pid:100 [ 30.642804][ T612] binder: Bad value for 'stats' [ 30.659705][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 30.668453][ T638] overlayfs: missing 'lowerdir' [ 30.673480][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.685960][ T31] usb 4-1: USB disconnect, device number 2 [ 30.734108][ T67] usb 2-1: device descriptor read/64, error -71 [ 30.834103][ T463] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.902709][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 30.912207][ T657] rust_binder: Error while translating object. [ 30.912232][ T657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 30.918484][ T657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 30.940479][ T659] netlink: 72 bytes leftover after parsing attributes in process `syz.0.106'. [ 30.974143][ T67] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.984114][ T463] usb 3-1: Using ep0 maxpacket: 32 [ 30.990905][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.002072][ T463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.005239][ T661] rust_binder: 71: no such ref 3 [ 31.012207][ T463] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.017182][ T661] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 31.026435][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.033433][ T661] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 31.042085][ T463] usb 3-1: config 0 descriptor?? [ 31.051881][ T661] rust_binder: Write failure EFAULT in pid:71 [ 31.054468][ T463] hub 3-1:0.0: USB hub found [ 31.114106][ T67] usb 2-1: device descriptor read/64, error -71 [ 31.134033][ T669] rust_binder: Write failure EFAULT in pid:79 [ 31.134369][ T670] rust_binder: Write failure EFAULT in pid:79 [ 31.166556][ T675] __vm_enough_memory: pid: 675, comm: syz.0.112, bytes: 18014402804453376 not enough memory for the allocation [ 31.186689][ T677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.113'. [ 31.238371][ T681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 31.254580][ T463] hub 3-1:0.0: 1 port detected [ 31.354125][ T67] usb 2-1: device descriptor read/64, error -71 [ 31.418694][ T700] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 31.466040][ T67] usb usb2-port1: attempt power cycle [ 31.486663][ T703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 31.496259][ T703] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 31.550421][ T709] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 31.558430][ T709] netlink: 5 bytes leftover after parsing attributes in process `syz.3.122'. [ 31.567724][ T709] bridge_slave_1: left promiscuous mode [ 31.573530][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.581936][ T710] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 31.589927][ T710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.122'. [ 31.605080][ T709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.764095][ T729] binder: Bad value for 'max' [ 31.814276][ T67] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 31.835123][ T67] usb 2-1: device descriptor read/8, error -71 [ 31.864103][ T463] hub 3-1:0.0: activate --> -90 [ 31.965328][ T67] usb 2-1: device descriptor read/8, error -71 [ 32.034108][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.079116][ T742] rust_binder: Write failure EFAULT in pid:122 [ 32.129036][ T753] exFAT-fs (rnullb0): invalid boot record signature [ 32.142005][ T753] exFAT-fs (rnullb0): failed to read boot sector [ 32.148397][ T753] exFAT-fs (rnullb0): failed to recognize exfat type [ 32.167782][ T36] kauditd_printk_skb: 3643 callbacks suppressed [ 32.167799][ T36] audit: type=1400 audit(1762960928.410:3839): avc: denied { setattr } for pid=757 comm="syz.0.136" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 32.184096][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 32.204237][ T67] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 32.212154][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 32.221254][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.229397][ T31] usb 4-1: Product: syz [ 32.233673][ T31] usb 4-1: Manufacturer: syz [ 32.238418][ T31] usb 4-1: SerialNumber: syz [ 32.243538][ T67] usb 2-1: device descriptor read/8, error -71 [ 32.251346][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 32.257705][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 32.375137][ T67] usb 2-1: device descriptor read/8, error -71 [ 32.414095][ T453] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.465319][ T636] rust_binder: 105: no such ref 1 [ 32.470530][ T636] rust_binder: Failed to allocate buffer. len:18446744073709551240, is_oneway:false [ 32.470546][ T636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 32.480036][ T636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:105 [ 32.489814][ T67] usb usb2-port1: unable to enumerate USB device [ 32.584116][ T453] usb 1-1: Using ep0 maxpacket: 16 [ 32.590426][ T453] usb 1-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 32.600764][ T453] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 32.611196][ T453] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 32.620318][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.628346][ T453] usb 1-1: Product: syz [ 32.632524][ T453] usb 1-1: Manufacturer: syz [ 32.637151][ T453] usb 1-1: SerialNumber: syz [ 32.644540][ T453] r8152-cfgselector 1-1: Unknown version 0x0000 [ 32.650853][ T453] r8152-cfgselector 1-1: config 0 descriptor?? [ 33.133888][ T762] binder: Unknown parameter 'contextÌðÔð[7’' [ 33.148177][ T762] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 33.282068][ T774] rust_binder: validate_parent_fixup: new_min_offset=45, sg_entry.length=0 [ 33.282087][ T774] rust_binder: Error while translating object. [ 33.290991][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.297250][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 33.322502][ T36] audit: type=1400 audit(1762960929.560:3840): avc: denied { read } for pid=775 comm="syz.1.142" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.354296][ T36] audit: type=1400 audit(1762960929.560:3841): avc: denied { open } for pid=775 comm="syz.1.142" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.377822][ T36] audit: type=1400 audit(1762960929.570:3842): avc: denied { ioctl } for pid=775 comm="syz.1.142" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.402836][ T36] audit: type=1400 audit(1762960929.570:3843): avc: denied { mount } for pid=775 comm="syz.1.142" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.424916][ T36] audit: type=1400 audit(1762960929.640:3844): avc: denied { create } for pid=777 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 33.463473][ T36] audit: type=1400 audit(1762960929.700:3845): avc: denied { write } for pid=783 comm="syz.1.146" name="/" dev="incremental-fs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.486055][ T36] audit: type=1400 audit(1762960929.700:3846): avc: denied { add_name } for pid=783 comm="syz.1.146" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.506684][ T36] audit: type=1400 audit(1762960929.700:3847): avc: denied { create } for pid=783 comm="syz.1.146" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.526785][ T36] audit: type=1400 audit(1762960929.700:3848): avc: denied { associate } for pid=783 comm="syz.1.146" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.550051][ T453] usb 3-1: USB disconnect, device number 3 [ 33.572986][ T791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 33.578470][ T790] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 33.601817][ T790] rust_binder: Write failure EINVAL in pid:108 [ 34.467614][ T812] 9pnet_fd: Insufficient options for proto=fd [ 34.609101][ T822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 34.793623][ T453] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 34.856581][ T831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.856658][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:129 [ 34.965160][ T848] rust_binder: 138: no such ref 3 [ 34.979444][ T848] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.986566][ T849] rust_binder: 138: no such ref 3 [ 34.991756][ T849] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.999430][ T848] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 35.006827][ T848] rust_binder: 138: no such ref 0 [ 35.012097][ T849] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 35.019630][ T849] rust_binder: 138: no such ref 0 [ 35.097269][ T864] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1795 sclass=netlink_xfrm_socket pid=864 comm=syz.3.175 [ 35.185851][ T77] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 35.342748][ T898] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 35.357372][ T900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=900 comm=syz.1.186 [ 35.357809][ T898] rust_binder: Write failure EINVAL in pid:149 [ 35.453864][ T909] overlayfs: missing 'workdir' [ 35.575781][ T921] netlink: 96 bytes leftover after parsing attributes in process `syz.1.194'. [ 35.624099][ T453] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.775294][ T453] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.786339][ T453] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.792963][ T453] usb 1-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 35.802071][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.810870][ T453] usb 1-1: config 0 descriptor?? [ 35.834160][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.911457][ T926] netlink: 17 bytes leftover after parsing attributes in process `syz.2.196'. [ 35.983677][ T936] rust_binder: 156: no such ref 0 [ 35.988847][ T936] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 35.995247][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 35.996313][ T936] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 36.008405][ T936] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 36.015626][ T936] rust_binder: 156: no such ref 0 [ 36.021062][ T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.039669][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.052950][ T45] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 36.064285][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.084244][ T45] usb 2-1: config 0 descriptor?? [ 36.088554][ T942] netlink: 124 bytes leftover after parsing attributes in process `syz.3.202'. [ 36.098770][ T942] rust_binder: Write failure EFAULT in pid:129 [ 36.110714][ T938] rust_binder: Write failure EFAULT in pid:158 [ 36.303423][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 36.328574][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.342225][ T45] usb 2-1: USB disconnect, device number 7 [ 36.349547][ T954] tipc: Enabling of bearer rejected, failed to enable media [ 36.366586][ T956] incfs: Error accessing: ./file0. [ 36.372875][ T956] incfs: mount failed -20 [ 36.421260][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.421285][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.428532][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.435453][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.442273][ T963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.448855][ T963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 36.458365][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.467682][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.474583][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.481159][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.487733][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.494242][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.500790][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.507374][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.513852][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.520684][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.527252][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.533751][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.540302][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.547087][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.553573][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.560151][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.566704][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.573198][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.579739][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.586240][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.592747][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.599275][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.609386][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.614129][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.615899][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.635045][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.642072][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.648911][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.656021][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.663078][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.669923][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.676852][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.683379][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.690185][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.693946][ T972] mmap: syz.3.211 (972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.697182][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.714927][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.721581][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.730560][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.737070][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.743516][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.749979][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.756535][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.763060][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.769516][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.776550][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.777673][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 36.783141][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.789490][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 36.789515][ T31] usb 3-1: config 220 has no interface number 2 [ 36.789545][ T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 36.789579][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 36.789599][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 36.789617][ T31] usb 3-1: config 220 interface 1 has no altsetting 0 [ 36.791093][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 36.800616][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.814200][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.817700][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.823928][ T31] usb 3-1: Product: syz [ 36.834981][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.843127][ T31] usb 3-1: Manufacturer: syz [ 36.848697][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.855327][ T31] usb 3-1: SerialNumber: syz [ 36.870679][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.911619][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.918212][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.924793][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.931253][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.937740][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.944311][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.952992][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.959543][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.966167][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.972671][ T961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.012520][ T980] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 37.043053][ T982] rust_binder: Error while translating object. [ 37.043086][ T982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.049749][ T982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:179 [ 37.082174][ T31] usb 3-1: selecting invalid altsetting 0 [ 37.098512][ T31] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 37.105531][ T984] loop5: detected capacity change from 0 to 7 [ 37.112371][ T31] usb 3-1: No valid video chain found. [ 37.124143][ T31] usb 3-1: USB disconnect, device number 4 [ 37.244782][ T986] Invalid logical block size (1) [ 37.332565][ T985] Invalid logical block size (1) [ 37.412460][ T990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.412498][ T990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 37.688817][ T997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=997 comm=syz.3.219 [ 37.710400][ T997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=997 comm=syz.3.219 [ 37.722708][ T997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=997 comm=syz.3.219 [ 37.734996][ T997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=997 comm=syz.3.219 [ 37.747853][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 37.747869][ T36] audit: type=1400 audit(1762960933.990:3874): avc: denied { nlmsg_read } for pid=996 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 37.848402][ T36] audit: type=1400 audit(1762960934.090:3875): avc: denied { ioctl } for pid=1008 comm="syz.3.224" path="socket:[7423]" dev="sockfs" ino=7423 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.853461][ T1009] rust_binder: Error while translating object. [ 37.873216][ T1009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.879538][ T1009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 37.902017][ T1012] rust_binder: Write failure EFAULT in pid:161 [ 37.914160][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 38.075473][ T31] usb 