last executing test programs: 5m56.684368211s ago: executing program 2 (id=1109): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="200000005f0001010000000048a7376db1f9"], 0x20}], 0x1}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003030101000000000000000000000000fe752e1e13a82be74353f723dcbe0a8ae9df8ffa2b29e55a936ae87fd7db9413b7674c825ad4b04b07239aa4a064386377e8e7c236b35ad88b06b6edc144e812b2"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = getpgrp(0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000340)={'\x00', 0x44, 0x7, 0x61df, 0x6, 0xdf1, r8}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x64, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3ff}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xcc}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xbb}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES16=r6, @ANYBLOB="040027bd7000fbdbdf2564000000080001007c0000000c0099000900000051000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000808}, 0x4000) 5m45.266773438s ago: executing program 2 (id=1112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') exit(0xfffffffffffffff7) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400"], 0x58}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xfffffc8d, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1024a5fe9e0a"}, @NL80211_ATTR_IE={0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_IE={0x23, 0x2a, [@dsss={0x3, 0x1, 0xb3}, @dsss={0x3, 0x0, 0x6c}, @link_id={0x65, 0x12, {@random="bb3f4921a003", @device_b, @device_b}}]}, @NL80211_ATTR_SSID={0xb, 0x34, @random="2f40d7a686d706"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) 5m45.167913839s ago: executing program 2 (id=1121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000407e05192000000000000109022400010000402009040000060300000009210708000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "247921a9"}]}}, 0x0}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m44.477632544s ago: executing program 2 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6c382ccb69434f02", "a6b3b6be08c3ba02e945de45490efc0ef54528d6726a902093be2838c1ed2264", "d9d1f4c2", "cbde04a76efcf227"}, 0x38) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000001c0)=0x9, 0x4) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x96, 0xf, 0x3, 0x7fff}]}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 5m43.66390202s ago: executing program 2 (id=1170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x68, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0xf5, 0x1, {0x22, 0xd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x10, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x7b, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000180)) 5m43.580491841s ago: executing program 2 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syslog(0x2, &(0x7f0000000200), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, &(0x7f0000000180), &(0x7f00000000c0)=0x10, 0x80000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x20, 0x21, 0xc1, {0xc1, 0x2e, "a1b21950f041e823761b412c3d8b99df54189bc7b5ee562b2334eb7206b2bc0f88b00a20bacdd16a4b2effc8d36005daff05f7a10f147adcd2dd2c87c62e4f573f6a625391698e6502113256eb3c55268e77a9b10ca9fc3b3c7cd0e0e0d6379075123666bbbc901a081edc39f8e71888c9cc886828f87f27f9ea69e4257fb1a001800000489c2721abccde4811cfcb6b43d001000000c126be8723edc002e153809df9445e17f778e6c5a27302a5f78e242420da8ba1a93ea4d917b5697395"}}, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, &(0x7f0000000580)={0x0, 0x8, 0x0, 0xa5}, &(0x7f00000006c0)={0x20, 0x1, 0x25, "ac0f6f996902fc8e75b06a9422947de430dc7dc83ed3c04629864126bd54880835c75713cd"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfd}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24", 0x2f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0x2, 0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m43.540897021s ago: executing program 32 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syslog(0x2, &(0x7f0000000200), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, &(0x7f0000000180), &(0x7f00000000c0)=0x10, 0x80000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x20, 0x21, 0xc1, {0xc1, 0x2e, "a1b21950f041e823761b412c3d8b99df54189bc7b5ee562b2334eb7206b2bc0f88b00a20bacdd16a4b2effc8d36005daff05f7a10f147adcd2dd2c87c62e4f573f6a625391698e6502113256eb3c55268e77a9b10ca9fc3b3c7cd0e0e0d6379075123666bbbc901a081edc39f8e71888c9cc886828f87f27f9ea69e4257fb1a001800000489c2721abccde4811cfcb6b43d001000000c126be8723edc002e153809df9445e17f778e6c5a27302a5f78e242420da8ba1a93ea4d917b5697395"}}, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, &(0x7f0000000580)={0x0, 0x8, 0x0, 0xa5}, &(0x7f00000006c0)={0x20, 0x1, 0x25, "ac0f6f996902fc8e75b06a9422947de430dc7dc83ed3c04629864126bd54880835c75713cd"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfd}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24", 0x2f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0x2, 0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 9.378645697s ago: executing program 3 (id=7009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x64}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r1, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80c4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x23c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS_MASK={0x28, 0x17, [0xfffff760, 0x2, 0x8001, 0x8, 0x6, 0xb, 0xfffffe00, 0x5, 0x100]}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x611}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x818}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x145}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_TUPLE_ORIG={0xcc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x608}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x442}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x25}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4d0}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}]}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r3, 0xffffb000) 9.189722358s ago: executing program 3 (id=7011): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xaf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0x7, 0x5, {0xfffffffffffffe13, 0x24, "00f4e5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.572301269s ago: executing program 3 (id=7027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') exit(0xfffffffffffffff7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) io_setup(0x9d, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100001000130428bd700000be179c55000001000000000000000000000000ac1e0101000000000000000000000000000000004e240000020020200000000034b222be754ec14a873dd8738156259a13b684bba1a7e787d70a164de4c1d27b0549e0d4abda6ae4670d79f8bcf307151fe67fbbe13798206c99b300a1af91323d15768b794974f5598958f2ff6abad7a35325c351625df6435341f58a8085b01288dae7ad4e04acfcca1c42106b3ba757841b737f4ebd3007593b256a1139470554a4f50a67efdaceab027b355242aa0edb0297bab1c4f5bfd1eb3d309101e0c186345af92bb629c06f306f7554d838ec123a74fb177e9d0082c2a8cbf0f4dc413f616122988d44e3c50d4caae5d3788cd9606d46a122a473cf8e778b321faba759a4b6d97c73a638ff472827f0972cdad833e45dc67171868055b3eb0e09630401ab75dce9327d8635db48a43f2116f51ee4dc5a54cba82f517e20800a844a31f6d77ff1de115c9968a613e0981c1ff8facab00a266e31fd8f0edd8d80a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000040000040320000000a0101040000000000000000000000000400000000000000070000000000000003000000000000000400000000004000ffffffffffffffffffffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000200000000000000f600000000000000000000000000000000000000020001fe00000000000000004c00120067656e657269632d67636d2d6165736e6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x804) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)={0x63}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r4, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) fallocate(r5, 0x20, 0x0, 0x8000) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000480)={[], [{@fowner_eq={'fowner', 0x3d, r10}}, {@subj_role={'subj_role', 0x3d, 'binder\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x62, 0x61, 0x35, 0x34, 0x34, 0x31, 0x62], 0x2d, [0x38, 0x30, 0x37, 0x62], 0x2d, [0x66, 0x33, 0x63], 0x2d, [0x33, 0x39, 0x36, 0x63], 0x2d, [0x61, 0x62, 0x38, 0x32, 0x31, 0x32, 0x3a, 0x65]}}}, {@euid_gt={'euid>', r10}}, {@context={'context', 0x3d, 'root'}}, {@flag='nolazytime'}, {@euid_gt={'euid>', r10}}, {@uid_lt={'uid<', r10}}, {@obj_type={'obj_type', 0x3d, 'binder\x00'}}]}) 6.669181765s ago: executing program 3 (id=7044): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket(0x15, 0x5, 0xf9c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 6.554853986s ago: executing program 3 (id=7045): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000400)={0xfffffffa, 0xffff8000, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x10001, 0x4}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xc) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x2003, 0x0, 0x0, 0x80}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c504eaabbd73c105b64245491e6756e616d653d69674470fecb3a7176359102a8a9212c6e6f78617474722c76657273"]) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r6, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x7b, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0xaf4, 0x0) bind$tipc(r9, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r4, 0x0, 0xffffffff) 6.295211168s ago: executing program 3 (id=7049): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x80000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6.257635348s ago: executing program 33 (id=7049): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x80000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.165215489s ago: executing program 5 (id=7106): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ba00), 0x0, 0x4800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 2.95689965s ago: executing program 5 (id=7111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f00000001c0)='1\x00', 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) 2.865080351s ago: executing program 5 (id=7114): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x18, r3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e8, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x4, 0x2, 0x3, 0x3}}, 0x26) close(r0) socket$igmp(0x2, 0x3, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00G\b']) 2.787121691s ago: executing program 5 (id=7116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000040000203810101400000000000109022400010000402009040000020300000009210700000122050009058103"], 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x5]}, 0x8, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000001180)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa5, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x40, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x10}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x1, 0x8, 0x80, 0x9, 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x2, 0x91, "695a701607"}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x1, 0x78, "668c5ed59e50"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x58, 0x6, 0x3, 0xd, {0x7, 0x25, 0x1, 0x1, 0x5, 0xe919}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x7}, @as_header={0x7, 0x24, 0x1, 0x8, 0xc, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x58, 0x8, 0x8c, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6e}}}}}}}]}}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="88a80000e8fe091c6202a0ffffff", 0xe, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000080200000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) r5 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000001200)='ns\x00') openat$cgroup_int(r6, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="130000006bffff"], 0x13) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r10 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = dup(r11) fsetxattr$trusted_overlay_upper(r12, &(0x7f0000000000), 0x0, 0xffffffee, 0x1) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) 1.45376347s ago: executing program 1 (id=7136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) futex_waitv(&(0x7f0000003b80)=[{0x200004, &(0x7f0000000300)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hfs\x00', 0x208000, 0x0) 1.435371721s ago: executing program 1 (id=7137): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x8, 0x4, 0x10, 0x3, 0x1000, 0x4}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r0, 0x0, 0x0) (async) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x8, 0x4, 0x10, 0x3, 0x1000, 0x4}) (async) 1.257668181s ago: executing program 1 (id=7139): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) tgkill(r0, r1, 0x30) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x18, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, '-\x97-.-%'}}]}}) 897.521114ms ago: executing program 5 (id=7146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28289e823216ada7}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3a}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x40000) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28289e823216ada7}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3a}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6084}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6084}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x2, 0x10001, {{0x1b, 0x4, 0x2, 0x6, 0x6c, 0x65, 0x0, 0xe, 0x0, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x5e, [@rand_addr=0x64010101, @loopback]}, @generic={0x94, 0xe, "ee2d3d5fc95d1a5bb944fb2c"}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x5, [0x4, 0x4, 0x1]}, @generic={0x7, 0x2}, @lsrr={0x83, 0x1f, 0x3a, [@local, @rand_addr=0x64010100, @private=0xa010101, @empty, @private=0xa010100, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x12, [@empty, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x2, 0x10001, {{0x1b, 0x4, 0x2, 0x6, 0x6c, 0x65, 0x0, 0xe, 0x0, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x5e, [@rand_addr=0x64010101, @loopback]}, @generic={0x94, 0xe, "ee2d3d5fc95d1a5bb944fb2c"}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x5, [0x4, 0x4, 0x1]}, @generic={0x7, 0x2}, @lsrr={0x83, 0x1f, 0x3a, [@local, @rand_addr=0x64010100, @private=0xa010101, @empty, @private=0xa010100, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x12, [@empty, @empty]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x2, 0xc6ec, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x11) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x11) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000980)={{0x0, 0x2710}, {r11, r12/1000+60000}}, &(0x7f00000009c0)) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x94, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc8000000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x40484) sendto(r2, &(0x7f0000000b80)="760d4b0fa35919f5df03dc199ade92406a682e8c6e1685bee79261d07980701a7a39d2f0d91cfa16ba54e856c4989579e95ac4aa05fa5e1efb", 0x39, 0x4040000, &(0x7f0000000bc0)=@ax25={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80) (async) sendto(r2, &(0x7f0000000b80)="760d4b0fa35919f5df03dc199ade92406a682e8c6e1685bee79261d07980701a7a39d2f0d91cfa16ba54e856c4989579e95ac4aa05fa5e1efb", 0x39, 0x4040000, &(0x7f0000000bc0)=@ax25={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x4200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r14, 0xc008ae09, &(0x7f0000000c80)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x1, 0x4, 0x9, 0x10001}]}) (async) ioctl$KVM_GET_EMULATED_CPUID(r14, 0xc008ae09, &(0x7f0000000c80)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x1, 0x4, 0x9, 0x10001}]}) syz_open_procfs(0x0, &(0x7f0000000cc0)='clear_refs\x00') (async) r15 = syz_open_procfs(0x0, &(0x7f0000000cc0)='clear_refs\x00') getsockopt$CAN_RAW_FILTER(r15, 0x65, 0x1, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d40)=0x38) r16 = accept4$inet(r13, &(0x7f0000000d80)={0x2, 0x0, @loopback}, &(0x7f0000000dc0)=0x10, 0x984cc740a1903dc0) ioctl$sock_SIOCETHTOOL(r16, 0x8946, &(0x7f0000000e40)={'macvtap0\x00', &(0x7f0000000e00)=@ethtool_stats={0x1d, 0x6, [0x6, 0x0, 0x80000001, 0x2, 0x0, 0x7fffffffffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(r16, 0x8946, &(0x7f0000000e40)={'macvtap0\x00', &(0x7f0000000e00)=@ethtool_stats={0x1d, 0x6, [0x6, 0x0, 0x80000001, 0x2, 0x0, 0x7fffffffffffffff]}}) r17 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000e80), 0x8000, 0x0) ioctl$FS_IOC_GETFLAGS(r17, 0x80086601, &(0x7f0000000ec0)) rt_sigtimedwait(&(0x7f0000000f00)={[0x7]}, &(0x7f0000000f40), &(0x7f0000000fc0)={0x77359400}, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x4000c840) 745.715595ms ago: executing program 0 (id=7150): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x484043, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040054, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) (async) write(r3, &(0x7f0000000400)="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", 0x1000) 743.214585ms ago: executing program 0 (id=7152): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7472796c6f636b206d658c"], 0xc) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="7f1eff316e5646c12dc6181450b7224a23a7c4739aa764200197887ea5", 0x1d) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x6, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000100)="b89242df59744338c316f4ebb879023d07", 