last executing test programs: 7m37.784355686s ago: executing program 32 (id=60): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002040), 0x1, &(0x7f00000021c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}]}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setrlimit(0x7, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) 7m15.910395185s ago: executing program 33 (id=346): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 7m9.755714326s ago: executing program 34 (id=225): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESOCT=r2, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="0000010001000000020000c005020000001bd300058edb7c"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x1004, 0x0) (async, rerun: 64) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) (async) socket$inet_udp(0x2, 0x2, 0x0) r6 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) (async) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="02002abd7000fedbdf2503000000080001000200000008000200020000000800020002000000080001000300000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x200c1055}, 0x4810) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x80000000003, 0x82}], 0x1, 0x0, &(0x7f0000000000), 0x1) (async) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r13 = fspick(r12, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000000480)) (async) getdents64(r12, 0x0, 0x0) 6m55.401940198s ago: executing program 35 (id=646): write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x600}, @void, @eth={@random="14f6f58a021f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0xb, 0x6, "b97637", 0x376, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, {[@dstopts={0x16, 0x27, '\x00', [@generic={0x7f, 0xfb, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x9, 0x2, [0x4, 0x5]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x2f, 0x0, 0x2, 0x1, 0x0, 0xb, 0x68}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8a, 0x0, [0x13], "9d51019e4b4223c16b2311b5a86e3ac8c5a5b4106abf52a931f5a2ca11dd7d127e58eee726fb866265f87d454f16bf07a6fdc980b7dbb64dcec0dceecb93e99b60c179c3650eeca309f5ad714d3ceffc90d5dfa4f810954ee31e15cd40a45ec5f75b78669b773910e35be1e30f4f1beb164ebbc8cc08ad8c4db6ebdb99f4c66748edd3827e21042f8ecf"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xffff], "06ad6d56a0fc47d2e73c45984883ef75ad5500791e76c6ec477bc7b2ed32f8c8f9a8310bdb4bd5bd098c13b1d248fb8e0430b1df2a32f4b1609174623ff937bf5371d785a9a5e6282c70c7cedf1ec9560a22b54de3f9433510a850c03c74fe8052ce59a7f17c70a8ca2e58e0b61d45c1f452d0d0a5d66183b2d1c9c9a705581de2389b06d472d80e67b29a785237e8f0563da3cef76e0ef3b6128bfc7316b37efe5a7c97c77ecf26cd6a70524024afb7c259e50d863133e99a13a1fd5a1a3a5f6bfe399653f0a72f1ac16c7a7a3201788cdd534639b0a85860dfa1a9c3aedb696835a146406728abf3afe3f19b32d4cc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "d53fb90457330e9981a103267f03fa7a5f5ec7ee9605f162159525c3874bdf5acbbabb876aa0d927f3f825005dcddc04f98faa2f33d8f72edfcc1fde44d907b2454c1d95b3486d58de6beeb9fdbda4ef"}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x1, 0x0, 0x1, 0x3, 0x6, 0x5}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0x2, 0x2, 0x0, 0x3, 0x1, 0x2, 0x0, 0xcb}, 0x2, {0xfffffffd, 0x3, 0x3, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "f7e5cc3b6d35360abe595de6f9da6ee31066fe21"}}}}}}}}, 0x3b0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.461323408s ago: executing program 5 (id=1767): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x1) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)="1de8", 0x2, 0x200400c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20d0) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000002c0)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m13.424328569s ago: executing program 5 (id=1769): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xd, &(0x7f0000000040)=0x2) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)=':$\x16\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x200, 0x11d, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x3, 0xe, 0x3, 0x6c, 0x2, 0x6c, 0xb, 0x6c, 0xc, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x3, 0x96a7, 0x7, 0x0, 0x9, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x48, 0x6, 0x24, 0xc, 0x6c, 0x0, 0x6, 0x3, 0x1, 0x36, 0x1b, 0x24, 0x3, 0x1b, 0x6, 0x1, 0x24, 0x60, 0x36, 0xb, 0x6c, 0x35, 0x30, 0x4, 0x12, 0xb, 0x5, 0x6c, 0x18]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x1}, {0x2, 0x7}, {0x3, 0x1}, {0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x6}, {0x3, 0x9}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x6, 0x3}, {0x7}, {0x2, 0x6}, {0x5, 0x8}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1d5a, 0x4, 0xfd, 0x0, 0xb, 0xf14e, 0x400]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7}, {0x7, 0x3}, {0x5}, {0x5, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x1}, {0x4, 0xa}, {0x5, 0x10}, {0x5, 0x6}, {0x7, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x5, 0x8}, {}, {0x0, 0x9}, {0x5, 0x1}, {0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0x4}, {0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x2}, {0x1}, {0x4, 0xa}, {0x0, 0xa}, {}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x1b}, {0x1, 0x9}, {0x2, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/consoles\x00', 0x0, 0x0) r4 = getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='rose0\x00', 0x10) r5 = open$dir(&(0x7f0000000500)='./file0\x00', 0x8000, 0x1) mknodat$null(r5, &(0x7f0000000540)='./file1\x00', 0x400, 0x103) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1020002}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb04b09a956884e5c}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x4000100) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x198, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xc7, 0x7, 0x1, 0x0, "78d03f2412d48db5cd87e5c042a456957d19f387b142687da3eebe48ef782f271dc008580dc00437193552d0b168973dd7c482b7b8862ee890bf0d185dd741015880c7f3b8129e1f5bed1b918bd27ab7d2db5ff26d20c5d0350f85a1b9b330dbee0de47c4fd10483ceac31427bc1ff5f84872dd180d170a83d2a1925393935659d80e930932e96da40a97c82436bf39d7ceb48f2c1cfddf7122b9353ad36c72bfd3561a902c6a201fe812d2de080ab79008f75398fdad1928da13daefc7c1d2d443d53"}, @NFTA_RULE_USERDATA={0x3f, 0x7, 0x1, 0x0, "ce65aa0bcaf7b86e7ec6f2d660371ffc834f76fee54290795057e315f6f33c74c60391379e2c936ef562ea7c2cf968c7951699f6e32460eecbc50b"}, @NFTA_RULE_USERDATA={0x63, 0x7, 0x1, 0x0, "03d13cf15b0e83908bfb0b94c0cd957934a21be4a9e3db9d70e1b8362ee678e529d4abe06175fa6d5991945d29d16accac8d4d8e184c7c659da37e2b3779825dc428e2da6c159c31534d751fe1ceea2be57468f631442f98387b75b41df98b"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x198}}, 0x8000) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000a40)={r3, r0, 0xf}) ptrace(0x10, r4) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000a80)=0x3, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r6) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000e40)={0x2, 0x1, &(0x7f0000000b40)=""/253, &(0x7f0000000c40)=""/255, &(0x7f0000000d40)=""/247, 0x1000}) write(r5, &(0x7f0000000e80)="eb08eeef2a929b2ca9068a52ff23a31b9487dabbc1daa19552f0d7cc29a0c8003c7652c1275cb6750b245aabac3aaf06e10242a7c78f2dcf3b0ae60f25cce0daa1f818a2dc417b77e1bb403e801c5519dbb7", 0x52) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x158, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1e}, @ETHTOOL_A_LINKMODES_OURS={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b19688f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'rose0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x935b}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3cd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%!}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'rose0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x85}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000001380)={0x3, 0x1, &(0x7f0000001180), &(0x7f00000011c0)=""/147, &(0x7f0000001280)=""/247, 0x6000}) 5m13.407552189s ago: executing program 5 (id=1770): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d688aa3b8920779e27e42437f0f53f92c8154664a519593b9f41d5f34005d258f1f0d64e99696c5ee1986d389467a01462b78e"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x70}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0xa, 0x75, {0x75, 0xf, "4ccadd5f3a9d3f33838910671e38b97d81fbba1995d9d694d5672822b35be626aec466897f5910e1f79460105ad9dd760cd91c19e1a3832fd11cef15b0f69e58b0ef1441a6795c13004b1f959936f409b2a249aa88b170eb9a14247c0e5f6d3104463f52cf1e4039f5405a9ffdbb2b7b486041"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x7, 0x6}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x9, 0xa, "4e6655d3", "802669aa"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x1, 0x5, 0x9, 0x100, 0x2}}}, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)={0x40, 0x8, 0xb6, "083b8b8884863437afb1e8e8788737dfbcd81df726d22d497e3f5298c62def7b0a306f8bd5e0fb37085f1425921729de07d20fd04f20610008c9cf8baf9838f5c753e3fed7cb66840d2d9c37e26d06e0a52f81e5a57a882963a698bab1bc53c488024d26281aeb3dda4d0a3b8b22b9c9ac7fe68f7e2d129da3eca00556bb82675f65edf1318d6e2a48b83f30e1cfe1a5dd0bb0e08315c55d64e01744797dfd120fd74462e5aca579c58d750e414994008efadc8a4cb2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xcb}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d043"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfff6}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="385dba981833"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "11cd"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) 5m10.372037669s ago: executing program 5 (id=1818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x1050, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c403154658020066b8f5000f00d0c40105f39500800000c74424009fdd2ebfc744240202000000c7442406000000000f011c2426660f2b8500000100400fee4a0cb9800000c00f3235000100000f30440f20c03501000000440f22c066b831008ee0470f07", 0x65}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = gettid() r4 = getpid() rt_sigtimedwait(&(0x7f0000000080)={[0xa0]}, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) (async) rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r5, &(0x7f0000000740)=""/384, 0x200008c0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2800}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x0, 0x1}}}], 0x18}, 0x4) (async, rerun: 64) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r7, 0x0) (async) unshare(0x22020600) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) (async, rerun: 64) dup2(r8, r8) (rerun: 64) 5m10.248407011s ago: executing program 5 (id=1820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) mmap(&(0x7f000096b000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0xffffc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x12) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5m10.139259253s ago: executing program 5 (id=1821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x8) getdents(r2, 0x0, 0x3b) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x4000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 5m10.066208894s ago: executing program 36 (id=1821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x8) getdents(r2, 0x0, 0x3b) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x4000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 4m41.916208027s ago: executing program 6 (id=2295): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r3, r1, 0x2) 4m41.896361607s ago: executing program 6 (id=2296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x6ff88441080c712b, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x7, {0xb, 0x0, 0x0, {0x9, 0x2000000001, 0x7, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3c, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x24, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0xe3c}}, 0x30) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x144) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x238c02, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000080)) 4m41.717610461s ago: executing program 6 (id=2298): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) timerfd_create(0x8, 0x0) (async) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) (async) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 4m41.673791852s ago: executing program 6 (id=2300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0xfffffffffffffffe}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x1c00, 0x0) syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x9937bff12862f21a, 0x0, &(0x7f0000000200), 0xb1, 0x0, &(0x7f0000000700)="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"}) 4m41.569988474s ago: executing program 6 (id=2305): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000500)=""/72) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xaf9}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0xffffff89) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) setreuid(0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) 4m41.381417808s ago: executing program 6 (id=2306): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) 4m41.378613038s ago: executing program 37 (id=2306): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) 4m21.653094655s ago: executing program 7 (id=2592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async, rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) (async) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 32) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x0, 0x31}, @fda={0x66646185, 0x1, 0x0, 0x5}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m21.652521875s ago: executing program 7 (id=2593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = fcntl$dupfd(r1, 0x406, r1) accept4$vsock_stream(r2, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) gettid() setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4m21.610651996s ago: executing program 7 (id=2594): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x5917e000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002f10a80085a041052fc0001020301090212000106bd200f0904f80800"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='mnt/encrypted_dir\x00', &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0xd9, 0x4, 0x2, "74d3f60e6551d6f03c3f03de466abd03", "b7acd1356f6a2ea29549e6cc6ae2d67f037483163d1968c722a58a10d02656703676a49fd80f396cbdccd07c3c679d6039a428f2f05d5693d42b90951602754954178be12fb1e0a0dfe3af1ebc9fe33f5b2965772c21bb9a6d2bea0f507a10db9e622b5c06c03f9ed4b4e17f10c2ed83a5b8bb38bd1b7c6b81a94bec55d7b1b923970b1a2cfb345a4b3e64aeb1568eeb6a6bc35216365e593ca0f463099e4d735f345dee4c58f317eff4678b581ab7c19e83774e33aa4413bfed675b8d7d6170470f485c"}, 0xd9, 0x1) 4m21.083353316s ago: executing program 7 (id=2595): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r2, &(0x7f0000000180)={r3, r2}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r5, 0x3, 0x0, 0x4) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) 4m21.017374158s ago: executing program 7 (id=2596): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r2) r3 = getpid() eventfd2(0x3, 0x1) r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername(r6, &(0x7f0000000380)=@generic, &(0x7f0000000180)=0x80) getpeername$unix(r6, &(0x7f0000000100), &(0x7f0000000080)=0x6e) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="951f9f8a3fd78da751d71c60f66a6300"]) write$FUSE_DIRENTPLUS(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r5], 0x10) sendfile(r1, r0, 0x0, 0xffffffff) 4m21.016932117s ago: executing program 7 (id=2597): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) unshare(0x2040400) r3 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',nottr,cache=fscache,\x00\x00\x00']) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x21, 0x92, {0x92, 0xb, "240fb1fefb80abd5d753b2069fa4ac676b8dc809c2831a0a6fa0f433d1349b0573ff809c0279618b81f632122c0d308cb04d91ce84333044c15c60db4506cb7673cb1a78906a1533d9a78c6b8e18d8bd58b360f8ea60b8add50752ed3075bc806b9ff70551dd293bb13b4492eb9571d41f945a508c55266da78e748e1c93d43cb1515cef32d1eda66fb1ebabab72eabb"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00036e0000006e03bca850f4f1ca720b19acb220a35a4509a979c123569d80e6cdb6aaf78f86ddcf157d614643b073cb0cee9d46363adfc641c0f4355f18fb8e45f707a223905db7c8ce78096d117a082eaafe101442efac24b277772264a21b6afdbfbdcdc6fda3d1e7e4e78826c248fcd88751"], &(0x7f0000000200)={0x0, 0x22, 0x4, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x1, 0x2, 0x7, 'O'}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) close(0x3) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) io_submit(r6, 0x1, &(0x7f0000001080)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000000040), 0x0, 0x5}]) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}], 0x1, 0x4040001) link(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r10, 0xaea2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/4096, 0x1000, 0x1, &(0x7f0000000480)=""/8, 0x8}, &(0x7f0000000640)=0x40) 4m5.930266314s ago: executing program 38 (id=2597): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) unshare(0x2040400) r3 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',nottr,cache=fscache,\x00\x00\x00']) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x21, 0x92, {0x92, 0xb, "240fb1fefb80abd5d753b2069fa4ac676b8dc809c2831a0a6fa0f433d1349b0573ff809c0279618b81f632122c0d308cb04d91ce84333044c15c60db4506cb7673cb1a78906a1533d9a78c6b8e18d8bd58b360f8ea60b8add50752ed3075bc806b9ff70551dd293bb13b4492eb9571d41f945a508c55266da78e748e1c93d43cb1515cef32d1eda66fb1ebabab72eabb"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00036e0000006e03bca850f4f1ca720b19acb220a35a4509a979c123569d80e6cdb6aaf78f86ddcf157d614643b073cb0cee9d46363adfc641c0f4355f18fb8e45f707a223905db7c8ce78096d117a082eaafe101442efac24b277772264a21b6afdbfbdcdc6fda3d1e7e4e78826c248fcd88751"], &(0x7f0000000200)={0x0, 0x22, 0x4, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x1, 0x2, 0x7, 'O'}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) close(0x3) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) io_submit(r6, 0x1, &(0x7f0000001080)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000000040), 0x0, 0x5}]) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}], 0x1, 0x4040001) link(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r10, 0xaea2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/4096, 0x1000, 0x1, &(0x7f0000000480)=""/8, 0x8}, &(0x7f0000000640)=0x40) 2m36.442668579s ago: executing program 0 (id=3421): write(0xffffffffffffffff, &(0x7f0000000040)="260000002200470105000710", 0xc) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) close(r0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x310) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000f1000040"]) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m36.307434152s ago: executing program 0 (id=3424): sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) getpid() (async, rerun: 64) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xcb3e) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 2m36.229252104s ago: executing program 0 (id=3425): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0280) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080)=[{r0, 0x85}, {r0, 0x4000}, {r0, 0x60}], 0x3, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x6]}, 0x8) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '${!-*('}, {0x20, ':-.*-]'}, {}, {0x20, '/dev/snd/timer\x00'}], 0xa, "7445b6577c33adb5943097e5ea6e115aad0bb5d115a28bd97aa628e58dcad1aee26f19d50418c9fb4074b2f22c23ce7b50a8fd6dd976e342a0a67a438ddd92cf5f7c89cb844436cf1887d9b84a9a5a3b59333071179c1f736b46e229f3d8b912f8dbdaa5a7268b"}, 0x92) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x148) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) link(&(0x7f0000002280)='./file1\x00', &(0x7f00000022c0)='./file1\x00') sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048044) r4 = dup3(r2, r2, 0x80000) r5 = openat$cgroup_type(r4, &(0x7f0000002400), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000002440)) ioctl$int_in(r1, 0xfcf6, &(0x7f0000002480)=0x1) mount$incfs(&(0x7f00000024c0)='./file1/file0\x00', &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x40000, &(0x7f0000002580)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffff}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x9}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x6}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@euid_gt={'euid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x39, 0x35, 0x62, 0x38, 0x63, 0x35, 0x63], 0x2d, [0x63, 0x38, 0x33, 0x39], 0x2d, [0x39, 0x63, 0x31, 0x31], 0x2d, [0x32, 0x34, 0x37, 0x61], 0x2d, [0x38, 0x30, 0x61, 0x38, 0x63, 0x33, 0x33, 0x38]}}}, {@dont_hash}, {@dont_measure}]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x2010, r5, 0x58f2a000) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002700), 0x1, 0x0) linkat(0xffffffffffffffff, &(0x7f00000026c0)='./file1/file0\x00', r6, &(0x7f0000002740)='./file0\x00', 0x1000) fcntl$getownex(r6, 0x10, &(0x7f0000002780)) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002880), 0x800, 0x0) dup3(r7, r0, 0x80000) mkdirat(0xffffffffffffffff, &(0x7f00000028c0)='./file1\x00', 0x20) r8 = openat2(r4, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x3, 0x20, 0x8}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000002900)='./file1/file0\x00', r8, &(0x7f00000029c0)='\x00', 0x3) listen(r6, 0x1000) write$UHID_INPUT(r6, &(0x7f0000002a00)={0x8, {"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", 0x1000}}, 0x1006) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000003a80)={0x2d, 0x4, 0x0, {0x1, 0x3, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) syz_genetlink_get_family_id$ipvs(&(0x7f0000003ac0), r6) connect$inet6(r6, &(0x7f0000003b00)={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c) 2m36.227689353s ago: executing program 0 (id=3426): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x50, 0x43]}, 0x34) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/protocols\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x541401, 0x30) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x541401, 0x30) write(0xffffffffffffffff, &(0x7f0000001c80), 0x0) syz_fuse_handle_req(r1, &(0x7f0000002680)="ca8955b3ab335d21787d66ffbc9b99e49c086721520dee268a8450d16b026ae91504463e6c06d4016094797ce1713b3669777d9cb0b1c46c216d091e4e2aa6177d611a08f0b1b10e54d6db4b7b7d743b737ffd161874eb8cd3189e59ac8d74a24a4acba98f0b8267ebc55f1dc5dc941f44d4c7f722d08d23701a810c6e3178d528021eb176bda15404339afb0a3e1b961660d4f6a60b2d15319ad80920b16b22a2e8ec6485582a666e70777c3f2b1d2ac480880df74e7ee616808906ec10cc94d695a5a37c62eea3736449894b85dac0ded06c8b2bc09b3b5a81bf6ed8eb7adfcb90aa0e8b126cff8f2f3d3b9300b1aa05d152278a699fa103e1d7faeaa90f6ba7023818eb91d39d209cad449b046aafbc2defb7133136c77e8e4e96a3fe6316639e9c62996ae3a8c564c5f8f6adec25bb1c4519a30104e417001888b99920181f62bde479ab503d2c01dab5142392d264542887b60350d1764ba302635b74c5aedb85369bfc3a614712ee3df17389b1a184cb770f9366beafc860ec68fa2a162314ab9809e77104550ee30f9b0545e301699b7c88d5a631a9b5cf860555158ba9ed2e8dfc13a1388b76dd6c718ebeaa8eb53252802766cabfe15199db6c04af8d4cf2cd7d6d7d25515077c1fb0b505628d0f4cbd3182762bf35adf03117250efb52f6cd0d9d54494ffbb1690ab1b09d276bb9c20e888e741d530ef00a45722b5695d63ff0df44f291c44f9d325f6e3fbcd3c2eec8d69f604fe727d590bfca8344a3c0913c95c51c41abef96f1c7baef5e0da63a2f8a208b36589ac38a7a76fc11b080e68070d5d26c8fc7404253ebb9ce96e7b9cc350f9c27610b149e3f7e5d5cb907d3bb1325c84fdd4b5f9efc3f11ce15fcd8448922c4e698e45a3f5c5c9eb6e8c2377ee494c7532845415ea430948da0b05b4acd5393715e2d3239421dc3451c718c2e39e3fa0785004a047990890aa6044601e79f745029cf8af9e63009f5595fc25e028e528f1ffe1775708b48835543149d0a91ee40d35de5f374e0795846826b88746c2b965930b82e4cad3b6fcf489dd93ab286e42705d11a75d3538513d03e1a38effde494cf4d1b286f37acdfa3cd8e6ec55b731acb3badfff445d562763f51b77a13c59871725a6b7fa853b02eec51d7d01f9d0019c8826ba7867f091c314c9b8aafbb73942ec33b257bce63d80a4f2012d9b3438ab2ea51be93bb06afd24aa0d32f39d4a5a71908ef3a8b4b711b05f1daa4569e74ef5d0112a3af6a7796432732e729ab90da072b8118bafb01653983c9acc76bb1ffda7ebd50f74b842a069a0b7f944b144155cc1481176ea428907e0b5a46aa8763a6783f3f6490dda0433c49e7873f66c1fd8398d18dc0d16f55c5c13d1af00b6711a086ae5d2eed4dfb0f0fe6fd23e2f8eb3857e2e2f4c30a402ea516e065e0350d44d856299d5d45b07a733dfcc194765fd9206208b76650658103aede362eabb920d7fd849eac213a0b9416abebdcc746fe551c16c92e4957781a39487288a2897f797bfa4a7d3c89a521201b4f6a23793208cef138cb2bb9db0fa802c9649f7435677c11a4a3c8e99312a39e02e1bc1258917b667ef578a9ea01221760aa3666e38c33dd4bddaeb0ca0e1c4f463565b618f071b155a5a72163b36840c46f1b557d2893c83be282d60f55363b8eacf352c6388be6df055160163732e0a060b380d42a703b1f425f3bb6475b38910a2660e6890e546168222a65002f7f6b99a61d5a224eb950f85053e98c156660316a0c4135144f0d8a381a4ea280452a551c3a08fc9cff5481f1442429ac9be1b0e4af9dcde2fd2de45f2c50eec466cb4c8d5c90e315bc6879c452f4d393cddd4da41b45695a52c7b24a2bcbfad4e909d0cf3b2778ae639834b6bec4a4b092782ab7ef36bbe94a43e856773c2b0648202085994d868de1c277e663a8d8f43dd2177fc7e36d135bb5723136afee86be693d8fbc069e66ddddbd473023fdc6bb88d205a1e68ce0e40c382e8681eaac1d690eb7d15d9e707bcd87f142ac136fdcd5f332577bf9f6f6a04631a2e8e8097ac54096451159f49296b24ff134457006854779bc700eb5bcac3a4751165a9ef9ad80672772893979ccf7ac495c4d29db1046a1d29e72dd4abbb532d31d965380175f0ce9ca922c5fd43891d326cd36cc5a6babe94f8a130ba37c1170507e6f572345565deedc3173dbce279b75377503cd8c4911f46171d68ed7ce8a1432ee83d9455e44a1f4c6884015ae593bb2f7f8cc01bc08930a5aa326a374e564da851572ae38fbc88de586a88898d1ea7927c7dc96805fb9b08f454812dd676756b62b6b7ed0a09ee1f1b208d6ad3dcac69a719b31848d1222b42f0b2614bf4a5c4638442b5b851b62862a6148c2d4a7a206fb878d88eada2c90a847f840cd5254163840746768bef70b9b9a6830c5b48c860c5b8253efd68cc072880e5b3af2565cd0b1bcae5c48a3eb019a5aeb125f33aae42e12378018e43a8f1e731810fdc58eee4a2b9c1ffa313a182c3d8b412853d1e22d0ab2d22256790b642598a70a58add62c0dec7f13c0c5334d03b8c8b7abb7006149a53ce7fc3193dbfdf88d9ba5b7e19d74aaa333431bc1cede2ab81629984eb54451a079b544d313782ffcfbbbf8214ee93cc5043009af2518e7980f117566c5575dd5c8aa8b136b07b5e9bfafe0f3146af31042cf6cf7be0d65d13afa2394780f991609f833b964530279379fb0a3426a6dac05c1854c63c2e5d864faefbf63fb1b924005adca12b8bffeffadea261c0d26d670680d52202d5ce8a54791e84fc03b4ad5d253c00dcc9fe0b43b4bf04aea3f598d3c6a9d30cf3e7f38b812e5a2b65e95e82887f73ac8e06dfd0b5013f3e5e4951f886008160fb6c4236ca164e17c821718f128db5f5ddf742a32cd9723c34fc32c16e90fbeb417ccec7b5f331da6c95c8ec97d726e9554cf2256a46481c97018c52075fd8a884755dbc580c7283f464815108dd77600b1484e6aaaafaec12d1c33a615180ca44b55c93288528cfad28c4f183bad2b378837177e6898ab1bb44cb2fa1d66e192a22b2035b3ae805d7be872b3a5face8c977904297efdd9d7543b0acf8174ce12ac3d2b2e977ca5fe7300b76064acefd8a849b3e910626d9bf7e31f268b5553ab8aaa782775c7bd9c6ce086ffad5665fd95c33f5c72fd662060da2cc7845c96ba0969a64eace622cf78517b416c75c4448f88dc7ef15610fe3b79f76f53e940fc9d880f0306d8a07cd0bec1af31a70157dd091939a5e2d848e5410e248cc3438f229400b13e291a76b2264fec89711e1aee0a23494c10f0cc03120079ca17cd5aa7b302cc3ad377b94989fc00b09471a398441a69b3caf3c45e417a5029b9140242da9b204cd7ba60935072acb27a3da44b56ae7708b55f7979e64c144c88b0e4ff40e2cf7fcae151589b49e48df963da1f3ed0d71751222a01af2c8e7473d9f945aea39c7733412b77cdf14ea294edfd0fa8f82350e665e2c37831c00f8ac4d671b75a2850d5b9cb71c08dab39f75c09954a5a591b8931b1adaeaff3f76b63cacfd0be63f0eb0d003669d25f80e9af9833410856f2ef518f7b7e12018dd038a91df383cb3d55512b907c7ea43a66a2fffa9c36f92a22e5c7524027cf0251d55e3f8251aa22f5a21493ba1362e49a8fe26fd7cf4ba1891459cf3f63ba89b9415c9926c3352fefc64e61eb3a877105e0adc7a5bf53e02eb95b4e68125d09c7a42867bcb1bccd944776db7732a32b8817f4766c0d69b7709a0a24c0665bbc702e557138d20dab265b29d508afca86ba1d05b321968734019352691dbcbee11882ab2ffb04509f3f90697316c0b965eb748a4193184e4c26f56f47ab740766af393953d9da8176dce0386e12906c6e3bc14c0e8836c2c0fcf16e1724baab111a89ff34b5800d079be7ad9a206154eec5f8fb44d3f93c60c9c2613b413854d44efc5bd55f6fa0d397edc49033de77ad7da8e1f2d0dd932eabf1490eb0a20af98e122caa72c4acc0e8bf51a7d940d425674f6a227fdfc4a8891602eebf8197be7b54994c16257c32c4588caa4b81d02f4efed1e575a5b58b3fed02c8585b8e71b1017d36d6a9c52b81aa891a101843040b1e813181f6579ea6dd2cb8ea9cbe666f183a88771d4b93d2e64d3174acf0cdda8a1d5f95821e1d9bf25e3bd6817ae15314c5b9b6eed15aabbadddb661e6d5353bb1af04a64b81b9303efaaed67e9737aeeb665ddb36525078789bfba572681a45384900251e236d5565a1ebb27dcf51e1fc08df158b58ca24d490a600848a575f5a93e058d975e2ac5e85cc6afd6c8c7bf3da9e7707170a1f53a2f2c90dbe8c14c0b04ce83bf863979b13cc1f3ee01725419984cf92d68e87662099c5bdb025697a77604ccdf36f29a6d0057cd374089311e3ae0e2cfafb58a4d6bc11f02816d1488da556d176b8353d40abd4d0fa068f71cc46841e20add6b7e7e47fc96f413b1fc1a6dd0d4e81149fcca41df1b95d9695e03822c194c40bb70e7cb4c8058f652881158c3bfd4a72bb68d942e36a90f36244422cab10ee4ea534a765df37fc201db6b7809cfff13070946eec32834f77b23d7a106324d630adf67dc9192728a6e652272476bd5c011ab4926161396b0fac5bd620ffc0991ff2c62ce85ae971324d2e224798cb620f4b667c61fea61272024a443562dd7ef9339ff1d7f14c13d5200d1c136bc9765103ce5a334f78a22faa0e4de4ff99c6671e8c4cd2e6229c3bf62a2ce0fb9295a568e87c4486df68c56cc5df612d37b1da0348e62acbbfd398475f2341d42997217c58ea415f3507dc9e9e84af540af5947e407e935fb8c4949e9eca2fb6f8efb267a2f2152f52406405c6fdf1991bca863f0d60a160582e5438bdde347d4a26343a92f69630afcad909e9e36d5f5832d33d6020e645e84a7e01b99e9d756f1fce7b2aba604cfa5813f38b2143e3550aa9d22195e31c7335278ada4cdf9a5d82a90c2c9039bf7028ac4f6dc3fbeda3ebc0e421ff516e3ed21ce595a3f812d98fbf03b02e4486702acd8dd89d0f5d43770fdd01d8634723d1d42106e09fb71c0dbde3d276606f38eb0f3b8de85265cc41eefcff63dcab59cdea78aa236c185cff3c18fa3ecaa238148834c54fa849b5b76a361ef8f0dede3eb3594d1ea8e70fe4106fdfa3d387583bc762d5d62a58ee48ead47f21e7ffeb59c88cdb86b0a7c7a290b84a5fbd7376de062e236e5cf6457055e2f178bfd544cbcaeb7603bbe4f8456166348a342578eb4037e6cbfb2f68a2cb0ae6a4e6be47710366af40c4e4078d6013e944f1d04c67bc4a584dacce2345c7a66faa73cf9e3567d59a583e8274799a76764f97ac7a19db17c30d0e646e5939a788d1583f4ee5413d64fa0ff938169739bd74d2bc0f22445127c25f18f12834e3ab160d7c82904884455929ff5e83f7a44bee0ae6869b94119b2753b49d5cbba451ab8f9797dfc15162b25f1fc1cd5ca38f60d51616596a364edb132ca17ce1f235e299a4136a51b6570cd873abc502d0a270e7a6e140410dad827186560917a051a7a52fab2d5bd47ef941f3cf4f5cb92eb26160920af3c6dac0764a7e3eb11cf51d35d01fa2c4305b0459ff9bfae93e5f45ff8f4e0a2880bad720f3a6d248ba4c5f45e3f90132af5b28a024c68a2f23e528042bb6140fa1fb5e94dfe9ac0bb0827ca4ba94d1065b047804a5ade5ad7aa874c9d610023b3ec38bf15a5cfaa8a7d727afffcace5298e5f77a589a9283dcae1f12080a27ef3b20d249682c0b54075a93bacb068d240dffb547be28cf936f9e1b62f7c49693c3a5894c8f09f856194a3f0a8e2bbe266e5e7ab1a1473658d8449b5b0fc0342f3f256e9002fb92b18ea2e0cf03f8233f0fea46edfcbc6080a2107a6919ced0f82a43666a1beabba204a915c81b78b57157ee4d499d9403fcfa16c206de0aaa58d9bcd16f0e35be3c4c2d0b5dcb2e8c73adea36e8d339aa47bb5bbfcf7de4a7e79970034e1fb70620f8275014cdcdf16375af53ce30d7b742185e1fe6ae1fc074088585718e6da15e9e55dd27ef758ea0eb28ac066c728a5446003ff01b889b0f29b9616e4a25f3c8aee3585a1ea1daeda1427f70f99fce50ed320b4d28eb1b063954d116d2fb659d7a8194dd69790d8e9e7be5c640f59c2f4d5c5c740722b2c78c4b9c736b03f066030a11db012d3c6c2e2be41bb0f8a47ecc58e1db7497f6c5e96b6cef100a80edd1b99cda99e5016194292557d81992cc6ef385acce363c7466d2396fef14f1443bb82de6fbaa07553d837d65b89fe25fede2b3fc4eb71cc71c7f4201d6ea4fb85ea596699ebddbfbcb8c1be120db9261cbbcf211642488b2c2890d639a502bac7d9df553e2d8365e4e964876f9d4b9d6d3791ef7061e0f0f10f820ea1449ff6793b0033f91cb7b94f301c77940ddba5a8d40c74dc9fa79558bbbaef6749b3397496346000fce5ccb6a3e1360fa351f3217e4d2e79818ca6b9888736327dbd878ad4c87ff462a1dba616204f5ed6d2a9982a285b0938d88af89fd10b5afecf14ca1c9f11708e8391ddbf440422140a17b1e87c3f7eb03686b3fba1d3e68bb915c45f408d19642ea8fabd0d5c579b29e6d9bf0cba4d4b1d44c9266728d73e37d9a2702be40a35b6a4a641c19f798aeb850e2472b15bb924ddb0ab6cffc7fb0e5fbaa1cfd32180cdd7b258730e3591d4317fcea009629d2ed1b112a2c1edcc38d1104ac7bf609976398ad0966fa2ffad0cdbcf8070f22b3c060a1a4f06461a576be8fe9312a7fbb9f56fd5e31be7e2836f98e65c6e14a3c245551c460c5af0f0a067798ae826c466e173fc29482302ed2eef30922b3f4b7b5e64b7d8c2317f06617697809a0a5998c301afc56a43aef1de0d6cd23261f16ae263fe6d383638ecbb8ff5fca7526123e63d825f37d382a41375ce1ba1c9fa3f752c74d529a782519505e66d1e299c5e119bdbf3b06ce271c7e8e514121bca15923e48cf7b8c0ef4008ef20de351dd24062b8782cb3830002baf68376b5636612e686009f84fb8914bb5af4122c42f7fe7bf6fec280e5142fb2448be861da1ed2b6d6926650edd9fb24c199b49a8b3b4471444671f4386f9fec048a494a2c360bca6ad679560f113f1c85daeef2b93a18fde42f1ab8f4440564a133e58fd18c82abd63f5018a8bdd0859f14cf659f2637efe16da591914160d5b369aa12a6f50930a04d262ed26bcb508ce86d059c2b05f48c93f47607c1d74980786f0fcea4989d383bd66afe3a46a1a0da0cb4e18abb9128075024612de95909b69d946f9f77ba1f772c68186bc18aaa92e1c9eafc7f6180eaae5cdf87573145314e69fb543189a2211252d2a6afb9cb0640875bda6bba85f982d515eb88c2bb74e161b29681ca5fd93ddca0745ca474e79a8fad9c73eedad652c0d5ad0423332efc0d2fbb633e26142d3b4c867075b64d5d8eb4b4ae8e97bc67e0037c4797259d3e895c5f77d6e7b6d3f5e7a609b6eeb2cafca596707fe674de01f4c7621153b0f09a84f70523b4b41b8a79ea3faf719e760d9caef7b8230712a925fbd5dd6f9fbae9388c41591a0d8c72551e5275723f6fa3aa1a8da64a07375629b329884893f78fc95c8bb7a98cf8562b8e706732c1a2decb6dfb85fb69ea44932523c51767bb56f105e00d5588cd0f337b2460e1b84909daddb6b77cb3f95c96fb5ac483cd56e67190d2badf1d0db65d45aeb0a94ee1e3f387944c75f8d55d31f0877676ee2c6fadf9f0ab91698cf663e1a4782285fa0783e10a59f0435665f6f1bba9963ef43a2394ff4b2c3d60dae5eefd528a050185d310c510ed612afb625904fec6f76f1a300dd8931b9f6528df538536c7f3c25c6bacc2305f047a5705ea60f04a65783e52b87d06808609c99b1982cd1575dd43928362fc12874500aea9ac843b6a00401c6f65