3-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 38.085875][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.098817][ T31] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 38.107900][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.116780][ T31] usb 3-1: config 0 descriptor?? [ 38.134246][ T453] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.223347][ T1019] binder: Bad value for 'stats' [ 38.284088][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 38.290049][ T453] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.298670][ T453] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.308349][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.311755][ T453] usb 4-1: config 1 interface 0 has no altsetting 0 [ 38.327162][ T453] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 38.328926][ T1026] rust_binder: Write failure EINVAL in pid:199 [ 38.336620][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.350905][ T453] usb 4-1: Product: syz [ 38.355145][ T453] usb 4-1: Manufacturer: syz [ 38.359802][ T453] usb 4-1: SerialNumber: syz [ 38.403019][ T463] usb 1-1: USB disconnect, device number 5 [ 38.426090][ T1029] binder: Bad value for 'max' [ 38.478783][ T36] audit: type=1400 audit(1762960934.720:3876): avc: denied { map } for pid=1031 comm="syz.0.234" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 38.527696][ T31] usb 3-1: string descriptor 0 read error: -71 [ 38.534128][ T36] audit: type=1400 audit(1762960934.760:3877): avc: denied { append } for pid=1033 comm="syz.0.235" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.544940][ T31] usb 3-1: USB disconnect, device number 5 [ 38.578379][ T331] bridge_slave_1: left allmulticast mode [ 38.578731][ T453] usbhid 4-1:1.0: can't add hid device: -71 [ 38.584139][ T331] bridge_slave_1: left promiscuous mode [ 38.592233][ T453] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 38.605872][ T453] usb 4-1: USB disconnect, device number 4 [ 38.614485][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.629069][ T331] bridge_slave_0: left allmulticast mode [ 38.636089][ T331] bridge_slave_0: left promiscuous mode [ 38.641932][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.651338][ T1039] rust_binder: Write failure EFAULT in pid:165 [ 38.652760][ T36] audit: type=1400 audit(1762960934.880:3878): avc: denied { create } for pid=1038 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 38.696184][ T36] audit: type=1400 audit(1762960934.890:3879): avc: denied { mounton } for pid=1040 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.796787][ T331] veth1_macvtap: left promiscuous mode [ 38.802350][ T331] veth0_vlan: left promiscuous mode [ 38.855098][ T36] audit: type=1400 audit(1762960935.100:3880): avc: denied { write } for pid=1046 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.885399][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.893598][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.902085][ T1040] bridge_slave_0: entered allmulticast mode [ 38.912911][ T36] audit: type=1400 audit(1762960935.150:3881): avc: denied { remount } for pid=1051 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 38.916279][ T1040] bridge_slave_0: entered promiscuous mode [ 38.934545][ T36] audit: type=1400 audit(1762960935.150:3882): avc: denied { write } for pid=1051 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.939510][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.965556][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.972776][ T1040] bridge_slave_1: entered allmulticast mode [ 38.973179][ T36] audit: type=1400 audit(1762960935.150:3883): avc: denied { ioctl } for pid=1051 comm="syz.0.240" path="socket:[7487]" dev="sockfs" ino=7487 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.979339][ T1040] bridge_slave_1: entered promiscuous mode [ 39.004499][ T1052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.009053][ T1052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 39.079050][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.095363][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.102631][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.109723][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.133752][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.143350][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.153946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.161043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.183821][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.190933][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.207220][ T1075] rust_binder: Write failure EINVAL in pid:169 [ 39.208118][ T1069] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 39.268871][ T1040] veth0_vlan: entered promiscuous mode [ 39.271614][ T1083] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 39.283059][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 39.298630][ T1040] veth1_macvtap: entered promiscuous mode [ 39.412509][ T1101] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 39.614180][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.674133][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.724093][ T463] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.775373][ T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 39.784517][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.793088][ T31] usb 3-1: config 0 descriptor?? [ 39.825607][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.836551][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.846335][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 39.855407][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.864370][ T9] usb 5-1: config 0 descriptor?? [ 39.875209][ T463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.886268][ T463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.896132][ T463] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.909270][ T463] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.918416][ T463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.927303][ T463] usb 4-1: config 0 descriptor?? [ 40.206933][ T1109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.216447][ T1109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.553389][ T463] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 40.565822][ T463] plantronics 0003:047F:FFFF.0001: item fetching failed at offset 13/15 [ 40.574596][ T463] plantronics 0003:047F:FFFF.0001: parse failed [ 40.581007][ T463] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 40.766880][ T463] usb 4-1: USB disconnect, device number 5 [ 41.030555][ T1118] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 41.060028][ T1120] 9pnet_fd: Insufficient options for proto=fd [ 41.154911][ T9] hid-led 0003:04D8:F372.0002: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 41.174686][ T9] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 41.184283][ T9] usb 5-1: USB disconnect, device number 2 [ 41.191486][ T333] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 41.199922][ T333] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 41.210861][ T1130] fido_id[1130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 41.507704][ T1146] __vm_enough_memory: pid: 1146, comm: syz.3.267, bytes: 18014402804453376 not enough memory for the allocation [ 41.694143][ T463] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.845270][ T463] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 41.853709][ T463] usb 1-1: config 0 has no interface number 0 [ 41.861629][ T463] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 41.870921][ T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.879255][ T463] usb 1-1: Product: syz [ 41.883636][ T463] usb 1-1: Manufacturer: syz [ 41.888569][ T463] usb 1-1: SerialNumber: syz [ 41.894546][ T463] usb 1-1: config 0 descriptor?? [ 42.151653][ T77] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 42.159996][ T77] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 42.168310][ T77] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 42.176771][ T77] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 42.185013][ T77] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 42.193314][ T77] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 42.307651][ T1150] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 42.315939][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.325254][ T1150] netlink: 944 bytes leftover after parsing attributes in process `syz.3.272'. [ 42.335958][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.362062][ T463] asix 1-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 42.376402][ T77] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 42.394637][ T10] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 42.401710][ T31] usb 3-1: Cannot set MAC address [ 42.403070][ T10] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 42.422120][ T463] asix 1-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 42.424503][ T10] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 42.440561][ T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 42.457807][ T463] asix 1-1:0.225: probe with driver asix failed with error -71 [ 42.458486][ T10] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 42.469343][ T31] usb 3-1: USB disconnect, device number 6 [ 42.474857][ T1159] rust_binder: Error while translating object. [ 42.479280][ T1159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.481809][ T463] usb 1-1: USB disconnect, device number 6 [ 42.500301][ T10] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 42.515685][ T1159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 42.521632][ T10] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 42.592989][ T10] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 42.614323][ T10] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 42.634434][ T10] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 42.959694][ T1182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 42.994096][ T463] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.042141][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 43.042158][ T36] audit: type=1400 audit(1762960939.280:3889): avc: denied { append } for pid=1190 comm="syz.3.285" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.154090][ T463] usb 1-1: Using ep0 maxpacket: 16 [ 43.160666][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.171863][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.182111][ T463] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.195113][ T463] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.208656][ T463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.218557][ T463] usb 1-1: config 0 descriptor?? [ 43.430463][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.455040][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.683327][ T1204] rust_binder: Error while translating object. [ 43.683370][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.689938][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 43.705044][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.731768][ T463] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 43.745526][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.752811][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.762726][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.771904][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.781208][ T36] audit: type=1400 audit(1762960946.026:3890): avc: denied { read } for pid=1197 comm="syz.3.288" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.806015][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.813601][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.821175][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.828723][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.835294][ T36] audit: type=1400 audit(1762960946.066:3891): avc: denied { create } for pid=1212 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 43.844113][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.864345][ T463] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.901882][ T1222] rust_binder: Write failure EFAULT in pid:215 [ 43.913529][ T1224] tipc: Started in network mode [ 43.924794][ T1224] tipc: Node identity ac14142f, cluster identity 4711 [ 43.933130][ T463] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 43.938145][ T1224] tipc: New replicast peer: 0.0.0.0 [ 43.941685][ T463] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 43.946958][ T1224] tipc: Enabled bearer , priority 10 [ 43.959187][ T463] microsoft 0003:045E:07DA.0003: no inputs found [ 43.970049][ T463] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 43.980333][ T1226] __vm_enough_memory: pid: 1226, comm: syz.3.296, bytes: 18014402804453376 not enough memory for the allocation [ 43.995414][ T463] usb 1-1: USB disconnect, device number 7 [ 44.121258][ T1250] rust_binder: Write failure EFAULT in pid:229 [ 45.064152][ T9] tipc: Node number set to 2886997039 [ 62.291494][ T1268] netlink: 492 bytes leftover after parsing attributes in process `syz.0.310'. [ 62.324353][ T1271] overlayfs: failed to resolve 'euid=00000000000000000000': -2 [ 62.354142][ T36] audit: type=1400 audit(1762960964.586:3892): avc: denied { create } for pid=1278 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.401515][ T1288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.319'. [ 62.523073][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 62.546429][ T1307] 9pnet_fd: Insufficient options for proto=fd [ 62.852445][ T36] audit: type=1400 audit(1762960965.086:3893): avc: denied { mounton } for pid=1314 comm="syz.0.328" path="/proc/232/task" dev="proc" ino=9550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 62.875170][ T36] audit: type=1400 audit(1762960965.086:3894): avc: denied { associate } for pid=1316 comm="syz.0.328" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.946235][ T36] audit: type=1400 audit(1762960965.186:3895): avc: denied { create } for pid=1319 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.083133][ T36] audit: type=1400 audit(1762960965.316:3896): avc: denied { connect } for pid=1337 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.109702][ T36] audit: type=1400 audit(1762960965.316:3897): avc: denied { accept } for pid=1337 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.283124][ T1358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1358 comm=syz.4.342 [ 63.295860][ T1364] __vm_enough_memory: pid: 1364, comm: syz.0.344, bytes: 18014402804453376 not enough memory for the allocation [ 63.331367][ T36] audit: type=1400 audit(1762960972.569:3898): avc: denied { accept } for pid=1376 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.354337][ T1379] syz.0.346 uses obsolete (PF_INET,SOCK_PACKET) [ 63.394074][ T36] audit: type=1400 audit(1762960972.589:3899): avc: denied { getopt } for pid=1376 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.565133][ T1402] rust_binder: Write failure EINVAL in pid:255 [ 63.854140][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 63.905456][ T1417] tc_dump_action: action bad kind [ 63.942014][ T1421] __vm_enough_memory: pid: 1421, comm: syz.0.362, bytes: 18014402804453376 not enough memory for the allocation [ 64.015185][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.026377][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.036895][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 64.046036][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.054288][ T45] usb 4-1: SerialNumber: syz [ 64.063297][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 64.082811][ T45] usb-storage 4-1:1.0: USB Mass Storage device detected [ 64.103655][ T45] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 64.111865][ T45] scsi host1: usb-storage 4-1:1.0 [ 64.118233][ T36] audit: type=1400 audit(64.088:3900): avc: denied { setopt } for pid=1436 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.164614][ T36] audit: type=1400 audit(64.138:3901): avc: denied { read } for pid=1441 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.241522][ T1457] netlink: 'syz.2.374': attribute type 46 has an invalid length. [ 64.325844][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 64.611144][ T1412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.257023][ T1512] bpf: Bad value for 'gid' [ 65.268162][ T1512] fuseblk: Unknown parameter 'ÿÿÿÿ' [ 65.315246][ T1519] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 65.325872][ T1519] netlink: 'syz.4.394': attribute type 12 has an invalid length. [ 65.375349][ T45] usb 4-1: USB disconnect, device number 6 [ 65.893214][ T1554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 66.134109][ T1432] Bluetooth: hci0: command 0x1003 tx timeout [ 66.140185][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.044102][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.194087][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 67.200607][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 67.209035][ T9] usb 4-1: config 0 has no interface number 0 [ 67.216900][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 67.226237][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.234506][ T9] usb 4-1: Product: syz [ 67.238776][ T9] usb 4-1: Manufacturer: syz [ 67.243423][ T9] usb 4-1: SerialNumber: syz [ 67.249034][ T9] usb 4-1: config 0 descriptor?? [ 67.255498][ T9] smsc95xx v2.0.0 [ 67.658028][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 67.662657][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 67.662679][ T36] audit: type=1400 audit(67.628:3922): avc: denied { setopt } for pid=1646 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.669069][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.900686][ T36] audit: type=1326 audit(67.868:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1652 comm="syz.4.438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc81e38f6c9 code=0x0 [ 67.952240][ T36] audit: type=1400 audit(67.918:3924): avc: denied { mount } for pid=1652 comm="syz.4.438" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.524264][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 68.535489][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 68.877383][ T36] audit: type=1400 audit(68.848:3925): avc: denied { remove_name } for pid=1616 comm="syz.3.427" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.899587][ T36] audit: type=1400 audit(68.848:3926): avc: denied { unlink } for pid=1616 comm="syz.3.427" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.062421][ T1683] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 69.140452][ T36] audit: type=1400 audit(69.108:3927): avc: denied { mount } for pid=1699 comm="syz.2.453" name="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.337656][ T1706] netlink: 'syz.4.456': attribute type 12 has an invalid length. [ 69.553394][ T1725] 9pnet_fd: Insufficient options for proto=fd [ 69.816007][ T36] audit: type=1400 audit(69.788:3928): avc: denied { name_bind } for pid=1732 comm="syz.4.464" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.818918][ T1733] sock: sock_timestamping_bind_phc: sock not bind to device [ 69.912171][ T10] usb 4-1: USB disconnect, device number 7 [ 69.951195][ T36] audit: type=1400 audit(69.918:3929): avc: denied { map } for pid=1734 comm="syz.3.465" path="socket:[11299]" dev="sockfs" ino=11299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.034826][ T36] audit: type=1400 audit(70.008:3930): avc: denied { create } for pid=1753 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.114424][ T36] audit: type=1400 audit(70.088:3931): avc: denied { bind } for pid=1767 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.314103][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 70.465183][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.476147][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.485942][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 70.495044][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.503615][ T10] usb 4-1: config 0 descriptor?? [ 70.672892][ T1790] rust_binder: Error while translating object. [ 70.672949][ T1790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.679284][ T1790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 70.913892][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.930137][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.939140][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.946344][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.953176][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.960287][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.967288][ T10] sony 0003:054C:024B.0004: unknown main item tag 0x0 [ 70.981581][ T10] sony 0003:054C:024B.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 70.994090][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 71.003627][ T10] sony 0003:054C:024B.0004: failed to claim input [ 71.136450][ T10] usb 4-1: USB disconnect, device number 8 [ 71.171702][ T1819] futex_wake_op: syz.4.493 tries to shift op by 144; fix this program [ 71.181106][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 71.198876][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.214577][ T31] usb 1-1: config 0 descriptor?? [ 71.662486][ T31] kye 0003:0458:5015.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 71.681884][ T31] kye 0003:0458:5015.0005: hidraw0: USB HID v1.01 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 71.704284][ T31] kye 0003:0458:5015.0005: tablet-enabling feature report not found [ 71.712320][ T31] kye 0003:0458:5015.0005: tablet enabling failed [ 71.769139][ T1876] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.511'. [ 71.875343][ T1799] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 71.884168][ T1799] rust_binder: Write failure EINVAL in pid:308 [ 71.894605][ T9] usb 1-1: USB disconnect, device number 8 [ 71.959096][ T1942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1942 comm=syz.3.514 [ 71.972473][ T1942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=1942 comm=syz.3.514 [ 71.987530][ T1942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1942 comm=syz.3.514 [ 72.000388][ T1942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1942 comm=syz.3.514 [ 72.579564][ T1981] rust_binder: Write failure EFAULT in pid:315 [ 72.619939][ T1994] netlink: 80 bytes leftover after parsing attributes in process `syz.2.533'. [ 72.667365][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 72.667383][ T36] audit: type=1400 audit(2000000001.240:3940): avc: denied { search } for pid=1998 comm="syz.2.537" name="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.698203][ T2005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 72.714112][ T2005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 72.803945][ T2023] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.812441][ T2023] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 72.822050][ T2023] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.830537][ T2023] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 72.965995][ T2032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:327 [ 73.033491][ T2042] rust_binder: Error while translating object. [ 73.051800][ T36] audit: type=1400 audit(2000000001.620:3941): avc: denied { getopt } for pid=2043 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.064899][ T2042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.102172][ T2042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 73.201877][ T2058] rust_binder: Write failure EINVAL in pid:334 [ 73.212116][ T2058] incfs: Error accessing: ./file0. [ 73.223746][ T2058] incfs: mount failed -20 [ 73.338470][ T2070] 9pnet: Could not find request transport: xen [ 73.346458][ T2070] binder: Bad value for 'max' [ 73.346584][ T2071] 9pnet_fd: Insufficient options for proto=fd [ 73.382597][ T2078] 9pnet_fd: p9_fd_create_tcp (2078): problem connecting socket to 127.0.0.1 [ 73.431934][ T36] audit: type=1400 audit(2000000002.000:3942): avc: denied { execstack } for pid=2087 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.443348][ T2090] rust_binder: Write failure EFAULT in pid:342 [ 73.455356][ T2090] rust_binder: Write failure EFAULT in pid:342 [ 73.676576][ T2114] rust_binder: Write failure EFAULT in pid:351 [ 73.701262][ T2117] rust_binder: Write failure EINVAL in pid:353 [ 73.954098][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.977278][ T2135] 9pnet_fd: Insufficient options for proto=fd [ 74.114068][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 74.129330][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.143164][ T9] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.156353][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.164755][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 74.173939][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.182211][ T9] usb 1-1: Product: syz [ 74.186722][ T9] usb 1-1: Manufacturer: syz [ 74.191395][ T9] usb 1-1: SerialNumber: syz [ 74.249011][ T36] audit: type=1400 audit(2000000002.820:3943): avc: denied { watch } for pid=2148 comm="syz.2.586" path="/150" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.251303][ T2153] overlayfs: failed to resolve 'metacopy=off': -2 [ 74.401900][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 74.407927][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 74.422764][ T9] usb 1-1: USB disconnect, device number 9 [ 74.665423][ T2195] 9pnet_fd: Insufficient options for proto=fd [ 74.671737][ T2195] 9pnet_fd: Insufficient options for proto=fd [ 74.805156][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 75.152072][ T2235] rust_binder: Read failure Err(EAGAIN) in pid:357 [ 75.424196][ T463] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 75.441750][ T2251] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 75.478372][ T36] audit: type=1400 audit(2000000004.050:3944): avc: denied { setattr } for pid=2254 comm="syz.3.624" name="NETLINK" dev="sockfs" ino=11039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.536912][ T36] audit: type=1400 audit(2000000004.110:3945): avc: denied { audit_write } for pid=2269 comm="syz.3.630" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.558152][ T36] audit: type=1400 audit(2000000004.120:3946): avc: denied { getopt } for pid=2273 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.580155][ T36] audit: type=1107 audit(2000000004.130:3947): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ÌJx"1 [ 75.580155][ T36] YÞÔå”­Nÿ@«tÀíÅô'ƒBå‚àÓœ7Üê§òwArÆN [ 75.580155][ T36] iÏP²‡'ÿƒ ‡ÎÑèiê+ñ³L[xqwòL’•>ƒÛ(Út‹:·WÍÉ¿(4jôæ5ëø' [ 75.604527][ T463] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 75.606560][ T36] audit: type=1400 audit(2000000004.170:3948): avc: denied { write } for pid=2276 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.615956][ T463] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 75.633777][ T36] audit: type=1400 audit(2000000004.170:3949): avc: denied { ioctl } for pid=2276 comm="syz.3.634" path="socket:[11999]" dev="sockfs" ino=11999 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.658227][ T463] usb 1-1: can't read configurations, error -61 [ 75.666919][ T2278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 75.752484][ T2296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 75.814387][ T463] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 75.846949][ T2327] netlink: 'syz.2.649': attribute type 5 has an invalid length. [ 75.854754][ T2327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 75.971926][ T2338] netlink: 104 bytes leftover after parsing attributes in process `syz.3.653'. [ 75.987881][ T463] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 76.001094][ T463] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 76.013780][ T463] usb 1-1: can't read configurations, error -61 [ 76.021877][ T463] usb usb1-port1: attempt power cycle [ 76.364140][ T463] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 76.384799][ T463] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 76.393623][ T463] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 76.401585][ T463] usb 1-1: can't read configurations, error -61 [ 76.534329][ T463] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 76.554828][ T463] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 76.563557][ T463] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 76.571207][ T463] usb 1-1: can't read configurations, error -61 [ 76.577645][ T463] usb usb1-port1: unable to enumerate USB device [ 76.746917][ T2384] cgroup: fork rejected by pids controller in /syz2 [ 76.766910][ T2414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.672'. [ 77.098897][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.107971][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.117108][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.126129][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.135160][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.144234][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.153241][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.162295][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.171366][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 77.180477][ T2440] netlink: 240 bytes leftover after parsing attributes in process `syz.4.679'. [ 78.098490][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 78.098508][ T36] audit: type=1326 audit(2000000006.670:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.4.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81e38f6c9 code=0x7ffe0000 [ 78.291690][ T2488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 78.291727][ T2488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:368 [ 78.474373][ T2501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 78.653373][ T36] audit: type=1400 audit(2000000007.220:3955): avc: denied { map } for pid=2508 comm="syz.0.705" path="socket:[12465]" dev="sockfs" ino=12465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.276836][ T36] audit: type=1400 audit(2000000007.850:3956): avc: denied { mounton } for pid=2549 comm="syz.4.719" path="/188/file2" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.282837][ T2550] overlayfs: failed to clone upperpath [ 79.390309][ T2565] rust_binder: 390: no such ref 2 [ 79.414526][ T2572] overlay: ./file0 is not a directory [ 79.513100][ T36] audit: type=1400 audit(2000000008.080:3957): avc: denied { shutdown } for pid=2585 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.535376][ T36] audit: type=1400 audit(2000000008.080:3958): avc: denied { bind } for pid=2585 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.570591][ T36] audit: type=1400 audit(2000000008.080:3959): avc: denied { name_bind } for pid=2585 comm="syz.2.732" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.593574][ T36] audit: type=1400 audit(2000000008.080:3960): avc: denied { node_bind } for pid=2585 comm="syz.2.732" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.743952][ T36] audit: type=1400 audit(2000000008.310:3961): avc: denied { map } for pid=2599 comm="syz.0.736" path="socket:[12680]" dev="sockfs" ino=12680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.767634][ T36] audit: type=1400 audit(2000000008.310:3962): avc: denied { accept } for pid=2599 comm="syz.0.736" path="socket:[12680]" dev="sockfs" ino=12680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.814878][ T2604] 9pnet_fd: Insufficient options for proto=fd [ 79.897305][ T2612] overlayfs: failed to clone lowerpath [ 80.055826][ T2639] 9pnet_fd: p9_fd_create_unix (2639): problem connecting socket: ./file0: -111 [ 80.115326][ T36] audit: type=1400 audit(2000000008.690:3963): avc: denied { write } for pid=2647 comm="syz.0.754" name="fib_triestat" dev="proc" ino=4026532600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.123836][ T2649] netlink: 'syz.3.755': attribute type 6 has an invalid length. [ 80.186519][ T2649] netlink: 'syz.3.755': attribute type 4 has an invalid length. [ 80.208386][ T2649] netlink: 'syz.3.755': attribute type 6 has an invalid length. [ 80.224941][ T2649] netlink: 'syz.3.755': attribute type 13 has an invalid length. [ 80.232859][ T2649] netlink: 'syz.3.755': attribute type 15 has an invalid length. [ 80.240937][ T2649] netlink: 'syz.3.755': attribute type 19 has an invalid length. [ 80.358412][ T2666] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.365549][ T2666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.779315][ T2705] overlayfs: failed to clone upperpath [ 81.333583][ T2749] SELinux: failed to load policy [ 81.566742][ T2779] netlink: 'syz.2.796': attribute type 30 has an invalid length. [ 82.298318][ T2798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 82.368546][ T2804] binder: Bad value for 'stats' [ 82.403118][ T2807] __nla_validate_parse: 45 callbacks suppressed [ 82.403146][ T2807] netlink: 68 bytes leftover after parsing attributes in process `syz.0.809'. [ 82.419232][ T2807] netlink: 'syz.0.809': attribute type 12 has an invalid length. [ 82.427688][ T2807] rust_binder: Write failure EFAULT in pid:445 [ 82.481372][ T2813] rust_binder: 450: no such ref 1 [ 82.500625][ T2813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 82.500922][ T2813] rust_binder: 450: no such ref 2 [ 82.708497][ T2817] netlink: 'syz.3.813': attribute type 27 has an invalid length. [ 82.774117][ T453] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 82.945113][ T453] usb 1-1: config 0 has no interfaces? [ 82.955300][ T453] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 82.971500][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.988799][ T453] usb 1-1: SerialNumber: syz [ 82.995474][ T453] usb 1-1: config 0 descriptor?? [ 83.208098][ T463] usb 1-1: USB disconnect, device number 14 [ 83.742763][ T2841] rust_binder: Write failure EFAULT in pid:454 [ 83.777827][ T2846] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 83.806931][ T2849] netlink: 5 bytes leftover after parsing attributes in process `syz.0.822'. [ 83.824245][ T2849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.872673][ T2849] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 84.611653][ T2899] syzkaller0: entered allmulticast mode [ 84.621983][ T2899] syzkaller0: entered promiscuous mode [ 84.631490][ T2899] syzkaller0 (unregistering): left promiscuous mode [ 84.638467][ T2899] syzkaller0 (unregistering): left allmulticast mode [ 84.675033][ T2905] overlayfs: failed to clone upperpath [ 84.721755][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 84.721774][ T36] audit: type=1400 audit(2000000013.290:3992): avc: denied { create } for pid=2915 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.892159][ T2952] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 84.893572][ T2950] overlayfs: failed to clone upperpath [ 84.910026][ T36] audit: type=1400 audit(2000000013.490:3993): avc: denied { relabelto } for pid=2951 comm="syz.3.859" name="cgroup" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 84.934425][ T2956] overlayfs: failed to clone upperpath [ 84.938621][ T2952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 84.951106][ T36] audit: type=1400 audit(2000000013.490:3994): avc: denied { associate } for pid=2951 comm="syz.3.859" name="cgroup" dev="tmpfs" ino=1053 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 84.984643][ T36] audit: type=1400 audit(2000000013.540:3995): avc: denied { unlink } for pid=295 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 85.154059][ T36] audit: type=1400 audit(2000000013.720:3996): avc: denied { bind } for pid=2990 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.167575][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 85.193358][ T36] audit: type=1400 audit(2000000013.720:3997): avc: denied { name_bind } for pid=2990 comm="syz.3.871" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 85.216084][ T36] audit: type=1400 audit(2000000013.720:3998): avc: denied { node_bind } for pid=2990 comm="syz.3.871" saddr=fc01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 85.245239][ T3007] overlayfs: failed to clone upperpath [ 85.293433][ T3019] overlayfs: failed to clone lowerpath [ 85.321763][ T36] audit: type=1400 audit(2000000013.890:3999): avc: denied { read } for pid=3022 comm="syz.4.881" name="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.343882][ T36] audit: type=1400 audit(2000000013.890:4000): avc: denied { open } for pid=3022 comm="syz.4.881" path="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.386246][ T36] audit: type=1400 audit(2000000013.960:4001): avc: denied { create } for pid=3029 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.256280][ T3093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.256321][ T3093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 86.322769][ T3102] rust_binder: Write failure EFAULT in pid:497 [ 86.575212][ T3121] cgroup: Invalid name [ 86.687886][ T3131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.705437][ T3130] rust_binder: Error in use_page_slow: ESRCH [ 86.705478][ T3130] rust_binder: use_range failure ESRCH [ 86.734092][ T3130] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 86.739620][ T3130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.778721][ T3130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:509 [ 86.858288][ T3136] netlink: 'syz.0.918': attribute type 27 has an invalid length. [ 86.928579][ T3146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 87.026056][ T3164] netlink: 25 bytes leftover after parsing attributes in process `syz.0.927'. [ 87.843443][ T3204] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.130314][ T3251] netlink: 104 bytes leftover after parsing attributes in process `syz.3.952'. [ 88.155459][ T3257] netlink: 'syz.3.955': attribute type 2 has an invalid length. [ 88.379118][ T3284] fuse: Unknown parameter 'rootmode0000000000004«ý0000' [ 88.505633][ T1934] tipc: Subscription rejected, illegal request [ 88.578187][ T3291] netlink: 25 bytes leftover after parsing attributes in process `syz.4.966'. [ 88.588935][ T3291] netlink: 'syz.4.966': attribute type 4 has an invalid length. [ 88.769714][ T3299] veth0_to_batadv: entered allmulticast mode [ 88.776790][ T3299] veth0_to_batadv: left allmulticast mode [ 88.787251][ T3299] capability: warning: `syz.3.969' uses 32-bit capabilities (legacy support in use) [ 88.824209][ T3309] rust_binder: Error while translating object. [ 88.824253][ T3309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 88.830599][ T3309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:543 [ 88.876461][ T3317] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 89.017868][ T3332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 89.264082][ T453] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 89.404396][ T453] usb 1-1: device descriptor read/64, error -71 [ 89.419124][ T3348] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 89.715870][ T453] usb 1-1: device descriptor read/64, error -71 [ 89.954079][ T453] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 90.084098][ T453] usb 1-1: device descriptor read/64, error -71 [ 90.175672][ T3368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.993'. [ 90.264355][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 90.264373][ T36] audit: type=1400 audit(2000000018.840:4008): avc: denied { accept } for pid=3375 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.324089][ T453] usb 1-1: device descriptor read/64, error -71 [ 90.354890][ T3396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1002'. [ 90.430512][ T3418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 90.434255][ T453] usb usb1-port1: attempt power cycle [ 90.492424][ T3430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 90.794086][ T453] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 90.815172][ T453] usb 1-1: device descriptor read/8, error -71 [ 90.945601][ T453] usb 1-1: device descriptor read/8, error -71 [ 90.993551][ T36] audit: type=1400 audit(2000000019.560:4009): avc: denied { create } for pid=3454 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 91.042377][ T3461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=3461 comm=syz.4.1025 [ 91.184111][ T453] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 91.205207][ T453] usb 1-1: device descriptor read/8, error -71 [ 91.335047][ T453] usb 1-1: device descriptor read/8, error -71 [ 91.444175][ T453] usb usb1-port1: unable to enumerate USB device [ 92.047813][ T3492] binder: Unknown parameter '00000000000000000000003' [ 92.091654][ T36] audit: type=1326 audit(2000000020.660:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.0.1037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf98b8f6c9 code=0x7f7f0000 [ 92.289906][ T3507] overlayfs: failed to clone upperpath [ 92.548885][ T36] audit: type=1400 audit(2000000021.120:4011): avc: denied { lock } for pid=3527 comm="syz.2.1050" path="socket:[15299]" dev="sockfs" ino=15299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 92.579681][ T3533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3533 comm=syz.2.1051 [ 92.620472][ T36] audit: type=1400 audit(2000000021.190:4012): avc: denied { map } for pid=3536 comm="syz.0.1053" path="socket:[16250]" dev="sockfs" ino=16250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.659995][ T36] audit: type=1400 audit(2000000021.230:4013): avc: denied { map } for pid=3542 comm="syz.0.1055" path="socket:[16255]" dev="sockfs" ino=16255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.816957][ T36] audit: type=1400 audit(2000000021.390:4014): avc: denied { create } for pid=3571 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.858026][ T36] audit: type=1400 audit(2000000021.420:4015): avc: denied { mounton } for pid=3571 comm="syz.4.1064" path="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.838691][ T3636] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 93.847255][ T36] audit: type=1400 audit(2000000022.430:4016): avc: denied { watch watch_reads } for pid=3635 comm="syz.0.1085" path="/201/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.354446][ T36] audit: type=1400 audit(2000000022.930:4017): avc: denied { remount } for pid=3676 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 94.426146][ T3688] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1101'. [ 95.458364][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.465552][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.472648][ T3764] bridge_slave_0: entered allmulticast mode [ 95.478990][ T3764] bridge_slave_0: entered promiscuous mode [ 95.485588][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.492625][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.499781][ T3764] bridge_slave_1: entered allmulticast mode [ 95.506118][ T3764] bridge_slave_1: entered promiscuous mode [ 95.556264][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.563354][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.570750][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.577857][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.605148][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.612820][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.624564][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.631637][ T1923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.639364][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.646476][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.675340][ T3764] veth0_vlan: entered promiscuous mode [ 95.687581][ T3764] veth1_macvtap: entered promiscuous mode [ 95.812407][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1137'. [ 95.953112][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 95.953131][ T36] audit: type=1400 audit(2000000024.520:4020): avc: denied { create } for pid=3796 comm="syz.2.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 96.156508][ T3818] fuse: Bad value for 'group_id' [ 96.161494][ T3818] fuse: Bad value for 'group_id' [ 96.296453][ T3826] overlay: ./file0 is not a directory [ 96.327351][ T36] audit: type=1400 audit(2000000024.900:4021): avc: denied { create } for pid=3831 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.461341][ T36] audit: type=1326 audit(2000000025.030:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81e38f6c9 code=0x7fc00000 [ 96.484905][ T36] audit: type=1326 audit(2000000025.030:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc81e38f6c9 code=0x7fc00000 [ 96.538397][ T3846] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1157'. [ 96.574971][ T3839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 96.584231][ T3839] tipc: Enabling of bearer rejected, already enabled [ 96.616801][ T3856] overlayfs: failed to clone lowerpath [ 96.846710][ T3871] rust_binder: Error while translating object. [ 96.846743][ T3871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.853069][ T3871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 96.941662][ T3875] rust_binder: 20: no such ref 3 [ 96.955751][ T3875] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 96.962962][ T3875] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 96.970073][ T3875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 97.230619][ T3924] futex_wake_op: syz.3.1185 tries to shift op by -1; fix this program [ 97.249167][ T3924] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 97.259153][ T3924] tmpfs: Unsupported parameter 'mpol' [ 97.368841][ T3945] 9pnet_fd: Insufficient options for proto=fd [ 97.409623][ T3954] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1195'. [ 97.418840][ T453] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 97.554122][ T453] usb 6-1: device descriptor read/64, error -71 [ 97.804104][ T453] usb 6-1: device descriptor read/64, error -71 [ 97.878012][ T4001] overlayfs: failed to clone upperpath [ 97.986654][ T36] audit: type=1400 audit(2000000026.560:4024): avc: denied { mounton } for pid=4000 comm="syz.2.1211" path="/file0/file0" dev="incremental-fs" ino=10687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.010833][ T36] audit: type=1400 audit(2000000026.560:4025): avc: denied { shutdown } for pid=4016 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.054090][ T453] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 98.133913][ T4025] netlink: 'syz.3.1217': attribute type 46 has an invalid length. [ 98.184845][ T453] usb 6-1: device descriptor read/64, error -71 [ 98.211566][ T4031] 9pnet_fd: Insufficient options for proto=fd [ 98.424085][ T453] usb 6-1: device descriptor read/64, error -71 [ 98.534303][ T453] usb usb6-port1: attempt power cycle [ 98.676334][ T4082] netlink: 'syz.4.1240': attribute type 19 has an invalid length. [ 98.698522][ T36] audit: type=1326 audit(2000000027.270:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81e38f6c9 code=0x0 [ 98.866311][ T4102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1249'. [ 98.884071][ T453] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 98.908517][ T4107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4107 comm=syz.3.1250 [ 98.922356][ T453] usb 6-1: device descriptor read/8, error -71 [ 98.942980][ T36] audit: type=1400 audit(2000000027.510:4027): avc: denied { accept } for pid=4108 comm="syz.3.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 98.995133][ T4111] netlink: 'syz.3.1252': attribute type 13 has an invalid length. [ 99.037338][ T36] audit: type=1400 audit(2000000027.610:4028): avc: denied { create } for pid=4115 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 99.058004][ T453] usb 6-1: device descriptor read/8, error -71 [ 99.304106][ T453] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 99.341807][ T453] usb 6-1: device descriptor read/8, error -71 [ 99.475072][ T453] usb 6-1: device descriptor read/8, error -71 [ 99.584174][ T453] usb usb6-port1: unable to enumerate USB device [ 99.623822][ T36] audit: type=1400 audit(2000000028.190:4029): avc: denied { map } for pid=4157 comm="syz.3.1266" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.466541][ T4188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4188 comm=syz.3.1275 [ 100.772939][ T4205] syz.5.1280 (4205): attempted to duplicate a private mapping with mremap. This is not supported. [ 101.071142][ T36] audit: type=1400 audit(2000000029.640:4030): avc: denied { execheap } for pid=4227 comm="syz.3.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.174286][ T453] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.304169][ T453] usb 6-1: device descriptor read/64, error -71 [ 101.412773][ T4243] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 101.437274][ T4248] tipc: Enabling of bearer rejected, failed to enable media [ 101.448667][ T4248] can: request_module (can-proto-4) failed. [ 101.554071][ T453] usb 6-1: device descriptor read/64, error -71 [ 101.814101][ T453] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 101.944112][ T453] usb 6-1: device descriptor read/64, error -71 [ 102.011690][ T4328] overlayfs: failed to clone lowerpath [ 102.011690][ T4327] overlayfs: failed to clone lowerpath [ 102.023530][ T4328] overlayfs: failed to clone lowerpath [ 102.029721][ T4332] overlayfs: failed to clone lowerpath [ 102.059995][ T4336] overlayfs: failed to clone upperpath [ 102.082048][ T4343] 9pnet_fd: Insufficient options for proto=fd [ 102.118902][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 102.139800][ T4353] overlayfs: missing 'lowerdir' [ 102.184075][ T453] usb 6-1: device descriptor read/64, error -71 [ 102.271388][ T36] audit: type=1326 audit(2000000030.840:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.2.1341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa268f8f6c9 code=0x0 [ 102.298644][ T36] audit: type=1400 audit(2000000030.850:4032): avc: denied { getopt } for pid=4369 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.304206][ T453] usb usb6-port1: attempt power cycle [ 102.320590][ T4377] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 102.483681][ T4409] 9pnet_fd: p9_fd_create_tcp (4409): problem binding to privport [ 102.501246][ T36] audit: type=1326 audit(2000000031.077:4033): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.1353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b338f6c9 code=0x0 [ 102.654180][ T453] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.675261][ T453] usb 6-1: device descriptor read/8, error -71 [ 102.805128][ T453] usb 6-1: device descriptor read/8, error -71 [ 103.014080][ T4420] netlink: 'syz.4.1354': attribute type 4 has an invalid length. [ 103.044148][ T453] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 103.065191][ T453] usb 6-1: device descriptor read/8, error -71 [ 103.112136][ T36] audit: type=1400 audit(2000000031.687:4034): avc: denied { watch watch_reads } for pid=4428 comm="syz.2.1357" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 103.205165][ T453] usb 6-1: device descriptor read/8, error -71 [ 103.237087][ T4433] fuse: Bad value for 'fd' [ 103.314156][ T453] usb usb6-port1: unable to enumerate USB device [ 103.334173][ T4435] tmpfs: Unsupported parameter 'mpol' [ 103.581223][ T36] audit: type=1400 audit(2000000032.157:4035): avc: denied { execute } for pid=4450 comm="syz.3.1364" path="pipe:[19702]" dev="pipefs" ino=19702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 103.920034][ T36] audit: type=1400 audit(2000000032.497:4036): avc: denied { setattr } for pid=4458 comm="syz.4.1366" name="secretmem" dev="secretmem" ino=19714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.986359][ T4475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 104.003002][ T4482] overlayfs: failed to clone lowerpath [ 104.024074][ T4487] overlay: ./bus is not a directory [ 104.024709][ T4488] netlink: 'syz.5.1374': attribute type 4 has an invalid length. [ 104.037341][ T4488] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1374'. [ 104.047620][ T4488] netlink: 'syz.5.1374': attribute type 4 has an invalid length. [ 104.055589][ T4488] netlink: 'syz.5.1374': attribute type 5 has an invalid length. [ 104.063412][ T4488] netlink: 'syz.5.1374': attribute type 1 has an invalid length. [ 104.071959][ T4488] __vm_enough_memory: pid: 4488, comm: syz.5.1374, bytes: 18014402804453376 not enough memory for the allocation [ 104.138850][ T4504] fuse: Bad value for 'fd' [ 104.268865][ T4500] rust_binder: 57: no such ref 0 [ 104.274075][ T4500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.282265][ T4500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 104.289808][ T4500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 104.299063][ T4500] rust_binder: 57: no such ref 0 [ 104.351287][ T4530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.351319][ T4530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 104.618379][ T4575] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1405'. [ 104.649077][ T4580] FAT-fs (rnullb0): bogus number of reserved sectors [ 104.655817][ T4580] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 104.726993][ T4582] rust_binder: 77: no such ref 3 [ 104.732002][ T4582] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 104.739391][ T4582] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 104.746640][ T4582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 104.907554][ T36] audit: type=1326 audit(2000000033.487:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.3.