0x11}], 0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 689.974835ms ago: executing program 0 (id=7153): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) getpid() (async) getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 667.268715ms ago: executing program 4 (id=7154): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) signalfd(r0, &(0x7f0000000000)={[0xfff]}, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 593.773326ms ago: executing program 4 (id=7155): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808581, 0x407, 0x0, 0x3, 0x200000, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x1, 0x0, 0xe0a4, 0x1, 0x5, 0x8, 0x0, 0x0, 0x20, 0x5}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x1, 0x0, 0xe0a4, 0x1, 0x5, 0x8, 0x0, 0x0, 0x20, 0x5}}, 0x50) sendfile(r1, r0, 0x0, 0xffffffff) 593.072226ms ago: executing program 0 (id=7156): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80400001000001fe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf256b0000000c009900080000004a00000008000c00080a000008000c00640000000e00bf00100051800c00008005b7d505d6800009"], 0x4c}}, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 581.398546ms ago: executing program 4 (id=7157): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x1000, 0x0) (async) splice(r9, 0x0, r8, 0x0, 0x1000, 0x0) splice(r6, 0x0, r10, 0x0, 0x80, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0)='t', 0x1) (async) write$binfmt_misc(r7, &(0x7f00000002c0)='t', 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000002c0)={{0x2000, 0x100000, 0x9, 0x10, 0x5, 0x2, 0xd, 0xa, 0x7f, 0x4, 0x10, 0x7}, {0x1ddcc0000, 0x5000, 0xc, 0x1, 0x9, 0x1, 0x9, 0x7, 0xfb, 0x0, 0x4, 0x81}, {0x100000, 0xdddd0000, 0x1a, 0x7, 0x1, 0xe, 0x9, 0x1, 0xb8, 0x8, 0x6, 0xff}, {0x8000000, 0x2000, 0x8, 0x7f, 0x2, 0x0, 0x80, 0x14, 0x18, 0x3, 0x9, 0x9}, {0xdddd1000, 0x8000000, 0xb, 0x2, 0x5, 0x2, 0x40, 0xfa, 0x5, 0x7, 0xb9, 0x9}, {0x2, 0x3000, 0xd, 0x2, 0x7, 0x5, 0x5b, 0x8, 0xb3, 0xfa, 0x4, 0x18}, {0xffff1000, 0xdddd1000, 0x10, 0xd, 0x0, 0x0, 0xc, 0x4, 0x9, 0xc, 0x7, 0x2}, {0x2, 0x1000, 0xe, 0x2, 0x6, 0xfe, 0x5, 0x40, 0x1, 0x9, 0x5}, {0x10000, 0xf}, {0xeeee8000}, 0x8000002a, 0x0, 0x2, 0x10a, 0xc, 0x900, 0xeeef0000, 0x1, [0x1, 0x60, 0x9, 0x5]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) open(0x0, 0x0, 0x90) (async) open(0x0, 0x0, 0x90) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f3ffff054d564b"]) syz_clone3(0x0, 0x0) (async) syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 569.598816ms ago: executing program 0 (id=7158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa0028000}) linkat(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x2, 0x3d}, @fda={0x66646185, 0x9, 0x1, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/48, 0x30, 0x1, 0x2d}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 396.989607ms ago: executing program 1 (id=7159): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x3fa89d202c6137b0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x30b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x1) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x80, 0x0, [{@multicast2}, {@private}, {@initdev}, {@broadcast}, {@local}, {@multicast2}, {@broadcast}, {@initdev}]}}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigaction(0x30, &(0x7f0000000380)={&(0x7f0000000280)="c4816972f30cf0836e000a67400f0f28b7d3bcba00000100c423b90c00f3400f0d7cba1e660fc6bcf07a000000a5c442bd0899000800000f38f0a0a7000000c483e9cf250f0500000c", 0x8000000, &(0x7f0000000300)="260f0fa7b488feb990c4a1cd5c4c7b99c40181f40db2820000c4235d6a0a00c4e17d286900c4e295a67b0066470fee0d1353000042db4500c44305440f8ac401e16a1a", {[0x4]}}, &(0x7f0000000480)={&(0x7f00000003c0)="f3400fbc1cde66440f2944ba87660f380b820f000000c4814d63fbf669f647d9eef0831d0000000043e13e2e660f78c2090065672e430fe88705000000", 0x0, &(0x7f0000000400)="0f0fb545d50000a73e0f621b8fc978818cdb0080000067f00fc70a660f38062500000000c4a255b96106c4a2d94709c4817ddeb908000000f342da8a07000000660f381411"}, 0x8, &(0x7f00000004c0)) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000500)={0x1}) r5 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x267, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8e, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x534}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xd, 0xb7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x1, 0x7, 0x7, 0x8, 0x80}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x448}}]}) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000d40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000700)={0x5f8, r1, 0x706, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_FRAME={0x5c1, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="2ee79e20a596", {0xc}, "", @value={0x7, 0x1, 0x0, 0x0, 0xc}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7f}, @device_b, @device_b}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r6 = signalfd(r3, &(0x7f0000000d80), 0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r6) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xbc, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x97, 0x3, "f48103f23bb0a1d25996296858c69f0e3b2af9d4bbf5dc0561f2e9e807b0311123a4dbbfe581a915fb5b4b1d488b9a494312a9c5ac70a8390006187ff8c729642cd807c513e0b377f13e39cf000f835f39dc534e63f9f7a045af07b960997408e50c905171b2c03d84e3bd5a67d616b11355a26af10340be3a43435723760fdcde90b5a97b31c18202a952414eef3b1817000e"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000f80)=0x6, 0x4) (async) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000fc0)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f00000010c0)) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001200)={&(0x7f0000001100), 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x64, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_TESTDATA={0x44, 0x45, "b953ed977f0763fe7f652ab5447bea189338abc55d5689c54ada0679547777e34462684ef8c6528ad50f477a970828880e5a6ceda6c6e16f303b060a8382f79e"}]}, 0x64}}, 0x0) (async) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000001240)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001500)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x1a, 0x7f, 0x3, 0x6, 0x21, @mcast1, @local, 0x7, 0x8000, 0x1, 0x1}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001600)={'vcan0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000001300)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001340)="d921c25aec46f700ab6d9b25e2208a516ba2f8cdc4a795578c06c1e63a25560a440092a57a742d44c7bb93d0d5f5d278084dc7c4813684aaa987bc9d9681ff19ab358371c1c0897d176e5b2f993025fee19e59f087edcb734610aa75e3b6b21a06d2816041aebe872fb3c41d5c3af2e99cb140dd4dc77045ecb6506ec9820069ff", 0x81}, {&(0x7f0000001400)="56f1e8fdd18b45b82ed8679c7992bcfb37f6eda97a50f0f011d5ccba8a1f6ed3b19d9d3f4960d90a62f6c9f637184c3c6cd2802fbb3edd9af27ab5a908a6626006b39828baf5c6ca49510325bc09fcbf329971f6155c3504be04c853b598f0a2358dca462e46adc8f6420e694ea02da76311c784121eecd48444709a1ba7af42fec9430ccbd57ce360f7166c59e0e7d53aa0bee83ee43c9c35667f", 0x9b}], 0x2, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010102, @multicast2}}}], 0x78}, 0x4000) (async) write$binfmt_script(r6, &(0x7f0000001700)={'#! ', './file0', [{0x20, '\'}[].'}], 0xa, "9b5d5391331d77dd63df73d71ef0b5eadca0564df01fe015ffa121abf7a4a0c7dbd11fc558f2abdab7b9b5e1f38580b37ec021fdf5a4d06339d9c4d387b2bad886ad92532637ff6bbbcb469a83eef8c28f92cba926b4dff7bc173fc40fa6e625b241a10cbe3b1249e2bd78774d8bb484ff1e"}, 0x83) read$FUSE(r6, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$pagemap(r12, &(0x7f0000003800)) (async) syz_usb_disconnect(r5) r13 = syz_usb_connect(0x5, 0x557, &(0x7f0000003840)={{0x12, 0x1, 0x200, 0x88, 0x16, 0x73, 0x8, 0x45e, 0x449, 0xceef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x545, 0x2, 0x3, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0xf7, 0x81, 0x2, 0xbc, 0x4b, 0xa6, 0x2, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xd3, 0x7, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf0, 0x2, 0x3, 0x6, "78e5cd344d"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x44, 0x4, 0x0, 0xc}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0xb0, 0x0, "a9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x44, 0x7, 0x5}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x61, 0x3, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x84, 0x2, [@generic={0xae, 0x5, "a516fe28add45c8bb038c87c107a32f07016448383a7b1ce5754d808437d65120f9f716dd0473ff05aa98523b95fc1270e1553ee905b9ef60e755e1320c2e0e5737a06c979d6e95d8aa51889743bebb3c09b767371820f4b510c827a5f28fb273cd996fe7326b389fd93e444bedf67e952efd5ca02713802c6bc2313a654149bf561de77d06399a0f54b5b9c8266445bc9b083f2d80e13aa9fcbac72fef462fdb288851e123142114aaa7e0d"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x3, 0xc, 0xf8, [@generic={0xd0, 0xc, "697371752fcb2c40dd167966f949c1f3afc71d031cedb0aa288e8ca0a3ffcfad1a49c5d82567d29a760002d7bc670839747b572a0523a11cd234a8c9d2d4883c836d500840202119152258e59041e3c4183a12508090091a960ebef664b8ac724be4c8b04369eb368c64b0c549efba4bdad793ceab0afe46397d5291e80797ce8dd6fe79dc00dffb7b8f6b2612889c211f0f463be78008510a86398158d0bbbf1b844761193e34784de4397cf0982852b0cb71c1fc94ee5047c64cd51957926d45f7a7398a18cef3d95025f2c3d1"}]}}]}}, {{0x9, 0x4, 0x82, 0x1, 0x7, 0x71, 0x20, 0xb, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0xfbff, 0x9}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0xe, "fa"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x6, 0x9, 0x1, 0x0, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x7, 0xd, '}'}]}], [{{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x8, 0x4, [@generic={0x96, 0x22, "750c7ba90519e615b5c821416ebc5d5f35a9d02307648ad2cdf19683f87ad7be423382cf1aa35c37a600654493470755520ff30ff14f11bf13efcec456f375f71789b94c9217f07cf309c997c11669a1a800c0db65428ea0d2cad78f8f37c80ede9284dc7a62ca4d8fc6ab03b51d135e811b7476cb8f8f50c39674d21c5433a3e6f14dc62f3f117848fcda29d48304256eecd682"}]}}, {{0x9, 0x5, 0xd, 0x18, 0x10, 0x3, 0x8, 0xb, [@generic={0x8f, 0x31, "e75e2eeecc94a794c41fa4a1148cfbbed6393bfe4a3fa6262fbb04dbc397eee97be8d4188632c72f98e0807c65425f8047b4459de76a3f4e23c0902227e50b8b7f90926f7d4d20eebd2012733ac24f9276ccc7bc456991fa2c532ea772b659c8f1ef880523385a11a2bd7e658da98a589fbd6cf62fe8485623ebedd8050179d5ee8016b4575d932f1428067269"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x2, 0x1, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x62, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x0, 0x1, 0x80, [@generic={0x5b, 0x1, "a4463b72faff861547d408e6ee28395e610c4e9230396d14b5df3f21ac73d2d0d9189850f48b0e7f9b80f15faf97fb02ee29c7024644477a652c415942944ba5bb392892509f220baaca6b0843d5f77b8184a8a98f4834603f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x80, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3}]}}, {{0x9, 0x5, 0xe, 0x1, 0x240, 0x8, 0xc, 0x9, [@generic={0x88, 0xf, "89d9984721ca6c0ea3820631ea459a750369337c04981a036d08b7b954c4378eac5290b04d4662904d89737710120189364e2425678dc2688b04abf0d2fa95e556807336fbb497770361219caf0c2311e0412381713e25dfd70d7a3626a22c1ac74b9fd31917dcc75458643c9afec6b51b86519424a5f15a70b7f4fa5d4fa85e076c66d642cb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x1, 0x1, [@generic={0xe6, 0xc, "5b2d7627ed647cad25a47b4ebbb1404c78f4f4acb572bd865ec68ca7403b90ccba6503dc32954b905a0a3bc66aab9478e523251844d0490f61f63d338ff0954d83bff53440858ab8388aa48bebc3ccf075296eff899b5d1e03e11199e58244a4fe84ed00f3333c773e31f5da51df951416ebabd51cf723e431f27c141e5a822c94b62912163a419aa783e19cb7f17483f4c8d993caa4dbf345a901af0310e51c6b218a689f3c67284b934a94180808be215c9872ce1d164d44bb024fe2943d1a9d5875d7f338150acf97255b4422d69af99e9fae94fe4cca635b5a7a12cd2bb9d2c3438c"}]}}]}}]}}]}}, &(0x7f0000003f80)={0xa, &(0x7f0000003dc0)={0xa, 0x6, 0x300, 0x3, 0x9, 0x8, 0x20, 0x2}, 0x3b, &(0x7f0000003e00)={0x5, 0xf, 0x3b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "58f00f839290a8bccdfd9c9d3bfea61d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x41, 0xcd, 0x81, 0x0, 0x4}, @generic={0x17, 0x10, 0x3, "c3dec91993a701bf16bcecb8bf5ba1c15e9907c9"}]}, 0x5, [{0x4, &(0x7f0000003e40)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000003f00)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000003f40)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_ep_write(r13, 0x7, 0x46, &(0x7f0000004000)="d48740553d36cf6b702ebdad466da807d75e03ab2901114769f8d6337bb18d1c97386108ba366408f23fcf2400c640c092b4150026ac8ac55347dd0d43207f81c1bf9a6ae602") 395.966117ms ago: executing program 4 (id=7160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x0, 0xa, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1}, {0x5000, 0x8080000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x1, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x10, 0xf6}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x8080000, 0x8000000, 0x9, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0x0, 0xf9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40}, {0x6000}, {0x3000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x4001, 0x900, [0x5, 0x0, 0x0, 0x3fffffffffff]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x22, 0x0, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900f3fe2abd700001000000ff010000000000000000000000000001ac1e000100000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000003000000b86b6e0000000003000000004400080042"], 0xfc}}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, r9, 0x211, 0x70bd2d, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x7f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xffffffffffffffa2, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0xfffffffd}, @decrefs], 0xfffffffffffffe4b, 0x0, 0x0}) 382.706987ms ago: executing program 4 (id=7161): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80f]}, 0x8) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x0, 0xf2, "f0ba88fecc0161b06278b5300aba28e6c5e3f11244e17d5b7e9d187535ba7605f2bbbd5bee34d637d02012cf83bcb0c75d1cf48bd72b3f9c0c759da18ce2178bad55140a4515b53b761af7d3165f3c44111b98392d71b2ecfffea68c4f99031c3e29863351684b1328366a3da2fc4abe977d327381172bbd259132f2f964bad34cdc8f5a779810903b6ea89264c6d30f3ead796b55fe2b9627efabb1c9c490a22f9f8d75a4a7bf21e5a7821e90e6b8af0be06c006f99cffbd21d9146dc30081f0a7be7c05f5a98bcb2ae34ac6d1eb790257832aea773a18d7e603f0ab5c0324ef922f2f63d2e94b6dc8116d263ada6d71470"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSIG(r1, 0x40045436, 0x1b) fdatasync(r1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x2, 0x4, 0x80000001, 0x6dd, 0x4, 0x7}, {0x1, 0xb8b, 0xa5, 0xe, 0x7, 0x463f}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000500)={0x0, &(0x7f00000004c0)}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r2, &(0x7f0000000680)={0x55a3, 0x3, 0x2, 0x1, 0x3, 0x2, 0x7, 0x9, 0x7}) sendmsg$nl_generic(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, 0x2e, 0x2, 0x70bd2d, 0x25dfdbfd, {0x13}, [@nested={0xaa, 0xfd, 0x0, 0x1, [@generic="3226a1a1d403e54d97b05c09533eb8f06e01c32de5fac4b8f7d773ffeb978290166a7268274e56d19ff5ce7e6e67ea986e02c42adae2b12979ae57bc1b9706524b8c8f6e6301dd8dfabf337c20d4f0a98ea5f435545f082d4dcaba98fcaddce38ea714c948e4b8a7d533e5c50b28dae6afbe94752feaa52c2b81f19299753773cfd72810af84cfed41fcfa0f23f81ea5867465d1d3204e064f4835688118", @typed={0x4, 0x114}, @nested={0x4, 0xc4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x52}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040091}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd4, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000c80)={0x2, 0xb, 0x4050, 0xc480, 0x9}) getsockname$inet6(r0, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000d00)=0x1c) r6 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000d40)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001000)={{r0}, r7, 0x6, @inherit={0x90, &(0x7f0000000f40)={0x1, 0x9, 0x18999847, 0x9, {0x2, 0xe, 0xf, 0x2, 0xfffffffffffffffe}, [0x0, 0x3, 0x5, 0x1, 0x4, 0x8000, 0x8000000000000001, 0xce, 0x5]}}, @subvolid=0x9}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000002040)={{r0}, 0x2, &(0x7f0000002000)=[0x8, 0x7], 0x5, 0x0, 0x1}) r8 = dup2(r4, r1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000020c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x30, r0, 0x10000000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) inotify_init1(0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x80, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x146}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 371.551468ms ago: executing program 1 (id=7162): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa60542, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000002c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000240)) (async) fsetxattr(r1, &(0x7f0000000180)=@random={'security.', './binderfs2/binder0\x00'}, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x14, 0x3) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x7b, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) 285.483868ms ago: executing program 1 (id=7163): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x80008, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0xee47, @empty}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000200)={0x0, 0x6, 0x3, 0x2a4d, 0x4a, 0xfd, 0x0}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003180)={&(0x7f00000003c0)={0x50, 0xfffffffffffffff5, 0x10000, {0x7, 0x2b, 0x5, 0x482009, 0x7f08, 