de5a996800832120a767143a46248d0d859f8c01b4d1e50a66ffcb899be9b5d4e87cb36d466758cfbf632796a0b9e25a7fd6c435ecaa30e311ab1851745b5e09d1b54b72930273aab2e9d6cd5a7d28f5c17afb1a6e40a440e7da8bcafffed40e56f4a2e2dbb8525bd7bcf0c2e30187856f4ec3830588348f2f29085eb0988c14cc785c63c38788a2384083a30dfa598b18a2e18dee145d3abe2ec01a59a6fb9b29d11cbb7ec1c87c563c8808df26a2f68025da8a40623d104283d87f0cea049a77320fc40d920212c005178ebae49bc86e8c9e648b14581630aba96584f2ed7722098cd12adb529ee5d7e4e515dad6a747ece346df669f3cb5ec01730cfef5c199004fc281971f1f52c188e8b504cafe0d9ab2797b8ccab84634a5ad96a59c63e53c7381e96aebabf929cab82f226a25bb6d4ab5521dd97a136063c22ba7cf061f23f24ebfd6e9e054a01125fe2353163cd8d7f4a88ed8411a52a4c005d6be720fcef76d7f7c9319b3173a3f650a7c7a586e3bf90c8ee1ea947ba4709c4f9d4f3eec4729be83f89bc1f0dbd71a1e9412003662a0f6e8bb5db9900bdaa413da56d0916ff0c15948be1c6667c9e5376da317edca79426a1c9d0023836e8a70096dc59d3390e78600fdc99175cc62848e511060075d05fe297899be21872ca4d53759c80984d86cb8c038c695b0f965fd4777756fe2d81c86fc2514dc1f08baca11d3754dbe3cce63e1c6cafd87562dc416af0a2b3b24eaac1de64a30a318c2dd5e099cffeb58cf01f1704a06f2093377ccb2e9a6da87c3dbdbf65e92090ae7af70b6416714506b90969f894da754bf0abb28a678f2fd69837e1bcea051326d992160c640e887c9af7fb82e8cfae492d444119bd0bc4f64870a198ea0d6291adf64f70bcb7250655e914dcc02453a7e9a0d15f32233d3ff771a36da525032781865d75bb8f5a36a937e47906d5647cd09abd1dbbbde31659a2088a82157b8c945c4a7bac09631a4b5f449f0f6766011f568ac992039191c152026c1e02654fea95ac96cd3cae48e9051c91d613f71763ffdea4b55e7a9259766eef8d0ff67e50127188420deb4a088ed38ad2dbb45bba15a47ae0f9e1079eeb6759f39fa715ab83b48aece28cd26fd6c130dc8fb87b48b3beaa8018affa0d542ad19af8be4f6ba99d64fcad1a5ea62b1b3db43b7d3d18ee75da988368aefa85682910c5a965a70a3cb6868fa9a1c88d64fa4a765560d5b96cc234fbc654271f5b45dcc239080f6b970951dca272b008023e436c00893409ac231c12d8039ef6201a19e2decf984b9311841d20acddfcbca57f04083858e454eaf5061848bbbadc0ec50733d064f197ad9492b5ad48f5d47c2e7866235439e22d3a3cd25238f5a6fee7182b60d513444e3c2decd01b7d720f2a90a34e900a9912c1ddab39fec49f1c4e805535bdd009f5a3c1730e1e3b3cd56c2c626c5981904e30d7338d13d9900cc0ba82b5f1976e77b3ef7141167a847fb6bac7effabd8ab500bc426f6af872a3484f5a06cfbe503e42cd9e7a8611e0942da98f1e23e220f362292ee2ce687d69ffa5c62adf3526cab57b4f4fed16f11702852785a612fadf6a39dd5362a6f207047c038335b5523cc0e987b7743f23fcb4fd567084db9a3276fa59df30706deb5ed41a7a803f6dc2956119920c07efb5f48f2dcf7b4ad5fba0b3f3b8e3bfb9a7ab932ae1cb6ef1b8f97d82b240b63dc5dd74506014a60a54b95888fd1dea8dbe8a900a1319a3a99fe56043273b4dd267233bbf1501a7727672796de342beeb18342eb725d5ed8054a21c145470e23da5f2b3fd26cf7bedc5b287d8cdb027c6bfebe8b9f7c8a3fc3c5894f17fec58799f7327bba20c7c61007a4480339418e7a2811b0ab184a75457f1af052b74878a48b74066bd06ad62059dbd60f8f1f5016ea32328df30956b63004e743770a2f34f44b400803f83b007c39782ed3a5570e5b6aa9bd3095b9de7c2f70c4d2923d7cf97bdf84c37f45fd35470e3950c9f11bdf5724cc119213f96df9059ff0b4bad2126db123369f51a0646fd1013177431ff7a9ef4d5d9b8015c8a4a54bb4647ba031e00f3009b383025b4c0d2aad19bfb1a87177c60ccacaf5c305bcb39052028d12b8a193e1dc6c7c6b1be64e11e5c67eb49020a576094b8f69492254be0ff646a1c3c670f0a29d8765bba64cf0e4df003ac2583621766288157673521c284a4f538510b0d30abd137792ae62a75935661b79f8790b651cb9d2e67159bb007281133256a9abc1dba15359ce904ef13a4d8c90c76248d0fa306c711cb7f342eca6d9b068f8260c0e49c3a34db871100aeb30ac769f118adfa64f635d99968bed427a07e99969093109da3046676469cc7201ef1c4c70a8832a2a0f3ea6aa6ed333e66849070a33a14a2c00e72276888b4adc6ed06f16890bfcf82964cfd2a098c3385a1239be7d4976b95689db762394ebf80218429b6ee74f10f3b7847eaf598b017dd87013c66de2556893bfba9730b86a545059a7e8b885c27cb5070e90d115c7a77d185a2358f59aa874b080b99a60ffe471e327efbe1d2f3dd6da4854c12ce78fd86980821bbe2dae064530b50432e85426525b0da4bb698bd51227747fa7a9c77b4883728c83d179b4b585a9b1f5d3fea4a40883d725d3149f159e62db9968cc633459f7bd4558da0de7ca6fbedb55554fd58255dfd3c302cb4c8df8aa022dbc56a756d79ae75a977686db24f615643aa2f1e3de4eb014da92fdbfed0e57f6185aeca756d8dcf6001ebdc5fa85bd7628f63c1060f9d15f13445e3c95bd8f961c76e457519978367058487529bee42dd20742df684bb5a62a1b6c7da3908e67c786dbc1d16c1c861f3d184e6fbb28d23649fa1227cfdbeb5af89464757953262b7786e8f9891ce5a37de67e51a0d8bfa6e4cab3ea3911aa3ff439150c59dc40ff248b96aaf219692c6883f4081669ae5f45e5344b77eec3da61a6a7333216eb99f8182eb77a0fd74fc9f6f7edf32447ca6ce141df01f5ccf3ce72b57be063c99a6fa546961b3cd17951800a7d73066bc0f284aacc8fd2cbcc2c1a1014bf0260761612e04f79577661656295b36eb57c1625620c73817ddddbf131875da61947bad45ec3cf8f9209e36ad1fefa2a9ae8bd7a93cd9187355e02b80200a2a15f7ddf111c482eaabd74accbc56e4780fe3c1cbb886f3707d8eb8409eec4527c28fc077b604c006225f5fc918fc63a25a27d7403f784450b962bb4c5d7871193a1911b4d443db371fbdcd28d7f1cffb045c2068a9e1fe4f681364a6350970714e922d1e093480d50e278340b7a5ca9f841de6941cfea7dfa031d20a0d7234d8327d786df69aba23ddd57579a1c4dd7fbac7b4be39ff0d74d3c8c8c46d887d903badbb4e2c704aad49cae41b45f2c5fdcd0584b8d978504b33a7ab853a9e4cb9a6a86342a8306c67aad80c2116ccf2447a75696c8612084fad2e34b738cd7156b087ce75eb8e498f752e7928176db49437a07fc5eecd29ae552b699090944ca8383574be1d49b8ae6d01f5bfa7271bf8df6b4bdb4a37218026db03fe949ce1849aeaa82b412600a2e6260521ad513ba77d0539f095f4e9ac", 0x2000, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000140)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) (async) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) 2m33.089236825s ago: executing program 0 (id=3467): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendto$inet6(r0, &(0x7f0000000040)="015ac912133adc612f78fd90a11236b6062adfaeb5aaca2bb2d51b443cf09ac47bb27fb578c5350e6902d904058e68a66aad06b3acef0d2acfa57e7adf0272052088fc41a04c2cbf6a5c2574f344dfb62cebcb2008aeff9ea2b2b478b85e82ae28d87e68b3dea3a2d3b92c67f82834cc9851802de9cf14ec2190bd839af35ef09be606ad55c8016b0b53caf887bb0317", 0x90, 0x4008804, &(0x7f0000000100)={0xa, 0x4e20, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) r1 = accept$inet6(r0, 0x0, &(0x7f0000000140)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) umount2(&(0x7f0000000180)='./file0\x00', 0x1) sendto$inet6(r1, &(0x7f00000001c0)="949922b501f53189f4548bc0fbf9dc5dc5f18dac03efff7795984a8d49aef04718af7111cd5acc8fd4a4fc4dfb9155c1b2e097793ac91e47475a01f50bbeee27ace46ddb2e3c06a6896e04d229545ce6ebc61128d7c251cc314fe904d256a66b56bedeb518cbc4a2ebd6c14fafade67b910eab6041aa16af1a3250b0864bda4cd85615c4d3c77cbaff925c131dcbe68abaa6acaf40f837f080f604c1e2824bb467c71665ae4a2a4623e9ecbc1ccaec759c7becd53f15be1d546adb8ea7bf473738fa3bd1bb3734be8117854e1934f567a6d3", 0xd2, 0x40000, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @private1, 0xeb}, 0x1c) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x80) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000340)="db73c1c90fcff825b8aafb359a603b74f32db2f5c5ff0f50f514304fcd3b6b53", 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'dvmrp1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in=@local, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0x80, 0x3b, r5, 0xee00}, {0x0, 0x2, 0x9, 0x8, 0x8, 0x10000, 0xfffffffffffffc00, 0x5}, {0x5, 0x1, 0x9, 0x8}, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d5, 0x17}, 0x2, @in6=@private1, 0x0, 0x1, 0x2, 0x2, 0xf, 0xd4, 0x8}}, 0xe8) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000540)) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000600)={r7, 0xfffffffffffffffd, 0x3}) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000640)=""/163, &(0x7f0000000700)=0xa3) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000740)={0x7ff, {{0x2, 0x4e21, @local}}, 0x1, 0x3, [{{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000980)=0x80000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x4000, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r10, 0x8002af76, &(0x7f0000000a80)) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000ac0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x4000, 0x0) r13 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ppoll(&(0x7f0000000b40)=[{r11, 0x182}, {r11, 0x5002}, {r8, 0xc200}, {r11, 0x2001}, {r9, 0x4001}, {r12, 0x2004}, {r13, 0x2}, {0xffffffffffffffff, 0x8200}, {r2, 0x8000}], 0x9, &(0x7f0000000bc0), &(0x7f0000000c00)={[0x46]}, 0x8) 2m33.022725606s ago: executing program 0 (id=3474): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x420140, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 2m32.957662318s ago: executing program 39 (id=3474): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x420140, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 46.106852355s ago: executing program 8 (id=4787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x38728000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x1000000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) 46.052556626s ago: executing program 8 (id=4789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3bde000) modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 46.052099966s ago: executing program 8 (id=4791): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x0, 0x5, 0xc0000000000000, 0x7, 0xffffffffffffa677, 0x81}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0xfffffffffffffff9, 0x2) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="0800000028000000e3", 0x9}], 0x1}}], 0x1, 0x20004004) recvmsg(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) 46.044763036s ago: executing program 8 (id=4792): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0xf48a8d79d227821f, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/fib_trie\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000180)=0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1b, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d"}) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000500)="bcbc648bc9"}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x98, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbff, "206d5248fdc6409962046653484b3505fe51c275f32f360c1b9c720b92bba762e17de8fc70c3d85e6e64becd7dd2019b6a00a339f2d08293cf0af7d4631438d7b3a29bf03503862cf5f6f4ababce7e7b95a0323337e2cb89b613d82e7ef571a3576c0f30725adb9f541b40247dc56aaea288e7ac5d2a106b48af540d22fb8ba3023b20dd561a29", ["", "", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 45.180570763s ago: executing program 8 (id=4800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) 45.179294373s ago: executing program 8 (id=4801): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r2, r3, 0x0) 45.120734184s ago: executing program 40 (id=4801): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r2, r3, 0x0) 37.218123229s ago: executing program 1 (id=4937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) 37.153450591s ago: executing program 1 (id=4938): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x3e3a80, 0x0) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0xfffffffffffffffe) 37.152727161s ago: executing program 1 (id=4939): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 37.152481181s ago: executing program 1 (id=4940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x280040, 0x0) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)) unshare(0x22020600) (async) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 37.143651001s ago: executing program 1 (id=4941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000140)="abd7e082f54ec4253e084f7022e1221eb1c5d39b5154de2af4a0d21cf76d02705ebb1e7f169ada3eb62edc3317ba289d368490c049ea497bc01c030c32ce9ffac0ec9392f9855b2b8327ee64dd1fa7d3d9af8b63af3908f52fb761551fd5154e00cb8b92852cbec6343d0b3a3fcfcb50ba4e4387a380614033227b960ae6795341a1ed5e0bfb531f1c281737fbd2f8be12b47f46766d092cf3b578ec8923ba0f0cf527bfeb1c2ed144a5792c9d856bd5658b64197095", 0xb6, 0x8000810, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000022c0)="85", 0x1}], 0x1}}], 0x1, 0x20000) sendmmsg$inet(r0, &(0x7f00000187c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000013d00)=[{&(0x7f0000012c80)=')', 0x1}], 0x1}}], 0x2, 0x4008440) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 36.956504544s ago: executing program 1 (id=4947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r4, r1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0660f383defb0f39aa79aa70c008ee066b882000f08c40f788fa4ba00000f00d866ba200066b8340c66ef0f0119", 0x38}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x2}], 0x0, 0x1000000, 0x0}) 36.904618985s ago: executing program 41 (id=4947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r4, r1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0660f383defb0f39aa79aa70c008ee066b882000f08c40f788fa4ba00000f00d866ba200066b8340c66ef0f0119", 0x38}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x2}], 0x0, 0x1000000, 0x0}) 7.61527188s ago: executing program 3 (id=5377): r0 = timerfd_create(0x4, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'batadv_slave_1\x00', {'batadv_slave_0\x00'}, 0x5}) r2 = dup(r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r3) r4 = timerfd_create(0x1, 0x80800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x6, &(0x7f0000000500)=[{0xc0000000, 0x99, &(0x7f0000000180)="50590052996e97846c9253146505eba72d6b8e48eb019e50dd112ba94208a6140ab03e90bdf200fb80993fea6e5c32003b9d876c0d1aa60506b35317fb6044f10ace9b37e0d2560a27c0b700627b84aa4f2ec69e405d7adeaf8fa8364138db3292f7f8fa28fefe2aada4680badc13ed2e33f91ac4b3bbc1eb99664d9405328f789543f4dec21eebdd83fc6fb7a94239ac6e7bc60247b8fa7e9", 0x1, 0x25c176bf180293f8}, {0x2, 0xac, &(0x7f0000000240)="5b8d6740aa873a18ae6c6063c76e89112baae955159252db7cdc946c563e9d083beecbdb8f1237aa32f27c10fab3514a182a4f8d55c4f3224753c53b01591d2624b9bf2011009ee3c73ca98c0919f0ae2d7d465b5ddfecad7adaea7114113a79490fd36b41ddbef8ba858e30889a567b688ee9a43fe6d353cec6d99f282c0844b0008e7ba93fd6ed00972f28ed32904e79c214f90e57d77fa2f4de00d1becc83d15ad71ae0ab0a080d4d4dee", 0x2}, {0x8, 0x0, &(0x7f0000000300), 0x0, 0x1}, {0x2, 0xd2, &(0x7f0000000340)="8479df6d028aebae6a007dc3dfd21caa66f6dd5bfaf47b10ae26b4ef33e2412faaecbea52b5823fa9e67209f9adbb809dbdd7cbd581c8a39d92d66cbd6e196d7bafccae1c8f54255a5e01561c66872ec80a554d9c0d600b8e1f72a726024ebfbbabc15e179499a24e1f578e628e1aa682bb9143fcb32cb09eabbfd3a8d0910feba26c8e84eebc554d0284fbc70b2d4237408a2776b8b881f5d93035f8a8ca979a79e8531032907ee5008360beda8d065cdad6539353241c8b0afc39e37dbd534a78ed7f66b0b4f3ebe6cbe87bac32b24c7dd", 0x1}, {0x9, 0x60, &(0x7f0000000440)="243b06460a94490c020f83fe2d3433a2990ca7f93b3350a66254e5abbce6cce7da75a93589b29159ebfec9f0bcd54fcbbdd937ccf76863ceddb8399cb5a4b12827d126aedebd76782560dcec5230915d1fdf3994f4e66433568d96601ac798da", 0x3}, {0x8, 0x0, &(0x7f00000004c0), 0x0, 0x1}]}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000600)={0xbc, 0x0, 0x6}) fchmod(r0, 0x1) write$bt_hci(r2, &(0x7f0000000680)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc8}}}, 0x6) fcntl$getownex(r4, 0x10, &(0x7f00000006c0)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000740)=0x85, &(0x7f0000000780)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000008c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000900)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) setreuid(r7, r8) pwritev2(r1, &(0x7f0000000e40)=[{&(0x7f0000000a40)="0a3da7fa830d99ee761b609c8aa343e08a10fcdfdccac17ba1d39d17b152aca2736bdb2b06272f7e44809c1ac756f2ff1857909645261e5679bff4ed702adcf534ae68c3b8bf3a01a68dead856c47bad55dd86c66de2f439cde4222d71bd632e0dcb893a5cbdff346a92be26a11b6544cf65a8c032b9e76dd80b", 0x7a}, {&(0x7f0000000ac0)="1b839eee2da7d1987e8f81db286ae3715152da503f24a6dc15f6a73fefd438748445d3bdf66b2247c65b0e6efa3bb56619a4088a5b17b33c4c0422ffd7917eb8d7a524901b2d44bafc6d190f73faae33cb99aa05dd01c40293c9d5c82643297bd538209cad89f268664d866e19b17dd612b59f37f8c9cd2c472163e35824673957aeb0f856ece4fff410cf2aa24400ffd458d5bbd3ed57bd224574c3abc2ef73810f", 0xa2}, {&(0x7f0000000b80)="cf689d648584a6c59b7bea816b202217c44279a6b031df69bca261d1eb3b0b1a671495735b51f912cb9ce7ac5d2d9c96034d6e74a607e88003930ddf760c0640db50b729b743058bbe5af96826c6fdeb84c2d71261b05d9264e5d580d9dcbdf5c685ad85e978cbf8ea98149702e8d244ba3d31b346275bbedfea29f8bb6d34ad5d3e65ef2c0845f381249918a661f2f8d56442a91443669dbffb21b66cf90225dae067c7e4e0d592bb08d5fea2d72dfa940c395f1f8ca815698da8f1929ff57f524ce3c83ce0f004", 0xc8}, {&(0x7f0000000c80)="5950d9e6dedfee860e615b417e2bf161089d58d5f209a3712a5bfd3ba5fb1a93144ea5fb47980228365a1a9e1fc1d1ce770e2cecc4d747928ada6cfec55eafd9a8576708f9e1794671fe7ac11bfa36c4fe30438c5c40acd950e08faea71ce24de7c253d7e7e35036bccc98c84dac66bf8a27686b4390865b08621d22491d8d3751c0011d021fb81a78a45817a2a26faca60b9932d9168aea0690a631f9ac2b3bc77ff1344e8b", 0xa6}, {&(0x7f0000000d40)="dc6338bfe55bc2f08c36963b0772fc6cb4ecb5459635aea4a6114abb73ca205929f9ed6721f3e2fd46b42d7b33312241de7ed624c4611687fb3c5faae60d994e35bcec34115e24599d9004d4cb2c8bc8e1fbb412f8dadefbcbe2df1a262f62d96f7ccfc43c446aeb2d0ecf520126b4e21cd0557c34920a061127b3eda546f0764c5ad5cd23b4f23838dfc0288b52ff9550698e98cdf49c67211409ed88dadb5b60a29341efd98511c8f41592eb4adf94f76c947398d0497a9d673b552a6df3fbb3c4e7d20e5539fc97bba9c4", 0xcc}], 0x5, 0x5, 0x6, 0x6) bind$tipc(r2, &(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x1}}, 0x10) r9 = getpgid(r6) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f0000000f00)={[0x1]}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000f40)={0x1}, 0x4) syz_clone3(&(0x7f0000001280)={0x8000, &(0x7f0000000f80), &(0x7f0000000fc0)=0x0, &(0x7f0000001000), {0x10}, &(0x7f0000001040)=""/252, 0xfc, &(0x7f0000001140)=""/209, &(0x7f0000001240)=[r3, r9, r5, r9, r3, r6, r6, r6, 0xffffffffffffffff, r3], 0xa, {r2}}, 0x58) fcntl$setownex(r2, 0xf, &(0x7f0000001300)={0x1, r10}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001340)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001380)={0x1d, r11}, 0x10) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000013c0)={0x3, 0x0, [{0xaef, 0x0, 0x7}, {0x8f2, 0x0, 0x100000001}, {0xa82, 0x0, 0x10001}]}) getsockname$inet6(r1, &(0x7f0000001400)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001440)=0x1c) 7.542619651s ago: executing program 3 (id=5378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) 7.464007523s ago: executing program 3 (id=5380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) (async) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xffffffff98000882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) (async) dup2(r5, r3) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5.183855198s ago: executing program 2 (id=5408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x0, 0x40180, 0x5, 0x14, 0xf2, 0x3, 0x7fffffffffffe, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0xbdb], 0x1, 0x1c4213}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000004500)='./file1\x00', 0x101200, 0x110) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.729428707s ago: executing program 3 (id=5413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282"}) 4.113452359s ago: executing program 2 (id=5416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000340000/0x1000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x84) execveat(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000140)='./binderfs/binder1\x00', &(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000200)='/dev/kvm\x00']}, &(0x7f0000000480)={[&(0x7f0000000280)='./binderfs/binder1\x00', &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000000300)='/dev/kvm\x00', &(0x7f0000000340)='$/\x00', &(0x7f0000000380)=':\x00', &(0x7f00000003c0)='./binderfs/binder1\x00', &(0x7f0000000400)='-\\,-\xc9\x00', &(0x7f0000000440)='+:}@}^\x00']}, 0x1000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.53491017s ago: executing program 2 (id=5420): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xd6cbb000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) write$selinux_access(r0, &(0x7f0000000140)={'/usr/sbin/cupsd', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x2}, 0x43) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) mkdirat(0xffffffffffffff9c, 0x0, 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 3.299142395s ago: executing program 2 (id=5422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRESOCT=r1], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRESOCT=r1], 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.891110613s ago: executing program 3 (id=5429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[{0x800, 0x0, 0xd, 0x2}, {0x8, 0x3, 0x6, 0x4}, {0x0, 0x9, 0x80, 0x9}, {0x5, 0x5, 0xb4, 0x4}, {0xeb, 0x3, 0x7, 0x3}, {0x3, 0x7}, {0xfffb, 0xbb, 0x81, 0x2}, {0x5, 0x9, 0x6, 0x9}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x168) unshare(0x2040400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r4 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x1, 0x286, 0x400, {{0x20, 0x4, 0x3, 0x4, 0x80, 0x65, 0x0, 0x80, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_addr={0x44, 0x14, 0x21, 0x1, 0x6, [{@rand_addr=0x64010100, 0xee}, {@rand_addr=0x64010100, 0x2}]}, @ssrr={0x89, 0x7, 0x67, [@broadcast]}, @ssrr={0x89, 0x17, 0x49, [@multicast2, @loopback, @loopback, @local, @remote]}, @ssrr={0x89, 0x2b, 0x4d, [@loopback, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @multicast2, @local, @loopback, @local, @multicast1, @empty, @loopback]}, @rr={0x7, 0xb, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x16, r5, 0x1, 0x1, 0x6, @remote}, 0x14) 2.393483343s ago: executing program 2 (id=5437): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r3, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) set_tid_address(0x0) (async) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 1.961355521s ago: executing program 3 (id=5446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0xfffffd27, &(0x7f00000001c0)=""/4}, {0x1000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]}) madvise(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1) syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000002c0)=0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcc, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0xc8, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x3d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xc, 0x8}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x1e, 0x7f, 0xf, 0x0, 0x5a}, 0x37, &(0x7f0000000440)={0x5, 0xf, 0x37, 0x1, [@generic={0x32, 0x10, 0x3, "9069a65f078c90691fabe8cf5a163c5c3eb25ed15816d00327f9cf0de03177b91aa4208253b066aeb8478a1943ade0"}]}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x147f}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}, {0x2e, &(0x7f0000000740)=@string={0x2e, 0x3, "f996449ceea0d025610e23841d5b1e6427ebc560d7eedcea34ea5cd637435d8a3547ab94eb137bdfd346901f"}}]}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="17756e616d653d232db14019eec52c676e6f726571762c63616368653d667363616368652c00"]) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r7) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000180)='net/kcm\x00') read$FUSE(r9, &(0x7f00000029c0)={0x2020}, 0x2020) 1.489418831s ago: executing program 2 (id=5457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000020000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x61}], 0x1) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000000)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r10 = syz_open_pts(r9, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0x4) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid={'afid', 0x3d, 0xc5c2}}]}}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000180)={0x20, 0x15, 0x6, 0x8000, 0xd9, 0xf9d, &(0x7f0000000580)="b88c6db81e59aaeaaa77050c5bb52ca59b60129cf6b0a394cbced8d9a0a2ef0e63f0b5dc08babd1ac12d30ac722e3b2b2fdef1f0ba0a8de1527d8c25ba5b9c10d6c38eca4c4c474626968529807c9ca24ee9c336bc881ff64c015702d8ba0fd2fbc58f81a6f723669fb2fc687074d902bbe4ba8b8bb5741e37795c1da0442a9839a486a84f2781e85d374cccedd5c05afc96886b285c2745289ae0db7fab610cdf8c8f9165900d4eff2c9fe501773cbf1cab6488b1bafcf9ec95ede59d4af86fd0338e637425b5a2fa2dde0a60f1e927083f4a13bc3d95c306"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r11 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r11, 0x0, r11) 1.222831716s ago: executing program 4 (id=5464): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="a7", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x6) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x4, 0x608d8d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 1.140559467s ago: executing program 4 (id=5466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="b879008ed066b9fa02000066b80050000066ba000000000f30d9f93e640f766a0f66b8600000000f23d80f21f86635c00000c00f23f8b859008ee8f30f090fafd466b9800000c00f326635004000000f300f01d1", 0x54}], 0x1, 0x6c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="b879008ed066b9fa02000066b80050000066ba000000000f30d9f93e640f766a0f66b8600000000f23d80f21f86635c00000c00f23f8b859008ee8f30f090fafd466b9800000c00f326635004000000f300f01d1", 0x54}], 0x1, 0x6c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa242, 0x8) (async) openat(0xffffffffffffff9c, 0x0, 0xa242, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000"], 0x28) (async) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000"], 0x28) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be62, 0x9}], 0x1, 0x8000e7, 0x0, 0x0, 0x0, 0xd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c002b80080004"], 0x2c}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) copy_file_range(r8, 0x0, r8, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 311.806673ms ago: executing program 9 (id=5475): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) listen(r0, 0xa1) socket(0x23, 0x1, 0x7) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2020) dup2(0xffffffffffffffff, r2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x40000003, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x208000, 0x5f31, 0xbcf5, 0x5, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0xbf3f, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 301.865254ms ago: executing program 4 (id=5476): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) write$tcp_congestion(r0, &(0x7f0000000000)='cubic\x00', 0x6) 225.404455ms ago: executing program 4 (id=5477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = getpid() syz_pidfd_open(r1, 0x0) close_range(r0, r0, 0x0) 223.766846ms ago: executing program 9 (id=5478): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xeeee8000, 0xefac, 0x4b, 0x7fe, 0x0, [{0x7, 0x40, 0x4, '\x00', 0x5}, {0x65, 0x35, 0x0, '\x00', 0x5}, {0x3, 0x2, 0x0, '\x00', 0xff}, {0x5, 0x3, 0x0, '\x00', 0xe7}, {0x6, 0x7f, 0x2, '\x00', 0xaa}, {0x4, 0xdf, 0x3, '\x00', 0x6}, {0x4, 0x8a, 0x1, '\x00', 0x6}, {0x54, 0x9, 0x2, '\x00', 0xff}, {0x3, 0x0, 0x8, '\x00', 0x6}, {0xcb, 0xf3, 0x2a, '\x00', 0x5}, {0x0, 0x80, 0x7, '\x00', 0xf}, {0x7, 0x7, 0x7, '\x00', 0xa2}, {0x9, 0xff, 0x3, '\x00', 0xb}, {0x1, 0x2, 0x81}, {0xa, 0x5, 0x1, '\x00', 0x3}, {0x81, 0x4, 0x5, '\x00', 0x81}, {0x5, 0x6, 0x2, '\x00', 0x4}, {0x25, 0x5, 0x72, '\x00', 0x3}, {0x86, 0x8, 0x5, '\x00', 0x4}, {0x0, 0x3, 0x5, '\x00', 0x72}, {0x40, 0x9, 0x3, '\x00', 0x5}, {0x8, 0x0, 0x3, '\x00', 0x5}, {0x0, 0x7c, 0x9, '\x00', 0x6}, {0x63, 0x2, 0x1, '\x00', 0xe}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 223.551325ms ago: executing program 4 (id=5479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setfsgid(0xee01) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/pid_for_children\x00') r3 = open$dir(0x0, 0x408000, 0x5) mount_setattr(r3, 0x0, 0x9800, &(0x7f0000008f40)={0x100000, 0xc, 0x100000, {r2}}, 0x20) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r4, 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)) r5 = eventfd(0xf) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8000, r0, &(0x7f0000000340)="176271f68fa875c12ab941af829ec7b068d40008abf8ba35f1865e89ea131fd269e6136aa954467b8df2b33a9710759bcdafad061c762e61a6b73b7c538f8174bc88af5203ba162f5a4bbd82116722ae866db88592419a92dbda888dddc91fe9865478f06a2eb4df2b67f047cc7d75d570e05bb0fc2a0ad2dacb8f7e1102e2af4d541bdf3b7c7dceacfd6c7e230b1258deb1b9c5fc93f46eac5aedcdbb92357fca432830359742c6544e5be0abd6595eb92e38dc1dabaac2943217a5a2ccf3b94b9a7baa8bb203d6b64f7d21adc98e8d", 0xd0, 0x8, 0x0, 0x2, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x446d, r1, &(0x7f0000000140)="f24515bb49c41a77148fc56ea3348fe54416e4904dbbc75f01842093c6b3dc4c74061228ce29ebc5d9b8b042ab1c9b6181d16320c9c5ea4eed7219d2f49a", 0x3e, 0x5, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0xf, r0, &(0x7f0000000480)="f946eec34d6d17000000000000055ddd7a9f3e543dbd77d931b2a31affff36130f8211ffc064c3b4f4bf83a8995b383188cc88d4acfabe82940fd243e9f8d26cf1eb6728086a988cc126dd338fc7f3fd28bdfc5b4d9476cdd997fc50cef3c2928216", 0x62, 0x0, 0x0, 0x3, r1}]) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "00b45a9af75938f5795dc473f9ade9ee5248b03d32f0d1f8f5ac05"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) get_robust_list(r4, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setfsgid(0xee01) (async) syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/pid_for_children\x00') (async) open$dir(0x0, 0x408000, 0x5) (async) mount_setattr(r3, 0x0, 0x9800, &(0x7f0000008f40)={0x100000, 0xc, 0x100000, {r2}}, 0x20) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) get_robust_list(r4, 0x0, 0x0) (async) io_setup(0x9, &(0x7f0000000080)) (async) eventfd(0xf) (async) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8000, r0, &(0x7f0000000340)="176271f68fa875c12ab941af829ec7b068d40008abf8ba35f1865e89ea131fd269e6136aa954467b8df2b33a9710759bcdafad061c762e61a6b73b7c538f8174bc88af5203ba162f5a4bbd82116722ae866db88592419a92dbda888dddc91fe9865478f06a2eb4df2b67f047cc7d75d570e05bb0fc2a0ad2dacb8f7e1102e2af4d541bdf3b7c7dceacfd6c7e230b1258deb1b9c5fc93f46eac5aedcdbb92357fca432830359742c6544e5be0abd6595eb92e38dc1dabaac2943217a5a2ccf3b94b9a7baa8bb203d6b64f7d21adc98e8d", 0xd0, 0x8, 0x0, 0x2, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x446d, r1, &(0x7f0000000140)="f24515bb49c41a77148fc56ea3348fe54416e4904dbbc75f01842093c6b3dc4c74061228ce29ebc5d9b8b042ab1c9b6181d16320c9c5ea4eed7219d2f49a", 0x3e, 0x5, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0xf, r0, &(0x7f0000000480)="f946eec34d6d17000000000000055ddd7a9f3e543dbd77d931b2a31affff36130f8211ffc064c3b4f4bf83a8995b383188cc88d4acfabe82940fd243e9f8d26cf1eb6728086a988cc126dd338fc7f3fd28bdfc5b4d9476cdd997fc50cef3c2928216", 0x62, 0x0, 0x0, 0x3, r1}]) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "00b45a9af75938f5795dc473f9ade9ee5248b03d32f0d1f8f5ac05"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) get_robust_list(r4, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) (async) 194.582886ms ago: executing program 9 (id=5480): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x884c}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x86dd, 0x2, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x1, "de", "84f000", 0x6005}}}}}}, 0x22) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) 148.384017ms ago: executing program 9 (id=5481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) arch_prctl$ARCH_GET_FS(0x1003, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) (async) 65.387239ms ago: executing program 4 (id=5482): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000100)=0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="66b8010000000f01c165f3f0810e3772e400440f20c0663508000000440f22c0ea2f7985a9a9017d65f20f350f01cf263e6468876e0f01c56565c0cb17", 0x11}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_settime(r2, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0xb6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) 60.126698ms ago: executing program 9 (id=5483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x1, 0x0, 0x9, 0xff, 0x2d9a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300080b000000ff0e000000000000010009000000000002000600ff00000002"], 0x58}, 0x1, 0x7}, 0x4040000) chdir(&(0x7f0000001180)='./bus\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x54, r6, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@random={0x7, 0x23, "d5b8bf7b2e2e4bcc258fe77cb3fc70490da57f352cdfdb51b2d837ee0e6b2e8020a155"}]}]}, 0x54}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000340)=0x60) userfaultfd(0x800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=5484): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x80000) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) r1 = syz_clone(0x4200, &(0x7f0000000100)="c39766aafd4f5680c0af2193c8eb41f84b03038dd66ed0037927515c97128421db0642132f6536886488f74fa8361ff49010281dc2da2fcefe8c4975110e0716b839f34f79b442b825d718ab27b476421788808b0aa05a165396e848a63ae81c49e3f1ef972731243e474e6a966b8fb70037", 0x72, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ca0c5a03319ba971fd8fbcd47d4bccb35b532b7ca4db5b39613ea51407f8ae88db7febe0c69e810db4c4e2e7d28c13c72a0bf2b6f6e2bc8ceb8a01b3da2935aeeb5d5b") r2 = accept4(r0, 0x0, &(0x7f0000000280), 0x40800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x364, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x17d, 0x2a, [@random={0xc, 0x6d, "5ee2bc7d6847e30c8672d269655518ffdc60fd9094793dd129ba817ec81728a9a74010320144eaf73b9cbedd6743f397493502a2ad73a462f1e136b96fdc0798db5638d7e0a18e4ebda8f8a372d58c1d2a61bdef088e26bab8e262fc62249a81dad23a0b887bbc82346fc51f48"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x3, @broadcast, 0x8, @value, 0x2, 0x4, @broadcast, 0x6}}, @supported_rates={0x1, 0x2, [{0x6, 0x1}, {0x6, 0x1}]}, @tim={0x5, 0xdd, {0xb, 0x2a, 0x5, "432b16a0636e935f7ccb05f3c9ad6fd3188e0c44970698bb90a42eca6a51c34e47a1b215c55d296398144e9be0fad78a305910afb9c4ff52063d31b5c93b275cdfdc393529db91b478110803589bc0a8dd853419157acc05e78cb5e599ca8ba06364584d38cb98326139e39e40a247f7a833898543104c00b0758f0d571b85acbd204daec961e9e6797962c2c410371eec723f807d1a89aa97a19ae73b9a07b15b71b02786731eddbbf06567102767658e34d56ca631edba11f143426a14e339d31b8281417e421a65495a5fd5e1e3d031b7174e39e3e9cf38ec"}}]}, @NL80211_ATTR_IE={0x169, 