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b338f6c9 code=0x0 [ 105.171834][ T4620] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1419'. [ 105.285633][ T4622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4622 comm=syz.2.1420 [ 105.285913][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1420'. [ 105.380648][ T36] audit: type=1326 audit(2000000033.957:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc81e38f6c9 code=0x0 [ 105.433081][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 106.332889][ T36] audit: type=1326 audit(2000000034.907:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81e38f6c9 code=0x7fc00000 [ 106.563111][ T4692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 106.572436][ T4692] tipc: Enabling of bearer rejected, already enabled [ 106.665304][ T36] audit: type=1400 audit(2000000035.247:4040): avc: denied { remount } for pid=4700 comm="syz.5.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.686868][ T36] audit: type=1400 audit(2000000035.267:4041): avc: denied { unmount } for pid=3764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.085494][ T4768] fuse: Bad value for 'group_id' [ 107.090466][ T4768] fuse: Bad value for 'group_id' [ 107.161855][ T4773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=4773 comm=syz.4.1471 [ 107.243325][ T4788] fuse: Unknown parameter 'Zroup_id' [ 107.249025][ T4788] 9pnet: Could not find request transport: un [ 107.395091][ T4802] netlink: 'syz.3.1483': attribute type 27 has an invalid length. [ 107.413155][ T36] audit: type=1400 audit(2000000035.987:4042): avc: denied { mount } for pid=4791 comm="syz.4.1478" name="/" dev="pstore" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 107.417356][ T4802] bridge_slave_1: left allmulticast mode [ 107.480828][ T4811] fuse: Unknown parameter 'f´ïÇÏàÂT®yw‚d¤0xffffffffffffffff' [ 107.494337][ T36] audit: type=1326 audit(2000000036.067:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.3.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04b338f6c9 code=0x0 [ 108.341803][ T4856] 9pnet_fd: Insufficient options for proto=fd [ 108.348108][ T36] audit: type=1400 audit(2000000036.927:4044): avc: denied { bind } for pid=4851 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.447867][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 108.504610][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 108.560345][ T4903] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1516'. [ 108.841217][ T4920] netlink: 'syz.2.1523': attribute type 12 has an invalid length. [ 109.161863][ T4935] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1530'. [ 109.174176][ T36] audit: type=1400 audit(2000000037.747:4045): avc: denied { read } for pid=4934 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.222931][ T4936] incfs: Options parsing error. -22 [ 109.230709][ T4936] incfs: mount failed -22 [ 109.663376][ T4945] fuse: Bad value for 'fd' [ 109.713562][ T4956] incfs: Error accessing: ./file0. [ 109.718786][ T4956] incfs: mount failed -20 [ 109.724304][ T36] audit: type=1400 audit(2000000038.307:4046): avc: denied { open } for pid=4955 comm="syz.2.1538" path="/file0/file0" dev="incremental-fs" ino=10687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.753422][ T36] audit: type=1400 audit(2000000038.307:4047): avc: denied { read } for pid=4955 comm="syz.2.1538" name="file0" dev="incremental-fs" ino=10687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.070685][ T36] audit: type=1400 audit(2000000038.647:4048): avc: denied { setattr } for pid=4979 comm="syz.3.1546" path="/" dev="configfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.115564][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1548'. [ 110.993573][ T5051] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46079 sclass=netlink_xfrm_socket pid=5051 comm=syz.3.1572 [ 111.304896][ T5073] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1578'. [ 112.071801][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1596'. [ 112.091633][ T5119] fuse: Bad value for 'rootmode' [ 112.107306][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 112.107326][ T36] audit: type=1400 audit(2000000040.687:4053): avc: denied { create } for pid=5120 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.192660][ T5129] syz.5.1602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 112.207511][ T5129] CPU: 1 UID: 0 PID: 5129 Comm: syz.5.1602 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 112.207535][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.207551][ T5129] Call Trace: [ 112.207556][ T5129] [ 112.207564][ T5129] __dump_stack+0x21/0x30 [ 112.207597][ T5129] dump_stack_lvl+0x10c/0x190 [ 112.207618][ T5129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.207638][ T5129] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 112.207660][ T5129] dump_stack+0x19/0x20 [ 112.207679][ T5129] warn_alloc+0x1bc/0x2a0 [ 112.207700][ T5129] ? __cfi_warn_alloc+0x10/0x10 [ 112.207718][ T5129] ? kasan_save_track+0x4f/0x80 [ 112.207734][ T5129] ? __kasan_kmalloc+0x96/0xb0 [ 112.207750][ T5129] ? __kmalloc_cache_noprof+0x24c/0x490 [ 112.207764][ T5129] ? do_sock_setsockopt+0x26d/0x400 [ 112.207786][ T5129] ? __x64_sys_setsockopt+0x1b8/0x250 [ 112.207822][ T5129] ? x64_sys_call+0x2adc/0x2ee0 [ 112.207862][ T5129] ? do_syscall_64+0x58/0xf0 [ 112.207883][ T5129] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.207902][ T5129] __vmalloc_node_range_noprof+0x135/0x1420 [ 112.207930][ T5129] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 112.207954][ T5129] ? kasan_save_alloc_info+0x40/0x50 [ 112.207976][ T5129] ? __kasan_kmalloc+0x96/0xb0 [ 112.207994][ T5129] ? __kmalloc_cache_noprof+0x24c/0x490 [ 112.208008][ T5129] ? futex_setup_timer+0xb4/0xd0 [ 112.208023][ T5129] vmalloc_user_noprof+0x77/0x90 [ 112.208045][ T5129] ? xskq_create+0xdb/0x2a0 [ 112.208079][ T5129] xskq_create+0xdb/0x2a0 [ 112.208103][ T5129] xsk_init_queue+0xb6/0x120 [ 112.208125][ T5129] xsk_setsockopt+0x43f/0x6f0 [ 112.208147][ T5129] ? __cfi_xsk_setsockopt+0x10/0x10 [ 112.208169][ T5129] ? do_futex+0x309/0x500 [ 112.208185][ T5129] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 112.208206][ T5129] ? security_socket_setsockopt+0x33/0xd0 [ 112.208221][ T5129] ? __cfi_xsk_setsockopt+0x10/0x10 [ 112.208243][ T5129] do_sock_setsockopt+0x26d/0x400 [ 112.208265][ T5129] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 112.208290][ T5129] __x64_sys_setsockopt+0x1b8/0x250 [ 112.208314][ T5129] x64_sys_call+0x2adc/0x2ee0 [ 112.208337][ T5129] do_syscall_64+0x58/0xf0 [ 112.208357][ T5129] ? clear_bhb_loop+0x50/0xa0 [ 112.208374][ T5129] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.208391][ T5129] RIP: 0033:0x7f7c6e58f6c9 [ 112.208408][ T5129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.208422][ T5129] RSP: 002b:00007f7c6f413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.208438][ T5129] RAX: ffffffffffffffda RBX: 00007f7c6e7e5fa0 RCX: 00007f7c6e58f6c9 [ 112.208451][ T5129] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 112.208461][ T5129] RBP: 00007f7c6e611f91 R08: 0000000000000004 R09: 0000000000000000 [ 112.208472][ T5129] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.208482][ T5129] R13: 00007f7c6e7e6038 R14: 00007f7c6e7e5fa0 R15: 00007ffd9d2fa128 [ 112.208496][ T5129] [ 112.208506][ T5129] Mem-Info: [ 112.507566][ T5129] active_anon:14374 inactive_anon:769 isolated_anon:0 [ 112.507566][ T5129] active_file:11807 inactive_file:12522 isolated_file:0 [ 112.507566][ T5129] unevictable:15413 dirty:113 writeback:0 [ 112.507566][ T5129] slab_reclaimable:6356 slab_unreclaimable:72850 [ 112.507566][ T5129] mapped:23810 shmem:4592 pagetables:1107 [ 112.507566][ T5129] sec_pagetables:0 bounce:0 [ 112.507566][ T5129] kernel_misc_reclaimable:0 [ 112.507566][ T5129] free:1481215 free_pcp:10911 free_cma:0 [ 112.553276][ T5129] Node 0 active_anon:57524kB inactive_anon:3076kB active_file:47228kB inactive_file:50088kB unevictable:61652kB isolated(anon):0kB isolated(file):0kB mapped:95240kB dirty:452kB writeback:0kB shmem:18368kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7776kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no [ 112.586208][ T5129] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 112.616233][ T5129] lowmem_reserve[]: 0 3921 3921 [ 112.621134][ T5129] Normal free:2963948kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57568kB inactive_anon:3076kB active_file:47228kB inactive_file:50088kB unevictable:61652kB writepending:452kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:38460kB local_pcp:35992kB free_cma:0kB [ 112.653205][ T5129] lowmem_reserve[]: 0 0 0 [ 112.657618][ T5129] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 112.673182][ T5129] Normal: 3*4kB (UME) 10*8kB (ME) 45*16kB (ME) 168*32kB (UM) 223*64kB (ME) 66*128kB (ME) 37*256kB (UME) 28*512kB (ME) 51*1024kB (UME) 26*2048kB (UM) 685*4096kB (UM) = 2963948kB [ 112.690887][ T5129] 48148 total pagecache pages [ 112.695859][ T5129] 3818 pages in swap cache [ 112.700303][ T5129] Free swap = 109228kB [ 112.704507][ T5129] Total swap = 124996kB [ 112.708675][ T5129] 2097051 pages RAM [ 112.712474][ T5129] 0 pages HighMem/MovableOnly [ 112.717172][ T5129] 351537 pages reserved [ 112.721331][ T5129] 0 pages cma reserved [ 112.727499][ T5129] Memory allocations: [ 112.731503][ T5129] 0 B 0 init/main.c:1370 func:do_initcalls [ 112.738736][ T5129] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 112.746854][ T5129] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 112.754517][ T5129] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 112.762431][ T5129] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 112.770366][ T5129] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 112.779091][ T5129] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 112.787015][ T5129] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 112.794961][ T5129] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 112.802856][ T5129] 0 B 0 init/initramfs.c:101 func:find_link [ 112.885803][ T36] audit: type=1400 audit(2000000041.467:4054): avc: denied { mounton } for pid=5151 comm="syz.2.1610" path="/424/file0" dev="tmpfs" ino=2296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.447503][ T5196] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.454890][ T5197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 113.469060][ T5196] overlayfs: failed to set xattr on upper [ 113.474859][ T5196] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.482038][ T5197] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 113.496420][ T5196] overlayfs: ...falling back to uuid=null. [ 113.502841][ T5197] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.510655][ T5197] overlayfs: failed to set xattr on upper [ 113.516825][ T5197] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.524176][ T5197] overlayfs: ...falling back to uuid=null. [ 113.678061][ T5211] netlink: 'syz.2.1629': attribute type 11 has an invalid length. [ 113.823669][ T5219] 9pnet_fd: Insufficient options for proto=fd [ 113.927283][ T36] audit: type=1326 audit(2000000042.507:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.2.1640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x0 [ 114.081768][ T5267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5267 comm=syz.4.1647 [ 114.094654][ T5267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1647'. [ 114.157238][ T5284] overlayfs: failed to clone lowerpath [ 114.215384][ T5297] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1659'. [ 114.689704][ T36] audit: type=1400 audit(2000000043.267:4056): avc: denied { read } for pid=5306 comm="syz.3.1662" name="file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.754320][ T36] audit: type=1400 audit(2000000043.337:4057): avc: denied { execute } for pid=5317 comm="syz.3.1666" path="/dev/rnullb0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.808259][ T5327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1669'. [ 114.817894][ T36] audit: type=1400 audit(2000000043.397:4058): avc: denied { mounton } for pid=5326 comm="syz.2.1669" path="/436/file0" dev="tmpfs" ino=2361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.818035][ T5327] fuse: Unknown parameter 'ÿ0x0000000000000006' [ 114.850040][ T36] audit: type=1400 audit(2000000043.427:4059): avc: denied { read } for pid=5326 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.566342][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 115.575504][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 115.721594][ T5442] fuse: Unknown parameter 'jþ' [ 116.061761][ T5484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1719'. [ 116.239236][ T5502] wlan0: Can't lookup blockdev [ 116.366350][ T5518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1733'. [ 116.375767][ T5518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5518 comm=syz.2.1733 [ 116.390435][ T5518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5518 comm=syz.2.1733 [ 116.466504][ T5531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1737'. [ 116.806399][ T5559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=261 sclass=netlink_audit_socket pid=5559 comm=syz.5.1748 [ 116.926082][ T5586] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 117.066823][ T5600] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1762'. [ 117.092107][ T5605] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 117.131383][ T5605] overlayfs: missing 'lowerdir' [ 117.190305][ T36] audit: type=1400 audit(2000000045.767:4060): avc: denied { execute_no_trans } for pid=5611 comm="syz.3.1766" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.194141][ T5614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=5614 comm=syz.4.1767 [ 117.807394][ T5676] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1786'. [ 118.352584][ T5701] overlayfs: failed to clone lowerpath [ 118.643712][ T36] audit: type=1326 audit(2000000047.217:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.667893][ T36] audit: type=1326 audit(2000000047.247:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.691644][ T36] audit: type=1326 audit(2000000047.247:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.732421][ T36] audit: type=1326 audit(2000000047.247:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.771002][ T36] audit: type=1326 audit(2000000047.267:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.795202][ T36] audit: type=1326 audit(2000000047.267:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.818822][ T36] audit: type=1326 audit(2000000047.267:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.842409][ T36] audit: type=1326 audit(2000000047.267:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 118.878798][ T36] audit: type=1326 audit(2000000047.267:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.2.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa268f8f6c9 code=0x7ffc0000 [ 119.088148][ T5743] /dev/rnullb0: Can't lookup blockdev [ 119.212236][ T5758] overlayfs: failed to clone lowerpath [ 119.406949][ T5789] fuse: Invalid rootmode [ 119.976040][ T5810] incfs: Error accessing: ./file0. [ 119.981487][ T5811] incfs: Error accessing: ./file0. [ 119.995402][ T5810] incfs: mount failed -20 [ 120.005590][ T5811] incfs: mount failed -20 [ 120.022480][ T5810] incfs: Error accessing: ./file0. [ 120.032183][ T5811] incfs: Error accessing: ./file0. [ 120.040535][ T5810] incfs: mount failed -20 [ 120.049447][ T5811] incfs: mount failed -20 [ 120.074580][ T5821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1836'. [ 120.143205][ T5821] binder: Bad value for 'stats' [ 120.241108][ T5855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5855 comm=syz.5.1846 [ 120.325906][ T5869] /dev/rnullb0: Can't lookup blockdev [ 120.448067][ T5886] vlan1: entered promiscuous mode [ 120.453384][ T5886] vlan1: entered allmulticast mode [ 120.459003][ T5886] veth0_vlan: entered allmulticast mode [ 120.497482][ T5886] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 120.508292][ T5886] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.561128][ T5900] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1861'. [ 120.615626][ T5909] /dev/rnullb0: Can't lookup blockdev [ 121.010790][ T5938] /dev/nbd4: Can't lookup blockdev [ 121.027733][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 121.103632][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'. [ 121.114755][ T5950] overlayfs: failed to resolve './file0': -2 [ 121.170194][ T5953] overlayfs: failed to clone lowerpath [ 121.376351][ T5957] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1882'. [ 122.261316][ T6012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=6012 comm=syz.2.1903 [ 122.404487][ T36] kauditd_printk_skb: 356 callbacks suppressed [ 122.404505][ T36] audit: type=1326 audit(2000000050.987:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e58f6c9 code=0x7fc00000 [ 122.440925][ T6030] tmpfs: Unknown parameter '0xffffffffffffffff' [ 122.453362][ T36] audit: type=1400 audit(2000000051.027:4427): avc: denied { create } for pid=6022 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 123.345527][ T6065] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1924'. [ 123.355387][ T6065] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1924'. [ 123.364591][ T6065] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 123.383144][ T6065] batadv_slave_1: entered promiscuous mode [ 123.390407][ T6064] batadv_slave_1: left promiscuous mode [ 123.705526][ T6109] incfs: mount failed -22 [ 124.584071][ T6161] netlink: 'syz.2.1958': attribute type 4 has an invalid length. [ 124.683098][ T36] audit: type=1400 audit(2000000053.257:4428): avc: denied { execute } for pid=6187 comm="syz.3.1968" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.780277][ T6221] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1978'. [ 124.789588][ T6221] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 125.169731][ T36] audit: type=1326 audit(2000000821.743:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e58f6c9 code=0x7fc00000 [ 125.194554][ T36] audit: type=1326 audit(2000000821.743:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e58f6c9 code=0x7fc00000 [ 125.770327][ T6301] EXT4-fs: Conflicting test_dummy_encryption options [ 125.812856][ T6311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2011'. [ 125.959448][ T36] audit: type=1400 audit(2000000822.530:4431): avc: denied { watch } for pid=6341 comm="syz.2.2022" path="/524/file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.215496][ T36] audit: type=1400 audit(2000000822.779:4432): avc: denied { listen } for pid=6379 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.915632][ T36] audit: type=1400 audit(2000000823.486:4433): avc: denied { mounton } for pid=6396 comm="syz.5.2039" path="pipe:[24371]" dev="pipefs" ino=24371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.956554][ T6402] x_tables: unsorted entry at hook 1 [ 128.024615][ T6447] netlink: 'syz.4.2056': attribute type 4 has an invalid length. [ 128.032483][ T6447] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2056'. [ 128.047245][ T6449] netlink: 'syz.4.2056': attribute type 4 has an invalid length. [ 128.055026][ T6449] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2056'. [ 128.707673][ T6555] incfs: mount failed -22 [ 128.730897][ T6558] 9pnet_fd: Insufficient options for proto=fd [ 128.792347][ T6569] 9pnet_fd: Insufficient options for proto=fd [ 129.211702][ T36] audit: type=1400 audit(2000000825.776:4434): avc: denied { mount } for pid=6581 comm="syz.3.2103" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 129.278112][ T6595] /dev/rnullb0: Can't lookup blockdev [ 129.302917][ T6600] 9pnet_fd: Insufficient options for proto=fd [ 129.317519][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59125 sclass=netlink_route_socket pid=6603 comm=syz.5.2111 [ 129.528555][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 130.225596][ T6687] netlink: 'syz.4.2142': attribute type 11 has an invalid length. [ 130.634629][ T36] audit: type=1326 audit(2000000827.180:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.5.2159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e58f6c9 code=0x0 [ 130.847675][ T6730] /dev/loop0: Can't lookup blockdev [ 131.060929][ T6759] overlayfs: failed to clone upperpath [ 131.078307][ T36] audit: type=1326 audit(2000000827.618:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b338f6c9 code=0x7fc00000 [ 131.249889][ T6774] tmpfs: Invalid uid '0x00000000ffffffff' [ 132.045915][ T36] audit: type=1400 audit(2000000828.594:4437): avc: denied { create } for pid=6815 comm="syz.3.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.152611][ T6822] mmap: syz.3.2192 (6822): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 132.369508][ T6843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2199'. [ 132.378649][ T6843] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 132.386475][ T6843] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2199'. [ 132.395550][ T6843] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2199'. [ 132.472421][ T6859] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.731994][ T6878] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2210'. [ 133.608694][ T6907] lo: entered allmulticast mode [ 133.615212][ T6907] lo: left allmulticast mode [ 133.829476][ T6946] /dev/rnullb0: Can't lookup blockdev [ 133.848230][ T6948] /dev/rnullb0: Can't lookup blockdev [ 133.851632][ T6949] /dev/rnullb0: Can't lookup blockdev [ 133.869051][ T6951] netlink: 'syz.5.2240': attribute type 4 has an invalid length. [ 133.975263][ T6958] overlayfs: failed to clone upperpath [ 134.079652][ T6971] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2247'. [ 134.649942][ T7001] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2258'. [ 134.672861][ T7008] 9pnet_fd: Insufficient options for proto=fd [ 134.716666][ T7019] netlink: 'syz.5.2264': attribute type 8 has an invalid length. [ 134.750248][ T36] audit: type=1326 audit(2000000831.283:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.3.2262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f04b3386567 code=0x0 [ 134.794082][ T7030] overlayfs: failed to clone upperpath [ 134.801058][ T7030] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2268'. [ 134.965291][ T7054] overlay: Unknown parameter '/' [ 134.989721][ T1886] tipc: Subscription rejected, illegal request [ 135.506864][ T7067] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2280'. [ 135.708207][ T7075] netlink: 'syz.2.2282': attribute type 27 has an invalid length. [ 135.824329][ T7081] overlayfs: failed to clone lowerpath [ 136.006367][ T7103] overlayfs: conflicting options: userxattr,verity=require [ 136.348588][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.363921][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.380570][ T7125] bridge_slave_0: entered allmulticast mode [ 136.399477][ T7125] bridge_slave_0: entered promiscuous mode [ 136.422020][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.435264][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.457923][ T7125] bridge_slave_1: entered allmulticast mode [ 136.471993][ T7125] bridge_slave_1: entered promiscuous mode [ 136.517223][ T1886] bridge_slave_1: left allmulticast mode [ 136.522949][ T1886] bridge_slave_1: left promiscuous mode [ 136.528676][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.537138][ T1886] bridge_slave_0: left allmulticast mode [ 136.543337][ T1886] bridge_slave_0: left promiscuous mode [ 136.549166][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.554320][ T7172] netlink: 'syz.5.2312': attribute type 3 has an invalid length. [ 136.564060][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2312'. [ 136.652908][ T7181] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2314'. [ 136.662508][ T7182] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.707101][ T1886] veth1_macvtap: left promiscuous mode [ 136.760678][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.767781][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.775119][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.782161][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.807134][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.814502][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.823740][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.831033][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.839797][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.846880][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.872081][ T7125] veth0_vlan: entered promiscuous mode [ 136.882706][ T7125] veth1_macvtap: entered promiscuous mode [ 136.901924][ T7201] /dev/rnullb0: Can't lookup blockdev [ 136.901981][ T7202] /dev/rnullb0: Can't lookup blockdev [ 136.915828][ T7201] netlink: 'syz.5.2318': attribute type 4 has an invalid length. [ 137.007130][ T7216] kvm_intel: kvm [7215]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xb9 [ 137.170830][ T7231] GUP no longer grows the stack in syz.3.2327 (7231): 200000001000-200000c01000 (200000000000) [ 137.181384][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.3.2327 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 137.181417][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.181444][ T7231] Call Trace: [ 137.181452][ T7231] [ 137.181460][ T7231] __dump_stack+0x21/0x30 [ 137.181495][ T7231] dump_stack_lvl+0x10c/0x190 [ 137.181524][ T7231] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.181552][ T7231] ? find_vma+0xcd/0x110 [ 137.181575][ T7231] dump_stack+0x19/0x20 [ 137.181610][ T7231] __get_user_pages+0x1e34/0x22d0 [ 137.181638][ T7231] ? __kasan_check_write+0x18/0x20 [ 137.181675][ T7231] ? down_read_killable+0x79/0xf0 [ 137.181698][ T7231] ? populate_vma_page_range+0x230/0x230 [ 137.181725][ T7231] ? kernel_text_address+0xa9/0xe0 [ 137.181753][ T7231] ? unwind_get_return_address+0x51/0x90 [ 137.181780][ T7231] __gup_longterm_locked+0xcb1/0x1580 [ 137.181811][ T7231] ? stack_depot_save_flags+0x38/0x800 [ 137.181836][ T7231] gup_fast_fallback+0x12ae/0x14a0 [ 137.181863][ T7231] ? kasan_save_track+0x3e/0x80 [ 137.181885][ T7231] ? __kmalloc_cache_noprof+0x24c/0x490 [ 137.181906][ T7231] ? futex_lock_pi+0x77a/0xa10 [ 137.181936][ T7231] ? get_user_pages_fast_only+0xc0/0xc0 [ 137.181966][ T7231] get_user_pages_fast+0x73/0xb0 [ 137.181993][ T7231] get_futex_key+0x24d/0x930 [ 137.182014][ T7231] ? __cfi_get_futex_key+0x10/0x10 [ 137.182035][ T7231] ? futex_lock_pi+0x77a/0xa10 [ 137.182058][ T7231] ? futex_setup_timer+0xb4/0xd0 [ 137.182079][ T7231] futex_lock_pi+0x1c0/0xa10 [ 137.182103][ T7231] ? futex_unqueue+0x136/0x160 [ 137.182124][ T7231] ? should_fail+0xf/0x20 [ 137.182145][ T7231] ? __cfi_futex_lock_pi+0x10/0x10 [ 137.182170][ T7231] ? __cfi_futex_wake_mark+0x10/0x10 [ 137.182198][ T7231] ? futex_setup_timer+0xb4/0xd0 [ 137.182218][ T7231] ? __cfi_futex_wake_mark+0x10/0x10 [ 137.182248][ T7231] ? tcp_getsockopt+0x77/0x130 [ 137.182270][ T7231] do_futex+0x25c/0x500 [ 137.182292][ T7231] ? __cfi_do_futex+0x10/0x10 [ 137.182315][ T7231] __se_sys_futex+0x28f/0x300 [ 137.182350][ T7231] ? __x64_sys_futex+0x110/0x110 [ 137.182372][ T7231] ? __kasan_check_write+0x18/0x20 [ 137.182402][ T7231] __x64_sys_futex+0xe9/0x110 [ 137.182424][ T7231] x64_sys_call+0x227f/0x2ee0 [ 137.182452][ T7231] do_syscall_64+0x58/0xf0 [ 137.182477][ T7231] ? clear_bhb_loop+0x50/0xa0 [ 137.182500][ T7231] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.182521][ T7231] RIP: 0033:0x7f04b338f6c9 [ 137.182539][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.182557][ T7231] RSP: 002b:00007f04b4215038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.182579][ T7231] RAX: ffffffffffffffda RBX: 00007f04b35e6090 RCX: 00007f04b338f6c9 [ 137.182602][ T7231] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 137.182615][ T7231] RBP: 00007f04b3411f91 R08: 0000000000000000 R09: 0000000000000002 [ 137.182646][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.182659][ T7231] R13: 00007f04b35e6128 R14: 00007f04b35e6090 R15: 00007ffedcb25b28 [ 137.182678][ T7231] [ 137.550775][ T7246] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 137.613275][ T7254] __nla_validate_parse: 3 callbacks suppressed [ 137.613295][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2334'. [ 137.628606][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2334'. [ 137.638330][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 138.087063][ T36] audit: type=1400 audit(2000000834.599:4439): avc: denied { lock } for pid=7270 comm="syz.2.2341" path="socket:[27733]" dev="sockfs" ino=27733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.117343][ T7273] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2342'. [ 138.126662][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7273 comm=syz.2.2342 [ 138.141031][ T7273] sit0: entered promiscuous mode [ 138.153367][ T7273] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 138.161273][ T7273] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2342'. [ 138.303986][ T7289] netlink: 'syz.5.2348': attribute type 12 has an invalid length. [ 138.398327][ T36] audit: type=1400 audit(2000000834.918:4440): avc: denied { remount } for pid=7290 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.768594][ T7299] 9pnet_fd: Insufficient options for proto=fd [ 139.120615][ T7327] /dev/nullb0: Can't lookup blockdev [ 139.363133][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.370212][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.377578][ T7343] bridge_slave_0: entered allmulticast mode [ 139.383990][ T7343] bridge_slave_0: entered promiscuous mode [ 139.399622][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.406767][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.415959][ T7343] bridge_slave_1: entered allmulticast mode [ 139.422482][ T7343] bridge_slave_1: entered promiscuous mode [ 139.473319][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.480389][ T7343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.487697][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.494757][ T7343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.515296][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.522808][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.533506][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.540656][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.549185][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.556267][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.586991][ T7343] veth0_vlan: entered promiscuous mode [ 139.598094][ T7343] veth1_macvtap: entered promiscuous mode [ 140.608340][ T7391] vcan0: entered allmulticast mode [ 140.615147][ T7391] vcan0: left allmulticast mode [ 140.620748][ T7391] __vm_enough_memory: pid: 7391, comm: syz.4.2378, bytes: 18014402804453376 not enough memory for the allocation [ 140.636876][ T7386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7386 comm=syz.2.2377 [ 140.657624][ T7393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7393 comm=syz.4.2379 [ 140.673658][ T7393] __vm_enough_memory: pid: 7393, comm: syz.4.2379, bytes: 18014402804453376 not enough memory for the allocation [ 140.737811][ T36] audit: type=1326 audit(2000000837.256:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.4.2383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfba38f6c9 code=0x0 [ 140.876081][ T7412] __vm_enough_memory: pid: 7412, comm: syz.2.2386, bytes: 18014402804453376 not enough memory for the allocation [ 140.917345][ T36] audit: type=1400 audit(2000000837.435:4442): avc: denied { connect } for pid=7418 comm="syz.2.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.953373][ T36] audit: type=1400 audit(2000000837.475:4443): avc: denied { write } for pid=7422 comm="syz.2.2389" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.008469][ T7427] tipc: Started in network mode [ 141.013436][ T7427] tipc: Node identity 0003, cluster identity 4711 [ 141.019903][ T7427] tipc: Enabling of bearer rejected, failed to enable media [ 141.029195][ T36] audit: type=1400 audit(2000000837.545:4444): avc: denied { map } for pid=7426 comm="syz.2.2391" path="/proc/36/task/37/mountinfo" dev="proc" ino=27452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 141.054406][ T36] audit: type=1400 audit(2000000837.555:4445): avc: denied { append } for pid=7426 comm="syz.2.2391" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.080796][ T36] audit: type=1400 audit(2000000837.595:4446): avc: denied { compute_member } for pid=7426 comm="syz.2.2391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 141.382897][ T36] audit: type=1400 audit(2000000837.895:4447): avc: denied { write } for pid=7439 comm="syz.2.2396" path="socket:[28155]" dev="sockfs" ino=28155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.435648][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'. [ 141.546788][ T7470] : renamed from bond_slave_0 [ 141.631998][ T7474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7474 comm=syz.5.2404 [ 141.648325][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 141.666042][ T7480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7480 comm=syz.4.2408 [ 141.679449][ T7480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7480 comm=syz.4.2408 [ 141.885941][ T7487] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 141.894457][ T7488] rust_binder: Write failure EFAULT in pid:67 [ 141.953744][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.134820][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.145483][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.155286][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.166244][ T10] usb 3-1: config 220 has no interface number 2 [ 142.172858][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.186443][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 142.193317][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 142.201662][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 142.212470][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.223777][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.233414][ T10] usb 3-1: Product: syz [ 142.237862][ T10] usb 3-1: Manufacturer: syz [ 142.242539][ T10] usb 3-1: SerialNumber: syz [ 142.458871][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 142.473970][ T10] usb 3-1: No valid video chain found. [ 142.484196][ T10] usb 3-1: selecting invalid altsetting 0 [ 142.501526][ T10] usb 3-1: USB disconnect, device number 7 [ 143.136392][ T7556] __vm_enough_memory: pid: 7556, comm: syz.4.2436, bytes: 18014402804453376 not enough memory for the allocation [ 143.224254][ T10] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 143.389175][ T10] usb 3-1: No LPM exit latency info found, disabling LPM. [ 143.402569][ T10] usb 3-1: config 8 has an invalid interface number: 9 but max is 2 [ 143.414414][ T10] usb 3-1: config 8 has an invalid interface number: 219 but max is 2 [ 143.423139][ T10] usb 3-1: config 8 has an invalid interface number: 71 but max is 2 [ 143.431856][ T10] usb 3-1: config 8 has an invalid interface number: 35 but max is 2 [ 143.441691][ T10] usb 3-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 143.450955][ T10] usb 3-1: config 8 has no interface number 0 [ 143.457245][ T10] usb 3-1: config 8 has no interface number 1 [ 143.463692][ T10] usb 3-1: config 8 has no interface number 