0x1000, 0x2, 0x6, 0x0, 0x0, 0x40, 0x276b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x18, 0xffffffffffffffda, 0x7ff, {0x874}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x10005, &(0x7f0000000500)={0x3e, 0x3027, 0x2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) fallocate(r9, 0x10, 0x6, 0x3) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28a00, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c30816040102030109025000010000000009041f0000ff0100000a2401040005020102", @ANYRES64=r10], 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 284.958398ms ago: executing program 4 (id=7164): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfff17000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x16, 0x60, 0x5a, 0x40, 0x14ea, 0xab11, 0x4ad2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0xba, 0x10, 0xa5}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x15, 0x6, "30a160fb3b56"}, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 62.79968ms ago: executing program 5 (id=7165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async, rerun: 32) wait4(r1, 0x0, 0x0, 0x0) (rerun: 32) ptrace$setregset(0x4205, r1, 0x2, &(0x7f00000001c0)={&(0x7f0000001080)="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", 0x200}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 0s ago: executing program 0 (id=7166): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1832,\x00']) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="3f55710f1de90000", 0x8, 0x20000000, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x4, @mcast2}, 0x1c) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYRES64=r3]) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) kernel console output (not intermixed with test programs): 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.162694][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.189602][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.209569][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.259971][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.269096][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.300043][ T45] usb 1-1: config 0 descriptor?? [ 354.369228][ T1132] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 354.451875][ T36] kauditd_printk_skb: 832 callbacks suppressed [ 354.451894][ T36] audit: type=1400 audit(2000000183.726:33589): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.494994][ T36] audit: type=1400 audit(2000000183.756:33590): avc: denied { mounton } for pid=17333 comm="syz.3.5660" path="/472/file0" dev="tmpfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.546731][ T36] audit: type=1400 audit(2000000183.816:33591): avc: denied { ioctl } for pid=17298 comm="syz.0.5649" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.591433][ T1132] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 190, changing to 11 [ 354.609316][ T1132] usb 2-1: config 1 interface 0 has no altsetting 0 [ 354.619234][ T36] audit: type=1400 audit(2000000183.846:33592): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.669271][ T1132] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 354.678601][ T1132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.709618][ T1132] usb 2-1: Product: syz [ 354.714237][ T1132] usb 2-1: Manufacturer:  [ 354.718889][ T1132] usb 2-1: SerialNumber: syz [ 354.724045][ T36] audit: type=1400 audit(2000000183.846:33593): avc: denied { ioctl } for pid=17298 comm="syz.0.5649" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.779202][ T36] audit: type=1400 audit(2000000183.846:33594): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.821307][ T45] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 354.850468][ T45] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 354.864716][ T36] audit: type=1400 audit(2000000183.856:33595): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.939177][ T36] audit: type=1400 audit(2000000183.856:33596): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.989208][ T36] audit: type=1400 audit(2000000183.866:33597): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.040469][ T1132] usbhid 2-1:1.0: can't add hid device: -71 [ 355.046477][ T1132] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 355.086095][ T36] audit: type=1400 audit(2000000183.866:33598): avc: denied { ioctl } for pid=17318 comm="syz.1.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.112651][ T1132] usb 2-1: USB disconnect, device number 48 [ 355.129714][T17299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17299 comm=syz.0.5649 [ 355.236590][T17353] fuse: Bad value for 'fd' [ 355.312220][ T1337] usb 1-1: USB disconnect, device number 78 [ 355.575509][T17368] tipc: Started in network mode [ 355.589217][T17368] tipc: Node identity 4, cluster identity 4711 [ 355.609139][T17368] tipc: Node number set to 4 [ 355.710918][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5674'. [ 355.831442][T17389] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5678'. [ 355.969521][T17393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.970803][T17393] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 356.052323][T17404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.076431][T17405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.100054][T17404] rust_binder: inc_ref_done called when no active inc_refs [ 357.449231][ T1132] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 357.481247][T17476] /dev/loop4: Can't lookup blockdev [ 357.649053][ T1132] usb 1-1: Using ep0 maxpacket: 16 [ 357.662334][ T1132] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 357.672081][ T1132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.681328][ T1132] usb 1-1: Product: syz [ 357.685642][ T1132] usb 1-1: Manufacturer: syz [ 357.691412][ T1132] usb 1-1: SerialNumber: syz [ 357.705753][ T1132] r8152-cfgselector 1-1: Unknown version 0x0000 [ 357.719053][ T1132] r8152-cfgselector 1-1: config 0 descriptor?? [ 357.779635][T17489] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5713'. [ 358.095453][T17491] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5714'. [ 358.104745][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5714'. [ 358.134442][ T1132] r8152-cfgselector 1-1: USB disconnect, device number 79 [ 358.495822][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5719'. [ 359.178966][ T1337] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 359.213819][T17565] overlay: ./bus is not a directory [ 359.219557][T17564] 8021q: VLANs not supported on lo [ 359.226126][T17565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16404 sclass=netlink_tcpdiag_socket pid=17565 comm=syz.4.5736 [ 359.338952][ T1337] usb 1-1: Using ep0 maxpacket: 32 [ 359.347497][ T1337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.359036][ T1337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.369064][ T1337] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 359.378155][ T1337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.388016][ T1337] usb 1-1: config 0 descriptor?? [ 359.597076][ T36] kauditd_printk_skb: 419 callbacks suppressed [ 359.597101][ T36] audit: type=1400 audit(2000000188.866:34018): avc: denied { ioctl } for pid=17548 comm="syz.0.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.628537][ T36] audit: type=1400 audit(2000000188.866:34019): avc: denied { ioctl } for pid=17548 comm="syz.0.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.653909][ T36] audit: type=1400 audit(2000000188.866:34020): avc: denied { ioctl } for pid=17548 comm="syz.0.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.679862][ T36] audit: type=1400 audit(2000000188.866:34021): avc: denied { ioctl } for pid=17548 comm="syz.0.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.745038][ T1337] usbhid 1-1:0.0: can't add hid device: -71 [ 359.765270][ T1337] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 359.765952][ T36] audit: type=1400 audit(2000000189.036:34022): avc: denied { read write } for pid=16338 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.775742][ T1337] usb 1-1: USB disconnect, device number 80 [ 359.807135][ T36] audit: type=1400 audit(2000000189.036:34023): avc: denied { read write open } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.839800][ T36] audit: type=1400 audit(2000000189.076:34024): avc: denied { ioctl } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.867477][ T36] audit: type=1400 audit(2000000189.116:34025): avc: denied { create } for pid=17569 comm="syz.0.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.888249][ T36] audit: type=1400 audit(2000000189.146:34026): avc: denied { setopt } for pid=17569 comm="syz.0.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.908846][ T36] audit: type=1400 audit(2000000189.166:34027): avc: denied { setopt } for pid=17569 comm="syz.0.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.109910][T17579] netlink: 679 bytes leftover after parsing attributes in process `syz.4.5742'. [ 360.145926][T17581] cgroup: Name too long [ 360.217994][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5745'. [ 360.228978][ T1337] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 360.239631][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5745'. [ 360.378970][ T1337] usb 1-1: Using ep0 maxpacket: 16 [ 360.386816][ T1337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.397135][ T1337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.409726][ T1337] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.418979][ T1337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.427116][ T1337] usb 1-1: Product: syz [ 360.431358][ T1337] usb 1-1: Manufacturer: syz [ 360.435975][ T1337] usb 1-1: SerialNumber: syz [ 360.683400][T17602] netlink: 'syz.1.5748': attribute type 9 has an invalid length. [ 360.808256][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5749'. [ 360.852431][ T1337] usb 1-1: cannot find UAC_HEADER [ 360.876230][ T1337] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 360.890232][ T1337] usb 1-1: USB disconnect, device number 81 [ 360.944478][T16183] udevd[16183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 360.961440][T17609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17609 comm=syz.4.5751 [ 361.768059][T17655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5764'. [ 361.813134][T17658] binder: Unknown parameter '0xffffffffffffffff' [ 362.076187][T17675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.110917][T17675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.149245][T17675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 362.214994][T17682] netlink: 'syz.3.5772': attribute type 1 has an invalid length. [ 362.308792][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 362.461285][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 362.469505][ T10] usb 1-1: config 1 has no interface number 0 [ 362.475724][ T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 362.485414][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 362.498105][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 362.507308][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.515344][ T10] usb 1-1: Product: syz [ 362.519653][ T10] usb 1-1: Manufacturer: syz [ 362.524264][ T10] usb 1-1: SerialNumber: syz [ 362.736474][ T45] usb 1-1: USB disconnect, device number 82 [ 363.283508][T17703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.288098][T17703] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 363.379573][T17710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 363.414463][T17712] /dev/nullb0: Can't lookup blockdev [ 363.444493][T17717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.450106][T17717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265 [ 363.459232][T17717] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 363.718689][ T63] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 363.938717][ T63] usb 1-1: device descriptor read/64, error -71 [ 364.178698][ T63] usb 1-1: device descriptor read/64, error -71 [ 364.429499][ T63] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 364.598677][ T63] usb 1-1: device descriptor read/64, error -71 [ 364.709472][ T36] kauditd_printk_skb: 408 callbacks suppressed [ 364.709492][ T36] audit: type=1400 audit(2000000193.986:34436): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.743109][ T36] audit: type=1400 audit(2000000193.986:34437): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.769430][ T36] audit: type=1400 audit(2000000194.016:34438): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.796593][ T36] audit: type=1400 audit(2000000194.016:34439): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.822423][ T36] audit: type=1400 audit(2000000194.016:34440): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.847743][ T36] audit: type=1400 audit(2000000194.046:34441): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.872921][ T36] audit: type=1400 audit(2000000194.046:34442): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.898051][ T36] audit: type=1400 audit(2000000194.106:34443): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.898690][ T63] usb 1-1: device descriptor read/64, error -71 [ 365.049164][ T63] usb usb1-port1: attempt power cycle [ 365.051296][ T36] audit: type=1400 audit(2000000194.326:34444): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.080866][ T36] audit: type=1400 audit(2000000194.326:34445): avc: denied { ioctl } for pid=17714 comm="syz.0.5786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.152942][T17764] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52 sclass=netlink_xfrm_socket pid=17764 comm=syz.3.5804 [ 365.388617][ T63] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 365.419261][T17786] tipc: Enabling not permitted [ 365.424937][T17786] tipc: Enabling of bearer rejected, failed to enable media [ 365.431513][ T63] usb 1-1: device descriptor read/8, error -71 [ 365.572551][ T63] usb 1-1: device descriptor read/8, error -71 [ 365.818604][ T63] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 365.849729][ T63] usb 1-1: device descriptor read/8, error -71 [ 365.918563][T17809] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5819'. [ 365.927593][T17809] z00X: renamed from gretap0 (while UP) [ 365.934638][T17809] z00X: entered allmulticast mode [ 365.997254][ T63] usb 1-1: device descriptor read/8, error -71 [ 366.011627][T17817] 9pnet_fd: Insufficient options for proto=fd [ 366.041019][T17819] netlink: 'syz.1.5822': attribute type 11 has an invalid length. [ 366.090738][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5821'. [ 366.101121][T17820] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.108652][ T63] usb usb1-port1: unable to enumerate USB device [ 366.115833][T17820] bridge_slave_0 (unregistering): left allmulticast mode [ 366.123897][T17820] bridge_slave_0 (unregistering): left promiscuous mode [ 366.131125][T17820] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.540945][T17840] rust_binder: 267: no such ref 3 [ 366.546141][T17840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 366.831587][T17861] netlink: 'syz.4.5834': attribute type 16 has an invalid length. [ 366.849616][T17861] netlink: 'syz.4.5834': attribute type 2 has an invalid length. [ 366.857381][T17861] netlink: 64086 bytes leftover after parsing attributes in process `syz.4.5834'. [ 366.925980][T17872] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5836'. [ 367.342814][ T980] bridge_slave_1: left allmulticast mode [ 367.348631][ T980] bridge_slave_1: left promiscuous mode [ 367.354283][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.363679][ T980] bridge_slave_0: left allmulticast mode [ 367.374452][ T980] bridge_slave_0: left promiscuous mode [ 367.394410][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.434767][T17912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17912 comm=syz.3.5850 [ 367.437053][T17909] overlayfs: maximum fs stacking depth exceeded [ 367.505864][T17915] fuse: Bad value for 'group_id' [ 367.511126][T17915] fuse: Bad value for 'group_id' [ 367.560083][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.567325][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.576067][T17897] bridge_slave_0: entered allmulticast mode [ 367.584231][T17897] bridge_slave_0: entered promiscuous mode [ 367.593240][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.601342][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.610658][T17897] bridge_slave_1: entered allmulticast mode [ 367.617958][T17897] bridge_slave_1: entered promiscuous mode [ 367.630637][ T980] veth1_macvtap: left promiscuous mode [ 367.637794][ T980] veth0_vlan: left promiscuous mode [ 367.787306][T17928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.795459][T17928] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 367.846316][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.861570][T17897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.868914][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.876006][T17897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.933689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.941951][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.956245][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.963368][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.975153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.982328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.063961][T17897] veth0_vlan: entered promiscuous mode [ 368.101507][T17897] veth1_macvtap: entered promiscuous mode [ 368.371054][T17959] tipc: MTU too low for tipc bearer [ 368.446781][T17968] netlink: 'syz.1.5864': attribute type 16 has an invalid length. [ 368.454719][T17968] netlink: 'syz.1.5864': attribute type 3 has an invalid length. [ 368.463276][T17968] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.5864'. [ 368.512897][T17971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5865'. [ 368.644297][T17981] fuse: Bad value for 'fd' [ 368.749340][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5870'. [ 368.906610][T17997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5874'. [ 368.933958][T17999] kvm_intel: kvm [17998]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 369.250474][T18024] netlink: 'syz.4.5881': attribute type 2 has an invalid length. [ 369.330867][T18028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 369.405617][T18033] binder: Unknown parameter '' [ 369.422898][T18033] binder: Unknown parameter '' [ 369.484697][T18040] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 369.493154][T18040] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 369.502907][T18040] overlayfs: missing 'lowerdir' [ 369.514121][T18040] rust_binder: Write failure EFAULT in pid:45 [ 369.552303][T18043] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 369.641810][T18053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303 [ 369.719390][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 369.719411][ T36] audit: type=1400 audit(2000000198.997:35290): avc: denied { read write } for pid=17897 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.768608][ T36] audit: type=1400 audit(2000000198.997:35291): avc: denied { read write open } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.795749][ T36] audit: type=1400 audit(2000000198.997:35292): avc: denied { ioctl } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.824896][ T36] audit: type=1400 audit(2000000199.027:35293): avc: denied { create } for pid=18055 comm="syz.4.