0x2a, [@peer_mgmt={0x75, 0x8, {0x0, 0x400, @val=0xff, @val=0x23, @void}}, @tim={0x5, 0xb4, {0xa2, 0x7e, 0x81, "1dfcbbaabedef7d3e4ffbeb48075742c3a236f307ac9f5cbf5874ae4e74801ee92901ecab9441a5dd7a77fbda52e5d79ad8808b2c02b51cab0e70e4a4a7e184fce07c9b1325b9b0fe9b1aa120c3d8fe62ba35a8e118434258aa40a4400baece6f3e73159e8dbe129b30dd02353f2cbbb407bde333bb1c45f823dff858ff6ebeffc8fb268749601a9efa7c86126101d690aff3c5399e311590244a1c34447973c6e2d7f39d10ea59f66d6b091292856cfcf"}}, @dsss={0x3, 0x1, 0xb8}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xc, 0x1}}, @peer_mgmt={0x75, 0x18, {0x1, 0xffff, @val=0xf, @val=0x3, @val="d327633af9b3af948eb53e6f3abbc046"}}, @sec_chan_ofs={0x3e, 0x1}, @measure_req={0x26, 0x70, {0x5f, 0x0, 0xf3, "f3d502d41b26c6f875f614600456676b1356a2aac64a1e4397b538844be9a75480b742cd9de2beb195f41edd5825e73a4f0233a898cf3a82d3e208e41834f1d96dd1cf765a2ffc7009b605901b8dfd95ab19903a0808f3f2552b7210511c35c3042295660e9dd24fa4cac8f4fd"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x52c, @val=0xdae, @val=0x11, @void}}]}, @NL80211_ATTR_IE={0x54, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x9d, 0x8}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @cf={0x4, 0x6, {0x40, 0xf1, 0x92f3, 0x2}}, @peer_mgmt={0x75, 0x14, {0x1, 0x4, @void, @void, @val="2a997d9e55dc834e0fb9594785a7de64"}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0x2c, 0x40}}, @mesh_chsw={0x76, 0x6, {0x1, 0x81, 0x1a, 0x9}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xba}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x793}]}, 0x364}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000880), &(0x7f00000008c0)=0x8) r5 = getpgid(r1) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x2, 0x5003) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x118, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c470a53de720cb1c1146b86e7d995a7cae05243be19e6930"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9ffc6406844cc0ae8d1db9532b185e6c22432e3fe6e5cfe"}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbb4b4a55f6ac80f3472105d2211e527a8c31d10474415ec"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "48d346276182f7dd1c1441008a23546bb0187ee4602015b9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17dc3160872c671f6c279ae3aa7a43bd56b12fce5bce8fb1"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x8840}, 0x48080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x400}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x180) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) close_range(r2, r8, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000cc0)) r9 = dup2(r2, r8) ioctl$VHOST_SET_LOG_BASE(r9, 0x4008af04, &(0x7f0000000d40)=&(0x7f0000000d00)) syz_pidfd_open(r5, 0x0) connect$inet(r2, &(0x7f0000000d80)={0x2, 0x9, @broadcast}, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44) r11 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r11, &(0x7f00000015c0)=[{{&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/178, 0xb2}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f0000001100)=""/248, 0xf8}], 0x3, &(0x7f0000001240)=""/255, 0xff}, 0x9}, {{&(0x7f0000001340)=@can, 0x80, &(0x7f0000001540)=[{&(0x7f00000013c0)=""/46, 0x2e}, {&(0x7f0000001400)=""/82, 0x52}, {&(0x7f0000001480)=""/187, 0xbb}], 0x3, &(0x7f0000001580)=""/23, 0x17}, 0x7f}], 0x2, 0x2000, &(0x7f0000001640)) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000016c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r12, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0x88, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000001840)={0x1, 0x6}, 0x8) kernel console output (not intermixed with test programs): 3-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.039032][ T332] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 281.048459][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.056880][ T332] usb 3-1: Product: syz [ 281.061224][ T332] usb 3-1: Manufacturer: syz [ 281.066218][ T332] usb 3-1: SerialNumber: syz [ 281.095064][ T9426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.095380][ T9426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.203106][ T9429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.325770][ T9441] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 281.340143][ T9441] netlink: 'syz.2.2893': attribute type 5 has an invalid length. [ 281.347980][ T9441] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2893'. [ 281.363034][ T332] usb 3-1: USB disconnect, device number 52 [ 281.370499][ T9275] udevd[9275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.517791][ T45] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 281.669506][ T45] usb 9-1: config 16 has an invalid interface number: 19 but max is 0 [ 281.677798][ T45] usb 9-1: config 16 has no interface number 0 [ 281.685533][ T45] usb 9-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 281.694646][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.702715][ T45] usb 9-1: Product: syz [ 281.706893][ T45] usb 9-1: Manufacturer: syz [ 281.711569][ T45] usb 9-1: SerialNumber: syz [ 281.841615][ T9445] overlayfs: failed to clone lowerpath [ 281.974951][ T45] usb 9-1: USB disconnect, device number 40 [ 281.984664][ T9275] udevd[9275]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.062774][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 282.062793][ T36] audit: type=1400 audit(1758159526.602:7059): avc: denied { ioctl } for pid=9454 comm="syz.2.2910" path="socket:[56830]" dev="sockfs" ino=56830 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 282.188261][ T9460] veth0_virt_wifi: entered allmulticast mode [ 282.200400][ T9460] veth0_virt_wifi: left allmulticast mode [ 282.211698][ T9465] binder: Binderfs stats mode cannot be changed during a remount [ 282.222559][ T36] audit: type=1400 audit(1758159526.761:7060): avc: denied { setopt } for pid=9464 comm="syz.2.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.274347][ T9466] binder: Unknown parameter 'obj_user' [ 282.344402][ T36] audit: type=1400 audit(1758159526.881:7061): avc: denied { execmod } for pid=9467 comm="syz.2.2913" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.367948][ T36] audit: type=1400 audit(1758159526.881:7062): avc: denied { accept } for pid=9467 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.394201][ T9470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.397383][ T36] audit: type=1400 audit(1758159526.931:7063): avc: denied { bind } for pid=9473 comm="syz.9.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.440246][ T36] audit: type=1400 audit(1758159526.970:7064): avc: denied { create } for pid=9473 comm="syz.9.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 282.470799][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2917'. [ 282.510856][ T9487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.522463][ T36] audit: type=1400 audit(1758159527.050:7065): avc: denied { mount } for pid=9490 comm="syz.9.2921" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 282.562024][ T9493] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.565320][ T9493] !@ÿ: renamed from xfrm0 (while UP) [ 282.582404][ T9493] rust_binder: Write failure EFAULT in pid:751 [ 282.674838][ T9512] /dev/rnullb0: Can't open blockdev [ 282.686377][ T36] audit: type=1400 audit(1758159527.209:7066): avc: denied { write } for pid=9511 comm="syz.2.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 282.753795][ T45] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 282.767475][ T9517] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2928'. [ 282.905526][ T45] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 282.916797][ T45] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.929919][ T45] usb 9-1: config 1 interface 0 has no altsetting 0 [ 282.939796][ T45] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 282.949270][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.957360][ T45] usb 9-1: Product: syz [ 282.961410][ T9520] overlayfs: failed to resolve './file1/file0': -2 [ 282.961658][ T45] usb 9-1: SerialNumber: syz [ 282.973462][ T9520] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2929'. [ 283.035537][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 283.180630][ T9487] rust_binder: Error while translating object. [ 283.180680][ T9487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.186993][ T9487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 283.197078][ T36] audit: type=1400 audit(1758159527.737:7067): avc: denied { read } for pid=9485 comm="syz.8.2919" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 283.230329][ T36] audit: type=1400 audit(1758159527.737:7068): avc: denied { open } for pid=9485 comm="syz.8.2919" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 283.257460][ T45] usbhid 9-1:1.0: can't add hid device: -71 [ 283.263498][ T45] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 283.274647][ T45] usb 9-1: USB disconnect, device number 41 [ 283.379568][ T9545] rust_binder: 9542 RLIMIT_NICE not set [ 283.379743][ T9545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 283.390805][ T331] rust_binder: 9541: removing orphan mapping 0:4248 [ 283.410325][ T9549] netlink: 'syz.9.2940': attribute type 4 has an invalid length. [ 283.418194][ T9549] netlink: 3513 bytes leftover after parsing attributes in process `syz.9.2940'. [ 283.580749][ T9584] rust_binder: Got transaction with invalid offset. [ 283.580797][ T9584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.587604][ T9584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 283.597668][ T9584] rust_binder: Write failure EFAULT in pid:107 [ 283.867316][ T9598] fuse: Unknown parameter 'gro' [ 283.990654][ T45] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 284.079215][ T9600] bridge0: port 3(dummy0) entered blocking state [ 284.086044][ T9600] bridge0: port 3(dummy0) entered disabled state [ 284.092890][ T9600] dummy0: entered allmulticast mode [ 284.098895][ T9600] dummy0: entered promiscuous mode [ 284.104550][ T9600] bridge0: port 3(dummy0) entered blocking state [ 284.110981][ T9600] bridge0: port 3(dummy0) entered forwarding state [ 284.118822][ T9600] 9pnet_fd: Insufficient options for proto=fd [ 284.150403][ T45] usb 9-1: device descriptor read/64, error -71 [ 284.401619][ T45] usb 9-1: device descriptor read/64, error -71 [ 284.652782][ T45] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 284.725321][ T9617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 284.725351][ T9618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 284.783450][ T45] usb 9-1: device descriptor read/64, error -71 [ 285.064671][ T45] usb 9-1: device descriptor read/64, error -71 [ 285.114901][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 285.114910][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 285.175299][ T45] usb usb9-port1: attempt power cycle [ 285.369363][ T330] bridge_slave_1: left allmulticast mode [ 285.375195][ T330] bridge_slave_1: left promiscuous mode [ 285.380924][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.396481][ T330] bridge_slave_0: left allmulticast mode [ 285.402204][ T330] bridge_slave_0: left promiscuous mode [ 285.407968][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.516814][ T45] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 285.528944][ T330] tipc: Disabling bearer [ 285.534429][ T330] tipc: Left network mode [ 285.537898][ T45] usb 9-1: device descriptor read/8, error -71 [ 285.546085][ T330] veth1_macvtap: left promiscuous mode [ 285.551814][ T330] veth0_vlan: left promiscuous mode [ 285.656124][ T9638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.656508][ T9638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.658538][ T9640] rust_binder: 136: no such ref 3 [ 285.663560][ T9638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:777 [ 285.679061][ T45] usb 9-1: device descriptor read/8, error -71 [ 285.829663][ T9651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.830041][ T9651] rust_binder: Write failure EINVAL in pid:785 [ 285.938751][ T45] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 285.969837][ T45] usb 9-1: device descriptor read/8, error -71 [ 286.100486][ T45] usb 9-1: device descriptor read/8, error -71 [ 286.210055][ T45] usb usb9-port1: unable to enumerate USB device [ 286.555069][ T9655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.711961][ T9673] rust_binder: Write failure EFAULT in pid:794 [ 286.781203][ T9680] binder: Unknown parameter 'fscontext?}' [ 286.816676][ T9685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.817588][ T9687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.824597][ T9687] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 286.831125][ T9687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 286.839518][ T9687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:806 [ 286.887136][ T9693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.948291][ T9694] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 286.955001][ T9694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 286.963117][ T9694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:681 [ 287.084081][ T332] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 287.224540][ T45] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 287.244618][ T332] usb 3-1: Using ep0 maxpacket: 8 [ 287.250794][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.261909][ T332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.274753][ T332] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 287.283810][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.292661][ T332] usb 3-1: config 0 descriptor?? [ 287.376257][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.387218][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.397005][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.409935][ T45] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.419054][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.427719][ T45] usb 9-1: config 0 descriptor?? [ 287.702411][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.709636][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.716732][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.723806][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.730891][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.737992][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.745105][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.752277][ T332] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 287.759378][ T332] hid-rmi 0003:06CB:81A7.0018: unbalanced collection at end of report description [ 287.768850][ T332] hid-rmi 0003:06CB:81A7.0018: parse failed [ 287.774813][ T332] hid-rmi 0003:06CB:81A7.0018: probe with driver hid-rmi failed with error -22 [ 287.836985][ T45] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 287.845871][ T45] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 287.903664][ T45] usb 3-1: USB disconnect, device number 53 [ 288.025706][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 288.025725][ T36] audit: type=1326 audit(1758159532.534:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372c18eba9 code=0x7ffc0000 [ 288.055542][ T36] audit: type=1326 audit(1758159532.534:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372c18eba9 code=0x7ffc0000 [ 288.079492][ T36] audit: type=1326 audit(1758159532.534:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f372c18eba9 code=0x7ffc0000 [ 288.103044][ T36] audit: type=1326 audit(1758159532.534:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372c18eba9 code=0x7ffc0000 [ 288.126573][ T36] audit: type=1326 audit(1758159532.534:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f372c190ac7 code=0x7ffc0000 [ 288.150003][ T36] audit: type=1326 audit(1758159532.534:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f372c190a3c code=0x7ffc0000 [ 288.173588][ T36] audit: type=1326 audit(1758159532.534:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f372c190974 code=0x7ffc0000 [ 288.197229][ T36] audit: type=1326 audit(1758159532.534:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f372c190974 code=0x7ffc0000 [ 288.220842][ T36] audit: type=1326 audit(1758159532.534:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f372c18d80a code=0x7ffc0000 [ 288.244211][ T36] audit: type=1326 audit(1758159532.534:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.9.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372c18eba9 code=0x7ffc0000 [ 288.295251][ T9725] batadv_slave_0: entered promiscuous mode [ 288.301911][ T9725] batadv_slave_0: left promiscuous mode [ 288.320908][ T9728] batadv_slave_1: entered promiscuous mode [ 288.328356][ T9727] batadv_slave_1: left promiscuous mode [ 288.352563][ T9730] incfs: Error accessing: ./file0. [ 288.357880][ T9730] incfs: mount failed -20 [ 288.362922][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3005'. [ 288.489250][ T9740] rust_binder: Write failure EINVAL in pid:808 [ 288.979677][ T9747] 9pnet_fd: Insufficient options for proto=fd [ 290.288418][ T45] usb 9-1: USB disconnect, device number 46 [ 305.770417][ T9750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.775097][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 305.775118][ T36] audit: type=1400 audit(1758159550.216:7126): avc: denied { map } for pid=9749 comm="syz.2.3013" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 305.816672][ T36] audit: type=1400 audit(1758159550.256:7127): avc: denied { execute } for pid=9749 comm="syz.2.3013" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 305.841208][ T9764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:814 [ 305.848267][ T9760] rust_binder: Error while translating object. [ 305.852188][ T9765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.865557][ T36] audit: type=1400 audit(1758159550.305:7128): avc: denied { read } for pid=9756 comm="syz.9.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.871778][ T9760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 305.872976][ T9767] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 305.893572][ T9769] fuse: Unknown parameter 'root‰ode' [ 305.901641][ T9767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 305.909093][ T9760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 305.915182][ T9767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:690 [ 305.948952][ T36] audit: type=1400 audit(1758159550.395:7129): avc: denied { mounton } for pid=9771 comm="syz.0.3019" path="/45/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 305.981986][ T36] audit: type=1400 audit(1758159550.395:7130): avc: denied { mount } for pid=9771 comm="syz.0.3019" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.075448][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 306.126657][ T36] audit: type=1400 audit(1758159550.565:7131): avc: denied { create } for pid=9782 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 306.158042][ T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 306.174493][ T9790] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.182405][ T9790] IPv6: NLM_F_REPLACE set, but no existing node found! [ 306.318723][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 306.325251][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.336302][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.349217][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.358265][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.367453][ T45] usb 3-1: config 0 descriptor?? [ 306.687679][ T36] audit: type=1326 audit(1758159551.123:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.8.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c518eba9 code=0x7fc00000 [ 306.725034][ T36] audit: type=1400 audit(1758159551.143:7133): avc: denied { execute_no_trans } for pid=9792 comm="syz.9.3025" path="/206/file1" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 306.755649][ T9798] overlayfs: failed to clone upperpath [ 306.842458][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.854585][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.930767][ T36] audit: type=1400 audit(1758159551.362:7134): avc: denied { mount } for pid=9839 comm="syz.8.3041" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 306.983691][ T9840] __vm_enough_memory: pid: 9840, comm: syz.8.3041, bytes: 18014402804453376 not enough memory for the allocation [ 306.996490][ T36] audit: type=1400 audit(1758159551.432:7135): avc: denied { mounton } for pid=9839 comm="syz.8.3041" path="/236/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 307.057420][ T9861] netlink: 57 bytes leftover after parsing attributes in process `syz.9.3048'. [ 307.106270][ T9863] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.106295][ T9863] rust_binder: Read failure Err(EFAULT) in pid:718 [ 307.159317][ T9870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.167987][ T9870] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 307.175381][ T9870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 307.183955][ T9870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:725 [ 308.915647][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 308.922732][ T9926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.937139][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.968191][ T45] usb 3-1: USB disconnect, device number 54 [ 309.014182][ T9938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.015745][ T9938] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 309.022592][ T9938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 309.033472][ T9938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:831 [ 309.079126][ T9942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.091962][ T9942] rust_binder: Read failure Err(EAGAIN) in pid:835 [ 309.098832][ T9942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 309.995941][ T9954] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 310.040632][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 310.191088][ T45] usb 3-1: device descriptor read/64, error -71 [ 310.431845][ T45] usb 3-1: device descriptor read/64, error -71 [ 310.672595][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 310.802991][ T45] usb 3-1: device descriptor read/64, error -71 [ 310.918802][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 310.918821][ T36] audit: type=1400 audit(1758159555.339:7142): avc: denied { accept } for pid=9968 comm="syz.8.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 311.043720][ T45] usb 3-1: device descriptor read/64, error -71 [ 311.135103][ T36] audit: type=1326 audit(1758159555.559:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.9.3088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372c18eba9 code=0x0 [ 311.158125][ T45] usb usb3-port1: attempt power cycle [ 311.495115][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 311.517950][ T45] usb 3-1: device descriptor read/8, error -71 [ 311.541914][ T36] audit: type=1400 audit(1758159555.967:7144): avc: denied { bind } for pid=9994 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.561804][ T36] audit: type=1400 audit(1758159555.967:7145): avc: denied { bind } for pid=9994 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.649636][ T45] usb 3-1: device descriptor read/8, error -71 [ 311.896338][ T45] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 311.917466][ T45] usb 3-1: device descriptor read/8, error -71 [ 312.047951][ T45] usb 3-1: device descriptor read/8, error -71 [ 312.157254][ T45] usb usb3-port1: unable to enumerate USB device [ 312.831002][ T36] audit: type=1400 audit(1758159557.253:7146): avc: denied { mount } for pid=10018 comm="syz.2.3100" name="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 312.855989][ T36] audit: type=1400 audit(1758159557.273:7147): avc: denied { search } for pid=10018 comm="syz.2.3100" name="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 312.878814][ T36] audit: type=1400 audit(1758159557.273:7148): avc: denied { read } for pid=10018 comm="syz.2.3100" name="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 312.901622][ T36] audit: type=1400 audit(1758159557.273:7149): avc: denied { open } for pid=10018 comm="syz.2.3100" path="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 312.924359][T10032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.924566][T10032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 312.931388][T10032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:854 [ 312.950173][ T36] audit: type=1400 audit(1758159557.373:7150): avc: denied { listen } for pid=10034 comm="syz.9.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.979002][ T36] audit: type=1400 audit(1758159557.373:7151): avc: denied { accept } for pid=10034 comm="syz.9.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.064282][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 313.109841][T10053] input: syz0 as /devices/virtual/input/input21 [ 313.174588][T10053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.174710][T10053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 313.223652][ T1288] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 313.242025][ T1288] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.304193][T10076] fuse: Unknown parameter '0x00000000000000060x00000000000000070000000000000000000000318446744073709551615' [ 313.656036][T10090] overlay: ./bus is not a directory [ 313.801619][T10103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.803066][T10103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 313.818298][T10103] overlayfs: missing 'lowerdir' [ 313.823508][T10103] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 313.823536][T10103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 313.831641][T10103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:860 [ 313.853500][T10107] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 313.945381][T10114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.945491][T10115] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 313.952766][T10115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 313.960524][T10115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:868 [ 314.057487][T10120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.057852][T10120] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 314.064399][T10120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 314.072444][T10120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:874 [ 314.082390][T10120] /dev/rnullb0: Can't open blockdev [ 314.195824][T10129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.195954][T10129] rust_binder: 883: no such ref 3 [ 314.207877][T10129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:883 [ 314.208529][T10129] rust_binder: Error while translating object. [ 314.217791][T10129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.224271][T10129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:883 [ 314.258063][T10135] overlayfs: failed to clone lowerpath [ 314.319977][T10146] SELinux: Context system_u:object_r:faillog_t:s0 is not valid (left unmapped). [ 314.506203][T10168] rust_binder: Write failure EFAULT in pid:893 [ 314.727969][T10181] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 671088640 [ 314.742250][T10181] rust_binder: Write failure EINVAL in pid:902 [ 315.246883][T10203] ip6gretap0: mtu less than device minimum [ 315.317504][T10209] netlink: 'syz.8.3163': attribute type 4 has an invalid length. [ 315.326020][T10209] netlink: 'syz.8.3163': attribute type 17 has an invalid length. [ 315.431629][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3167'. [ 315.443489][T10228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10228 comm=syz.8.3167 [ 315.532682][T10236] __vm_enough_memory: pid: 10236, comm: syz.2.3170, bytes: 18014402804453376 not enough memory for the allocation [ 315.733882][T10270] tipc: Enabling of bearer rejected, failed to enable media [ 315.942183][T10301] 9pnet_fd: Insufficient options for proto=fd [ 315.950532][T10303] fuse: Bad value for 'fd' [ 316.190006][ T1527] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 316.300695][T10313] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3198'. [ 316.315202][T10313] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3198'. [ 316.335303][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3199'. [ 316.345542][ T1527] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 316.357502][ T1527] usb 3-1: config 1 has no interface number 0 [ 316.359666][T10321] batadv_slave_1: entered promiscuous mode [ 316.363980][ T1527] usb 3-1: config 1 interface 146 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.379419][ T1527] usb 3-1: config 1 interface 146 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.379577][T10323] batadv_slave_1: left promiscuous mode [ 316.398178][ T1527] usb 3-1: config 1 interface 146 has no altsetting 0 [ 316.406789][ T1527] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 316.415954][ T1527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.424034][ T1527] usb 3-1: Product: syz [ 316.428245][ T1527] usb 3-1: Manufacturer: syz [ 316.432953][ T1527] usb 3-1: SerialNumber: syz [ 316.440775][ T1527] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 316.452402][ T1527] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 316.463352][ T1527] usbserial_generic 3-1:1.146: device has no bulk endpoints [ 316.506355][T10328] tipc: Enabling of bearer rejected, failed to enable media [ 316.699937][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 316.699958][ T36] audit: type=1400 audit(1758159561.102:7238): avc: denied { ioctl } for pid=10338 comm="syz.8.3205" path="/298/file2" dev="tmpfs" ino=1627 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.748045][ T36] audit: type=1400 audit(1758159561.152:7239): avc: denied { getopt } for pid=10340 comm="syz.8.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 316.775953][T10343] 9pnet_fd: Insufficient options for proto=fd [ 316.867160][ T36] audit: type=1400 audit(1758159561.272:7240): avc: denied { accept } for pid=10352 comm="syz.8.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.066761][ T1527] usb 3-1: USB disconnect, device number 59 [ 317.129762][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.522753][ T1527] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 317.674484][ T1527] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.682572][ T1527] usb 3-1: not running at top speed; connect to a high speed hub [ 317.691095][ T1527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.701263][ T1527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.712171][ T1527] usb 3-1: string descriptor 0 read error: -22 [ 317.718444][ T1527] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.727515][ T1527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.739543][ T1527] usb 3-1: 0:2 : does not exist [ 317.994459][ T36] audit: type=1400 audit(1758159562.398:7241): avc: denied { bind } for pid=10380 comm="syz.8.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.014995][ T36] audit: type=1400 audit(1758159562.398:7242): avc: denied { setopt } for pid=10380 comm="syz.8.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.339720][T10370] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 318.351202][ T1527] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 318.360774][ T1527] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 318.370374][ T1527] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 318.381346][ T1527] usb 3-1: USB disconnect, device number 60 [ 318.560428][T10387] raw_sendmsg: syz.8.3223 forgot to set AF_INET. Fix it! [ 318.864051][T10391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.864321][T10390] rust_binder: Read failure Err(EAGAIN) in pid:925 [ 319.117158][ T1527] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 319.154055][T10418] netlink: 'syz.8.3231': attribute type 4 has an invalid length. [ 319.161912][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 319.161998][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.175028][T10418] netlink: 'syz.8.3231': attribute type 4 has an invalid length. [ 319.194402][ T36] audit: type=1400 audit(1758159563.595:7243): avc: denied { ioctl } for pid=10419 comm="syz.0.3232" path="socket:[61718]" dev="sockfs" ino=61718 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 319.278752][ T1527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.289107][ T1527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.299253][ T1527] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 319.308732][ T1527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 319.317014][ T1527] usb 3-1: SerialNumber: syz [ 319.529653][ T1527] usb 3-1: 0:2 : does not exist [ 319.535841][ T1527] usb 3-1: unit 5 not found! [ 319.544317][ T1527] usb 3-1: USB disconnect, device number 61 [ 319.564614][ T9826] udevd[9826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.735016][T10433] overlayfs: failed to clone upperpath [ 319.794787][T10448] netlink: 'syz.0.3242': attribute type 27 has an invalid length. [ 319.803942][T10448] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 320.063791][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 320.100305][ T36] audit: type=1400 audit(1758159564.503:7244): avc: denied { mounton } for pid=10469 comm="syz.2.3250" path="/312/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 320.135175][T10470] netlink: 'syz.2.3250': attribute type 12 has an invalid length. [ 320.145096][T10470] rust_binder: Error while translating object. [ 320.145115][T10471] rust_binder: Error while translating object. [ 320.145134][T10470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 320.151377][T10471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 320.158747][T10470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:932 [ 320.167116][T10471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:932 [ 320.191578][ T36] audit: type=1400 audit(1758159564.592:7245): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 320.232529][T10477] rust_binder: 937: no such ref 0 [ 320.237876][T10478] rust_binder: 937: no such ref 0 [ 320.243516][ T36] audit: type=1326 audit(1758159564.642:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.2.3252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x0 [ 320.452080][T10485] overlayfs: failed to clone upperpath [ 320.486418][ T36] audit: type=1400 audit(1758159564.882:7247): avc: denied { create } for pid=10488 comm="syz.8.