2 [ 143.473331][ T10] usb 3-1: config 8 has no interface number 3 [ 143.479679][ T10] usb 3-1: config 8 interface 9 altsetting 6 endpoint 0xC has invalid maxpacket 64, setting to 8 [ 143.490458][ T10] usb 3-1: config 8 interface 9 altsetting 6 endpoint 0xD has invalid maxpacket 16, setting to 8 [ 143.501554][ T10] usb 3-1: config 8 interface 9 altsetting 6 endpoint 0x8 is Bulk; changing to Interrupt [ 143.511703][ T10] usb 3-1: config 8 interface 71 altsetting 44 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 143.522944][ T10] usb 3-1: config 8 interface 71 altsetting 44 has a duplicate endpoint with address 0xC, skipping [ 143.533910][ T10] usb 3-1: config 8 interface 71 altsetting 44 endpoint 0x5 has invalid maxpacket 1024, setting to 0 [ 143.545040][ T10] usb 3-1: config 8 interface 71 altsetting 44 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 143.558309][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.566185][ T10] usb 3-1: too many endpoints for config 8 interface 35 altsetting 179: 99, using maximum allowed: 30 [ 143.578383][ T10] usb 3-1: config 8 interface 35 altsetting 179 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 143.589644][ T10] usb 3-1: config 8 interface 35 altsetting 179 has a duplicate endpoint with address 0x5, skipping [ 143.600693][ T10] usb 3-1: config 8 interface 35 altsetting 179 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 143.611703][ T10] usb 3-1: config 8 interface 35 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 8 [ 143.622783][ T10] usb 3-1: config 8 interface 35 altsetting 179 has a duplicate endpoint with address 0xC, skipping [ 143.633779][ T10] usb 3-1: config 8 interface 35 altsetting 179 has 5 endpoint descriptors, different from the interface descriptor's value: 99 [ 143.647622][ T10] usb 3-1: config 8 interface 9 has no altsetting 0 [ 143.651818][ T7583] tipc: Enabling of bearer rejected, failed to enable media [ 143.654675][ T10] usb 3-1: config 8 interface 219 has no altsetting 0 [ 143.672791][ T10] usb 3-1: config 8 interface 71 has no altsetting 0 [ 143.679563][ T10] usb 3-1: config 8 interface 35 has no altsetting 0 [ 143.724500][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 143.730658][ T9] usb 5-1: config 2 has an invalid interface number: 106 but max is 0 [ 143.738907][ T9] usb 5-1: config 2 has no interface number 0 [ 143.745064][ T9] usb 5-1: config 2 interface 106 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 143.756043][ T9] usb 5-1: config 2 interface 106 altsetting 1 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 143.767279][ T9] usb 5-1: config 2 interface 106 has no altsetting 0 [ 143.778194][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=75.78 [ 143.788119][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.796968][ T9] usb 5-1: Product: syz [ 143.801321][ T9] usb 5-1: Manufacturer: syz [ 143.805975][ T9] usb 5-1: SerialNumber: syz [ 143.819616][ T36] audit: type=1400 audit(2000000840.334:4448): avc: denied { map } for pid=7597 comm="syz.3.2452" path="socket:[28380]" dev="sockfs" ino=28380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 144.062451][ T9] usbhid 5-1:2.106: couldn't find an input interrupt endpoint [ 144.080562][ T9] usb 5-1: USB disconnect, device number 3 [ 144.266515][ T36] audit: type=1400 audit(2000000840.784:4449): avc: denied { map } for pid=7655 comm="syz.5.2473" path="socket:[28453]" dev="sockfs" ino=28453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.290891][ T36] audit: type=1400 audit(2000000840.784:4450): avc: denied { accept } for pid=7655 comm="syz.5.2473" path="socket:[28453]" dev="sockfs" ino=28453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.401528][ T7677] /dev/rnullb0: Can't lookup blockdev [ 144.569273][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.576938][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.584362][ T7679] bridge_slave_0: entered allmulticast mode [ 144.595540][ T7685] Unsupported ieee802154 address type: 0 [ 144.596997][ T7679] bridge_slave_0: entered promiscuous mode [ 144.609946][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.617087][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.624291][ T7679] bridge_slave_1: entered allmulticast mode [ 144.630766][ T7679] bridge_slave_1: entered promiscuous mode [ 144.686496][ T1886] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.699525][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.706631][ T7679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.713945][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.721021][ T7679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.748533][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.756123][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.766678][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.773750][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.783199][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.790273][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.821389][ T7679] veth0_vlan: entered promiscuous mode [ 144.834386][ T7679] veth1_macvtap: entered promiscuous mode [ 144.926340][ T7703] /dev/rnullb0: Can't open blockdev [ 144.961140][ T7709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.110116][ T7727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 145.117891][ T7727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.143935][ T7731] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 145.218176][ T7736] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2496'. [ 145.227550][ T7736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2496'. [ 145.373915][ T7740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.373945][ T7740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 145.467013][ T7742] syzkaller0: entered promiscuous mode [ 145.481756][ T7742] syzkaller0: entered allmulticast mode [ 145.523832][ T7748] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2500'. [ 145.551813][ T7751] rust_binder: 38: no such ref 0 [ 145.572195][ T7754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.575561][ T7755] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 145.579615][ T7755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 145.587814][ T7755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:42 [ 146.000901][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=28.4a [ 146.019208][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.031859][ T10] usb 3-1: can't set config #8, error -71 [ 146.039417][ T10] usb 3-1: USB disconnect, device number 8 [ 146.152927][ T7783] netlink: 'syz.5.2513': attribute type 4 has an invalid length. [ 146.160942][ T7783] netlink: 'syz.5.2513': attribute type 4 has an invalid length. [ 146.185737][ T77] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.207878][ T7789] rust_binder: 69: no such ref 0 [ 146.212889][ T7789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 146.257693][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 146.257714][ T36] audit: type=1400 audit(2000000000.109:4456): avc: denied { map } for pid=7798 comm="syz.2.2520" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 146.258230][ T7801] netlink: 'syz.5.2521': attribute type 39 has an invalid length. [ 146.272962][ T36] audit: type=1400 audit(2000000000.109:4457): avc: denied { execute } for pid=7798 comm="syz.2.2520" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 146.347180][ T7809] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2523'. [ 146.360200][ T7811] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2525'. [ 146.375797][ T77] usb 4-1: Using ep0 maxpacket: 32 [ 146.382214][ T77] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 146.388027][ T7815] fuse: Bad value for 'fd' [ 146.397432][ T77] usb 4-1: config 1 has no interface number 0 [ 146.403955][ T77] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 146.415361][ T77] usb 4-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.425936][ T77] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.436980][ T77] usb 4-1: config 1 interface 137 has no altsetting 0 [ 146.445273][ T77] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 146.455434][ T77] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.463609][ T77] usb 4-1: Product: syz [ 146.468096][ T77] usb 4-1: Manufacturer: syz [ 146.472709][ T77] usb 4-1: SerialNumber: syz [ 146.478305][ T7768] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.687057][ T7768] rust_binder: Write failure EFAULT in pid:56 [ 146.690713][ T77] pl2303 4-1:1.137: required interrupt-in endpoint missing [ 146.709539][ T77] usb 4-1: USB disconnect, device number 9 [ 146.756009][ T1432] Bluetooth: hci0: command 0x1003 tx timeout [ 146.756403][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.218721][ T7837] binder: Unknown parameter 'contextÌðÔð[7’' [ 147.246861][ T7839] /dev/rnullb0: Can't open blockdev [ 147.283729][ T7842] fuse: Bad value for 'fd' [ 147.311273][ T7845] overlayfs: invalid origin (0000) [ 147.320351][ T7846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 147.415086][ T7850] /dev/rnullb0: Can't open blockdev [ 147.508217][ T36] audit: type=1326 audit(2000000001.359:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.5.2542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c6e58f6c9 code=0x0 [ 147.541669][ T7863] rust_binder: 119: no such ref 3 [ 147.546808][ T7863] rust_binder: 119: no such ref 1 [ 147.551882][ T7863] rust_binder: Write failure EFAULT in pid:119 [ 147.557209][ T463] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 147.611588][ T7870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.611641][ T7870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 147.696464][ T463] usb 4-1: device descriptor read/64, error -71 [ 147.966592][ T463] usb 4-1: device descriptor read/64, error -71 [ 148.136828][ T7877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7877 comm=syz.4.2550 [ 148.149766][ T7877] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2550'. [ 148.158926][ T7877] tc_dump_action: action bad kind [ 148.164730][ T7877] overlayfs: missing 'workdir' [ 148.226694][ T463] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 148.366774][ T463] usb 4-1: device descriptor read/64, error -71 [ 148.527666][ T36] audit: type=1400 audit(2000000002.378:4459): avc: denied { mounton } for pid=7894 comm="syz.4.2557" path="/file0" dev="ramfs" ino=29245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 148.529395][ T7895] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 148.606919][ T463] usb 4-1: device descriptor read/64, error -71 [ 148.619505][ T7897] tmpfs: Bad value for 'nr_inodes' [ 148.717050][ T463] usb usb4-port1: attempt power cycle [ 148.722585][ T453] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 148.897026][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 149.038033][ T453] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 149.087116][ T463] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 149.118381][ T463] usb 4-1: device descriptor read/8, error -71 [ 149.207210][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 149.212757][ T453] usb usb3-port1: attempt power cycle [ 149.258844][ T463] usb 4-1: device descriptor read/8, error -71 [ 149.442158][ T7928] rust_binder: 141: no such ref 2 [ 149.493822][ T7929] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 149.493994][ T7929] rust_binder: Write failure EINVAL in pid:141 [ 149.502117][ T463] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 149.528338][ T463] usb 4-1: device descriptor read/8, error -71 [ 149.567382][ T453] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 149.587702][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 149.658438][ T463] usb 4-1: device descriptor read/8, error -71 [ 149.717440][ T453] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 149.737849][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 149.743279][ T453] usb usb3-port1: unable to enumerate USB device [ 149.767565][ T463] usb usb4-port1: unable to enumerate USB device [ 150.293142][ T7943] option changes via remount are deprecated (pid=7942 comm=syz.4.2577) [ 150.301757][ T7943] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 "" [ 150.370863][ T36] audit: type=1400 audit(2000000004.217:4460): avc: denied { module_load } for pid=7957 comm="syz.4.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 150.374161][ T7958] Invalid ELF header type: 2 != 1 [ 150.390596][ T36] audit: type=1326 audit(2000000004.217:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.5.2582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c6e58f6c9 code=0x0 [ 150.426005][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'. [ 150.438220][ T7963] binder: Unknown parameter 'contextÌðÔð[7’' [ 150.438877][ T7962] /dev/rnullb0: Can't lookup blockdev [ 150.448992][ T36] audit: type=1326 audit(2000000004.287:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.2585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb02538f6c9 code=0x0 [ 150.549661][ T7969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.557926][ T77] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 150.707931][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.717954][ T77] usb 3-1: Invalid ep0 maxpacket: 64 [ 150.847998][ T77] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 150.858017][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 150.864363][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.874329][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 150.887319][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.893984][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 150.903063][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.911702][ T10] usb 5-1: config 0 descriptor?? [ 150.998267][ T77] usb 3-1: Invalid ep0 maxpacket: 64 [ 151.003743][ T77] usb usb3-port1: attempt power cycle [ 151.320012][ T10] kye 0003:0458:5014.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 151.333153][ T10] kye 0003:0458:5014.0006: item fetching failed at offset 1/5 [ 151.341122][ T10] kye 0003:0458:5014.0006: parse failed [ 151.348685][ T10] kye 0003:0458:5014.0006: probe with driver kye failed with error -22 [ 151.358259][ T77] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 151.369452][ T7979] fuse: blksize only supported for fuseblk [ 151.388778][ T77] usb 3-1: Invalid ep0 maxpacket: 64 [ 151.518871][ T463] usb 5-1: USB disconnect, device number 4 [ 151.528470][ T77] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 151.580381][ T7987] rust_binder: validate_parent_fixup: new_min_offset=4611686018427387942, sg_entry.length=245 [ 151.580408][ T7987] rust_binder: Error while translating object. [ 151.590797][ T7987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.596988][ T7987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 151.635438][ T7995] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 151.638661][ T36] audit: type=1400 audit(2000000005.477:4463): avc: denied { setcurrent } for pid=7994 comm="syz.3.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.681974][ T36] audit: type=1401 audit(2000000005.477:4464): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 151.699729][ T7999] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2599'. [ 151.784959][ T8003] rust_binder: 93: no such ref 0 [ 151.790097][ T8003] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 151.797280][ T8003] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 151.804458][ T8003] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 151.811602][ T8003] rust_binder: 93: no such ref 0 [ 151.859396][ T8010] loop5: detected capacity change from 0 to 7 [ 151.911832][ T8019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2605'. [ 151.948563][ T77] usb 3-1: device not accepting address 16, error -71 [ 151.971671][ T77] usb usb3-port1: unable to enumerate USB device [ 151.979917][ T8026] rust_binder: Error while translating object. [ 151.979960][ T8026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.986155][ T8026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 152.024383][ T36] audit: type=1404 audit(2000000005.867:4465): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 152.049309][ T36] audit: type=1400 audit(2000000005.877:4466): avc: denied { create } for pid=8031 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 152.071794][ T36] audit: type=1400 audit(2000000005.897:4467): avc: denied { create } for pid=8031 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 152.092085][ T36] audit: type=1400 audit(2000000005.897:4468): avc: denied { create } for pid=8031 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 152.112435][ T36] audit: type=1400 audit(2000000005.897:4469): avc: denied { create } for pid=8031 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.112495][ T8021] Invalid logical block size (1) [ 152.133278][ T36] audit: type=1400 audit(2000000005.897:4470): avc: denied { read } for pid=8031 comm="syz.2.2609" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 152.161543][ T36] audit: type=1400 audit(2000000005.897:4471): avc: denied { create } for pid=8031 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 152.210951][ T36] audit: type=1400 audit(2000000005.897:4472): avc: denied { read } for pid=8031 comm="syz.2.2609" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 153.293136][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.301966][ T8243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8243 comm=syz.3.2685 [ 154.123992][ T8346] netlink: 'syz.3.2724': attribute type 6 has an invalid length. [ 154.138432][ T8363] netlink: 'syz.3.2724': attribute type 6 has an invalid length. [ 154.704101][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.712712][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8386 