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.844942][ T36] audit: type=1400 audit(2000000199.047:35294): avc: denied { read write } for pid=17897 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.869375][ T36] audit: type=1400 audit(2000000199.047:35295): avc: denied { read write open } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.894971][ T36] audit: type=1400 audit(2000000199.047:35296): avc: denied { ioctl } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.921626][ T36] audit: type=1400 audit(2000000199.097:35297): avc: denied { mounton } for pid=18060 comm="syz.4.5894" path="/16/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 369.944368][ T36] audit: type=1400 audit(2000000199.097:35298): avc: denied { mount } for pid=18060 comm="syz.4.5894" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 369.966342][ T36] audit: type=1400 audit(2000000199.097:35299): avc: denied { read write } for pid=18060 comm="syz.4.5894" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 369.994471][T18064] netlink: 'syz.4.5895': attribute type 25 has an invalid length. [ 370.248371][ T1337] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 370.388357][ T1337] usb 5-1: device descriptor read/64, error -71 [ 370.549095][T18070] binder: Bad value for 'stats' [ 370.595598][T18072] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5899'. [ 370.638331][ T1337] usb 5-1: device descriptor read/64, error -71 [ 370.878314][ T1337] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 371.018313][ T1337] usb 5-1: device descriptor read/64, error -71 [ 371.232444][T18079] netlink: 'syz.3.5901': attribute type 16 has an invalid length. [ 371.240391][T18079] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.5901'. [ 371.258406][ T1337] usb 5-1: device descriptor read/64, error -71 [ 371.368378][ T1337] usb usb5-port1: attempt power cycle [ 371.708289][ T1337] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 371.730599][ T1337] usb 5-1: device descriptor read/8, error -71 [ 371.860627][ T1337] usb 5-1: device descriptor read/8, error -71 [ 371.978250][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 372.085743][T18107] 9pnet_fd: Insufficient options for proto=fd [ 372.102507][ T1337] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 372.118274][ T10] usb 1-1: device descriptor read/64, error -71 [ 372.132457][ T1337] usb 5-1: device descriptor read/8, error -71 [ 372.270703][ T1337] usb 5-1: device descriptor read/8, error -71 [ 372.358243][ T10] usb 1-1: device descriptor read/64, error -71 [ 372.378322][ T1337] usb usb5-port1: unable to enumerate USB device [ 372.598210][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 372.738243][ T10] usb 1-1: device descriptor read/64, error -71 [ 372.978215][ T10] usb 1-1: device descriptor read/64, error -71 [ 373.088313][ T10] usb usb1-port1: attempt power cycle [ 373.163656][T18122] input: syz1 as /devices/virtual/input/input36 [ 373.277156][T18126] netlink: 'syz.1.5918': attribute type 6 has an invalid length. [ 373.337326][T18126] netlink: 'syz.1.5918': attribute type 17 has an invalid length. [ 373.438147][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 373.460566][T18132] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5920'. [ 373.460954][ T10] usb 1-1: device descriptor read/8, error -71 [ 373.581684][T18139] overlayfs: failed to clone upperpath [ 373.589017][T18139] /dev/nbd1: Can't lookup blockdev [ 373.601059][ T10] usb 1-1: device descriptor read/8, error -71 [ 373.848148][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 373.881049][ T10] usb 1-1: device descriptor read/8, error -71 [ 374.013007][ T10] usb 1-1: device descriptor read/8, error -71 [ 374.114436][T18182] fuse: Bad value for 'fd' [ 374.138622][ T10] usb usb1-port1: unable to enumerate USB device [ 374.191610][T18192] fuseblk: Bad value for 'source' [ 374.281996][T18200] rust_binder: Write failure EFAULT in pid:85 [ 374.483257][T18210] netlink: 'syz.4.5949': attribute type 16 has an invalid length. [ 374.506108][T18210] netlink: 'syz.4.5949': attribute type 2 has an invalid length. [ 374.513932][T18210] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.5949'. [ 374.629340][T18226] veth0_to_team: entered promiscuous mode [ 374.635251][T18226] veth0_to_team: entered allmulticast mode [ 374.699724][T18228] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.718634][T18228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 374.729659][ T36] kauditd_printk_skb: 479 callbacks suppressed [ 374.729676][ T36] audit: type=1400 audit(2000000204.007:35779): avc: denied { read write } for pid=16338 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.767044][T18233] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5956'. [ 374.831314][ T36] audit: type=1400 audit(2000000204.017:35780): avc: denied { bind } for pid=18227 comm="syz.1.5955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.853983][ T36] audit: type=1400 audit(2000000204.017:35781): avc: denied { name_bind } for pid=18227 comm="syz.1.5955" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 374.876697][T18241] netlink: 'syz.3.5959': attribute type 13 has an invalid length. [ 374.904165][ T36] audit: type=1400 audit(2000000204.017:35782): avc: denied { node_bind } for pid=18227 comm="syz.1.5955" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 374.934050][ T36] audit: type=1400 audit(2000000204.027:35783): avc: denied { read } for pid=18231 comm="syz.4.5956" name="binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 374.984020][ T36] audit: type=1400 audit(2000000204.027:35784): avc: denied { read open } for pid=18231 comm="syz.4.5956" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.027540][ T36] audit: type=1400 audit(2000000204.027:35785): avc: denied { map } for pid=18231 comm="syz.4.5956" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.052884][ T36] audit: type=1400 audit(2000000204.027:35786): avc: denied { read } for pid=18231 comm="syz.4.5956" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.081097][ T36] audit: type=1400 audit(2000000204.037:35787): avc: denied { read write open } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.114158][ T36] audit: type=1400 audit(2000000204.037:35788): avc: denied { ioctl } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.311509][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'. [ 375.646626][T18286] 9p: Unknown uid 00000000004294967295 [ 376.088890][ T63] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 376.285954][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.294402][T18325] tipc: Started in network mode [ 376.299957][T18325] tipc: Node identity , cluster identity 4711 [ 376.306052][T18325] tipc: Failed to set node id, please configure manually [ 376.316885][T18325] tipc: Enabling of bearer rejected, failed to enable media [ 376.316954][ T63] usb 5-1: config 3 has an invalid interface number: 86 but max is 0 [ 376.343419][ T63] usb 5-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 376.378151][ T63] usb 5-1: config 3 has no interface number 0 [ 376.394068][ T63] usb 5-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid maxpacket 56804, setting to 1024 [ 376.409114][ T63] usb 5-1: config 3 interface 86 altsetting 11 bulk endpoint 0xC has invalid maxpacket 1024 [ 376.420452][ T63] usb 5-1: config 3 interface 86 has no altsetting 0 [ 376.432204][ T63] usb 5-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 376.445215][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.464000][ T63] usb 5-1: SerialNumber: syz [ 376.485528][T18301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 376.729369][T18301] rust_binder: 112: no such ref 0 [ 376.735937][T18301] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 376.747601][T18335] netlink: 'syz.3.5990': attribute type 63 has an invalid length. [ 376.752514][T18301] rust_binder: 112: no such ref 2 [ 376.761872][T18336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 376.762809][T18336] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 376.764722][T18301] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 376.777973][T18335] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5990'. [ 376.790730][ T63] usb 5-1: bad CDC descriptors [ 376.817963][ T63] usb 5-1: USB disconnect, device number 35 [ 376.822742][T18335] A link change request failed with some changes committed already. Interface z00X may have been left with an inconsistent configuration, please check. [ 376.877963][T18337] netlink: 'syz.3.5990': attribute type 63 has an invalid length. [ 376.896025][T18337] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5990'. [ 377.122424][T18357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 377.123149][T18357] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 377.159762][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5997'. [ 377.176648][T18359] tipc: Enabling of bearer rejected, media not registered [ 377.300996][T18367] sit0: entered promiscuous mode [ 377.308792][T18367] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 377.316666][T18367] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5999'. [ 377.333379][T18367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 377.375103][T18369] __vm_enough_memory: pid: 18369, comm: syz.4.6000, bytes: 18014402804453376 not enough memory for the allocation [ 377.757930][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 377.907938][ T10] usb 1-1: device descriptor read/64, error -71 [ 378.177957][ T10] usb 1-1: device descriptor read/64, error -71 [ 378.291370][T18457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6028'. [ 378.300474][T18457] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6028'. [ 378.310773][T18457] netlink: 'syz.3.6028': attribute type 6 has an invalid length. [ 378.318604][T18457] netlink: 'syz.3.6028': attribute type 5 has an invalid length. [ 378.417890][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 378.557922][ T10] usb 1-1: device descriptor read/64, error -71 [ 378.627870][ T45] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 378.790517][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 378.798835][ T45] usb 5-1: config 0 has no interface number 0 [ 378.804956][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 378.807873][ T10] usb 1-1: device descriptor read/64, error -71 [ 378.824254][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 378.833475][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.841534][ T45] usb 5-1: Product: syz [ 378.845796][ T45] usb 5-1: Manufacturer: syz [ 378.850476][ T45] usb 5-1: SerialNumber: syz [ 378.858462][ T45] usb 5-1: config 0 descriptor?? [ 378.927949][ T10] usb usb1-port1: attempt power cycle [ 379.267896][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 379.290945][ T10] usb 1-1: device descriptor read/8, error -71 [ 379.420856][ T10] usb 1-1: device descriptor read/8, error -71 [ 379.608578][T18511] 9pnet_fd: Insufficient options for proto=fd [ 379.667848][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 379.705886][ T10] usb 1-1: device descriptor read/8, error -71 [ 379.746325][ T36] kauditd_printk_skb: 649 callbacks suppressed [ 379.746346][ T36] audit: type=1400 audit(2000000209.017:36438): avc: denied { create } for pid=18522 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.791279][ T45] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 379.803749][ T36] audit: type=1400 audit(2000000209.017:36439): avc: denied { connect } for pid=18522 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.829455][ T36] audit: type=1400 audit(2000000209.027:36440): avc: denied { create } for pid=18522 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.850248][ T36] audit: type=1400 audit(2000000209.027:36441): avc: denied { connect } for pid=18522 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.878974][ T36] audit: type=1400 audit(2000000209.027:36442): avc: denied { ioctl } for pid=18522 comm="syz.3.6051" path="socket:[69510]" dev="sockfs" ino=69510 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.906071][ T10] usb 1-1: device descriptor read/8, error -71 [ 379.913504][ T36] audit: type=1400 audit(2000000209.027:36443): avc: denied { create } for pid=18522 comm="syz.3.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.937779][ T36] audit: type=1400 audit(2000000209.067:36444): avc: denied { ioctl } for pid=18458 comm="syz.4.6029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.966882][ T36] audit: type=1400 audit(2000000209.067:36445): avc: denied { ioctl } for pid=18458 comm="syz.4.6029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.994066][ T36] audit: type=1400 audit(2000000209.077:36446): avc: denied { ioctl } for pid=18458 comm="syz.4.6029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.020089][ T10] usb usb1-port1: unable to enumerate USB device [ 380.027551][ T36] audit: type=1400 audit(2000000209.097:36447): avc: denied { ioctl } for pid=18458 comm="syz.4.6029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.235511][T18525] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 380.235557][T18525] rust_binder: Error while translating object. [ 380.266880][T18525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.277772][T18525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 380.597960][T18552] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 381.436162][ T45] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 381.466106][ T45] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 381.497729][ T45] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 381.515795][ T45] usb 5-1: USB disconnect, device number 36 [ 381.756602][T18558] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 382.047989][T18583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.049962][T18584] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 382.147073][T18586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.160848][T18586] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 382.302476][T18598] rust_binder: Got transaction with invalid offset. [ 382.310516][T18598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 382.317226][T18598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397 [ 382.332945][T18598] __vm_enough_memory: pid: 18598, comm: syz.0.6074, bytes: 18014402804453376 not enough memory for the allocation [ 382.435286][T18604] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 382.689023][T18619] __nla_validate_parse: 1 callbacks suppressed [ 382.689039][T18619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6081'. [ 382.717634][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 382.870258][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.881319][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.891163][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 382.900305][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.910413][ T10] usb 1-1: config 0 descriptor?? [ 383.324168][ T10] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 383.331309][ T10] lenovo 0003:17EF:6047.0021: item fetching failed at offset 3/5 [ 383.357769][ T10] lenovo 0003:17EF:6047.0021: hid_parse failed [ 383.364065][ T10] lenovo 0003:17EF:6047.0021: probe with driver lenovo failed with error -22 [ 383.470193][T18630] rust_binder: 164: no such ref 1 [ 383.533321][T18606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.560678][T18606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.579966][T18606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 383.580939][T18606] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 383.588361][ T1337] usb 1-1: USB disconnect, device number 95 [ 384.016717][T18666] netlink: 'syz.4.6096': attribute type 2 has an invalid length. [ 384.103366][T18670] rust_binder: Error while translating object. [ 384.103399][T18670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 384.110209][T18670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:179 [ 384.145240][T18672] cannot load conntrack support for proto=3 [ 384.162156][T18672] binder: Bad value for 'max' [ 384.487653][ T1337] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 384.524908][T18695] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6107'. [ 384.536454][T18696] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6107'. [ 384.637545][ T1337] usb 5-1: Using ep0 maxpacket: 32 [ 384.645780][ T1337] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.653617][ T1337] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 384.662713][ T1337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.672314][ T1337] usb 5-1: config 0 descriptor?? [ 384.882930][ T36] kauditd_printk_skb: 1193 callbacks suppressed [ 384.882950][ T36] audit: type=1400 audit(2000000214.157:37641): avc: denied { ioctl } for pid=18685 comm="syz.4.