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 320.530915][ T1288] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 320.661289][ T1288] usb 3-1: device descriptor read/64, error -71 [ 320.901899][ T1288] usb 3-1: device descriptor read/64, error -71 [ 321.019083][T10508] overlayfs: failed to clone upperpath [ 321.019083][T10507] overlayfs: failed to clone upperpath [ 321.142555][ T1288] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 321.155770][T10528] syz.8.3271(10528): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 321.272894][ T1288] usb 3-1: device descriptor read/64, error -71 [ 321.513563][ T1288] usb 3-1: device descriptor read/64, error -71 [ 321.623881][ T1288] usb usb3-port1: attempt power cycle [ 321.711279][T10540] veth0_virt_wifi: entered allmulticast mode [ 321.718622][T10539] veth0_virt_wifi: left allmulticast mode [ 321.734820][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3278'. [ 321.964718][ T1288] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 321.985754][ T1288] usb 3-1: device descriptor read/8, error -71 [ 322.116163][ T1288] usb 3-1: device descriptor read/8, error -71 [ 322.355714][ T1288] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 322.376862][ T1288] usb 3-1: device descriptor read/8, error -71 [ 322.412784][T10564] fuse: Bad value for 'group_id' [ 322.417811][T10564] fuse: Bad value for 'group_id' [ 322.507209][ T1288] usb 3-1: device descriptor read/8, error -71 [ 322.616482][ T1288] usb usb3-port1: unable to enumerate USB device [ 323.047541][T10591] fuse: Bad value for 'fd' [ 323.057827][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 323.057846][ T36] audit: type=1400 audit(1758159567.455:7249): avc: denied { mounton } for pid=10589 comm="syz.0.3295" path="/proc/243/task" dev="proc" ino=61971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 323.263831][T10599] binfmt_misc: register: failed to install interpreter file ./cgroup [ 323.383038][T10608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.386515][T10608] overlayfs: failed to resolve './file0': -2 [ 323.417406][T10608] rust_binder: Error while translating object. [ 323.417466][T10608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.428477][T10608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:948 [ 324.192846][ T36] audit: type=1400 audit(1758159568.582:7250): avc: denied { sqpoll } for pid=10631 comm="syz.8.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 324.300263][T10651] overlayfs: failed to clone upperpath [ 324.849350][T10671] binder: Bad value for 'max' [ 325.683068][ T36] audit: type=1400 audit(1758159570.058:7251): avc: denied { create } for pid=10705 comm="syz.9.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 325.789571][ T36] audit: type=1400 audit(1758159570.168:7252): avc: denied { associate } for pid=10707 comm="syz.9.3336" name="memory.current" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 325.864510][ T36] audit: type=1400 audit(1758159570.238:7253): avc: denied { create } for pid=10713 comm="syz.9.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 325.914634][ T36] audit: type=1400 audit(1758159570.288:7254): avc: denied { bind } for pid=10713 comm="syz.9.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.346496][T10728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.346891][T10728] IPv6: Can't replace route, no match found [ 326.375988][T10727] IPv6: Can't replace route, no match found [ 326.581564][T10735] overlayfs: missing 'workdir' [ 326.917072][ T332] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 327.078541][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.097490][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.127605][ T332] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 327.136737][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.157765][ T332] usb 3-1: config 0 descriptor?? [ 327.568662][ T332] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 327.638799][ T332] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 327.646821][ T332] hid-steam 0003:28DE:1142.001B: No HID_FEATURE_REPORT submitted - nothing to read [ 327.666624][ T332] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 327.682684][T10766] rust_binder: pid 10766 performed invalid decrement on ref [ 327.800058][ T332] usb 3-1: USB disconnect, device number 66 [ 327.808758][ T332] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 327.936108][T10781] incfs: Options parsing error. -22 [ 327.941539][T10781] incfs: mount failed -22 [ 327.948617][ T36] audit: type=1400 audit(1758159572.323:7255): avc: denied { execute } for pid=10780 comm="syz.9.3361" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.092015][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3365'. [ 328.318887][T10798] overlayfs: failed to clone upperpath [ 328.340156][T10803] overlayfs: failed to clone upperpath [ 328.364444][T10807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3369'. [ 328.371256][T10808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.373559][T10808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 328.374297][T10807] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3369'. [ 328.384289][T10808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:973 [ 328.392623][T10807] netlink: 'syz.2.3369': attribute type 6 has an invalid length. [ 328.416633][T10807] netlink: 'syz.2.3369': attribute type 5 has an invalid length. [ 328.424600][T10807] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3369'. [ 328.448941][T10815] veth0_virt_wifi: entered allmulticast mode [ 328.448982][T10816] rust_binder: Error while translating object. [ 328.455610][T10816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 328.461950][T10816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:978 [ 328.477594][T10815] veth0_virt_wifi: left allmulticast mode [ 328.497426][ T36] audit: type=1400 audit(1758159572.872:7256): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=858 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 328.519214][ T36] audit: type=1400 audit(1758159572.872:7257): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=858 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 328.533298][T10826] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3376'. [ 328.548804][ T36] audit: type=1400 audit(1758159572.872:7258): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=858 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 328.573503][T10828] tipc: New replicast peer: 255.255.255.255 [ 328.581180][T10828] tipc: Enabled bearer , priority 10 [ 328.931905][ T2604] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 329.103397][T10835] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3380'. [ 329.204002][ T2604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.211850][ T2604] usb 3-1: no configurations [ 329.216497][ T2604] usb 3-1: can't read configurations, error -22 [ 329.693709][ T7993] tipc: Node number set to 1193236583 [ 329.726286][T10854] No source specified [ 329.827102][ T36] audit: type=1400 audit(1758159574.199:7259): avc: denied { setattr } for pid=10882 comm="syz.8.3394" name="NETLINK" dev="sockfs" ino=62758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.909650][T10890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.960576][ T36] audit: type=1400 audit(1758159574.328:7260): avc: denied { name_bind } for pid=10887 comm="syz.2.3396" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 329.961122][T10890] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 329.988340][T10890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 329.996559][T10890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:990 [ 330.631149][ T36] audit: type=1326 audit(1758159575.007:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10910 comm="syz.9.3404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372c18eba9 code=0x0 [ 330.790610][ T36] audit: type=1400 audit(1758159575.166:7262): avc: denied { write } for pid=10919 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.810802][ T36] audit: type=1400 audit(1758159575.166:7263): avc: denied { write } for pid=10919 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.885205][T10923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.885996][T10923] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 330.892602][T10923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 330.900681][T10923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1002 [ 331.070786][T10928] rust_binder: 269: no such ref 3 [ 331.085400][T10928] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 331.092608][T10928] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 331.099778][T10928] rust_binder: Write failure EFAULT in pid:269 [ 331.146434][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3412'. [ 331.557900][ T36] audit: type=1400 audit(1758159575.925:7264): avc: denied { accept } for pid=10943 comm="syz.9.3415" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001000000200000730000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 331.704950][T10948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.013941][T10952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 332.048016][ T36] audit: type=1400 audit(1758159576.414:7265): avc: denied { mounton } for pid=10954 comm="syz.0.3419" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 332.080419][T10955] fuse: Bad value for 'fd' [ 332.086460][T10955] fuse: Bad value for 'fd' [ 332.111508][T10957] netlink: 328 bytes leftover after parsing attributes in process `syz.0.3420'. [ 332.285681][T10972] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 332.357129][T10978] binfmt_misc: register: failed to install interpreter file ./file0 [ 332.761612][T11000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=11000 comm=syz.9.3432 [ 332.798019][T11004] /dev/sr0: Can't lookup blockdev [ 332.815302][T11006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=11006 comm=syz.9.3435 [ 333.021087][ T2604] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 333.171410][ T2604] usb 3-1: Using ep0 maxpacket: 16 [ 333.177724][ T2604] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 333.186663][ T2604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.197026][ T2604] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.207401][ T2604] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.216522][ T2604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.224567][ T2604] usb 3-1: Product: syz [ 333.228750][ T2604] usb 3-1: Manufacturer: syz [ 333.233396][ T2604] usb 3-1: SerialNumber: syz [ 333.437346][T11012] veth0_virt_wifi: entered allmulticast mode [ 333.443898][T11011] veth0_virt_wifi: left allmulticast mode [ 333.644487][ T2604] usb 3-1: 0:2 : does not exist [ 334.450946][ T332] usb 3-1: USB disconnect, device number 69 [ 334.586324][T11044] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3450'. [ 334.610747][T11046] netlink: 'syz.9.3451': attribute type 12 has an invalid length. [ 334.965894][T11057] rust_binder: 1026: no such ref 3 [ 334.972111][T11057] rust_binder: Write failure EINVAL in pid:1026 [ 335.098938][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 335.098958][ T36] audit: type=1400 audit(1758159579.467:7268): avc: denied { mount } for pid=11067 comm="syz.2.3458" name="/" dev="pstore" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 335.148520][ T36] audit: type=1400 audit(1758159579.517:7269): avc: denied { read } for pid=11071 comm="syz.2.3460" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 335.171771][ T36] audit: type=1400 audit(1758159579.517:7270): avc: denied { open } for pid=11071 comm="syz.2.3460" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 335.217859][ T36] audit: type=1400 audit(1758159579.587:7271): avc: denied { watch watch_reads } for pid=11071 comm="syz.2.3460" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.423842][T11085] netlink: 'syz.8.3463': attribute type 16 has an invalid length. [ 335.441024][T11085] netlink: 'syz.8.3463': attribute type 3 has an invalid length. [ 335.449248][T11085] netlink: 'syz.8.3463': attribute type 1 has an invalid length. [ 335.457195][T11085] netlink: 16454 bytes leftover after parsing attributes in process `syz.8.3463'. [ 335.639647][ T330] bridge_slave_1: left allmulticast mode [ 335.655592][ T330] bridge_slave_1: left promiscuous mode [ 335.663557][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.679177][ T330] bridge_slave_0: left allmulticast mode [ 335.691258][ T330] bridge_slave_0: left promiscuous mode [ 335.702448][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.847113][ T1527] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 335.883977][ T330] veth1_macvtap: left promiscuous mode [ 335.889673][ T330] veth0_vlan: left promiscuous mode [ 335.963047][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.970199][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.977787][T11112] bridge_slave_0: entered allmulticast mode [ 335.984797][T11112] bridge_slave_0: entered promiscuous mode [ 335.991819][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.999143][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.011184][T11112] bridge_slave_1: entered allmulticast mode [ 336.017751][ T1527] usb 3-1: unable to get BOS descriptor or descriptor too short [ 336.026386][T11112] bridge_slave_1: entered promiscuous mode [ 336.032985][ T1527] usb 3-1: not running at top speed; connect to a high speed hub [ 336.043808][ T1527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.061861][ T1527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.082265][ T1527] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.113113][ T1527] usb 3-1: config 1 interface 0 has no altsetting 0 [ 336.131609][ T1527] usb 3-1: string descriptor 0 read error: -22 [ 336.138081][ T1527] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.147541][ T1527] usb 3-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 336.177044][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.184171][T11112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.191530][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.198621][T11112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.222437][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.230158][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.239977][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.247046][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.256257][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.263341][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.290253][T11112] veth0_vlan: entered promiscuous mode [ 336.301661][T11112] veth1_macvtap: entered promiscuous mode [ 336.321421][ T36] audit: type=1400 audit(1758159580.684:7272): avc: denied { mounton } for pid=11112 comm="syz-executor" path="/root/syzkaller.MkTKFC/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 336.347309][ T36] audit: type=1400 audit(1758159580.684:7273): avc: denied { mounton } for pid=11112 comm="syz-executor" path="/root/syzkaller.MkTKFC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 336.374796][ T36] audit: type=1400 audit(1758159580.684:7274): avc: denied { mounton } for pid=11112 comm="syz-executor" path="/root/syzkaller.MkTKFC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 336.403224][ T36] audit: type=1400 audit(1758159580.704:7275): avc: denied { mounton } for pid=11112 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 336.448702][ T2604] usb 3-1: USB disconnect, device number 70 [ 336.462421][ T36] audit: type=1400 audit(1758159580.824:7276): avc: denied { ioctl } for pid=11132 comm="syz.4.3480" path="socket:[63376]" dev="sockfs" ino=63376 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 336.488167][ T36] audit: type=1400 audit(1758159580.824:7277): avc: denied { create } for pid=11132 comm="syz.4.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 336.581289][T11138] rust_binder: Got transaction with invalid offset. [ 336.581325][T11138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.587970][T11138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 336.658216][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3483'. [ 336.676342][T11143] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3483'. [ 336.685363][T11143] tipc: Invalid UDP bearer configuration [ 336.685401][T11143] tipc: Enabling of bearer rejected, failed to enable media [ 336.783286][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.783319][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.790016][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.796615][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.803167][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.809823][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.816317][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.823122][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.829874][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.836510][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.837235][T11150] rust_binder: 15: no such ref 2 [ 336.844583][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.854585][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.861177][T11150] rust_binder: Write failure EINVAL in pid:15 [ 336.861314][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.873793][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.880588][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.887235][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.893733][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.900340][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.906788][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.913341][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.919881][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.926382][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.932970][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.939487][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.945984][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.952458][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.959001][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.966566][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.973157][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.979881][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.986612][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.993183][T11148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.026889][T11156] netlink: 'syz.4.3487': attribute type 16 has an invalid length. [ 337.041920][T11156] netlink: 'syz.4.3487': attribute type 3 has an invalid length. [ 337.049842][T11156] netlink: 60226 bytes leftover after parsing attributes in process `syz.4.3487'. [ 337.157077][T11160] rust_binder: Write failure EFAULT in pid:23 [ 337.250036][ T7993] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 337.411598][ T7993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.421793][ T7993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.431438][ T7993] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.440816][ T7993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.448866][ T7993] usb 3-1: SerialNumber: syz [ 337.570690][ T1527] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 337.658090][ T7993] usb 3-1: 0:2 : does not exist [ 337.663172][ T7993] usb 3-1: unit 5: unexpected type 0x0a [ 337.671423][ T7993] usb 3-1: USB disconnect, device number 71 [ 337.722143][ T1527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.733350][ T1527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.743239][ T1527] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 337.752384][ T1527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.761331][ T1527] usb 5-1: config 0 descriptor?? [ 338.353708][T11190] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 338.362830][T11190] overlayfs: missing 'lowerdir' [ 338.369724][ T1527] usbhid 5-1:0.0: can't add hid device: -71 [ 338.377260][ T1527] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 338.389252][ T1527] usb 5-1: USB disconnect, device number 5 [ 338.682739][T11220] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.689762][T11220] overlayfs: failed to set xattr on upper [ 338.695616][T11220] overlayfs: ...falling back to redirect_dir=nofollow. [ 338.702477][T11220] overlayfs: ...falling back to uuid=null. [ 338.720744][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3511'. [ 338.745526][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3512'. [ 338.849334][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3519'. [ 338.885098][T11261] rust_binder: Error while translating object. [ 338.885098][T11260] rust_binder: Error while translating object. [ 338.885129][T11261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 338.891380][T11260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 338.897620][T11261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 338.914633][T11260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 339.010146][T11263] 9pnet_fd: Insufficient options for proto=fd [ 339.395983][T11273] overlayfs: failed to clone upperpath [ 339.403647][T11273] overlayfs: failed to clone upperpath [ 339.442727][T11276] loop4: detected capacity change from 0 to 8388608 [ 339.497352][T11283] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 339.571212][T11292] rust_binder: 52: no such ref 1 [ 339.576285][T11292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 339.941880][T11296] fuse: Invalid rootmode [ 340.226233][T11304] fuse: Bad value for 'fd' [ 340.367851][T11308] bridge0: port 3(macsec0) entered blocking state [ 340.374450][T11308] bridge0: port 3(macsec0) entered disabled state [ 340.381021][T11308] macsec0: entered allmulticast mode [ 340.386464][T11308] veth1_macvtap: entered allmulticast mode [ 340.392940][T11308] macsec0: entered promiscuous mode [ 340.398415][T11308] bridge0: port 3(macsec0) entered blocking state [ 340.404946][T11308] bridge0: port 3(macsec0) entered forwarding state [ 340.452828][T11320] netlink: 'syz.8.3541': attribute type 4 has an invalid length. [ 340.460801][T11320] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3541'. [ 341.036012][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 341.036032][ T36] audit: type=1400 audit(1758159585.385:7282): avc: denied { setattr } for pid=11336 comm="syz.8.3548" name="PACKET" dev="sockfs" ino=65957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.075976][ T36] audit: type=1400 audit(1758159585.425:7283): avc: denied { shutdown } for pid=11344 comm="syz.8.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.076470][T11345] overlayfs: failed to clone upperpath [ 341.115490][T11347] tipc: Enabling of bearer rejected, failed to enable media [ 341.185962][T11361] netlink: 'syz.9.3557': attribute type 4 has an invalid length. [ 341.195449][T11361] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3557'. [ 341.266280][ T36] audit: type=1400 audit(1758159585.615:7284): avc: denied { mounton } for pid=11372 comm="syz.2.3561" path="/syzcgroup/unified/syz2" dev="pstore" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 341.294118][ T36] audit: type=1400 audit(1758159585.615:7285): avc: denied { mount } for pid=11372 comm="syz.2.3561" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 341.486571][T11395] tipc: Enabling of bearer rejected, failed to enable media [ 341.682688][T11404] overlayfs: failed to clone upperpath [ 341.690325][T11404] 9pnet_fd: Insufficient options for proto=fd [ 341.728873][ T332] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 341.753307][T11422] 9pnet_fd: p9_fd_create_tcp (11422): problem connecting socket to 127.0.0.1 [ 341.754910][T11421] 9pnet_fd: p9_fd_create_tcp (11421): problem connecting socket to 127.0.0.1 [ 341.879130][ T332] usb 3-1: Using ep0 maxpacket: 8 [ 341.886633][ T332] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 341.895779][ T332] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 341.904020][ T332] usb 3-1: Product: syz [ 341.908211][ T332] usb 3-1: Manufacturer: syz [ 341.912914][ T332] usb 3-1: SerialNumber: syz [ 341.918157][ T332] usb 3-1: config 0 descriptor?? [ 342.068628][ T36] audit: type=1400 audit(1758159586.413:7286): avc: denied { getopt } for pid=11437 comm="syz.9.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.124306][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3584'. [ 342.134591][T11397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.183701][T11456] overlay: Unknown parameter 'appraise_type' [ 342.506022][T11494] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 342.520412][T11494] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 342.535005][T11494] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 343.936145][T11555] overlayfs: failed to clone upperpath [ 343.942522][ T36] audit: type=1400 audit(1758159588.280:7287): avc: denied { create } for pid=11554 comm="syz.9.3622" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.162878][T11573] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3628'. [ 344.308561][T11592] overlayfs: failed to clone upperpath [ 344.345419][T11596] overlayfs: failed to resolve './file1': -2 [ 344.532115][ T332] usb 3-1: USB disconnect, device number 72 [ 344.834641][ T332] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 344.985977][ T332] usb 3-1: No LPM exit latency info found, disabling LPM. [ 344.993927][ T332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 345.004784][ T332] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.019667][ T332] usb 3-1: string descriptor 0 read error: -22 [ 345.025931][ T332] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 345.035005][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.044022][T11608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.258641][T11608] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 345.403561][T11636] overlayfs: failed to clone upperpath [ 345.454018][ T36] audit: type=1400 audit(1758159589.797:7288): avc: denied { mounton } for pid=11637 comm="syz.4.3652" path="/file0" dev="ramfs" ino=66270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 345.518999][ T332] usbhid 3-1:1.0: can't add hid device: -71 [ 345.525036][ T332] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 345.534475][ T332] usb 3-1: USB disconnect, device number 73 [ 345.724485][T11645] overlayfs: failed to clone upperpath [ 345.804184][T11664] overlayfs: failed to clone upperpath [ 346.041027][T11681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.091962][T11687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.099690][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 346.177971][T11689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.180104][T11689] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 346.186856][T11689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 346.195042][T11689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1081 [ 346.241577][ T36] audit: type=1400 audit(1758159590.585:7289): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 346.427624][T11708] fuse: Bad value for 'user_id' [ 346.432563][T11708] fuse: Bad value for 'user_id' [ 346.487602][ T7993] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 346.638951][ T7993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.649932][ T7993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.659718][ T7993] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 346.668851][ T7993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.677522][ T7993] usb 3-1: config 0 descriptor?? [ 347.554840][T11737] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3689'. [ 347.566298][T11738] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3689'. [ 347.669675][ T7993] usbhid 3-1:0.0: can't add hid device: -71 [ 347.676772][ T7993] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 347.685999][ T7993] usb 3-1: USB disconnect, device number 74 [ 347.799119][ T36] audit: type=1400 audit(1758159592.133:7290): avc: denied { accept } for pid=11760 comm="syz.9.3697" path="socket:[65463]" dev="sockfs" ino=65463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.800077][T11761] overlayfs: failed to clone upperpath [ 347.832039][T11761] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 347.842227][ T36] audit: type=1400 audit(1758159592.183:7291): avc: denied { relabelto } for pid=11760 comm="syz.9.3697" name="bus" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 347.888571][ T36] audit: type=1400 audit(1758159592.183:7292): avc: denied { associate } for pid=11760 comm="syz.9.3697" name="bus" dev="tmpfs" ino=2429 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 347.916049][ T36] audit: type=1400 audit(1758159592.193:7293): avc: denied { rmdir } for pid=7516 comm="syz-executor" name="bus" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 347.961759][T11769] netlink: 'syz.9.3701': attribute type 3 has an invalid length. [ 347.969659][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3701'. [ 347.979523][T11769] netlink: 'syz.9.3701': attribute type 4 has an invalid length. [ 347.989947][T11769] netlink: 'syz.9.3701': attribute type 4 has an invalid length. [ 348.093711][T11788] netlink: 'syz.9.3708': attribute type 1 has an invalid length. [ 348.101897][T11788] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3708'. [ 348.142829][ T36] audit: type=1400 audit(1758159592.482:7294): avc: denied { read } for pid=11795 comm="syz.8.3712" name="file0" dev="tmpfs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.204629][T11809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.581257][ T2604] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 348.648202][T11829] overlayfs: failed to resolve './file0': -2 [ 348.741510][ T2604] usb 3-1: Using ep0 maxpacket: 8 [ 348.747718][ T2604] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 348.758832][ T2604] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 348.772062][ T2604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.778769][ T2604] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 348.787888][ T2604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.796614][ T2604] usb 3-1: config 0 descriptor?? [ 349.041529][T11837] bpf: Bad value for 'uid' [ 349.065501][T11844] fuse: Bad value for 'rootmode' [ 349.074785][ T36] audit: type=1400 audit(1758159593.410:7295): avc: denied { create } for pid=11845 comm="syz.8.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 349.204735][ T2604] gt683r_led 0003:1770:FF00.001D: unknown main item tag 0x7 [ 349.213125][ T2604] gt683r_led 0003:1770:FF00.001D: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 349.430626][T11895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3745'. [ 349.451495][T11897] overlayfs: failed to clone upperpath [ 349.612477][ T332] usb 3-1: USB disconnect, device number 75 [ 349.619691][ T368] gt683r_led 0003:1770:FF00.001D: failed to send set report request: -19 [ 349.983205][T11923] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3756'. [ 349.993635][ T332] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 350.142927][T11946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3762'. [ 350.145072][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.163385][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.173358][ T332] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 350.182705][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.192742][ T332] usb 3-1: config 0 descriptor?? [ 350.400257][T11905] input: syz0 as /devices/virtual/input/input23 [ 350.729602][T11970] kthread_run failed with err -4 [ 351.010775][ T332] hid-led 0003:27B8:01ED.001E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 351.024570][ T332] hid-led 0003:27B8:01ED.001E: ThingM blink(1) initialized [ 351.214020][ T2604] usb 3-1: USB disconnect, device number 76 [ 351.729080][T12033] binder: Unknown parameter '01777777777777777777777' [ 351.747091][T12035] overlayfs: failed to resolve './file1': -2 [ 351.765469][T12037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.765870][T12037] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 351.772575][T12037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 351.780656][T12037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1108 [ 352.001362][ T36] audit: type=1400 audit(1758159596.336:7296): avc: denied { mounton } for pid=12054 comm="syz.8.3802" path="/file0" dev="ramfs" ino=66904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 352.037004][ T2604] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 352.158360][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3808'. [ 352.167426][ T2604] usb 3-1: device descriptor read/64, error -71 [ 352.407582][ T2604] usb 3-1: device descriptor read/64, error -71 [ 352.647983][ T2604] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 352.774824][T12103] overlayfs: failed to clone upperpath [ 352.780877][T12104] overlayfs: failed to clone upperpath [ 352.789902][ T2604] usb 3-1: device descriptor read/64, error -71 [ 353.038621][ T2604] usb 3-1: device descriptor read/64, error -71 [ 353.148893][ T2604] usb usb3-port1: attempt power cycle [ 353.223810][ T36] audit: type=1400 audit(1758159597.554:7297): avc: denied { accept } for pid=12119 comm="syz.4.