comm=syz.5.2736 [ 154.926475][ T8419] netlink: 'syz.3.2750': attribute type 4 has an invalid length. [ 154.934349][ T8419] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2750'. [ 155.007057][ T8431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2755'. [ 155.035815][ T8440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8440 comm=syz.3.2758 [ 155.148578][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2763'. [ 155.356146][ T8476] tc_dump_action: action bad kind [ 155.481037][ T8507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8507 comm=syz.5.2778 [ 156.130005][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'. [ 156.381727][ T8605] vlan1: entered promiscuous mode [ 156.392663][ T8605] vlan1: entered allmulticast mode [ 156.397846][ T8605] veth0_vlan: entered allmulticast mode [ 156.554222][ T8656] netlink: 'syz.3.2833': attribute type 4 has an invalid length. [ 156.562097][ T8656] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2833'. [ 156.614111][ T8674] can0: slcan on ttynull. [ 156.640780][ T36] kauditd_printk_skb: 1307 callbacks suppressed [ 156.640799][ T36] audit: type=1400 audit(2000000010.474:5780): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.654875][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.669072][ T36] audit: type=1400 audit(2000000010.484:5781): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.674993][ T151] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 156.696151][ T36] audit: type=1400 audit(2000000010.484:5782): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.720887][ T151] audit: backlog limit exceeded [ 156.729886][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.736650][ T151] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 156.744676][ T151] audit: backlog limit exceeded [ 156.749670][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.393856][ T8706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8706 comm=syz.5.2846 [ 158.309905][ T8765] cannot load conntrack support for proto=3 [ 158.540843][ T8803] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2884'. [ 158.983294][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2891'. [ 161.123331][ T8974] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2949'. [ 161.476974][ T9013] netlink: 'syz.4.2966': attribute type 4 has an invalid length. [ 161.488048][ T9013] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2966'. [ 161.653322][ T36] kauditd_printk_skb: 33338 callbacks suppressed [ 161.653341][ T36] audit: type=1400 audit(2000000015.502:38858): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.687149][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.693842][ T151] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 161.701587][ T151] audit: backlog limit exceeded [ 161.706592][ T36] audit: type=1400 audit(2000000015.512:38859): avc: denied { create } for pid=9024 comm="syz.3.2971" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 161.728448][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.730476][ T9028] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.735075][ T151] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 161.742110][ T9028] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 161.749454][ T36] audit: type=1400 audit(2000000015.522:38860): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.759016][ T9029] netlink: 'syz.3.2972': attribute type 4 has an invalid length. [ 161.786382][ T9029] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2972'. [ 161.795711][ T9030] netlink: 'syz.3.2972': attribute type 4 has an invalid length. [ 161.804046][ T9030] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2972'. [ 161.894994][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 162.066347][ T9057] netlink: 'syz.4.2983': attribute type 29 has an invalid length. [ 162.074630][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 162.123831][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.133900][ T9067] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.102433][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3008'. [ 164.204763][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.204918][ T1432] Bluetooth: hci0: command 0x1003 tx timeout [ 164.291220][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'. [ 164.370638][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 165.508447][ T9205] netlink: 'syz.3.3037': attribute type 28 has an invalid length. [ 166.665729][ T36] kauditd_printk_skb: 44327 callbacks suppressed [ 166.665747][ T36] audit: type=1400 audit(2000000020.499:83027): avc: denied { mounton } for pid=9265 comm="syz.3.3060" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=0 [ 166.700800][ T36] audit: type=1400 audit(2000000020.509:83028): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.706368][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.722233][ T36] audit: type=1400 audit(2000000020.509:83029): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.733389][ T151] audit: audit_lost=147 audit_rate_limit=0 audit_backlog_limit=64 [ 166.749682][ T36] audit: type=1400 audit(2000000020.509:83030): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.761111][ T151] audit: backlog limit exceeded [ 166.780769][ T36] audit: type=1400 audit(2000000020.509:83031): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.786283][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.806414][ T36] audit: type=1400 audit(2000000020.509:83032): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.923886][ T9283] netlink: 'syz.3.3067': attribute type 4 has an invalid length. [ 166.932404][ T9283] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3067'. [ 167.253245][ T9305] IPv6: Can't replace route, no match found [ 167.771803][ T9347] netlink: 'syz.3.3091': attribute type 9 has an invalid length. [ 167.786581][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 171.678209][ T36] kauditd_printk_skb: 39748 callbacks suppressed [ 171.678231][ T36] audit: type=1400 audit(2000000025.507:121663): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.710328][ T36] audit: type=1400 audit(2000000025.507:121664): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.732116][ T36] audit: type=1400 audit(2000000025.507:121665): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.754001][ T36] audit: type=1400 audit(2000000025.517:121666): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.775393][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.775662][ T36] audit: type=1400 audit(2000000025.517:121667): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.793354][ T7125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.811328][ T36] audit: type=1400 audit(2000000025.517:121668): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.819460][ T151] audit: audit_lost=521 audit_rate_limit=0 audit_backlog_limit=64 [ 171.839534][ T9569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.137807][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 173.829051][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 173.844263][ T9757] bridge_slave_1: left allmulticast mode [ 173.856283][ T9757] bridge_slave_1: left promiscuous mode [ 173.864243][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.872882][ T9757] bridge_slave_0: left allmulticast mode [ 173.878995][ T9757] bridge_slave_0: left promiscuous mode [ 173.885464][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.931776][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 174.063343][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3241'. [ 174.143629][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3245'. [ 175.495174][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.495194][ T1432] Bluetooth: hci0: command 0x1003 tx timeout [ 175.883502][ T9849] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.3267'. [ 176.048314][ T9877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3270'. [ 176.700483][ T36] kauditd_printk_skb: 40608 callbacks suppressed [ 176.700504][ T36] audit: type=1400 audit(2000000030.515:161837): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.708438][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.728207][ T36] audit: type=1400 audit(2000000030.525:161838): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.735495][ T151] audit: audit_lost=669 audit_rate_limit=0 audit_backlog_limit=64 [ 176.763916][ T151] audit: backlog limit exceeded [ 176.769008][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.769418][ T36] audit: type=1400 audit(2000000030.525:161839): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.777570][ T151] audit: audit_lost=670 audit_rate_limit=0 audit_backlog_limit=64 [ 176.797302][ T36] audit: type=1400 audit(2000000030.525:161840): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.804849][ T151] audit: backlog limit exceeded [ 177.238426][ T9951] tap0: tun_chr_ioctl cmd 1074025676 [ 177.243799][ T9951] tap0: owner set to 0 [ 177.457579][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3305'. [ 177.514503][ T9982] sock: sock_set_timeout: `syz.5.3308' (pid 9982) tries to set negative timeout [ 177.542711][ T9986] netlink: 'syz.4.3305': attribute type 3 has an invalid length. [ 177.794312][T10003] netlink: 'syz.3.3314': attribute type 4 has an invalid length. [ 178.469633][ T1931] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.059921][T10154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10154 comm=syz.3.3372 [ 180.088457][T10155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10155 comm=syz.3.3372 [ 180.557028][ T1432] Bluetooth: hci0: command 0x1003 tx timeout [ 180.563193][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.169282][T10274] IPv6: Can't replace route, no match found [ 181.371845][T10301] sit0: entered promiscuous mode [ 181.394730][T10301] netlink: 'syz.3.3426': attribute type 1 has an invalid length. [ 181.436313][T10301] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3426'. [ 181.731911][ T36] kauditd_printk_skb: 32064 callbacks suppressed [ 181.731930][ T36] audit: type=1400 audit(2000000035.543:193377): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.740067][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.769235][ T151] audit: audit_lost=847 audit_rate_limit=0 audit_backlog_limit=64 [ 181.777774][T10355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.784381][ T151] audit: backlog limit exceeded [ 181.789320][T10355] audit: audit_lost=848 audit_rate_limit=0 audit_backlog_limit=64 [ 181.789993][ T36] audit: type=1400 audit(2000000035.543:193378): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.797708][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.825357][T10355] audit: backlog limit exceeded [ 181.830632][ T151] audit: audit_lost=849 audit_rate_limit=0 audit_backlog_limit=64 [ 183.116647][T10426] netlink: 'syz.3.3468': attribute type 4 has an invalid length. [ 183.136945][T10426] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3468'. [ 183.861472][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 184.577999][T10483] futex_wake_op: syz.4.3491 tries to shift op by 144; fix this program [ 186.101334][ T1931] veth1_macvtap: left promiscuous mode [ 186.107170][ T1931] veth0_vlan: left promiscuous mode [ 186.762546][ T36] kauditd_printk_skb: 38333 callbacks suppressed [ 186.762567][ T36] audit: type=1400 audit(2000000040.553:230361): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.776172][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.790339][ T36] audit: type=1400 audit(2000000040.553:230362): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.796722][ T151] audit: audit_lost=1300 audit_rate_limit=0 audit_backlog_limit=64 [ 186.817909][ T36] audit: type=1400 audit(2000000040.553:230363): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.826260][ T151] audit: backlog limit exceeded [ 186.846952][ T36] audit: type=1400 audit(2000000040.553:230364): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.852404][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.873047][ T36] audit: type=1400 audit(2000000040.553:230365): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.879561][ T151] audit: audit_lost=1301 audit_rate_limit=0 audit_backlog_limit=64 [ 191.792471][ T36] kauditd_printk_skb: 51598 callbacks suppressed [ 191.792489][ T36] audit: type=1400 audit(2000000045.553:281963): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.800490][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.820468][ T7125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.826756][ T151] audit: audit_lost=1302 audit_rate_limit=0 audit_backlog_limit=64 [ 191.834788][ T7125] audit: audit_lost=1303 audit_rate_limit=0 audit_backlog_limit=64 [ 191.841289][ T151] audit: backlog limit exceeded [ 191.849897][ T36] audit: type=1400 audit(2000000045.563:281964): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.854247][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.875841][ T7125] audit: backlog limit exceeded [ 191.881625][ T151] audit: audit_lost=1304 audit_rate_limit=0 audit_backlog_limit=64 [ 196.821774][ T36] kauditd_printk_skb: 52134 callbacks suppressed [ 196.821795][ T36] audit: type=1400 audit(2000000050.563:333774): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.829380][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.849520][ T36] audit: type=1400 audit(2000000050.573:333775): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.855942][ T151] audit: audit_lost=1413 audit_rate_limit=0 audit_backlog_limit=64 [ 196.877123][ T36] audit: type=1400 audit(2000000050.573:333776): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.884987][ T151] audit: backlog limit exceeded [ 196.906164][ T36] audit: type=1400 audit(2000000050.573:333777): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.911475][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.932141][ T36] audit: type=1400 audit(2000000050.573:333778): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.938602][ T151] audit: audit_lost=1414 audit_rate_limit=0 audit_backlog_limit=64 [ 197.327960][T10687] netlink: 'syz.4.3554': attribute type 4 has an invalid length. [ 197.346014][T10683] IPv6: A: Disabled Multicast RS [ 201.850454][ T36] kauditd_printk_skb: 52970 callbacks suppressed [ 201.850474][ T36] audit: type=1400 audit(2000000055.565:386748): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.857819][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.878290][ T36] audit: type=1400 audit(2000000055.575:386749): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.884572][ T151] audit: audit_lost=1415 audit_rate_limit=0 audit_backlog_limit=64 [ 201.905838][ T36] audit: type=1400 audit(2000000055.575:386750): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.913553][ T151] audit: backlog limit exceeded [ 201.934812][ T36] audit: type=1400 audit(2000000055.575:386751): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.940371][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.960927][ T36] audit: type=1400 audit(2000000055.575:386752): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.967167][ T151] audit: audit_lost=1416 audit_rate_limit=0 audit_backlog_limit=64 [ 204.442074][T10721] IPv6: A: Disabled Multicast RS [ 206.878685][ T36] kauditd_printk_skb: 49414 callbacks suppressed [ 206.878705][ T36] audit: type=1400 audit(2000000060.587:435698): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.886661][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.906532][ T36] audit: type=1400 audit(2000000060.587:435699): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.912754][ T151] audit: audit_lost=1573 audit_rate_limit=0 audit_backlog_limit=64 [ 206.934079][ T36] audit: type=1400 audit(2000000060.587:435700): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.941796][ T151] audit: backlog limit exceeded [ 206.963127][ T36] audit: type=1400 audit(2000000060.587:435701): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.968112][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.989156][ T36] audit: type=1400 audit(2000000060.587:435702): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.995707][ T151] audit: audit_lost=1574 audit_rate_limit=0 audit_backlog_limit=64 [ 207.069845][ T1882] bridge_slave_1: left allmulticast mode [ 207.075541][ T1882] bridge_slave_1: left promiscuous mode [ 207.081283][ T1882] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.088947][ T1882] bridge_slave_0: left allmulticast mode [ 207.094816][ T1882] bridge_slave_0: left promiscuous mode [ 207.100480][ T1882] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.260061][ T1882] tipc: Left network mode [ 207.331441][ T1882] veth1_macvtap: left promiscuous mode [ 207.337023][ T1882] veth0_vlan: left promiscuous mode [ 211.905934][ T36] kauditd_printk_skb: 53193 callbacks suppressed [ 211.905952][ T36] audit: type=1400 audit(2000000065.589:488895): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.913552][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.933656][ T36] audit: type=1400 audit(2000000065.599:488896): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.939959][ T151] audit: audit_lost=1575 audit_rate_limit=0 audit_backlog_limit=64 [ 211.961249][ T36] audit: type=1400 audit(2000000065.599:488897): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.968968][ T151] audit: backlog limit exceeded [ 211.969275][ T151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.990374][ T36] audit: type=1400 audit(2000000065.599:488898): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.994932][ T151] audit: audit_lost=1576 audit_rate_limit=0 audit_backlog_limit=64 [ 212.001610][ T36] audit: type=1400 audit(2000000065.599:488899): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0