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.914664][ T36] audit: type=1400 audit(2000000214.157:37642): avc: denied { ioctl } for pid=18685 comm="syz.4.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.939873][ T36] audit: type=1400 audit(2000000214.157:37643): avc: denied { read write } for pid=16338 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.964763][ T36] audit: type=1400 audit(2000000214.157:37644): avc: denied { read write open } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.002520][ T36] audit: type=1400 audit(2000000214.157:37645): avc: denied { ioctl } for pid=16338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.028462][ T36] audit: type=1400 audit(2000000214.167:37646): avc: denied { read } for pid=18706 comm="syz.0.6110" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.051354][ T36] audit: type=1400 audit(2000000214.167:37647): avc: denied { read open } for pid=18706 comm="syz.0.6110" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.076001][ T36] audit: type=1400 audit(2000000214.197:37648): avc: denied { read } for pid=18706 comm="syz.0.6110" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.098901][ T36] audit: type=1400 audit(2000000214.197:37649): avc: denied { read open } for pid=18706 comm="syz.0.6110" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.123472][ T36] audit: type=1400 audit(2000000214.197:37650): avc: denied { ioctl } for pid=18706 comm="syz.0.6110" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.150106][ T1337] lenovo 0003:17EF:6009.0022: unknown main item tag 0x0 [ 385.157113][ T1337] lenovo 0003:17EF:6009.0022: unknown main item tag 0x0 [ 385.164205][ T1337] lenovo 0003:17EF:6009.0022: unknown main item tag 0x0 [ 385.172671][ T1337] lenovo 0003:17EF:6009.0022: unknown main item tag 0x0 [ 385.180452][ T1337] lenovo 0003:17EF:6009.0022: unknown main item tag 0x0 [ 385.191727][ T1337] lenovo 0003:17EF:6009.0022: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 385.365870][T18686] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 385.374210][T18686] rust_binder: Write failure EINVAL in pid:191 [ 385.374717][ T1337] usb 5-1: USB disconnect, device number 37 [ 385.484462][T18724] overlayfs: failed to clone lowerpath [ 385.650865][T18739] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6123'. [ 385.872297][T18757] tipc: Started in network mode [ 385.877468][T18757] tipc: Node identity ac14140f, cluster identity 4711 [ 385.884366][T18757] tipc: New replicast peer: 255.255.255.255 [ 385.890670][T18757] tipc: Enabled bearer , priority 10 [ 385.940197][T18759] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6132'. [ 386.197453][T18778] veth1_macvtap: left promiscuous mode [ 386.207437][ T45] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 386.215328][T18778] macsec0: entered allmulticast mode [ 386.230844][T18778] veth1_macvtap: entered promiscuous mode [ 386.253637][T18778] veth1_macvtap: entered allmulticast mode [ 386.280048][T18778] macsec0: left allmulticast mode [ 386.285151][T18778] veth1_macvtap: left allmulticast mode [ 386.393844][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.415212][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.435519][ T45] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 386.466586][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.488905][ T45] usb 5-1: config 0 descriptor?? [ 386.699821][T18793] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.717737][T18793] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.747374][T18793] bridge_slave_0: entered allmulticast mode [ 386.757987][T18793] bridge_slave_0: entered promiscuous mode [ 386.780567][T18793] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.798963][T18793] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.806112][T18793] bridge_slave_1: entered allmulticast mode [ 386.822854][T18793] bridge_slave_1: entered promiscuous mode [ 386.959815][ T45] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 386.973188][ T45] lenovo 0003:17EF:6047.0023: item fetching failed at offset 3/5 [ 386.991536][ T45] lenovo 0003:17EF:6047.0023: hid_parse failed [ 386.998707][ T45] lenovo 0003:17EF:6047.0023: probe with driver lenovo failed with error -22 [ 387.007684][ T1132] tipc: Node number set to 2886997007 [ 387.157115][T18793] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.164276][T18793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.171632][T18793] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.177805][T18761] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 387.178738][T18793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.179640][ T1337] usb 5-1: USB disconnect, device number 38 [ 387.263829][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.271221][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.285946][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.293060][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.304803][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.311907][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.393395][T18793] veth0_vlan: entered promiscuous mode [ 387.431550][T18793] veth1_macvtap: entered promiscuous mode [ 387.937359][ T1337] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 388.089566][ T1337] usb 4-1: Using ep0 maxpacket: 16 [ 388.106142][ T1337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.118683][ T1337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.132625][ T1337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.144770][ T1337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.154545][ T1337] usb 4-1: Product: syz [ 388.164306][ T1337] usb 4-1: Manufacturer: syz [ 388.169608][ T1337] usb 4-1: SerialNumber: syz [ 388.397404][ T1337] usb 4-1: 0:2 : does not exist [ 388.425146][ T1337] usb 4-1: USB disconnect, device number 23 [ 388.481613][T18867] rust_binder: Failed to allocate buffer. len:4294967208, is_oneway:true [ 388.481642][T18867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 388.522667][T18867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:214 [ 388.522719][T18871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 388.551708][T18871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 388.695598][T16183] udevd[16183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 388.956496][T18883] rust_binder: Got transaction with invalid offset. [ 388.956555][T18883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.987668][T18883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 389.525290][T18919] rust_binder: 217: no such ref 3 [ 389.560721][T18919] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 389.577245][T18919] rust_binder: Write failure EINVAL in pid:217 [ 389.823385][T18939] rust_binder: 223: no such ref 0 [ 389.836372][T18939] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 389.845525][T18939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 389.854962][T18942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.866985][T18942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 389.895661][ T36] kauditd_printk_skb: 757 callbacks suppressed [ 389.895684][ T36] audit: type=1400 audit(2000000219.167:38408): avc: denied { read write } for pid=17897 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.939662][ T36] audit: type=1400 audit(2000000219.167:38409): avc: denied { read write open } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.966565][ T36] audit: type=1400 audit(2000000219.167:38410): avc: denied { ioctl } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.006887][ T36] audit: type=1400 audit(2000000219.197:38411): avc: denied { read } for pid=18947 comm="syz.4.6192" name="binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.032487][ T36] audit: type=1400 audit(2000000219.197:38412): avc: denied { read open } for pid=18947 comm="syz.4.6192" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.057248][ T36] audit: type=1400 audit(2000000219.207:38413): avc: denied { ioctl } for pid=18947 comm="syz.4.6192" path="/dev/binderfs/binder1" dev="binder" ino=29 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.085123][ T36] audit: type=1400 audit(2000000219.217:38414): avc: denied { create } for pid=18946 comm="syz.0.6191" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.108641][ T36] audit: type=1400 audit(2000000219.227:38415): avc: denied { read write } for pid=17897 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.134720][ T36] audit: type=1400 audit(2000000219.227:38416): avc: denied { read write open } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.161658][ T36] audit: type=1400 audit(2000000219.227:38417): avc: denied { ioctl } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.247211][ T476] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 390.399622][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 390.410554][ T476] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 390.420473][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.430668][ T476] usb 5-1: config 0 descriptor?? [ 390.442151][T18951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.503068][T18965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6199'. [ 390.779385][T18980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6205'. [ 390.794835][T18980] rust_binder: Error while translating object. [ 390.794881][T18980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 390.801360][T18980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 390.927968][ T476] hid-picolcd 0003:04D8:C002.0024: No report with id 0x11 found [ 391.053385][T18984] netlink: 'syz.0.6207': attribute type 27 has an invalid length. [ 391.063121][T18984] sit0: left promiscuous mode [ 391.081312][ T1132] usb 5-1: USB disconnect, device number 39 [ 391.147172][ T639] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 391.309689][ T639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 391.320701][ T639] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 391.331325][ T639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.343207][ T639] usb 4-1: config 0 descriptor?? [ 391.367937][T18982] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 391.463556][T19007] 9pnet_fd: Insufficient options for proto=fd [ 391.551198][T19013] fuseblk: Bad value for 'fd' [ 391.678706][T19027] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6221'. [ 391.790959][ T639] kone 0003:1E7D:2CED.0025: unknown main item tag 0x1 [ 391.815790][ T639] kone 0003:1E7D:2CED.0025: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 391.886289][T19039] fuse: Bad value for 'fd' [ 391.902358][T19039] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 392.161564][T19043] cgroup: Invalid name [ 392.209432][ T1337] usb 4-1: USB disconnect, device number 24 [ 392.247406][T19045] binder: Unknown parameter 'context[7' [ 392.697067][ T1337] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 392.847069][ T1337] usb 5-1: Using ep0 maxpacket: 32 [ 392.854517][ T1337] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 392.862949][ T1337] usb 5-1: config 0 has no interface number 0 [ 392.869131][ T1337] usb 5-1: config 0 interface 184 has no altsetting 0 [ 392.880004][ T1337] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 392.889183][ T1337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.897285][ T1337] usb 5-1: Product: syz [ 392.901494][ T1337] usb 5-1: Manufacturer: syz [ 392.906198][ T1337] usb 5-1: SerialNumber: syz [ 392.912742][ T1337] usb 5-1: config 0 descriptor?? [ 392.923328][ T1337] smsc75xx v1.0.0 [ 393.057175][ T1132] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 393.130368][ T1337] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 393.141285][ T1337] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 393.151903][ T1337] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 393.162149][ T1337] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 393.207056][ T1132] usb 4-1: Using ep0 maxpacket: 32 [ 393.215056][ T1132] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.224160][ T1132] usb 4-1: config 0 has no interface number 0 [ 393.230317][ T1132] usb 4-1: config 0 interface 184 has no altsetting 0 [ 393.240144][ T1132] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.249853][ T1132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.257887][ T1132] usb 4-1: Product: syz [ 393.262152][ T1132] usb 4-1: Manufacturer: syz [ 393.266753][ T1132] usb 4-1: SerialNumber: syz [ 393.276135][ T1132] usb 4-1: config 0 descriptor?? [ 393.285385][ T1132] smsc75xx v1.0.0 [ 393.533438][T19074] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1544 sclass=netlink_xfrm_socket pid=19074 comm=syz.1.6236 [ 393.651090][T19086] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6239'. [ 393.691351][ T1337] usb 5-1: USB disconnect, device number 40 [ 393.898325][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 393.927032][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.100006][T19108] kvm: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 394.108764][T19108] kvm: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 394.121247][T19108] kvm: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 394.133992][T19108] kvm: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 394.143958][T19108] kvm: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 394.155599][T19108] kvm_intel: kvm [19107]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 394.566970][ T476] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 394.719746][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.731118][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.741013][ T476] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.753969][ T476] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.763089][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.773174][ T476] usb 5-1: config 0 descriptor?? [ 394.957723][ T36] kauditd_printk_skb: 1034 callbacks suppressed [ 394.957757][ T36] audit: type=1400 audit(2000000224.237:39452): avc: denied { ioctl } for pid=19069 comm="syz.3.6234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.991452][ T36] audit: type=1400 audit(2000000224.237:39453): avc: denied { ioctl } for pid=19069 comm="syz.3.6234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.017859][ T36] audit: type=1400 audit(2000000224.268:39454): avc: denied { ioctl } for pid=19115 comm="syz.4.6246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.043934][ T36] audit: type=1400 audit(2000000224.268:39455): avc: denied { ioctl } for pid=19115 comm="syz.4.6246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.053755][T19125] netlink: 'syz.1.6249': attribute type 12 has an invalid length. [ 395.070972][ T36] audit: type=1400 audit(2000000224.268:39456): avc: denied { ioctl } for pid=19115 comm="syz.4.6246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.083753][T19127] netlink: 'syz.1.6249': attribute type 12 has an invalid length. [ 395.104704][ T36] audit: type=1400 audit(2000000224.268:39457): avc: denied { ioctl } for pid=19115 comm="syz.4.6246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.165923][ T36] audit: type=1400 audit(2000000224.438:39458): avc: denied { ioctl } for pid=19069 comm="syz.3.6234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.191956][ T36] audit: type=1400 audit(2000000224.438:39459): avc: denied { ioctl } for pid=19069 comm="syz.3.6234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.195865][ T476] usbhid 5-1:0.0: can't add hid device: -71 [ 395.223213][ T476] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 395.242438][ T36] audit: type=1400 audit(2000000224.448:39460): avc: denied { mounton } for pid=19129 comm="syz.1.6250" path="/file1" dev="rootfs" ino=52726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 395.258968][ T476] usb 5-1: USB disconnect, device number 41 [ 395.328090][ T36] audit: type=1400 audit(2000000224.608:39461): avc: denied { create } for pid=19136 comm="syz.1.6252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.617753][T19070] overlayfs: conflicting lowerdir path [ 395.688540][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 395.700205][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 395.721443][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 395.731507][ T1132] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 395.741357][ T1132] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 395.757634][ T1132] usb 4-1: USB disconnect, device number 25 [ 395.828294][T19152] ./cgroup: Can't lookup blockdev [ 396.092063][T19158] KVM: debugfs: duplicate directory 19158-4 [ 396.193042][T19162] netlink: 'syz.1.6260': attribute type 12 has an invalid length. [ 396.304787][T19170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=19170 comm=syz.3.6263 [ 396.317612][T19170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6263'. [ 396.386918][ T639] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 396.559845][ T639] usb 5-1: Using ep0 maxpacket: 32 [ 396.581561][ T639] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 396.596079][ T639] usb 5-1: config 0 has no interface number 0 [ 396.609038][ T639] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.644559][ T639] usb 5-1: config 0 interface 184 has no altsetting 0 [ 396.667585][ T639] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 396.676693][ T639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.715752][ T639] usb 5-1: Product: syz [ 396.736819][ T639] usb 5-1: Manufacturer: syz [ 396.741487][ T639] usb 5-1: SerialNumber: syz [ 396.752442][T19188] rust_binder: Error while translating object. [ 396.752486][T19188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 396.759588][T19190] rust_binder: Error while translating object. [ 396.769511][ T639] usb 5-1: config 0 descriptor?? [ 396.786841][T19190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 396.786880][T19190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 396.796427][T19188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 396.808561][ T639] smsc75xx v1.0.0 [ 396.825295][ T639] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 396.835598][ T639] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 397.050087][ T63] usb 5-1: USB disconnect, device number 42 [ 397.783526][T19221] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19221 comm=syz.4.6280 [ 397.796466][T19220] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=19220 comm=syz.4.6280 [ 397.926094][T19243] overlayfs: failed to clone upperpath [ 397.986274][T19238] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 398.027593][T19238] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 398.083451][T19254] loop5: detected capacity change from 0 to 7 [ 398.180136][T19266] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 398.180164][T19266] rust_binder: Error while translating object. [ 398.191627][T19264] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 398.218069][T19264] rust_binder: Error while translating object. [ 398.238467][T19266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 398.275208][T19266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 398.299307][T19264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 398.318910][T19264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 398.401478][T19276] overlayfs: failed to clone upperpath [ 398.506739][ T639] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 398.662034][T19293] sit0: entered promiscuous mode [ 398.671010][T19293] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6306'. [ 398.681612][ T639] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.696721][ T639] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.717418][T19296] Invalid ELF header len 1 [ 398.734063][ T639] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.751564][ T639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.760618][ T639] usb 4-1: SerialNumber: syz [ 398.766841][T19297] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 398.990926][T19267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19267 comm=syz.3.6294 [ 399.005109][T19267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.007343][T19267] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 399.019178][ T639] usb 4-1: 0:2 : does not exist [ 399.047158][ T639] usb 4-1: USB disconnect, device number 26 [ 399.152057][T16183] udevd[16183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 399.354471][T19334] 9pnet_fd: Insufficient options for proto=fd [ 399.529597][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'. [ 400.087463][ T36] kauditd_printk_skb: 731 callbacks suppressed [ 400.087485][ T36] audit: type=1400 audit(2000000229.368:40193): avc: denied { create } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 400.194309][ T36] audit: type=1400 audit(2000000229.418:40194): avc: denied { setopt } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 400.275504][ T36] audit: type=1400 audit(2000000229.448:40195): avc: denied { create } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 400.386637][ T36] audit: type=1400 audit(2000000229.448:40196): avc: denied { create } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.466826][ T36] audit: type=1400 audit(2000000229.468:40198): avc: denied { setopt } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 400.542824][ T36] audit: type=1400 audit(2000000229.468:40197): avc: denied { setopt } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.616602][ T36] audit: type=1400 audit(2000000229.468:40199): avc: denied { setopt } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 400.711739][ T36] audit: type=1400 audit(2000000229.468:40200): avc: denied { create } for pid=19362 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.798694][ T36] audit: type=1400 audit(2000000229.578:40201): avc: denied { mounton } for pid=19367 comm="syz.0.6332" path="/222/file0" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 400.909820][ T36] audit: type=1400 audit(2000000229.578:40202): avc: denied { mount } for pid=19367 comm="syz.0.6332" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 401.624030][T19406] __vm_enough_memory: pid: 19406, comm: syz.3.6342, bytes: 18014402804453376 not enough memory for the allocation [ 401.703360][T19419] netlink: 'syz.1.6346': attribute type 1 has an invalid length. [ 401.711194][T19419] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6346'. [ 402.034977][T19444] tmpfs: Bad value for 'uid' [ 402.043664][T19444] tmpfs: Bad value for 'uid' [ 402.051732][T19448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6356'. [ 402.154535][T19461] 9pnet_fd: Insufficient options for proto=fd [ 402.451566][T19482] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6367'. [ 402.463487][T19482] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6367'. [ 402.567326][T19494] 9pnet_fd: Insufficient options for proto=fd [ 402.596521][ T45] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 402.746492][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 402.764363][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.816203][ T45] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 402.834574][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.846491][ T45] usb 5-1: Product: syz [ 402.852066][ T45] usb 5-1: Manufacturer: syz [ 402.852813][T19513] netlink: 'syz.0.6378': attribute type 4 has an invalid length. [ 402.868232][ T45] usb 5-1: SerialNumber: syz [ 402.889475][ T45] usb 5-1: config 0 descriptor?? [ 402.900890][T19513] netlink: 'syz.0.6378': attribute type 4 has an invalid length. [ 402.909572][ T45] usb 5-1: bad CDC descriptors [ 402.914579][ T45] usb 5-1: unsupported MDLM descriptors [ 403.114332][T19480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39714 sclass=netlink_route_socket pid=19480 comm=syz.4.6366 [ 403.158017][T19525] kvm: user requested TSC rate below hardware speed [ 403.176827][ T45] usb 5-1: USB disconnect, device number 43 [ 403.556467][ T45] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 403.735982][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.755443][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.779123][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.785890][T19562] kvm: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 403.796961][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.807604][T19562] kvm: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 403.817261][ T45] usb 5-1: Product: ꥁ㬚儘鱣퓽庮ß腯︷陼䎋䋌鋓⸊싣厱踍柖⽕ö쁵溁ﶅ⅑돓촪脒Ṷﱢ插膯䁇팝냳ꅢ฽䌩⭅ῢ犚閿逯㐎鷄媌䳺걟ṷŸ외蠴췿Ⅼ 晜朢퇍䈹ϐ薙불蒎也䲩☎崂塈㔺⮿ఘᵾ㐾⫣搓ᜯ㽭ꟼ쓛ᾑ [ 403.824954][T19562] kvm: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 403.858543][T19562] kvm: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 403.867447][T19562] kvm: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 403.876422][ T45] usb 5-1: Manufacturer: ѕ [ 403.880986][ T45] usb 5-1: SerialNumber: 鼢ﱹ奲铆락釾㾚ừ旖๢ꊙ햱啞쭭跛撵觠擊룺 [ 403.881250][T19562] kvm_intel: kvm [19560]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 404.189080][T19582] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6397'. [ 404.357893][T19535] rust_binder: Error while translating object. [ 404.357972][T19535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 404.370115][T19535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:337 [ 404.391204][T19535] rust_binder: Error while translating object. [ 404.402649][T19535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.409956][T19535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 404.429641][ T45] usb 5-1: 0:2 : does not exist [ 404.472260][ T45] usb 5-1: USB disconnect, device number 44 [ 404.580717][T16183] udevd[16183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 404.986373][T19599] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 405.074360][T19608] overlayfs: missing 'lowerdir' [ 405.106171][ T36] kauditd_printk_skb: 553 callbacks suppressed [ 405.106191][ T36] audit: type=1400 audit(2000000234.378:40756): avc: denied { unmount } for pid=17897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 405.132976][ T36] audit: type=1400 audit(2000000234.398:40757): avc: denied { execmem } for pid=19614 comm="syz.0.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 405.154069][ T36] audit: type=1400 audit(2000000234.398:40758): avc: denied { execute } for pid=19614 comm="syz.0.6408" path="/252/cpuacct.usage_percpu" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.179133][ T36] audit: type=1400 audit(2000000234.408:40759): avc: denied { mount } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 405.206704][ T36] audit: type=1400 audit(2000000234.408:40760): avc: denied { search } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.231022][ T36] audit: type=1400 audit(2000000234.408:40761): avc: denied { search } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.260857][T19624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6410'. [ 405.270254][ T36] audit: type=1400 audit(2000000234.408:40762): avc: denied { read } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.293918][T19623] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6410'. [ 405.306043][ T36] audit: type=1400 audit(2000000234.408:40763): avc: denied { search } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.334326][ T36] audit: type=1400 audit(2000000234.408:40764): avc: denied { read } for pid=19614 comm="syz.0.6408" name="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.357720][ T36] audit: type=1400 audit(2000000234.408:40765): avc: denied { read open } for pid=19614 comm="syz.0.6408" path="/" dev="configfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.446404][ T1132] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 405.600460][ T1132] usb 5-1: config 9 has an invalid interface number: 51 but max is 0 [ 405.608701][ T1132] usb 5-1: config 9 has no interface number 0 [ 405.620905][ T1132] usb 5-1: string descriptor 0 read error: -22 [ 405.627446][ T1132] usb 5-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 405.636877][ T1132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.853313][ T1132] usb 5-1: USB disconnect, device number 45 [ 406.000549][T19645] overlayfs: missing 'lowerdir' [ 406.492183][T19660] /dev/loop0: Can't lookup blockdev [ 406.666286][ T63] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 406.806256][ T63] usb 5-1: device descriptor read/64, error -71 [ 406.865045][T19703] 9pnet_fd: Insufficient options for proto=fd [ 406.903010][T19705] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 407.003614][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6438'. [ 407.056261][ T63] usb 5-1: device descriptor read/64, error -71 [ 407.140466][T19710] overlayfs: failed to resolve './file1/file0': -2 [ 407.296255][ T63] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 407.436272][ T63] usb 5-1: device descriptor read/64, error -71 [ 407.676254][ T63] usb 5-1: device descriptor read/64, error -71 [ 407.786348][ T63] usb usb5-port1: attempt power cycle [ 407.876276][ T476] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 408.039212][ T476] usb 4-1: config 0 has no interfaces? [ 408.045317][ T476] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 408.055270][ T476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.065538][ T476] usb 4-1: config 0 descriptor?? [ 408.136216][ T63] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 408.159271][ T63] usb 5-1: device descriptor read/8, error -71 [ 408.275040][T19718] rust_binder: Write failure EFAULT in pid:107 [ 408.284108][ T476] usb 4-1: USB disconnect, device number 27 [ 408.301324][ T63] usb 5-1: device descriptor read/8, error -71 [ 408.546192][ T63] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 408.574074][ T63] usb 5-1: device descriptor read/8, error -71 [ 408.709439][ T63] usb 5-1: device descriptor read/8, error -71 [ 408.829513][ T63] usb usb5-port1: unable to enumerate USB device [ 408.859617][T19791] overlayfs: failed to clone upperpath [ 408.997632][T19799] overlayfs: failed to clone lowerpath [ 409.062794][T19801] rust_binder: Error in use_page_slow: ESRCH [ 409.062819][T19801] rust_binder: use_range failure ESRCH [ 409.069592][T19801] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 409.075093][T19801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 409.083580][T19801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:114 [ 409.406133][ T1132] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 409.582311][ T1132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.613856][ T1132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.625964][ T1132] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 409.643473][ T1132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.662932][ T1132] usb 4-1: config 0 descriptor?? [ 410.003419][T19842] x_tables: unsorted entry at hook 1 [ 410.017571][T19842] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6484'. [ 410.089767][ T1132] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 410.116114][ T1132] lenovo 0003:17EF:6047.0026: item fetching failed at offset 3/5 [ 410.124116][ T1132] lenovo 0003:17EF:6047.0026: hid_parse failed [ 410.146199][ T1132] lenovo 0003:17EF:6047.0026: probe with driver lenovo failed with error -22 [ 410.183467][ T36] kauditd_printk_skb: 1992 callbacks suppressed [ 410.183489][ T36] audit: type=1400 audit(2000000239.458:42758): avc: denied { read write } for pid=19850 comm="syz.4.6486" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.266094][ T36] audit: type=1400 audit(2000000239.488:42759): avc: denied { read write open } for pid=19850 comm="syz.4.6486" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.321628][ T36] audit: type=1400 audit(2000000239.508:42760): avc: denied { execmem } for pid=19850 comm="syz.4.6486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 410.361172][T19854] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 410.369965][T19855] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 410.386311][ T36] audit: type=1400 audit(2000000239.578:42761): avc: denied { read write } for pid=19807 comm="syz.3.6473" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.393118][T19856] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 410.442039][T19808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.460340][ T36] audit: type=1400 audit(2000000239.578:42762): avc: denied { read write open } for pid=19807 comm="syz.3.6473" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.478403][T19808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.530219][ T36] audit: type=1400 audit(2000000239.578:42763): avc: denied { ioctl } for pid=19807 comm="syz.3.6473" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.557480][ T36] audit: type=1400 audit(2000000239.588:42764): avc: denied { read write } for pid=17897 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.584996][ T1132] usb 4-1: USB disconnect, device number 28 [ 410.609081][ T36] audit: type=1400 audit(2000000239.588:42765): avc: denied { read write open } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.672056][T19862] netlink: 'syz.4.6489': attribute type 25 has an invalid length. [ 410.701184][ T36] audit: type=1400 audit(2000000239.588:42766): avc: denied { ioctl } for pid=17897 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.701551][T19863] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 410.727420][T19862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 410.756071][ T36] audit: type=1400 audit(2000000239.638:42767): avc: denied { read write } for pid=19853 comm="syz.4.6487" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.061737][T19880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.063431][T19879] rust_binder: Got transaction with invalid offset. [ 411.070012][T19879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 411.076681][T19879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 411.132780][T19882] rust_binder: Write failure EFAULT in pid:124 [ 411.430909][T19891] binder: Unknown parameter 'keyring' [ 412.138460][T19911] devpts: called with bogus options [ 412.227141][T19916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 412.227177][T19916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 412.650982][T19941] overlayfs: empty lowerdir [ 412.867617][T19952] 9pnet_fd: Insufficient options for proto=fd [ 413.277358][T19976] tipc: Started in network mode [ 413.282558][T19976] tipc: Node identity , cluster identity 4711 [ 413.289600][T19976] tipc: Failed to obtain node identity [ 413.295602][T19976] tipc: Enabling of bearer rejected, failed to enable media [ 413.585884][ T819] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 413.655224][T19987] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 415.333788][ T36] kauditd_printk_skb: 640 callbacks suppressed [ 415.333807][ T36] audit: type=1400 audit(2000000244.609:43408): avc: denied { create } for pid=20044 comm="syz.4.