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.262021][ T36] audit: type=1400 audit(1758159597.594:7298): avc: denied { accept } for pid=12124 comm="syz.4.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.378983][T12148] overlayfs: failed to clone upperpath [ 353.407189][T12152] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3836'. [ 353.489403][ T2604] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 353.510366][ T2604] usb 3-1: device descriptor read/8, error -71 [ 353.640935][ T2604] usb 3-1: device descriptor read/8, error -71 [ 353.873764][T12188] fuse: Bad value for 'fd' [ 353.881699][ T2604] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 353.911026][ T2604] usb 3-1: device descriptor read/8, error -71 [ 354.041205][ T2604] usb 3-1: device descriptor read/8, error -71 [ 354.150462][ T2604] usb usb3-port1: unable to enumerate USB device [ 354.345889][ T36] audit: type=1400 audit(1758159598.672:7299): avc: denied { accept } for pid=12206 comm="syz.9.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.365559][ T36] audit: type=1400 audit(1758159598.672:7300): avc: denied { listen } for pid=12206 comm="syz.9.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.437096][T12216] fuse: Bad value for 'rootmode' [ 354.467711][T12219] netlink: 'syz.9.3859': attribute type 1 has an invalid length. [ 354.475521][T12219] netlink: 'syz.9.3859': attribute type 2 has an invalid length. [ 354.494785][ T36] audit: type=1400 audit(1758159598.822:7301): avc: denied { write } for pid=12221 comm="syz.9.3860" name="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 354.536825][T12224] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3861'. [ 354.583717][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3864'. [ 354.806061][T12291] overlayfs: failed to clone lowerpath [ 354.921793][T12308] fuseblk: Bad value for 'rootmode' [ 354.944648][T12313] 9pnet_virtio: no channels available for device [ 355.043413][ T36] audit: type=1400 audit(1758159599.371:7302): avc: denied { create } for pid=12319 comm="syz.9.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 355.080523][ T36] audit: type=1400 audit(1758159599.401:7303): avc: denied { add_name } for pid=12323 comm="syz.9.3895" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.103665][ T36] audit: type=1400 audit(1758159599.401:7304): avc: denied { create } for pid=12323 comm="syz.9.3895" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 355.128021][ T36] audit: type=1400 audit(1758159599.401:7305): avc: denied { append } for pid=12321 comm="syz.2.3894" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.658928][T12362] 9pnet_fd: Insufficient options for proto=fd [ 355.666113][T12362] 9pnet_fd: Insufficient options for proto=fd [ 355.931626][T12392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.946096][T12392] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 355.946138][T12392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 355.963422][T12392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1127 [ 356.217032][T12394] 9pnet_fd: Insufficient options for proto=fd [ 374.234520][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3934'. [ 384.649748][T12452] tipc: Started in network mode [ 384.664018][T12452] tipc: Node identity 5f000001, cluster identity 4711 [ 384.675478][T12452] tipc: Enabling of bearer rejected, failed to enable media [ 384.678827][T12459] overlayfs: failed to clone upperpath [ 384.696361][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 384.715248][T12452] tipc: Enabling of bearer rejected, failed to enable media [ 384.723677][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 384.796448][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 384.796477][ T36] audit: type=1400 audit(1758159629.084:7310): avc: denied { create } for pid=12487 comm="syz.9.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 385.364298][ T36] audit: type=1326 audit(1758159629.653:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.388224][ T36] audit: type=1326 audit(1758159629.653:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.412108][ T36] audit: type=1326 audit(1758159629.653:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.436394][ T36] audit: type=1326 audit(1758159629.653:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.460316][ T36] audit: type=1326 audit(1758159629.653:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.485197][ T36] audit: type=1326 audit(1758159629.653:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.515243][ T36] audit: type=1326 audit(1758159629.653:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.559973][ T36] audit: type=1326 audit(1758159629.653:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.584145][ T36] audit: type=1326 audit(1758159629.653:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.2.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x7ffc0000 [ 385.953364][T12560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12560 comm=syz.9.3979 [ 385.953388][T12561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12561 comm=syz.9.3979 [ 386.296250][T12598] tipc: Enabling of bearer rejected, failed to enable media [ 386.499476][ T368] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 386.649468][ T368] usb 3-1: Using ep0 maxpacket: 32 [ 386.655740][ T368] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 386.664209][ T368] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 386.672886][ T368] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 386.681914][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.691608][ T368] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 386.701462][ T368] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 386.714669][ T368] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 386.720714][T12602] cgroup: No subsys list or none specified [ 386.724075][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.739355][ T368] usb 3-1: config 0 descriptor?? [ 386.819676][T12604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3990'. [ 386.829710][T12604] fuse: Unknown parameter 'func' [ 386.955311][ T368] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 386.968110][ T368] usb 3-1: USB disconnect, device number 81 [ 386.975982][ T368] usblp0: removed [ 387.089660][T12638] incfs: Options parsing error. -22 [ 387.094946][T12638] incfs: mount failed -22 [ 387.269499][ T368] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 387.401464][T12656] tipc: Enabling of bearer rejected, failed to enable media [ 387.419890][ T368] usb 3-1: Using ep0 maxpacket: 32 [ 387.430489][ T368] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 387.445604][ T368] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 387.446894][T12661] x_tables: duplicate underflow at hook 1 [ 387.460531][ T368] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 387.476235][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.492205][ T368] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 387.502154][ T368] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 387.515396][ T368] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 387.525134][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.535649][ T368] usb 3-1: config 0 descriptor?? [ 387.544017][T12666] fuseblk: Unknown parameter '}d' [ 387.607995][T12675] Invalid ELF header magic: != ELF [ 387.755130][ T368] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 387.943398][ T332] usb 3-1: USB disconnect, device number 82 [ 387.954280][ T332] usblp0: removed [ 388.742748][T12734] fuseblk: Unknown parameter 'fA' [ 388.767250][T12738] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4037'. [ 388.789205][T12743] overlayfs: failed to resolve './bus/file0': -2 [ 388.818531][T12745] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4040'. [ 388.871499][T12752] 9pnet_fd: Insufficient options for proto=fd [ 388.965889][T12770] netlink: 'syz.8.4048': attribute type 4 has an invalid length. [ 388.973782][T12770] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4048'. [ 388.984928][T12770] netlink: 'syz.8.4048': attribute type 4 has an invalid length. [ 388.992845][T12770] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4048'. [ 389.583283][T12822] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4067'. [ 389.603767][T12822] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4067'. [ 389.622678][T12822] 0ªö»ôM: renamed from gretap0 (while UP) [ 389.637749][T12822] 0ªö»ôM: entered allmulticast mode [ 389.650227][T12822] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 389.990751][T12829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.999910][T12829] rust_binder: Write failure EINVAL in pid:1154 [ 390.081136][T12842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4074'. [ 390.096702][T12842] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4074'. [ 390.105902][T12842] netlink: 'syz.4.4074': attribute type 5 has an invalid length. [ 390.113770][T12842] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4074'. [ 390.608912][T12874] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 390.620663][T12874] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 390.702738][T12880] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4088'. [ 390.713899][T12880] netlink: 'syz.9.4088': attribute type 16 has an invalid length. [ 390.722004][T12880] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.4088'. [ 390.805764][T12893] overlayfs: failed to clone upperpath [ 390.838589][T12898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.838911][T12898] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 390.845479][T12898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 390.853630][T12898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1157 [ 390.860557][T12902] 9pnet_fd: Insufficient options for proto=fd [ 390.935395][ T36] kauditd_printk_skb: 677 callbacks suppressed [ 390.935416][ T36] audit: type=1400 audit(1758159635.221:7997): avc: denied { setattr } for pid=12911 comm="syz.4.4101" name="/" dev="configfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 391.066623][T12927] overlayfs: failed to resolve './file1': -2 [ 391.160816][T12931] 9pnet_fd: Insufficient options for proto=fd [ 391.160816][T12932] 9pnet_fd: Insufficient options for proto=fd [ 391.195982][ T36] audit: type=1400 audit(1758159635.481:7998): avc: denied { read } for pid=12935 comm="syz.9.4108" path="socket:[69314]" dev="sockfs" ino=69314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 391.197636][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4108'. [ 391.362567][T12943] overlayfs: failed to clone upperpath [ 391.520054][T12959] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 391.604538][T12964] /dev/loop0: Can't lookup blockdev [ 391.687940][ T36] audit: type=1400 audit(1758159635.971:7999): avc: denied { execute } for pid=12977 comm="syz.4.4125" path="/memory.events.local" dev="ramfs" ino=70371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 391.976240][T13001] netlink: 'syz.2.4131': attribute type 46 has an invalid length. [ 391.984540][T13001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.985019][T13001] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 391.991668][T13001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 391.999723][T13001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1169 [ 392.009901][T13003] netlink: 'syz.2.4131': attribute type 46 has an invalid length. [ 392.039803][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4132'. [ 392.141571][T13008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 392.234745][T13016] binder: Bad value for 'max' [ 392.457418][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.469258][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.470858][T13044] overlayfs: failed to clone upperpath [ 392.478815][T13032] bridge_slave_0: entered allmulticast mode [ 392.489416][T13032] bridge_slave_0: entered promiscuous mode [ 392.496547][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.504389][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.511587][T13032] bridge_slave_1: entered allmulticast mode [ 392.518063][T13032] bridge_slave_1: entered promiscuous mode [ 392.590919][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.598016][T13032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.605336][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.612407][T13032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.641498][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.649005][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.659495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.666590][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.676005][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.683094][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.711110][T13032] veth0_vlan: entered promiscuous mode [ 392.723139][T13032] veth1_macvtap: entered promiscuous mode [ 392.965268][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.972777][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.981743][T13072] bridge_slave_0: entered allmulticast mode [ 392.988226][T13072] bridge_slave_0: entered promiscuous mode [ 392.995035][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.002134][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.009354][T13072] bridge_slave_1: entered allmulticast mode [ 393.016784][T13072] bridge_slave_1: entered promiscuous mode [ 393.075647][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.082799][T13072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.090103][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.097131][T13072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.121959][ T330] dummy0: left allmulticast mode [ 393.127740][ T330] dummy0: left promiscuous mode [ 393.130367][T13097] rust_binder: Write failure EFAULT in pid:1188 [ 393.133270][ T330] bridge0: port 3(dummy0) entered disabled state [ 393.146787][ T330] bridge_slave_1: left allmulticast mode [ 393.152880][ T330] bridge_slave_1: left promiscuous mode [ 393.158708][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.168864][ T330] bridge_slave_0: left allmulticast mode [ 393.175733][ T330] bridge_slave_0: left promiscuous mode [ 393.181667][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.226849][T13107] tmpfs: Unknown parameter 'siZe' [ 393.239660][ T368] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 393.273299][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.281031][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.291582][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.298648][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.309013][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.316216][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.354596][ T36] audit: type=1400 audit(1758159637.641:8000): avc: denied { append } for pid=13123 comm="syz.2.4163" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 393.399476][ T368] usb 9-1: Using ep0 maxpacket: 8 [ 393.402676][ T330] tipc: Left network mode [ 393.405808][ T368] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 393.420793][ T368] usb 9-1: config 0 has no interface number 0 [ 393.420878][ T330] veth1_macvtap: left promiscuous mode [ 393.434396][ T330] veth0_vlan: left promiscuous mode [ 393.450412][ T368] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 393.459609][ T368] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.467659][ T368] usb 9-1: Product: syz [ 393.472188][ T368] usb 9-1: Manufacturer: syz [ 393.476822][ T368] usb 9-1: SerialNumber: syz [ 393.484942][ T368] usb 9-1: config 0 descriptor?? [ 393.520877][T13072] veth0_vlan: entered promiscuous mode [ 393.542968][T13072] veth1_macvtap: entered promiscuous mode [ 393.657072][ T36] audit: type=1400 audit(1758159637.941:8001): avc: denied { setattr } for pid=13145 comm="syz.4.4171" name="PPTP" dev="sockfs" ino=71102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.693729][ T368] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 393.700863][ T368] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 393.715620][ T368] usb 9-1: USB disconnect, device number 47 [ 393.721101][T13148] overlay: filesystem on ./bus is read-only [ 393.769491][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 393.919544][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 393.925835][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.934547][ T10] usb 3-1: config 0 has no interface number 0 [ 393.938590][ T36] audit: type=1400 audit(1758159638.231:8002): avc: denied { accept } for pid=13159 comm="syz.4.4177" laddr=127.0.0.1 lport=20001 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 393.941112][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 393.976704][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.985865][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.994134][ T10] usb 3-1: Product: syz [ 393.998426][ T10] usb 3-1: Manufacturer: syz [ 394.003095][ T10] usb 3-1: SerialNumber: syz [ 394.008685][ T10] usb 3-1: config 0 descriptor?? [ 394.018263][ T10] smsc75xx v1.0.0 [ 394.109610][ T1288] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 394.224257][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 394.235849][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 394.236318][T13182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.245752][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 394.249371][T13182] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 394.252629][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 394.262871][T13182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 394.272153][ T1288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.279916][T13182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1213 [ 394.290640][ T10] usb 3-1: USB disconnect, device number 83 [ 394.314627][ T1288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.329655][ T1288] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.344318][ T1288] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.354741][ T1288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.357610][ T36] audit: type=1400 audit(1758159638.641:8003): avc: denied { setopt } for pid=13183 comm="syz.8.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.383854][ T1288] usb 10-1: config 0 descriptor?? [ 394.410631][T13191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13191 comm=syz.2.4187 [ 394.423393][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4187'. [ 394.490192][T13195] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 394.527881][T13199] rust_binder: Error while translating object. [ 394.527934][T13199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 394.534220][T13199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29 [ 394.581881][T13203] vcan0: entered allmulticast mode [ 394.611747][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'. [ 394.616832][ T1288] usbhid 10-1:0.0: can't add hid device: -71 [ 394.643271][ T1288] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 394.644508][T13221] exFAT-fs (rnullb0): invalid boot record signature [ 394.655888][ T1288] usb 10-1: USB disconnect, device number 21 [ 394.666199][T13218] tipc: New replicast peer: 255.255.255.255 [ 394.670152][T13221] exFAT-fs (rnullb0): failed to read boot sector [ 394.675129][T13218] tipc: Enabled bearer , priority 10 [ 394.679167][T13221] exFAT-fs (rnullb0): failed to recognize exfat type [ 394.702528][T13227] overlayfs: failed to clone upperpath [ 394.708670][T13227] overlayfs: failed to clone upperpath [ 394.715042][T13229] rust_binder: Error while translating object. [ 394.715077][T13229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 394.718881][ T36] audit: type=1400 audit(1758159639.001:8004): avc: denied { watch } for pid=13228 comm="syz.9.4198" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 394.721662][T13229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:33 [ 394.731242][T13230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.755786][T13227] overlayfs: failed to clone upperpath [ 394.775790][T13230] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 394.775818][T13230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 394.784078][T13230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:12 [ 394.900316][T13239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 395.318695][T13243] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 395.455938][T13254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1226 [ 395.456772][ T36] audit: type=1400 audit(1758159639.741:8005): avc: denied { shutdown } for pid=13245 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.486889][ T36] audit: type=1400 audit(1758159639.741:8006): avc: denied { read } for pid=13245 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.510480][T13260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 395.555437][T13253] rust_binder: Failed copying into alloc: EFAULT [ 395.555468][T13253] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 395.562026][T13253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 395.570517][T13253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:39 [ 395.682311][T13287] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 395.714029][T13287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 395.730417][T13288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=13288 comm=syz.8.4217 [ 395.789495][ T332] tipc: Node number set to 1593835521 [ 395.817801][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4220'. [ 395.871190][T13301] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 395.968756][T13308] fuseblk: Unknown parameter '' [ 396.059466][ T332] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 396.199653][ T332] usb 9-1: device descriptor read/64, error -71 [ 396.221076][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 396.221097][ T36] audit: type=1400 audit(1758159640.511:8020): avc: denied { mounton } for pid=13314 comm="syz.2.4226" path="/410/file0" dev="tmpfs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 396.459462][ T332] usb 9-1: device descriptor read/64, error -71 [ 396.639662][ T1527] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 396.699460][ T332] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 396.799457][ T1527] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 396.807699][ T1527] usb 3-1: config 0 has no interface number 0 [ 396.829518][ T332] usb 9-1: device descriptor read/64, error -71 [ 396.836582][ T1527] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b [ 396.845913][ T1527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.854342][ T1527] usb 3-1: Product: syz [ 396.858519][ T1527] usb 3-1: Manufacturer: syz [ 396.863321][ T1527] usb 3-1: SerialNumber: syz [ 396.869023][ T1527] usb 3-1: config 0 descriptor?? [ 397.076857][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.079482][ T1288] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 397.085593][ T332] usb 9-1: device descriptor read/64, error -71 [ 397.100134][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.182797][ T1527] rtl8150 3-1:0.51: couldn't find required endpoints [ 397.189621][ T1527] rtl8150 3-1:0.51: probe with driver rtl8150 failed with error -5 [ 397.199709][ T332] usb usb9-port1: attempt power cycle [ 397.206321][ T1527] usb 3-1: USB disconnect, device number 84 [ 397.259463][ T1288] usb 10-1: Using ep0 maxpacket: 32 [ 397.270395][ T1288] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.281508][ T1288] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.300219][ T1288] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 397.309472][ T1288] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 397.317922][ T1288] usb 10-1: Product: syz [ 397.322242][ T1288] usb 10-1: Manufacturer: syz [ 397.331252][ T1288] hub 10-1:4.0: USB hub found [ 397.536747][ T1288] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 397.550558][ T332] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 397.579181][ T332] usb 9-1: device descriptor read/8, error -71 [ 397.698398][T13322] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4229'. [ 397.708096][T13322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.710502][ T332] usb 9-1: device descriptor read/8, error -71 [ 397.759589][T13323] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 397.759620][T13323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 397.767759][T13323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1235 [ 397.851032][ T36] audit: type=1400 audit(1758159642.141:8021): avc: denied { mounton } for pid=13319 comm="syz.9.4228" path="/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 397.883404][T13325] fuseblk: Unknown parameter 'fsmagic' [ 397.891687][T13320] rust_binder: 34: no such ref 1 [ 397.959491][ T332] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 397.980523][ T332] usb 9-1: device descriptor read/8, error -71 [ 398.009613][ T1527] usb 10-1: USB disconnect, device number 22 [ 398.110474][ T332] usb 9-1: device descriptor read/8, error -71 [ 398.229803][ T332] usb usb9-port1: unable to enumerate USB device [ 398.421610][T13327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 398.421803][T13327] rust_binder: 38: no such ref 128 [ 398.436367][T13327] rust_binder: 13327 RLIMIT_NICE not set [ 398.442464][ T1288] rust_binder: 13326: removing orphan mapping 0:1048 [ 398.564909][T13333] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 398.587888][T13335] overlayfs: cannot append lower layer [ 398.660933][ T1527] rust_binder: 13334: removing orphan mapping 0:4208 [ 398.876714][T13348] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4239'. [ 398.886687][T13348] netlink: 'syz.8.4239': attribute type 11 has an invalid length. [ 399.143462][T13351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.207966][T13359] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4243'. [ 399.219478][ T1527] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 399.276645][T13367] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 399.298684][T13369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63314 sclass=netlink_route_socket pid=13369 comm=syz.4.4248 [ 399.389532][ T1288] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 399.390691][ T1527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 399.406966][ T1527] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 399.416821][ T1527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 399.426519][ T1527] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 399.437632][ T1527] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 399.446749][ T1527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.454785][ T1527] usb 9-1: Product: syz [ 399.458972][ T1527] usb 9-1: Manufacturer: syz [ 399.463605][ T1527] usb 9-1: SerialNumber: syz [ 399.468904][ T1527] usb 9-1: config 0 descriptor?? [ 399.474732][ T1527] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 399.540624][ T1288] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 399.551604][ T1288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.562661][ T1288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.572493][ T1288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 399.586257][ T1288] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 399.595529][ T1288] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 399.603822][ T1288] usb 3-1: Manufacturer: syz [ 399.609197][ T1288] usb 3-1: config 0 descriptor?? [ 399.675100][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.683792][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.693571][ T1527] scsi host1: usb-storage 9-1:0.0 [ 399.701248][ T1527] usb 9-1: USB disconnect, device number 52 [ 400.015300][ T36] audit: type=1400 audit(1758159644.301:8022): avc: denied { setattr } for pid=13354 comm="syz.2.4241" name="RAWv6" dev="sockfs" ino=71650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 400.047132][ T1288] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 400.054727][ T1288] appleir 0003:05AC:8243.001F: No inputs registered, leaving [ 400.063800][ T1288] appleir 0003:05AC:8243.001F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 400.183961][T13382] 9pnet: p9_errstr2errno: server reported unknown error € [ 400.290716][T13355] 9pnet_virtio: no channels available for device syz [ 400.303683][ T332] usb 3-1: USB disconnect, device number 85 [ 400.390638][T13408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 400.390677][T13408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:59 [ 400.411582][T13410] netlink: 'syz.4.4261': attribute type 46 has an invalid length. [ 400.509460][ T1288] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 400.681944][ T1288] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 400.691143][ T1288] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.699156][ T1288] usb 9-1: Product: syz [ 400.713522][ T1288] usb 9-1: Manufacturer: syz [ 400.718262][ T1288] usb 9-1: SerialNumber: syz [ 400.748003][T13412] /dev/md0: Can't lookup blockdev [ 400.842238][T13416] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 400.849566][T13416] rust_binder: Write failure EINVAL in pid:1248 [ 400.877767][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4266'. [ 400.936523][T13428] __vm_enough_memory: pid: 13428, comm: syz.2.4269, bytes: 18577352757874688 not enough memory for the allocation [ 401.018656][ T36] audit: type=1400 audit(1758159645.301:8023): avc: denied { create } for pid=13438 comm="syz.2.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 401.019506][ T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 401.159205][ T1288] rtl8150 9-1:1.0: couldn't reset the device [ 401.165519][ T1288] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 401.176033][ T1288] usb 9-1: USB disconnect, device number 53 [ 401.193228][ T10] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 401.203606][ T10] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 401.213985][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 401.228229][ T10] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 401.237813][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.247249][ T10] usb 10-1: Product: syz [ 401.252378][ T10] usb 10-1: Manufacturer: syz [ 401.257139][ T10] usb 10-1: SerialNumber: syz [ 401.267327][T13414] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 401.274992][T13414] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 401.497084][ T36] audit: type=1400 audit(1758159645.781:8024): avc: denied { getopt } for pid=13447 comm="syz.4.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.565444][T13460] overlayfs: failed to resolve './file1': -2 [ 401.661213][ T36] audit: type=1326 audit(1758159645.951:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.4285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed5d18eba9 code=0x0 [ 401.812616][T13477] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 401.822548][ T36] audit: type=1400 audit(1758159646.111:8026): avc: denied { relabelto } for pid=13476 comm="syz.8.4286" name="file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 401.824506][T13477] SELinux: security_context_str_to_sid () failed with errno=-22 [ 401.867217][ T36] audit: type=1400 audit(1758159646.111:8027): avc: denied { associate } for pid=13476 comm="syz.8.4286" name="file0" dev="tmpfs" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 401.896832][ T36] audit: type=1400 audit(1758159646.151:8028): avc: denied { unlink } for pid=13032 comm="syz-executor" name="file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 402.215051][T13495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 402.216073][T13495] rust_binder: Read failure Err(EFAULT) in pid:77 [ 402.288773][ T10] rtl8150 10-1:1.0: eth1: rtl8150 is detected [ 402.341875][ T36] audit: type=1400 audit(1758159646.631:8029): avc: denied { read } for pid=13502 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.364993][ T36] audit: type=1400 audit(1758159646.631:8030): avc: denied { open } for pid=13502 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.390139][ T36] audit: type=1400 audit(1758159646.631:8031): avc: denied { getattr } for pid=13502 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.429931][ T36] audit: type=1400 audit(1758159646.721:8032): avc: denied { write } for pid=13501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.453116][ T36] audit: type=1400 audit(1758159646.721:8033): avc: denied { add_name } for pid=13501 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.511093][ T1288] usb 10-1: USB disconnect, device number 23 [ 402.756598][T13534] futex_wake_op: syz.4.4293 tries to shift op by 144; fix this program [ 403.109629][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.115785][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 403.115791][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 403.269474][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 403.276160][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 403.285026][ T10] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 403.293863][ T10] usb 10-1: config 6 has no interface number 0 [ 403.300447][ T10] usb 10-1: config 6 interface 248 has no altsetting 0 [ 403.308981][ T10] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 403.314364][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13550 comm=syz.4.4299 [ 403.318599][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.331865][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13550 comm=syz.4.4299 [ 403.339080][ T10] usb 10-1: Product: syz [ 403.352889][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13550 comm=syz.4.4299 [ 403.356883][ T10] usb 10-1: Manufacturer: syz [ 403.369688][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13550 comm=syz.4.4299 [ 403.375341][ T10] usb 10-1: SerialNumber: syz [ 403.414346][T13554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=13554 comm=syz.4.4301 [ 403.647684][T13562] binder: Bad value for 'stats' [ 403.929469][ T1288] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 403.952105][T13572] fuse: Unknown parameter ' ' [ 403.957175][T13572] fuseblk: Bad value for 'fd' [ 404.046979][T13575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 404.047023][T13575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:91 [ 404.089023][T13580] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 404.090618][ T1288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.098251][T13580] rust_binder: Error while translating object. [ 404.110406][ T1288] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 404.121512][T13580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.127569][ T1288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.136611][T13580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 404.147642][ T1288] usb 3-1: config 0 descriptor?? [ 404.185938][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4312'. [ 404.304002][T13585] rust_binder: Write failure EFAULT in pid:101 [ 404.432379][T13590] __vm_enough_memory: pid: 13590, comm: syz.8.4315, bytes: 18014402804453376 not enough memory for the allocation [ 404.486382][T13592] pim6reg1: entered promiscuous mode [ 404.491805][T13592] pim6reg1: entered allmulticast mode [ 404.570447][ T1288] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 404.581046][ T1288] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0020/input/input25 [ 404.653574][ T1288] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 404.779508][ T7993] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 404.931963][ T7993] usb 9-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 404.941175][ T7993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.949206][ T7993] usb 9-1: Product: syz [ 404.953453][ T7993] usb 9-1: Manufacturer: syz [ 404.958076][ T7993] usb 9-1: SerialNumber: syz [ 404.974637][ T9] usb 3-1: USB disconnect, device number 86 [ 405.170258][ T7993] usb 9-1: USB disconnect, device number 54 [ 405.602310][T13600] +$<¶: renamed from bridge0 (while UP) [ 405.838123][ T10] ums-karma 10-1:6.248: USB Mass Storage device detected [ 405.919836][ T10] usb 10-1: USB disconnect, device number 24 [ 405.959607][T13624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 405.959648][T13624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 405.992896][T13628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 406.002050][ T332] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 406.025955][T13633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 406.035941][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 406.169472][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 406.175791][ T332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.189455][ T332] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 406.199945][ T332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.209034][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.217088][ T332] usb 3-1: Product: syz [ 406.221309][ T332] usb 3-1: Manufacturer: syz [ 406.226019][ T332] usb 3-1: SerialNumber: syz [ 406.231895][ T332] usb 3-1: config 0 descriptor?? [ 406.660746][T13643] can0 (unregistered): slcan off ttyS3. [ 406.682525][T13657] veth0_virt_wifi: entered allmulticast mode [ 406.688788][T13657] veth0_virt_wifi: left allmulticast mode [ 406.929485][ T332] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 407.080547][ T332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.091577][ T332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.101379][ T332] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 407.110835][ T332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.119617][ T332] usb 9-1: config 0 descriptor?? [ 407.527391][ T332] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 407.938379][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 407.938397][ T36] audit: type=1400 audit(1758159652.221:8044): avc: denied { lock } for pid=13715 comm="syz.4.4337" path="socket:[73321]" dev="sockfs" ino=73321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.069553][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 408.069608][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 408.603129][T13754] Invalid ELF header magic: != ELF [ 408.609119][ T36] audit: type=1400 audit(1758159652.891:8045): avc: denied { map } for pid=13753 comm="syz.9.4349" path="/proc/102/task/103/ns" dev="proc" ino=74989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 408.609695][T13754] __vm_enough_memory: pid: 13754, comm: syz.9.4349, bytes: 18014402804453376 not enough memory for the allocation [ 408.665608][ T7993] usb 3-1: USB disconnect, device number 87 [ 408.824868][ T36] audit: type=1400 audit(1758159653.111:8046): avc: denied { accept } for pid=13775 comm="syz.2.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 408.844973][ T36] audit: type=1326 audit(1758159653.131:8047): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.4357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed5d18eba9 code=0x0 [ 408.862871][T13781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 409.109608][ T7993] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 409.249530][ T7993] usb 3-1: device descriptor read/64, error -71 [ 409.489478][ T7993] usb 3-1: device descriptor read/64, error -71 [ 409.702556][ T1288] usb 9-1: USB disconnect, device number 55 [ 409.739563][ T7993] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 409.753498][T13792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13792 comm=syz.8.4362 [ 409.865107][T13798] binder: Bad value for 'max' [ 409.879475][ T7993] usb 3-1: device descriptor read/64, error -71 [ 409.905345][ T36] audit: type=1400 audit(1758159654.191:8048): avc: denied { append } for pid=13807 comm="syz.9.4368" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 409.957237][ T36] audit: type=1326 audit(1758159654.241:8049): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.9.4369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415b58eba9 code=0x0 [ 409.979511][T13819] vcan0: left allmulticast mode [ 410.119508][ T7993] usb 3-1: device descriptor read/64, error -71 [ 410.229747][ T7993] usb usb3-port1: attempt power cycle [ 410.569483][ T7993] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 410.590526][ T7993] usb 3-1: device descriptor read/8, error -71 [ 410.720506][ T7993] usb 3-1: device descriptor read/8, error -71 [ 410.970974][ T36] audit: type=1400 audit(1758159655.261:8050): avc: denied { relabelfrom } for pid=13832 comm="syz.9.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 410.979556][ T7993] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 410.991127][ T36] audit: type=1400 audit(1758159655.261:8051): avc: denied { relabelto } for pid=13832 comm="syz.9.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 411.010568][ T7993] usb 3-1: device descriptor read/8, error -71 [ 411.150746][ T7993] usb 3-1: device descriptor read/8, error -71 [ 411.161782][T13840] overlay: filesystem on ./bus not supported as upperdir [ 411.193067][T13845] pim6reg1: entered promiscuous mode [ 411.198386][T13845] pim6reg1: entered allmulticast mode [ 411.259904][ T7993] usb usb3-port1: unable to enumerate USB device [ 411.279315][T13847] fuse: Bad value for 'user_id' [ 411.284299][T13847] fuse: Bad value for 'user_id' [ 411.372931][ T36] audit: type=1400 audit(1758159655.661:8052): avc: denied { map } for pid=13852 comm="syz.8.4380" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 411.611227][T13871] rust_binder: 13871 RLIMIT_NICE not set [ 411.611393][T13871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 411.617067][T13871] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 411.626568][T13871] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:156 [ 411.649484][ T332] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 411.810543][ T332] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.820834][ T332] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.830572][ T332] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 411.839786][ T332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 411.847865][ T332] usb 10-1: SerialNumber: syz [ 412.056662][ T332] usb 10-1: 0:2 : does not exist [ 412.071192][ T332] usb 10-1: USB disconnect, device number 25 [ 412.099314][T13598] udevd[13598]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 412.143228][T13891] 9pnet_fd: Insufficient options for proto=fd [ 412.396487][ T1288] rust_binder: 0: removing orphan mapping 0:1048 [ 412.408261][ T36] audit: type=1326 audit(1758159656.691:8053): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.8.4403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f268358eba9 code=0x0 [ 412.529490][ T332] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 412.624641][T13928] rust_binder: 168: no such ref 2 [ 412.679478][ T332] usb 10-1: Using ep0 maxpacket: 32 [ 412.685873][ T332] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 412.694229][ T332] usb 10-1: config 0 has no interface number 0 [ 412.700477][ T332] usb 10-1: config 0 interface 184 has no altsetting 0 [ 412.708915][ T332] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 412.718128][ T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.726279][ T332] usb 10-1: Product: syz [ 412.730643][ T332] usb 10-1: Manufacturer: syz [ 412.735350][ T332] usb 10-1: SerialNumber: syz [ 412.744151][ T332] usb 10-1: config 0 descriptor?? [ 412.751719][ T332] smsc75xx v1.0.0 [ 413.152175][T13908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.215610][T13908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.227138][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 413.238684][ T332] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 413.248423][ T332] usb 10-1: USB disconnect, device number 26 [ 413.829702][T13990] netlink: 'syz.9.4426': attribute type 1 has an invalid length. [ 413.854304][T13990] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4426'. [ 413.870850][T14006] overlayfs: failed to clone upperpath [ 413.877117][T14006] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 413.903078][ T36] audit: type=1400 audit(1758159658.191:8054): avc: denied { setopt } for pid=14007 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.904347][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4431'. [ 413.944219][T14014] veth0_virt_wifi: entered allmulticast mode [ 413.954913][T14013] veth0_virt_wifi: left allmulticast mode [ 414.120207][T14036] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 414.128544][T14036] rust_binder: Write failure EINVAL in pid:200 [ 414.144334][T14038] netlink: 'syz.8.4443': attribute type 46 has an invalid length. [ 414.198324][T14042] rust_binder: Error while translating object. [ 414.198358][T14042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 414.204885][T14042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 414.214579][T14042] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 414.223942][T14042] rust_binder: Read failure Err(EFAULT) in pid:206 [ 414.289051][T14044] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 414.324204][T14046] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 414.842306][ T36] audit: type=1400 audit(1758159659.131:8055): avc: denied { mount } for pid=14062 comm="syz.9.4452" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 414.911725][T14065] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9 [ 414.979899][ T36] audit: type=1400 audit(1758159659.261:8056): avc: denied { remount } for pid=14062 comm="syz.9.4452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 415.052469][T14076] veth0: entered promiscuous mode [ 415.065845][T14076] veth0: left promiscuous mode [ 415.243521][T14099] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4464'. [ 415.254175][T14099] overlayfs: failed to clone upperpath [ 415.262568][T14099] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4464'. [ 415.579479][ T7993] usb 9-1: new low-speed USB device number 56 using dummy_hcd [ 415.675595][ T36] audit: type=1400 audit(1758159659.961:8057): avc: denied { unmount } for pid=13072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 415.729560][ T7993] usb 9-1: Invalid ep0 maxpacket: 64 [ 415.859548][ T7993] usb 9-1: new low-speed USB device number 57 using dummy_hcd [ 416.009511][ T7993] usb 9-1: Invalid ep0 maxpacket: 64 [ 416.015140][ T7993] usb usb9-port1: attempt power cycle [ 416.349062][ T36] audit: type=1400 audit(1758159660.631:8058): avc: denied { getopt } for pid=14147 comm="syz.2.4477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 416.368948][ T7993] usb 9-1: new low-speed USB device number 58 using dummy_hcd [ 416.389888][ T7993] usb 9-1: Invalid ep0 maxpacket: 64 [ 416.519555][ T7993] usb 9-1: new low-speed USB device number 59 using dummy_hcd [ 416.549695][ T7993] usb 9-1: Invalid ep0 maxpacket: 64 [ 416.555267][ T7993] usb usb9-port1: unable to enumerate USB device [ 416.609545][ T36] audit: type=1326 audit(1758159660.901:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14154 comm="syz.9.4480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f415b58eba9 code=0x0 [ 417.477135][ T36] audit: type=1400 audit(1758159661.761:8060): avc: denied { accept } for pid=14173 comm="syz.2.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.492771][T14176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.497646][T14176] rust_binder: Error while translating object. [ 417.504183][T14176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 417.510717][T14176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:192 [ 417.785362][T14188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202 [ 418.211356][ T36] audit: type=1400 audit(1758159662.501:8061): avc: denied { create } for pid=14193 comm="syz.4.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.240153][ T36] audit: type=1400 audit(1758159662.521:8062): avc: denied { write } for pid=14195 comm="syz.4.4493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 418.263609][ T36] audit: type=1400 audit(1758159662.551:8063): avc: denied { listen } for pid=14200 comm="syz.4.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 419.259266][T14228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4505'. [ 419.815823][ T36] audit: type=1326 audit(1758159664.101:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.839830][ T36] audit: type=1326 audit(1758159664.101:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.871199][ T36] audit: type=1326 audit(1758159664.101:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.895234][ T36] audit: type=1326 audit(1758159664.111:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.919161][ T36] audit: type=1326 audit(1758159664.111:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.942798][ T36] audit: type=1326 audit(1758159664.111:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.966377][ T36] audit: type=1326 audit(1758159664.111:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 419.991444][ T36] audit: type=1326 audit(1758159664.111:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 420.015289][ T36] audit: type=1326 audit(1758159664.121:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed5d1c1465 code=0x7ffc0000 [ 420.042159][ T36] audit: type=1326 audit(1758159664.271:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.4.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fed5d18eba9 code=0x7ffc0000 [ 420.240298][T14275] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 420.297995][T14288] overlayfs: failed to clone upperpath [ 420.773482][T14309] rust_binder: Failed copying into alloc: EFAULT [ 420.773503][T14309] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 420.780070][T14309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 420.788381][T14309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:206 [ 421.129461][ T45] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 421.240119][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4535'. [ 421.293997][T14331] overlayfs: failed to clone upperpath [ 421.295981][ T45] usb 10-1: unable to get BOS descriptor or descriptor too short [ 421.309479][ T45] usb 10-1: not running at top speed; connect to a high speed hub [ 421.318402][ T45] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 421.328898][ T45] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 421.337426][ T45] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 421.347180][ T45] usb 10-1: config 129 has no interface number 0 [ 421.353904][ T45] usb 10-1: config 129 has no interface number 1 [ 421.360745][ T45] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 421.374519][ T45] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 421.385912][ T45] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 421.399986][ T45] usb 10-1: config 129 interface 135 has no altsetting 0 [ 421.407647][ T45] usb 10-1: config 129 interface 5 has no altsetting 0 [ 421.418367][ T45] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 421.427775][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.437741][ T45] usb 10-1: Product: syz [ 421.442199][ T45] usb 10-1: Manufacturer: syz [ 421.446907][ T45] usb 10-1: SerialNumber: syz [ 421.520848][T14354] 9pnet: p9_errstr2errno: server reported unknown error [ 421.528547][T14354] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4546'. [ 421.723703][T14367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.723792][T14367] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 421.728257][T14369] 9pnet_fd: Insufficient options for proto=fd [ 421.757576][T14371] netlink: 'syz.4.4553': attribute type 4 has an invalid length. [ 421.861573][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.870234][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.936496][ T45] usb 10-1: MIDIStreaming interface descriptor not found [ 421.946209][ T45] usb 10-1: USB disconnect, device number 27 [ 421.962304][T12631] udevd[12631]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.559310][T14403] rust_binder: Write failure EINVAL in pid:236 [ 422.584036][T14408] netlink: 'syz.8.4566': attribute type 16 has an invalid length. [ 422.605386][T14409] rust_binder: Write failure EFAULT in pid:239 [ 422.743411][T14429] netlink: 'syz.4.4571': attribute type 46 has an invalid length. [ 422.763767][T14429] veth0_virt_wifi: entered allmulticast mode [ 422.780469][T14430] veth0_virt_wifi: left allmulticast mode [ 422.885886][T14441] overlayfs: failed to resolve './file1': -2 [ 422.951660][T14454] 9pnet_fd: Insufficient options for proto=fd [ 422.960966][T14454] overlayfs: failed to clone upperpath [ 422.981386][T14458] overlayfs: failed to clone upperpath [ 423.341987][T14464] rust_binder: Write failure EFAULT in pid:246 [ 423.453776][T14469] exFAT-fs (rnullb0): invalid boot record signature [ 423.496759][T14469] exFAT-fs (rnullb0): failed to read boot sector [ 423.513427][T14469] exFAT-fs (rnullb0): failed to recognize exfat type [ 423.774655][T14484] netlink: 393 bytes leftover after parsing attributes in process `syz.8.4591'. [ 423.786716][T14484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14484 comm=syz.8.4591 [ 423.822449][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4592'. [ 424.218043][T14539] overlayfs: failed to clone upperpath [ 424.269499][ T7993] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 424.420577][ T7993] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.431361][ T7993] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 424.442352][ T7993] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.456613][ T7993] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 424.466276][ T7993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.474803][ T7993] usb 9-1: Product: syz [ 424.478982][ T7993] usb 9-1: Manufacturer: syz [ 424.483739][ T7993] usb 9-1: SerialNumber: syz [ 424.489039][ T7993] usb 9-1: config 0 descriptor?? [ 424.695814][ T332] usb 9-1: USB disconnect, device number 60 [ 425.049483][ T368] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 425.200180][ T368] usb 10-1: not running at top speed; connect to a high speed hub [ 425.209135][ T368] usb 10-1: config 91 has an invalid interface number: 197 but max is 3 [ 425.217782][ T368] usb 10-1: config 91 has an invalid interface number: 129 but max is 3 [ 425.226284][ T368] usb 10-1: config 91 has an invalid interface number: 61 but max is 3 [ 425.234632][ T368] usb 10-1: config 91 has an invalid interface number: 134 but max is 3 [ 425.243115][ T368] usb 10-1: config 91 has an invalid interface descriptor of length 5, skipping [ 425.252207][ T368] usb 10-1: config 91 has an invalid descriptor of length 178, skipping remainder of the config [ 425.262860][ T368] usb 10-1: config 91 has 5 interfaces, different from the descriptor's value: 4 [ 425.272066][ T368] usb 10-1: config 91 has no interface number 1 [ 425.278376][ T368] usb 10-1: config 91 has no interface number 2 [ 425.284731][ T368] usb 10-1: config 91 has no interface number 3 [ 425.291040][ T368] usb 10-1: config 91 has no interface number 4 [ 425.297307][ T368] usb 10-1: config 91 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.308325][ T368] usb 10-1: config 91 interface 129 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 425.319481][ T368] usb 10-1: config 91 interface 129 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 425.330726][ T368] usb 10-1: config 91 interface 129 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 425.341809][ T368] usb 10-1: config 91 interface 129 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 425.352753][ T368] usb 10-1: config 91 interface 129 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 425.364317][ T368] usb 10-1: config 91 interface 61 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.377493][ T368] usb 10-1: too many endpoints for config 91 interface 134 altsetting 97: 164, using maximum allowed: 30 [ 425.388757][ T368] usb 10-1: config 91 interface 134 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 164 [ 425.402386][ T368] usb 10-1: config 91 interface 197 has no altsetting 0 [ 425.409362][ T368] usb 10-1: config 91 interface 129 has no altsetting 0 [ 425.416373][ T368] usb 10-1: config 91 interface 61 has no altsetting 0 [ 425.423270][ T368] usb 10-1: config 91 interface 134 has no altsetting 0 [ 425.431586][ T368] usb 10-1: New USB device found, idVendor=1199, idProduct=68a9, bcdDevice=f4.4e [ 425.440806][ T368] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.448914][ T368] usb 10-1: Manufacturer: 퉨乌ㆸꌴ饛玵뜊 [ 425.455484][ T368] usb 10-1: SerialNumber: ó¥‹ì ºà¹¶Æ¹ë¥ ç²»é€…骆哨ꉬé‰î—•éŠ¥á£˜è †â ï£«æŽœë¼ªáž´ä½Ž×¾å’”晘납䤈臨畖è ì¦æ¤—䴡눫ꟻîŽâ±î¸£â“šî•çª°ï¶«Ù­éªšá¦¸ó‹†ç³…鹔륛⹧䈆î©à°šá•¦è¢»å²œæ©•ê¬ìŽ¢î­²é‡êº§ä«‘音㛳䋄얄悂ížå¬©é­î…³äŽ€Õ»ìŠí‚¬æ‰ï¿³ì¨¹ë‚³ [ 425.460688][T14605] /dev/loop0: Can't lookup blockdev [ 425.711238][ T368] usb 10-1: USB disconnect, device number 28 [ 425.911619][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4641'. [ 426.033318][T14649] configfs: Unknown parameter './binderfs/binder1' [ 426.040227][T14649] rust_binder: Error while translating object. [ 426.040265][T14649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 426.046461][T14649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:287 [ 426.067554][T14651] rust_binder: Write failure EINVAL in pid:289 [ 426.089327][T14653] overlayfs: workdir and upperdir must reside under the same mount [ 426.215393][T14655] tipc: Started in network mode [ 426.220414][T14655] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 426.229327][T14655] tipc: Enabling of bearer rejected, failed to enable media [ 426.258914][T14657] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 426.267614][T14657] overlayfs: missing 'lowerdir' [ 426.274173][T14657] EXT4-fs: Conflicting test_dummy_encryption options [ 426.349438][T14671] sit0: entered promiscuous mode [ 426.365339][T14671] netlink: 'syz.2.4654': attribute type 1 has an invalid length. [ 426.399491][T14671] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4654'. [ 426.847156][T14682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.950310][T14699] 9pnet_fd: p9_fd_create_unix (14699): problem connecting socket: ./file0: -111 [ 427.049993][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.057361][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.064731][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.072281][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.079495][ T45] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 427.081108][T14716] 9pnet_fd: Insufficient options for proto=fd [ 427.093727][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.101181][T14713] overlay: filesystem on ./bus not supported as upperdir [ 427.103887][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 427.103907][ T36] audit: type=1400 audit(1758159671.400:8077): avc: denied { setattr } for pid=14711 comm="syz.8.4668" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 427.195268][ T36] audit: type=1400 audit(1758159671.480:8078): avc: denied { execute } for pid=14722 comm="syz.8.4672" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 427.219660][ T36] audit: type=1326 audit(1758159671.480:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.4675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x0 [ 427.250804][ T45] usb 10-1: not running at top speed; connect to a high speed hub [ 427.259378][ T45] usb 10-1: config 1 interface 0 has no altsetting 0 [ 427.268710][ T45] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 427.278685][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.287950][ T45] usb 10-1: Product: syz [ 427.292448][ T45] usb 10-1: Manufacturer: syz [ 427.297200][ T45] usb 10-1: SerialNumber: syz [ 427.706001][ T45] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 427.872174][T14767] fuseblk: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615¬ro00000000000020020000' [ 427.892669][T14767] /dev/loop0: Can't lookup blockdev [ 427.905072][T14767] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4684'. [ 427.914824][ T368] usb 10-1: USB disconnect, device number 29 [ 427.924942][ T368] usblp0: removed [ 428.185645][T14777] x_tables: duplicate underflow at hook 2 [ 428.331314][T14779] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.339443][T14779] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 428.347985][T14779] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.355930][T14779] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 428.375874][T14781] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 4096) [ 428.375895][T14781] rust_binder: Error while translating object. [ 428.386635][T14781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.392854][T14781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 428.570192][T14801] overlayfs: failed to clone upperpath [ 428.719503][ T10] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 428.849470][ T10] usb 10-1: device descriptor read/64, error -71 [ 429.089476][ T10] usb 10-1: device descriptor read/64, error -71 [ 429.237475][T14838] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 429.265050][T14842] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 429.265077][T14842] rust_binder: Read failure Err(EFAULT) in pid:319 [ 429.339474][ T10] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 429.479990][ T10] usb 10-1: device descriptor read/64, error -71 [ 429.539565][ T9] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 429.669612][ T9] usb 9-1: device descriptor read/64, error -71 [ 429.719540][ T10] usb 10-1: device descriptor read/64, error -71 [ 429.830454][ T10] usb usb10-port1: attempt power cycle [ 429.836125][T14873] overlayfs: failed to clone upperpath [ 429.909474][ T9] usb 9-1: device descriptor read/64, error -71 [ 430.133605][T14896] netlink: 'syz.4.4729': attribute type 12 has an invalid length. [ 430.159641][ T9] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 430.177514][ T10] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 430.200494][ T10] usb 10-1: device descriptor read/8, error -71 [ 430.309466][ T9] usb 9-1: device descriptor read/64, error -71 [ 430.330551][ T10] usb 10-1: device descriptor read/8, error -71 [ 430.549846][ T9] usb 9-1: device descriptor read/64, error -71 [ 430.569668][ T10] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 430.590616][ T10] usb 10-1: device descriptor read/8, error -71 [ 430.659564][ T9] usb usb9-port1: attempt power cycle [ 430.720523][ T10] usb 10-1: device descriptor read/8, error -71 [ 430.751621][ T36] audit: type=1400 audit(1758159675.040:8080): avc: denied { map } for pid=14910 comm="syz.2.4735" path="socket:[80391]" dev="sockfs" ino=80391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.782865][ T36] audit: type=1400 audit(1758159675.070:8081): avc: denied { listen } for pid=14914 comm="syz.2.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.829693][ T10] usb usb10-port1: unable to enumerate USB device [ 430.887830][T14925] fuse: Bad value for 'fd' [ 430.999515][ T9] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 431.020553][ T9] usb 9-1: device descriptor read/8, error -71 [ 431.150460][ T9] usb 9-1: device descriptor read/8, error -71 [ 431.187659][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4740'. [ 431.409450][ T9] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 431.419500][T14934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4742'. [ 431.428653][T14933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4742'. [ 431.438697][ T9] usb 9-1: device descriptor read/8, error -71 [ 431.580445][ T9] usb 9-1: device descriptor read/8, error -71 [ 431.652027][T14942] fuse: Unknown parameter '000000000000000000000x0000000000000007' [ 431.674517][ T36] audit: type=1326 audit(1758159675.960:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.9.4744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415b58eba9 code=0x0 [ 431.699551][ T9] usb usb9-port1: unable to enumerate USB device [ 431.807324][T14941] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 432.035750][ T36] audit: type=1400 audit(1758159676.320:8083): avc: denied { create } for pid=14944 comm="syz.2.4746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.077460][T14949] >: left promiscuous mode [ 432.094476][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'. [ 432.104101][T14951] netlink: 'syz.4.4748': attribute type 6 has an invalid length. [ 432.111978][T14951] netlink: 'syz.4.4748': attribute type 6 has an invalid length. [ 432.119838][T14951] netlink: 'syz.4.4748': attribute type 6 has an invalid length. [ 432.127719][T14951] netlink: 'syz.4.4748': attribute type 6 has an invalid length. [ 432.135554][T14951] netlink: 'syz.4.4748': attribute type 6 has an invalid length. [ 432.183191][ T36] audit: type=1400 audit(1758159676.470:8084): avc: denied { map } for pid=14963 comm="syz.4.4751" path="socket:[81138]" dev="sockfs" ino=81138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 432.202286][T14968] overlayfs: failed to clone upperpath [ 432.268223][ T36] audit: type=1326 audit(1758159676.550:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.2.4760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x0 [ 432.659480][ T10] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 432.679472][ T9] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 432.810665][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.820995][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.830028][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 432.835956][ T10] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.845224][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.853497][ T10] usb 10-1: SerialNumber: syz [ 432.858951][ T9] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 432.868340][ T9] usb 9-1: config 1 has no interface number 1 [ 432.874629][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 432.887827][ T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 432.900535][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.909656][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.917661][ T9] usb 9-1: Product: syz [ 432.921864][ T9] usb 9-1: Manufacturer: syz [ 432.926485][ T9] usb 9-1: SerialNumber: syz [ 433.090669][ T10] usb 10-1: 0:2 : does not exist [ 433.097567][ T10] usb 10-1: USB disconnect, device number 34 [ 433.107657][T13598] udevd[13598]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 433.139785][ T9] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 433.149065][ T9] usb 9-1: USB disconnect, device number 66 [ 433.584043][ T36] audit: type=1326 audit(1758159677.870:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14996 comm="syz.4.4764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed5d18eba9 code=0x0 [ 433.615812][ T36] audit: type=1400 audit(1758159677.900:8087): avc: denied { connect } for pid=14998 comm="syz.9.