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.337270][T20045] fuse: Bad value for 'fd' [ 415.340737][ T36] audit: type=1400 audit(2000000244.619:43409): avc: denied { mounton } for pid=20044 comm="syz.4.6553" path="/125/file0" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 415.390928][ T36] audit: type=1400 audit(2000000244.669:43410): avc: denied { read write } for pid=18793 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.434459][ T36] audit: type=1400 audit(2000000244.669:43411): avc: denied { read write open } for pid=18793 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.466752][ T36] audit: type=1400 audit(2000000244.669:43412): avc: denied { ioctl } for pid=18793 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.498429][ T36] audit: type=1400 audit(2000000244.779:43413): avc: denied { audit_read } for pid=20046 comm="syz.4.6555" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.520113][ T36] audit: type=1400 audit(2000000244.779:43414): avc: denied { mounton } for pid=20049 comm="syz.3.6554" path="/51/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 415.543133][ T36] audit: type=1400 audit(2000000244.779:43415): avc: denied { mounton } for pid=20049 comm="syz.3.6554" path="/51/file0" dev="cgroup2" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 415.566704][ T36] audit: type=1400 audit(2000000244.779:43416): avc: denied { mounton } for pid=20049 comm="syz.3.6554" path="/51/file0" dev="cgroup2" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 415.596738][ T36] audit: type=1400 audit(2000000244.799:43417): avc: denied { name_bind } for pid=20046 comm="syz.4.6555" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 415.650132][T20054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6556'. [ 415.672010][T20054] rust_binder: Write failure EFAULT in pid:164 [ 415.913256][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6564'. [ 416.945485][T20125] veth1: entered allmulticast mode [ 416.954485][T20125] 9pnet_fd: Insufficient options for proto=fd [ 416.962349][T20124] veth1: left allmulticast mode [ 417.191613][T20147] sit0: entered promiscuous mode [ 417.213026][T20147] netlink: 'syz.0.6589': attribute type 1 has an invalid length. [ 417.232256][T20147] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6589'. [ 417.407835][T20168] overlayfs: missing 'lowerdir' [ 417.620803][T20195] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 418.121069][T20214] overlayfs: failed to clone upperpath [ 418.452281][T20249] overlayfs: failed to clone lowerpath [ 418.832742][T20274] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 418.841937][T20274] overlayfs: missing 'lowerdir' [ 419.166361][T20302] overlayfs: missing 'lowerdir' [ 419.451170][T20339] overlayfs: failed to clone upperpath [ 419.568248][T20353] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6657'. [ 420.090908][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6668'. [ 420.338219][ T36] kauditd_printk_skb: 571 callbacks suppressed [ 420.338241][ T36] audit: type=1400 audit(2000000249.619:43989): avc: denied { mounton } for pid=20398 comm="syz.1.6673" path="/320/file0" dev="tmpfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.347976][T20399] incfs: Error accessing: ./file0. [ 420.373291][T20399] incfs: mount failed -20 [ 420.399127][ T36] audit: type=1400 audit(2000000249.619:43990): avc: denied { write } for pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76493 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.425034][ T36] audit: type=1400 audit(2000000249.619:43991): avc: denied { create } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.445952][ T36] audit: type=1400 audit(2000000249.619:43992): avc: denied { write } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.466789][ T36] audit: type=1400 audit(2000000249.619:43993): avc: denied { read } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.488114][ T36] audit: type=1400 audit(2000000249.619:43994): avc: denied { read } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.509573][ T36] audit: type=1400 audit(2000000249.619:43995): avc: denied { create } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.532782][ T36] audit: type=1400 audit(2000000249.619:43996): avc: denied { create } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.554750][ T36] audit: type=1400 audit(2000000249.619:43997): avc: denied { write } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.575384][ T36] audit: type=1400 audit(2000000249.629:43998): avc: denied { write } for pid=20398 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.675873][T20428] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20428 comm=syz.4.6682 [ 421.069576][T20444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 421.069613][T20444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 421.123413][T20446] rust_binder: Write failure EFAULT in pid:202 [ 421.452233][T20481] overlayfs: missing 'workdir' [ 421.830151][T20513] overlayfs: missing 'lowerdir' [ 422.166406][T20538] rust_binder: Error in use_page_slow: ESRCH [ 422.166437][T20538] rust_binder: use_range failure ESRCH [ 422.172550][T20539] rust_binder: Error in use_page_slow: ESRCH [ 422.182116][T20539] rust_binder: use_range failure ESRCH [ 422.188194][T20538] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 422.215225][T20538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 422.223347][T20539] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 422.241206][T20538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:216 [ 422.253899][T20539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 422.273277][T20539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:216 [ 422.519227][T20572] rust_binder: 228: no such ref 1 [ 422.534168][T20572] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 422.534195][T20572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 422.553858][T20572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:228 [ 423.425341][ T45] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 423.588356][ T45] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 423.597330][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 423.610709][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 423.622662][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 423.728979][T20646] overlayfs: failed to clone lowerpath [ 423.737260][T20646] overlayfs: failed to clone lowerpath [ 424.379117][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 424.388575][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 424.399109][T20662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20662 comm=syz.4.6763 [ 424.407474][T20663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20663 comm=syz.4.6763 [ 424.427655][T20661] netlink: 182 bytes leftover after parsing attributes in process `syz.4.6763'. [ 424.441402][T20661] overlay: ./file1 is not a directory [ 424.610182][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 425.371856][ T36] kauditd_printk_skb: 913 callbacks suppressed [ 425.371876][ T36] audit: type=1400 audit(2000000254.649:44912): avc: denied { execmem } for pid=20702 comm="syz.0.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 425.434463][ T36] audit: type=1400 audit(2000000254.709:44913): avc: denied { create } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.448224][T20708] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6778'. [ 425.454568][ T36] audit: type=1400 audit(2000000254.719:44914): avc: denied { ioctl } for pid=20707 comm="syz.4.6778" path="socket:[78900]" dev="sockfs" ino=78900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.488575][T20708] gretap0: entered promiscuous mode [ 425.489826][ T36] audit: type=1400 audit(2000000254.719:44915): avc: denied { create } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.515795][ T36] audit: type=1400 audit(2000000254.719:44916): avc: denied { setopt } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.518996][T20708] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6778'. [ 425.536837][ T36] audit: type=1400 audit(2000000254.719:44917): avc: denied { setopt } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.565918][ T36] audit: type=1400 audit(2000000254.719:44918): avc: denied { write } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.572631][T20708] 0{X: renamed from gretap0 [ 425.590956][ T36] audit: type=1400 audit(2000000254.729:44919): avc: denied { create } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.614759][T20708] 0{X: left promiscuous mode [ 425.621060][ T36] audit: type=1400 audit(2000000254.869:44920): avc: denied { create } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 425.625971][T20708] 0{X: entered allmulticast mode [ 425.643307][ T36] audit: type=1400 audit(2000000254.869:44921): avc: denied { create } for pid=20707 comm="syz.4.6778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 425.669100][T20708] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 425.923959][T20731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6785'. [ 426.185430][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.224868][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.236418][ T45] usb 4-1: can't set config #1, error -71 [ 426.259570][ T45] usb 4-1: USB disconnect, device number 29 [ 426.728435][T20777] __vm_enough_memory: pid: 20777, comm: syz.3.6800, bytes: 18014402804453376 not enough memory for the allocation [ 426.748544][T20777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6800'. [ 427.067803][T20801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6808'. [ 427.155137][T20164] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 427.295226][T20164] usb 4-1: device descriptor read/64, error -71 [ 427.535161][T20164] usb 4-1: device descriptor read/64, error -71 [ 427.775181][T20164] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 427.915144][T20164] usb 4-1: device descriptor read/64, error -71 [ 428.155159][T20164] usb 4-1: device descriptor read/64, error -71 [ 428.265231][T20164] usb usb4-port1: attempt power cycle [ 428.605098][T20164] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 428.627632][T20164] usb 4-1: device descriptor read/8, error -71 [ 428.757621][T20164] usb 4-1: device descriptor read/8, error -71 [ 428.995094][T20164] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 429.017709][T20164] usb 4-1: device descriptor read/8, error -71 [ 429.147171][T20164] usb 4-1: device descriptor read/8, error -71 [ 429.255201][T20164] usb usb4-port1: unable to enumerate USB device [ 436.530156][ T36] kauditd_printk_skb: 277 callbacks suppressed [ 436.530177][ T36] audit: type=1400 audit(2000000265.810:45199): avc: denied { create } for pid=20814 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.578615][T20819] rust_binder: Write failure EFAULT in pid:272 [ 436.614999][ T36] audit: type=1400 audit(2000000265.810:45200): avc: denied { write } for pid=20814 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.691598][ T36] audit: type=1400 audit(2000000265.810:45201): avc: denied { nlmsg_read } for pid=20814 comm="syz.1.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.703544][T20826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 436.734595][T20826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 436.755789][ T36] audit: type=1400 audit(2000000265.820:45202): avc: denied { create } for pid=20810 comm="syz.0.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 436.790387][ T36] audit: type=1400 audit(2000000265.830:45203): avc: denied { sys_admin } for pid=20810 comm="syz.0.6811" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 436.819294][ T36] audit: type=1400 audit(2000000265.830:45204): avc: denied { sys_admin } for pid=20810 comm="syz.0.6811" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 436.840680][ T36] audit: type=1400 audit(2000000265.840:45205): avc: denied { mounton } for pid=20811 comm="syz.4.6813" path="/211/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.863672][ T36] audit: type=1400 audit(2000000265.840:45206): avc: denied { mount } for pid=20811 comm="syz.4.6813" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 436.886138][ T36] audit: type=1400 audit(2000000265.840:45207): avc: denied { mounton } for pid=20811 comm="syz.4.6813" path="/211/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.928750][ T36] audit: type=1400 audit(2000000265.840:45208): avc: denied { mount } for pid=20811 comm="syz.4.6813" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 436.957625][T20835] overlayfs: workdir and upperdir must be separate subtrees [ 436.990391][T20837] 9pnet_fd: Insufficient options for proto=fd [ 437.060178][T20840] netlink: 'syz.4.6822': attribute type 11 has an invalid length. [ 437.419471][T20863] overlayfs: failed to resolve './file1': -2 [ 437.687053][T20881] rust_binder: Error in use_page_slow: ESRCH [ 437.687087][T20881] rust_binder: use_range failure ESRCH [ 437.709156][T20881] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 437.729444][T20881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 437.774749][T20881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:286 [ 437.783713][T20890] overlayfs: failed to clone upperpath [ 438.215584][T20927] tmpfs: Bad value for 'huge' [ 438.482814][T20945] overlayfs: failed to clone upperpath [ 438.583747][T20948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6853'. [ 439.167016][T20981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20981 comm=syz.3.6864 [ 439.490009][T20996] rust_binder: Error while translating object. [ 439.490059][T20996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 439.505020][T20996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 439.705000][T21006] rust_binder: Error while translating object. [ 439.714306][T21006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 439.723070][T21006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:309 [ 439.894665][T21017] netlink: 'syz.0.6876': attribute type 6 has an invalid length. [ 439.911676][T21017] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.962872][T21025] overlay: Unknown parameter 'appraise' [ 439.968918][T21022] overlay: Unknown parameter 'appraise' [ 440.018010][T21030] bridge0: port 3(syz_tun) entered blocking state [ 440.024573][T21030] bridge0: port 3(syz_tun) entered disabled state [ 440.031158][T21030] syz_tun: entered allmulticast mode [ 440.037029][T21030] syz_tun: entered promiscuous mode [ 440.042470][T21030] bridge0: port 3(syz_tun) entered blocking state [ 440.048960][T21030] bridge0: port 3(syz_tun) entered forwarding state [ 440.075913][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 440.190495][T21043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6884'. [ 440.218037][T21043] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6884'. [ 440.252178][T21052] overlayfs: failed to clone lowerpath [ 440.262715][T21051] overlayfs: failed to clone lowerpath [ 440.392627][T21066] netlink: 'syz.1.6894': attribute type 16 has an invalid length. [ 440.400520][T21066] netlink: 'syz.1.6894': attribute type 3 has an invalid length. [ 440.408310][T21066] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6894'. [ 440.937874][T21081] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6900'. [ 441.104560][T20164] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 441.282437][T20164] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 441.292106][T20164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.301415][T20164] usb 4-1: Product: syz [ 441.306851][T20164] usb 4-1: Manufacturer: syz [ 441.311690][T20164] usb 4-1: SerialNumber: syz [ 441.324428][T20164] usb 4-1: config 0 descriptor?? [ 441.378813][T21121] overlayfs: failed to clone upperpath [ 441.547500][ T36] kauditd_printk_skb: 465 callbacks suppressed [ 441.547520][ T36] audit: type=1400 audit(2000000270.830:45674): avc: denied { ioctl } for pid=21075 comm="syz.3.6899" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.560336][T21134] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6920'. [ 441.580811][ T36] audit: type=1400 audit(2000000270.830:45675): avc: denied { ioctl } for pid=21075 comm="syz.3.6899" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.613633][ T36] audit: type=1400 audit(2000000270.870:45676): avc: denied { mounton } for pid=21133 comm="syz.1.6920" path="/384/file0" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.636692][ T36] audit: type=1400 audit(2000000270.870:45677): avc: denied { mounton } for pid=21133 comm="syz.1.6920" path="/384/file0" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.659614][ T36] audit: type=1400 audit(2000000270.870:45678): avc: denied { create } for pid=21133 comm="syz.1.6920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.726596][ T36] audit: type=1400 audit(2000000271.010:45679): avc: denied { create } for pid=21135 comm="syz.0.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.765899][ T36] audit: type=1400 audit(2000000271.010:45680): avc: denied { setopt } for pid=21135 comm="syz.0.6921" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.793880][ T36] audit: type=1400 audit(2000000271.010:45681): avc: denied { create } for pid=21135 comm="syz.0.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.816914][ T36] audit: type=1400 audit(2000000271.010:45682): avc: denied { write } for pid=21135 comm="syz.0.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.838369][T21145] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6924'. [ 441.838515][ T36] audit: type=1400 audit(2000000271.010:45683): avc: denied { read } for pid=21135 comm="syz.0.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.690419][T20164] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 442.701680][T20164] asix 4-1:0.0: probe with driver asix failed with error -71 [ 442.723435][T20164] usb 4-1: USB disconnect, device number 34 [ 442.850823][T21202] 9pnet_fd: Insufficient options for proto=fd [ 443.430084][T21222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.929079][T21261] netlink: 'syz.4.6963': attribute type 27 has an invalid length. [ 443.967352][T21261] 0{X: left allmulticast mode [ 443.989586][T21261] bridge0: port 3(syz_tun) entered disabled state [ 444.004339][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.011628][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.078260][T21261] veth0_to_team: left promiscuous mode [ 444.083856][T21261] veth0_to_team: left allmulticast mode [ 444.165424][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6969'. [ 444.274201][T20164] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 444.444712][T20164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.464477][T20164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.475298][T20164] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 444.486535][T20164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.504406][T20164] usb 4-1: config 0 descriptor?? [ 444.956671][T21268] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 444.958015][T20164] usbhid 4-1:0.0: can't add hid device: -71 [ 444.994150][T20164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.036328][T20164] usb 4-1: USB disconnect, device number 35 [ 445.498895][T21344] overlayfs: failed to resolve './file0': -2 [ 445.764108][ T639] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 445.934065][ T639] usb 4-1: Using ep0 maxpacket: 16 [ 445.942487][ T639] usb 4-1: config 6 has an invalid interface number: 32 but max is 0 [ 445.951710][ T639] usb 4-1: config 6 has no interface number 0 [ 445.957921][ T639] usb 4-1: config 6 interface 32 altsetting 127 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 445.969252][ T639] usb 4-1: config 6 interface 32 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 1024 [ 445.979964][ T639] usb 4-1: config 6 interface 32 has no altsetting 0 [ 445.994286][ T639] usb 4-1: string descriptor 0 read error: -22 [ 446.001084][ T639] usb 4-1: New USB device found, idVendor=19d2, idProduct=1065, bcdDevice=74.57 [ 446.010414][ T639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.023207][T21349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.249674][T20164] usb 4-1: USB disconnect, device number 36 [ 446.612526][ T36] kauditd_printk_skb: 426 callbacks suppressed [ 446.612545][ T36] audit: type=1400 audit(2000000275.880:46110): avc: denied { execmem } for pid=21390 comm="syz.0.7006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 446.639348][ T36] audit: type=1400 audit(2000000275.880:46111): avc: denied { execute } for pid=21390 comm="syz.0.7006" path="/dev/rnullb0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 446.663656][ T36] audit: type=1400 audit(2000000275.930:46112): avc: denied { create } for pid=21392 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.684314][ T36] audit: type=1400 audit(2000000275.940:46113): avc: denied { write } for pid=21392 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.704950][ T36] audit: type=1400 audit(2000000275.940:46114): avc: denied { read } for pid=21392 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.725418][ T36] audit: type=1400 audit(2000000275.940:46115): avc: denied { read } for pid=21392 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.776840][ T36] audit: type=1400 audit(2000000276.050:46116): avc: denied { read write } for pid=18793 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.819047][ T36] audit: type=1400 audit(2000000276.070:46117): avc: denied { read write open } for pid=18793 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.845111][ T36] audit: type=1400 audit(2000000276.070:46118): avc: denied { ioctl } for pid=18793 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.894040][ T36] audit: type=1400 audit(2000000276.120:46119): avc: denied { create } for pid=21396 comm="syz.3.7009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.224341][ T639] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 447.380274][ T639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 447.391870][ T639] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 447.402389][ T639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.425856][ T639] usb 4-1: config 0 descriptor?? [ 447.438033][T21402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.864503][ T639] kone 0003:1E7D:2CED.0027: unknown main item tag 0x1 [ 447.875288][ T639] kone 0003:1E7D:2CED.0027: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 448.061589][T20164] usb 4-1: USB disconnect, device number 37 [ 448.607433][T21450] netlink: 'syz.4.7026': attribute type 4 has an invalid length. [ 448.624064][T21450] netlink: 'syz.4.7026': attribute type 4 has an invalid length. [ 448.637430][T21450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7026'. [ 448.709041][T21456] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7027'. [ 448.734184][T21456] binder: Unknown parameter 'fowner' [ 449.566839][T21499] overlay: filesystem on ./bus not supported as upperdir [ 449.777943][T21505] devpts: called with bogus options [ 450.096461][ T963] bridge_slave_1: left allmulticast mode [ 450.102444][ T963] bridge_slave_1: left promiscuous mode [ 450.110328][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.121356][ T963] bridge_slave_0: left allmulticast mode [ 450.127310][ T963] bridge_slave_0: left promiscuous mode [ 450.133297][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.245191][T21513] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.252261][T21513] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.259422][T21513] bridge_slave_0: entered allmulticast mode [ 450.265809][T21513] bridge_slave_0: entered promiscuous mode [ 450.273124][T21513] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.280237][T21513] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.287370][T21513] bridge_slave_1: entered allmulticast mode [ 450.293666][T21513] bridge_slave_1: entered promiscuous mode [ 450.318952][ T963] veth1_macvtap: left promiscuous mode [ 450.324609][ T963] veth0_vlan: left promiscuous mode [ 450.385418][T21536] overlayfs: failed to clone upperpath [ 450.462320][T21513] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.469418][T21513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.476819][T21513] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.483888][T21513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.537336][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.545439][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.560007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.567120][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.578415][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.585523][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.658181][T21544] overlayfs: failed to clone lowerpath [ 450.677300][T21544] overlayfs: failed to clone lowerpath [ 450.727354][T21550] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7061'. [ 450.741306][T21513] veth0_vlan: entered promiscuous mode [ 450.778304][T21513] veth1_macvtap: entered promiscuous mode [ 451.017669][T21564] SELinux: security_context_str_to_sid (sytem_uGй sJz&C>@V%ZbTTa_Έr1e [ 451.017669][T21564] B^awa}1Yۤ/) failed with errno=-22 [ 451.728367][ T36] kauditd_printk_skb: 321 callbacks suppressed [ 451.728453][ T36] audit: type=1400 audit(2000000281.001:46441): avc: denied { unmount } for pid=21513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 451.764859][ T36] audit: type=1400 audit(2000000281.041:46442): avc: denied { read write } for pid=21513 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.813931][ T36] audit: type=1400 audit(2000000281.041:46443): avc: denied { read write open } for pid=21513 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.883720][ T36] audit: type=1400 audit(2000000281.041:46444): avc: denied { ioctl } for pid=21513 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.973734][ T36] audit: type=1400 audit(2000000281.111:46445): avc: denied { read write } for pid=21608 comm="syz.5.7077" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.045968][T21615] support for cryptoloop has been removed. Use dm-crypt instead. [ 452.059605][ T36] audit: type=1400 audit(2000000281.111:46446): avc: denied { read write open } for pid=21608 comm="syz.5.7077" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.109186][ T36] audit: type=1400 audit(2000000281.111:46447): avc: denied { read write } for pid=21608 comm="syz.5.7077" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 452.163706][ T36] audit: type=1400 audit(2000000281.121:46448): avc: denied { read write open } for pid=21608 comm="syz.5.7077" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 452.201379][ T36] audit: type=1400 audit(2000000281.151:46449): avc: denied { read write } for pid=21513 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.229405][ T36] audit: type=1400 audit(2000000281.151:46450): avc: denied { read write open } for pid=21513 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.358494][T21634] rust_binder: Error while translating object. [ 452.358561][T21634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 452.385182][T21634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 452.556567][T21653] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 453.472151][T21716] netlink: 'syz.1.7118': attribute type 1 has an invalid length. [ 453.574261][T21717] overlayfs: failed to clone upperpath [ 453.643629][T20162] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 453.794755][T20162] usb 6-1: Using ep0 maxpacket: 32 [ 453.803205][T20162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.814570][T20162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.825766][T20162] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.840646][T20162] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 453.851914][T20162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.863927][T20162] usb 6-1: config 0 descriptor?? [ 454.284494][T21712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.294962][T21712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.307472][T20162] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 454.315551][T20162] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 454.324819][T20162] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 454.332637][T20162] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 454.340088][T20162] steelseries 0003:1038:1410.0028: unknown main item tag 0x0 [ 454.348117][T20162] steelseries 0003:1038:1410.0028: missing HID_OUTPUT_REPORT 0 [ 454.775481][ T639] usb 6-1: USB disconnect, device number 2 [ 455.873159][T21873] fuse: Bad value for 'fd' [ 456.176150][T21880] ------------[ cut here ]------------ [ 456.181849][T21880] WARNING: CPU: 0 PID: 21880 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 456.192149][T21880] Modules linked in: [ 456.196453][T21880] CPU: 0 UID: 0 PID: 21880 Comm: syz.0.7166 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 456.208261][T21880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.218593][T21880] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 456.224811][T21880] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 456.246062][T21880] RSP: 0018:ffffc90003bd7860 EFLAGS: 00010246 [ 456.252189][T21880] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 456.260259][T21880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003bd7918 [ 456.268658][T21880] RBP: ffffc90003bd7988 R08: ffffc90003bd7917 R09: 0000000000000000 [ 456.276788][T21880] R10: ffffc90003bd7900 R11: fffff5200077af23 R12: ffffc90003bd78a0 [ 456.284846][T21880] R13: dffffc0000000000 R14: 1ffff9200077af10 R15: 0000000000000000 [ 456.293028][T21880] FS: 00007f5e120236c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 456.302113][T21880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.308945][T21880] CR2: 0000000000000000 CR3: 0000000125672000 CR4: 00000000003526b0 [ 456.317360][T21880] Call Trace: [ 456.320942][T21880] [ 456.324280][T21880] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 456.330844][T21880] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 456.336652][T21880] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 456.342503][T21880] ___kmalloc_large_node+0x81/0x220 [ 456.348296][T21880] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 456.354029][T21880] __kmalloc_large_node_noprof+0x1e/0xe0 [ 456.359802][T21880] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 456.365619][T21880] __kmalloc_noprof+0x336/0x530 [ 456.370878][T21880] ? __cfi_lockref_get+0x10/0x10 [ 456.376345][T21880] incfs_realloc_mount_info+0xa7/0x4d0 [ 456.381853][T21880] ? incfs_add_sysfs_node+0x118/0x240 [ 456.387433][T21880] incfs_alloc_mount_info+0x479/0x600 [ 456.392855][T21880] incfs_mount_fs+0x3ca/0x960 [ 456.397651][T21880] ? __cfi_incfs_mount_fs+0x10/0x10 [ 456.402922][T21880] ? vfs_parse_fs_string+0x102/0x170 [ 456.408302][T21880] ? selinux_capable+0x38/0x50 [ 456.413123][T21880] legacy_get_tree+0x106/0x1b0 [ 456.417978][T21880] ? __cfi_incfs_mount_fs+0x10/0x10 [ 456.423380][T21880] vfs_get_tree+0x9e/0x290 [ 456.427875][T21880] do_new_mount+0x251/0xb40 [ 456.442708][T21880] ? security_capable+0xcf/0xf0 [ 456.447749][T21880] path_mount+0x688/0x1050 [ 456.452391][T21880] ? putname+0x113/0x150 [ 456.456748][T21880] __se_sys_mount+0x2bd/0x480 [ 456.461550][T21880] ? __x64_sys_mount+0xf0/0xf0 [ 456.466505][T21880] ? __kasan_check_write+0x18/0x20 [ 456.471667][T21880] ? fpregs_restore_userregs+0x11d/0x260 [ 456.477457][T21880] __x64_sys_mount+0xc3/0xf0 [ 456.482085][T21880] x64_sys_call+0x2021/0x2ee0 [ 456.486834][T21880] do_syscall_64+0x58/0xf0 [ 456.491297][T21880] ? clear_bhb_loop+0x50/0xa0 [ 456.496030][T21880] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 456.502004][T21880] RIP: 0033:0x7f5e1118f6c9 [ 456.506594][T21880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.526431][T21880] RSP: 002b:00007f5e12023038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 456.534928][T21880] RAX: ffffffffffffffda RBX: 00007f5e113e5fa0 RCX: 00007f5e1118f6c9 [ 456.543035][T21880] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 456.551200][T21880] RBP: 00007f5e11211f91 R08: 0000200000000280 R09: 0000000000000000 [ 456.559271][T21880] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 456.567321][T21880] R13: 00007f5e113e6038 R14: 00007f5e113e5fa0 R15: 00007ffcf1302be8 [ 456.575455][T21880] [ 456.578501][T21880] ---[ end trace 0000000000000000 ]--- [ 456.584341][T21880] incfs: Error allocating mount info. -12 [ 456.590117][T21880] incfs: mount failed -12 [ 456.960797][ T36] kauditd_printk_skb: 488 callbacks suppressed [ 456.960817][ T36] audit: type=1400 audit(2000000286.231:46939): avc: denied { read write } for pid=21513 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.993832][ T36] audit: type=1400 audit(2000000286.231:46940): avc: denied { read write open } for pid=21513 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.021780][ T36] audit: type=1400 audit(2000000286.231:46941): avc: denied { ioctl } for pid=21513 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1