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 433.691414][ T36] audit: type=1400 audit(1758159677.980:8088): avc: denied { mount } for pid=15003 comm="syz.9.4767" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 441.483642][T15013] overlayfs: failed to clone upperpath [ 441.496886][T15016] __vm_enough_memory: pid: 15016, comm: syz.8.4769, bytes: 18014402804453376 not enough memory for the allocation [ 441.560272][T15025] fuse: Unknown parameter '' [ 441.577391][T15035] overlayfs: failed to clone upperpath [ 441.799502][ T10] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 441.950515][ T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 441.959350][ T10] usb 10-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 441.969772][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.978713][ T10] usb 10-1: config 1 has no interface number 0 [ 441.984914][ T10] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 441.995999][ T10] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 442.010608][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.019802][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.027893][ T10] usb 10-1: Product: syz [ 442.032177][ T10] usb 10-1: Manufacturer: syz [ 442.036880][ T10] usb 10-1: SerialNumber: syz [ 442.044260][ T10] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 442.051292][ T10] cdc_ncm 10-1:1.1: bind() failure [ 442.402177][ T45] usb 10-1: USB disconnect, device number 35 [ 442.491811][ T36] audit: type=1326 audit(1758159686.780:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.2.4790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2aa18eba9 code=0x0 [ 442.530995][ T36] audit: type=1400 audit(1758159686.820:8090): avc: denied { audit_write } for pid=15070 comm="syz.8.4792" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 442.798214][T15083] overlay: filesystem on ./bus is read-only [ 442.999464][ T45] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 443.150555][ T45] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.162307][ T45] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.173480][ T45] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.184841][ T45] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 443.194212][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.203446][T15076] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 443.364636][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 443.375187][T15091] vcan0 (unregistering): left allmulticast mode [ 443.412653][ T404] bridge_slave_1: left allmulticast mode [ 443.418459][ T404] bridge_slave_1: left promiscuous mode [ 443.424665][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.432985][ T404] ªªªªª$: left allmulticast mode [ 443.438751][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4799'. [ 443.438925][ T404] ªªªªª$: left promiscuous mode [ 443.453087][ T404] bridge0: port 1(ªªªªª$) entered disabled state [ 443.474990][T15095] fuse: Bad value for 'rootmode' [ 443.586069][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.593416][T15098] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.600628][T15098] bridge_slave_0: entered allmulticast mode [ 443.607161][T15098] bridge_slave_0: entered promiscuous mode [ 443.614692][ T404] veth1_macvtap: left promiscuous mode [ 443.620313][ T404] veth0_vlan: left promiscuous mode [ 443.664571][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.671805][T15098] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.678940][T15098] bridge_slave_1: entered allmulticast mode [ 443.685208][T15098] bridge_slave_1: entered promiscuous mode [ 443.707333][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4805'. [ 443.716419][T15103] erspan0: default FDB implementation only supports local addresses [ 443.771785][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.778870][T15098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.786193][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.793277][T15098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.815612][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.825353][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.835511][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.842618][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.870808][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.877927][T13120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.907908][T15098] veth0_vlan: entered promiscuous mode [ 443.924027][T15098] veth1_macvtap: entered promiscuous mode [ 443.980837][T15124] fuse: Unknown parameter 'g' [ 444.051998][T15126] rust_binder: Error while translating object. [ 444.052037][T15126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 444.058270][T15126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2 [ 444.237418][ T36] audit: type=1400 audit(1758159688.520:8091): avc: denied { write } for pid=15132 comm="syz.2.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 444.292902][ T36] audit: type=1400 audit(1758159688.580:8092): avc: denied { getopt } for pid=15136 comm="syz.2.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.806739][T15155] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4821'. [ 444.840855][T15164] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 444.848085][T15164] rust_binder: Write failure EINVAL in pid:5 [ 444.955681][ T36] audit: type=1400 audit(1758159689.240:8093): avc: denied { connect } for pid=15177 comm="syz.1.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.063857][T15198] overlayfs: failed to clone upperpath [ 445.071504][T13120] tipc: Subscription rejected, illegal request [ 445.174415][T15202] rust_binder: Got transaction with invalid offset. [ 445.174459][T15202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 445.181335][T15202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 445.260904][ T36] audit: type=1400 audit(1758159689.550:8095): avc: denied { create } for pid=15212 comm="syz.1.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 445.290324][ T36] audit: type=1400 audit(1758159689.550:8094): avc: denied { create } for pid=15212 comm="syz.1.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 445.321349][ T45] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 445.329173][ T45] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input29 [ 445.344532][ T45] usb 10-1: USB disconnect, device number 36 [ 445.350734][ C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 445.609495][ T1527] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 445.695651][T15238] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4848'. [ 445.706539][T15238] netlink: 'syz.2.4848': attribute type 4 has an invalid length. [ 445.749492][ T1527] usb 2-1: device descriptor read/64, error -71 [ 445.783770][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 445.848219][T15248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 445.848302][T15249] rust_binder: inc_ref_done called when no active inc_refs [ 445.862367][T15248] rust_binder: inc_ref_done called when no active inc_refs [ 445.935997][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.962588][T15261] FAT-fs (rnullb0): bogus number of reserved sectors [ 445.970494][ T36] audit: type=1400 audit(1758159690.250:8096): avc: denied { mounton } for pid=15260 comm="syz.9.4854" path="/syzcgroup/unified/syz9" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 445.995204][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.003025][T15251] bridge_slave_0: entered allmulticast mode [ 446.009150][T15261] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 446.016806][T15251] bridge_slave_0: entered promiscuous mode [ 446.028156][T15261] netlink: 'syz.9.4854': attribute type 33 has an invalid length. [ 446.036191][ T1527] usb 2-1: device descriptor read/64, error -71 [ 446.036448][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4854'. [ 446.059506][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.066597][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.074366][T15251] bridge_slave_1: entered allmulticast mode [ 446.080976][T15251] bridge_slave_1: entered promiscuous mode [ 446.152891][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.160015][T15251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.167297][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.174387][T15251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.196652][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.204289][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.217172][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.224276][T13120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.235641][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.242763][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.270428][T15251] veth0_vlan: entered promiscuous mode [ 446.282814][T15251] veth1_macvtap: entered promiscuous mode [ 446.309519][ T1527] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 446.361940][ T36] audit: type=1400 audit(1758159690.650:8097): avc: denied { write } for pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82404 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 446.387041][ T36] audit: type=1400 audit(1758159690.650:8098): avc: denied { read } for pid=1288 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82404 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 446.479460][ T1527] usb 2-1: device descriptor read/64, error -71 [ 446.544892][T15290] veth0_virt_wifi: entered allmulticast mode [ 446.574569][T15300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 446.574598][T15300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:295 [ 446.706708][T15295] veth0_virt_wifi: left allmulticast mode [ 446.729590][ T1527] usb 2-1: device descriptor read/64, error -71 [ 446.839562][ T1527] usb usb2-port1: attempt power cycle [ 446.849514][ T1288] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 447.000546][ T1288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.011631][ T1288] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 447.020805][ T1288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.030026][ T1288] usb 10-1: config 0 descriptor?? [ 447.179487][ T1527] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 447.200668][ T1527] usb 2-1: device descriptor read/8, error -71 [ 447.330518][ T1527] usb 2-1: device descriptor read/8, error -71 [ 447.352888][T15321] rust_binder: Write failure EFAULT in pid:11 [ 447.438240][ T1288] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 447.454248][ T1288] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0022/input/input30 [ 447.523572][ T1288] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 447.569478][ T1527] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 447.592701][ T1527] usb 2-1: device descriptor read/8, error -71 [ 447.613110][T15330] rust_binder: Error while translating object. [ 447.613136][T15330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 447.619569][T15330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19 [ 447.699249][T15333] rust_binder: Error while translating object. [ 447.708497][T15333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 447.714740][T15333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:21 [ 447.725337][ T1527] usb 2-1: device descriptor read/8, error -71 [ 447.840894][ T368] usb 10-1: USB disconnect, device number 37 [ 447.849594][ T1527] usb usb2-port1: unable to enumerate USB device [ 448.165002][T15347] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 448.205013][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4880'. [ 448.281628][T15354] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4881'. [ 448.291071][T15354] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4881'. [ 448.314984][ T36] audit: type=1400 audit(1758159692.600:8099): avc: denied { append } for pid=15355 comm="syz.1.4882" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.352878][T15362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15362 comm=syz.4.4885 [ 448.358487][ T36] audit: type=1400 audit(1758159692.640:8100): avc: denied { setattr } for pid=15359 comm="syz.1.4884" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.403564][T15364] rust_binder: Write failure EFAULT in pid:301 [ 448.581628][T15393] usb usb8: usbfs: process 15393 (syz.9.4896) did not claim interface 0 before use [ 448.651362][ T404] Bluetooth: hci0: Frame reassembly failed (-84) [ 448.651378][T15380] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 448.657850][T15380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 448.667481][T15380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:43 [ 448.811594][T15416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 448.830222][T15416] rust_binder: Error while translating object. [ 448.830275][T15416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 448.836591][T15416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:324 [ 449.084955][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4906'. [ 449.103760][T15426] rust_binder: Write failure EFAULT in pid:334 [ 449.150559][T15440] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 449.185828][T15444] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 449.324781][T15451] pim6reg1: entered promiscuous mode [ 449.330381][T15451] pim6reg1: entered allmulticast mode [ 449.629599][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 449.689485][ T368] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 449.780670][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.791632][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.801432][ T10] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 449.810537][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.819206][ T10] usb 3-1: config 0 descriptor?? [ 449.850816][ T368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.861880][ T368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.871778][ T368] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 449.880961][ T368] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.889824][ T368] usb 10-1: config 0 descriptor?? [ 450.115427][T15496] tipc: Enabling of bearer rejected, failed to enable media [ 450.138340][T15499] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 450.147341][T15499] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 450.155891][T15499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.660284][ T10] hid-led 0003:27B8:01ED.0023: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 450.674220][ T10] hid-led 0003:27B8:01ED.0023: ThingM blink(1) initialized [ 450.698722][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4922'. [ 450.708678][ T368] hid-led 0003:27B8:01ED.0024: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 450.709628][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.720247][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 450.736346][ T368] hid-led 0003:27B8:01ED.0024: ThingM blink(1) initialized [ 450.867707][ T368] usb 3-1: USB disconnect, device number 92 [ 450.886371][T15518] rust_binder: Write failure EFAULT in pid:37 [ 450.910550][ T1288] usb 10-1: USB disconnect, device number 38 [ 450.953795][T15527] rust_binder: Failed copying into alloc: EFAULT [ 450.953815][T15527] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 450.960353][T15527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 450.968712][T15527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 450.978341][T15527] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 450.987499][T15527] rust_binder: Read failure Err(EFAULT) in pid:37 [ 451.051799][T15526] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 451.354954][T15536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 451.354981][T15536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:52 [ 451.387545][T15540] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 451.441144][ T36] audit: type=1400 audit(1758159695.730:8101): avc: denied { write } for pid=15544 comm="syz.9.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 451.465913][T15545] kvm: kvm [15544]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000008) [ 451.503601][T13120] bridge_slave_1: left allmulticast mode [ 451.509434][T13120] bridge_slave_1: left promiscuous mode [ 451.515119][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.522877][T13120] bridge_slave_0: left allmulticast mode [ 451.528643][T13120] bridge_slave_0: left promiscuous mode [ 451.534548][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.673277][T15549] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4944'. [ 451.682372][T15549] 0ªö»ôM: renamed from gretap0 (while UP) [ 451.689140][T15549] 0ªö»ôM: entered allmulticast mode [ 451.694856][T15549] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 451.725528][T13120] veth1_macvtap: left promiscuous mode [ 451.737715][T13120] veth0_vlan: left promiscuous mode [ 451.803024][ T36] audit: type=1400 audit(1758159696.090:8102): avc: denied { mount } for pid=15569 comm="syz.4.4953" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 451.843829][T15576] usb usb1: usbfs: process 15576 (syz.2.4954) did not claim interface 2 before use [ 451.866146][T15579] 9pnet_fd: Insufficient options for proto=fd [ 451.927786][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.934902][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.942106][T15566] bridge_slave_0: entered allmulticast mode [ 451.948477][T15566] bridge_slave_0: entered promiscuous mode [ 451.955080][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.962195][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.969932][T15566] bridge_slave_1: entered allmulticast mode [ 451.976318][T15566] bridge_slave_1: entered promiscuous mode [ 452.042268][T15597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15597 comm=syz.9.4960 [ 452.055612][T15597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15597 comm=syz.9.4960 [ 452.089260][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.096402][T15566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.103839][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.109476][ T1527] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 452.110916][T15566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.141501][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.148939][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.165233][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.172377][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.181973][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.189134][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.217544][T15566] veth0_vlan: entered promiscuous mode [ 452.229013][T15566] veth1_macvtap: entered promiscuous mode [ 452.260585][ T1527] usb 3-1: config 1 has an invalid descriptor of length 232, skipping remainder of the config [ 452.271548][ T1527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.281221][ T1527] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.287194][T15609] cannot load conntrack support for proto=3 [ 452.290502][ T1527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.304522][ T1527] usb 3-1: SerialNumber: syz [ 452.511281][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.519940][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.529702][ T1527] usb 3-1: 0:2 : does not exist [ 452.529718][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 452.535326][ T1527] usb 3-1: unit 5 not found! [ 452.552320][ T1527] usb 3-1: USB disconnect, device number 93 [ 452.642273][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4970'. [ 452.689584][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 452.696105][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.704664][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.715664][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 452.730251][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 452.739322][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.747528][ T9] usb 4-1: Product: syz [ 452.751781][ T9] usb 4-1: Manufacturer: syz [ 452.756424][ T9] usb 4-1: SerialNumber: syz [ 452.762032][ T9] usb 4-1: config 0 descriptor?? [ 452.770888][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 452.786342][T15033] udevd[15033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 452.974053][ T36] audit: type=1400 audit(1758159697.260:8103): avc: denied { load_policy } for pid=15608 comm="syz.3.4948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 452.974843][ T1527] usb 4-1: USB disconnect, device number 9 [ 453.147528][T15636] rust_binder: Error while translating object. [ 453.147581][T15636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 453.153981][T15636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:50 [ 453.191304][T15649] input: syz0 as /devices/virtual/input/input31 [ 453.274215][T15649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 453.274257][T15649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:53 [ 453.318430][T15685] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4991'. [ 453.351843][T15688] rust_binder: 15688 RLIMIT_NICE not set [ 453.351992][T15688] rust_binder: Read failure Err(EFAULT) in pid:60 [ 453.400187][T15695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4995'. [ 453.477894][T15698] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 453.477915][T15698] rust_binder: Read failure Err(EFAULT) in pid:70 [ 453.739447][ T45] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 453.789673][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 453.900547][ T45] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 453.911596][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 453.920889][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.931458][ T45] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 453.959479][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 453.966136][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 453.974406][ T10] usb 4-1: config 0 has no interface number 0 [ 453.980735][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 453.989200][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 453.998448][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.006512][ T10] usb 4-1: Product: syz [ 454.010758][ T10] usb 4-1: Manufacturer: syz [ 454.015385][ T10] usb 4-1: SerialNumber: syz [ 454.020759][ T10] usb 4-1: config 0 descriptor?? [ 454.026662][ T10] smsc75xx v1.0.0 [ 454.134350][ T9] usb 3-1: USB disconnect, device number 94 [ 454.229095][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 454.241140][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 454.250885][ T10] usb 4-1: USB disconnect, device number 10 [ 454.665826][ T36] audit: type=1400 audit(1758159698.950:8104): avc: denied { attach_queue } for pid=15735 comm="syz.2.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 454.729612][T15744] binder: Unknown parameter 'defcontext01777777777777777777777' [ 454.763453][ T36] audit: type=1400 audit(1758159699.050:8105): avc: denied { write } for pid=15749 comm="syz.2.5013" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 454.787119][ T36] audit: type=1400 audit(1758159699.050:8106): avc: denied { open } for pid=15749 comm="syz.2.5013" path="/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 454.944646][ T36] audit: type=1400 audit(1758159699.230:8107): avc: granted { setsecparam } for pid=15764 comm="syz.2.5014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 454.978406][T15771] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 454.987491][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 455.014595][T15777] netlink: 'syz.2.5024': attribute type 16 has an invalid length. [ 455.022624][T15777] netlink: 'syz.2.5024': attribute type 3 has an invalid length. [ 455.030485][T15777] netlink: 'syz.2.5024': attribute type 1 has an invalid length. [ 455.038223][T15777] netlink: 64030 bytes leftover after parsing attributes in process `syz.2.5024'. [ 455.150568][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.160784][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.170425][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 455.179538][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 455.187565][ T10] usb 4-1: SerialNumber: syz [ 455.244887][ T36] audit: type=1400 audit(1758159699.530:8108): avc: denied { checkpoint_restore } for pid=15787 comm="syz.9.5027" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.395992][ T10] usb 4-1: 0:2 : does not exist [ 455.403003][ T10] usb 4-1: USB disconnect, device number 11 [ 455.412784][T15026] udevd[15026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 455.523218][ T36] audit: type=1400 audit(1758159699.810:8109): avc: denied { create } for pid=15796 comm="syz.4.5030" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 455.543790][ T36] audit: type=1400 audit(1758159699.810:8110): avc: denied { write } for pid=15796 comm="syz.4.5030" name="file2" dev="ramfs" ino=85257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 455.569590][ T36] audit: type=1400 audit(1758159699.810:8111): avc: denied { open } for pid=15796 comm="syz.4.5030" path="/file2" dev="ramfs" ino=85257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 455.591974][ T36] audit: type=1400 audit(1758159699.810:8112): avc: denied { ioctl } for pid=15796 comm="syz.4.5030" path="/file2" dev="ramfs" ino=85257 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 455.616228][ T36] audit: type=1400 audit(1758159699.830:8113): avc: denied { create } for pid=15798 comm="syz.4.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.849314][T15827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=15827 comm=syz.9.5040 [ 455.969018][T15835] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.5042'. [ 456.076687][T15840] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 456.369479][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 456.477353][T15846] netlink: 140 bytes leftover after parsing attributes in process `syz.9.5046'. [ 456.486634][T15846] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5046'. [ 456.531973][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.542419][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.554632][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 456.564470][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.574439][ T9] usb 4-1: SerialNumber: syz [ 456.854037][ T9] usb 4-1: 0:2 : does not exist [ 456.859000][ T9] usb 4-1: unit 5: unexpected type 0x0a [ 456.860312][T15865] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 456.882601][ T9] usb 4-1: USB disconnect, device number 12 [ 456.940842][T15867] rust_binder: 15867 RLIMIT_NICE not set [ 456.941429][T15867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 456.947128][T15867] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 456.962494][T15867] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:108 [ 456.984276][T15026] udevd[15026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.154617][ T7993] rust_binder: 0: removing orphan mapping 0:1048 [ 457.218312][T15882] rust_binder: 121: no such ref 3 [ 457.499976][T15894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 457.500776][T15896] rust_binder: 22: no such ref 0 [ 457.516689][T15896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 457.519791][T15897] 9pnet_fd: Insufficient options for proto=fd [ 457.919805][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5074'. [ 458.589445][ T1527] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 458.628371][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5083'. [ 458.677129][T15959] rust_binder: Write failure EFAULT in pid:37 [ 458.679374][T15961] rust_binder: Write failure EFAULT in pid:37 [ 458.714928][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5086'. [ 458.735235][T15967] veth0_virt_wifi: entered allmulticast mode [ 458.743165][T15967] veth0_virt_wifi: left allmulticast mode [ 458.756195][ T1527] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 458.769945][ T1527] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.785631][ T1527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.797583][ T1527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 458.809786][ T1527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.823737][ T1527] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.833731][ T1527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.864023][ T1527] usb 3-1: config 0 descriptor?? [ 458.875055][T15944] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 459.042680][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 459.289472][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 459.439444][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 459.451070][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 459.460251][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.468261][ T9] usb 4-1: Product: syz [ 459.472509][ T9] usb 4-1: Manufacturer: syz [ 459.477140][ T9] usb 4-1: SerialNumber: syz [ 459.483727][ T9] usb 4-1: config 0 descriptor?? [ 459.491933][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 459.500457][ T9] usb 4-1: Detected FT232H [ 459.506555][ T1527] usbhid 3-1:0.0: can't add hid device: -71 [ 459.517041][ T1527] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 459.526819][ T1527] usb 3-1: USB disconnect, device number 97 [ 459.693583][ T36] kauditd_printk_skb: 615 callbacks suppressed [ 459.693605][ T36] audit: type=1400 audit(1758159703.980:8729): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.694158][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 459.700724][ T36] audit: type=1400 audit(1758159703.980:8730): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.756918][ T36] audit: type=1400 audit(1758159704.020:8731): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.782016][ T36] audit: type=1400 audit(1758159704.020:8732): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.929448][ T36] audit: type=1400 audit(1758159704.210:8733): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.954587][ T36] audit: type=1400 audit(1758159704.220:8734): avc: denied { ioctl } for pid=15974 comm="syz.3.5090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.041624][ T36] audit: type=1400 audit(1758159704.330:8735): avc: denied { read write } for pid=15251 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.079495][ T36] audit: type=1400 audit(1758159704.330:8736): avc: denied { read write open } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.107506][ T36] audit: type=1400 audit(1758159704.330:8737): avc: denied { ioctl } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.134873][ T36] audit: type=1400 audit(1758159704.360:8738): avc: denied { read write } for pid=15976 comm="syz.2.5091" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 460.137146][T15977] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 460.166942][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 460.366915][ T9] usb 4-1: USB disconnect, device number 13 [ 460.375721][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 460.388574][ T9] ftdi_sio 4-1:0.0: device disconnected [ 460.598347][T15983] netlink: 'syz.2.5094': attribute type 4 has an invalid length. [ 460.633525][T15983] netlink: 'syz.2.5094': attribute type 4 has an invalid length. [ 460.779444][ T45] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 461.015062][T16003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5101'. [ 461.059681][T15998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.082976][T15998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.186355][T16013] rust_binder: Read failure Err(EFAULT) in pid:148 [ 461.289438][ T368] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 461.347885][T16022] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5108'. [ 461.483334][ T368] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 461.496399][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.516169][ T368] usb 4-1: Product: syz [ 461.526279][ T368] usb 4-1: Manufacturer: syz [ 461.536364][ T368] usb 4-1: SerialNumber: syz [ 461.544912][ T368] usb 4-1: config 0 descriptor?? [ 461.560832][ T368] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 461.704638][T16028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 461.719023][T16028] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 461.735518][T16028] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 461.773163][T15999] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 461.780468][T15998] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 461.780493][T15999] rust_binder: Write failure EINVAL in pid:45 [ 461.787602][T15998] rust_binder: Write failure EINVAL in pid:45 [ 461.794338][ T45] usb 4-1: USB disconnect, device number 14 [ 461.946315][T16040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=16040 comm=syz.4.5113 [ 462.100741][T16046] binder: Bad value for 'stats' [ 462.559445][ T10] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 462.719588][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 462.804115][T16064] veth0_vlan: entered allmulticast mode [ 462.815784][T16064] veth0_vlan: left promiscuous mode [ 462.821720][T16064] veth0_vlan: entered promiscuous mode [ 462.860851][ T10] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 463.039485][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 463.046308][ T10] usb usb3-port1: attempt power cycle [ 463.389454][ T10] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 463.410859][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 463.559489][ T10] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 463.590563][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 463.599076][ T10] usb usb3-port1: unable to enumerate USB device [ 463.633378][T16089] fuseblk: Bad value for 'fd' [ 463.899577][ T1527] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 464.062159][ T1527] usb 4-1: No LPM exit latency info found, disabling LPM. [ 464.071982][ T1527] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 464.079984][ T1527] usb 4-1: can't read configurations, error -22 [ 464.209476][ T1527] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 464.351740][T16112] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 464.362911][ T1527] usb 4-1: No LPM exit latency info found, disabling LPM. [ 464.373076][ T1527] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 464.381219][ T1527] usb 4-1: can't read configurations, error -22 [ 464.388228][ T1527] usb usb4-port1: attempt power cycle [ 464.498706][T16131] xt_NFQUEUE: number of total queues is 0 [ 464.578178][T16140] 9pnet_fd: Insufficient options for proto=fd [ 464.699652][ T36] kauditd_printk_skb: 1066 callbacks suppressed [ 464.699672][ T36] audit: type=1400 audit(1758159708.990:9805): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.726615][ T36] audit: type=1400 audit(1758159708.990:9806): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.729473][ T1527] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 464.747596][ T36] audit: type=1400 audit(1758159708.990:9807): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.755101][T16136] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.774652][ T36] audit: type=1400 audit(1758159708.990:9808): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.779981][T16136] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 464.801379][ T36] audit: type=1400 audit(1758159708.990:9809): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.809686][T16136] audit: backlog limit exceeded [ 464.829571][ T36] audit: type=1400 audit(1758159708.990:9810): avc: denied { write } for pid=16135 comm="syz.9.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.835212][T16091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.865499][ T1527] usb 4-1: No LPM exit latency info found, disabling LPM. [ 464.875726][ T1527] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 464.883746][ T1527] usb 4-1: can't read configurations, error -22 [ 465.019465][ T1527] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 465.042365][ T1527] usb 4-1: No LPM exit latency info found, disabling LPM. [ 465.052612][ T1527] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 465.060635][ T1527] usb 4-1: can't read configurations, error -22 [ 465.067043][ T1527] usb usb4-port1: unable to enumerate USB device [ 465.490254][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.497353][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.504658][T16152] bridge_slave_0: entered allmulticast mode [ 465.511134][T16152] bridge_slave_0: entered promiscuous mode [ 465.518648][ T329] macsec0: left allmulticast mode [ 465.523797][ T329] veth1_macvtap: left allmulticast mode [ 465.529521][ T329] macsec0: left promiscuous mode [ 465.534648][ T329] bridge0: port 3(macsec0) entered disabled state [ 465.541882][ T329] bridge_slave_1: left allmulticast mode [ 465.547572][ T329] bridge_slave_1: left promiscuous mode [ 465.553316][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.560971][ T329] bridge_slave_0: left allmulticast mode [ 465.566686][ T329] bridge_slave_0: left promiscuous mode [ 465.572529][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.662216][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.669426][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.676503][T16152] bridge_slave_1: entered allmulticast mode [ 465.682951][T16152] bridge_slave_1: entered promiscuous mode [ 465.723594][ T329] tipc: Disabling bearer [ 465.729001][ T329] tipc: Left network mode [ 465.735124][ T329] veth1_macvtap: left promiscuous mode [ 465.740761][ T329] veth0_vlan: left promiscuous mode [ 465.828155][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.835276][T16152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.842615][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.849694][T16152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.902120][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.910238][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.924124][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.931242][T13120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.943010][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.950115][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.077941][T16169] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 466.085329][T16169] rust_binder: Write failure EINVAL in pid:184 [ 466.104608][T16152] veth0_vlan: entered promiscuous mode [ 466.161468][T16152] veth1_macvtap: entered promiscuous mode [ 466.240948][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.241272][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.250916][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.257728][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.286214][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.293438][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.309580][T16175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.516612][T16187] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 466.531551][T16187] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 466.859705][T16204] rust_binder: Write failure EFAULT in pid:214 [ 466.862507][T16205] rust_binder: Write failure EFAULT in pid:214 [ 466.916161][T16208] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 466.929973][T16208] rust_binder: Write failure EINVAL in pid:218 [ 466.986959][T16210] rust_binder: Write failure EINVAL in pid:220 [ 467.094313][ T1288] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 467.289504][ T1288] usb 4-1: Using ep0 maxpacket: 32 [ 467.305509][ T1288] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.319923][ T1288] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.330484][ T1288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.340742][ T1288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.341660][T16222] fuse: Bad value for 'fd' [ 467.353029][ T1288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.365793][ T1288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.380354][ T1288] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.391539][ T1288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.402924][ T1288] usb 4-1: config 0 descriptor?? [ 467.572411][T16232] binder: Unknown parameter 'fscontext?}' [ 467.574300][T16234] overlayfs: failed to clone upperpath [ 467.618397][ T1288] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.640532][T16236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 467.648248][ T1288] usb 4-1: USB disconnect, device number 19 [ 467.686026][ T1288] usblp0: removed [ 467.781828][T16243] netlink: 'syz.2.5179': attribute type 58 has an invalid length. [ 467.800930][T16243] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 468.149467][ T1288] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 468.309785][ T1288] usb 4-1: Using ep0 maxpacket: 32 [ 468.322413][ T1288] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.332964][ T1288] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.347312][ T1288] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.360508][ T1288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.380529][ T1288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.399505][ T1288] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.419484][ T1288] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.433042][ T1288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.449487][ T1288] usb 4-1: config 0 descriptor?? [ 468.632628][T16245] overlayfs: statfs failed on './file0' [ 468.667181][ T1288] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.690794][ T1288] usb 4-1: USB disconnect, device number 20 [ 468.710981][ T1288] usblp0: removed [ 468.951667][T16276] rust_binder: 16275 RLIMIT_NICE not set [ 469.121239][T16283] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 469.373061][T16296] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 469.405151][T16296] overlayfs: missing 'lowerdir' [ 469.451834][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5193'. [ 469.720051][ T36] kauditd_printk_skb: 1178 callbacks suppressed [ 469.720071][ T36] audit: type=1400 audit(1758159714.010:10987): avc: denied { read } for pid=16328 comm="syz.2.5202" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.726459][ T36] audit: type=1400 audit(1758159714.010:10988): avc: denied { read open } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.781454][ T9] rust_binder: 0: removing orphan mapping 0:4248 [ 469.788321][ T36] audit: type=1400 audit(1758159714.010:10989): avc: denied { map } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.812661][ T36] audit: type=1400 audit(1758159714.010:10990): avc: denied { read } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.837010][ T36] audit: type=1400 audit(1758159714.010:10991): avc: denied { map } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.863080][ T36] audit: type=1400 audit(1758159714.010:10992): avc: denied { read } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.910999][ T36] audit: type=1400 audit(1758159714.040:10993): avc: denied { ioctl } for pid=16328 comm="syz.2.5202" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.951898][ T36] audit: type=1400 audit(1758159714.060:10994): avc: denied { read write } for pid=15251 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.989566][ T36] audit: type=1400 audit(1758159714.060:10995): avc: denied { read write open } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.035567][ T36] audit: type=1400 audit(1758159714.060:10996): avc: denied { ioctl } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.108517][T16339] rust_binder: Error in use_page_slow: ESRCH [ 470.108545][T16339] rust_binder: use_range failure ESRCH [ 470.115350][T16339] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 470.124430][T16339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 470.132552][T16339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:88 [ 470.199415][T16346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 470.208438][T16346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:91 [ 470.223415][T16346] rust_binder: Write failure EFAULT in pid:91 [ 470.293587][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5210'. [ 470.308711][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 470.481928][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 470.490996][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.502648][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.514956][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.526940][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.539984][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.549050][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.558959][ T9] usb 3-1: config 0 descriptor?? [ 470.567269][T16341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.649456][ T1288] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 470.805137][ T1288] usb 4-1: Using ep0 maxpacket: 16 [ 470.810410][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 470.816384][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 470.841486][ T9] usb 3-1: USB disconnect, device number 103 [ 470.851735][ T1288] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 470.869070][ T1288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.884685][ T1288] usb 4-1: config 0 descriptor?? [ 470.902741][ T1288] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 471.067358][T16414] rust_binder: validate_parent_fixup: new_min_offset=2097170, sg_entry.length=238 [ 471.067387][T16414] rust_binder: Error while translating object. [ 471.097029][T16414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 471.113501][ T1288] usb 4-1: Detected FT232B [ 471.115086][T16414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 471.127392][T16417] 9pnet_fd: Insufficient options for proto=fd [ 471.286022][T16427] overlayfs: failed to clone upperpath [ 471.322091][ T1288] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 471.340546][ T1288] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 471.349206][ T1288] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.358708][ T1288] usb 4-1: USB disconnect, device number 21 [ 471.366231][ T1288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.375948][ T1288] ftdi_sio 4-1:0.0: device disconnected [ 471.930296][T16444] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 471.944823][T16444] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 472.445339][T16467] rust_binder: Write failure EINVAL in pid:297 [ 472.550763][T16486] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 472.556990][T16486] rust_binder: Read failure Err(EFAULT) in pid:114 [ 472.664218][T16490] rust_binder: Write failure EFAULT in pid:118 [ 472.676218][T16490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5259'. [ 472.691469][T16490] tipc: Invalid UDP bearer configuration [ 472.691503][T16490] tipc: Enabling of bearer rejected, failed to enable media [ 473.045730][T16508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.140646][T16513] rust_binder: Read failure Err(EAGAIN) in pid:133 [ 473.379453][ T1288] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 473.541842][ T1288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.552058][ T1288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.562933][ T1288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.572071][ T1288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 473.580152][ T1288] usb 3-1: SerialNumber: syz [ 473.800739][ T1288] usb 3-1: 0:2 : does not exist [ 473.801335][T16524] overlayfs: missing 'lowerdir' [ 473.822332][ T1288] usb 3-1: USB disconnect, device number 104 [ 473.876398][T15026] udevd[15026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 474.015206][T16529] overlayfs: failed to resolve './file1': -2 [ 474.015894][T16527] 9pnet_fd: Insufficient options for proto=fd [ 474.065562][T16531] binder: Unknown parameter '' [ 474.103975][T16535] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 474.104007][T16535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 474.113490][T16535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:140 [ 474.247025][T16543] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 474.485262][T16552] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5281'. [ 474.496634][T16553] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5281'. [ 474.597140][T16558] rust_binder: Error while translating object. [ 474.597175][T16558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 474.604232][T16558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 474.752577][ T36] kauditd_printk_skb: 858 callbacks suppressed [ 474.752598][ T36] audit: type=1400 audit(1758159719.040:11855): avc: denied { create } for pid=16570 comm="syz.2.5287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.789480][ T36] audit: type=1400 audit(1758159719.080:11856): avc: denied { execmem } for pid=16570 comm="syz.2.5287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 474.809091][ T36] audit: type=1400 audit(1758159719.080:11857): avc: denied { read write } for pid=16570 comm="syz.2.5287" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 474.833164][ T36] audit: type=1400 audit(1758159719.080:11858): avc: denied { read write open } for pid=16570 comm="syz.2.5287" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 474.858123][ T36] audit: type=1400 audit(1758159719.100:11859): avc: denied { create } for pid=16574 comm="syz.9.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.866618][T16578] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16578 comm=syz.9.5289 [ 474.885724][ T36] audit: type=1400 audit(1758159719.130:11860): avc: denied { create } for pid=16577 comm="syz.9.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.944920][ T36] audit: type=1400 audit(1758159719.130:11861): avc: denied { write } for pid=16577 comm="syz.9.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.995985][ T36] audit: type=1400 audit(1758159719.130:11862): avc: denied { read } for pid=16577 comm="syz.9.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.074798][ T36] audit: type=1400 audit(1758159719.150:11863): avc: denied { create } for pid=16577 comm="syz.9.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.080236][T16593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 475.120986][T16587] overlayfs: failed to clone upperpath [ 475.240205][T16600] tap0: tun_chr_ioctl cmd 1074025676 [ 475.245572][T16600] tap0: owner set to 6 [ 475.280222][T16607] overlayfs: failed to clone upperpath [ 475.290685][T16607] overlayfs: failed to clone upperpath [ 475.379040][T16611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.381986][T16616] overlayfs: failed to resolve './file0': -2 [ 475.447039][T16621] FAT-fs (rnullb0): bogus number of reserved sectors [ 475.455952][T16621] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 475.480652][T16623] tipc: MTU too low for tipc bearer [ 475.563438][T16629] rust_binder: 325: no such ref 3 [ 475.568611][T16629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 475.576670][T16629] rust_binder: Error in use_page_slow: ESRCH [ 475.586175][T16629] rust_binder: use_range failure ESRCH [ 475.593675][T16629] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 475.599280][T16629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 475.619999][T16629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:325 [ 475.639358][T16632] random: crng reseeded on system resumption [ 475.697937][T16638] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5307'. [ 475.955194][T16650] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5312'. [ 476.000489][T16653] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 476.301756][T16670] overlayfs: failed to clone upperpath [ 476.432916][T16676] overlayfs: failed to resolve './file0': -2 [ 476.432937][T16677] overlayfs: failed to resolve './file0': -2 [ 476.445034][ T7993] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 476.564197][T16684] erofs: dax options not supported [ 476.599443][ T7993] usb 4-1: Using ep0 maxpacket: 32 [ 476.607190][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.629688][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.640228][ T7993] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 476.649312][ T7993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.664582][ T7993] usb 4-1: config 0 descriptor?? [ 476.682013][ T7993] hub 4-1:0.0: USB hub found [ 476.889669][ T7993] hub 4-1:0.0: 1 port detected [ 477.103381][ T7993] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 477.127892][ T7993] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 477.145985][ T7993] usbhid 4-1:0.0: can't add hid device: -71 [ 477.153422][ T7993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 477.189028][ T7993] usb 4-1: USB disconnect, device number 22 [ 477.219450][ T2604] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 477.280323][T16712] fuse: Bad value for 'fd' [ 477.381847][ T2604] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 477.391548][ T2604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.403454][ T2604] usb 3-1: config 0 descriptor?? [ 477.411235][ T2604] usb 3-1: selecting invalid altsetting 1 [ 477.425963][ T2604] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 477.534723][T15026] udevd[15026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 477.615029][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.623739][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.632919][T16702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 477.632964][T16702] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 477.642171][T16702] rust_binder: Read failure Err(EFAULT) in pid:333 [ 478.189428][ T1527] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 478.340880][T16757] netlink: 'syz.9.5353': attribute type 32 has an invalid length. [ 478.389454][ T1527] usb 4-1: Using ep0 maxpacket: 32 [ 478.405823][ T1527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 478.417905][ T1527] usb 4-1: no configurations [ 478.423239][ T1527] usb 4-1: can't read configurations, error -22 [ 478.580764][ T1527] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 478.769430][ T1527] usb 4-1: Using ep0 maxpacket: 32 [ 478.778611][ T1527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 478.787682][ T1527] usb 4-1: no configurations [ 478.793002][ T1527] usb 4-1: can't read configurations, error -22 [ 478.800534][ T1527] usb usb4-port1: attempt power cycle [ 479.139476][ T1527] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 479.160369][ T1527] usb 4-1: Using ep0 maxpacket: 32 [ 479.168705][ T1527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 479.176457][ T1527] usb 4-1: no configurations [ 479.181106][ T1527] usb 4-1: can't read configurations, error -22 [ 479.309566][ T1527] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 479.330180][ T1527] usb 4-1: Using ep0 maxpacket: 32 [ 479.338466][ T1527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 479.346313][ T1527] usb 4-1: no configurations [ 479.350978][ T1527] usb 4-1: can't read configurations, error -22 [ 479.357450][ T1527] usb usb4-port1: unable to enumerate USB device [ 479.849575][ T2604] usb 3-1: USB disconnect, device number 105 [ 479.869217][ T36] kauditd_printk_skb: 628 callbacks suppressed [ 479.869238][ T36] audit: type=1400 audit(1758159724.150:12475): avc: denied { read write } for pid=15251 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.922918][ T36] audit: type=1400 audit(1758159724.190:12476): avc: denied { read write open } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 479.957639][ T36] audit: type=1400 audit(1758159724.190:12477): avc: denied { ioctl } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.006054][ T36] audit: type=1400 audit(1758159724.240:12478): avc: denied { read write } for pid=16793 comm="syz.2.5366" name="binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.030855][ T36] audit: type=1400 audit(1758159724.240:12479): avc: denied { read write open } for pid=16793 comm="syz.2.5366" path="/dev/binderfs/binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.057319][ T36] audit: type=1400 audit(1758159724.240:12480): avc: denied { read } for pid=16793 comm="syz.2.5366" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 480.081492][ T36] audit: type=1400 audit(1758159724.240:12481): avc: denied { read open } for pid=16793 comm="syz.2.5366" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 480.106224][ T36] audit: type=1400 audit(1758159724.240:12482): avc: denied { ioctl } for pid=16793 comm="syz.2.5366" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 480.162392][ T36] audit: type=1400 audit(1758159724.450:12483): avc: denied { create } for pid=16798 comm="syz.9.5368" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 480.198741][ T36] audit: type=1400 audit(1758159724.450:12484): avc: denied { ioctl } for pid=16798 comm="syz.9.5368" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89072 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 480.254137][T16808] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.272342][T16808] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 480.292343][T16808] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.318175][T16808] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 480.512059][T16816] binder: Unknown parameter '' [ 480.560832][T16818] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 481.053694][T16833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.344107][T16853] overlayfs: failed to resolve './file1': -2 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 482.517390][T16905] bridge0: entered allmulticast mode Stopping network: [ 483.170665][T16933] overlayfs: failed to clone upperpath [ 483.171391][T16931] tipc: Can't bind to reserved service type 0 [ 483.188875][T16933] netlink: 'syz.9.5403': attribute type 4 has an invalid length. OK Stopping iptables: [ 483.297420][T16939] tipc: Enabling of bearer rejected, failed to enable media OK Stopping system message bus: [ 483.378962][T16947] overlayfs: failed to clone upperpath [ 483.655301][T16963] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 484.121623][ T7993] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 484.320387][T16982] x_tables: duplicate underflow at hook 1 [ 484.333309][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.355104][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.375170][ T7993] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.411020][ T7993] usb 4-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 484.454217][ T7993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.489308][ T7993] usb 4-1: config 0 descriptor?? done [ 484.906306][ T36] kauditd_printk_skb: 9134 callbacks suppressed [ 484.906327][ T36] audit: type=1400 audit(2000000003.650:21619): avc: denied { ioctl } for pid=16972 comm="syz.3.5413" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 484.911499][ T7993] wacom 0003:056A:0041.0025: unknown main item tag 0x0 [ 484.915424][ T36] audit: type=1400 audit(2000000003.650:21620): avc: denied { ioctl } for pid=16972 comm="syz.3.5413" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 484.969467][ T7993] wacom 0003:056A:0041.0025: unknown main item tag 0x0 [ 484.997039][ T7993] wacom 0003:056A:0041.0025: unknown main item tag 0x0 [ 485.005976][ T7993] wacom 0003:056A:0041.0025: unknown main item tag 0x0 [ 485.019441][ T7993] wacom 0003:056A:0041.0025: unknown main item tag 0x0 [ 485.036802][ T7993] wacom 0003:056A:0041.0025: Unknown device_type for 'HID 056a:0041'. Assuming pen. [ 485.046864][ T36] audit: type=1400 audit(2000000003.780:21621): avc: denied { read write } for pid=15251 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.083175][ T7993] wacom 0003:056A:0041.0025: hidraw0: USB HID v0.00 Device [HID 056a:0041] on usb-dummy_hcd.3-1/input0 [ 485.099154][ T36] audit: type=1400 audit(2000000003.790:21622): avc: denied { read write open } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.125529][ T7993] input: Wacom Intuos2 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0041.0025/input/input34 [ 485.202087][ T36] audit: type=1400 audit(2000000003.790:21623): avc: denied { ioctl } for pid=15251 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.216430][ T7993] usb 4-1: USB disconnect, device number 27 [ 485.318943][ T36] audit: type=1400 audit(2000000003.840:21624): avc: denied { ioctl } for pid=16972 comm="syz.3.5413" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 485.394841][ T36] audit: type=1400 audit(2000000003.840:21625): avc: denied { call } for pid=16972 comm="syz.3.5413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 485.401455][T17002] fido_id[17002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 485.449553][ T36] audit: type=1400 audit(2000000003.840:21626): avc: denied { ioctl } for pid=16972 comm="syz.3.5413" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 485.512374][ T36] audit: type=1400 audit(2000000003.840:21627): avc: denied { ioctl } for pid=16972 comm="syz.3.5413" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 485.597645][ T36] audit: type=1400 audit(2000000003.900:21628): avc: denied { mounton } for pid=16998 comm="syz.2.5420" path="/112/bus" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 485.619468][ T332] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 485.638443][T17022] tipc: Enabling of bearer rejected, failed to enable media [ 485.666120][ T1527] rust_binder: 16972: removing orphan mapping 0:1024 [ 485.783718][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.804411][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.821314][ T332] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.831517][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.849440][ T332] usb 3-1: SerialNumber: syz [ 485.856425][T17038] 9pnet_fd: Insufficient options for proto=fd [ 486.071362][ T332] usb 3-1: 0:2 : does not exist [ 486.085869][ T332] usb 3-1: unit 48 not found! [ 486.102510][ T332] usb 3-1: USB disconnect, device number 106 [ 486.280259][T17061] veth0_vlan: entered allmulticast mode [ 486.290303][T17060] veth0_vlan: left allmulticast mode [ 486.447818][T17057] pim6reg1: entered promiscuous mode [ 486.459546][T17057] pim6reg1: entered allmulticast mode [ 486.869488][ T7993] usb 4-1: new high-speed USB device number 28 using dummy_hcd Stopping klogd: [ 487.020321][ T7993] usb 4-1: device descriptor read/64, error -71 OK [ 487.087682][T17125] netlink: 'syz.2.5457': attribute type 4 has an invalid length. [ 487.119580][T13120] Bluetooth: hci0: Frame reassembly failed (-84) Stopping acpid: [ 487.138466][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5459'. [ 487.279481][ T7993] usb 4-1: device descriptor read/64, error -71 [ 487.292763][T17142] /dev/loop0: Can't lookup blockdev [ 487.519575][ T7993] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 487.659457][ T7993] usb 4-1: device descriptor read/64, error -71 [ 487.899444][ T7993] usb 4-1: device descriptor read/64, error -71 [ 488.009545][ T7993] usb usb4-port1: attempt power cycle OK [ 488.349453][ T7993] usb 4-1: new high-speed USB device number 30 using dummy_hcd Stopping syslogd: [ 488.396002][ T7993] usb 4-1: device descriptor read/8, error -71 stopped /sbin/syslogd (pid 92) OK [ 488.523514][T17204] overlayfs: failed to clone upperpath [ 488.554749][ T7993] usb 4-1: device descriptor read/8, error -71 umount: can't remount debugfs read-only [ 488.809461][ T7993] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 488.852762][ T7993] usb 4-1: device descriptor read/8, error -71 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.18 closed by remote host. Sent SIGTERM to all processes [ 488.999425][ T7993] usb 4-1: device descriptor read/8, error -71 [ 489.109937][ T7993] usb usb4-port1: unable to enumerate USB device [ 489.119827][ T404] bridge_slave_1: left allmulticast mode [ 489.125496][ T404] bridge_slave_1: left promiscuous mode [ 489.131262][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.138842][ T404] bridge_slave_0: left allmulticast mode [ 489.144640][ T404] bridge_slave_0: left promiscuous mode [ 489.150334][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.174557][ T404] bridge0 (unregistering): left allmulticast mode [ 489.189469][ T1018] Bluetooth: hci0: command 0x1003 tx timeout [ 489.189499][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.332000][ T404] veth1_macvtap: left promiscuous mode [ 489.337530][ T404] veth0_vlan: left promiscuous mode [ 489.541758][ T404] bridge_slave_1: left allmulticast mode [ 489.547428][ T404] bridge_slave_1: left promiscuous mode [ 489.553093][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.560738][ T404] bridge_slave_0: left allmulticast mode [ 489.566387][ T404] bridge_slave_0: left promiscuous mode [ 489.572105][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.579857][ T404] bridge_slave_1: left allmulticast mode [ 489.585506][ T404] bridge_slave_1: left promiscuous mode [ 489.591170][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.598701][ T404] bridge_slave_0: left allmulticast mode [ 489.604478][ T404] bridge_slave_0: left promiscuous mode [ 489.610119][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.803019][ T404] veth1_macvtap: left promiscuous mode [ 489.808805][ T404] veth0_vlan: left promiscuous mode [ 489.814244][ T404] veth1_macvtap: left promiscuous mode [ 489.819774][ T404] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 491.061213][T17211] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 491.067939][T17211] ACPI: PM: Preparing to enter system sleep state S5 [ 491.075229][T17211] kvm: exiting hardware virtualization [ 491.081158][T17211] reboot: Power down serialport: VM disconnected.